This is the privacy policy of the website. You can find the app’s privacy policy here.
Privacy Policy
1. General Provisions
1.1 What Constitutes Personal Data
Personal data means any information that reveals or may reveal the identity of the user. We adhere to the principle of data minimization. The collection of personal data is avoided to the extent possible.
1.2 Processing of Personal Data
Personal data serves exclusively for the establishment, substantive configuration, performance, or settlement of the contractual relationship (Art. 6(1)(b) GDPR).
Beyond this, personal data is only processed insofar as we have obtained your consent (Art. 6(1)(a) GDPR) or it concerns data whose processing is necessary for our legitimate interests and insofar as the balancing test shows that no overriding interests, fundamental rights, or fundamental freedoms on your part conflict therewith (Art. 6(1)(f) GDPR).
We may use data processors for the processing of your personal data, with whom we have concluded a data processing agreement where necessary. However, personal data will generally not be disclosed to third parties beyond this.
The processing of your personal data takes place in the EU as well as in countries classified as safe or adequate by the EU. Should the processing of personal data occur in the USA, care is taken to ensure that the services we use are certified under the "Data Privacy Framework".
1.3 Usage Data
When accessing our website, information is automatically sent to our website's server by the browser used on your terminal device. The following information is technically captured without your intervention and stored in a so-called log file until automated deletion:
- IP address of the requesting computer
- Date, time, and duration of access
- Name and URL of the retrieved file
- Website from which access occurs (referrer URL)
- Browser used and, if applicable, the operating system of your computer as well as the name of your access provider
The aforementioned data is processed by us for the following purposes:
- Ensuring smooth connection establishment to the website
- Ensuring comfortable use of our website
- Evaluation of system security and stability
- Statistical evaluation
No linking of this usage data with your other personal data takes place.
The legal basis for the temporary storage of the data is Art. 6(1)(f) GDPR. After weighing your interests and ours, our legitimate interests in the described data processing prevail, as the processing is proportionate to the legitimate purposes pursued and is limited to the minimum necessary for achieving the purposes.
1.4 Duration of Storage
We store your personal data after the termination of the purpose for which the data was collected only as long as required under statutory (particularly tax law) provisions.
In detail, the following retention periods apply, for example:
| Type of data | Retention period |
|---|---|
| Tax data | 10 years |
| Commercial or business letters (including e-mails and faxes) and other documents, insofar as these are relevant for taxation. | 6 years from the end of the calendar year in which the last entry in the book was made, the inventory, the opening balance sheet, the annual financial statement, or the management report was prepared, the commercial or business letter was received or sent, or the accounting document was created, and the recording was made or the other documents were created. |
| Transaction and registration data | 10 years from the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance sheet, the annual financial statement, or the management report was prepared, the commercial or business letter was received or sent, or the accounting document was created; furthermore the recording was carried out or the other documents were created. |
| Data protection consent for data processing | For the duration of the possibility of the assertion of rights by the person concerned. |
| (Electronic) correspondence that is not relevant under tax law | As long as it is necessary to fulfill the task, unless the processing serves to assert, exercise, or defend legal claims. |
| Usage data in accordance with section 1.3 of this data protection declaration | max. 30 days |
2. Your Rights
2.1 Right of Access
You may request information from us about whether we process personal data concerning you, and if this is the case, you have a right to access this personal data and the additional information specified in Art. 15 GDPR.
2.2 Right to Rectification
You have the right to rectification of inaccurate personal data concerning you and may, pursuant to Art. 16 GDPR, request the completion of incomplete personal data.
2.3 Right to Erasure
You have the right to request that we erase personal data concerning you without undue delay. We are obligated to erase such data without undue delay, particularly if one of the following reasons applies:
- Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
- You withdraw your consent on which the processing of your data was based, and there is no other legal basis for the processing.
- Your data has been unlawfully processed.
The right to erasure does not exist insofar as your personal data is necessary for the establishment, exercise, or defense of our legal claims.
2.4 Right to Restriction of Processing
You have the right to request from us the restriction of processing of your personal data if:
- You contest the accuracy of the data, and we therefore verify the accuracy.
- The processing is unlawful, and you refuse erasure and instead request restriction of use.
- We no longer need the data, but you require it for the establishment, exercise, or defense of legal claims.
- You have objected to the processing of your data, and it has not yet been determined whether our legitimate grounds override your grounds.
2.5 Right to Data Portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us using automated procedures.
2.6 Right to Withdraw Consent and Right to Object
Insofar as the processing of your personal data is based on consent (Art. 6(1)(a) GDPR), you have the right to withdraw this consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.
Insofar as the processing of your personal data is based on Art. 6(1)(e) GDPR or Art. 6(1)(f) GDPR, you have the right pursuant to Art. 21 GDPR to object at any time to the processing of personal data concerning you for reasons arising from your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
2.7 General Provisions and Right to Lodge a Complaint
The exercise of your aforementioned rights is generally free of charge for you. You have the right to lodge complaints directly with the supervisory authority responsible for us, the State Data Protection Officer.
3. Data Security
3.1 Data Security
All data on our website is secured against loss, destruction, access, alteration, and distribution through technical and organizational measures.
3.2 Sessions and Cookies
To operate the website, we use cookies and server-side sessions in which data can be stored. We ensure that cookies are only used and information already stored on your terminal device is only accessed insofar as this is absolutely necessary for the provision of the digital service you have expressly requested (§ 25(2) TDDDG) or where your express consent is provided (§ 25 I TDDDG).
Upon your express consent, we may use cookies and information already stored on your terminal device to personalize content and advertisements, to provide social media functions, and to analyze access to our website. With your consent, we may share information about your use of our website with our partners for social media, advertising, and analytics. Our partners may potentially combine this information with additional data that the partners already possess about you.
To the extent that technically non-essential cookies are deployed, you may obtain details regarding such cookies (e.g., domain, name, duration) from the cookie banner.
4. Third-Party Services
4.1 External Hosting
Our website is hosted by the following external service provider:
dogado GmbH, Antonio-Segni-Straße 11, 44263 Dortmund
Privacy Policy: https://www.dogado.de/legal/datenschutz
The (personal) data captured on this website is transmitted to and stored on the servers of the aforementioned third-party provider, which may include:
- IP addresses
- Contact data
- Website accesses
- Date and time of request
- Time zone difference to Greenwich Mean Time
- Content of the request
- HTTP status code
- Amount of data transmitted
- Website from which the request originates
- Information about browser and operating system
and other data that may be generated via a website. The use of the host serves the purpose of contract fulfillment toward our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). The aforementioned third-party provider will process your data only insofar as necessary to fulfill performance obligations and will follow our instructions regarding this data.
4.2 Use of YouTube
Insofar as we embed YouTube videos on our website and integrated offerings, these enable connection to YouTube and the videos stored there. YouTube is an offering of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The use of YouTube occurs only with your consent (Art. 6(1)(a) GDPR). For the purpose and scope of data collection and data use by Google, as well as your rights and setting options for protection as a YouTube customer, please refer to YouTube's Privacy Policy, which can be found at: https://www.youtube.com/t/privacy/
5. Contact
For contact regarding data protection, you may reach us using the following contact options. Data Controller within the meaning of the GDPR:
Udo Reiss
c/o IP-Management #24278
Ludwig-Erhard-Str. 18
20459 Hamburg
Germany
Email: contact@panotium.com
Phone: +49 17622947565