The person responsible within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Rainer Mikulecky, Benjamin Hasler

Your Rights as a Data Subject

You can exercise the following rights at any time using the contact details of our data protection officer:

• Information about your data stored by us and its processing (Art. 15 GDPR),
• Correction of inaccurate personal data (Art. 16 GDPR),
• Deletion of your data stored by us (Art. 17 GDPR),
• Restriction of data processing if we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),
• Objection to the processing of your data by us (Art. 21 GDPR) and
• Data portability, provided that you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with effect for the future.

You can contact a supervisory authority at any time with a complaint, for example the competent supervisory authority in the federal state in which you live or the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with addresses can be found at:https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

Collection of General Information When Visiting Our Website

Type and Purpose of Processing:

When you access our website, i.e. if you do not register or otherwise provide information, information of a general nature is automatically recorded. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and similar.

They are processed in particular for the following purposes:

• Ensuring a smooth connection to the website,
• Ensuring smooth use of our website,
• Evaluation of system security and stability as well as
• to optimize our website.

We do not use your data to draw conclusions about you personally. We may statistically evaluate information of this kind anonymously in order to optimize our website and the technology behind it.

Legal Basis and Legitimate Interest:

The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipient:

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage Period:

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website when the respective session has ended.

If the data is stored in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the users' IP addresses are anonymized so that it is no longer possible to assign the calling client.

Contact Form

Type and Purpose of Processing:

The data you enter will be saved for the purpose of communicating with you individually. For this purpose, you must provide a valid email address and your name. This is used to assign the request and then answer it. Providing further data is optional.

Legal Basis:

The data entered into the contact form is processed on the basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR).

By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your request and for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 Para. 1 lit. b GDPR).

Recipient:

Recipients of the data may be contract processors.

Storage Period:

Data will be deleted no later than 6 months after the request has been processed.

If a contractual relationship is established, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and will delete your data after these periods have expired.

Provision Required or Necessary:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, email address and the reason for the request.



SSL Encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) over HTTPS.



Information about Your Right of Objection According to Art. 21 GDPR

Case-specific right of objection

You have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) (f) GDPR (data processing on the basis of a balance of interests), for reasons arising from your particular situation; this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

Recipient of an Objection

Rainer Mikulecky, Benjamin Hasler
Gewürzmühlstr. 5, 80538 Munich
info@impec-it.com



Changes to Our Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with the current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.



Questions to the Data Protection Officer

If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly: info@impec-it.com