Privacy policy

Last updated: 12 October 2026

This is a translation of our German privacy policy (Datenschutzerklärung). In case of doubt, the German version applies.

1. 1 About our website
2. 2 Name and address of the controller
3. 3 Contact details of the data protection officer
4. 4 General information on data processing
5. 5 Hosting
6. 6 Provision of the website and log files
7. 7 Use of cookies and browser storage
8. 8 Google Analytics 4
9. 9 Maps and geodata services
10. 10 Fonts
11. 11 Social media
12. 12 Contact form and email contact
13. 13 Online request (eAnfrage)
14. 14 WebGIS appointment booking
15. 15 Area for parties to land readjustment procedures
16. 16 Downloading shared files
17. 17 Transfer of personal data
18. 18 Changes to this privacy policy
19. 19 Your rights

1 About our website

This website is operated by GOLNIK & PARTNER Öffentlich bestellte Vermessungsingenieure mbB. The following privacy policy applies to the use of our website.

We attach great importance to data protection. Your personal data are collected and processed in compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Here we inform you about the type, scope and purpose of the processing of personal data and about any processing of data in third countries outside the European Union.

2 Name and address of the controller

The controller for the collection, processing and use of your personal data within the meaning of Art. 4(7) GDPR is

GOLNIK & PARTNER
Öffentlich bestellte Vermessungsingenieure mbB
Lise-Meitner-Ring 7, 18059 Rostock, Germany
Phone +49 381 405 69-0
Email info@golnik.de

3 Contact details of the data protection officer

If you wish to object to the collection, processing or use of your data by us in accordance with this privacy policy, in whole or for individual measures, you can address your objection to the controller. Our data protection officer can be reached as follows:

Data protection officer
GOLNIK & PARTNER
Öffentlich bestellte Vermessungsingenieure mbB
Lise-Meitner-Ring 7, 18059 Rostock, Germany
Phone +49 381 405 69-0
Email datenschutz@golnik.de

4 General information on data processing

4.1 Scope of the processing of personal data

Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) GDPR serves as the legal basis.

4.2 Legal basis for the processing of personal data

Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary to take steps prior to entering into a contract.

Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.

Where vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.

Where the processing is necessary for the purposes of a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override that interest, Art. 6(1)(f) GDPR serves as the legal basis for the processing.

4.3 Storage period

The personal data of the data subject are deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored beyond this if provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data are also blocked or deleted when a storage period prescribed by these provisions expires, unless further storage is necessary for the conclusion or performance of a contract.

5 Hosting

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. All data arising from visits to the website and from its forms are processed on the host's servers in Germany. We have concluded a data processing agreement with the host in accordance with Art. 28 GDPR.

The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR); where you use a form, additionally the legal basis stated for that form.

6 Provision of the website and log files

6.1 Scope of the processing of personal data

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. Tracking and logging are activated by default.

The following data are collected:

• requested web page or file
• date and time of access
• amount of data transferred
• information about the browser type and version used
• the user's operating system
• type of device used
• the user's internet service provider
• the user's IP address, anonymised, used only to determine the location of access
• websites from which the user's system reaches our website
• referrer (previously visited website)
• websites accessed by the user's system via our website

The data are also stored in the log files of our system. These data are not stored together with other personal data of the user.

We reserve the right to check these data subsequently and to pass them on to authorised third parties if there is suspicion of unlawful use of our website.

6.2 Purpose of the processing of personal data

The temporary storage of the IP address by the system is necessary to deliver the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Storage in log files takes place for technical reasons, in particular to defend against attacks, to check for misuse where there is suspicion, to investigate suspected criminal use and to ensure the functionality of the website. We also use the data to optimise the website. The data are not evaluated for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing under Art. 6(1)(f) GDPR.

6.3 Legal basis for the processing of personal data

The legal basis for the temporary storage of the data and the log files is Art. 6(1)(f) GDPR.

6.4 Storage period

The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. For data collected to provide the website, this is the case when the respective session has ended.

