Privacy policy

1. Information about the collection of personal data and contact details of the controller

1.1 With this data privacy policy we would like to inform you about how we, ama-X; Owner: Manuel Kretschmer, process personal data. We are aware of the importance of processing personal data for the user and accordingly observe all relevant legal requirements. In doing so, the protection of your privacy is of the highest importance to us. Therefore, compliance with the legal provisions on data protection is a matter of course for us. Personal data in the sense of the GDPR are any information about personal and factual circumstances relating to an identified or identifiable natural person. This includes information and details such as your name, address or other postal address, telephone number or even your e-mail address.

1.2 Contact and controller in the sense of the GDPR is:

ama-X
Owner: Manuel Kretschmer
Viktualienmarkt 8
80331 München
privacy@ama-x.com

By definition, a controller within the meaning of the GDPR is the natural or legal person, which, alone or jointly with others, determines the purposes and means of the processing of personal data.

2. What personal data do we collect when you visit our website?

2.1 Logfiles

a) Form and purpose of data processing

Each time our website is accessed, usage data are transmitted by the respective Internet browser and stored in log files, the so-called server log files. The data records stored in this process contain the following data:

• Domain from which the user accesses the website
• Date and time of the access
• IP address of the accessing computer
• Website(s) visited by the user within the scope of the offer
• Amount of data transferred, browser type and version
• Operating system used Name of the Internet service provider
• Service-Message as to whether the retrieval was successful

These log file data records are evaluated in anonymized form in order to improve the offer and make it more user-friendly, to find and correct errors and to control the utilization of servers. An evaluation of your personal data does not take place in this context.

b) Legal basis of data processing

The legal basis for the processing of your personal data in the context of providing the website and creating log files is our legitimate interest – Art. 6(1)(1) lit. f) of the GDPR – in improving the stability and functionality of our website and its fraud protection.  

c) Period of storage

Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of your personal data for the provision of the website, this is the case as soon as the respective session has ended.

In the case of storage of your personal data in log files, these are deleted after seven days at the latest. Storage beyond this period is possible. In this case, your personal data will be deleted or alienated so that an assignment of the calling client is no longer possible.

d) Possibility of objection and erasure

The collection of your personal data for the provision of the website and the storage of your personal data in log files is mandatory for the operation of the website. Therefore, there is no possibility to object.

2.2 Cookies

a) Form and purpose of data processing

Cookies are small text files that your browser stores on your device in a designated directory. These cookies can be used, for example, to determine whether you have visited a website before. A distinction is made between session cookies and persistent cookies. Session cookies are deleted immediately after closing the browser. Persistent cookies remain on your device for different periods of time and allow us or partner companies (partner cookies) to identify your browser the next time you visit.

In some cases, cookies serve to simplify the use of the website – the so-called necessary cookies. Some functions of our website could not be offered without them. The user data collected by technically necessary cookies are not used to create user profiles.

Other cookies, e.g. our partner cookies, are used to make the offer more attractive for you. If we cooperate with aforementioned partner companies, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the paragraphs below.

Detailed information on the individual cookies is provided below in this privacy policy.

b) Legal basis of data processing

If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) lit. a) oft the GDPR – your consent. This consent is requested via our cookie tool, which is called when entering the website. You can revoke your consent at any time with effect for the future by changing your preferences via the Cookie Tool.

c) Period of storage

Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is particularly the case when cookies are deactivated. Session cookies, as mentioned above, are deleted directly after closing the browser.

d) Possibility of objection and erasure

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored or explicit consent is required before a cookie is stored. You can also delete cookies that have already been set at any time.

You can currently find your respective browser settings at the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Another option for deactivating cookies with regard to usage-based advertising is provided by the preference manager YourOnlineChoices preference management, www.youronlinechoices.com/de/praferenzmanagement/

Please note that disabling cookies may lead to limitations in the use of our website.

2.3 Contact us

a) Form and purpose of data processing

If you would like to contact us, you are welcome to do so via the options provided on the website (for example, via the contact form or by e-mail). When you contact us, the data you provide will be processed and forwarded by us to Pipedrive. Pipedrive is our customer relationship management system (“CRM”) from the service provider Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia (“Pipedrive”) into which we can enter your provided data and increase the efficiency of processing our customer inquiries. Pipedrive will process this data on our behalf. For this purpose, we have concluded a contract with Pipedrive with so-called standard contractual clauses, in which Pipedrive undertakes to process the user data only in accordance with our instructions and to comply with the EU data protection level. With Pipedrive US, the parent company of Pipedrive, we have also concluded so-called standard contractual clauses to ensure a secure level of data protection.

