data protection
For the model railway depot Frankfurt/M, the responsible handling of your personal data is a high priority. I naturally comply with the relevant data protection laws and would like to use the following data protection information to provide you with comprehensive information about how your data is handled. I have taken technical and organizational measures to ensure that the data protection regulations are observed by both me and our external service providers. The relevant laws are the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG).
In principle, the use of my website is possible without providing personal data. If you wish to use special company services via my website (e.g.: inquiry, pre-order, etc.), it may be necessary to process personal data.
I would like to point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.
I reserve the right to occasionally adapt this privacy policy so that it always complies with current legal requirements or to implement changes to my services in the privacy policy. The updated privacy policy always applies to your next visit.
privacy policy
I. Name and address of the responsible person
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:
Volker Weber
Wichernstrasse 10
60389 Frankfurt/Main
post@modellbahnbetriebswerk-frankfurt.de
II. Name and address of the data protection officer
Volker Weber
Data Protection Officer Modellbahnbetriebswerk-Frankfurt
Wichernstrasse 10
60389 Frankfurt/Main
post@modellbahnbetriebswerk-frankfurt.de
III. General information on data processing
1. Scope of processing of personal data
I only collect and use my customers' personal data to the extent that this is necessary in the context of my work as the operator of the Frankfurt model railway depot. My customers' personal data is usually only collected and used on the basis of legal authorization, contracts or with the customer's consent.
2. Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose for which they were stored no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.
IV. Processing processes
1. Order settlement with the customer
When you place an order or make a purchase from me, I collect and process personal data (name, address, date of birth, telephone number).
This is necessary in order to be able to issue you an invoice or e-invoice in accordance with legal requirements. This may also require your data to be forwarded to third parties.
I am legally obliged to maintain confidentiality and to protect data secrecy.
2. Data usage
You can revoke your consent to the use of your data at any time and with effect for the future. In this case, I will delete your data upon receipt of your declaration of revocation. If you have not purchased any products from the Modellbahnbetriebswerk-Frankfurt/M for more than two years, I will delete your personal data.
3. Data transfer or access by third parties
As part of my work as a craft business, I may also be dependent on external help such as IT service providers to provide and maintain my hardware and software or other service staff. As part of this integration, my external service providers may also become aware of personal data, so I also oblige my external service providers, if necessary, to maintain confidentiality and data secrecy and limit their access to personal data to a minimum. Supervisory authorities can also inspect craft businesses and have access to personal data.
4. Contact form (if available)
If you send me inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by me for the purpose of processing the inquiry and in the event of follow-up questions. I will not pass on this data without your consent.
The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send me an informal email. The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation.
The data you enter in the contact form will remain with me until you ask me to delete it, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.
server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- browser type and browser version
- operating system used
- Referrer URL
- hostname of the accessing computer
- time of the server request
- IP Address
This data will not be merged with other data sources.
The basis for data processing is Art. 6 Paragraph 1 Letter b of GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures. The privacy policy of the provider of this website can be found at: https://hosting.1und1.de/terms-gtc/terms-privacy/
V. Rights of the data subjects
1. Right to information
The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed; where this is the case, he or she has the right to access the personal data and to receive the information specified in Article 15 of the GDPR.
2. Right to rectification
The data subject has the right to obtain from the controller immediately the rectification of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Article 16 GDPR).
3. Right to erasure and restriction of processing
The data subject has the right to request that the controller delete personal data concerning him or her immediately if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued. In the case of statutory documentation or retention obligations, there is no right to deletion until the end of the statutory deadlines.
The data subject has the right to request the controller to restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if the data subject has objected to processing, for the duration of the controller's review.
4. Right to information
If you have asserted your right to rectification, erasure or restriction of processing vis-à-vis the controller, this controller is obliged to inform all recipients to whom the personal data concerning you were disclosed of said rectification, erasure or restriction of processing, unless doing so should prove impossible or involve disproportionate expenditure.
You have the right to be informed by the controller about these recipients.
5. Objection
The data subject has the right to object to the processing of personal data concerning him or her at any time for reasons related to his or her particular situation. The controller will then no longer process the personal data unless he or she can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims (Article 21 GDPR).
6. Right to data portability
You have the right to receive the personal data concerning you that you have made available to the controller in a structured, common and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was made available, provided that
(1) the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from a controller or another controller, where technically feasible. This must not affect the freedoms and rights of other persons.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. Right to revoke the declaration of consent under data protection law
You have the right to revoke your consent to data protection at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
8. Right to lodge a complaint with the supervisory authority
Every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data concerning him or her infringes the GDPR (Article 77 GDPR), without prejudice to any other administrative or judicial remedy. The data subject may assert this right with a supervisory authority in the Member State of his or her habitual residence, place of work or place of the alleged infringement. In Hesse, the competent supervisory authority is:
poststelle@datenschutz.hessen.de
The Hessian Commissioner for Data Protection and Freedom of InformationData Protection OfficerDepartment 2.3Postfach 316365021 Wiesbaden
Mr. KaiserPhone: 49 611 1408 161
