Privacy

Privacy Statement of COVER Communications pursuant to GDPR, dated 25 May 2018

Updated on 28 March 2019

 

I. Name and address of data controller

The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection provisions is:

COVER Communications GmbH & Co. KG
Graf-Zeppelin St. 8 / Rgb.
86899 Landsberg am Lech, Germany

Tel.: +49 (0) 8191 989 5163

e-mail: anne@cover-communications.com
website: www.cover-communications.com

 

II. Name and address of data protection officer

The data protection officer of the data controller is:

Joachim Maaß
Datenschutz Oberbayern c/o Maass Consulting GmbH
Kaiser-Wilhelm St. 2
82319 Starnberg
Germany
Tel.: +49 8151 4468967
e-mail: dsb-cover-communications@datenschutz-oberbayern.de
website: www.datenschutz-oberbayern.de

 

III. General information on data processing
1. Scope of the processing of personal data

Generally, we process personal data of our users only to the extent necessary for the provision of a functioning website as well as our content and services. The processing of personal data of our users regularly only takes place with the consent of our users. Exceptions are cases in which for actual reasons no prior consent can be obtained and the processing of the data is legally permissible.

 

2.Legal basis for the processing of personal data

Art. 6 para. 1 lit. a EU Data Protection Basic Regulation (GDPR) serves as the legal basis, if we obtain the consent of the data subject for the processing of personal data. Art. 6 para. 1 lit. b GDPR serves as a legal basis for the processing of personal data, which is necessary for the performance of a contract in which the data subject is involved as a party. This applies also to processing procedures, which are necessary for the execution of procedural measures.  Art. 6 para. 1 lit. c GDPR serves as the legal basis, if the processing of personal data is necessary to fulfil a legal obligation to which our company is subject.
Art. 6 Abs. 1 lit. d GDPR serves as a legal basis for the case that essential interests of the data subject or another natural person necessitate the processing of personal data.
Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing, if the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interests.

 

3.Deletion of data and retention period

Personal data of the data subject is deleted or blocked as soon as the purpose of storage no longer applies. In addition, the data may be stored if the European or national legislator has provided for this in Union legislation, laws or other provisions to which the data controller is subject. Blocking or deletion shall also take place after expiry of the retention period provided for in the first-mentioned standards, unless there is a need for further data storage for the conclusion or performance of a contract.

 

IV.Provision of the website and creation of log files 

1.Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. As part of this process, the following data is collected:

    1. information about the type and version of the browser used
    2. the user’s operating system
    3. the user’s Internet service provider
    4. date and time of access
    5. websites, from which the user’s system accesses our website

This data is also stored in the log files of our system. This does not affect the user’s IP addresses or other information that allows to assign the data to a user. The data is not stored with other personal data of the user. Should we become aware of indications of illegal use, we reserve the right to subsequently check this data.

 

2.Legal basis of data processing

Art. 6 para. 1 lit. f GDPR serves as the legal basis for the temporary data storage.

 

3.Purpose of data processing

The temporary storage of the IP address by the system is necessary so that the data from the website can be transferred to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

For these purposes, our legitimate interest lies in the data processing pursuant to Art. 6 para. 1 lit. f GDPR.

 

4.Storage period

Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. If data is collected to provide the website, this is the case when the respective session is completed.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is not possible. In this case, the IP addresses of the users are deleted or alienated, so that assignment of the accessing client is no longer possible.

 

5.Possibility of objection and deletion

The collection of data for provision of the website and storage of data in log files is mandatory for the operation of the website. Consequently, the user does not have the option to object.

V. Use of cookies

1.Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s computer system. This cookie contains a typical string of characters that enables the browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

  1. Language settings
  2. Log-in information

In addition, we use cookies on our website that enable us to analyse the surfing habits of our users.

 

In this way, the following data can be transmitted:
1. search terms entered
2. frequency of the page views
3. use of the functions of the website

The users’ data collected in this way is pseudonymised by technical precautions. Thus, it is no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the user.

When accessing our website, the user is informed about the use of cookies for analytical purposes and his or her consent to the processing of the personal data used in this context is obtained. In this context, reference is also made to this privacy statement.