When contacting us, we will only process your data for the purpose of answering your inquiry and store and use it for the related necessary technical administration.

b) Legal basis of data processing

The legal basis for the processing of your personal data in the context of contacting us is our legitimate interest to answer your inquiry according to Art. 6(1)(1) lit. f) of the GDPR. If your contact aims at the conclusion of a contract, the legal basis is Art. 6(1)(1) lit. b) of the GDPR.

c) Period of storage

Your data will be deleted after final processing of your request. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

d) Possibility of objection and erasure

You have the right to object at any time for the future to the processing of your personal data in the context of contacting us via the contact form or by e-mail. In such a case, the conversation between you and us cannot be continued. All personal data stored in the course of contacting you will be deleted in this case.

3. Our cookies used

4. Your Rights

Under applicable data protection law, you have comprehensive data subject rights with respect to us, the controller, regarding the processing of your personal data.

We would like to inform you about these rights below:

Right to withdraw consent given in accordance with Art. 7 (3) GDPR:

If you have consented to us processing your personal data, you have the right to withdraw your consent to the processing of personal data at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned, unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right of Access according to Art. 15 DSGVO:
You have the right to information about whether and which of your personal data we process. In addition, you can request information from us about the purposes for which we process this, which categories of personal data are processed in the process and to which recipients or categories of recipients we have disclosed your data, how long we intend to store your data and/or according to which criteria we have determined how long this data is stored.

In addition, we will be happy to inform you whether you have a right to rectification, whether processing can be restricted, how and where you can lodge a complaint against the processing of your personal data, where we got your data from if it was not collected by us, whether automated decision-making (so-called profiling) is used and, if so, what logic is used in the process and what the implications are for you. In addition, we will be happy to inform you about the guarantees according to Art. 46 GDPR when your data is forwarded to third countries.

Right to rectification according to Art. 16 GDPR:
You have the right that we correct and / or complete your data stored by us without delay.

Right to erasure according to Art. 17 GDPR:
You have the right to request the deletion of your data if the conditions of Art. 17 (1) GDPR are met. This is the case if

• The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• You revoke your previously given consent to processing and there is no other legal basis for processing;
• you object to the processing;
• Your personal data are processed unlawfully;
• The erasure of the data is necessary for compliance with a legal obligation under Union or Member State law to which we, the controller, are subject;
• The personal data has been collected in relation to information society services offered in accordance with Art. 8 (1) GDPR.

In this regard, please note that this right does not exist if

Processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

Right to restriction of processing according to Art. 18 GDPR:
You have the right to restrict the processing of your personal data by us if

• You dispute the accuracy of your personal data and in doing so give us enough time to verify this;
• The processing is unlawful and you request the restriction of processing instead of erasure;
• We no longer need your personal data for the purposes of processing but you need it to defend legal claims;
• You object to the processing and the data was previously processed on the basis of our legitimate interest or the processing was entrusted to us on the basis of the performance of a task carried out in the public interest or in the exercise of official authority. In this case, the right to restriction of processing applies until it is determined whether your interests prevail.

If you invoke one of these grounds, we will only process your personal data with your consent or if necessary for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If we should lift this restriction on processing, we will inform you of this beforehand.

Right to information pursuant to Art. 19 GDPR:

If you have asserted the right to rectification, erasure or restriction of processing against us, we will inform other recipients of your data about this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort for us.

In this case, you may request that we inform you about these recipients.

Right to data portability according to Art. 20 GDPR:

You have the right to receive your personal data, which you have provided to us, in a common and machine-readable format or to request the transfer to another responsible party. This only applies if the technical feasibility for this exists.

Right to lodge a complaint pursuant to Art. 77 GDPR:

If you assume that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority.

In our case, you can do this, for example, at the Bavarian State Office for Data Security: https://www.lda.bayern.de/de/index.html

Right of objection according to Art. 21 GDPR:

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which was carried out on the basis of our legitimate interest or where the processing was entrusted to us for the performance of a task carried out in the public interest or in the exercise of official authority; this also applies to profiling based on the provisions of the GDPR.

If you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to processing of your personal data for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object by means of automated procedures using technical specifications.

5. Other

We have taken extensive technical and organizational measures to protect your data against possible dangers, such as unauthorized access, unauthorized disclosure, modification or dissemination, as well as against loss, destruction or misuse.

To protect your personal data from unauthorized access by third parties during transmission, we secure data transmissions using SSL encryption where necessary. This is a standardized encryption method for online services, especially for the web.

State of this privacy policy

07.03.2022

‍