DATA PROTECTION STATEMENT
DATA PROTECTION STATEMENT
As the operator of this website, we take the protection of your data seriously (when we speak of website, this also includes its subpages). It is treated confidentially and in accordance with the legal regulations, in particular the DS- GVO (European Data Protection Regulation) and the Federal Data Protection Act (BDSG).
By accessing this website and using the functions contained therein, your personal data will be processed in various ways. “Personal data” means any information relating to an identified or identifiable natural person. The term “processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Art. 4 No. 2 DS-GVO).
Please note that data transmissions on the internet can generally be affected by security gaps. These may not be reliably closed against access by third parties. This applies in particular to communication by e-mail. Nevertheless, we continuously use security techniques that correspond to the respective customary and reasonable state of the art.
With the following data protection declaration, we would like to inform you which personal data we process and for what purpose, and which rights you and we are entitled to in relation to the processing.
1. Name and address of the data controller
The responsible person within the meaning of the DS-GVO Data Protection Regulation and other legal provisions relating to data protection responsibility in the Member States of the European Union is:
GUMAK Media e.K., Owner: Gulliame Amaho Ike.
Brühler Str. 41
50968 Cologne
+49 (0)173 – 2136 -667
Email Address
info@gumak.de
2. Duration of storage/time of deletion of your personal data
As a matter of principle, we process your data – in particular in the form of retention/storage – only as long as this is necessary within the framework of the legal basis stated for the respective processing purpose. Insofar as we do not specify any concrete information for the duration of the storage or the point in time of the deletion of your data, this will be determined on a case-by-case basis.
Contractual and statutory retention and documentation obligations must be taken into account here. Corresponding periods / time limits may be contractually agreed or may result from the German Commercial Code (HGB) and the German Fiscal Code (AO), among others, and in this case may already be 10 years or longer. They are justified by Art. 6 para. 1 sentence 1 lit. a), lit. b) and/or lit. c) in conjunction with Art. 17 para. 3 lit. b) and/or lit. c) DS-GVO, § 35 para. 3 BDSG (new).
Furthermore, storage and documentation obligations may be in our legitimate interest, unless your interests merit protection. For example, it may be in our legitimate interest to retain and store personal data, including data embodied in documents, photos and records, in order to preserve evidence until the expiry of limitation periods in the event of legal disputes. Limitation periods can be shorter or longer, even up to 30 years, depending on the subject matter of the claim. The relevant legal basis results from Art. 6 para. 1 sentence 1 lit. f) in conjunction with Art. 17 para. 3 lit. e) DS-GVO. We refrain from naming all facts relevant to the statute of limitations, as this would limit the transparency of this data protection declaration.
Finally, we may refrain from deleting personal data pursuant to Section 35 (1) of the German Federal Data Protection Act (BDSG) if, in the case of non- automated data processing, this is not possible or only possible with disproportionate effort due to the special nature of the storage and your interest in the deletion is to be considered minor. 2In this case, deletion shall be replaced by restriction of processing in accordance with Art. 18 DS-GVO. This does not apply if your personal data have been processed unlawfully.
3. Calling up our website
When you call up our website and while you remain on the website, the following general data is essentially collected and temporarily stored in the log files of our servers:
* types and versions of the browser you use;
* the operating system you use to access our website;
* Internet pages from which our website may be accessed (also called referrer URL);
* the IP address (Internet Protocol address) through which our site is accessed;
* the date and time of access;
* the name of your Internet provider through which you access the Internet (access provider);
* Internet pages that are accessed by you via our website.
This data is processed in our legitimate interest for technical purposes, in particular for the permanent and secure functioning of the connection, for customer service purposes for the optimization of the user-friendliness of our system and for evidence documentation purposes for the possible prosecution of criminal offences or civil law claims as well as for the defense against attacks on our system. From our point of view, there is no reason to assume that you have an overriding interest worthy of protection in not having the data processed by us for the purpose stated here, especially since you voluntarily decide to call up our website.
The legal basis for the aforementioned processing of the data results from Art. 6 para. 1 p. 1 lit. f) DS-GVO.
The anonymous data of the server log files are stored separately from any personal data provided by you.
When you access our website and its subpages, cookies and analysis tools used by us are also used. In this regard, we refer to the explanations below under point 7 (Cookies).
4. Mailto function
We provide mailto functions on our website for your use. This enables you to contact us via our website, for example to ask questions about existing contractual relationships between us or to make suggestions. If you make use of this option, we will store your e-mail address and, if applicable, your name so that communication can take place. Whether you provide further personal data (such as name, home address or long-distance communication numbers) when using this contact function is up to you. If you provide such data, we will process your name, home address and long-distance communication numbers.
If you provide the e-mails with attachments, these will also be stored with any personal data they contain.
