Privacy policy for calaios.eu

The protection of your personal data is important to us. With this data protection declaration, we would like to explain to you in more detail what personal data we collect from you and for what purpose the data is used.

1 Responsible person and contact

Calaios GmbH
Eupener Street 165
50933 Cologne

If you have any questions or suggestions on the subject of data protection, please feel free to contact us by e-mail at the following address: datenschutz@calaios.eu.

2 Subject of data protection

The subject of data protection is personal data. According to Art. 4 No. 1 GDPR, personal data is any information relating to an identified or identifiable natural person; this includes, for example, the name or identification numbers.

3 Automated data acquisition

When you access our website, your end device automatically transmits data for technical reasons. The following data is stored separately from other data that you may transmit to us:

  • IP address
  • URL of the page accessed
  • Date and time

We store this data for the following purposes:

  • Load balancing, i.e. in order to distribute access to our website across several devices and to be able to offer you the fastest possible loading times;
  • Ensuring the security of our IT systems, e.g. to defend against specific attacks on our systems and to recognise attack patterns;
  • Ensuring the proper operation of our IT systems, e.g. if errors occur that we can only rectify by storing the IP address;
  • Enabling criminal prosecution, danger prevention or legal prosecution in the case of concrete indications of criminal offences;

Your IP address is only stored for a period of 14 days.

In this case, the processing is carried out on the basis of our overriding legitimate interests mentioned above (Art. 6 para. 1 p. 1 lit. f DSGVO).

4 Cookies

We store cookies in order to be able to offer certain functions of our website and to optimise the use of our website. Cookies are small files that are stored on your terminal device with the help of your internet browser.

Specifically, we use the following cookies (unless other cookies are specified elsewhere in this privacy policy):

  • Session cookies: These cookies are needed to store certain technical data during your visit to our website, e.g. to determine whether you have logged in.

The legal basis for the use of these cookies is Section 15 (1) of the German Telemedia Act (TMG) and Article 6 (1) sentence 1 lit. b of the German Data Protection Act (DSGVO), insofar as they are necessary for the use of our website and the functions you have accessed. Otherwise, we use cookies on the basis of your consent, Art. 6 para. 1 p. 1 lit. a DSGVO.

5 Newsletter

You have the possibility to register for our newsletter. With our newsletter, we would like to send you information about our offers and products that is as individual as possible. By registering for our newsletter, you consent to us processing your email address for sending the newsletter. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. a DSGVO. You can revoke your consent at any time by unsubscribing from our newsletter. To do this, you can use the unsubscribe link contained in every email.

To verify your email address, you will first receive a registration email, which you must confirm via a link (double opt-in). When you register for the newsletter, we store the IP address and the date and time of registration. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis results from our legal obligation to prove your consent (Art. 6 para. 1 p. 1 lit. c in conjunction with Art. 7 para. 1 DSGVO).

Wir verwenden für den Versand unseres Newsletters Sendinblue GmbH Köpenicker Str. 126, 10179 Berlin („Sendinblue“), die Ihre Daten in unserem Auftrag verarbeiten, Art. 28 Abs. 1 DSGVO.

6 Requests

If you send us enquiries, for example via our contact form, we will store and use the contact information and details you provide in order to process the enquiry.

We store enquiries about contracts or of potential legal relevance for the general limitation period, i.e. three years from the end of the year in which we received your enquiries. We store all other enquiries for a period of 24 months. After that, your enquiries will be deleted unless we are obliged to keep them for a longer period for legal reasons.

The storage is based on our legitimate interest in the proper documentation of our business operations and the protection of our legal positions (Art. 6 para. 1 p. 1 lit. f DSGVO). In the case of enquiries about contracts, the data is stored for the purpose of initiating and implementing the respective contractual relationship (Art. 6 para. 1 p. 1 lit. b DSGVO) and, if applicable, for the purpose of fulfilling legal obligations (Art. 6 para. 1 p. 1 lit. c DSGVO).

To integrate our contact form, we use a service provided by Bitrix24 Ltd, Poseidonos, 1 LEDRA BUSINESS CENTER Egkomi, 2406, Nicosia, Cyprus ("Bitrix24"). Bitrix24 processes your personal data on our behalf, Art. 28 DSGVO. In this context, the processing of data outside the EU, in particular in the USA, cannot be ruled out. In doing so, Bitrix24 observes the requirements of Chapter 5 of the DSGVO and uses the data processing methods approved by the EU Commission. Standard data protection clauses.

