Privacy policy of the SOMMcademy

​

Since May 25, 2018, the requirements of the EU General Data Protection Regulation (hereinafter: DSGVO) apply throughout Europe. In the following, I would like to inform you about the processing of personal data carried out by SOMMcademy in accordance with this new regulation (compare Article 13 DSGVO). Please read the data protection information carefully. If you have any questions or comments about this data protection information, you can address them at any time to the contact details given under point 2. 

​

Table of contents 
1. Overview 
2. Name and contact details of the person responsible for the content and processing in accordance with § 55 RStV.  
3. Purposes of data processing, legal bases and legitimate interests pursued by SOMMcademy or a third party, and categories of recipients.
   3.1. Calling up my website/application
   3.2. Conclusion, execution or termination of a contract
   3.3. Data processing for advertising purposes
     3.3.1. Advertising purposes of SOMMcademy and third parties
     3.3.2. Interest-based advertising
     3.3.3. Right of objection
     3.3.4. Newsletter dispatch

    3.4 Online presence and website optimization
     3.4.1. Cookies - general information
     3.4.2. Use of the Wix Consent Manager tool for managing consents
     3.4.3. Google analytics
     3.4.4 Targeting
       3.4.4.1 Onsite Targeting
       3.4.4.2 Re-targeting
       3.4.4.3 Affiliates
       3.4.4.4 Opt-out/opposition option
     3.4.5 Social media plug-ins
       3.4.5.1 Instagram
       3.4.5.2 LinkedIn
       3.4.5.3 YouTube
       3.4.5.4 Jotform (questionnaire in the "Fountain" section)
   3.5 Customer account
   3.6. Contact form
4. Your rights
   4.1 Overview
   4.2. Right of objection
5. Data security

 

 

1. Overview
The following data protection information informs you about the nature and extent of the processing of so-called personal data by the SOMMcademy. Personal data is information that can be directly or indirectly attributed to you or can be attributed to you. The data processing by the SOMMcademy can essentially be divided into three categories:

 

• For the purpose of contract processing, all data required for the execution of a contract with SOMMcademy will be processed. If external service providers are also involved in the processing of the contract, e.g. logistics companies or payment service providers, your data will be passed on to them to the extent necessary in each case.

​

• I use the data collected from you in the context of the contract processing in addition to the contract processing for the purpose of informing you from time to time about new offers and promotions.

​

• When you access the SOMMcademy website/application, various information is exchanged between your end device and our server. This may also be personal data. The information collected in this way is used, among other things, to optimize our website or to display advertising in the browser of your end device.

 
In accordance with the provisions of the GDPR, you have various rights that you can assert against me. These include the right to object to selected data processing, in particular data processing for advertising purposes. The possibility to object is highlighted in print and can be found under 3.3.3 Right of objection.

If you have any questions about my privacy policy, please feel free to contact me at any time. You can find the contact details below.

 

 

2. Name and contact details of the person responsible for the content and processing pursuant to § 55 RStV.
This data protection information applies to data processing by the

​

SOMMcademy
Timo Bausch
Rheinstrasse 33
65185 Wiesbaden
Germany

​

("Responsible Party"), and for the following websites or applications: https://sommcademy.de, Instagram, LinkedIn and YouTube.

 

If you have any questions regarding data protection matters that cannot be answered in this privacy policy or if you would like further information, please feel free to write to me at the above address, or at hello@sommcademy.de.
 

​

3. purposes of data processing, legal bases and legitimate interests pursued by SOMMcademy or a third party, and categories of recipients.

​

3.1 Calling up my website/application.
When calling up my website/application, information is automatically sent to the server of my website/application by the browser used on your end device and temporarily stored in a so-called log file. I have no influence on this. The following information is collected without your intervention and stored until automatic deletion:

 

• IP address of the requesting Internet-enabled device in anonymized form (used only to determine the location of the access),

• Date and time of access,

• Name and URL of the file accessed,

• Website/application from which the access was made (referrer URL),

• Browser you use and, if applicable, the operating system and device type used on your Internet-enabled computer, as well as the name of your access provider.

