Privacy policy

Protecting your data is of the utmost importance to me. I store, process and use the data collected when you visit the websites for which I am responsible in strict compliance with the data protection provisions of the Federal Republic of Germany. This privacy policy informs you about the scope of data collection and how data is used when you use the website salut-berlin.de, which I operate.

This website may contain links to websites of other providers. This privacy policy applies exclusively to my website. I have no influence over, and do not monitor, whether other providers comply with applicable data protection provisions.

1. Controller under the GDPR

The controller responsible for processing data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Dejan Spasovski
Goltzstraße 7
10781 Berlin
Tel. 030 – 746 985 04
E-Mail: hallo@salut-berlin.de

I am your contact for all data protection matters relating to the websites listed above that I operate. Please address questions and statements, particularly the exercise of your right of withdrawal (see X), to me. As controller, I will deal with your request promptly and inform you accordingly.

1. Data collected when you visit my website

If you use my website solely for information, without registering or transmitting data, for example through the contact form, only the data transmitted by your browser to the server is stored. This is known as server log data.

When you access the website, the technical data necessary to display it is collected. Specifically, this includes the pages visited with the date and time, the referring page, your browser, operating system and IP address, and the amount of data sent in bytes.

This data is processed under Article 6(1)(f) GDPR on the basis of my legitimate interest in the stability and functionality of my website. The data is neither disclosed nor used for other purposes, except where there are specific indications of unlawful use.

• Cookies

Cookies may be used to enable full use of my website. These are text files stored on the device you use to access my website. Some cookies are deleted immediately when you close your browser; these are session cookies. Others remain on your device and allow your browser to be recognised on your next visit; these are persistent cookies. When cookies are set, they collect and process user information such as browser and location data and IP addresses. Persistent cookies are automatically deleted after a specified period, which varies by cookie. Where cookies process personal data, processing takes place under Article 6(1)(b) GDPR to perform a contract concluded with me, or under Article 6(1)(f) GDPR to safeguard my legitimate interest in ensuring that my website is as usable as possible.

You can configure your browser to notify you when cookies are set and decide individually whether to accept them, or reject cookies altogether.

Information for commonly used browsers is available here:

Safari: https://support.apple.com/kb/ph21411?locale=de_DE

Internet Explorer: https://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647

Opera: https://help.opera.com/Windows/10.20/de/cookies.html

Please note that rejecting cookies may restrict your use of my website.

1. Collection of personal data when you contact me (contact form/email)

When you contact me using the contact form or email, the personal data you provide is collected and stored exclusively to respond to your enquiry, enable further contact and meet the associated technical requirements. The legal basis is my legitimate interest in responding to your enquiry under Article 6(1)(f) GDPR. If your enquiry concerns entering into a contract, Article 6(1)(b) GDPR also applies. Your data is deleted once your enquiry has been fully dealt with, provided no statutory retention obligations prevent deletion.

1. Use of your data for direct marketing

After you provide your email address or, where available, subscribe to an electronic newsletter, I may inform you about my activities and news in my field. You will receive an email asking you to confirm your consent. By confirming, you consent to the use of your personal data under Article 6(1)(a) GDPR. Your IP address, date and time are stored so that any misuse of your email address can be investigated later. Data collected in this way is used exclusively for marketing communications from me and is not disclosed to third parties.

You may stop these communications at any time by sending me a message. I will then delete your email address immediately, unless you have expressly consented to further use or I reserve the right to use the data as permitted by law and described in this privacy policy.

1. Use of social media plugins

1.

Facebook

My website uses plugins from the Facebook social network, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (Facebook). These plugins are identified, usually by a Facebook logo or the words “Facebook Social Plugin”. An overview of the plugins and their appearance is available here: developers.facebook.com/docs/plugins

When you visit a page on my website containing such a plugin, your browser establishes a direct connection to Facebook’s servers. Facebook sends the plugin content directly to your browser, which embeds it in the page. This informs Facebook that your browser has accessed my page, even if you do not have a Facebook profile or are not logged in. This information, together with your IP address, is sent directly from your browser to a Facebook server in the USA and stored there. If you are logged in, Facebook can directly associate your visit with your Facebook profile. If you interact, for example by clicking “Like” or posting a comment, that information is also sent directly to a Facebook server and stored there. The information is also published on your Facebook profile and shown to your FacebookfriendsThese processing operations take place under Article 6(1)(f) GDPR on the basis of Facebook’s legitimate interest in displaying personalised advertising, informing other social network users about your activities on my pages and tailoring its service to users’ needs.

