Privacy Policy

This English translation is provided for convenience only. In the event of any discrepancies, the German version shall prevail.

§ 1 Controller Responsible for Data Processing on This Website

Pauly-IT Dienstleistungen

Karin Christore Pauly (Owner)
Alt-Niedereschbach 9
D-60437 Frankfurt am Main

Telefon: +49 69 400 55 17 0
Email: kontakt@pauly-it.com

§ 2 Data Processing When Using the Functions of the Website, and Purposes and Legal Bases of Processing

When you contact us by email or via one of our contact forms, the data you provide (your email address, your name and, if applicable, your phone number, your inquiry, and the services you have selected) will be stored by us in order to process your inquiry. Providing personal data (e.g., email address) is required to respond to your inquiry. Therefore, it is not possible to use the contact forms without this information. We delete the data collected in this context—if the request is associated with a contract—in accordance with the retention periods applicable to the contract term. Otherwise, we delete the data once its storage is no longer necessary, at the latest three years after the data was created, at the end of the general limitation period, or we restrict its processing if statutory retention obligations apply. To prevent misuse of the contact forms through mass inquiries, the IP address is stored for 1 hour when the contact forms are used and then deleted.

The legal basis for this data processing for the purpose of pre-contractual or contractual communication is Art. 6(1)(b) GDPR. Where non-contractual inquiries are processed, the legal basis is Art. 6(1)(f) GDPR and our legitimate interest in processing your non-contractual inquiries or in asserting, exercising, or defending legal claims arising from or in connection with the use of our website.

§ 3 Processing of Personal Data When Visiting Our Website Without Using Any Further Functions, and Purposes and Legal Bases of Processing

When you use the website for informational purposes only, i.e., merely viewing it without contacting us via the contact form and without otherwise providing us with information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure its stability and security, and must therefore be processed by us. The legal basis is Art. 6(1)(f) GDPR:

• IP adress
• Date and time of the request
• Content of the request (page visited)
• Previously visited page (referrer)
• Browser

Our website is hosted on our behalf by an external hosting provider. As a processor, this company is bound by our instructions. It is contractually obligated to comply with technical and organizational security measures. The data is deleted after 14 days.

§ 4 Your Rights

(1) You have the following rights vis-à-vis a controller with regard to the personal data concerning you:

• Right of access – Art. 15 GDPR: In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the source of your data if it was not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details;
• Right to rectification or completion – Art. 16 GDPR;
• Right to erasure – Art. 17 GDPR, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
• Right to restriction of processing – Art. 18 GDPR, insofar as you contest the accuracy of the data, the processing is unlawful but you oppose its erasure, we no longer need the data but you require it for the establishment, exercise, or defense of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
• Right to data portability – Art. 20 GDPR, in a structured, commonly used, and machine-readable format, or transmission to another controller;
• Right to withdraw consent – Art. 7(3) GDPR: As a result, we may no longer continue the data processing based on this consent in the future;
• Right to lodge a complaint with a data protection supervisory authority – Art. 77 GDPR. As a rule, you may contact the supervisory authority of your usual place of residence or workplace or of our registered office for this purpose.

(2) Right to object: Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided there are grounds arising from your particular situation or the objection concerns direct marketing. In the latter case, you have a general right to object, which we will implement without you having to specify a particular situation.

§ 5 Storage Period

As a rule, your data is stored for as long as necessary for the respective purpose: for general inquiries, until the respective inquiry has been resolved; for contracts, until the contract ends; and for technical data (see § 3), 14 days. Once the inquiry has been resolved or the contract has ended, your personal data will be deleted unless statutory retention obligations apply or the data is required for the establishment, exercise, or defense of legal claims.

§ 6 Cookies and Browser Storage

Our website uses the following technically necessary cookies:

• pauly-it-session: Session cookie used to protect the forms, display error messages and entered data after submission, and for logging in to the administration area. Duration: 2 hours
• XSRF-TOKEN: Protection against forged form requests (CSRF). Duration: 2 hours

§ 7 Recipients / Categories of Recipients

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Inquiries submitted via the contact forms are forwarded to us by email via Microsoft 365 as an email service provider within the scope of data processing on our behalf. Where data is transferred to third countries in this process, we ensure that these recipients handle your personal data with the same care as recipients within the EU or the EEA. Data is only transferred to third countries for which the EU Commission has confirmed an adequate level of protection, or where we ensure the careful handling of personal data through contractual agreements or other appropriate safeguards.

§ 8 Automated Decision-Making

No automated decision-making, including profiling, takes place.