 

The legal basis for the processing of the IP address is Article 6(1)(f) DSGVO. My legitimate interest follows from the purposes of data collection listed below. At this point, I would like to point out that the data collected does not allow me to draw any direct conclusions about your identity, nor will it allow me to do so. The IP address of your terminal device and the other data listed above are used by me for the following purposes:

​

• Ensuring a smooth connection setup,

• Ensuring a comfortable use of my website/application,

• Evaluation of system security and stability.

The data is stored and automatically deleted after the aforementioned purposes have been achieved. The standard period for deletion is based on the criterion of necessity. 
 
Furthermore, I use so-called cookies, tracking tools, targeting methods and social media plug-ins for my website/application. The exact procedures involved and how your data is used for this purpose are explained in more detail below in section 3.4.
 
If you have consented to so-called geolocation in your browser or operating system or other settings on your end device, I use this function to offer you individual services based on your current location (e.g., the location of the nearest store). I process your location data processed in this way exclusively for this function. If you terminate the use, the data will be deleted.
 

 

3.2 Conclusion, execution or termination of a contract.
The object of activity of SOMMcademy is the distance selling of goods and services, the retail trade within the scope of the officially issued permits and the serial production of the goods to be offered. In this context, I process the data necessary for the conclusion, execution or termination of a contract with you. These include:
 

• First name, last name

• Invoice and delivery address

• E-mail address

• Telephone number

• Billing and payment information

• Date of birth, if applicable

The legal basis for this is Art. 6 para. 1 lit. b) DSGVO, i.e. you provide me with the data on the basis of the contractual relationship between you and me. I am also obliged to process your e-mail address due to a requirement in the German Civil Code (BGB) to send an electronic order confirmation (Art. 6 para. 1 lit. c) DSGVO). As far as I do not use your contact data for promotional purposes (see below 3.3.), I store the data collected for the processing of the contract until the expiry of the legal or possible contractual warranty and guarantee rights. After the expiration of this period, I keep the information of the contractual relationship required by commercial and tax law for the periods determined by law on the basis of Art. 6 para. 1 lit. c) in blocked form.
 

For this period (regularly six or ten years after the end of the year in which the contract was concluded), the data will be processed again solely in the event of an audit by the tax authorities. In addition, the following data processing is required for the execution of the purchase contract: If you have selected a payment method other than payment in advance, I will pass on the necessary payment data to a payment service provider commissioned by me. Details of your delivery address I pass on for the purpose of processing the purchase contract to a logistics company commissioned by me. If you agree, I transmit your e-mail address and possibly your phone number to the logistics company commissioned by me to ensure that the goods are delivered according to your wishes. The logistics company will contact you in advance of the delivery to inform you of the delivery time or to coordinate details of the delivery with you. The data will be transmitted solely for this purpose and deleted after delivery. For more information, please refer to the privacy policy of Deutschen Post AG, DPD and UPS Service Partner.
 

 

3.3 Data processing for advertising purposes
The following statements refer to the processing of personal data for advertising purposes. The GDPR declares such data processing on the basis of Art. 6 (1) (f) GDPR to be conceivable in principle and a legitimate interest. The duration of data storage for advertising purposes does not follow any rigid principles and is based on the question of whether the storage is necessary for the advertising approach. 

​

3.3.1. advertising purposes of SOMMcademy and third parties
As far as you have concluded a contract with me, I keep you as an existing customer. In this case, I process your postal contact data outside the existence of a specific consent to send you information about new products and services. I process your e-mail address in order to send you information about my own, similar products outside of the existence of a specific consent.

 

3.3.2 Advertising tailored to your interests
To ensure that you only receive advertising information that is of supposed interest to you, I categorize and add further information to your customer profile. For this purpose, statistical information as well as information about your person (e.g. basic data of your customer profile) is used. The aim is to provide you with advertisements based solely on your actual or perceived needs.

​

If you purchase goods or services on my website and provide your e-mail address, this may subsequently be used by me to send you a newsletter. In such a case, the newsletter will only be used to send direct advertising for my own similar goods or services. The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 para. 3 UWG.

3.3.3 Right of objection
You may object to data processing for the aforementioned purposes at any time, free of charge, separately for the respective communication channel and with effect for the future. For this purpose, it is sufficient to send an e-mail or a postal letter to the contact data mentioned under 2. If you object, the contact address concerned will be blocked for further data processing for advertising purposes. I would like to point out that in exceptional cases, advertising material may still be sent temporarily after receipt of your objection. This is technically due to the necessary lead time of advertisements and does not mean that I will not implement your objection. Thank you for your understanding.

