Privacy Policy and Cookie Guidelines
We are very delighted that you have shown interest in our company. Data protection is of a particularly high priority for the management of CASTRUM GmbH, hereinafter referred to as “CASTRUM GmbH”. It is possible to use the CASTRUM GmbH website without providing any personal data. However, if a data subject wishes to make use of special services of our company via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject. The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in accordance with the data protection regulations applicable to CASTRUM GmbH. By means of this data protection declaration, our company would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed of their rights by means of this privacy policy. Despite extensive technical and organizational measures to ensure the most complete protection possible for the personal data processed via this website, Internet-based data transmissions may nevertheless have security gaps, meaning that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.
Responsible for data processing is:
CASTRUM GmbH
Thorsten Kutz
Borsigstrasse 1, 26607 Aurich, Deutschland
Telefon: + 49 (0)4941 69918-0
Fax: + 49 (0)6771 93440 44
Web hosting
To maintain our online presence, we use an internet service provider on whose server the website is stored (hosting) and who makes our website available on the internet. The internet service provider processes contact data, content data, contract data, usage data, inventory data as well as meta and communication data on our behalf. Name and address of the internet service provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur. You can view their privacy policy here: https://www.ionos.de/terms-gtc/terms-privacy. The internet service provider processes the aforementioned data on our behalf, Art. 28 GDPR. The data processing is based on our legitimate interest in the efficient and secure provision of our website, Art. 6 para. 1 lit. f) GDPR.
Cookies
Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored on the device you are using. Cookies neither transmit viruses nor can they execute programs. Rather, they are primarily used to exchange information between the device you are using and our website in order to make our website more user-friendly and effective for you. A distinction must be made between temporary (transient) cookies and persistent cookies. Transient cookies include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows our website to recognize your computer when you return to our website. The session cookies are deleted when you log out or close your browser. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You have the option of deleting these cookies at any time in the security settings of your browser. The cookies are used to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. In particular, information on language settings or log-in information may be stored in these cookies. In addition, we also use cookies on our website that enable us to analyze your visit to our website. In particular, information on search terms entered, the frequency of page views or the use of website functions may be stored in these cookies. These cookies enable us to track how often and in what way the website and its functions are used. They therefore serve to improve the quality and user-friendliness of our website, in particular the content and functions. This enables us to continuously optimize our offer. The data collected in this way is pseudonymized by technical precautions. It is therefore not possible to assign the data to your person. The data is not stored together with other personal data relating to you. Our legitimate interest in data processing lies in the aforementioned purposes. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR. As the cookies are stored on your computer, you as the user also have full control over the use of cookies. You have the option of using your browser's security settings to determine whether cookies are stored at all. For example, you can choose not to accept cookies from the outset or only accept them on request, or you can specify that cookies are deleted every time you close your browser. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.
Storage period/deletion
We delete or block your personal data as soon as the purpose of storage has been achieved or no longer applies. Any further storage will only take place if we are required to do so by national or European regulations. In this case, the data will be blocked or deleted when the storage period prescribed by the respective regulations has expired, unless we need your data to fulfill a contract concluded between us or if this is necessary for the assertion, exercise, or defense of legal claims.
Information on the contact options provided by us
If you contact us via e-mail, social media, telephone, fax, post, our contact form, or in any other way and provide us with personal data such as your name, telephone number, or e-mail address or provide further information about yourself or your request, this data will be stored and processed by us in order to process your inquiry. Legal basis: If you have submitted your inquiry via our contact form, the legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR. If you submit your inquiry as part of a contractual or pre-contractual relationship with us, the legal basis for the processing of your data is Art. 6 para. 1 lit. b. GDPR. If your inquiry does not fall under one of the aforementioned categories, our legitimate interest in processing your data is to answer your inquiry properly and in your interest, Art. 6 para. 1 lit. f GDPR. Deletion: The personal data collected by us will be deleted if it is no longer required. We review the necessity every 2 years. You can also revoke your consent to data processing at any time.
Your rights under the GDPR
Under the GDPR, you are entitled to the rights listed below, which you can assert at any time with the controller named in Section 1 of this privacy policy: Right to information: In accordance with Art. 15 GDPR, you can request confirmation as to whether and which of your personal data we process. In addition, you can request information from us free of charge about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint and the origin of your data if it was not collected by us. You also have the right to obtain information as to whether your personal data has been transferred to a third country or to an international organization. If this is the case, you have the right to receive information about the appropriate guarantees in connection with the transfer. Right to rectification: In accordance with Art. 16 GDPR, you may request the rectification of inaccurate or completion of incomplete personal data stored by us and concerning you. Right to erasure: In accordance with Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, unless we need to process it for the following purposes: to fulfill a legal obligation, to assert, exercise or defend legal claims, to exercise the right to freedom of expression and information or for reasons of public interest referred to in Art. 17 para. 3 lit. c and d GDPR. Right to restriction: In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, for a period of time that enables us to verify the accuracy of the personal data, the processing of your data is unlawful, but you refuse to delete it and instead request the restriction of the use of the data, we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims. you have objected to the processing of your data in accordance with Art. 21 GDPR, but it is not yet certain whether the legitimate reasons that entitle us to continue processing outweigh your rights despite your objection. Right to information: If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of the rectification or erasure of the data or the restriction of processing requested by you, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by us about these recipients. Right to data portability: In accordance with Art. 20 GDPR, you may request that we receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format or request that it be transmitted to another controller. Right to lodge a complaint: In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. To do so, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.
Right of cancellation
In accordance with Art. 7 (3) GDPR, you have the right to withdraw your consent to the processing of your data at any time. The revocation declared by you does not change the legality of the processing of your personal data carried out until the revocation.
Right of objection
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on a weighing of interests (Art. 6 (1) (f) GDPR). This is particularly the case if the data processing is not necessary for the performance of a contract. If you make use of your right to object, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that there are compelling legitimate grounds for data processing that outweigh your interests and rights. Irrespective of the above, you have the right to object to the processing of your personal data for the purposes of advertising and data analysis at any time. Please send your objection to the controller's contact address given above.
Security measures
We also take state-of-the-art technical and organizational security measures to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.
Up-to-dateness and amendment of this privacy policy
This privacy policy is currently valid and is dated November 2021. Due to changes in legal or regulatory requirements, it may be necessary to adapt this privacy policy.
