PRIVACY POLICY
The responsible party within the meaning of data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:
Lukas Maximilian Fraedrich
Lister Meile 71
30161 Hannover
Privacy Policy of the Sun Mountain Way Production GmbH
We, the Sun Mountain Way Production GmbH, follow the principle of data minimization. This means that when collecting your personal data, we take care to collect only that personal data which is necessary for the use of our website and our services or which you have provided to us with your consent.
You entrust us with personal data. We see it as part of our responsibility to use this data sparingly and transparently and to protect it as best we can.
With this privacy policy we describe when we collect personal data through interactions with you and how we manage this data. It applies to all interactions between you and us and to the Sun Mountain Way Production GmbH websites.
I. Name and address of the responsible person
The responsible person is the:
Sun Mountain Way Production GmbH.
Lister Meile 71, 30161 Hanover
E-Mail: info@~@smwproduction.com
II. General information on data processing
Scope of the processing of personal data
As a matter of principle, we collect and use personal data from visitors to our website only to the extent that this is necessary to provide a functional website and content and services. The collection and use of personal data of our visitors is regularly carried out only with the consent of the visitor. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by legal regulations.
Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.
In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) lit. d DSGVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.
Data deletion and storage period
Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which we are subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.
III. Provision of the website and creation of log files
Description and scope of data processing
Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected:
Information about the browser type and version used
The operating system of the visitor
The visitor's Internet service provider
The IP address of the visitor
Date and time of access
Websites from which the visitor's system accesses our website
Websites that are called up by the visitor's system via our website
The data is also stored in the log files of our system. Not affected by this are the IP addresses of the visitor or other data that allow the data to be assigned to a visitor. A storage of this data together with other personal data of the visitor does not take place.
Legal basis for data processing
The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f DSGVO.
Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to your computer. For this purpose, your IP address must remain stored for the duration of the session.
These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.
Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
Possibility of objection and removal
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on your part.
IV. Contact form and e-mail contact
Description and scope of data processing
A contact form is available on our website that can be used for electronic contact. Alternatively, it is possible to contact us via the e-mail address provided. If you contact us via one of these channels, the personal data you provide will be stored automatically. The storage is solely for the purpose of processing or contacting you. The data will not be passed on to third parties.
Legal basis for data processing
The legal basis for the processing of the data is - if the visitor has given his consent - Art. 6 para. 1 lit. a DSGVO.
The legal basis for the processing of data transmitted in the course of sending an e-mail or using the contact form is Art. 6 (1) lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
Purpose of data processing
In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process are used to prevent misuse of the contact and to ensure the security of our information technology systems.
Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by e-mail or contact form, this is the case when the respective conversation with the visitor has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
Possibility of objection and removal
You have the option to revoke your consent to the processing of personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.
If you wish to revoke your consent to the processing of personal data, send us an e-mail with the subject "Revocation of data protection consent" to: info@smwproduction.com
All personal data stored in the course of contacting us will be deleted in this case.
V. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
Right to information
You may request confirmation from us as to whether personal data concerning you is being processed by us.
If such processing exists, you can request information from us about the following:
(1) the purposes for which the personal data is processed;
(2) the categories of personal data which are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage duration;
(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information on the origin of the data, if the personal data are not collected from the data subject.
You have the right to request information on whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards in connection with the transfer.
Right to rectification
You have a right to rectification and/or completion vis-à-vis us, insofar as the processed personal data concerning you are inaccurate or incomplete. We will carry out the correction without delay.
Right to restriction of processing
Under the following conditions, you may request the restriction of the processing of personal data concerning you:
(1) if you dispute the accuracy of the personal data concerning you for a period of time that allows us to verify the accuracy of the personal data;
(2) the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
(3) we no longer need the personal data for the purposes of processing, but you need them for the assertion, exercise or defense of legal claims, or
(4) if you have objected to the processing and it has not yet been determined whether the legitimate grounds on our part override your grounds.
Where the processing of personal data concerning you has been restricted, such data may be processed, with the exception of their storage, only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
Right to deletion
Obligation to delete
You may request that we delete the personal data concerning you without undue delay, and we are obliged to delete such data without undue delay if one of the following reasons applies:
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing was based and there is no other legal basis for the processing.
(3) You object to the processing and there are no overriding legitimate grounds for the processing, or you object to the processing.
(4) The personal data concerning you have been processed unlawfully.
(5) The deletion of the personal data concerning you is necessary for compliance with a legal obligation.
Information to third parties
If we have made public the personal data concerning you and we are obliged to erase it, we shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.
Exceptions
The right to erasure does not exist insofar as the processing is necessary to
(1) to exercise the right to freedom of expression and information;
(2) to fulfill a legal obligation to which we are subject or to perform a task that is in the public interest;
(3) for reasons of public interest in the field of public health;
(4) to assert, exercise or defend legal claims.
Right to information
If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed about these recipients.