 

2.Legal basis of data processing

If only technically required cookies are used or technically required cookies as well as technically not required cookies are used without the prior consent of the user:

Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing of personal data using cookies.

If technically necessary as well as not necessary cookies are used with the prior consent of the user:

Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing of personal data using technically necessary cookies.

Art. 6 para. 1 lit. a GDPR serves as the legal basis for the processing of personal data using cookies for analytical purposes with the consent of the user.

 

3.Purpose of data processing

The user data collected by technically necessary cookies is not used to create user profiles.
The purpose of using technically necessary cookies is to simplify the use of website for the users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognised even after a page change.

We need cookies for the following applications:
1. Adoption of language settings

Analysis cookies are used to improve the quality of our website and its content. Analysis cookies tell us how the website is used and enable us to continually improve our services.

For this purpose, we have a legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR.

 

4.Storage period, objection and deletion options

Cookies are stored on the user’s computer and transmitted from the computer to our website. Therefore, you as a user have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved, can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent any longer.

The transmission of Flash cookies cannot be prevented via the browser settings, but by changing the settings of the Flash Player.

VI. Newsletter
1. Description and scope of data processing

The newsletter is sent upon the user’s registration on the website:

You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input mask is transmitted to us. This is the following data:

  1. entered e-mail address
  2. name entered to personalise the newsletter

 

2.Legal basis of data processing

Art. 6 para. 1 lit. a GDPR serves as the legal basis for the processing of data after the user has registered for the newsletter, upon the user’s consent.

 

3.Purpose of data processing

  • IP address of the accessing computer
  • date and time of registration

Your consent will be obtained for the processing of your data during the registration process and reference will be made to this privacy statement.

The collection of further personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.

 

4.Storage period

Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Thus, the user’s e-mail address will be stored as long as the newsletter subscription is active.

 

5.Possibility of objection and deletion

The subscription of the newsletter can be cancelled by the respective user at any time. For this purpose, there is a corresponding link in every newsletter.

This also enables the revocation of consent to the storage of personal data collected during the registration process.

 

VII. Contact form and e-mail contact
1. Description and scope of data processing

There is a contact form on our website that can be used for electronic enquiries. If the user makes use of this possibility, the data entered in the input mask will be transmitted to us and stored. The data contains the following:

  1. name
  2. e-mail address
  3. file attachment, if applicable
  4. message, if applicable

At the time the message is sent, the following data is stored:

5. IP address of the user
6. date and time of registration

Your consent will be obtained for the processing of your data during the submission process and reference will be made to this privacy statement. Alternatively, you can contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail is stored.

In this context, the data will not be passed on to third parties. The data will be used exclusively for the processing of the conversation.

 

2.Legal basis of data processing

Art. 6 para. 1 lit. a GDPR serves as the legal basis for the processing of data, upon the user’s consent.

Art. 6 para. 1 lit. f serves as the legal basis for the processing of data transmitted when sending an e-mail. As far as the purpose of the e-mail contact is the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

 

3.Purpose of data processing

The processing of personal data from the input mask exclusively serves us for the processing of the established contact. In case of a contact via e-mail, this also includes the required legitimate interest in the processing of the data. The other personal data processed during the sending process serves to prevent misuse of the contact form and to guarantee the security of our IT systems.

 

4.Storage period

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This applies for personal data from the input mask of the contact form and data sent by e-mail, when the respective conversation with the user has ended. The conversation is terminated when it can be assumed from the circumstances that the relevant facts have been finally clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

 

5.Possibility of objection and deletion

The user has the possibility to revoke his consent to processing of the personal data at any time. If the user contacts us by e-mail, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued. Should the user wish to make use of this option, he or she must write an e-mail to the same address under which the personal data has been transmitted. The user has to use “Request for deletion of my data” as the subject.

In this case, all personal data that was stored while establishing the contact, is deleted.

