All contact data a user sends to us by the contact request web form of our website or by e-mail will be
- considered and treated as not legally binding
- considered and treated as not/none public
- considered and treated as not genuine and by that it will not be used to identify natural persons as the authentic source of the data
- considered and treated as a message subjected to the privacy of correspondence
- processed electronically based on internet technology solely to offer a simple, effortless, asynchronous and informal method to contact us
- electronically transmitted and stored encrypted and will not be archived electronically
- used solely to unostentatiously serve the contact request
- removed electronically irreversibly immediate after notice or 28 days after electronical receipt at the latest
We urge users to submit only data and content via e-mail which can not harm the sender or his business in the case of interception. Data transmission by the internet mail protocol and the handling of data transmitted to our e-mail and web-space provider (processor in GDPR) is principally not safe against interception or abuse. It is much safer to transmit messages via our web contact request form. With the latter method the data is transmitted encrypted (via https) and stored encrypted on our server. We decrypt and read this messages on a local computer in our company, not connected to the internet. Directly after reading, messages and the contained personal data will be deleted irreversibly and the automatic processing of the data will end immediatelly.
Responsible/controller in the sense of DSGVO is:
Rainer Beyer, Eichberg 7, 24326 Nehmten, Germany, e-mail: verantwortlicher@recheneisen.de, phone: ++49151 / 2151 32 32
We use the personal data of a contact request solely for a single short-term contact and its preparation and solely in the context and scope of our software development services. We don't serve requests, which obviously don't refer to our software development services.
The lawfulness of processing the personal data which is transmitted to us from a user or data subject by the contact request form of our website or by e-mail, is regulated by article 6 number 1 point a) and b) DSGVO. The lawfulness of processing the personal data which is transmitted to us or to the controller via e-mail or via letter by using the contact data or address data presented on our website to conform to or fulfill legal duties (i.e. imprint-duty to name a person responsible for content (TMG), DSGVO-duty to name a GDPR-controller) which do not represent a contact request, is regulated by article 6 number 1 point c) DSGVO. In the latter case we question the responsibility of DSGVO and claim that these supposed duties infringe our constitutional rights (german Grundgesetz).
According to DSGVO each data subject has the right to request from the controller access to and rectification or erasure of personal data or
restriction of processing concerning the data subject or to object to processing as well as the right to data portability. If and whenever this rights of the data subject ristricts or infringes constituntional rights or other personal rights of us or - if not the same - the controller, we precautionary deny the supremacy of the rights of the data subject. We deny this especially in the case when a user / data subject never sent us any personal data or did this improperly with respect to our type of business. We explicitly emphasize that we do not offer any service to store and deliver personal or other data for users of our website or other data subjects. Additionally we refer to article 11 number 2 DSGVO.
According to DSGVO each data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
According to DSGVO each data subject has the right to lodge a complaint with a supervisory authority.
The provision of personal data via our contact request web form or via email is not required since any user may contact us by phone or by sending a letter. We do not access any other sources for personal data from the data subject within the scope of DSGVO. We simply can't or will not reply to a contact request sent via internet technology if the personal data has no proper information to decide whom to contact how and why. No data subject will enter into a contract with us solely by using our website or by sending us a contact request.
We don't and will not use/employ any automated decision-making.
With exception of a probing safe hashed IP-address of the caller, an anonymous data processing id and the date of transmission we will neither automatically extract other data - esp. no personal data - from a contact request nor will we compare data with other contact requests nor will we store data extracts or data copies separately. We will delete any electronically stored personal data sent to us in a internet-based contact request immediatelly after notice, 28 days after receipt at the latest. After this deletion all automated data processing of the personal data transmitted by the contact request will end immediatelly on our side. Since the e-mail protocoll is not safe against interception we can't guaranty that copies of emails will not be further processed electronically by others who intercept the electronical email data transport.
We are not able to identify a natural or legal person as author of a message based on the personal data contained in the message. Additionally we have neither any competence nor knowledge nor resources to identify a natural or legal person independend of the type of authentication used. By that we can not give any access to messages or personal data sent to us to any person who claims to be the author of a message without a substantial risk of violating the privacy of correspondence. To nevertheless conform to the DSGVO we will delete all data which might be related to a data subject, as soon as a claimed data subject requests access to or rectification or erasure of personal data or restriction of processing concerning the data subject. After that deletion all belonging data processing immediatelly ends and we legally and correctly can and will refer to article 11 number 2 DSGVO.
From the data transmitted to us which is not explicitly entered by the user but is provided by the underlying internet transmission protocol or by the behavior of the used web-browser we process the following in the following manner:
We use a probing safe hash value from the IP-address of the caller to i) distinguish different users accessing our web contact request form simultaniously ii) detect users - without personally identifying them - who send us contact requests in an amount or with a frequency that impacts the usability of our website for other visitors or us iii) temporally distinguish different users - without personally identifying them - to get statistical information about the usage of our website iv) detect the beginning of a denial of service attack (DoS) or other types of destructive calls to our website. We store this hash value in a volatile memory. This data, if not part of a current DoS attack or abuse of our website, will be deleted/overwritten on a daily base.
From time to time we may gather anonymized statistical information about the number of different users accessing our website within a specific timespan (hour and day of the week) and about which web-browser and which type of device (mobile, with touchscreen, with mouse, screen-size, sensors) they use. We evaluate statistical data inhouse and never transmit statistical data or the results of evaluation to others. We use statistical evaluations solely to improve the usability of our website.
If we detect a denial of service attack or another massive abuse of our website related to a special (hashed) IP-address we store the (not hashed) IP-address and the domain-name belonging to it to block further access to our website and to eventually inform the webmaster of the domain to take measurements.
The e-mail and web-space provider (GDPR-processor) of our website stores and evaluates - independent from us and without the option of objection from our side - the following data of the caller of our website for maintenance and statistical evaluation purposes: the visited website/URL, the timestamp of access, the number of bytes sent, the reference from which page/URL our website is called, the type of web browser, the operating system and the IP-address. This data is stored in log-files and error-files on the server. The stored IP-addresses are modified after 24 hours by deletion of the last octet of the IP-addresses in the named files. The named files are deleted after 7 days at the latest.
We neither use cookies (small files on the callers side to track an user and his behavior) nor other explicit storage techniques on the callers side to store and access user data permanently beyond the lifetime of a web-browser session. If an user observes that any of the latter techniques is nevertheless active we would appreciate to be informed about this unintended behaviour.
definitions
