angaben gemäß § 5 TMG
The legal basis for data processing is Art. 6 (1) a) and Art. 7 EU-DSGVO for consents, Art. 6 (1) b) EU-DSGVO for the fulfillment of services and performance of contractual obligations, Art. 6 (1) c) EU-DSGVO for the fulfillment of legal obligations and Art. 6 (1) f) EU-DSGVO for the protection of legitimate interests.
I. Name and contact details of the responsible person
The responsible party within the meaning of Art. 4 EU-DSGVO for the processing of personal data is:
Forge21 UG (limited liability)
Register court: Berlin
HRB: applied for
Ust-IdNR: applied for
Data protection officer:
Forge21 UG (limited liability)
II. Which data is collected?
Server log files
We collect data, so-called server log files, about every access to the server on which the plan2data website is located. These access data include e.g. name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
The legal basis for the data processing is Art. 6 para. 1 lit. f) EU-DSGVO.
We provide a contact form to give you the opportunity to contact us electronically. The data entered in the input mask is transmitted to us and stored. For this purpose, it is necessary to enter the e-mail address. Any further information is voluntary.
The legal basis for data processing is Art. 6 para. 1 lit. a), Art. 6 para. 1 lit. b) and Art. 6 para. 1 lit. f) EU-DSGVO.
If you contact us using the e-mail address provided on our website, we will process the personal data you provide - e-mail address as well as contact information beyond that and your name - for the purpose of responding to the inquiry.
The legal basis for the data processing is Art. 6 para. 1 lit. b) and Art. 6 para. 1 lit. f) EU-DSGVO.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general, for example in the case of cookies from third-party providers. If you do not accept cookies, the functionality of our website may be limited. The legal basis for the data processing is Art. 6 para. 1 lit. f) EU-DSGVO.
III. for what purposes is the data used?
Personal data is only collected, stored and processed to the extent necessary for the provision of the service, the execution of the contract or to respond to the inquiry. We process your personal data only in strict compliance with data protection regulations. In particular, corresponding data will only be processed in the presence of a legal permission.
Server log files
We process the aforementioned data in order to establish a connection to our website. The processing is necessary to ensure the security and stability of the system. We use the log data only for statistical analysis, for the purpose of business operations, security of the service and optimization of the offer.
We reserve the right to check the log data retrospectively if, based on concrete indications, there is a suspicion of illegal use of the service provided.
The contact form allows you to contact us in a simple way. The collection of your e-mail address is essential in order to be able to answer your request. If additional data is processed, such as name, address or similar, the purpose of the processing is to individualize the respective user and thus to be able to respond to his request in the best possible way and to prevent any misuse of the contact form.
The processing of your e-mail address is essential in order to be able to respond to your request. If additional data is processed, such as name, address or similar, the purpose of the processing is to individualize the respective user and to be able to respond to his request in the best possible way.
IV. Is data passed on to third parties and if so, which ones?
In principle, the data you provide will not be made available to third parties. In individual cases, however, it may be necessary to pass on your personal data to companies entrusted by us with the provision of individual services in order to execute the contract.
The third parties, in turn, are obliged to comply with the statutory provisions when handling and processing this data.
A transfer to authorities and state institutions entitled to receive information will only take place within the framework of the legal obligations to provide information and in the event of a court decision obligating us to do so. In these cases, we may provide the information, for example, for the assertion, exercise and defense of legal claims, enforcement of existing contracts, in the context of allegations of fraud, security measures or generally legally applicable regulations.
Personal data will not be disclosed outside the scope described here without express consent. Under no circumstances will we sell or rent personal data to third parties.
V. How long will the data be stored?
Your data will be stored for as long as it is required to fulfill the above-mentioned purposes. As soon as this is no longer the case, e.g. after complete execution of the contract, they will be deleted or blocked if required by commercial or tax retention obligations. From the point in time when legal storage obligations no longer conflict with this, the data will be deleted, unless you have expressly consented to further use.
Server log files are stored on the server for 7 days, anonymized for another 7 days and finally deleted permanently after 14 days.
VI. Your rights as a data subject
As a person affected by the processing of personal data, you are entitled to the rights listed below. These rights result from the requirements of the Data Protection Regulation and are reproduced here in a partially simplified form.
1. right of information
Pursuant to Art. 15 EU-DSGVO, you have the right to request confirmation from us as to whether personal data relating to you is being processed. If this is the case, you have a right to information about this personal data and the information specified in Art. 15 (1) Hs. 2 EU-DSGVO. This includes in particular the purpose of the processing, the categories of data processed, the recipients to whom data have been or will be disclosed, as far as possible the planned duration of storage or the criteria for the duration of storage.
2. right of rectification
Pursuant to Art. 16 EU-DSGVO, you have the right to demand that we correct any inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.
