Privacy Policy

This Privacy Policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as “Data”) within our online offering and the related websites, features and content, as well as external online presence, e.g. our social media profiles on. (collectively referred to as “online offer”). With regard to the terminology used, e.g. “Processing” or “Responsible”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

1. Name and contact details of the controller and the company data protection officer

This privacy policy applies to data processing by:

Responsible:

Grobmeier Solutions GmbH
GF: Christian Grobmeier
Viktor-von-Scheffel-Str. 7 86853 Langerringen
E-Mail: cg@grobmeier.de
Telefon: 08191 3318186

2. Collection and storage of personal data and the nature and purpose of their use

a) When visiting the website

When you visit our website https://grobmeier.de, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information will be collected without your intervention and stored until automated deletion:

IP address of the requesting computer,
date and time of access,
name and URL of the retrieved file,
website from which access is made (referrer URL),
The browser used and, if applicable, the operating system of your computer and the name of your access provider.

The data mentioned are processed by us for the following purposes:

ensuring a smooth connection of the website,
ensuring comfortable use of our website,
Evaluation of system security and stability as well
for further administrative purposes.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. In no case we use the collected data for the purpose of drawing conclusions about you. In addition, we use cookies and analysis services when visiting our website. Further details can be found under no. 4 and 5 of this privacy policy.

When you subscribe to the newsletter through this website, the double-opt-in process collects your email address and the consent and subscription record needed to document the request and its status. These data are used to confirm the subscription and deliver the newsletter.

Subscriptions will be managed in Listmonk on the Hetzner/Aegis infrastructure. Amazon Simple Email Service (Amazon SES) will process the email address and necessary technical delivery data to send confirmation and newsletter emails. The data will not be used for unrelated purposes.

Each newsletter will provide a way to unsubscribe at any time. Unsubscribing stops newsletter mail immediately. We then retain only the minimum Listmonk record needed to prevent future accidental contact; it contains the email address and a global blocklist status and is not used for marketing. A person may request deletion by contacting cg@grobmeier.de. On a deletion request, ordinary profile data and list memberships will be erased while only this lawful minimum no-contact record is retained. Other lawful retention requirements may still apply.

3. Disclosure of data

A transfer of your personal data to third parties for purposes other than those listed below does not take place. We only share your personal information with third parties if:

- You your according to Art. 6 para. 1 p. 1 lit. a GDPR have given express consent to this - disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data, - in the event that disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR is a legal obligation, as well - as permitted by law and according to Art. 6 para. 1 sentence 1 lit. b GDPR is required for the settlement of contractual relationships with you.

4. External service providers

Grobmeier Solutions uses the following external service providers who help to optimize the service. Insofar as these service providers process data on behalf of Grobmeier Solutions, agreements have been concluded with them which set the European data protection standards as binding and in particular prohibit the use of the data for other purposes. If we commission third parties to process data on the basis of a so-called “contract processing contract”, this is done on the basis of Art. 28 GDPR.

Grobmeier Solutions uses Amazon Simple Email Service (Amazon SES), a service provided by Amazon Web Services, to deliver newsletter and confirmation emails. Newsletter subscriptions are managed by Grobmeier Solutions in Listmonk; SES processes email addresses and technical delivery data only as required to deliver and operate those emails.

Delivery events such as bounces and complaints may be processed to maintain deliverability and honour suppression requirements. Open or link tracking is not assumed by this migration and must be disclosed separately if it is enabled.
AWS Privacy Notice.

(b) Hetzner Online GmbH - stateful hosting

Newsletter subscriptions will be stored and managed by Listmonk on the Aegis infrastructure hosted by Hetzner Online GmbH. Its production location, access controls, processor terms and retention settings must be verified before newsletter collection is enabled.
Hetzner Data Privacy.

(c) Amazon Web Services - static website delivery

The planned website delivery will store public website files in Amazon S3 and distribute them through Amazon CloudFront. AWS may process technical request data, such as the IP address, when delivering the website. Newsletter subscription records will not be stored in the public website origin. The exact AWS region, logging, access, retention and transfer safeguards must be verified and reflected in the final notice before deployment.
AWS Privacy Notice.

5. Affected rights

You have the right:

in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can provide information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification, deletion, limitation of processing or opposition, the existence of a The right to complain, the source of their data, if not collected from us, and the existence of automated decision-making including profiling and, where appropriate, meaningful information about their details;
in accordance with Art. 16 GDPR, immediately demand the correction of incorrect or complete personal data stored with us;
in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of Legal claims is required;
to demand the restriction of the processing of your personal data according to Art. 18 GDPR, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you assert this, Exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
in accordance with Art. 20 GDPR, to receive your personal data provided to us in a structured, standard and machine-readable format or to request transmission to another person responsible;
according to Art. 7 para. 3 GDPR, to revoke your once given consent to us at any time. As a result, we are not allowed to continue the data processing based on this consent for the future and
to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or our office.

6. Right to object

If your personal data are based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR are processed, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct mail. In the latter case, you have a general right of objection, which is implemented by us without specifying any particular situation. If you would like to exercise your right of revocation or objection, please send an e-mail to cg@grobmeier.de.

7. Data security

We use the popular SSL (Secure Socket Layer) method within the site visit, in conjunction with the highest level of encryption supported by your browser. In general, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we’ll use 128-bit v3 technology instead. Whether a single page of our website is encrypted is shown by the closed representation of the key or lock icon in the lower status bar of your browser.

We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

8. Updating and changing this privacy policy

This privacy policy is currently valid and is valid as of May 2018.

As a result of the further development of our website and offers thereof or due to changed legal or official requirements, it may be necessary to change this privacy policy. The current privacy policy can be viewed and printed by you at any time on the website at https://grobmeier.de.