We are very pleased about your interest in our company. This Privacy Policy is intended to inform you about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, this Privacy Policy explains your rights to which you are entitled. The terms used in this Privacy Policy correspond to those of the General Data Protection Regulation (GDPR).

Personal data is any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more specific factors that express the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

1. Controller

The controller responsible for processing within the meaning of the GDPR, other data protection laws applicable in the Member States of the European Union, and other provisions of a data protection nature is:

proxima idea KG
Nebelhornstraße 3
87448 Waltenhofen
Germany

Represented by:
Managing Director Daniel Michel

Contact:
Phone: +49 8303 23741-0
Fax: not available
Email: hello@hey-maria.com

2. Purposes of Data Use, Legal Bases, and Our Legitimate Interests

Use of this website is generally possible without providing any personal data. If such data is collected, the following applies:

a. Collection of General Data and Information and Its Purpose

Each time our website is accessed, we collect various general data and information. We store these in the server log files. The following may be collected:

• the browser types and versions you use, including information about the kind and type of your display device,
• the operating system you use,
• the website from which you access our website (so-called referrers),
• the subpages that are accessed via an accessing system on our website,
• the date and time of access to our website,
• your Internet Protocol address (IP address),
• your Internet service provider, and
• other similar data and information that serve to prevent and protect against attacks on our IT systems.

We do not draw any conclusions about your person from these data and information. We need this information to display our website correctly, to ensure the functionality of our IT systems and our website, and to be able to provide law-enforcement authorities with the information necessary for prosecution in the event of criminal offences.

The anonymous data of the server log files are stored separately from any personal data you may have provided.

b. Collection of Personal Data and Its Purpose

Our website offers various ways to contact us. You can contact us via the email address provided by us or by using a contact form or a corresponding function. In such cases, we store the personal data you enter. Which data are collected in each case results from the type of communication or the fields of the form used. Data voluntarily transmitted by you are stored by us for the purpose of processing your requests and/or contacting you. We do not pass on personal data to third parties.

c. Legal Basis and Legitimate Interest

Inquiries about our services are processed in accordance with Art. 6(1)(b) GDPR, as this is required for the implementation of pre-contractual measures. If a contract is concluded, data processing is also carried out in accordance with Art. 6(1)(b) GDPR. If we are legally obliged to process data, e.g., to fulfil tax obligations, this is done in accordance with Art. 6(1)(c) GDPR. Finally, data processing may also be based on Art. 6(1)(f) GDPR. This applies if processing is not based on any of the aforementioned legal bases and is necessary to safeguard a legitimate interest of our company or of a third party. Our legitimate interest is the pursuit of our business activity for the benefit of our employees and owners. If the processing of personal data is necessary and there is no legal basis under the provisions described above, we obtain your consent. In such cases, Art. 6(1)(a) GDPR constitutes the legal basis for data processing.

d. Automated Decision-Making

Automated decision-making or profiling does not take place.

3. Storage Duration

We store your personal data only as long as we are obliged to do so due to relevant statutory provisions (e.g., tax laws). After expiry of the respective retention period, we routinely delete the corresponding data, provided they are no longer required for contract performance or initiation. If the purpose for storage ceases to apply before the end of a statutory retention period, we delete the corresponding data without undue delay. If we have to delete data because you have exercised intervention rights, this is also done without undue delay.

4. Your Rights

a. Right to Confirmation

You have the right to request confirmation from us as to whether personal data concerning you are being processed. Such requests must be addressed to us. If you submit the request electronically, the information shall be provided by us in a commonly used electronic format, unless you specify otherwise.

b. Right of Access

If we process personal data concerning you, you have the right at any time to obtain from us, free of charge, information about the personal data stored about you and a copy of these data. In addition, you may request information about:

• the purposes of processing;
• the categories of personal data processed;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
• if possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria used to determine this duration;
• the existence of a right to rectification or erasure of personal data concerning you or restriction of processing by us, or a right to object to such processing;
• the existence of a right to lodge a complaint with a supervisory authority;
• if the personal data are not collected from you, any available information as to their source;
• the existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR and — at least in these cases — meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for you.

