Privacy Policy

Controller

The controller within the meaning of data protection law, in particular the EU General Data Protection Regulation (GDPR), is:

Dr. Carsten Rohr
Trogerstr. 29
81675 Munich, Germany

Phone: +49 151 10679374
Email: mail@carstenrohr.de

Your Rights

You can exercise the following rights at any time using the contact details above:

  • Access to the data we hold about you and how we process it (Art. 15 GDPR),
  • Rectification of inaccurate personal data (Art. 16 GDPR),
  • Erasure of your data stored with us (Art. 17 GDPR),
  • Restriction of processing, where we are not yet allowed to delete your data because of legal obligations (Art. 18 GDPR),
  • Objection to the processing of your data (Art. 21 GDPR), and
  • Data portability, where you have consented to the processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us consent, you can withdraw it at any time with effect for the future.

You can lodge a complaint with a supervisory authority at any time. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany. You can also contact the supervisory authority of your place of residence. A list of supervisory authorities is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Data Processing

Hosting

This website runs on a server of STRATO GmbH, Pascalstraße 10, 10587 Berlin, Germany. Data is processed in data centers in Germany. We have a data processing agreement with STRATO under Art. 28 GDPR.

Collection of General Information When You Visit Our Website

Nature and purpose of processing

When you access our website, general information is collected automatically (server log files). This includes:

  • your IP address
  • date and time of the request
  • the URL requested
  • the page you came from (referrer)
  • browser identifier (browser and operating system)
  • the status code of the request

This data is processed for the following purposes:

  • Ensuring a trouble-free connection to the website
  • Ensuring smooth use of the website
  • Ensuring and evaluating system security and stability, in particular to detect misuse

We do not use this data to draw conclusions about you personally. We reserve the right to review the server log files afterwards if there are concrete indications of unlawful use.

Legal basis and legitimate interest

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the stability and functionality of our website, system security and misuse detection.

Recipients

The recipient is our hosting provider STRATO GmbH, acting as processor.

Storage period

Server log files are stored in a form that allows identification of the persons concerned for a maximum of 7 days. If a security-relevant event occurs (e.g. a DDoS attack), we store the log files until the event has been resolved and fully investigated.

Provision required or mandatory

Providing this data is neither required by law nor by contract. Without the IP address, however, the website cannot function.

Objection

See the information on your right to object under Art. 21 GDPR below.

Contacting Us

Nature and purpose of processing

Our website has a contact form. If you use it, the data you enter (name, email address, message) is sent by email to our mailbox and stored there. The website has no database. The date and time of receipt are stored with the email.

To protect against misuse (spam), the form uses a hidden field, a minimum completion time and a daily limit per IP address. For this, your IP address is held briefly in the server's working memory. It is not stored permanently. The token with a timestamp used for this contains no personal data.

You can also contact us by email. In that case, the data you send is stored. This includes the date and time of sending, your email address, IP addresses and information about the mail servers involved.

If you call us, our mobile phone stores your phone number and the duration of the call.

Regardless of how you contact us, we store the content of your request for the purpose of communicating with you.

Legal basis

Processing is based on our legitimate interest in easy contact (Art. 6(1)(f) GDPR). If you request an offer, processing serves to carry out pre-contractual measures (Art. 6(1)(b) GDPR).

Recipients

The recipient is our hosting provider STRATO GmbH, acting as processor. We run the mailbox and mail dispatch on our own server at STRATO.

Storage period

We store requests for a maximum of six months. If a contract is concluded, statutory retention periods apply. These are generally 6 or 10 years (proper bookkeeping, tax law).

Provision required or mandatory

Providing your data is voluntary. However, we can only process your request if you give us the necessary data and the reason for your request.

Objection

See the information on your right to object under Art. 21 GDPR below.

Embedded YouTube Videos

On some pages we show videos from YouTube. At first you only see a preview image from our server. No data is sent to YouTube when the page loads. Only when you click the preview image does your browser load the video from youtube-nocookie.com (enhanced privacy mode). Your IP address and device data are then sent to Google Ireland Limited. A transfer to Google LLC in the USA is possible.

The legal basis is your consent by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent with effect for the future by reloading the page and not playing the video. Information from Google: https://policies.google.com/privacy

External Links

Our website links to external sites (LinkedIn, Xing, wup.info, carstenrohr.net, givingwhatwecan.org). No data is sent to these providers when you visit our pages. You leave our website only when you click a link. The respective operators are responsible for data processing on their sites.

Information on Your Right to Object under Art. 21 GDPR

Right to object in individual cases

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(f) GDPR (balancing of interests). This also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.

If you object, we will no longer process your personal data. Exceptions: we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Recipient of an objection

Dr. Carsten Rohr
Trogerstr. 29
81675 Munich, Germany
Email: mail@carstenrohr.de
Phone: +49 151 10679374

Changes to This Privacy Policy

We reserve the right to amend this privacy policy so that it always meets current legal requirements or to reflect changes to our services. The new policy applies from your next visit.

Questions about Data Protection

If you have questions about data protection, please email the controller named above.

Copyright Notice

This privacy policy was created with the help of activeMind AG, experts for external data protection officers (version #2024-10-25).