Privacy Policy

Data protection and data security are of great importance to us for everyone involved — visitors, prospective users, and users of our website and other services. Transparency regarding the processing of your personal data, as well as the protection of your data, are therefore particularly important to us.

Below, we explain what information SRH collects during your visit to our websites and your use of our services, and how this information is used.

The following notice informs you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we determine the purposes and means of such processing either alone or jointly with others. In addition, we inform you about third-party components that we use for optimization purposes and to improve the quality of use, insofar as third parties process personal data through them.

Controller Responsible for Processing
The controller responsible for this website within the meaning of data protection law is:

SRH YourService GmbH
Bonhoefferstraße 1
69123 Heidelberg, Germany
Phone: +49 6221 6790-224
Email: info.ysg@srh.de
Website: www.srh-yourservice.de

Company Data Protection Officer
frankenDSB DatenschutzManufaktur GmbH
Unterer Steinberg 11
97453 Schonungen, Germany
www.frankendsb.de

Direct Contact for the Data Protection Officer of SRH YourService GmbH
Email: joerg.flierenbaum@frankendsb.de

Your Data Protection Rights

Art. 15 GDPR: the right to obtain free information about your stored personal data, its origin and possible recipients, and the purpose of the data processing

Art. 16 GDPR: the right to rectification or completion of inaccurate or incomplete data

Art. 17 GDPR: the right to immediate erasure of data concerning you

Art. 18 GDPR: if further processing is still necessary, the right to restriction of processing

Art. 20 GDPR: the right to data portability of data you have provided

Art. 21 GDPR: the right to object to the processing of your personal data carried out on the basis of legitimate interests, provided there are grounds arising from your particular situation, or where the objection relates to direct marketing

Art. 77 GDPR in conjunction with § 19 BDSG (German Federal Data Protection Act): the right to lodge a complaint with the competent supervisory authority (a list of data protection authorities and their contact details can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html)

To exercise your rights, please use the contact details of the controller listed above.

General Data Collection

When you access our website or retrieve a file, data relating to this process is stored in a log file on our web server. Specifically, the following data may be stored:

• IP address (anonymized where possible)
• Domain name of the website from which you came
• Names of the files retrieved
• Date and time of retrieval
• Name of your internet service provider
• Where applicable, the operating system and browser version of your device

We store IP addresses solely for data security purposes, in order to ensure the stability and security of our system (legal basis: Art. 6 (1)(f) GDPR). We reserve the right to carry out statistical analysis of anonymized data.

How Do We Use and Share Your Personal Data?

Where the website offers the option to enter personal or business data (email addresses, names, addresses), users provide such data on an expressly voluntary basis. Inquiries submitted via a contact form on our website are transmitted by the website as an email to the recipient. The email is transmitted using transport encryption. Since no end-to-end encryption takes place, you should not send us sensitive or highly confidential data by this means.

We use the personal data you provide exclusively for the purpose of the technical administration of the website and to fulfill your requests and requirements — generally, to carry out the contract concluded with you or to respond to your inquiry. The legal basis for this processing is, accordingly:

• Art. 6 (1)(a) GDPR (your consent)
• Art. 6 (1)(b) GDPR (performance of a contract or pre-contractual measures)
• Art. 6 (1)(f) GDPR (our legitimate interest)

Your personal data will not be disclosed or otherwise transmitted to third parties, unless this is necessary for the purpose of contract performance, required for legal reasons, or you have expressly consented. We will never sell your data under any circumstances.

Any consent given may be revoked at any time with effect for the future.

How Long Is Your Data Stored?

As a general rule, we store all information you provide to us within the statutory limits and only until the respective purpose for which the data was collected has been fulfilled. For example, in the case of inquiries, until the inquiry has been resolved; in the case of newsletters, until you unsubscribe from the newsletter. If longer storage is necessary or legally required, the data is stored accordingly and then automatically deleted.

What Do We Do to Ensure the Security of Processing?

Our company takes all necessary technical and organizational security measures to protect your personal data against loss and misuse. Your data is stored in a secure operating environment that is not accessible to the public. In certain cases, your personal data is encrypted during transmission using Secure Socket Layer (SSL) technology. This means that communication between your computer and our company's servers takes place using a recognized encryption method, provided your browser supports SSL.

