Relevant Legal Bases

Relevant legal bases under the GDPR: Below you will find an overview of the legal bases of the GDPR, on which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. Furthermore, if more specific legal bases are applicable in individual cases, we will inform you of these in the data protection declaration.
Consent (Art. 6(1)(a) GDPR) – The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) GDPR) – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Legal obligation (Art. 6(1)(c) GDPR) – Processing is necessary for compliance with a legal obligation to which the controller is subject.
Legitimate interests (Art. 6(1)(f) GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

National data protection regulations in Germany: In addition to the data protection regulations of the GDPR, national regulations on data protection apply in Germany. This includes in particular the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). The BDSG contains in particular special regulations on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transmission as well as automated decision-making in individual cases, including profiling. Furthermore, data protection laws of the individual federal states may apply.

Note on the applicability of the GDPR and the Swiss DPA: These data protection notices serve to provide information in accordance with both the Swiss Federal Data Protection Act (Swiss DPA) and the General Data Protection Regulation (GDPR). For this reason, please note that due to broader spatial application and comprehensibility, the terms of the GDPR are used. In particular, instead of the terms used in the Swiss DPA “processing” of “personal data”, “predominant interest” and “particularly sensitive personal data”, the terms “processing” of “personal data”, “legitimate interest” and “special categories of data” used in the GDPR are used. However, the legal meaning of the terms continues to be determined within the scope of the applicability of the Swiss DPA.

Overview of Processing Activities

The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

Types of Data Processed

Inventory data.
Payment data.
Contact details.
Content data.
Contract data.
Usage data.
Meta, communication, and process data.

Categories of Data Subjects

Customers.
Prospects.
Communication partners.
Users.
Business and contractual partners.

Purposes of Processing

Provision of contractual services and fulfillment of contractual obligations.
Contact inquiries and communication.
Security measures.
Direct marketing.
Office and organizational procedures.
Conversion measurement.
Management and response to inquiries.
Feedback.
Marketing.
Profiles with user-related information.
Provision of our online offering and user-friendliness.
Information technology infrastructure.

Security Measures

In accordance with the legal requirements and taking into account the state of the art, the implementation costs, and the nature, scope, circumstances, and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

These measures include in particular ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data as well as access, input, transmission, securing availability, and their separation. Furthermore, we have established procedures to ensure the exercise of data subjects’ rights, the deletion of data, and responses to data threats. We also consider the protection of personal data during the development or selection of hardware, software, and procedures, in accordance with the principle of data protection, by design and by default.

IP address truncation: If IP addresses are processed by us or by the service providers and technologies used, and the processing of a complete IP address is not necessary, the IP address is shortened (also called “IP masking”). In this process, the last octet, i.e., the last two digits of an IP address, is deleted or replaced by placeholders. This is intended to prevent the identification of a person based on their IP address.

Rights of Data Subjects

As a data subject, you are entitled to various rights under the GDPR, which arise primarily from Articles 15 to 18 and 21 of the GDPR:

Right to object: You have the right, on grounds arising from your particular situation, to object at any time to the processing of personal data concerning you, which is based on Art. 6(1)(f) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.
Right to withdraw consent: You have the right to withdraw consent you have given with effect for the future pursuant to Art. 7(3) GDPR.
Right of access: You have the right to request confirmation as to whether the data in question will be processed and to be informed of this data and to receive further information and a copy of the data in accordance with Art. 15 GDPR.
Right to rectification: You have the right to request the completion or correction of the data concerning you in accordance with Art. 16 GDPR.
Right to erasure and to be forgotten: In accordance with Art. 17 GDPR, you have the right to demand that the relevant data be erased immediately or, alternatively, to demand a restriction on the processing of the data in accordance with Art. 18 GDPR.
Right to data portability: You have the right to receive data concerning you that you have provided to us in a structured, common and machine-readable format in accordance with Art. 20 GDPR.
Right to lodge a complaint: You have the right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR.
Right to withdraw consent: You have the right to withdraw consent you have given with effect for the future pursuant to Art. 7(3) GDPR.

The competent supervisory authority in matters of data protection law is the data protection commissioner of the federal state in which our company is located. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Business Services

We process data of our contractual and business partners, e.g., customers and interested parties (collectively referred to as “contractual partners”) within the framework of contractual and comparable legal relationships as well as associated measures and within the framework of communication with the contractual partners (or pre-contractual), e

.g., to answer inquiries.

We process this data to fulfill our contractual obligations, secure our rights, and achieve the purposes pursued by the processing, which include administrative tasks and the exchange of information as well as the provision of services, support, and customer care.

Provision of Online Offerings and Web Hosting

In order to provide our online offerings securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers managed by them) the online offerings can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space, and database services, as well as security and technical maintenance services.

The data processed within the framework of the provision of hosting services may include all information relating to the users of our online offering that is generated in the course of use and communication. This regularly includes the IP address, which is necessary to deliver the contents of online offerings to browsers, and all entries made within our online offerings or from websites.

Contact Information

Email: client.services@socialclicks.info

Telephone: +49 0176 61893213

Postal Address: Dorfmatt 2, 79379 Müllheim, Germany