For data stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case the IP addresses of the users are deleted or altered so that the accessing client can no longer be identified.

6.5 Objection

The collection of data to provide the website and the storage of data in log files are essential for the operation of the website. Consequently, the user has no right to object.

6.6 Our own page view count

To find out which pages are in demand, we count the page views ourselves. Counting takes place on our web server when it delivers a page or when a form has been sent successfully. For this we set no cookies of our own, read nothing from your browser and store neither your IP address nor your browser identifier or any other identifier. This count is separate from Google Analytics (section 8) and also takes place without your consent.

For each page view we only store:

• date and time to the minute
• the page viewed, without additions in the address
• the domain of the page you came from, without the exact address
• the device type (mobile, tablet, computer or bot); the browser identifier is only read for this, not stored
• campaign information if the address contains it (utm_source, utm_campaign, reference to Google Ads)
• for the eAnfrage also the place on the website from which you opened it and, when sending, the services selected. Until it is sent, this information is held by the eAnfrage session (section 7, PHPSESSID); there is no separate cookie for it.

To leave out page views from our office, we compare your IP address with the addresses of our office network when the page is viewed. Only the result of this comparison is stored, not the address.

This information can neither identify individual visitors nor track them across pages or days. We delete the individual page views after 14 days; after that only the totals per day remain.

The purpose is to improve our services and the usability of the website. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. As nothing is stored on or read from your device, consent under Section 25 TDDDG is not required. Since we cannot attribute the stored page views to any person, we are also unable to look them up or delete them for individual persons (Art. 11 GDPR).

7 Use of cookies and browser storage

7.1 Scope of the processing of personal data

Our website uses cookies. Cookies are text files that are stored in or by the web browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is accessed again. Cookies are stored on your computer's hard drive and do not cause any damage there.

We set the following cookies:

• cookie_banner: stores your decision as to whether we may use statistics (Google Analytics, section 8), value “true” or “false”. Storage period 365 days. Technically necessary so that we can respect your decision.
• PHPSESSID (session cookie): only on the contact pages, on the WebGIS appointment booking page, in the online request, in the area for parties to land readjustment procedures (section 15) and on the page for downloading shared files (section 16). It contains a random identifier that protects your form against misuse and keeps your progress; in the area for parties it also keeps you signed in. It is deleted when you close the browser.
• Google Analytics cookies (_ga and _ga_ with an identifier): only with your consent, see section 8.

In addition, we store in your browser's session storage (sessionStorage) from which part of the website you opened the online request or the appointment booking. This information only leaves your browser as part of Google Analytics (section 8), that is only with your consent, and is deleted when you close the tab. On the development plan pages we also store there whether you have already started or declined the introduction to the map, so that we do not ask again on every page. This information does not leave your browser.

The user data collected in this way are pseudonymised or altered by technical measures. It is therefore no longer possible to attribute the data to the accessing user. The data are not stored together with other personal data of the users.

When accessing our website, users are informed about the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. In this context, reference is also made to this privacy policy.

7.2 Purpose of the processing of personal data

The purpose of using technically necessary cookies is to make it easier for users to use websites. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

The user data collected by technically necessary cookies are not used to create user profiles.

Analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus continuously optimise our offer.

These purposes also constitute our legitimate interest in the processing of personal data under Art. 6(1)(f) GDPR.

7.3 Legal basis for the processing of personal data

The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6(1)(a) GDPR, provided the user has given consent.

We set technically necessary cookies and session storage entries without consent in accordance with Section 25(2) No. 2 TDDDG; the legal basis for the associated processing is Art. 6(1)(f) GDPR.

7.4 Storage period and objection

Cookies are stored on the user's computer or device and transmitted from there to our website. As a user you therefore have full control over the use of cookies. By changing the settings in your web browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time, also automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

8 Google Analytics 4

8.1 Scope of the processing of personal data

If you have given your consent, this website uses Google Analytics 4, a web analytics service of Google LLC. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Without your consent, Google Analytics is not loaded and no connection to Google is established. After your consent, we pass your decision to Google via “Consent Mode”; if you withdraw it, storage for analysis purposes is switched off again immediately.

