Status: November 2020
Name and address of the person responsible:
Thomas Otte
Gottorpstraße 19a
26122 Oldenburg
Phone 0441 / 36 137 268
Cell phone 0160 / 97 20 73 09
As the operator and therefore also the person responsible (see also Imprint) for this website, the protection of your personal data is very important to me. I treat your personal data as strictly confidential and in accordance with the statutory data protection regulations and the following privacy policy.
When you visit my website, various personal data is collected. Personal data is data with which you can be personally identified. The following privacy policy, which I am legally obliged to provide, informs you about what data I collect, the scope and what I use it for. It also explains how and for what purpose this is done. In addition, my privacy policy contains information about storage duration and data deletion, transfers to third countries, hosting, cookies, blog with comment function, e-mail contact and external links. You will also be informed about your rights as a data subject and about the legal basis of my data collection.
To give you a good feel for this, I would first like to give you an overview of my data processing. If you have any further questions, you can get in touch with us. However, I would like to point out that unencrypted e-mails sent via the Internet are not adequately protected against unauthorized access by third parties. Complete protection of data against access by third parties is not possible.
In order for the websites to be displayed in your browser, the IP address must be collected and stored. As a rule, an IP address is currently assigned dynamically by your provider, i.e. the IP address changes regularly, so that I myself cannot establish a personal reference from the IP address. I also have no interest in establishing a personal reference and will not do so as a matter of principle. Specifically, the following data record is stored each time your device (computer, tablet, smartphone, etc.) accesses my website:
The following data is collected:
- The user's operating system
- The IP address of the user
- Date and time of access
- Websites from which the user's system accesses my website
- Websites that are accessed by the user's system via my website
The stored data is only evaluated for statistical purposes and not to establish a specific personal reference. The data is also used to enable errors to be rectified. IP addresses are anonymized and deleted immediately, at the latest after 72 hours. Once the IP addresses have been deleted, it is no longer possible for me to establish any personal reference from this data.
My website uses so-called session cookies, which are automatically deleted after the session. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. I use cookies to make my website more user-friendly. Some elements of my website require that the accessing browser can be identified even after a page change. The following data is stored and transmitted in the cookies:
A randomly generated character string for identification
The user data collected in this way is anonymized by technical precautions. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the user. When accessing my website, users are informed by an info banner about the use of cookies for analysis purposes and referred to the following privacy policy. In this context, there is also a note on how the storage of cookies can be prevented in the browser settings. Some functions of my website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change.
On my website, you have the option of submitting a comment via an electronically encrypted contact form. If you send me an e-mail, it will be stored by me until your request has been dealt with or until any statutory retention obligations have expired. I will ensure that the data is stored securely to prevent unauthorized access by third parties.
Data will not be transferred to countries outside the EU. Insofar as external links are set up in the future, the responsibility always lies with the respective operator and the provisions of the respective data protection declarations of the external sites apply.
"The right to be forgotten (erasure), the right to be informed, the right to data portability, the right to object, the right to withdraw consent under data protection law, the right to automated decision-making in individual cases, including profiling, and the right to lodge a complaint with a supervisory authority. The competent supervisory authority for data protection issues is the data protection officer of the federal state of Lower Saxony. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Info-thek/Anschriften_Links/anschriften_links-node.html.
Due to the protection of minors, persons under the age of 18 should not transmit any personal data to me without the consent of their parents or legal guardians. The use of contact data published in the context of the imprint obligation for sending unsolicited advertising and information materials is hereby rejected. I will update my privacy policy in the event of changes to my website or other reasons that make this necessary. You will always find the current version on this website.
If you have any further questions about my privacy policy, you can also contact me via get in touch with me.
Blog with comment function, e-mail contact
Description and scope of data processing
There is a blog with a comment function on my website, which can be used for electronic encrypted contact. If a user makes use of this option, the data entered in the input mask will be transmitted to me and stored. These data are
- Surname, first name
- Contact details (if specified)
The following data is also stored at the time the message is sent:
- The IP address of the user
- Date and time of registration
Your consent will be obtained in advance for the processing of the data and reference will be made to this privacy policy. Alternatively, you can contact us via the encrypted e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation. The blog on this website: For the blog function on this site, in addition to your comment, information about the time the comment was created, your e-mail address and, if you are not posting anonymously, the username you have chosen will be stored. My comment function stores the IP addresses of users who post comments. As we do not check comments on our site before they are activated, we need this data in order to be able to take action against the author in the event of legal violations such as insults or propaganda. As a user of the site, you can subscribe to comments after registering. You will receive a confirmation email to check whether you are the owner of the email address provided. You can unsubscribe from this function at any time via a link in the info mails. The data entered when subscribing to comments will be deleted in this case; however, if you have transmitted this data to us for other purposes and elsewhere, it will remain with me.
The comments and the associated data (e.g. IP address) are stored and remain on my website until the commented content has been completely deleted or the comments must be deleted for legal reasons (e.g. offensive comments). The comments are stored on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. All you need to do is send me an informal email. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
The exact legal bases and where they can be found are listed below for the interested reader:
Rights of the data subject:
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
1. right to information Art. 15 GDPR
You can request confirmation from the controller as to whether personal data concerning you is being processed by us. If such processing is taking place, you can request the following information from the controller:
- the purposes for which the personal data are processed;
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
- the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the duration of storage;
- the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
- the existence of a right of appeal to a supervisory authority;
- all available information about the origin of the data if the personal data is not collected from the data subject;
- the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
2. right to rectification Art. 16 GDPR
You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the correction without delay.
3. right to restriction of processing Art. 18 GDPR
Under the following conditions, you may request the restriction of the processing of personal data concerning you:
- if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
- the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims, or
- if you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds. If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
4. right to erasure ("right to be forgotten") Art. 17 GDPR
a) Obligation to delete
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
- The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
- You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
- You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
- The personal data concerning you has been processed unlawfully.
- The deletion of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
- The personal data concerning you was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.
b) Information to third parties
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) GDPR, it shall take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
c) Exceptions
The right to erasure does not exist if the processing is necessary
- to exercise the right to freedom of expression and information;
- for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or5. for the establishment, exercise or defense of legal claims.
5. right to information and notification obligation in connection with the rectification or erasure of personal data or the restriction of processing Art. 19 GDPR
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right vis-à-vis the controller to be informed about these recipients.
6. right to data portability Art. 20 GDPR
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where
- the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
- the processing is carried out using automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be affected by this. The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. right of objection Art. 21 GDPR
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. You have the option, in connection with the use of information society services - notwithstanding Directive 2002/58/EC - to exercise your right to object by means of automated procedures that use technical specifications.
8. right to revoke the declaration of consent under data protection law.
You have the right to revoke your declaration of consent under data protection law at any time. To do so, please send an e-mail to . The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
9. automated decision-making in individual cases including profiling Art. 22 GDPR
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
- is necessary for the conclusion or performance of a contract between you and the controller,
- is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
- with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests. With regard to the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
10. right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR. The competent supervisory authority for data protection issues is the data protection officer of the federal state of Lower Saxony. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Info-thek/Anschriften_Links/anschriften_links-node.html.
