1. DATA PROTECTION AT A GLANCE

GENERAL INFORMATION
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy listed below this text.

DATA COLLECTION ON OUR WEBSITE

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice section of this website.

How do we collect your data?

Your data is collected, on the one hand, when you provide it to us. This may include, for example, data that you enter into a contact form.

Other data is collected automatically by our IT systems when you visit the website. This consists primarily of technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you access this website.

What do we use your data for?

Your data is collected, on the one hand, when you provide it to us. This may include, for example, data that you enter into a contact form.

What rights do you have regarding your data?

You have the right at any time to obtain, free of charge, information about the source, recipients and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. For this and any further questions regarding data protection, you can contact us at any time at the address provided in the legal notice. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.

You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. For details, please refer to the privacy policy under ‘Right to restriction of processing’.

Analytics tools and third-party tools

When you visit this website, your browsing behaviour may be analysed for statistical purposes. This is primarily done using cookies and so-called analytics tools. The analysis of your browsing behaviour is generally carried out anonymously; your browsing behaviour cannot be traced back to you.

You may object to this analysis or prevent it by not using certain tools. Detailed information on these tools and your options for objecting can be found in the following privacy policy.

2. GENERAL INFORMATION AND MANDATORY NOTICES

DATA PROTECTION
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various types of personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. It is not possible to guarantee complete protection of data against access by third parties.

NOTICE REGARDING THE CONTROLLER
The controller responsible for data processing on this website is:

RAW Projektbüro gemeinnützige UG (limited liability)
Bergstraße 1
27726 Worpswede
Germany

Represented by:
Jürgen Strasser and Christine Steyer

Email: info@raw-projektbueroe.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

WITHDRAWAL OF YOUR CONSENT TO DATA PROCESSING
Many data processing operations are only possible with your express consent. You may withdraw any consent you have already given at any time. To do so, simply send us an informal email. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected by the withdrawal.

RIGHT TO OBJECT TO DATA COLLECTION IN SPECIFIC CASES AND TO DIRECT MARKETING (ART. 21 GDPR)
Where data processing is carried out on the basis of Article 6(1)(e) or (f) of the GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. The specific legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data in question, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims (objection under Article 21(1) of the GDPR).

RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT SUPERVISORY AUTHORITY
In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the State Data Protection Commissioner of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html. https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

RIGHT TO DATA PORTABILITY
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place to the extent that it is technically feasible.

SSL OR TLS ENCRYPTION
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the padlock symbol in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

INFORMATION, BLOCKING, DELETION
In accordance with the applicable legal provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, the right to have this data corrected, restricted or erased. You may contact us at any time at the address given in the legal notice regarding this matter and any other questions relating to personal data.

OBJECTION TO ADVERTISING E-MAILS
We hereby object to the use of contact details published in accordance with the legal requirement to provide an imprint for the purpose of sending unsolicited advertising and information materials. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example via spam e-mails.

ANALYTICS TOOLS AND THIRD-PARTY TOOLS
When you visit this website, your browsing behaviour may be analysed for statistical purposes. This is primarily done using cookies and so-called analytics tools. The analysis of your browsing behaviour is generally carried out anonymously; your browsing behaviour cannot be traced back to you.

You may object to this analysis or prevent it by not using certain tools. Detailed information on these tools and your options for objecting can be found in the following privacy policy.

3. HOSTING

EXTERNAL HOSTING
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the hoster’s servers. This may include, in particular, IP addresses, contact enquiries, metadata and communication data, contractual data, contact details, names, website visits and other data generated via a website.

The use of the host is for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online services securely, quickly and efficiently through a professional provider (Art. 6(1)(f) GDPR).

Our hosting provider will only process your data to the extent necessary to fulfil its contractual obligations and will follow our instructions regarding this data.

CONCLUSION OF A DATA PROCESSING AGREEMENT
To ensure data processing complies with data protection regulations, we have concluded a data processing agreement with our hosting provider.

4. DATA COLLECTION ON THIS WEBSITE

COOKIES
This website uses cookies in some cases. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called ‘session cookies’. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can configure your browser so that you are notified when cookies are set and only allow cookies on a case-by-case basis, exclude the acceptance of cookies in specific cases or generally, and activate the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be restricted.

Cookies that are necessary for the execution of the electronic communication process or for the provision of specific functions requested by you (e.g. the shopping basket function) are stored on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically flawless and optimised provision of its services. Where consent has been requested (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be withdrawn at any time.

Where other cookies (e.g. cookies used to analyse your browsing behaviour) are stored, these are dealt with separately in this privacy policy.

SERVER LOG FILES
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not combined with other data sources.

The collection of this data is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – to this end, the server log files must be collected.

