Privacy Policy

Scope

Winfried Bullinger informs you in this Privacy Policy about the processing of your personal data that takes place in the context of the use of this website.

Personal data is all data that relates to an identified or identifiable natural person, e.g., name, address and e-mail address. We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations that apply to us, in particular the EU General Data Protection Regulation (hereinafter “GDPR”).

Name and contact details of the controller

Responsible for the processing of your personal data (“controller”) is:

Winfried Bullinger

Kiefersfeldener Straße 4

81373 München

E-Mail: mail@winfried-bullinger.com

Personal data processed, purposes and legal bases of the processing, legitimate interests pursued by us and storage period

Informational use of my website

When using my website for information purposes only, we only process the personal data that your browser transmits to our server. We have no influence on this. The following information, which is technically necessary for us, is collected without your intervention and stored for a maximum period of 30 days and then automatically deleted:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • amount of data transferred in each case
  • Website from which the request originates
  • browser
  • Operating system and its interface
  • Language and version of the browser software.

The legal basis for the processing of the IP address is Art. 6 para. 1 lit. f) GDPR. It is not possible to draw any conclusions about your identity from the data collected and we do not do so. Our legitimate interest in data collection is to be seen in the following purposes:

  • Ensuring a smooth connection setup,
  • Ensuring a comfortable use of our website,
  • Analysing system security and stability and
  • Other administrative purposes.

Contacting me

Via my website, you can contact me by e-mail. We store and process the data you provide for the purpose of contacting me and processing your message (such as your name, your e-mail address, your request) based on our legitimate interests in enabling appropriate communication with you (legal basis is Art. 6 para. 1 lit. f) GDPR). If your message is aimed at the conclusion or performance of a contract with me, Art. 6 para. 1 lit. b) GDPR is the legal basis for the processing.

We store the data you send to me via E-Mail until the purpose for data storage no longer applies (e.g., after your message has been processed) or you re-quest us to delete it. Mandatory statutory provisions – in particular statutory retention periods – remain unaffected by this.

Recipients or categories of recipients, transfer of data to third countries

We use an external IT service provider to process your data. This provider has been carefully selected and commissioned by us, is bound by our instructions, and is regularly monitored.

We do not pass on your personal data to recipients based outside the European Union or the European Economic Area and do not plan to do so in the future.

Your rights

As a data subject (Art. 4 No. 1 GDPR), you have numerous rights vis-à-vis me, which I would like to inform you about below. Details can also be found in Articles 15 to 21 of the GDPR and Sections 32 to 37 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, “BDSG”).

To exercise these rights, please contact me.

Right to information / data access

You have the right to obtain information from us as to whether and which personal data we process about you. This also includes information on the duration and purpose for which we process your personal data, where the data originates and to which recipients or categories of recipients we transfer your personal data. In addition, we provide you with a copy of your personal data.

Right to rectification

You have the right to request that we correct any inaccurate or no longer accurate personal data about you without delay. You can also request that we complete your incomplete personal data. If this is required by law, we will also inform third parties of this correction if we have transferred your personal data to them.

Right to erasure („right to be forgotten“)

You have the right to request from us the erasure of your personal data without undue delay if one of the following conditions applies:

  • Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed, or the purpose has been achieved;
  • You withdraw your consent and there is no other legal basis for the processing;
  • You object to the processing and there are no overriding legitimate interests for the processing; where personal data are used for direct marketing purposes, a mere objection to the processing on your part is sufficient;
  • Your personal data were processed unlawfully;
  • The deletion of your personal data is necessary to fulfil a legal obligation under European Union law or the law of the Member States to which we are subject.

Please note that your right to erasure may be restricted by statutory provisions. These include in particular the restrictions listed in Article 17 GDPR and Section 35 BDSG.

Right to restriction of processing

You have the right to request that we restrict the processing of your personal data if one of the following conditions is met:

  • You contest the accuracy of your personal data for a period enabling us to verify the accuracy of the personal data;
  • The processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of your personal data instead;
  • We no longer need your personal data for the purposes for which they were processed, but you need them for the establishment, exercise or defence of legal claims; or
  • You have objected to processing as long as it has not yet been established whether our legitimate grounds override yours.

If you have obtained a restriction of processing in accordance with the above list, we will inform you before the restriction is revoked.

Right to withdraw your consent

You can withdraw your consent given to us at any time with effect for the future. Your withdrawal can be made in the form of an informal notice to my contact data stated. If you withdraw your consent, this will not affect the lawfulness of the data processing carried out up to that time.

Right to data portability

You have the right to receive personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to others. Details and restrictions can be found in Art. 20 GDPR. The exercise of this right does not affect your right to erasure.

Right to lodge a complaint with the supervisory authority

If you think that the processing of your data by us violates applicable data protection law, you have the right to lodge a complaint with one of the competent supervisory authorities.

Right to objection (Art. 21 GDPR)

In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation if we base this processing on legitimate interests in accordance with Art. 6 para. 1 f) GDPR. If you raise an objection, we will no longer process your personal data, except in two cases:

  • we can demonstrate compelling legitimate interests for the processing which override your interests, rights and freedoms, or
  • the processing serves the assertion, exercise or defence of legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your data for the purpose of such marketing. If you object to the processing of your data for direct marketing purposes, we will no longer use your personal data for this purpose.

Status 1st August 2024
Winfried Bullinger