The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
mip Consult GmbH
Jan Käding
Wilhelm-Kabus-Str. 9
10829 Berlin
datenschutz@h2-awake.de
Your Data Subject Rights
Under the contact details of our data protection officer provided above, you may exercise the following rights at any time:
- Right to information about your data stored by us and its processing (Art. 15 GDPR),
- Right to rectification of inaccurate personal data (Art. 16 GDPR),
- Right to erasure of your data stored by us (Art. 17 GDPR),
- Right to restriction of processing, insofar as we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
- Right to object to the processing of your data by us (Art. 21 GDPR) and
- Right to data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).
If you have given us consent, you may revoke it at any time with effect for the future.
You may lodge a complaint with a supervisory authority at any time, e.g. with the competent supervisory authority of the federal state of your residence or with the authority responsible for us as the controller.
A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Collection of General Information When Visiting Our Website
Nature and Purpose of Processing
When you access our website, i.e. when you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address, and similar.
It is processed in particular for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring smooth use of our website,
- Evaluation of system security and stability as well as
- for other administrative purposes.
We do not use your data to draw conclusions about your person. Information of this kind is evaluated by us statistically, if necessary, in order to optimize our internet presence and the technology behind it.
Legal Basis
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be limited. For this reason, an objection is excluded.
Recipients
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage Period
The data is deleted as soon as it is no longer required for the purpose of collection. This is generally the case for the data used to provide the website when the respective session has ended.
Cookies
Nature and Purpose of Processing
Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website.
This gives us certain data such as IP address, browser used, and operating system.
Cookies cannot be used to start programs or transfer viruses to a computer. Based on the information contained in cookies, we can make navigation easier for you and enable the correct display of our web pages.
In no case will the data collected by us be passed on to third parties or linked with personal data without your consent.
Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can disable the use of cookies at any time via the settings of your browser. Please use the help functions of your internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have disabled the use of cookies.
Storage Duration and Cookies Used
Insofar as you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites: Facebook, Google Ads.
You can delete individual cookies or the entire cookie stock via your browser settings. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance:
- Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
- Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=en
- Opera: http://www.opera.com/help
- Safari: https://support.apple.com/kb/PH17191?locale=en_US&viewlocale=en_US
Provision of Paid Services
Nature and Purpose of Processing
To provide paid services, we ask for additional data, such as payment details, in order to process your order.
Legal Basis
The processing of the data necessary for the conclusion of the contract is based on Art. 6 para. 1 lit. b GDPR.
Recipients
Recipients of the data may be processors, if applicable.
Storage Period
We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax requirements.
Provision Prescribed or Required
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered content and services.
Comment Function
Nature and Purpose of Processing
When users leave comments on our website, in addition to this information, the time of their creation and the user name previously selected by the website visitor are also stored. This serves our security, as we can be prosecuted for unlawful content on our website, even if it was created by users.
Legal Basis
The processing of the data entered as a comment is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR). By providing the comment function, we want to enable you to interact easily. Your information will be stored for the purpose of processing the request and for possible follow-up questions.
Recipients
Recipients of the data may be processors, if applicable.
Storage Period
The data is deleted as soon as it is no longer required for the purpose of collection. This is generally the case when communication with the user has been completed and the company can infer from the circumstances that the matter in question has been finally clarified.
Provision Prescribed or Required
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our comment function.
Newsletter
Nature and Purpose of Processing
Your data will be used exclusively to send you the subscribed newsletter by email. The provision of your name is used to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.
To receive the newsletter, it is sufficient to provide your email address. When subscribing to our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by email about circumstances that are relevant to the service or registration (e.g. changes to the newsletter offer or technical circumstances).
For effective registration, we need a valid email address. To verify that a registration is actually made by the owner of an email address, we use the “double opt-in” procedure. For this purpose, we log the order of the newsletter, the sending of a confirmation email, and the receipt of the requested response. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties.
Legal Basis
Based on your expressly granted consent (Art. 6 para. 1 lit. a GDPR), we will regularly send you our newsletter or comparable information by email to your specified email address.
You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. A corresponding link can be found in every newsletter. In addition, you can also unsubscribe directly on this website at any time or notify us of your revocation via the contact option provided at the end of this privacy notice.
Recipients
Recipients of the data may be processors, if applicable.
Storage Period
The data is processed in this context only as long as the corresponding consent is in place. After that, it will be deleted.
Provision Prescribed or Required
The provision of your personal data is voluntary, based solely on your consent. Without existing consent, we cannot unfortunately send you our newsletter.
Contact Form
Nature and Purpose of Processing
The data you enter will be stored for the purpose of individual communication with you. For this purpose, the provision of a valid email address and your name is required. This is used to assign the request and subsequently answer it. The provision of further data is optional.
Legal Basis
The processing of the data entered into the contact form is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR). By providing the contact form, we want to enable you to contact us easily. Your information will be stored for the purpose of processing the request and for possible follow-up questions.
If you contact us to request an offer, the processing of the data entered into the contact form is carried out to perform pre-contractual measures (Art. 6 para. 1 lit. b GDPR).
Recipients
Recipients of the data may be processors, if applicable.
Storage Period
Data will be deleted no later than 6 months after processing the request. If a contractual relationship arises, we are subject to the statutory retention periods under the German Commercial Code (HGB) and will delete your data after these periods have expired.
Provision Prescribed or Required
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, your email address, and the reason for your request.
Use of Google Analytics
Nature and Purpose of Processing
This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses so-called “cookies”, i.e. text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Due to the activation of IP anonymization on these websites, your IP address is previously truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website use and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
Legal Basis
The processing of the data is based on the consent of the user (Art. 6 para. 1 lit. a GDPR).
