Privacy Policy

1) Introduction and contact details of the controller

1.1 We are delighted you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you visit our website. Personal data means all data with which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Roland Stankewitz, Meisenweg, 1, 19065 Pinnow, Germany, Tel.: +491726004822, e-mail: mail@crammy.de. The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means when processing personal data.

2) Data collection when visiting our website

2.1 When you use our website for informational purposes, meaning you don�t register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called server log files). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

� Our visited website;
� Date and time of access;
� Amount of data sent in bytes;
� Source/referrer from which you accessed the page;
� Browser used;
� Operating system used;
� IP address used (if applicable, in anonymized form).

The processing is carried out in accordance with Art. 6 (1) (f) GDPR and on the basis of our legitimate interest in improving the stability and functionality of our website. The data is neither passed on nor used otherwise. However, we reserve the right to subsequently check the server log files if concrete indications of unlawful use become known.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the string https:// and the lock symbol in your browser�s address bar.

3) Contacting us

When you contact us (e.g., via a contact form or on email), personal data is collected, which can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for making contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 (1) (f) GDPR. If you contact us with the aim of concluding a contract, the additional legal basis for the data processing is Art. 6 (1) (b) GDPR. Your data will be deleted after the final processing of your inquiry. This is the case when it can be inferred that the matter in question has been conclusively clarified and provided that no statutory retention obligations oppose such deletion.

4) Rights of the data subject

4.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-�-vis the controller with regard to the processing of your personal data, whereby for the respective exercise requirements reference is made to the cited legal basis:

� Right of access pursuant to Art. 15 GDPR;
� Right to rectification pursuant to Art. 16 GDPR;
� Right to erasure pursuant to Art. 17 GDPR;
� Right to restriction of processing pursuant to Art. 18 GDPR;
� Right to notification pursuant to Art. 19 GDPR;
� Right to data portability pursuant to Art. 20 GDPR;
� Right to withdraw granted consent pursuant to Art. 7 (3) GDPR;
� Right to lodge a complaint pursuant to Art. 77 GDPR.

4.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA TO BALANCE INTERESTS GIVEN OUR PREVAILING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS AND FUNDAMENTAL RIGHTS AND FREEDOMS OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

5) Duration of storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and, if relevant, additionally on the basis of the respective statutory retention period (e.g., retention periods under commercial and tax law).

When processing personal data on the basis of an express consent pursuant to Art. 6 (1) (a) GDPR, the data concerned will be stored until you withdraw your consent.

If there are statutory retention periods for data that is processed within the framework of contractual or quasi-contractual obligations on the basis of Art. 6 (1) (b) GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer required for the performance of the contract or the initiation of a contract and/or no legitimate interest on our part in further storage continues to exist.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.

Unless there is other information in this declaration regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.