Google Analytics uses cookies that enable an analysis of your use of our website. The information collected by the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

We do not use the User-ID function. We do not analyse your user behaviour across devices over one or more sessions.

We do not use Google Signals. We do not use Google Analytics to collect additional information about users who have activated personalised ads (interests and demographic data). No ads are delivered to these users in cross-device remarketing campaigns.

According to Google, IP addresses of users in the EU are not logged or stored in Google Analytics 4. They are only used on servers in the EU to determine the approximate region and are then discarded.

During your visit to the website, your user behaviour is recorded in the form of “events”. Events may be:

• page views
• first visit to the website
• start of the session
• web pages visited
• your “click path”, interaction with the website
• scrolls (whenever a user scrolls to the end of the page (90%))
• clicks on external links
• internal searches
• interaction with videos
• file downloads
• ads seen or clicked
• language setting
• clicks on phone numbers, email addresses and the buttons for the online request and appointment booking, the submission of a form, the use of the price calculator and the language switch; no form content is transmitted

The following is also recorded:

• your approximate location (region)
• date and time of the visit
• your IP address, only to determine the region and not stored
• technical information about your browser and the devices you use (for example language setting, screen resolution)
• your internet service provider
• the referrer URL (via which website or advertising medium you came to this website)

Recipients of the data are or may be

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor under Art. 28 GDPR)
• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
• Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Transfer to third countries: On 10 July 2023, the European Commission adopted its adequacy decision for the USA. Google LLC is certified under the EU-US Data Privacy Framework. As Google servers are distributed worldwide and a transfer to third countries (for example Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.

8.2 Purpose of the processing of personal data

On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics serve to analyse the performance of our website.

8.3 Legal basis for the processing of personal data

The legal basis for this data processing is your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) sentence 1 TDDDG.

8.4 Storage period

The data we send that are linked to cookies are automatically deleted 14 months after the last visit. The maximum lifetime of the Google Analytics cookies is 2 years. Data whose retention period has been reached are deleted automatically once a month.

8.5 Objection

You can withdraw your consent at any time with effect for the future by opening the cookie settings (link “Cookie settings” at the bottom of every page) and changing your selection. The lawfulness of the processing carried out on the basis of the consent until its withdrawal remains unaffected.

You can also prevent cookies from being stored in the first place by setting your browser software accordingly. However, if you configure your browser to reject all cookies, functions on this and other websites may be restricted. You can also prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google and the processing of these data by Google by

1. not giving your consent to the setting of the cookie, or
2. installing the browser add-on to deactivate Google Analytics.

Please refer to the Google Analytics terms of use and the information on privacy at Google.

9 Maps and geodata services

We show maps on several pages: the location of our offices (home page, contact, company), the development plan map, the parcel map of the online request and the map in the area for parties to land readjustment procedures. Your browser loads the map images and geodata directly from the servers of the respective providers. In doing so, they receive your IP address, the date and time, the map section requested and information about your browser. The office maps are only loaded when you scroll to them.

• basemap.de (background map on all maps): Federal Agency for Cartography and Geodesy (BKG), Karl-Rothe-Straße 10-14, 04105 Leipzig, Germany. Privacy information of basemap.de
• Geodata services of the state of Mecklenburg-Vorpommern (parcels, aerial photographs and development plans on the development plan map and in the online request; aerial photographs also on the map in the area for parties): Landesamt für innere Verwaltung Mecklenburg-Vorpommern, Lübecker Straße 287, 19059 Schwerin, Germany. Privacy information of GeoPortal.MV
• Nominatim (address search in the online request, only if you search for an address; your search term is also transmitted. If you select a parcel, the page also queries the place name there; only the centre of the parcel is transmitted for this): OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. Privacy policy of the OpenStreetMap Foundation

In the online request you can move the map to your location with “My location”. Your browser asks you for permission first. The location remains in your browser and is not transmitted to us; the map then only loads the map images of this area.

