data protection

Data protection information for interested parties and customers
(according to the General Data Protection Regulation (GDPR)

The following information provides you with an overview of the processing of your personal data by Weinberg & Ruf and the rights to which you are entitled.

A - Processing of personal data

We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Personal data are individual details about the personal or factual circumstances of a specific or identifiable person. This information includes in particular your name, your email address, your address and usage data such as your IP address. To the extent necessary for the provision of our services, we also process personal data that we have lawfully received from third parties on the basis of your consent or to protect our legitimate interests. If necessary, we process personal data that we have lawfully obtained and are permitted to process from publicly accessible sources (such as debtor lists, land registers, commercial and association registers, press, media). We would like to point out that by contacting us, using our internet portal and using the contact form, you consent to the collection, processing and use of your personal data within the scope of the purposes of Weinberg & Ruf GbR, including its affiliated organizations. As a general rule, we do not use fully automated decision-making to establish and carry out the business relationship (see GDPR). Your data will not be used to create a profile. If no business relationship is established, the personal data will be deleted.

B - Transfer of data

We may only pass on your personal data if legal provisions permit this, if you have consented or if we are authorized to provide information. Under these conditions, recipients of personal data may be legal bodies (such as notaries or courts) or those bodies for which you have given us your consent to pass on the data.

C - Period of data storage

If necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and execution of a contract. In addition, we are subject to various statutory retention and documentation obligations, the periods specified therein can be up to 10 years. In addition, the storage period is also determined by the statutory limitation periods, which are usually three years, but in certain cases can be up to thirty years.

D - Collection of access data and log files

We, or rather our hosting provider, collect data on the basis of our legitimate interests about every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. Log file information is stored for a maximum of 7 days for security reasons (e.g. to investigate misuse or fraud) and then deleted. Data that needs to be retained for evidentiary purposes is exempt from deletion until the respective incident has been finally resolved.

D1 - Google Analytics

Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering), we use Google Analytics, a web analysis service provided by Google LLC (provider Google LLC, Mountain View CA, USA). Google uses cookies. The information generated by the cookie about the use of the online offering by users is usually transferred to a Google server in the USA and stored there.
Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to evaluate the use of our website by users, to compile reports on the activities within this website and to provide us with other services related to the use of this website and the Internet. Pseudonymous user profiles can be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that the user's IP address is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent cookies from being saved by setting their browser software accordingly; users can also prevent Google from collecting data generated by the cookie and relating to their use of the website and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
For more information about Google's use of data, settings and objection options, please see Google's privacy policy (https://policies.google.com/technologies/ads) and the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).
Users’ personal data will be deleted or anonymized after 14 months.

D2 - Google Maps

We integrate maps from the “Google Maps” service (provider Google LLC, Mountain View CA, USA). The data processed may include, in particular, IP addresses and location data of users, which are not collected without their consent (usually carried out as part of the settings on their mobile devices). The data may be processed in the USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

D3 - SSL encryption

Our website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the website operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from " http:// " to " https:// " and by the lock symbol in your browser line. If SSL encryption is activated, the data you send to us cannot be read by third parties.

E - Data Protection Rights

Every data subject has the right to information, the right to rectification, the right to erasure, the right to restriction of processing and the right to data portability (see corresponding Art. in GDPR).

F - Right of Withdrawal

You have the right to revoke your consent with effect for the future
The objection can be sent to us in any form, either by post or by email.

Responsible and responsible for all questions:

Weinberg & Ruf GbR

Represented by the Managing Directors
Andreas Weinberg and Martin Ruf

Esperantostraße 12
D-70197 Stuttgart

Telephone: 49 (0) 711-70 850 10

E-Mail: info(at)weinberg-ruf.de