VIII. Privacy policy for the use of Facebook Plug-ins (Like button)

Plug-ins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our pages. The Facebook plug-ins can be recognised by the Facebook logo or the Like button (“Like”) on our site. An overview of the Facebook plug-ins is available here: http://developers.facebook.com/docs/plugins/.

When you visit our pages, a direct connection between your browser and the Facebook server is established via the plug-in. In this way, Facebook receives the information that you have visited our website with your IP address. If you click on the Facebook “Like” button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This enables Facebook to assign the visit to our pages to your user account. Please note that we as the site provider do not receive any information about the content of the data transmitted or its use via Facebook. For more information, please refer to Facebook’s privacy policy athttp://de-de.facebook.com/policy.php.

If you do not want Facebook to associate your visits to our pages with your Facebook user account, please log out of your Facebook user account.

 

IX. Privacy Policy for the use of Instagram

Functions of the Instagram service are integrated on our pages. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the contents of our pages to your Instagram profile by clicking on the Instagram button. This enables Instagram to assign the visit to our pages to your user account. Please note that we as the site provider do not receive any information about the content of the transmitted data or its use by Instagram.

For more information, please refer to Instagram’s privacy policy at: http://instagram.com/about/legal/privacy/

 

X.Privacy Policy for the use of Pinterest

On our website we use social plug-ins of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA (“Pinterest”). If you visit a page that contains such a plug-in, your browser will connect directly to the Pinterest servers. The plug-in transmits log data to the Pinterest server in the USA. This log data may include your IP address, the address of the websites visited that also include Pinterest features, browser type and settings, date and time of the enquiry, how you use Pinterest and cookies.

Further information about the purpose, scope and further processing, as well as the use of the data by Pinterest and your related rights and possibilities to protect your privacy is available in Pinterest’s privacy policy:
https://about.pinterest.com/de/privacy-policy

 

XI.Privacy Policy for the use of YouTube

Our website uses plug-ins from the Google-operated YouTube site. The site is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our YouTube plug-in enabled pages, a connection is established to YouTube’s servers. This will inform the YouTube server which of our pages you have visited.

If you are logged in to your YouTube account, you enable YouTube to directly assign your surfing habits to your personal profile. You can prevent this by logging out of your YouTube account.
For more information about how we handle user information, please refer to YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy

 

XII. Privacy Policy for the use of bitly

On our pages, we use the service of bitly. This service is offered by Bitly.Inc; New York City; 139 5th Avenue; 5th Floor; New York; NY 10010; USA. bitly allows the shortening of long URLs. A bitly link can be recognised by the following: www.bit.ly/….

Clicking a bitly link, establishes a connection to the bitly servers. This informs the bitly server which of the bitly links you have visited. bitly also captures and stores your IP address, time, date, location, referring web page, browser type, cookie information, as well as device identification, device settings and operating system in case of mobile access.

We only see information that has been anonymised by bitly. We only receive information about the time a link was clicked, in which country and from which source-URL. In addition, statistics about the shortened URL can be retrieved, such as the number of views of the link and the respective viewing times.

On the basis of our legitimate interests, we are committed to the economic operation of our online service and the user-friendliness of the short URLs in the sense of Art. 6 para.1 lit. f GDPR.

We use bitly on Instagram, YouTube, Facebook and our website www.cover-communications.com .

A click on a bitly link can initiate further data processing activities by third parties, which we cannot influence, access or modify. Further information on the handling of user data is available in bitly’s privacy policy at https://bitly.com/pages/privacy?lang=de

 

XIII. Comment function on this website

In addition to your comment, information on the time the comment was created, your e-mail address and, if you do not post anonymously, your chosen user name will be stored for the comment function on this page.

 

Storage of the IP address
Our comment function stores the IP address of the users who post comments. Since we do not check comments on our site before activating them, we need this data in order to be able to take action against the author in the event of legal violations such as insults or propaganda (spam defence).

This data is automatically deleted after 30 days.