The legal basis is our legitimate interest in a clear presentation of our offices and in the search for parcels and development plans (Art. 6(1)(f) GDPR); in the online request, the map also serves to prepare your request (Art. 6(1)(b) GDPR). We do not store any data ourselves in this process.

10 Fonts

The font of the headings (Poppins) is hosted on our own server. Loading the page does not establish a connection to Google Fonts or any other font provider.

11 Social media

Our website does not use social media plugins, but so-called social bookmarks. These are only included on our website as links to the respective services. After clicking on the graphic, the user is redirected to the page of the respective provider.

Our website uses social bookmarks for the following providers:

• Facebook: Facebook is operated at https://www.facebook.com by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
• Instagram: Instagram is operated at https://www.instagram.com by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
• LinkedIn: LinkedIn is operated at https://www.linkedin.com by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
• Xing: Xing is operated at https://www.xing.com by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

12 Contact form and email contact

12.1 Scope of the processing of personal data

On our website we offer users the opportunity to contact us electronically by providing personal data. The form is available in German and in English. The data are entered into an input form, transmitted to us and stored. These data are only used to process your enquiry and to contact you. The data are not passed on to third parties without your express consent. The following data are collected in the contact form:

• first name (required)
• last name (required)
• email address (required)
• phone
• your message (required)
• the user's IP address, stored to protect against misuse only for a blocking period of ten minutes and deleted afterwards
• date and time of the enquiry

In the contact form, the user's consent to the processing of these data is obtained and reference is made to this privacy policy.

The form sends your details to us by email. You receive a confirmation, in the language of the form, at the address you entered; it contains none of your entries. To prevent the form from being misused to send many confirmations to other people's addresses, we keep the recipient address for this purpose for 24 hours.

Alternatively, you can contact us via the email address provided. In this case the user's personal data transmitted with the email are stored.

12.2 Purpose of the processing of personal data

We process the personal data from the input form solely to handle the contact. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

12.3 Legal basis for the processing of personal data

The legal basis for the processing of the data is Art. 6(1)(a) GDPR if the user has given consent.

The legal basis for the processing of data transmitted by email is Art. 6(1)(f) GDPR. If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR.

12.4 Storage period

The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input form of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The personal data additionally collected during the sending process are deleted after seven days at the latest.

12.5 Objection

The user may withdraw consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

Consent must be withdrawn in the same way as it was given, or by email if we already have your email address.

In this case, all personal data stored in the course of the contact are deleted.

13 Online request (eAnfrage)

13.1 Scope of the processing of personal data

On our website we offer users the opportunity to submit electronic requests for quotations (“eAnfrage”, in English “online request”) by providing personal data. The online request is available in German and in English. The data are entered into an input form, transmitted to us and stored. These data are only used to process your request for a quotation and to contact you. The data are not passed on to third parties without your express consent. The following data are collected in the online request, depending on the services selected:

Details of the object to be surveyed:

• place, where applicable
• street, where applicable
• house number, where applicable
• coordinate, where applicable
• cadastral district (Gemarkung), where applicable
• field (Flur), where applicable
• land parcel (Flurstück), where applicable
• land value, where applicable
• area to be surveyed, where applicable
• number of partial areas, where applicable
• number of new parcels (after merging), where applicable
• number of boundary points, where applicable
• details of buildings (building value, number of buildings, affiliation), where applicable
• description of the project (required)
• comments, where applicable
• sketch of the project, where applicable
• attachments, where applicable

Details of the client:

• company
• first name (required)
• street (required)
• house number (required)
• postcode (required)
• town (required)
• phone (required)
• email address (required)

Where the invoice recipient is different:

• company
• first name (required)
• street (required)
• house number (required)
• postcode (required)
• town (required)
• phone
• email address

Where the owner is different:

• company
• first name (required)
• street (required)
• house number (required)
• postcode (required)
• town (required)
• phone
• email address

In addition:

• the user's IP address, stored to protect against misuse only for a blocking period of ten minutes and deleted afterwards
• date and time of the request

In the online request, the user's consent to the processing of these data is obtained and reference is made to this privacy policy.

