The following notes give a simple overview of what happens to your personal information when you visit our website. Personal data is any data that personally identifies you.
1. Responsible authority
The responsible person for the data collection, data processing and data use in connection with the use of our internet offer is
Heumüller Holzwolle e. K.
Inhaber: Jürgen Heumüller
Burghaslacher Str. 2 OT Wasserberndorf
The complete contact details can be found in our imprint.
Our website is primarily dedicated to providing information. When visiting our website, only the data transmitted by your browser to our server is collected. This data is necessary for you to be able to view our website and navigate it. The legal basis for collecting the data is Art. 6, 1 f) of the EU-General-Data-Protection-Regulation (GDPR).
In detail, the following data is
collected when visiting our website:
• IP address
• Type of browser, its language and version
• Operating system and its interface
• Access Status / http(s) status code
• Date and time of the request, as well as the time zone and time zone difference to GMT
• Content of the request and website from which it comes
• Transmitted amount of data
The deletion of these data occurs when they are no longer required.
This website uses so-called Webfonts to represent the font. These are provided by Google (http://www.google.com/webfonts/). To do this, when you access this page, your browser loads the required Webfonts into your browser cache. This is necessary so that your browser can also display a visually improved display of the texts. If your browser does not support this feature, a default font will be used by your computer for viewing. For more information about Google Webfonts, see https://developers.google.com/fonts/faq?hl=de-DE&csw=1
For general information about privacy at Google, see http://www.google.com/intl/de-DE/policies/privacy/
4. Google Maps
This site uses the mapping service Google Maps via an API. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. To use the features of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored by Google on servers in the United States. The provider of this page has no influence on this data transfer.
The use of Google Maps is for the sake of an appealing presentation of our online offers and an easy findability of the places we mention on the website. This constitutes a legitimate interest according to the meaning of Art. 6, 1 lit. f) GDPR.
When you contact us by e-mail, your data will be saved for the purpose of processing the request.
6. Analysis tools and advertising
Matomo (formerly Piwik)
This website uses the open source web analytics service Matomo. Matomo uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized before saving.
Matomo cookies remain on your device until you delete them.
The storage of Matomo cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the anonymized analysis of user behaviour in order to optimize both, its website and its advertising. The information generated by the cookie about the use of this website will not be disclosed to third parties. You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all the functions of this website in full.
If you do not agree with the storage and use of your data, you can disable the storage and use here. In this case, an opt-out cookie is deposited in your browser that prevents Matomo from saving usage data. Deleting your cookies will result in deletion of the Matomo opt-out cookie as well. The opt-out must be reactivated when visiting our site again.
7. SSL or TLS encryption
This site uses, for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, an SSL or TLS encryption. An encrypted connection is indicated by the browser’s address bar changing from “http: //” to “https: //” and the lock icon in your browser bar.
If SSL or TLS encryption is enabled, the data that you send to us cannot be read by third parties during transit.
8. Your rights
You have the following rights to the data concerning you:
a) Right to information, Art. 15 GDPR
b) Right to rectification or deletion, Art. 16, 17 GDPR
c) Right to restriction of processing, Art. 18 GDPR
d) Right to revoke your consent, Art. 7 (3) GDPR
e) Right to object to the processing, Art. 21 GDPR
f) Data transferability, Art. 20 GDPR
g) Right of Complaint, Art. 77 GDPR.
a) Right to information
You have the right to request information about the data stored at us at any time.
b) Rectification and deletion
You have the right to delete your personal data at any time, unless there is a statutory retention obligation and the right to rectification of your data. If you wish to delete your data, please inform us informally (for example by e-mail, fax or letter)
c) Restriction of processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address given in the imprint. The right to restrict processing exists in the following cases:
- If you deny the accuracy of your personal information saved by us, we usually need time to verify this. For the duration of the audit you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data is unlawful, you may request the restriction of data processing instead of deletion.
- If we no longer need your personal information but you need it for the purpose of exercising, defending or enforcing legal claims, you have the right to demand that your personal data is restricted instead of being deleted.
If you have filed an objection under Art. 21 (1) GDPR, a a weighing of your and our interests must be made. As long as it is not clear whose interests prevail, you have the right to demand the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data, besides their their storage, may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for important public interests of the European Union or of a Member State.
d) Revocation of consent
You can revoke your once given consent at any time. As a result, we are not allowed to continue the data processing based on this consent for the future.
e) Right to contradict
If your personal data are processed on the based on legitimate interests in accordance with Art. 6, 1 sentence 1 lit. f GDPR, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or if the objection is directed against direct advertising. In the last case, you have a general right of objection, which is implemented by us without stating a particular situation.
Please contact us by e-mail firstname.lastname@example.org or send your request by mail or fax, the address can be found under the button “Imprint”.
f) Data portability
In accordance with Art. 20 GDPR, you have the right to receive the personal data that you have provided to a responsible person in a structured, common and machine-readable format. You also have the right to have this data transmitted to another person without hindrance by the person responsible for providing the personal data.
g) Right of appeal
If you believe that your personal information will not be processed in accordance with the requirements set forth or with the applicable data protection laws in the EEA, you may lodge a complaint with the data protection authority of the EEA country of domicile at any time the Data Protection Authority of the country in which we are located. The authority responsible for us is:
Der Bayrische Datenschutzbeauftragte
|Writing||Postfach 22 12 19, 80502 München|
|Visiting||Wagmüllerstraße 18, 80538 München|
Status: February 2019