XIV. Web analysis by generator.de/ etc.

1.Scope of the processing of personal data

We use Google Analytics on our website to analyse the surfing habits of our users. The software places a cookie on the user’s computer (for cookies, see above). When you access individual pages on our website, the following data is stored:

  • two bytes of the IP address of the accessing system of the user
  • the website accessed
  • the website from which the user reached the accessed website (referrer)
  • the sub-pages accessed from the visited website
  • the time spent on the website
  • the frequency of visits to the website

The software runs exclusively on the servers of our website. The personal data of the users is only stored there. The data will not be passed on to third parties.

 

2.IP anonymisation

We use the function “Activation of IP Anonymisation” on this website. As a result, your IP address will be shortened by Google in advance within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases the complete IP address is transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not linked with other data from Google.

 

3.Legal basis for the processing of personal data

Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing of the user’s personal data.

 

4.Purpose of data processing

Processing personal data of users enables us to analyse the user’s surfing habits. By evaluating the data collected, we are able to compile information about the use of the particular components of our website. This helps us to constantly improve our website and its user-friendliness. For this purpose, we have a legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR. By anonymizing the IP address, the interest of the user in protection of personal data is sufficiently taken into account.

 

5.Storage period

The data is deleted as soon as it is no longer used for our record-keeping purposes. The maximum retention period for data sent by the user and linked to cookies, user IDs or advertising IDs is currently 26 months.

 

6.Possibility of objection and deletion

Cookies are stored on the user’s computer and transmitted to our site by this computer. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved, can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent any longer.

 

Alternatively, the future analysis of your access to the website can be disabled by clicking on the link below. By “clicking” on the link a so-called “opt-out-cookie” is placed, which means that the analysis of your visit on our website is prevented in the future:

 

Disable Google Analytics

 

Please note that deleting cookies from your browser settings may cause the opt-out cookie to be deleted and you may need to reactivate it.

XV. Rights of the data subject

If your personal data is processed, you are the data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the data controller:

 

1.Right to information

You may request confirmation from the data controller as to whether your personal data will be processed by us.

In the event of such processing, you are entitled to request the following information from the data controller:

  1. the purposes for which the personal data will be processed;
  2. the categories of personal data processed;
  3. the recipients or categories of recipients to whom your personal data has been or will be disclosed;
  4. the planned retention period of your personal data or, if no specific information is available in this respect, criteria for determining their retention period;
  5. the existence of a right to rectify or delete your personal data, a right to restriction of processing by the data controller or the right to object to such processing;
  6. the existence of the right to appeal to a supervisory authority;
  7. all available information on the origin of the data, if the personal data is not collected at the data subject;
  8. the existence of automated decision-making including profiling pursuant to Article 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended impact of such processing on the data subject. You are entitled to request information as to whether your personal data will be transmitted to a third country or an international organisation. In this context, you may request information about the corresponding guarantees pursuant to Art. 46 GDPR in connection with the transmission.

 

2.Right to rectification

You have the right to have your personal data corrected and/or completed by the data controller if they are inaccurate or incomplete. The data controller must carry out the rectification without delay.

 

3.Right to restriction of processing

You may request that the processing of your personal data be restricted under the following conditions:

  1. if you dispute the accuracy of your personal data for a period of time that allows the data controller to verify the accuracy of the personal data;
  2. if the processing is unlawful and you refuse to delete the personal data and instead demand a restriction on the use of the personal data;
  3. if the data controller no longer needs the personal data for the purposes of the processing, but you need them for the assertion, exercise or defence of legal claims, or
  4. if you object to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been established whether the legitimate reasons of the data controller outweighs your reasons.

If the processing of your personal data has been restricted, such data may not be processed – apart from their storage – without your consent or for the purpose of asserting, exercising or defending the rights of another natural or legal person or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State. If the processing has been restricted in accordance with the above conditions, you will be informed by the data controller before the restriction is lifted.

 

4.Right to deletion

a) Obligation to delete

You may request the data controller to delete your personal data immediately and he is obliged to delete it immediately if one of the following conditions is met:

  1. your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  2. you revoke your consent to processing pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no legal basis for the processing.
  3. you object to the processing pursuant to Art. 21 para. 1 GDPR and there are no compelling legitimate reasons for the processing or you object to the processing pursuant to Art. 21 para. 2 GDPR.
  4. your personal data has been processed unlawfully.
  5. the deletion of your personal data is necessary in order to comply with a legal obligation under Union law or the law of the Member States, to which the data controller is subject.
  6. your personal data was collected in terms of Information Society services offered pursuant to Art. 8 para. 1 GDPR.

