Privacy notice

1. Collection and Use of Personal Data

This privacy notice informs you about the collection of personal data when you use our website. Personal data means any information that identifies you or can be used to identify you, e.g. name, address, e-mail addresses, user behaviour.

The controller pursuant to Article 4 (7) General Data Protection Regulation (GDPR) is

Blitzen GmbH
Tempelhofer Ufer 23-24
10963 Berlin

Telefon: +49 30 747 411 000
E-Mail: datenschutz@blitzen.de

Our DPO (data protection officer) is:

Maak Roberts
LEROIL Datenschutz
Holzmarktstr. 25, 10243 Berlin

E-Mail: ro@leroil.de

If, to provide individual functions of our offer, we make use of any contracted service providers or if we wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify criteria for how long we store your data.

2. Your rights

You are entitled to the following rights towards us regarding your personal data:

To exercise your rights, you may contact the controller or the Data Protection Officer, using the above contact details.

You also have the right to complain to the data protection supervisory authorities about our processing of your personal data.

3. Objection against the processing of your data or withdrawal of consent

If you have consented to the processing of your data, you may withdraw such consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Where we base the processing of your personal data on the balancing of interests, you may object to such processing. This is the case if said processing is not required for fulfilling a contract to which you are a party, but for other purposes, details of which we will provide in the description of those processes below. When exercising such an objection, we ask you to give the reasons why we should not process your personal data in the manner we intend. In the event of your justified objection, we will examine the situation and either cease to process your data, or adjust data processing, or point out to you our compelling legitimate grounds for continuing to process your data.

4. Obligation to provide personal data

You are not obliged to provide the personal data collected on this website. There is no legal, contractual or other obligation, nor is the provision of your personal data required to conclude a contract. Insofar as the data collection is required for a faultless display of this website, data are collected automatically during buildup of the website or after you have provided your consent.

5. Collection of personal data when you visit our website

When you visit our website for information purposes only, i.e. if you do not register or otherwise provide information to us, we only collect the personal data that your browser transmits to our server. When you visit our website we will collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (the legal basis being Article 6 (1) f GDPR):

We store these data in a so-called log file for a period of 7 days, after which the data will be deleted.

This website is hosted by an external hosting provider. The personal data collected on this website are stored on the hosting provider's servers. We use Host Europe as our hosting provider. To ensure data processing compliant with data protection laws, we have concluded a data processing agreement according to Article 28 GDPR with them.

6. Cookies and local storage

In addition to the aforementioned data, cookies are stored on your computer when you visit our website. Cookies are small text files that your browser stores on your hard drive which transmit certain information back to the party that has set the cookie (in this case, us). Cookies cannot run programs or transfer viruses to your computer. They serve to make the internet offer as a whole more user-friendly and effective.

Storage of the cookie specified below, which is required for this website to properly function, is based upon the exception according to § 25 Abs. 2 Nr. 2 TDDDG.

This cookie will be deleted automatically as specified below. You may also delete it at any time in the privacy settings of your browser.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. However, if you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

Name

Provider

Purpose

Duration

october_session

Blitzen

Preserves the visitor's session state across page requests.

session


7. Contacting us

When you contact us by e-mail, we will store the data you provide (your name, e-mail address and message) in order to answer your query. Once storage is no longer required, we will delete all data collected with regard to your query or will restrict processing if statutory retention obligations exist.

We process these data to respond to your request. Said processing is based on a contractual basis (Article 6 (1) b GDPR) for questions by our customers or prospective customers. With regards to any other queries, processing takes place for the purposes of our legitimate interests (Article 6 (1) f GDPR), as it enables us to communicate with website visitors and interested parties.

8. Social media profiles

General information on data processing in connection with our profiles on social media

We use our profiles on the social networks Instagram, Vimeo, Xing and LinkedIn to provide information about our company and the services we offer. And, of course, to get in touch and communicate with users of the social networks.

Please note that user personal data may be processed outside the European Union. This can result in risks for the users, for instance enforcing the users' rights might be more difficult.

If you leave us messages or comment on these profiles, we process your personal data to communicate with you. This represents a legitimate interest; the legal basis is art. 6 (1) 1 lit f GDPR. No further storage of communication data takes place outside these networks on our part.

The terms and conditions of the operators of these platforms apply. Be aware that we cannot provide further information as to any personal data processed by these operators during your visit to the above networks. We kindly ask you to refer directly to the information provided by these platforms and have included links to privacy policies or other relevant information below.

Should you have any requests for information or would like to assert your data subject rights, we would like to point out that these can most effectively be asserted with the providers. Only they have access to their users’ data and can take appropriate measures and provide information directly. Of course you may contact us anytime if you require assistance.

Instagram

Details of the provider: Meta Platforms Ireland Ltd („Meta“), 4, Grand Canal Quay, Grand Canal Bridge, Dublin 2, Ireland.

Privacy notice: https://www.facebook.com/privacy/policy/

Vimeo

Details of the provider: Vimeo.com, Inc., 555 West 18th Street, New York, New York 10011, USA.

Privacy notice: https://vimeo.com/privacy

Xing

Details of the provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

Privacy notice: https://privacy.xing.com/en/privacy-policy

About our LinkedIn profile

We are jointly responsible with LinkedIn for the collection of the personal data of visitors to our LinkedIn profile – but not for any further processing by LinkedIn. We have concluded a joint control agreement with LinkedIn, which is available here: https://legal.linkedin.com/pages-joint-controller-...

LinkedIn has agreed to take care of data subjects’ rights. Users may, for example, send information or deletion requests directly to LinkedIn. However, your rights as data subjects (especially to information, deletion, objection and complaints to the competent supervisory authority) are not restricted in any way by our agreements with LinkedIn.

You may view the LinkedIn privacy notice here https://www.linkedin.com/legal/privacy-policy

Details of the provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.