If you do not want Facebook to associate this data directly with your Facebook profile, you must log out before visiting my website. You can also prevent Facebook plugins from loading, and thus prevent the processing described above in future, by using browser add-ons such as the “NoScript” script blocker. https://noscript.net/.

For the purpose and scope of data collection, further processing and use by Facebook, and your rights and settings for protecting your privacy, please see Facebook’s privacy policy:  https://www.facebook.com/policy.phpFacebook Inc., based in the USA, is certified under the EU–US “Privacy Shield” framework, which ensures compliance with the level of data protection applicable in the EU.

2.

Google+ plugin

Plugins from the Google+ social network are operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). These plugins usually feature a “+1” button with a white or coloured background. An overview and examples of their appearance are available here:  developers.google.com/+/plugins

When you visit a page containing such a plugin, your browser establishes a direct connection to Google’s servers. Google sends the plugin content directly to your browser, which embeds it in the page. This informs Google that your browser has accessed the page, even if you do not have a Google+ profile or are not logged in. This information, together with your IP address, is sent directly from your browser to a Google server in the USA and stored there.

If you are logged in to Google+, Google can directly associate your visit with your Google+ profile. If you interact with a plugin, for example by clicking “+1”, that information is also sent directly to a Google server and stored there. The information is also published on Google+ and shown to your contacts.

The processing described above takes place under Article 6(1)(f) GDPR on the basis of Google’s legitimate interest in displaying personalised advertising, informing other social network users about your activities and tailoring its service to users’ needs.

If you do not want Google to associate the data collected through my website directly with your Google+ profile, you must log out of Google+ before visiting my pages. You can also prevent Google+ plugins from loading, and thus prevent the processing described above in future, by using browser add-ons such as the “NoScript” script blocker (https://noscript.net/).

Google LLC, based in the USA, is certified under the EU–US “Privacy Shield” framework, which ensures compliance with the level of data protection applicable in the EU.

For the purpose and scope of data collection, further processing and use by Google, and your rights and settings for protecting your privacy, please see Google’s privacy policy: https://www.google.com/intl/de/policies/privacy/

• Web analytics services

Google Analytics

My website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies, which are text files stored on your computer that enable analysis of your use of the website. The information generated by cookies about your use of this website is transmitted to a Google server in the USA and stored there. However, this website uses Google Analytics in a way that ensures IP addresses are shortened to anonymise them and prevent direct association with a specific person. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there. In these cases, processing takes place under Article 6(1)(f) GDPR on the basis of my legitimate interest in statistical analysis of user behaviour for optimisation and marketing purposes.

The IP address transmitted by your browser through Google Analytics is not combined with other Google data.

You can prevent cookies from being stored by changing your browser settings; however, you may then be unable to use all the features of my website in full. You can also prevent Google from collecting and processing the data generated by the cookie about your use of this website, including your IP address, by downloading and installing the following browser plugin: https://tools.google.com/dlpage/gaoptout?hl=deAlternatively, or when using a browser on a mobile device, click the following link to set an opt-out cookie that prevents future collection by Google Analytics. Please note that this cookie is active only in this browser and for this domain. If you delete your browser cookies, you must click the link again: Disable Google Analytics

Google LLC, based in the USA, is certified under the EU–US “Privacy Shield” framework, which ensures compliance with the level of data protection applicable in the EU.

Further information about how Google Analytics handles user data is available in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

• Tools

1.

Google Maps

My website uses Google Maps (API), provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps displays interactive maps to present geographical information visually. This service shows the location of my office and provides directions.

When you visit a page containing a Google Maps map, information about your use, such as your IP address, is sent to Google servers in the USA and stored there. This happens regardless of whether you have a Google account and are logged in. If you are logged in, your data is directly associated with your account. To prevent association with your Google profile, you must log out before activating the button. Google stores your data as usage profiles, including for users who are not logged in, and analyses it. Such analysis takes place in particular under Article 6(1)(f) GDPR on the basis of Google’s legitimate interests in personalised advertising, market research and/or tailoring its website to users’ needs. You have the right to object to the creation of these user profiles. To do so, please contact YouTube.