Documents that you select as attachments are uploaded to our server immediately. They are only kept there until your request has reached us and are deleted after two days at the latest, even if you do not submit the request. For the map in the online request, see section 9.

13.2 Purpose of the processing of personal data

We process the personal data from the input form solely to handle the user's request or to take steps prior to entering into a contract.

The other personal data processed during the sending process serve to prevent misuse of the form and to ensure the security of our information technology systems.

13.3 Legal basis for the processing of personal data

The legal basis for the processing of the data is Art. 6(1)(a) GDPR if the user has given consent.

13.4 Storage period

The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected.

For the data collected to handle the user's request or to take steps prior to entering into a contract, this is the case when the data are no longer required for handling the request or for taking these steps. Even after the conclusion of the contract, it may be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations.

13.5 Objection

If the data are required to handle the user's request or to take steps prior to entering into a contract, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion. As a user you have the option of withdrawing from the request. Even after withdrawal from the request, it may be necessary to store the personal data in order to comply with contractual or legal obligations.

You can have the data stored about you changed at any time.

14 WebGIS appointment booking

14.1 Scope of the processing of personal data

On the page about our WebGIS for housing companies (in German) you can book a video appointment. We process:

• the selected appointment (date and time)
• name (required)
• company
• email address (required)
• phone
• the topics you would like to discuss in the appointment
• the language of the page on which you booked (German or English)
• if you wish, your selection from the price calculator (package and modules)
• where applicable, the information from the link you followed about which advertisement or event brought you to us; it describes the campaign, not you
• the user's IP address, stored to protect against misuse only for a blocking period of ten minutes and deleted afterwards

The booking is first stored in a database on our hosting provider's server. From there we transfer it to our internal system within a few minutes via an encrypted connection and then delete your details on the hosting provider's server. Only the booked slot and a checksum of your email address remain there, so that nobody can block several appointments at the same time with the same address. We receive the booking by email with a calendar file, and you receive a confirmation of the appointment; it contains none of your other entries. Your selection from the price calculator is only included in the email to us, not in the database.

14.2 Purpose of the processing of personal data

We process the data to arrange, prepare and hold the appointment and to prevent duplicate or abusive bookings.

14.3 Legal basis for the processing of personal data

The legal basis is taking steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR); for protection against misuse, our legitimate interest (Art. 6(1)(f) GDPR).

14.4 Storage period

The booking is deleted automatically 30 days after the appointment, in our internal system as well as the booked slot on the hosting provider's server. If the appointment leads to an order, we store the details required for it for as long as necessary for the order and statutory retention obligations.

14.5 Objection

You can cancel the appointment at any time, most easily by replying to the confirmation. We will then delete your booking.

15 Area for parties to land readjustment procedures

15.1 Scope of the processing of personal data

In land readjustment procedures (Umlegung) that we prepare and support, parties can view the status of the procedure for their parcels on an online map. You only get access with a personal invitation from us.

The body that conducts the procedure is responsible for the data of the land readjustment procedure. As a rule, this is the municipality named above the map of your procedure. In that case we operate this area on its behalf (Art. 28 GDPR). If the municipality has transferred its powers in the procedure to us (section 46(4) BauGB), we are responsible ourselves; in that case we will point this out to you with the invitation.

For your access, the following is stored on our hosting provider's server:

• your email address and the form of address we use for you
• the order numbers, parcels and land register details of the procedure that belong to your access (identifier, cadastral district, area, share, land register sheet and district, use), and the status of the procedure
• a checksum of your invitation link; we do not store the link itself on the server
• your password, only as a non-reversible hash value, and the time you set it. You choose your password yourself; we do not know it.
• the user's IP address, to protect against misuse, only after failed sign-ins or invalid invitation links and only for a blocking period of 15 minutes; deleted with the next storage operation after that

We transfer the details of the procedure and of your access from our internal system via an encrypted connection. We do not store when you sign in or view the map. You are signed out automatically after 30 minutes without activity. We do not use Google Analytics on these pages, not even with your consent. The map loads map images from the providers listed in section 9.

