Data protection declaration for bertheitker.com, norbertheitker.com and norbertheitker.de

Dear visitor, we are pleased that you are visiting our website. We want you to feel safe and comfortable doing this. Protecting your privacy is very important to us. The following privacy policy is intended to inform you about our handling of the collection, use and disclosure of personal information.

Responsible body
Norbert Heitker
Hohenzollern Ring 103
22763 Hamburg
norbertheitker@macbay.de

usage data
In order to improve the quality and functionality of our websites and in the event of criminal prosecution, we and the host of our website store und Videos,WIX.com(please click here for the WIX.com Privacy Policy), for statistical purposes data about the individual access to our pages. This record consists of

​

• the page from which the file was requested,

• the name of the file,

• the date and time of the query,

• the amount of data transferred

• the access status (file transferred, file not found),

• description of the type of web browser used,

• the IP address of the requesting computer

​

The legal basis for this data processing is Art. 6 Para. 1 lit. f GDPR (legitimate interests of the person responsible).
The above reasons also represent the legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR.

Your rights as a user
a) Right to Confirmation
Every data subject has the right to request information as to whether personal data about them is being processed.
b) Right to information (Article 15 GDPR)
Every data subject has the right to receive free information about the personal data stored about him and a copy of this information.
c) Right to rectification (Article 16 GDPR)
The data subject has the right to demand that the person responsible correct incorrect personal data concerning them without delay.
d) Right to erasure (right to be forgotten) (Art. 17 GDPR)
Every data subject has the right to demand that the personal data concerning them be deleted immediately, provided one of the statutory reasons applies and provided that the processing is not necessary.
e) Right to restriction of processing (Article 18 GDPR)
Every data subject has the right to request the restriction of processing if one of the statutory reasons applies.
f) Right to data portability (Art. 20 GDPR)
Every data subject has the right to receive the personal data concerning them, which they have provided to a person responsible, in a structured, common and machine-readable format and to transmit this data to another person responsible without hindrance, provided that the processing is based on the consent in accordance with Art 6 Paragraph 1 Letter a DS-GVO or Article 9 Paragraph 2 Letter a DS-GVO or on a contract pursuant to Article 6 Paragraph 1 Letter b DS-GVO and the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible.
Furthermore, when exercising their right to data portability in accordance with Art. 20 Para the rights and freedoms of other persons are not impaired by this.
g) Right to withdraw consent under data protection law (Art. 13 GDPR)
Each data subject has the right to revoke consent to the processing of personal data at any time if the processing is based on Article 6 Paragraph 1 Letter a or Article 9 Paragraph 2 Letter a, without affecting the legality of the consent processing carried out until the revocation is affected.

h) Right to object (Article 21 GDPR) Every data subject has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data relating to them, which is based on Article 6 Paragraph 1 Letter e or f DS-GVO to file an objection. This also applies to profiling based on these provisions. If personal data is processed in order to operate direct advertising, the person concerned has the right to object at any time to the processing of personal data relating to them for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
i) Automated decisions in individual cases including profiling (Article 22 GDPR)
Every data subject has the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effect on them or significantly affects them in a similar way, provided that the decision

• (1) not necessary for entering into, or the performance of, a contract between the data subject and a data controller, or

• (2) is permissible on the basis of Union or Member State legislation to which the person responsible is subject and this legislation contains appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, or

• (3) with the express consent of the data subject.

In the cases referred to in (1) and (3), appropriate measures will be taken to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain human intervention on the part of the controller, to present his or her own position and to challenge the decision.

Duration for which the personal data will be stored
The criterion for the duration of the storage of personal data is the respective statutory retention period. After the deadline has expired, the corresponding data will be routinely deleted, provided that they are no longer required to fulfill the contract or to initiate a contract.

Third Party Content
Content from third parties (e.g. Vimeo, YouTube videos or videos from other providers, Google Maps, RSS feeds or similar) may also be included on our website. The providers of this content usually store cookies on the user's computer. You can prevent this by making the appropriate settings in your browser, but this may result in this content not being displayed correctly.
In addition, many (third-party) providers save the IP address of the user in order to be able to send the corresponding content to the user's browser. Unfortunately, we have no influence on the use of the IP address by the (third-party) provider.

​

Right of appeal to the competent supervisory authority
In the event of violations of data protection law, the data subject has a right of appeal to the competent supervisory authority. This is the state data protection officer of the federal state in which our company is based. You can find a list of data protection officers here: 

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.