Data protection policy

§ 1     Information on the collection of personal data

(1)     The following passages contain information on the collection of personal data when using our website. Personal data is all data that relates to you personally, e.g. name, address, email addresses and user behaviour.

(2)     The responsible entity (referred as the ‘controller’) according to Article 4 (7) of the General Data Protection Regulation (GDPR) is Helix Mainz GmbH & Co. KG, Heuerstrasse 6, 55129 Mainz, info@helix-mainz.de. You can contact our data protection officer by emailing
datenschutz@helix-mainz.de or by post, addressing your communication to ‘The Data Protection Officer’ (der Datenschutzbeauftragte).

(3)     Where you contact us via email or using the contact form on our website, we store the data you supply (your email address and possibly your name and telephone number) in order to answer your questions. When it is no longer necessary to store such data, we either delete the data provided in this context or restrict the processing thereof where a legal retention obligation applies.

(4)     Where we commission authorised service providers to provide certain aspects of our service, or wish to utilise your data for advertising purposes, we will inform you of the respective processes as described in detail below. We will also notify you of the defined criteria on the duration of storage.

§ 2     Your rights

(1)     

As regards your personal data, you have the right:

• to demand details of the personal data we process in line with Article 15 of the GDPR. In particular, you are entitled to demand information on the purposes of processing, the category of personal data, the categories of recipient to whom the personal data has been or will be disclosed, the envisaged duration of storage, the existence of your right to request rectification, deletion, restriction of processing or objection, the existence of your right to complain, the source of data where the data was not collected by ourselves and the existence of automated decision-making (including profiling) and any meaningful information on the details thereof;
• to demand the immediate rectification of incorrect or incomplete personal data held by us in accordance with Article 16 of the GDPR;
• to demand deletion, i.e. erasure, of your personal data stored by us according to Article 17 of the GDPR, unless processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims;
• to demand restricted processing of your personal data in line with Article 18 of the GDPR where you dispute the accuracy of the data, processing is unlawful and you oppose its deletion, we no longer require the data but you need the data for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Article 21 of the GDPR;
• to demand receipt of the personal data you supplied to us in a structured, commonly used and machine-readable format in line with Article 20 of the GDPR or the transmission of such data to another responsible agent;
• to notify us of the withdrawal of your consent at any time pursuant to Article 7 (3) of the GDPR. As a result, we will no longer be permitted to process your data on the basis of your consent, and
• a complaint will be lodged with a supervisory authority according to Article 77 of the GDPR. Generally, you will be able to complain to the supervisory authority of your habitual residence or workplace or that of our registered office.

(2)    Where your personal data is processed in pursuit of legitimate interests pursuant to Article 6 (1) sentence 1(f) of the GDPR, you shall have the right to object to the processing of your personal data in line with Article 21 of the GDPR, provided your particular situation provides reasons for this or your objection is against direct marketing. In the latter case, you have a general right of objection that we will implement without being notified of any particular situation.
If you wish to exercise your right of revocation or objection, simply send an email to datenschutz@helix-mainz.de.

§ 3     Collection of personal data when visiting our website

(1)     If you simply use our website for informative purposes, i.e. without registering or otherwise transmitting information, we will only collect the personal data transmitted to our server by your browser. If you wish to view our website, we need to collect the following data for technical reasons in order to display our website and ensure stability and security (legal basis is Article 6 (1) sentence 1(f) of the GDPR):

• IP address
• Date and time of enquiry
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (actual page)
• Access status/HTTP status code
• Quantity of data transferred
• Website from which the request originates
• Browser
• Operating system and interface
• Language and version of browser software

(2)     In addition to the aforementioned data, cookies will be stored on your computer when you use our website. Cookies are small text files stored on your hard drive via the browser you use, supplying certain information to the party setting the cookie (us in this case). Cookies cannot execute programs or put viruses on your computer; they simply serve to make our website more user-friendly and useful.

(3)     Use of cookies:
a)    This website uses the following types of cookie, the scope and function of which is described below:

• Transient cookies (see b)
• Persistent cookies (see c)

b)    Transient cookies are deleted automatically when you close your browser. These are generally session cookies. Session cookies store a so-called session ID, which assigns various queries from your browser to the joint session. These cookies enable your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
c)    Persistent cookies are automatically deleted after a set period that can vary according to the cookie. You can delete the cookies at any time via the security settings of your browser.
d)    You can configure your browser settings according to your wishes (for example, to accept third-party cookies or reject all cookies). Please be advised that you may not be able to use all functions on this website.

(4)    If you have any questions, we offer the possibility of contacting us using a form provided on the website. To use the contact form you must specify a valid email address and enter your name so that we know who is making the enquiry and are able to respond. Other details can be entered voluntarily.
Data is processed for the purpose of contacting us in line with Article 6 (1) sentence 1(a) of the GDPR on the basis of your voluntary consent. Personal data collected by ourselves through use of the contact form is automatically deleted as soon as your enquiry is complete.

§ 4    Updates and amendments to this data protection policy

This data protection policy is current as of June 2019. Development of our website, offers on the site and changing legal and official guidelines can necessitate amendment of the data protection policy. You can retrieve the current data protection policy on our website and print it out at any time by visiting helix-mainz.de/en/privacy-policy.