Cookies

Our website uses cookies. A cookie is a data record that is created when a website is visited and temporarily stored on the system of the website user. When the user accesses our website's server again, the user's browser sends back the previously received cookie to the server. The server can then evaluate the information obtained through this process. Cookies can, for example, be used to control the display of advertisements or to make navigating a website easier. Some cookies are required to enable the functioning of our website operations (the legal basis cited is Art. 6 (1)(f) GDPR — the legitimate interests of the operator of this website; we use cookies only in accordance with Art. 5 (1)(a) GDPR, i.e., in line with the principles of "lawfulness, fairness, and transparency in processing").

If you wish to prevent the use of cookies in general, you can do so through the local settings of your internet browser (e.g., Internet Explorer, Mozilla Firefox, Opera, or Safari).

For cookies that are not technically necessary, you can find further information on the cookies used by tools and plugins in this privacy notice.

Matomo Cookieless Tracking

We use the open-source software Matomo to analyze and statistically evaluate anonymized usage data from our website. The information obtained regarding website usage is transmitted exclusively to Matomo servers located in European data centers and compiled into anonymized usage profiles. We use this data to evaluate the use of the website. The collected data is not shared with third parties.

IP addresses are anonymized (IP masking), so that it is not possible to attribute them to individual users. We have activated the "do-not-track" setting. In addition, personally identifiable information (such as email addresses) is prevented from being stored.

The processing of this data is carried out on the basis of Art. 6 (1)(f) GDPR, our legitimate interest in optimizing our website offering.

Contact Forms

If you submit an inquiry to us via a contact form, we store and process the information you provide in the inquiry form, including the contact details you enter there, for the purpose of processing your inquiry and in case of any follow-up questions. Your data will be used exclusively for the purpose of answering and processing your inquiry. This data processing is carried out pursuant to Art. 6 (1) sentence 1(a) GDPR, on the basis of your voluntarily given consent. You may object to this at any time (right of withdrawal).

Newsletter

We send newsletters containing promotional information only with the consent of the recipient or on the basis of a statutory permission.
Registration for our newsletter is carried out using a double opt-in procedure: after registering, you will receive an email asking you to confirm your registration.
This confirmation is necessary in order to verify that you are the holder of the email address.

Your newsletter registration is logged in order to be able to prove that registration took place, in accordance with legal requirements.
This includes storing the times of registration and confirmation, as well as your IP address. Any additional information you provided when signing up for the newsletter is also stored.

We use your information other than your email address solely to personalize the newsletter — for example, your name.
You may unsubscribe from the newsletter at any time. A link for unsubscribing from the newsletter can be found in every newsletter email.

SSL/TLS Encryption

For security reasons, and to protect the transmission of confidential content — such as inquiries you send to us as the website operator — this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the lock symbol in your browser's address bar.

If you wish to contact our company by email, please note that the confidentiality of the information transmitted cannot be guaranteed. The content of emails may be viewed by third parties. We therefore recommend that you send us sensitive or highly confidential information exclusively by post.

References / Links to Third-Party Websites

This website provides links to third-party websites. Data relating to the linked destination is transmitted only once you click on such a link. This is technically necessary. The data transmitted includes, in particular: your IP address, the time at which you clicked the link, the page on which you clicked the link, and information about your internet browser. If you do not want this data to be transmitted to the linked destination, please do not click the link.

If you follow a link to one of these websites, please note that these websites have their own privacy policies, and that we accept no responsibility or liability for these policies.

Security Notice

We protect our website and other IT systems through appropriate technical and organizational measures against loss, destruction, unauthorized access, unauthorized alteration, or unauthorized disclosure of your data. However, despite all due care, complete protection against all risks is not practically possible in every case. Since we cannot guarantee complete data security for communication by email, we recommend using postal mail to transmit confidential information.

Changes to This Privacy Notice

We reserve the right to amend this privacy notice if the legal situation, this online offering, or the manner of data collection changes. This applies only to statements regarding data processing, however. Where user consent is required, or where parts of the privacy notice contain provisions governing the contractual relationship with users, changes to the privacy notice will only be made with the user's consent. Please therefore check this privacy notice periodically as needed, particularly when providing personal data.