You also have the right to be informed whether personal data are transferred to a third country or to an international organization. Where this is the case, you have the right to be informed of the appropriate safeguards relating to the transfer.

You may contact us at any time to exercise the aforementioned rights of access. If you submit the request electronically, the information shall be provided by us in a commonly used electronic format, unless you specify otherwise.

c. Right to Rectification

You have the right to request the immediate rectification of inaccurate personal data concerning you. Taking into account the purposes of processing, you also have the right to request completion of incomplete personal data — including by means of a supplementary statement. Such requests must be addressed to us.

d. Right to Erasure (Right to Be Forgotten)

You may request that we immediately erase personal data concerning you if one of the following reasons applies:

• the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• you withdraw your consent on which the processing was based under Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing;
• you object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object pursuant to Art. 21(2) GDPR;
• the personal data have been processed unlawfully;
• erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject; or
• the personal data have been collected in relation to the offer of information society services pursuant to Art. 8(1) GDPR.

If one of the above reasons applies and you wish to request erasure of personal data stored by us, you may contact us at any time.

e. Right to Restriction of Processing

You have the right to request restriction of processing from us if one of the following conditions applies:

• you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
• the processing is unlawful, you oppose the erasure of the personal data and request instead the restriction of their use;
• we no longer need the personal data for the purposes of processing, but you require them for the establishment, exercise, or defence of legal claims; or
• you have objected to processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether our legitimate grounds override yours.

If one of the above reasons applies and you wish to request restriction of processing of your personal data, you may contact us at any time.

Where processing has been restricted by us, such personal data shall — apart from being stored — be processed only with your consent or for the establishment, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.

f. Right to Data Portability

You have the right to receive the personal data concerning you which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and the processing is carried out by automated means. Furthermore, you have the right to request that personal data be transmitted directly from us to another controller, where technically feasible and where this does not adversely affect the rights and freedoms of others.

These rights do not apply where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

You may contact us at any time to exercise the right to data portability.

g. Right to Object

You have the right, on grounds relating to your particular situation, to object at any time to processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR.

We will no longer process the personal data in the event of the objection unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.

In addition, you have the right, on grounds relating to your particular situation, to object to processing of personal data concerning you for scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

You may contact us at any time to exercise your right to object. You may also exercise your right to object by automated means in connection with the use of information society services, notwithstanding Directive 2002/58/EC, where technical specifications are used.

h. Right to Withdraw Consent Under Data Protection Law

You have the right to withdraw your consent to the processing of personal data at any time. You may send corresponding notifications to us. Withdrawal does not affect the lawfulness of processing carried out before its receipt.

i. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority at any time. To do so, please contact the supervisory authority directly.

4. Further Information

Please note that providing personal data is in part required by law (e.g., tax regulations) and/or may result from contractual obligations (e.g., data of the contracting party). It is also required for concluding a contract.

You only need to provide us with personal data if you contact us or if you wish to conclude a contract with us. If you do not provide data in such cases, we will not be able to contact you and no contracts can be concluded.

5. Cookies

Our website uses cookies. Cookies are text files that are stored on a computer system via an Internet browser. Many websites and servers use cookies. The use of cookies on our site enables us to make the use of our website more user-friendly; without cookies this would not be possible.

Many cookies contain a so-called cookie ID. This is a unique identifier of the cookie, consisting of a string of characters. It enables websites and servers to associate the cookie with the specific Internet browser in which it was stored. Those associated websites and servers can then recognize and identify a particular Internet browser via the unique cookie ID and distinguish it from other browsers.

For example, a user of such a website does not have to re-enter access data on each visit. This is done automatically by the relevant function of the website and the cookie stored in the browser.

You can prevent cookies from being set by our website at any time by adjusting the settings of your Internet browser. This permanently objects to the setting of cookies. Cookies that have already been set can be deleted at any time via the corresponding functions of your Internet browser or other suitable software. If you make use of this option, the functionality of our website may be restricted in certain cases.