Recipients
The recipient of the data is Google as a processor. For this purpose, we have concluded the corresponding data processing agreement with Google.
Storage Period
The data is deleted as soon as it is no longer required for our recording purposes.
Third Country Transfer
Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Withdrawal of Consent
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available under the following link: Browser Add On to Disable Google Analytics.
Profiling
With the help of the tracking tool Google Analytics, the behavior of visitors to the website can be evaluated and interests analyzed. For this purpose, we create a pseudonymous user profile.
Use of Script Libraries (Google Web Fonts)
Nature and Purpose of Processing
To display our content correctly and graphically appealing across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) on this website to display fonts.
The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/
Legal Basis
The legal basis for the integration of Google Web Fonts and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Recipients
Calling script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – although currently also unclear whether and, if so, for what purposes – that the operator in this case Google collects data.
Storage Period
We do not collect any personal data through the integration of Google Web Fonts.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.
Third Country Transfer
Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Use of Adobe Typekit
Nature and Purpose of Processing
We use Adobe Typekit for the visual design of our website. Typekit is a service of Adobe Systems Software Ireland Companies (4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland; hereinafter “Adobe”), which grants us access to a font library. To integrate the fonts we use, your browser must establish a connection to a server of Adobe in the USA and download the font required for our website. Adobe thereby receives the information that our website was accessed from your IP address.
Further information on Adobe Typekit can be found in Adobe's privacy notices: https://www.adobe.com/privacy/policy.html
Legal Basis
The legal basis for the integration of Adobe Typekit and the associated data transfer to Adobe is your consent (Art. 6 para. 1 lit. a GDPR).
Third Country Transfer
Adobe is certified under the Privacy Shield Agreement and thereby provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).
Use of Google Maps
Nature and Purpose of Processing
On this website, we use the Google Maps service. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.
Further information on data processing by Google can be found in Google's privacy notices.
Legal Basis
The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Third Country Transfer
Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Embedded YouTube Videos
Nature and Purpose of Processing
On some of our websites, we embed YouTube videos. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is thereby informed which pages you visit. If you are logged in to your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.
When a YouTube video is started, the provider sets cookies that collect information about user behavior.
Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider's privacy policy. There you will also find further information on your rights and setting options to protect your privacy (https://policies.google.com/privacy).
Legal Basis
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Third Country Transfer
Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Google AdWords
Nature and Purpose of Processing
Our website uses Google Conversion Tracking. The operating company of Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you reached our website via a Google ad, Google AdWords sets a cookie on your computer. The conversion tracking cookie is set when a user clicks on a Google-placed ad.
If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking.
Legal Basis
The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Storage Period
These cookies lose their validity after 30 days and are not used for personal identification.
Third Country Transfer
Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Withdrawal of Consent
If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this – for example, via a browser setting that disables the automatic setting of cookies in general, or set your browser so that cookies from the domain “googleleadservices.com” are blocked.
Use of Google Remarketing
Nature and Purpose of Processing
This website uses the remarketing function of Google Inc. The operating company of Google Remarketing services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). The function is used to present interest-based advertisements to website visitors within the Google advertising network.
Legal Basis
The legal basis for the integration of Google Remarketing and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Withdrawal of Consent
If you do not wish to use Google's Remarketing function, you can generally disable it by making the appropriate settings at https://support.google.com/adwordspolicy/answer/143465. Alternatively, you can disable the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.
Use of Google Auth for Login
We offer you the option to log in to our website via the authentication service “Google Auth”. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
What data is collected?
In the course of login via Google Auth, the following personal data is transmitted from Google to us:
- Your full name
- Your email address
- Your profile picture (if available)
This data is processed exclusively for the purpose of login, authentication, and use of our website.
Legal Basis of Processing
The processing of your personal data in the context of login via Google Auth is based on:
- Art. 6 para. 1 lit. b GDPR (contract performance), as the provision of the login function is required for the use of our website, or
- Art. 6 para. 1 lit. a GDPR (consent), if the login is performed on a voluntary basis.
Storage and Deletion of Data
We store the transmitted data only as long as this is necessary for the provision of your user account or as required by law. If you delete your user account with us, the data transmitted by Google will also be completely removed from our systems, unless statutory retention periods apply.
Withdrawal Option
You can revoke your login via Google Auth at any time by:
- deleting your user account on our website or
- removing the link between your Google account and our service in the Google settings.
Please note that after revocation, login via Google Auth is no longer possible.
Use of Google Cloud
We also use Google Cloudservices for our authentication and login functionalities, provided by Google Ireland Limited. Technical data (e.g. authentication requests) are processed via Google's servers. Google acts as a processor in accordance with Art. 28 GDPR.
Your Rights
You have the right at any time to:
- request information about your personal data stored by us (Art. 15 GDPR),
- request the rectification of inaccurate or incomplete data (Art. 16 GDPR),
- request the erasure of your data (Art. 17 GDPR),
- request the restriction of the processing of your data (Art. 18 GDPR),
- object to the processing of your data (Art. 21 GDPR),
- revoke your consent to data processing (Art. 7 para. 3 GDPR) as well as
- receive a copy of your data in a structured, commonly used, and machine-readable format (Art. 20 GDPR).
To exercise your rights or if you have questions about the processing of your data, please contact us at: support@h2-awake.de
SSL Encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
Changes to Our Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. For your next visit, the new privacy policy will apply.
Questions to the Data Protection Officer
If you have any questions about data protection, please write us an email or contact the person responsible for data protection in our organization directly:
The privacy policy was created with the help of activeMind AG, the experts for external data protection officers(Version #2019-04-10).
