Privacy Policy

This is a translation. In case of doubt, the German version prevails.

General information

This privacy policy contains detailed information about what happens to your personal data when you visit our website archilago.com. Personal data is any data by which you can be personally identified. When processing your data, we strictly comply with the statutory provisions, in particular the General Data Protection Regulation ("GDPR"), and attach great importance to ensuring that your visit to our website is completely secure.

Controller

The person responsible under data protection law for the collection and processing of personal data on this website is:

Götz Leimkühler
Prinz-Georg-Straße 102
40479 Düsseldorf
Deutschland

E-mail: info@archilago.com
Tel.: +49 172 3486788

Contact

If you contact us, including by e-mail, the data you transmit, including your contact details, will be stored so that we can process your enquiry or be available for follow-up questions. This data will not be passed on without your consent.

Your data is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw consent you have already given at any time. An informal notification by e-mail is sufficient for withdrawal. The lawfulness of data processing operations carried out up to the point of withdrawal remains unaffected.

Transmitted data will remain with us until you request its deletion, withdraw your consent to its storage, or there is no longer any need to store the data. Mandatory statutory provisions, in particular retention periods, remain unaffected.

Use and disclosure of data

We will neither sell to third parties nor otherwise market the personal data that you provide to us, for example by e-mail (such as your name and address or your e-mail address). Your personal data will be processed only for correspondence with you and only for the purpose for which you provided the data to us. To process payments, we pass on your payment data to the credit institution commissioned with the payment.

Data collected automatically when you visit our website is used only for the purposes stated above. The data is not used for any other purpose. We assure you that we will otherwise not pass on your personal data to third parties unless we are legally obliged to do so or you have given us your prior consent.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, our website uses SSL or TLS encryption. You can recognise an encrypted connection by the address bar of the browser changing from "http://" to "https://" and by the lock icon in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Hosting and server log files

The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur. When the website is accessed, the server automatically stores the browser type and version, operating system, referrer URL, IP address, and the date and time of access in log files. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is the technically error-free presentation and security of the website. A data processing agreement is in place with the hosting provider. The website does not use cookies or embed third-party content.

Storage period

Personal data provided to us via our website is stored only for as long as necessary to fulfil the purpose for which it was entrusted to us. Where retention periods under commercial and tax law must be observed, certain data may be stored for up to 10 years.

Rights of data subjects

With regard to the personal data concerning you, as a data subject you have the following rights vis-à-vis the controller in accordance with the statutory provisions:

Right to withdraw consent

Many data processing operations are possible only with your express consent. If the processing of your data is based on your consent, you have the right to withdraw consent once given to the processing of data at any time with effect for the future, pursuant to Art. 7(3) GDPR. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Storage of data for billing and accounting purposes remains unaffected by a withdrawal.

Right of access

Under Art. 15 GDPR, you have the right to request confirmation from us as to whether we process personal data concerning you. If such processing takes place, you have the right to information about the personal data we process about you, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, and lodging a complaint with a supervisory authority, the origin of your data if we did not collect it from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the significance and envisaged consequences of such processing for you, as well as your right to be informed of the safeguards under Art. 46 GDPR when your data is transferred to third countries.

Right to rectification

Under Art. 16 GDPR, you have the right at any time to request the prompt correction of inaccurate personal data concerning you and/or the completion of your incomplete data.

Right to erasure

Under Art. 17 GDPR, you have the right to request the erasure of your personal data if one of the following grounds applies:

• Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• You withdraw the consent on which the processing was based under Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing;
• You object to the processing under Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing under Art. 21(2) GDPR;
• The personal data has been processed unlawfully;
• Erasure of the personal data is necessary to comply with a legal obligation under Union law or the law of the Member State to which we are subject;
• The personal data was collected in relation to information society services offered under Art. 8(1) GDPR;

However, this right does not apply to the extent that processing is necessary:

• to exercise the right to freedom of expression and information;
• to comply with a legal obligation requiring processing under Union law or the law of the Member State to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in us;
• for reasons of public interest in the area of public health under Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
• for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes under Art. 89(1) GDPR, insofar as the data subject's right is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
• to establish, exercise, or defend legal claims.

If we have made your personal data public and are obliged to erase it as described above, we will take reasonable steps, including technical measures, taking account of available technology and implementation costs, to inform controllers processing the personal data that you, as the data subject, have requested the erasure of all links to your personal data or copies or replications of that personal data.

Right to restriction of processing

Under Art. 18 GDPR, you have the right to request restriction of processing (blocking) of your personal data. You may contact us at any time at the address given in the imprint. The right to restriction of processing exists in the following cases:

If you contest the accuracy of the personal data we hold about you, we generally need time to verify this. For the duration of the verification, you have the right to request restriction of the processing of your personal data.

If your personal data was or is processed unlawfully, you may request restriction of data processing instead of erasure.

If we no longer need your personal data, but you need it to exercise, defend, or establish legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.

If you have lodged an objection under Art. 21(1) GDPR, your interests and ours must be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.

If you have restricted the processing of your personal data, that data may, apart from storage, be processed only with your consent or to establish, exercise, or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

Right to notification

If you have exercised your right to rectification, erasure, or restriction of processing against us, we are obliged to inform all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. Under Art. 19 GDPR, you have the right, upon request, to be informed about those recipients.

Right not to be subject to a decision based solely on automated processing, including profiling

Under Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision:

1. is necessary for entering into or performing a contract between you and us,
2. is authorised by Union or Member State law to which the controller is subject and that law lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
3. is based on your explicit consent.

However, decisions in cases (1) to (3) may not be based on special categories of personal data under Art. 9(1) GDPR unless Art. 9(2)(a) or (g) applies and suitable measures to safeguard your rights and freedoms and legitimate interests have been put in place.

In cases (1) and (3), we will take suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.

Right to data portability

If processing is based on your consent under Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, or on a contract under Art. 6(1)(b) GDPR, and is carried out by automated means, you have the right under Art. 20 GDPR to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller, or to request transmission to another controller where technically feasible.

Right to object

To the extent that we base the processing of your personal data on a balancing of interests under Art. 6(1)(f) GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on that provision. The relevant legal basis for processing can be found in this privacy policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims (objection under Art. 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right at any time to object to the processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection under Art. 21(2) GDPR).

In connection with the use of information society services, notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

Right to lodge a complaint with the competent supervisory authority under Art. 77 GDPR

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged infringement. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Kavalleriestraße 2-4
40213 Düsseldorf

Telephone: 0211/384240
E-mail: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de

Validity and amendment of this privacy policy

This privacy policy applies from 20 October 2023. We reserve the right to amend this privacy policy at any time in compliance with applicable data protection provisions. This may be necessary, for example, to comply with new statutory provisions or to take account of changes to our website or new services on our website. The version available at the time of your visit applies.

If this privacy policy is amended, we intend to announce changes to our privacy policy on this page so that you are fully informed about which personal data we collect, how we process it, and under what circumstances it may be disclosed.