15.2 Purpose of the processing of personal data

We process the data so that only you can see the status of the procedure for your parcels, and to protect the access against misuse.

15.3 Legal basis for the processing of personal data

The legal basis is the performance of a task carried out in the public interest by the body that conducts the land readjustment procedure (Art. 6(1)(e) GDPR in conjunction with sections 45 et seq. of the German Building Code, BauGB); for protection against misuse, the legitimate interest in operating the access securely (Art. 6(1)(f) GDPR).

15.4 Storage period

The details remain on the server for as long as your access exists. If we remove your access or take the procedure offline, your details and your password are deleted from the hosting provider's server; an active sign-in ends with the next page request.

15.5 Objection

You can ask your contact person in the procedure to remove your access at any time. The files of the land readjustment procedure are not affected by this. You can exercise your rights under section 19 with the body that conducts the procedure or with us; we will then forward your request.

16 Downloading shared files

16.1 Scope of the processing of personal data

We can provide documents for you to download via a personal link with a password. For this purpose, the following is stored on our hosting provider's server:

• the file, its name and its size
• the password, only as a non-reversible hash value, and the deletion date
• the time of each download; we do not store who downloaded the file
• the user's IP address, to protect against misuse, only after a wrong password and only for a blocking period of 15 minutes; deleted with the next storage operation after that

We do not store your email address or your name on the server. You receive the link and the password from us by email. We do not use Google Analytics on this page, not even with your consent.

16.2 Purpose of the processing of personal data

We process the data to hand over documents securely that are too large for an email, and to see whether the file has been downloaded.

16.3 Legal basis for the processing of personal data

The legal basis is the performance of a contract or taking steps prior to entering into a contract (Art. 6(1)(b) GDPR); for protection against misuse, our legitimate interest (Art. 6(1)(f) GDPR).

16.4 Storage period

The file and all related details are deleted on the deletion date, at the latest on the following day. The deletion date is at most one year in the future. If we withdraw the share earlier, it is deleted immediately.

16.5 Objection

You can ask us at any time to delete the share early.

17 Transfer of personal data

Unfortunately, the transmission of information via the internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website via the internet.

However, we make every effort to protect your data within the scope of the applicable data protection laws and technical possibilities. We protect our website and other IT systems by appropriate technical and organisational measures against loss of availability, integrity and confidentiality. Your personal data are transmitted in encrypted form on our website. You can recognise the secure connection by the fact that the address displayed begins with “https://...” instead of “http://...” and a closed padlock is shown in your browser. You can obtain more information about our SSL certificate by clicking on the padlock.

18 Changes to this privacy policy

We reserve the right to adapt this privacy policy from time to time so that it always complies with current legal requirements or to reflect changes to our services, for example when introducing new services. The new privacy policy will then apply to your next visit.

19 Your rights

Under the applicable laws you have various rights regarding your personal data. If you wish to exercise these rights, please send your request by email or post to our data protection officer, clearly identifying yourself.

Under the General Data Protection Regulation you have the following rights:

• If your personal data are processed, you have the right to obtain information about the data stored about you (Art. 15 GDPR).
• If incorrect personal data are processed, you have the right to rectification (Art. 16 GDPR).
• If the legal requirements are met, you can request the erasure or restriction of processing and object to the processing (Art. 17, 18 and 21 GDPR).
• If you have consented to the data processing or a contract for data processing exists and the processing is carried out by automated means, you may have a right to data portability (Art. 20 GDPR).
• You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).
• You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Data Protection and Freedom of Information Commissioner of Mecklenburg-Vorpommern (Landesbeauftragter für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern), Werderstraße 74a, 19055 Schwerin, Germany, www.datenschutz-mv.de.

If you exercise the rights mentioned above, we will check whether the legal requirements for this are met. To exercise your rights, please contact our data protection officer.