 

b) Information to third parties

If the data controller has published your personal data and is obliged to delete it in accordance with Art. 17 para. 1 GDPR, he shall take appropriate measures, including technical ones, under consideration of the available technology and the implementation costs, to inform the competent data processors who are processing the personal data that you, as the person concerned, have requested them to delete all links to this personal data or copies or reproductions of this personal data.

 

c) Exceptions
The right to deletion does not exist if this processing is necessary

  1. to exercise the right of freedom of expression and information;
  2. to fulfil a legal obligation which requires processing under the law of the Union or the Member States to which the data controller is subject, or to perform a task which is in the public interest or which is carried out in the exercise of official authority delegated to the data controller;
  3. for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i, as well as Art 9. para. 3 GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, as far as the law referred to in section a) could make the attainment of the objectives of such processing impossible or seriously difficult, or
  5. for the assertion, exercise or defence of legal claims.

 

5.Right to information

If you have asserted your right to rectify, delete or restrict the processing of your personal data vis-à-vis the data controller, the latter is obliged to notify all recipients to whom your personal data has been disclosed of such rectification, deletion or restriction, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed of such recipients by the data controller.

 

6.Right to data transfer

You have the right to obtain your personal data that you have provided to the data controller in a structured, common and machine-readable format. Furthermore, you are entitled to transfer this data to another data controller without being impeded by the controller to whom the personal data has been provided, provided that

  1. the processing is based on a consent pursuant to Art. 6 para. 1 lit. a GDPS or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
  2. the processing is carried out using automated methods.

With the exercise of this right you also have the right to demand the direct transmission of your personal data from a data controller to another data controller, as far as this is technically possible. The freedom and right of other persons may not be impaired by this.

The right to data transfer does not apply for the processing of personal data that is required for assumption of a task in public interest or in the exercise of public authority delegated to the data controller.

 

7.Right of objection

For reasons arising from your particular situation, you have the right to object to the processing of your personal data, on the basis of Art. 6 para. 1 lit. e or f GDPR; this also applies to the profiling on the basis of these provisions.

The data controller will no longer process your personal data, unless it can demonstrate compelling reasons for processing worthy of protection, which outweigh your interests, rights and freedoms, or if the processing serves the enforcement, exercise or defence of legal claims.

If your respective personal data is processed for direct marketing purposes, you have the right to object to the processing of your personal data for such advertising purposes at any time; this also applies to profiling as far as it is connected with such direct marketing.

If you object to processing for purposes of direct marketing, your personal data will no longer be processed for such purposes.

You have the possibility to exercise your right of objection through automated procedures using technical specifications in connection with the use of Information Society services, notwithstanding Directive 2002/58/EC.

 

8.Right to revoke the data protection consent declaration

You have the right to revoke your consent declaration to data privacy at any time. The revocation of your consent does not affect the legality of the processing that took place on the basis of the consent, until the revocation of your consent.

 

9.Automated decision in individual cases including profiling

You have the right not to be subjected to a decision based solely on automated processing, including profiling that has legal effects on you or similarly significantly affects you. This does not apply if the decision

  1. is necessary for the conclusion or performance of a contract between you and the data controller,
  2. is permitted under Union and Member States legislation, which the data controller is subject to and contains adequate measures to protect your rights and freedoms and your legitimate interests, or
  3. is made with your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With regard to the cases referred to in (1) and (3), the data controller shall take appropriate measures to protect the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the data controller, to state his or her point of view and to challenge the decision.

 

10.Right of appeal to a supervisory authority

Without prejudice to other administrative or judicial remedies, you have the right to apply to a supervisory authority, in particular in the Member State of your residence, place of work or presumed infringement, if you consider that the processing of your personal data is in breach of the GDPR.

The supervisory authority with which the complaint was lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.