Privacy policy

1. Privacy at a glance

This privacy policy explains which personal data is processed when you visit this website and when you contact us, for what purpose this happens and which rights data subjects have. This website uses no analytics, marketing or tracking services and loads no third-party content. Data is only processed insofar as this is necessary for technical operation or for handling an enquiry.

2. Controller

E-mail: zentrale@auras-bielawski.de

3. Hosting

This website is hosted by an external service provider:

Provider: ALL-INKL.COM – Neue Medien Münnich, owner René Münnich
Address: Hauptstraße 68, 02742 Friedersdorf, Germany

When the website is accessed, the hosting provider processes data transmitted by the browser for technical reasons. This may include: IP address, time of access, requested URL, HTTP status, amount of data transferred, browser information (user agent) and technical server logs.

In our assessment the legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure, stable and efficient provision of the website.

A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. The servers are located in Germany.

4. Server log files

The server automatically records accesses in so-called log files. These contain the technical data listed in section 3. The purpose of the processing is technical operation, error analysis and the security of the systems (e.g. detection of attacks). The data is not merged with other data.

The hosting provider keeps the log files only as long as required for operation and security, usually no more than seven days. The legal basis is Art. 6 (1) (f) GDPR.

5. Contact form

When you use the contact form, the following details are processed: name, e-mail address, company (optional), topic, message, budget range (optional) and timeframe (optional).

The details are used exclusively to handle the enquiry and, where applicable, to initiate a contract. They are stored in a database on our own server (internal management system, access only for authorised persons with two-factor login) and additionally reported to us by e-mail. For enquiries about a partnership we create a prospect profile to accompany the further conversation. To protect against automated abuse, an invisible check field (honeypot) and a limit on enquiries per period are used; for this, a shortened, hashed form of the IP address is briefly held in memory and not stored permanently.

The legal basis is Art. 6 (1) (b) GDPR insofar as the enquiry is aimed at concluding a contract or takes place within a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering business enquiries).

6. Contact by e-mail

If you contact us directly by e-mail, the details transmitted (e-mail address, content of the message and, where applicable, name and other voluntarily provided data) are processed to handle the matter. The legal bases correspond to section 5.

Our e-mail mailboxes are also hosted by the hosting provider ALL-INKL.COM in Germany.

7. Cookies, local storage and audience measurement

This website sets no marketing or tracking cookies, loads no external analytics scripts and uses no advertising pixels. Technically necessary is storing your cookie choice in the browser's local storage (entry ab_cookie_consent, 12 months). If you close the notice bar at the top of the page, the browser remembers this in the entry ab_hinweis_zu. The legal basis in each case is Art. 6 (1) (f) GDPR and § 25 (2) no. 2 TDDDG.

Audience measurement (only with consent). If you agree to the “Statistics” category in the cookie dialog, your browser reports the page viewed and the website you came from to our own server on every page view. From this, only daily counters are formed: per page, per referring domain and per device class (smartphone, tablet, desktop). To avoid counting a day's visitors twice, a check value is calculated from the IP address and browser identifier together with a random value generated anew each day; this does not allow any conclusion about you and is deleted after two days at the latest. The IP address itself is not stored, no cookies are set, no profiles are created and no data is transmitted to third parties. If “Do Not Track” or “Global Privacy Control” is active in your browser, no measurement takes place. We keep the anonymous daily counters for up to 25 months. The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG).

On your first visit a dialog with cookie settings appears. It contains the categories Necessary, Statistics, Marketing and External content. No services are currently in use in the Marketing and External content categories. The selection can be changed at any time via the “Cookie settings” link in the footer or revoked with effect for the future.

8. External websites

This website links to the independent websites of our business units:

• tmb-invest.de (external website)
• mr-white.de (external website)
• agentur56.de (external website)
• auras-marketings.com (external website)

Clicking one of these links takes you away from this website. The privacy notices of the respective destination apply exclusively to any subsequent data processing. Content from these websites is not embedded on this website.

9. Fonts

All fonts are delivered locally from our server. No connection is established to Google Fonts or other third-party font services.

10. Embedded media

No content from video platforms, map services, social networks or other third parties is embedded. Should external content be added in the future, this privacy policy and, where applicable, a consent mechanism will be adapted accordingly.

11. Recipients of data

Personal data is only passed on to third parties insofar as this is necessary to operate the website or to handle an enquiry. Currently this concerns the hosting provider (section 3) and the e-mail provider (section 6). No other processors are used.

12. Transfers to third countries

Personal data is not transferred to countries outside the EU/EEA. Hosting and e-mail are operated in Germany.

13. Retention period

Personal data is only processed for as long as necessary for the respective purpose or as long as statutory retention obligations exist. Enquiries via the contact form or by e-mail are deleted as soon as the matter has been finally dealt with and no retention obligations stand in the way; our system automatically deletes completed enquiries no later than 24 months after the last processing step. Data of partners and prospects is kept for the duration of the business relationship and the statutory retention periods. The period stated in section 4 applies to server log files.

14. Rights of data subjects

Under the GDPR, data subjects have in particular the following rights:

• Access to the data processed (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR)
• Complaint to a data protection supervisory authority (Art. 77 GDPR)

To exercise these rights, a message to the contact address given above is sufficient. The complaint can be lodged with the supervisory authority responsible for your place of residence or for our registered office.

15. SSL/TLS encryption

This website uses SSL/TLS encryption (HTTPS). Data transmitted via the website therefore cannot easily be read by third parties.

16. Security

We use technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. The measures are continuously adapted in line with technical developments.

The German version of this privacy policy is authoritative.