Privacy policy

We respect your personal data!

Below, we describe how personal data is processed in connection with our websites, functions and content, as well as external offerings (such as social media). We also describe what types of personal data are processed, to what extent and for what purpose.

1. Name and address of the controller

   The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is:
   Spix e.V.
   Kaiserring 16
   D-46483 Wesel
   Management: Klaas Wagner
   If you have any questions about this privacy policy, please contact k.wagner@spix-ev.de.

2. General information on data processing

   1. Scope of processing personal data
      When you contact us as a customer or prospective customer, we collect personal data. This occurs when you express interest in our products, register for our checklists or newsletters, contact us by email or telephone, or when you use our products and services within the scope of existing business relationships.
      In these contexts, we process personal data, first and last name, address, email address, telephone number.
      In addition, we process contract data (e.g. subject matter of the contract, term, customer category) and payment data (e.g. bank details, payment history) of our customers, interested parties and business partners for the purpose of providing contractual services and for service and customer care purposes.
      In addition, we process the following personal data for marketing and advertising purposes: none.
   2. Legal basis for the processing of personal data
      If the processing of personal data is based on the consent of the data subject, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. If personal data is processed in order to fulfil a contract with the data subject, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. If we process personal data in order to fulfil a legal obligation, Art. 6(1)(c) GDPR serves as the legal basis. If vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis. If we process data to safeguard the legitimate interests of our company or a third party and the interests, fundamental rights and freedoms of the data subject are not overriding, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
   3. Cooperation with processors and third parties
      If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transfer it to them or grant them access to the data, this will only be done on the basis of a legal permission (e.g. a transfer to payment service providers necessary for the performance of a contract in accordance with Art. 6 para. 1 lit. b GDPR), consent, a legal obligation or on the basis of our legitimate interests (e.g. when using agents, web hosts). If we commission third parties to process data on the basis of a so-called ‘data processing agreement’, this is done on the basis of Art. 28 GDPR.
   4. Transfers to third countries
      If we process data in a third country (i.e. outside the European Union or the European Economic Area) or if this occurs in the context of using third-party services, this will only take place if it is necessary to fulfil our (pre-)contractual obligations, on the basis of consent, due to a legal obligation or on the basis of our legitimate interests. We only process data subject to legal or contractual permissions if the requirements of Art. 44 et seq. GDPR are met: Data is therefore only processed if, for example, special guarantees are in place, such as official recognition of a level of data protection equivalent to that of the EU (e.g. ‘Privacy Shield’) or compliance with officially recognised contractual obligations (so-called standard contractual clauses).
   5. Data deletion and storage period
      As soon as the purpose of storage no longer applies, the personal data of a data subject is deleted or its processing is restricted (‘blocked’). If European or national regulations, laws or other provisions to which we are subject require longer storage, the personal data will be stored for longer than originally intended in accordance with these legal provisions.
   6. Data deletion upon revocation
      All data collected up to the point of revocation will be deleted immediately, unless a legal requirement necessitates its retention.

3. Rights of the data subject

   You have the right to information.
   You can obtain information from us about your stored data at any time (in accordance with Art. 15 GDPR).
   You have the right to rectification.
   You may request the correction of your data (in accordance with Art. 16 GDPR).
   You have the right to erasure.
   You may request the erasure (in accordance with Article 17 of the GDPR) or restriction of processing of your data (in accordance with Article 18 of the GDPR).
   You have the right to data portability.
   You may receive personal data that you have provided to us in a transferable format (in accordance with Art. 20 GDPR).
   You have the right to lodge a complaint.
   You have the right to lodge a complaint with the competent supervisory authority (in accordance with Art. 77 GDPR).

4. Data collection on our website

   1. Servers and log files
      Our hosting provider collects the following information for statistical analysis: your computer's IP address at the time of access, date, time, content accessed, the page from which you accessed our homepage, operating system and browser.
   2. Mail
      On our website, you will find one or more email addresses that you can use to contact us. We store the personal data transmitted with the email. We only process the data for the purpose of contacting you. The following data is collected: email address, company, title, surname, first name, telephone number and reason for contacting us. The legal basis for processing the data you send us by email is a (pre)contractual obligation or your consent by sending your data for the purpose of contacting us. You can revoke this consent at any time with future effect (informally by email or post).

5. Cookies

   Cookies are text files that are sent to your computer when you use websites in order to recognise it. Cookies are used to facilitate the use of websites and to personalise them. You can set your web browser to notify you when cookies are transmitted or to reject cookies. You can find information on this in the help function of your web browser (e.g. Firefox, Internet Explorer or Safari).
   Our website uses cookies.

6. Social Media

   Online presence on social media
   We maintain online presences on social networks and platforms in order to communicate with participants in the Netzkraft movement, interested parties and users and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of the respective operators apply.

   Our website does not contain any plugins, only links to Facebook, over whose content we have no influence. The respective provider or operator of the linked pages is always responsible for their content. When visiting these pages, Facebook's privacy policy applies.

7. Third-party services, tools and content

   We do not use any third-party services or tools.

8. Contact the Data Protection Officer

   Our company does not have a data protection officer.