7 Incorporated third-party content

We have integrated content from third-party providers on our website. This content is loaded from the servers of the respective providers, so that your end device transmits certain technically necessary data to the third-party provider. In particular, it cannot be ruled out that these providers may take note of the IP address assigned to you. Insofar as personal data is processed, this is done on the basis of the data protection declarations of the respective third-party providers. The integration by us is based on our legitimate interests in being able to provide our users with the relevant content and functionalities and to operate our website economically, as well as the fact that your legitimate interests are not overridden, Art. 6 para. 1 sentence 1 lit. f DSGVO. In detail, we integrate the following third-party content:

  • Fonts Karbon family

8 Web hosters

We operate our website on servers of our hosting service provider Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen. Our emails are also stored there. Our hoster processes personal data on our behalf, Art. 28 DSGVO. The processing takes place exclusively within the European Union.

9 Disclosure of data

With the exception of the use of the aforementioned order processors, your personal data will only be passed on without your express prior consent in the following cases:

  • If it is necessary to clarify unlawful use of our website or for legal prosecution, personal data will be forwarded to the law enforcement authorities and, if necessary, to injured third parties. However, this only happens if there are concrete indications of unlawful or abusive behaviour. A transfer may also take place if this serves to enforce terms of use or other agreements. We are also legally obliged to provide information to certain public authorities upon request. These are law enforcement agencies, authorities that prosecute administrative offences subject to fines and the tax authorities.

This data is disclosed on the basis of our legitimate interest in combating abuse, prosecuting criminal offences and securing, asserting and enforcing claims and that your rights and interests in the protection of your personal data are not overridden, Art. 6 (1) sentence 1 lit. f DSGVO or on the basis of a legal obligation pursuant to Art. 6 (1) sentence 1 lit. c DSGVO.

  • We disclose personal data to auditors, accounting service providers, lawyers, banks, tax advisors and similar bodies insofar as this is necessary for the provision of our services (Art. 6 para. 1 p. 1 lit. b DSGVO) or the proper operation of our business, including the assertion of or defence against legal claims and legal prosecution (Art. 6 para. 1 p. 1 lit. f DSGVO) or we are obliged to do so (Art. 6 para. 1 p. 1 lit. c DSGVO).

10 Automated individual decisions or profiling measures

We do not use automated processing to make a decision about you or for profiling.

11 Deletion of your data

Unless otherwise stated, we will delete or anonymise your personal data as soon as it is no longer required for the purposes for which we collected or used it in accordance with the above paragraphs. As a rule, we store your personal data for the duration of the usage or contractual relationship plus the applicable limitation period, as well as for a period of 4 weeks during which we store backup copies after the end of the usage or contractual relationship. We also retain your data if we are obliged to do so for legal reasons or if the data is required for a longer period for criminal prosecution or for securing, asserting or enforcing legal claims.

If data must be retained for legal reasons, processing is restricted. The data is then no longer available for further use.

Storage beyond the contractual relationship is based on our aforementioned legitimate interests in accordance with Art. 6 (1) sentence 1 lit. f DSGVO, or on the basis of our statutory storage obligations in accordance with Art. 6 (1) sentence 1 lit. c DSGVO.

12 Your rights as a data subject

As a person affected by the processing of personal data, you have a right to information about the data processed, a right to rectification of your personal data, a right to erasure of your personal data, a right to restriction of the processing of your personal data and a right to data portability in accordance with the legal requirements.

In addition, you have the right to object to the processing of your personal data at any time for reasons relating to your particular situation if the data processing is based on Art. 6 (1) p. 1 lit. e or lit. f DSGVO (including profiling) or if data is processed for direct marketing purposes.

In the event of consent, you have the right to revoke your consent at any time, Art. 7 (3) p. 1 DSGVO. This does not affect the lawfulness of the processing carried out until your revocation.

You also have the right to lodge complaints with a supervisory authority.

Finally, we would like to point out that we process the personal data provided by you when exercising your rights pursuant to Articles 15 to 22 of the GDPR for the purpose of implementing these rights and to be able to provide evidence thereof. This processing is based on the legal basis of Art. 6 (1) sentence 1 lit. c DSGVO.

13 Changes to this privacy policy

The current version of this privacy policy is always available at https://calaios.eu/datenschutz/ available.

Status: 17 August 2021