ENQUIRIES BY E-MAIL, TELEPHONE OR FAX
If you contact us by e-mail, telephone or fax, your enquiry, including all personal data contained therein (name, enquiry), will be stored and processed by us for the purpose of dealing with your request. We will not disclose this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Article 6(1)(a) of the GDPR) and/or on our legitimate interests (Article 6(1)(f) of the GDPR), as we have a legitimate interest in the effective processing of enquiries addressed to us.

The data you send to us via contact enquiries will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

PROCESSING OF DATA (CUSTOMER AND CONTRACT DATA)
We collect, process and use personal data only to the extent that it is necessary for the establishment, content or amendment of the legal relationship (contractual data). This is done on the basis of Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. We collect, process and use personal data relating to the use of this website (usage data) only to the extent necessary to enable the user to use the service or to bill them for it.

The customer data collected will be deleted upon completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

5. SOCIAL MEDIA

SHARING CONTENT VIA PLUGINS (FACEBOOK, INSTAGRAM & CO.)

The content on our website can be shared on social networks in a manner that complies with data protection regulations. This website uses static links for this purpose. These links only establish a direct connection between the networks and users once the user actively clicks on one of them.

There is no automatic transfer of user data to the operators of these platforms. If the user is logged in to one of the social networks, an information window appears when the social buttons are used, in which the user can confirm the text before submitting it.

Our users can share the content of this site on social networks in compliance with data protection regulations, without the operators of the networks creating complete browsing profiles.

OUR SOCIAL MEDIA PRESENCE

DATA PROCESSING BY SOCIAL NETWORKS
We maintain publicly accessible profiles on social networks. You can find a list of the specific social networks we use below.

We maintain publicly accessible profiles on social networks. You can find a list of the specific social networks we use below. Social networks such as Facebook and others can generally analyse your user behaviour in detail when you visit their website or a website with integrated social media content (e.g. ‘Like’ buttons or advertising banners). Visiting our social media pages triggers numerous data processing operations relevant to data protection. Specifically:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can link this visit to your user account. However, your personal data may also be collected even if you are not logged in or do not have an account with the relevant social media portal. In this case, data collection takes place, for example, via cookies stored on your device or by recording your IP address.

Using the data collected in this way, social media platform operators can create user profiles that record your preferences and interests. This enables interest-based advertising to be displayed to you both on and off the respective social media platform. If you have an account with the relevant social network, interest-based advertising may be displayed on all devices on which you are currently logged in or have previously been logged in.

Please also note that we cannot track all processing activities on social media platforms. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media platforms. For details, please refer to the terms of use and privacy policies of the respective social media platforms.

LEGAL BASIS
Our social media presence is intended to ensure the widest possible online reach. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. The analysis processes initiated by the social networks may be based on different legal grounds, which must be specified by the operators of the social networks (e.g. consent within the meaning of Article 6(1)(a) of the GDPR).

CONTROLLER AND EXERCISING OF RIGHTS
When you visit one of our social media pages (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered by that visit. You may, in principle, exercise your rights (right of access, rectification, erasure, restriction of processing, data portability and the right to lodge a complaint) both against us and against the operator of the relevant social media portal (e.g. against Facebook).

Please note that, despite our joint responsibility with the social media portal operators, we do not have full control over the data processing operations of the social media portals. Our options depend largely on the corporate policy of the respective provider.

RETENTION PERIOD
Data collected directly by us via our social media presence will be deleted from our systems as soon as the purpose for which it was stored no longer applies, you request its deletion, you withdraw your consent to its storage, or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no influence over the storage period of your data stored by the operators of social networks for their own purposes. For further details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

SOCIAL MEDIA PLATFORMS IN DETAIL

FACEBOOK
We have a profile on Facebook. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified under the EU-US Privacy Shield.

You can adjust your advertising settings yourself in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads

For further details, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/

INSTAGRAM
We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. For details on how they handle your personal data, please refer to Instagram’s privacy policy: https://help.instagram.com/519522125107875

6. PLUGINS AND TOOLS

YOU TUBE
Our website uses plugins from YouTube, a service operated by Google. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our pages featuring a YouTube plugin, a connection is established with YouTube’s servers. In doing so, the YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of presenting our online services in an appealing manner. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.

Further information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.

GOOGLE WEB FONTS
We use Google Fonts on our website to display external fonts. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to simply as “Google”.

Through its certification under the EU-US Privacy Shield,

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that EU data protection requirements are also complied with when processing data in the USA.

To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the optimisation and the economic operation of our website.

Through the connection to Google established when you visit our website, Google can determine from which website your request was sent and to which IP address the font display is to be transmitted.

Google provides

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

further information, particularly regarding ways to prevent data usage.