- Name and address of the responsible person
- General information on data processing
- Provision of the website and creation of log files
- E-Mail contact and contact form
- Rights of the data subject
Here you can find our information on data processing. For the purpose of clarity and transparency, we have divided the explanations into individual sections.
- Name and address of the data controller
Responsible within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection provisions is:
Reveib UG (haftungsbeschränkt)
CEO Christian Biever
Phone +49 (0) 221-98655035
- General information on data processing
- Scope of the processing of personal dat
As a matter of principle, we collect and use personal data of our users only insofar as this is necessary for the provision of a functional website as well as our contents and services. The collection and use of our users' personal data regularly takes place with the user's consent. An exception applies in those cases in which it is not possible to obtain prior consent for actual reasons and/or the processing of the data is permitted by legal regulations.
- Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis for the processing.
- Storage period and deletion of data
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfilment of a contract.
- Provision of the website and creation of log files
3.1 Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
- Name of the retrieved file
- Date and time of the retrieval
- amount of data transferred
- Message about successful retrieval
- browser type and version
- Operating system used
- referrer URL (the previously visited page)
- the requesting provider
- the IP address of the user
This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
3.2 Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f GDPR.
3.3 Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes are also our legitimate interest in data processing according to Art. 6 Para. 1 lit. f GDPR.
3.4 Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, it is deleted after 7 days at the latest. An assignment of the calling client is then no longer possible.
- E-Mail contact option
4.1 Description and scope of data processing
There are various contact forms on our website which can be used for electronic contact. If a user makes use of this option, the data entered in the respective input mask is transmitted to us and stored. The data marked with * are mandatory fields
At the end of each contact form, there is also a note stating the legal basis on which the data is processed and a reference to this data protection declaration for further information.
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.
In this context, the data will not be passed on to third parties. The data will only be used for processing the conversation and, if necessary, for the subsequent mandate work.
4.2 Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR. In the event of consent by the user, Art. 6 para. 1 lit. a GDPR is the additional legal basis.
For data transmitted while sending an e-mail, the additional legal basis for processing is also Art. 6 (1) (f) GDPR.
4.3 Purpose of the data processing
The processing of personal data is solely for the purpose of processing the contact. This also constitutes the necessary legitimate interest in processing the data.
4.4 Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For personal data sent by e-mail or contact form, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
4.5 Possibility of objection and removal
The user has the option to revoke his or her consent to the processing of personal data at any time. In such a case, the conversation cannot be continued.
The objection can be made at any time informally to any contact option provided by us (also by post or telephone). You will find our contact options at the beginning of this data protection declaration.
All personal data stored while contacting us will be deleted in this case.
5.1 Description and scope of data processing
We offer to keep you up to date regularly via our newsletter and to inform you about special offers. To sign up for the newsletter, you can enter your e-mail address in our distribution list or write to us that you want to be included. You will then have to confirm your registration again (double opt-in procedure). We only use the data you send us for the purpose of sending the newsletter and do not pass it on to third parties for other purposes.
Our newsletter may contain so-called web beacons or tracking pixels to analyse your reading behaviour. Tracking pixels are extremely small image files that are integrated into the newsletter email and thus allow log file recording and log file analysis. When you open the newsletter e-mail, the tracking pixel is loaded from the server of the newsletter service and at the same time some information about you is transmitted, such as whether the e-mail was opened or the time of the call and the associated IP address. Both the respective web beacon/counting pixel and links in the email can be clearly assigned to the email address used for sending and can therefore (initially) allow a conclusion to be drawn about the respective newsletter recipient.
In this context, we already point out the anonymisation that takes place.
5.2 Legal basis for data processing
You must actively register for the newsletter. If the user has given his or her consent, Art. 6 (1) a GDPR is the relevant legal basis. The legal basis for processing the data is also Art. 6 (1) (b) GDPR.
For the data transmitted while sending an e-mail, the additional legal basis for the processing is also Art. 6 para. 1 lit. f GDPR.
5.3 Purpose of the processing
The purpose of the processing is first of all that we are allowed to provide you with news at all. The information from the web beacon/counting pixels also tells us whether an email was actually read and which links were clicked. This serves us to ensure the functionality and improvement of our newsletter.
These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR.
5.4 Duration of storage
The data is automatically anonymized immediately after collection and only stored in this way. A combination with other data does not take place. Identifiable data will therefore not be further processed or stored.
5.5 Possibility of objection and removal
The user has the possibility to revoke his consent to the processing of personal data at any time. In such a case, the sending of e-mails to the corresponding e-mail cannot be continued.
The objection can be made at any time informally to any contact option provided by us (in the newsletter itself, but also by post or telephone). You will find our contact options at the beginning of this data protection declaration.
6.1 Description and scope of data processing
We use the following cookies:
Purpose and stored Data
6.2 Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) lit. f GDPR.
The legal basis for the processing of personal data using additional cookies is Art. 6 para. 1 lit. a GDPR if the user has consented to this. Furthermore, Art. 6 para. 1 lit. f. GDPR is an additional legal basis.
6.3 Purpose of data processing
We require cookies for the following applications:
The user data collected through technically necessary cookies are not used to create user profiles.
For details on the respective purpose of the individual cookies, please refer to the table above.
6.4 Duration of storage, objection and removal options
- rights of the data subject
If personal data is processed by you, you are a data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the controller:
7.1 Right to information - Art. 15 GDPR
With the right of access, the data subject obtains comprehensive insight into the data concerning him or her and some other important criteria, such as the purposes of processing or the duration of storage. The exceptions to this right regulated in Section 34 BDSG apply.
7.2 Right of rectification - Art. 16 GDPR
The right to rectification includes the possibility for the data subject to have inaccurate personal data concerning him or her corrected.
7.3 Right to erasure - Art. 17 GDPR
The right to erasure includes the possibility for the data subject to have data deleted by the controller. However, this is only possible if the personal data concerning him or her are no longer necessary, are being processed unlawfully or if consent has been revoked in this regard. The exceptions to this right regulated in § 35 BDSG apply.
7.4 Right to restriction of processing - Art. 18 GDPR
The right to restriction of processing includes the possibility for the data subject to prevent further processing of personal data concerning him or her for the time being. A restriction occurs primarily during the examination phase of other rights exercised by the data subject.
7.5 Right to data portability - Art. 20 GDPR
The right to data portability includes the possibility for the data subject to receive personal data concerning him or her from the controller in a common, machine-readable format in order to have it forwarded to another controller, if necessary. However, according to Art. 20 (3) sentence 2 GDPR, this right is not available if the data processing serves the performance of public tasks.
7.6 Right to object - Art. 21 GDPR
The right to object includes the possibility for data subjects to object to the further processing of their personal data in a specific situation, insofar as this is justified by the performance of public tasks or public as well as private interests. The exceptions to this right regulated in Section 36 BDSG apply.
7.7 Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out based on the consent until the revocation.
7.8 Automated decision-making in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects vis-à-vis you or similarly significantly affects you. This does not apply if the decision
- is necessary for the conclusion or performance of a contract between you and the controller,
- is permissible on the basis of legal provisions of the Union or the Member States to which the controller is subject and these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests, or
- is made with your express consent.
However, these decisions must not be based on special categories of personal data pursuant to Art. 9(1) of the GDPR, unless Art. 9(2)(a) or (g) applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
With regard to the cases referred to in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, to express your point of view and to contest the decision.
7.9 Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.