3.3.4 Newsletter dispatch
On my website I offer you the possibility to subscribe to my newsletter. In order to be able to ensure that no mistakes have been made when entering the e-mail address, I use the so-called double opt-in procedure: After you have entered your e-mail address in the registration field, I will send you a confirmation link. Only when you click on this confirmation link, your e-mail address will be added to my distribution list. The processing of your electronic contact data at this point is based solely on your consent (Art. 6 para. 1 lit. a) DSGVO). You can revoke your consent thus declared at any time with effect for the future. To do so, simply send a short note by e-mail to the e-mail address given under 2. or click on the "unsubscribe" button at the end of each newsletter.

 

 

3.4 Online presence and website optimization
3.4.1 Cookies - general information
I use so-called cookies on my website. The cookie banner will be displayed the first time you visit the site and thereafter each time you re-enter if you have not accepted all cookies. Within this popup you have the possibility to set your cookie preferences for the current browser session. After selecting them, please reload the page to continue visiting our website with the updated settings.

​

I use cookies to optimize my website and to statistically record and evaluate the use of my website. I base the processing of your data by the cookies used for the aforementioned technically necessary purposes in accordance with Art. 6 (1) p. 1 lit. f DSGVO on my legitimate interest, which is to be regarded as legitimate in the sense of the aforementioned provision. In addition, I set cookies and process the data through the cookies used only on the basis of your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO.

​

Cookies are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit my site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. In the cookie, information is stored that arises in each case in connection with the specific end device used. This does not mean, however, that I thereby gain direct knowledge of your identity. The use of cookies serves on the one hand to make the use of my offer more pleasant for you. For example, I use so-called session cookies to recognize that you have already visited individual pages of my website or that you have already logged into your customer account. These are automatically deleted after you leave my site.

​

Furthermore, I also use temporary cookies for the purpose of user-friendliness, which are stored on your terminal device for a certain fixed period of time. If you visit my site again to use my services, it is automatically recognized that you have already been with me and what entries and settings you have made, so that you do not have to enter them again. If you have a customer account with SOMMcademy and are logged in or activate the "stay logged in" function, the information stored in cookies will be added to your customer account. On the other hand, I use cookies to statistically record the use of my website and to evaluate it for the purpose of optimizing my offer for you, as well as to display information tailored specifically to you. These cookies enable me to automatically recognize that you have already been to my site when you visit it again. These cookies are automatically deleted after a defined period of time.

 

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of my website. The storage period of cookies depends on their purpose and is not the same for all.
 

3.4.2 Use of the Wix Consent Manager Tool to Manage Consent

On my website, I use the Wix Consent Manager Tool to inform you about the cookies and the other technologies I use on my website, as well as to obtain, manage and document your consent to the processing of your personal data by these technologies, if required. In order to fulfill my legal obligation according to Art. 7 (1) DSGVO, it is necessary to be able to prove your consent to the processing of your personal data. The Wix Consent Manager Tool is an offer of Wix.com Ltd, Nemal St. 40, Tel Aviv 6350671, Israel ("Wix"). After you submit your cookie declaration on my website, Wix's web server stores your IP address, the date and time of your declaration, browser information, and information about your consent behavior and its verifiability (user ID). In addition, a cookie is used that contains the information about your consent behavior. Your data will be deleted after the above-mentioned purpose has ceased to exist, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) p. 1 lit. a DSGVO or I reserve the right to use data beyond this, which is permitted by law and about which I inform you in this statement. Wix uses servers in Israel. For Israel, the European Commission has determined by decision an adequate level of data protection. In addition, Wix uses servers in the United States, South Korea and Taiwan, as well as in other countries outside the EU and the EEA for which there is no adequacy decision by the European Commission. My cooperation with Wix is based on standard data protection clauses of the European Commission.

​

For details, please refer to the privacy policy of WIX: https://de.wix.com/about/privacy..