Google LLC, based in the USA, is certified under the EU–US “Privacy Shield” framework, which ensures compliance with the level of data protection applicable in the EU. If you do not agree to future transmission of your data to Google when using Google Maps, you can disable the service entirely by turning off JavaScript in your browser. Google Maps and the map display on this website will then be unavailable.

Google’s terms of service are available at https://www.google.de/intl/de/policies/terms/regional.htmland the additional terms for Google Maps are available at https://www.google.com/intl/de_US/help/terms_maps.htmlDetailed information about data protection when using Google Maps is available on Google’s website (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/

2.

Google Web Fonts

This website uses web fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) to display fonts consistently. When you access a page, your browser loads the required web fonts into its cache to display text and fonts correctly. For this purpose, your browser must connect to Google’s servers. Google thereby learns that my website has been accessed from your IP address. Google Web Fonts are used in the interest of displaying my pages optimally. This is a legitimate interest within the meaning of Article 6(1)(f) GDPR. If your browser does not support web fonts, a standard font from your computer is used.

Google LLC, based in the USA, is certified under the EU–US “Privacy Shield” framework, which ensures compliance with the level of data protection applicable in the EU. Further information about Google Web Fonts is available at https://developers.google.com/fonts/faqand in Google’s privacy policy: https://www.google.com/policies/privacy/

1. Your rights as a data subject

Applicable data protection law grants you extensive rights against me as controller in relation to the processing of your personal data.

1.

Right of access under Article 15 GDPR

In particular, you have the right to information about your personal data that I process; the purposes of processing; the categories of personal data processed; the recipients or categories of recipients to whom your data has been or will be disclosed; the planned storage period or the criteria used to determine it; the existence of rights to rectification, erasure, restriction of processing, objection to processing and complaint to a supervisory authority; the source of your data where I did not collect it from you; the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the significance and intended consequences of such processing for you; and the safeguards under Article 46 GDPR where your data is transferred to third countries.

2.

Right to rectification under Article 16 GDPR

You have the right to have inaccurate data concerning you corrected without delay and/or incomplete data stored by me completed.

3.

Right to erasure under Article 17 GDPR

You have the right to request erasure of your personal data where the conditions of Article 17(1) GDPR are met. This right does not apply, in particular, where processing is necessary for exercising freedom of expression and information, complying with a legal obligation, reasons of public interest, or establishing, exercising or defending legal claims.

4.

Right to restriction of processing under Article 18 GDPR

You have the right to request restriction of processing while the accuracy of data you dispute is being verified; where processing is unlawful and you oppose erasure and request restriction instead; where you require data to establish, exercise or defend legal claims after it is no longer needed for its original purpose; or where you have objected for reasons relating to your particular situation and it has not yet been determined whether my legitimate grounds override yours.

5.

Right to notification under Article 19 GDPR

If you have exercised your right to rectification, erasure or restriction of processing against me as controller, I must inform all recipients to whom your personal data has been disclosed of that rectification, erasure or restriction, unless this is impossible or involves disproportionate effort. You have the right to be informed of these recipients.

6.

Right to data portability under Article 20 GDPR

You have the right to receive the personal data you have provided to me in a readable format or to request that it be transmitted to another controller where technically feasible.

7.

Right to withdraw consent under Article 7(3) GDPR

You have the right to withdraw consent to data processing at any time with effect for the future. If you withdraw consent, I will delete the relevant data immediately unless I can rely on another lawful basis for processing without consent. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

8.

Right to lodge a complaint under Article 77 GDPR

If you believe that the processing of your personal data infringes the GDPR, you have the right, without prejudice to other administrative or judicial remedies, to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, workplace or the place of the alleged infringement.

9.

Right to object

You have the right to object to the processing of your personal data at any time with effect for the future. Processing will stop immediately unless there are compelling legitimate grounds on my part, such as pursuing or defending legal claims.

The same applies to processing for direct marketing: you have the right to withdraw at any time.

1. How long personal data is stored

The storage period for personal data is determined by the applicable statutory retention period, for example under commercial and tax law. Once that period expires, the data is routinely deleted unless it is still required to perform or enter into a contract and/or a legitimate interest in continued storage remains.

Further information and contact

Please send questions and suggestions about data protection on my pages or when using my website to: info(at)mediation-spandl.de

Berlin, Mai 2018

Dejan Spasovski