privacy statement

1. Who am I and how can you reach me?

I am


Inge Gaebert-Kienzler
Herrenweg 1
79261 Gutach

and as a “controller” in the sense of the GDPR, I am  responsible for protecting your personal data. 

2. What data is processed when you visit our website?

This section explains what data is collected when you visit my website, the purposes for which it is processed, the legal basis on which the data is processed, what options you have to control the collection and processing of the data yourself, and when the data is deleted.

A. Log files

Data collected:
When you visit my website, your browser automatically transmits the following data to us:

• Your IP address
• The website you are coming from
• Websites that you access from our site
• The pages you click on, and
• Time when the page was accessed
• Name of your Internet service provider
• Your browser type and version
• The operating system used on your device
• The date and duration of your visit.

Purposes for which the data is processed:
Temporary storage of this data is necessary to display the website on your computer and to ensure that the website functions properly. I also use this data to compile statistics about how my website are used. Another reason for collecting this data is to track and prevent unauthorized access to the web server and any improper use of the web page, and to secure our information technology systems.

Legal basis:
I temporarily store this data on the basis of legitimate interests (Art. 6 (1)(f) GDPR). It is in my legitimate interest to achieve the purposes described above.

Storage period and control options:
The data is deleted when it is no longer needed to achieve the described purposes. Log files are deleted after a maximum of 90 days.


B. General information about cookies and targeting technologies


Data collected:
My website uses “cookies”, which are small text files that are stored on your device. Cookies typically contain a unique character sequence called the cookieID which can be used to identify your browser the next time you visit my website.

Purposes for which the data is processed:
Some cookies are technically necessary for the functioning of my website. Certain functions used on my website cannot be offered without the use of cookies.

Legal basis:
I use technically necessary cookies and functionality cookies on the basis of legitimate interests (Art. 6 (1)(f) GDPR). It is in my legitimate interest to ensure that my website function as intended and to provide optimal usability for visitors to my website.

Storage period and control options:
Some of the cookies I use are automatically deleted after closing the browser (so-called session cookies), while others are stored permanently on your device and enable us to recognize your browser (so-called persistent cookies).

You have full control over the use of cookies and can delete cookies in your browser, completely deactivate the storage of cookies, or selectively accept certain cookies. Use your browser’s help function to learn how you can change these settings. Note that such changes may limit the functionality of our websites.

Data collected:
Google Analytics: On my website, I use Google Analytics, a web analyticsservice provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin4, Ireland ("Google"). Google Analytics stores cookies on your device that make it possible to evaluate your use of my website.

To do so, Google collects various data, including data to uniquely identify your browser and information about when and how often you have visited our websites, how much time you have spent on our websites, and how you have interacted with our websites.

I have added the code "get._anonymizeIP();" to Google Analytics. This causes Google to shorten your IP address, thereby allowing for anonymous analysis. IP addresses are shortened within the EU or the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the United States and shortened there. The IP address sent by your browser for Google Analytics is not merged with other Google data. The data collected through the use of cookies is usually transmitted to a Google server in the United States and stored there. Google shares data with third parties if permission has been given, if necessary for legal reasons, or to have the third parties process this data on Google's behalf.

Purposes for which the data is processed:
Google Analytics: Google uses the data collected via Google Analytics on my behalf in order to evaluate how my website is used, compile reports on website activity, and to provide other services relating to website and Internet use.


I use YouTube to embed videos on my website.
Legal basis:
I use Google services on the basis of legitimate interests (Art. 6 (1)(f) GDPR). It is in our legitimate interest to prevent misuse of our forms and to protect our information technology systems.

Storage period and control options:
The data that is collected by these Google functions is stored and deleted regularly.
You may prevent the use of cookies by configuring the appropriate settings on your browser.
You can also prevent Google from collecting and processing this data by downloading and installing the browser add-on available at this link.

3. Contacting me

Data collected:
When you contact me through my contact form or via email, I collect and process the data you provide, such as your contact information, your name and your request. All data that you share with me is transmitted from your browser to my server in encrypted form.

Purposes for which the data is processed:
Data processing is performed by me, exclusively on the basis of your request and in order to process that request.

Legal basis:
I process your data for the implementation of precontractual and contractual measures that are performed at your request (Art. 6 (1)(b) GDPR).

Storage period:
I store your data for as long as I need it for the specific processing purpose, or to guarantee or comply with statutory retention periods.

4. What rights do you have and how can you exercise them?

A. Revocation of consent

If you have consented to the processing of your personal data, you can revoke that consent at any time with future effect. Note that such revocation has no effect on the legality of previous data processing, and that it does not extend to data processing for which a statutory justification exists, and which may therefore take place even without your consent.


B. Additional rights of data subjects

In addition, you have the following rights as a data subject under Articles 15 to 21 and 77 of the EU General Data Protection Regulation (GDPR), provided that the statutory requirements are met:

You can request at any time that I provide you with information as to which of your personal data I process and how, and that I provide you with a copy of the stored personal data that relates to you, Art. 15 GDPR.

You can request the correction of incorrect personal data and the completion of incomplete personal data, Art. 16 GDPR.

Regarding the deletion of your personal data: Please note that the right to deletion excludes data that I require for the execution and processing of contracts, and for the assertion, exercise and defense of legal claims, as well as data for which statutory, regulatory or contractual retention requirements apply, Art. 17 GDPR.


Restriction of processing:

Under certain circumstances, you may request that processing be restricted, e.g. if you believe that your data is incorrect, that the processing of your data is unlawful, or if you have objected to the processing of your data. The result of such a request is that your data may only be processed to a very limited extent without your consent, e.g. for the assertion, exercise and defense of legal claims or to protect the rights of other natural and legal persons, Art. 18 GDPR.


Objection to data processing:

You have the option to object at any time to data processing for purposes of direct advertising. In addition, if special reasons apply, you can object at any time to data processing on the basis of a legitimate interest, Art. 21 GDPR.


Data portability:

You have the right to receive the data that you have provided to me, and that we process based on your consent or in order to fulfill a contract, in a common, machine-readable format and, to the extent that this is technically feasible, to request that this data be transmitted directly to third parties, Art. 20 GDPR.


5. How to contact me

You can exercise your rights via the following contact channels:

Inge Gaebert-Kienzler
Herrenweg 1
79261 Gutach


6. Right of appeal to a regulatory authority

If you believe, for example, that my data processing is unlawful or that I have not protected the rights described above to the required extent, you have the right to file a complaint with the competent data protection authority.
Revision: January 2020