 

3.4.3 Google Analytics
I use Google Analytics on my website, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"). In this context, pseudonymous usage profiles are created and cookies are used. The information generated by the cookie about your use of this website such as

​

• Browser type/version,

• Operating system used,

• Referrer URL (the previously visited page),

• Host name of the accessing computer (IP address),

• Time of the server request,

​

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to the use of the website and the Internet for the purposes of market research and demand-oriented design of these Internet pages. The transmitted data are only pseudonyms, an inference to your name is not possible. In no case will your IP address be merged with other data from Google. The IP addresses are anonymized so that an assignment is not possible (so-called IP masking). This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

​

Google processes the information on my behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage for the purposes of market research and tailoring these internet pages to your needs. I have concluded an order processing agreement with Google for the use of Google Analytics. Through this contract, Google assures that they process the data in accordance with the General Data Protection Regulation and ensure the protection of the rights of the data subject.

The use of Google Analytics is based on your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO. In this case, you also consent to the transfer of your data to the USA in accordance with Art. 49 (1) a DSGVO, knowing the risks described.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing this browser add-on. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for my website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. For more information on data protection in connection with Google Analytics, please visit the Google Analytics website.

 

3.4.4 Targeting
The targeting measures listed below and used by me are carried out on the basis of Art. 6 para. 1 lit. f) DSGVO. By means of the targeting measures used, I would like to ensure that you are only shown advertising on your end devices that is oriented to your actual or presumed interests. It is in your interest as well as mine not to bother you with advertisements that are not interesting for you.

​

3.4.4.1 Onsite targeting

On my website, information is collected and evaluated using cookies to optimize advertising. This information includes, for example, details about which of my products you were interested in. The collection and analysis is exclusively pseudonymous and does not allow me to identify you. In particular, the information is not merged with personal data about you. Based on the information, I can show you offers on my site that are specifically geared to your interests, as these result from your previous user behavior. This personal data is collected by the PlugIns of Google Analytics and Facebook Pixel. For more information on data protection, please contact the data protection officers of the PlugIn publishers.

​

3.4.4.2 Re-targeting
I also use re-targeting technologies from Google Analytics and Meta Inc (Facebook Pixel). This enables me to make my online offer more interesting and tailored to you. For this purpose, a cookie is set to collect interest data using pseudonyms. Based on this information, you will be shown interest-related advertisements about my offers on my partners' websites. No directly personal data is stored and no usage profiles are merged with personal data about you. For more information on data protection, please contact the data protection officers of the PlugIn publishers.

​

3.4.4.3 Affiliates
I work with advertising partners to make the online offer on my site even more interesting for you. For this purpose, cookies are also set by my advertising partners when you visit my site (so-called third-party cookies). In the cookies of my advertising partners, information is also stored using pseudonyms about your user behavior and your interests when visiting my site. In some cases, information is also collected that has occurred on other sites prior to your visit to my site. Based on this information, you will be shown interest-based advertisements from my advertising partners. No personal data is stored and no usage profiles are merged with personal data about you. The cookie is stored for a predetermined period of time and then automatically deleted. This period can be viewed at the respective affiliate partner. You can prevent the interest-based advertising of our advertising partners by selecting the appropriate cookie setting in your browser.

​

3.4.4.4 Opt-out / objection option
In addition to the deactivation methods described, you can also generally prevent the targeting technologies explained by making the appropriate cookie setting in your browser. In addition, you have the option of deactivating preference-based advertising using the preference manager available here.

​

3.4.5 Social media plug-ins
I use social plug-ins of the social networks Instagram, LinkedIn and YouTube on my website on the basis of Art. 6 (1) lit. f) DSGVO in order to make my company better known via these. The responsibility for data protection compliant operation is to be ensured by their respective providers. The integration of these plug-ins by me takes place by way of the so-called two-click method to protect visitors to my website as best as possible.

​

3.4.5.1 Instagram
On my website, so-called plug-ins of the social network Instagram are used, which is offered by META Inc. Instagram is operated by META Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("META"). An overview of Instagram's plugins and their appearance can be found here:

https://developers.facebook.com/docs/plugins
 

The Instagram plug-ins are marked with an Instagram logo or the addition "Like" or "Share". When you activate such a plug-in (first click), your browser establishes a direct connection to META's servers. The content of the plug-in is transmitted by META directly to your browser and integrated into the page. Through this integration, META receives the information that your browser has accessed the corresponding page of my website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to a META server in the USA and stored there. If you are logged in to Instagram, META can directly assign your visit to my website to your Instagram profile. If you interact with the plug-ins, for example by clicking the "Like" button, this information is also transmitted directly to a META server and stored there. The information is also published on your Instagram profile and displayed to your Instagram friends.

