Privacy Policy

The following Privacy Policy is designed to inform you about our handling of the collection, use and disclosure of personal information.

Responsible party

Katharina Bildhauer
Chodowieckistr. 23
10405 Berlin
kb@kathibildhauer.com

Usage data

In order to improve the quality and functionality of our web pages and in the event of prosecution, we store data on individual access to our pages for statistical purposes. This data record consists of

• the page from which the file was requested

• the name of the file,

• the date and time of the request,

• the amount of data transferred,

• the access status (file transferred, file not found),

• description of the type of web browser used,

• the IP address of the requesting computer

The legal basis for this data processing is Art. 6 para. 1 lit. f GDPR (legitimate interests of the responsible party).

The above reasons also constitute the legitimate interest for data processing according to Art. 6 (1) lit. f GDPR.

Cookies

We use cookies for better user guidance. The use of cookies simplifies the use of websites for the user. Certain pages cannot be called up or cannot be called up without errors without their use. These reasons also constitute the legitimate interest for this data processing according to Art. 6 (1) lit. f GDPR (the use of cookies for analysis purposes is dealt with in another point). Common browsers offer the setting option to not allow cookies. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies or activate the automatic deletion of cookies when closing the browser. It is not guaranteed that you will be able to access all functions of this website without restrictions if you make the appropriate settings.

Your rights as a user

a) Right to confirmation

Every data subject has the right to request information as to whether personal data concerning him or her are being processed.

b) Right to information (Art. 15 GDPR)

Every data subject has the right to receive free information about the personal data stored about him or her and a copy of this information.

c) Right to rectification (Art. 16 GDPR).

The data subject shall have the right to obtain from the controller the rectification without undue delay of inaccurate personal data concerning him or her.

d) Right to erasure (right to be forgotten) (Art. 17 GDPR).

Any data subject shall have the right to obtain the erasure without delay of personal data concerning him or her, where one of the grounds referred to in the law applies and insofar as the processing is not necessary.

e) Right to restriction of processing (Art. 18 GDPR).

Every data subject has the right to request the restriction of processing, provided that one of the grounds mentioned by law applies.

f) Right to data portability (Art. 20 GDPR).

Every data subject has the right to receive the personal data concerning him or her that has been provided by him or her to a controller in a structured, commonly used and machine-readable format and to transmit this data to another controller without hindrance, provided that the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, when exercising his or her right to data portability pursuant to Article 20 (1) of the GDPR, the data subject has the right to obtain that the personal data be transferred directly from one controller to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

g) Right to withdraw consent under data protection law (Art. 13 GDPR).

Every data subject has the right to revoke consent to the processing of personal data at any time if the processing is based on Art. 6 (1) (a) or Art. 9 (2) (a), without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

h) Right to object (Art. 21 GDPR).

Every data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out on the basis of Article 6 (1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions. If personal data are processed for the purposes of direct marketing, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing; this also applies to profiling insofar as it is related to such direct marketing.

i) Automated decisions in individual cases including profiling (Art. 22 GDPR).

Every data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, unless the decision.

(1) is not necessary for the conclusion or performance of a contract between the data subject and the controller; or

(2) is permitted by Union or Member State law to which the controller is subject, and that law contains suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject; or

(3) is carried out with the explicit consent of the data subject.

In the cases mentioned in (1) and (3), reasonable steps are taken to safeguard the data subject's rights and freedoms and legitimate interests, which include at least the right to obtain the intervention of a data subject on the part of the controller, to express his or her point of view and contest the decision.

Duration for which the personal data are stored

The criterion for the duration of the storage of personal data is the respective legally prescribed retention period. After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for the performance of the contract or the initiation of the contract.

Right of appeal to the competent supervisory authority

In the event of violations of data protection law, the data subject has a right of appeal to the competent supervisory authority. This is the state data protection commissioner(s) of the federal state in which my company is based. You can find a list of data protection officers here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.