The provision of your personal data in the above context is voluntary and at your instigation for the purpose of communicating with us. The processing by us is carried out in our legitimate interest in customer-oriented communication. From our point of view, there is no reason to assume that you have an overriding interest worthy of protection in not having the data processed by us for the purpose stated here, especially since you voluntarily decide to provide your data. The processing is therefore in accordance with Art. 6 para. 1 p. 1 lit. f) DS-GVO. Depending on the content of the communication, Art. 6 para. 1 p. 1 lit. b) DS-GVO may also come into consideration as a legal basis, for example if the communication serves contractual – also pre- and post-contractual – measures.
The time of deletion of your data depends on the content of the communication and cannot be determined in advance. However, if there are no storage and documentation obligations or overriding legitimate interests on our part, the data will be deleted after the communication has ended.
5. Telephone, fax and e-mail contact
On our website, we provide telephone and fax numbers and e-mail addresses through which you can also contact us. Insofar as personal data is communicated to us in a telephone call, fax or in an e-mail, this data will be processed.
(a) Telephone
When you call us, we may collect your name and other data, such as home address, e-mail address, telephone number, date and time and reason for the call, insofar as this is necessary for the effective processing of your request. The collection is done by asking you personally to provide this data.
When you call, we assume that it is in relation to the initiation of a contractual relationship, to measures relating to an existing contractual relationship or to post-contractual obligations arising therefrom. In this respect, Art. 6 para. 1 sentence 1 lit. b) serves as the legal basis for the processing.
Furthermore, the processing is carried out in our overriding interest for the purpose of documenting evidence for the possible assertion of legal claims and for possible criminal prosecution. There is no reason for us to assume here that interests worthy of protection of your person outweigh our legitimate interests in the processing of your data. In this respect, Art. 6 para. 1 sentence 1 lit. f) DS- GVO applies as the legal basis.
(b) Fax
Faxes received by us, including your personal data contained therein, are processed insofar as this is necessary for the effective processing of the request expressed in the fax.
If the fax is sent to us in connection with the initiation of a contractual relationship, measures relating to an existing contractual relationship or post- contractual obligations arising therefrom, Article 6 (1) sentence 1 lit. b) serves as the legal basis for the processing.
Furthermore, the processing is carried out in our overriding interest for the purpose of documenting evidence for the possible assertion of legal claims and for possible criminal prosecution. Here too, there is no reason for us to assume that interests worthy of protection of your person outweigh our legitimate interests in processing your data. In this respect, Art. 6 para. 1 sentence 1 lit. f) DS-GVO applies as the legal basis.
(c) E-mail
E-mails received by us are also processed, including your personal data contained therein or in attachments to the e-mail, insofar as this is necessary for the effective processing of the request expressed in the e-mail.
If the e-mail is sent to us in relation to the initiation of a contractual relationship, to measures relating to an existing contractual relationship or to post- contractual obligations arising therefrom, Art. 6 para. 1 sentence 1 lit. b) serves as the legal basis for the processing.
Furthermore, the processing is carried out in our overriding interest for the purpose of documenting evidence for the possible assertion of legal claims and for possible criminal prosecution. Here too, there is no reason for us to assume that interests worthy of protection of your person outweigh our legitimate interests in processing your data. In this respect, Art. 6 para. 1 sentence 1 lit. f) DS-GVO applies as the legal basis.
6. Booking courses
We offer the possibility to book courses with us on our website. We use the Appointments and Events WordPress Booking Plugin by Amelia.
On our website we offer the possibility to book courses with us. For this purpose, we collect and process your name, telephone number, home address and email address. We store this data in order to be able to properly process the courses and their payment. As a rule, we delete your data when the courses have ended and we no longer need your data for accounting purposes and for tax reasons. The processing is justified by Art. 6 Para. 1 lit. b. and c. DSG-VO justified
7. Cookies
When using our website, we use so-called cookies. These are text files that are stored in your computer system. Unless otherwise stated, cookies are generally used for technical purposes to simplify your use of our website. It may be that some cookies are technically necessary in order to be able to carry out functions of our website at all.
Our legitimate interest in the processing results from the aforementioned purposes. Here too, there is no reason for us to assume that interests worthy of protection of your person outweigh our legitimate interests in processing your data through cookies. The legal basis for the processing of data obtained through cookies is therefore Art. 6 para. 1 p. 1 lit. f) DS-GVO.
You have the option to prevent cookies from functioning. To do this, you must go to the settings of your browser and activate the corresponding block and/or delete functions. It may be that the use of our website is no longer possible when blocking certain cookies.
We draw your attention to the use of cookies by means of a banner as soon as you call up our website.
We use the borlabs cookie, which is a technically necessary cookie to store your cookie consent. The borlabs cookie does not process any personal data. The borlabs cookie stores the consent you gave when you entered the website. If you wish to revoke this consent, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent. Borlabs cookie consent technology is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c DSGVO.