​

For the purpose and scope of the data collection and the further processing and use of the data by META, as well as your rights in this regard and setting options for protecting your privacy, please refer to META's privacy policy. If you do not want META to directly assign the information collected about your visit to my website to your Instagram profile, you must log out of Instagram before visiting my website.

 

3.4.5.2 LinkedIn
On my website, so-called plug-ins of the social network LinkedIn are used, which is offered by Microsoft Corporation. LinkedIn is operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). An overview of LinkedIn's plugins and their appearance can be found here: 

​

Plugins - LinkedIn | Microsoft Docs
 

The LinkedIn plug-ins are marked with a LinkedIn logo or the addition "Like" or "Share". When you activate such a plug-in (first click), your browser establishes a direct connection to Microsoft's servers. The content of the plug-in is transmitted by Microsoft directly to your browser and integrated into the page. Through this integration, Microsoft receives the information that your browser has accessed the corresponding page of my website, even if you do not have a LinkedIn profile or are not currently logged in to LinkedIn. This information (including your IP address) is transmitted by your browser directly to a Microsoft server in the USA and stored there. If you are logged in to LinkedIn, Microsoft can directly assign the visit to my website to your LinkedIn profile. If you interact with the plug-ins, for example by clicking the "Like" button, this information is also transmitted directly to a Microsoft server and stored there. The information is also published on your LinkedIn profile and displayed to your LinkedIn friends.

​

For the purpose and scope of the data collection and the further processing and use of the data by Microsoft, as well as your rights in this regard and setting options for protecting your privacy, please refer to Microsoft's privacy policy. If you do not want Microsoft to directly assign the information collected about your visit to my website to your LinkedIn profile, you must log out of LinkedIn before visiting my website.

3.4.5.3 YouTube

I implement components (videos) of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "YouTube"), a Google company, on my Internet pages. The implementation is based on your consent according to Art. 6 para. 1 p. 1 lit. a) DSGVO. By loading the videos on my website, data is forwarded to Google. In particular, it is transmitted to Google which of my Internet pages you have visited as well as device-specific information including the IP address. In this regard, I use the "extended data protection mode" option provided by YouTube. If you call up a page that has an embedded video, this only establishes a connection to the YouTube servers and thereby displays the content by notifying your browser on the website when you actually watch the video. If you are logged in to YouTube at the same time, this information will be assigned to your member account with YouTube. You can prevent this by logging out of your member account before visiting my website. Your data will be deleted as soon as it is no longer needed for the purpose of processing. For more information on data protection in connection with YouTube, please refer to Google's privacy policy. For more information on the purpose and scope of data collection and its processing by Google, please click here https://www.google.de/intl/de/policies/privacy.
 

Google transmits the information to Google servers in the USA. The transmitted data are only pseudonyms, a conclusion to your name is not possible. I will only transmit your data if you expressly consent to the processing by Google. In this case, you consent at the same time to the risk that your data will be transferred to the USA in accordance with Art. 49 (1) a DSGVO.

​

3.4.5.4 Jotform (Questionnaire in the area "Wells")
Jotform is used on this website for the form in the "Wells" section to obtain information about the wells and waters. My website uses plugins from the site jotform.com operated by Jotform Inc. The operator of the pages is Jotform Inc, 4 Embarcadero Center, Suite 780, San Francisco, CA 94111, USA. By entering text in the corresponding boxes, uploading images and clicking the "Submit" button, the entered information is transmitted to me and stored on the European servers of Jotform Inc. When you visit one of my pages equipped with a Jotform plugin, a connection is established to the servers of Jotform Inc. This tells the Jotform server which of my pages you have visited. The use of Jotform is in the interest of an appealing presentation of my online offer. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. For more information on the handling of user data, please refer to the privacy policy of JotForm Inc here https://www.jotform.com/privacy/. 

