Note: This is a convenience translation of the German "Datenschutzerklärung". In case of legal disputes, the German version is legally binding.
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified.
The data processing on this website is carried out by the website operator. You can find their contact details in the section "Information about the responsible party" in this data protection declaration.
On the one hand, your data is collected when you communicate it to us. This can be data that you enter in a contact form.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page call). This data is collected automatically as soon as you enter this website.
Part of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior.
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have a right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. Furthermore, you have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have a right of appeal to the competent supervisory authority.
We host the content of our website with the following provider:
The provider is united-domains AG, Gautinger Straße 10, 82319 Starnberg, Germany (hereinafter United Domains). When you visit our website, United Domains collects various log files including your IP addresses.
The use of United Domains is based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website possible.
We have concluded a contract for order processing (AVV) for the use of the above-mentioned service.
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
The responsible body for data processing on this website is:
Andreas Rühl Consulting
Belziger Str. 69/71
10823 Berlin
Germany
Phone: +49 15679703280
E-Mail: info@a-r-c.me
Unless a more specific storage period has been stated in this data protection declaration, your personal data will remain with us until the purpose for the data processing no longer applies.
IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
In the event of violations of the GDPR, those affected have a right of appeal to a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged violation.
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator.
We use Stripe for the B2B checkout, payment processing, payment confirmation and fraud prevention. Stripe does not calculate VAT for this product and does not create the formal tax invoice; A-R-C handles the applicable tax treatment and invoicing manually. For European users, the provider is in particular Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Other Stripe group companies may participate depending on the processing activity.
Data processed can include company or legal-entity details, the ordering person's name and email address, billing address, country, VAT ID where supplied and its validation status, order and product data, payment status, billing data, technical transaction data, and payment and fraud-prevention data collected by Stripe. Full card or account details are processed directly by Stripe and not by our web server.
The legal bases include Article 6(1)(b) GDPR for pre-contractual steps and contract performance, Article 6(1)(c) GDPR for applicable tax and commercial-law duties, and Article 6(1)(f) GDPR for secure payment processing and fraud prevention. Stripe may process data under its own legal duties and responsibilities. Further information: Stripe Privacy Policy.
The technical checkout transition, server-side payment-status verification and protected digital delivery use infrastructure provided by Vercel Inc., USA. Processing can include IP address, timestamp, invoked function, technical request and response data, Stripe session reference, release ID, delivery status and error events. The product ZIP is not exposed under a public download URL; access is released only after server-side payment validation through a time-limited token.
The legal bases are Article 6(1)(b) GDPR for contract performance and Article 6(1)(f) GDPR for secure and traceable delivery and misuse prevention. Where a third-country transfer is required, safeguards under Articles 44 et seq. GDPR are used, in particular appropriate standard contractual clauses or an applicable adequacy mechanism. Further information: Vercel Privacy Policy.
Order, payment, invoice and tax records are kept in line with applicable commercial and tax retention duties. Technical delivery and support logs are generally retained for up to twelve months and then deleted or anonymised, unless they are still required for an active support, security, chargeback or legal case, or for a statutory obligation.
Source: Translated from eRecht24