Right to data portability
You have the right to receive the personal data concerning you that has been provided in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us, provided that
(1) the processing is based on consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to Art. 6 para. 1 lit. b DSGVO and
(2) the processing is carried out with the aid of automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transferred directly from us to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) or (f) DSGVO.
We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.
Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
VI. Cookies and Google Analytics, Google Tag Manager, Google reCAPTCHA
- Cookies
We use so-called cookies on our Internet pages. Cookies are data that are stored by the Internet browser on your computer system. We record your IP address, your browser type, the website you visited, the objects you clicked on the website, the time you spent on a particular website, the referring website from which you accessed our website, and the third-party website you accessed from our website.
The cookies can be transmitted to a page when it is called up and thus enable the user to be assigned. Cookies help to simplify the use of Internet pages for users.
It is possible to object to the setting of cookies at any time by changing the setting in the Internet browser. Cookies that have been set can be deleted. Please note that if you disable cookies, you may not be able to use the full functionality of our website.
- Google Analytics
We use "Google Analytics" on our website, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google uses cookies, i.e. small text files that are stored on your terminal device and enable an analysis of your use of our website. The information generated by the cookie about the use of our website is usually transmitted to a Google server and stored there. If anonymization of the IP address to be transmitted by the cookie is activated on the website ("IP anonymization"), your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server outside the EU and shortened there. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity and internet usage. In doing so, pseudonymous usage profiles can be created from the processed data. The IP address transmitted when using Google Analytics is not merged with other data from Google.
We use Google Analytics only with the previously described activated IP anonymization. This means that your IP address is only processed by Google in a shortened form. A personal reference can thus be excluded.
We use Google Analytics for the purpose of analyzing the use of our website and to be able to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behavior, we can improve our offer and make it more interesting for you as a user. The legal basis is Art. 6 para. 1 p. 1 lit. a) DSGVO (consent).
You can also prevent the storage of cookies generated by Google Analytics by making the appropriate settings in your web browser. We would like to point out that in this case you may not be able to use all the functions of our website. If you wish to prevent the collection of the data generated by the cookie and related to your user behavior (including your IP address) as well as the processing of this data by Google, you can also download and install the web browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.
In order to oblige Google to process the transmitted data only in accordance with our instructions and to comply with the applicable data protection regulations, we have concluded an order processing agreement with Google.
Information of the third-party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.
For further information on data use by Google, on setting and objection options and on data protection, please refer to the following Google web pages:
Terms of use: https://marketingplatform.google.com/about/analytics/terms/us/
Overview of data protection: https://support.google.com/analytics/answer/6004245?ref_topic=2919631
Privacy policy: https://policies.google.com/privacy
Data use by Google when you use websites or apps of our partners: https://policies.google.com/technologies/partner-sites
Data use for advertising purposes: https://policies.google.com/technologies/ads
Settings for personalized advertising by Google: https://adssettings.google.com
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
- Google Tag Manager
We use "Google Tag Manager" on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Tag Manager allows us as marketers to manage website tags through one interface. The Google Tag Manager tool that implements the tags is a cookie-less domain and does not itself collect any personal data. Google Tag Manager takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.
Information of the third-party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.
Further information on data protection can be found on the following Google web pages:
Privacy Policy: https://policies.google.com/privacy
FAQ Google Tag Manager: https://support.google.com/tagmanager/?hl=en#topic=3441530
Google Tag Manager Terms of Use: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/
- Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to check whether the data input on this website (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.
The storage and analysis of the data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. If a corresponding consent was requested, the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.
For more information about Google reCAPTCHA, please see the Google Privacy Policy and the Google Terms of Service at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.
- Typekit web fonts from Adobe Fonts
We use Typekit web fonts from Adobe Fonts for the visual design of our website. Adobe Fonts is a service provided by Adobe Systems Software Ireland Companies (4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland; hereinafter "Adobe") that gives us access to a font library.
To embed the fonts we use, your browser must connect to an Adobe server in the United States and download the font required for our website. Adobe thereby receives the information that our website was accessed from your IP address.
For more information about Adobe Fonts, see the Adobe Fonts privacy policy, available here: https://www.adobe.com/de/privacy/policies/adobe-fonts.html
If your browser does not support web fonts or you do not give your consent, a default font from your computer will be used.
Withdrawal of consent:
The provider currently does not offer an option for a simple opt-out or blocking of data transfer. If you wish to prevent the tracking of your activities on our website, please revoke your consent for the relevant cookie category or all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use our website or only to a limited extent.
VII. Disclosure to third parties
Insofar as we are obliged to do so by law or by court decision, we will transfer your data to bodies entitled to receive such information.
For third-party marketing purposes, your personal data will not be disclosed to third parties without your prior express consent.
A transfer of personal data to third countries does not take place and is not planned.
VIII. Contact
If you have any questions or you would like to exercise your rights under data protection law in one of the cases mentioned, please feel free to contact us (info@smwproduction.com): if possible with the subject "Data protection".
Sun Mountain Way Production GmbH
Lister Meile 71, 30161 Hanover
E-Mail: info@~@smwproduction.com