 

3.5 Customer account
In order to provide you with the greatest possible convenience when shopping, I offer you the permanent storage of your personal data in a password-protected customer account. The creation of the customer account is voluntary and is based on your consent in the sense of Art. 6 para. 1 lit. a) DSGVO. After setting up a customer account, no new data entry is required. In addition, you can view and change the data stored about you in your customer account at any time.

​

In addition to the data requested when placing an order, you must enter a password of your choice to set up a customer account. This password is used together with your e-mail address to access your customer account. Please treat your personal access data confidentially and in particular do not make them accessible to unauthorized third parties. I cannot accept any liability for misused passwords, unless I am responsible for the misuse. Please note that you will automatically remain logged in after leaving my website, unless you actively log out. You have the option to delete your account at any time. Please note, however, that this does not simultaneously delete the data visible in the customer account.

 

 

3.6 Contact form
Visitors of my web pages have the possibility to contact me via a contact form. I will use the information you provide via the contact form (mandatory information is marked with an asterisk) solely for the purpose of processing your request. The legal basis for this is both your consent within the meaning of Article 6(1)(a) DSGVO and Article 6(1)(f) DSGVO.

​

The proper processing of your concerns is considered a legitimate interest within the meaning of the DSGVO. If your contact is made in connection with a contractual relationship between you and me, Article 6(1)(b) DSGVO, i.e. this contractual relationship, is also the legal basis for data processing. You can revoke your consent to the use of data explained above at any time with effect for the future free of charge by sending a short message to the contact details given under 1. The lawfulness of the processing based on your consent until the time of your revocation is not affected by this. However, I would like to point out that from the time of a possible revocation, a processing of your request is no longer possible. Outside of the existence of a revocation, your data related to the request will be deleted after processing your request. How I proceed in the event of the exercise of data subject rights, you will learn below.
 

​

4. Your rights

​

4.1 Overview
In addition to the right to withdraw the consent you have given to me, you have the following additional rights if the respective legal requirements are met:

​

• Right to information about your personal data stored by me pursuant to Art. 15 DSGVO; in particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data, if it has not been collected directly from you,

​

• Right to correct incorrect data or to complete correct data according to Art. 16 DSGVO,

​

• Right to delete your data stored by me according to Art. 17 DSGVO as far as no legal or contractual retention periods or other legal obligations or rights for further storage are to be observed,

​

• Right to restrict the processing of your data pursuant to Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure; the controller no longer requires the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO,

​

• Right to data portability pursuant to Art. 20 DSGVO, i.e. the right to have selected data stored by me about you transferred in a common, machine-readable format, or to request that it be transferred to another controller.

​

• The right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or my company headquarters for this purpose.

 

4.2 Right of objection
Under the conditions of Art. 21 (1) DSGVO, data processing may be objected to for reasons arising from the particular situation of the data subject.

​

The above general right of objection applies to all processing purposes described in this privacy information, which are processed on the basis of Art. 6 (1) (f) DSGVO. Unlike the specific right of objection directed at data processing for promotional purposes (compare above), under the GDPR I am only obliged to implement such a general objection if you provide me with reasons of overriding importance for doing so (e.g., a possible risk to life or health). In addition, you have the option of contacting the supervisory authority responsible for the state of Hesse:

 

The Hessian Commissioner for Data Protection and Freedom of Information

P.O. Box 3163
65021 Wiesbaden
Germany
Tel.: +49 611 1408-0

​

If you assert one or more of the data subject rights listed above against me, I will store this fact in anonymized form on the basis of Article 6 (1) (f) DSGVO. The fact that I can also prove proper compliance with your request in cases of doubt is to be regarded as a legitimate interest within the meaning of this provision. A deletion of this anonymized information, i.e. information that can no longer be associated with your person, does not take place.

 

5. Data security
All data transmitted by you personally, including your payment data, will be transmitted using the generally accepted and secure standard SSL (Secure Socket Layer). SSL is a secure and proven standard that is also used, for example, in online banking. You can recognize a secure SSL connection by the appended s at the http (i.e. https://sommcademy.de) in the address bar of your browser or by the lock symbol in the lower area of your browser.

​

I also use appropriate technical and organizational security measures to protect your personal data stored by me against manipulation, partial or complete loss and against unauthorized access by third parties. My security measures are continuously improved in line with technological developments and adapted as necessary.

​

Status of this privacy policy: September 2023

​