8. Google Fonts
We integrate the fonts (“Google Fonts”) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you call up pages of our website that contain offers from Google Maps, personal data may be transferred to Google servers in the USA. You can prevent any transfer of data to Google by activating the following opt-out function:
Google Web Fonts are also used in the interest of a uniform and appealing presentation of our online offers. In our view, there is no reason to assume that you have an overriding interest worthy of protection in not having the data processed by us for the purpose stated here. We therefore invoke the legal basis of legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO.
Further information on Google Web Fonts can be found at
https://developers.google.com/fonts/faq
and in Google’s privacy policy:
https://www.google.com/policies/privacy/.
9 Links to third party providers
We use links to third-party providers on our website, for example to our fan page on Facebook, to our channel on YouTube, to our accounts on Twitter, Instagram, Apple Music and PayPal. The links are marked with the corresponding icons of the third-party providers. If you click on these icons, you will leave our website and enter the sphere of the third-party providers, who apply their own data protection provisions. Please check with the third-party providers whether and in what way your personal data is processed.
10. Sharing of data
Insofar as we pass on your data to third parties in unnamed cases, this will only be done
* we have received your express consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO,
* the disclosure is necessary in our legitimate interest for the exercise of legal claims in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO and there is no reason to assume that you have an overriding interest worthy of protection in the non- disclosure of your data,
* in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c DSGVO, as well as
* this is necessary for the processing of contractual relationships with you according to Art. 6 para. 1 p. 1 lit. b DSGVO.
11. Your rights as a data subject
You are granted the following rights by the GDPR in relation to the processing of your personal data (“Data”) carried out by us:
* You can request information from us in accordance with Art. 15 DS-GVO para. 1 and 2, in particular about.
* the purposes of processing;
* the categories of data being processed;
* the categories of recipients to whom your data have been or will be disclosed;
* if possible, the planned duration for which your data will be stored or, if this is not possible, the criteria for determining this duration;
* the existence of a right to obtain the rectification or erasure of data concerning you or to obtain the restriction of processing by the controller or a right to object to such processing;
* the existence of a right of appeal to a supervisory authority;
* if the data is not collected from you, any available information about the origin of the data;
* the existence or otherwise of automated decision-making, including profiling (“profiling” means any automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location) and, where available, meaningful information about the logic involved and the scope and intended effects of such processing for you;
* appropriate safeguards in accordance with Art. 46 DS-GVO when transferring your data to a third country or to an international organization.
* You may, in accordance with Article 15(3) of the GDPR, request that we make and provide you with only one copy of your data free of charge, provided that this does not adversely affect the rights or freedoms of other persons.
* Pursuant to Art. 16 of the GDPR, you may request that we correct any inaccurate data relating to you without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data – also by means of a supplementary declaration.
* In accordance with Art. 17 DS-GVO, you can demand that we delete your data, insofar as
* they are no longer necessary for the purposes of processing;
* you withdraw your consent given pursuant to Art. 6(1)(a) or Art. 9(2)(a) DS- GVO and no other legal basis for the processing of the data applies;
* you object to the processing pursuant to Art. 21(1) DS-GVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) DS-GVO.
* your data have been processed unlawfully;
and unless the processing of the data is necessary
* for the exercise of the right to freedom of expression and information;
* for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
* to assert, exercise or defend legal claims.
* You may request the restriction of the processing of your data in accordance with Art. 18 DS-GVO, insofar as
* the accuracy of the data is contested by you for a period of time which allows us to verify the accuracy of the data;
* the processing is unlawful and you refuse to erase the data and instead request the restriction of the use of the data;
* we no longer need the data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims; or
* you have objected to the processing pursuant to Art. 21(1) DS-GVO, as long as it has not yet been determined whether our legitimate grounds outweigh yours.
* You may, in accordance with Art. 20 DS-GVO, request us to provide you with the data relating to you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, if
* the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b); and
* the processing is carried out with the help of automated procedures.
* Pursuant to Art. 7 (3) DS-GVO, you have the right to revoke your consent to the processing of your data at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. The revocation can be made by email to: info@gumak.de
* In accordance with Art. 21 (1) DS-GVO, you have the right to object at any time to the processing of data relating to you which is carried out on the basis of Art. 6 (1) (f) DS-GVO for reasons arising from your particular situation; this also applies to profiling based on these provisions. We will no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
* Pursuant to Article 21(2) of the GDPR, if your data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your data for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
* You have the right to lodge a complaint with a supervisory authority, in particular of your place of residence, place of work or place of the alleged infringement, pursuant to Article 77 of the GDPR, without prejudice to any administrative or judicial remedy, if you consider that the processing of your data infringes the GDPR.
12. Data security
During your visit to our website, we use the so-called SSL procedure (Secure Socket Layer) for the purpose of encrypting communication, which corresponds to the currently customary security standard. We will use technological innovations in a reasonable manner for further protection on an ongoing basis.