Data & Privacy Policy

1. Overview of data protection

This overview explains what happens to your personal data when you visit this website. Personal data means any data that can be used to personally identify you.

Data recording on this website

The website operator is responsible for data processing. You can find the contact details under "Information about the responsible party (controller)" below.

Data is collected when you provide it to us, for example by contacting us via e-mail or a contact form (if provided). Other data is collected automatically or after your consent when visiting the website. This mainly consists of technical data such as browser type and version, operating system and time of page access and is collected as soon as you enter this website by our hosting provider's systems.

We use this data to ensure error-free and secure provision of the website, to respond to enquiries and to improve the content and presentation of our pages.

You have the right to receive information about the origin, recipients and purpose of your stored personal data at any time free of charge. You also have the right to request rectification or deletion of this data, to revoke consent with effect for the future, to request restriction of processing in certain circumstances and to lodge a complaint with the competent supervisory authority. You can contact us at any time using the details in the imprint or in this policy regarding this and any other questions about data protection.

2. Hosting with Firebase (Google)

Firebase Hosting / Google Cloud Platform

We host our website on Firebase Hosting, a service provided by Google. Depending on configuration, processing may be carried out by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and/or Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We currently use infrastructure with a backend located in the USA. This means that when you visit our website, some of your personal data (in particular technical data and server log data such as IP address, browser information and access times) may be processed on servers in the United States.

Legal basis

We use Firebase Hosting based on Art. 6(1)(f) GDPR. We have a legitimate interest in the technically reliable, fast and secure provision of our website. Where required, data transfer to third countries takes place on the basis of standard contractual clauses or other safeguards recognized under Art. 46 GDPR.

Data processing agreement (DPA)

We have concluded a data processing agreement with Google for the use of Firebase. This contract ensures that Google processes personal data of website visitors only on our instructions and in compliance with the GDPR.

3. General information and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this policy. When you use this website, various personal data are collected. This policy explains which data we collect and what we use it for, as well as how and for what purpose data are processed. We point out that data transmission via the internet (e.g. by e-mail) can have security gaps. Complete protection from access by third parties is not possible.

Information about the responsible party (controller)

Ludwig Schneider

Pelagia Solutions

Zittauer Straße 27

99091 Erfurt

Germany

Phone: 034603 134971

E-mail: info@pelagia.solutions

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

Storage duration

Unless a more specific storage period is mentioned, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we are legally obliged or entitled to continue storing it (e.g. due to tax or commercial law retention periods). In such a case, deletion will take place after these periods have expired.

Legal bases for data processing

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR and, where special categories of data are concerned, on the basis of Art. 9(2)(a) GDPR. If your data is required for the performance of a contract or for the implementation of precontractual measures (e.g. enquiries regarding our services), we process your data on the basis of Art. 6(1)(b) GDPR. If data processing is necessary for compliance with a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR (e.g. for secure operation of the website, defence against misuse and optimization of our online presence). The specific legal basis for individual processing operations is explained in the corresponding sections of this policy.

Recipients of personal data

In the course of our business activities, we work with various external service providers (e.g. hosting providers, IT service providers). Personal data are only passed on to third parties if this is necessary for the performance of a contract, if there is a legal obligation, if we have a legitimate interest in the transfer pursuant to Art. 6(1)(f) GDPR or if you have given your consent. Where we use data processors, processing is based on a contract for data processing in accordance with Art. 28 GDPR.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. The lawfulness of the data processing carried out up to the time of revocation remains unaffected.

Right to object to processing in special cases and to direct marketing (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data, including profiling based on those provisions. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (Art. 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing, including profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (Art. 21(2) GDPR).

Right to lodge a complaint with a supervisory authority

In the event of a breach of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process on the basis of your consent or in performance of a contract transmitted to you or a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where technically feasible.

Right of access, rectification and erasure

Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, their origin and recipients and the purpose of the data processing and, where appropriate, a right to rectification or erasure of this data. You can contact us at any time using the details above for this purpose.

Right to restriction of processing

You have the right to request the restriction of processing of your personal data:

  • If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request restriction of processing.
  • If the processing of your personal data is unlawful, you may request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you require it for the establishment, exercise or defence of legal claims, you have the right to request restriction of processing instead of deletion.
  • If you have objected pursuant to Art. 21(1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not been determined whose interests prevail, you have the right to request restriction of processing.

If processing has been restricted, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important public interest reasons.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the website operator, this site uses SSL/TLS encryption. An encrypted connection can be recognized by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL/TLS encryption is activated, data you transmit to us cannot be read by third parties.

Rejection of unsolicited e-mails

We object to the use of contact data published in the context of imprint obligations to send unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example by spam e-mails.

4. Recording of data on this website

Cookies

Our marketing website is currently designed without the use of cookies or similar tracking technologies. We do not use analytics, advertising cookies or third-party tracking tools on this website.

If we introduce cookies or similar technologies in the future that are not strictly necessary for the operation of the site, we will update this policy accordingly and, where required, obtain your prior consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG.

Server log files

When you visit our website, your browser automatically transmits information to our server (operated on Firebase Hosting / Google Cloud). This information is temporarily stored in so-called server log files. The following data may be collected:

  • Browser type and browser version
  • Operating system used
  • Referrer URL (previously visited page)
  • Host name of the accessing computer
  • Date and time of the server request
  • IP address

This data is not merged with data from other sources in a way which allows us to identify you directly.

Legal basis: The collection and storage of these log data is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and optimization of our website and in maintaining the security and integrity of our systems.

Contact by e-mail or contact form

If you contact us (e.g. via e-mail or via a contact form on the website), the data you provide (e.g. name, e-mail address, telephone number and the content of your message) will be stored and processed by us for the purpose of handling your enquiry and any follow-up questions. We do not use this information to automatically add you to mailing lists or for unrelated marketing without your separate consent.

Legal basis: The processing of these data is based on Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or necessary for the implementation of precontractual measures. In all other cases, the processing is based on our legitimate interest in efficiently handling enquiries directed to us (Art. 6(1)(f) GDPR).