3. right to erasure
Pursuant to Art. 17 EU-DSGVO, you have the right to demand that we delete personal data concerning you without undue delay. We are obliged to delete personal data without undue delay if one of the reasons in Art. 17 (1) EU-DSGVO applies. These reasons include, for example, that the data is no longer necessary for the purposes for which it was collected or otherwise processed.
4. right to restriction of processing
Pursuant to Art. 18 EU-DSGVO, you have the right to demand that we restrict processing if one of the conditions listed in Art. 18 EU-DSGVO applies. This includes, for example, that you dispute the accuracy of the personal data. Then we may only process the data in a restricted manner for as long as it takes to verify the accuracy of the personal data.
5. right to data portability
Pursuant to Art. 20 EU-DSGVO, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You have the right to transfer this data to another controller, i.e. another entity that processes data, without hindrance, provided that the original processing was based on consent or was necessary for the performance of a contract.
6. right of objection
Pursuant to Art. 21 EU-DSGVO, you have the right to object at any time to the processing of personal data relating to you if such data is processed on the basis of Art. 6(1)(e) or (f) EU-DSGVO and there are grounds for doing so based on your personal situation. You may object to the processing of data for the purpose of direct marketing at any time. Personal data will then no longer be processed for this purpose. The right to object can be exercised by means of an informal declaration. A written statement or, optionally, an e-mail to the above contact address is sufficient.
7. right to revoke the declaration of consent
According to Art. 7 (3) EU-DSGVO, you have the right to revoke your consent to processing at any time. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected. The right of revocation can be exercised by an informal declaration. A written declaration or, optionally, an e-mail to the above contact address is sufficient.
8. automated decision in individual cases including profiling
Pursuant to Art. 22 EU-DSGVO, you have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects vis-à-vis you or similarly significantly affects you. Article 22 (1) of the EU GDPR provides for exceptions to this, although Article 22 (4) of the EU GDPR in turn provides for partial backdated exceptions.
9 Right to complain to a supervisory authority
Pursuant to Art. 77 EU-DSGVO, and without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes this Regulation.
VII. Online presences / company profile in social media
Our company has online presences on various social media and platforms. Through this, we simplify the search for our services for interested parties and offer an additional channel of communication.
The purpose of the processing of user data by the respective social media and platforms is usually user-specific advertising, i.e. individualized advertising can be displayed that corresponds to the presumed interests of the user or results from the user's previous usage behavior. For this purpose, cookies are stored on the end devices of the users. These cookies can store the usage behavior and thus map the areas of interest.
It is possible that the registered office of a social medium or platform is located in a third country, i.e. in a country in which the GDPR has no direct legal effect. In this case, the transfer of data will only take place if your consent is given, an adequate level of data protection prevails, or other legal permission exists. US providers may operate under the Privacy Shield agreement (EU-US Privacy Shield), which means that the requirements of the Privacy Shield agreement are similar to the level of data protection in the European Union and that the data is treated accordingly.
We would like to make it clear that users should contact the respective third-party providers directly in the event of information requests and/or the assertion of other data subject rights. They have insight and access rights to the user data stored and processed there and can provide information and/or take measures accordingly. If you contact us directly, we will try to support your request as best we can. However, since we have no insight into or access to the data stored by third-party providers, our options for action are limited.
Please inform yourself about the data processing principles of the respective companies using the corresponding data protection statements.
VIII. Third-party services
We use the following third-party services:
- Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4. Ireland.
- Youtube, LLC, subsidiary of Google Inc, 901 Cherry Avenue, San Bruno, CA 94066, USA ("Youtube").
It is possible that the registered office of a third-party provider is located in a third country, i.e., a country in which the GDPR does not have direct legal effect. In this case, data will only be transferred if your consent is given, an adequate level of data protection prevails, or other legal permission exists. Google, Facebook/Instagram, Twitter, LinkedIn and MailChimp operate under the Privacy Shield agreement (EU-US Privacy Shield), which means that the requirements of the Privacy Shield agreement are equivalent to the level of data protection in the European Union and that the data is treated accordingly.
1. Google Analytics
We use tracking technology on our website to measure and evaluate our website and to optimize our content. In order to protect our users and partners, we are also able to identify and prevent fraud and security risks. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f) DSGVO.
The protection of your data is important to us, which is why we have additionally extended Google Analytics with the configuration parameter "anonymizeIp". Your IP address is only recorded in abbreviated form by the code. It is not possible for us to draw any conclusions about your person. If you do not wish your website usage to be analyzed by Google Analytics, you can download and install the Google browser plugin at any time with effect for the future under the following link and object to the tracking:
2. Google Maps/Google Earth
IX. Technical and organizational measures
We take technical and organizational measures to ensure that the security and protection requirements of the EU-DSGVO are met and that personal data is protected against loss, destruction, manipulation or access by unauthorized persons. The measures are always adapted to the current state of the art.
X. Changes to the data protection declaration