Information on the processing of your data in accordance with Article 13 of the General Data Protection Regulation (GDPR)
Controller and Data Protection Officer
The person responsible for this website is
Christian Krauss
Mondstraße 84
48155 Münster, North Rhine-Westphalia
Christian@Krauss-ChangeInside.com
You can reach the data protection officer by email at
Christian@Krauss-ChangeInside.com
or via the address
Christian Krauss
Mondstraße 84
48155 Münster, North Rhine-Westphalia
Data processed for the provision of the website and the creation of log files
a. What data is processed and for what purpose?
Each time you access content on this website, data that may allow for identification is temporarily stored. The following data is collected:
- Date and time of access
- IP address
- Hostname of the accessing computer
- Website from which the website was accessed
- Websites accessed via the website
- Page visited on our website
- Notification of whether the retrieval was successful
- Amount of data transferred
- Information about the browser type and version used
- Operating system
The temporary storage of data is necessary for the operation of a website visit to enable the website to be delivered. Further storage in log files occurs to ensure the functionality of the website and the security of the IT systems. These purposes also constitute our legitimate interest in data processing.
b. On what legal basis is this data processed?
The data is processed on the basis of Article 6 Paragraph 1 Letter f GDPR.
c. How long will the data be stored?
The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of providing the website, this is when the respective session ends. The log files are stored […, for a maximum of 24 hours] and are directly and exclusively accessible to administrators. After that, they are only indirectly available via the reconstruction of backup tapes and are permanently deleted after […, for a maximum of four weeks].
Data subject rights
a. Right to information
You can request information about your personal data that we process, in accordance with Article 15 of the GDPR.
b. Right to object
You have the right to object for specific reasons (see section II).
c. Right to rectification
If the information concerning you is (no longer) accurate, you can request a correction in accordance with Article 16 of the GDPR. If your data is incomplete, you can request that it be completed.
d. Right to erasure
You can request the deletion of your personal data in accordance with Article 17 of the GDPR.
e. Right to restriction of processing
According to Article 18 of the GDPR, you have the right to request a restriction of the processing of your personal data.
f. Right to appeal
If you believe that the processing of your personal data violates data protection law, you have the right, pursuant to Article 77(1) GDPR, to lodge a complaint with a data protection supervisory authority of your choice. This includes the data protection supervisory authority responsible for the controller: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, https://www.ldi.nrw.de/kontakt/ihre-beschwerde.
g. Right to data portability
If the conditions of Article 20(1) GDPR are met, you have the right to receive the data that we process automatically based on your consent or in fulfillment of a contract, either for yourself or to have it transferred to a third party. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website. Therefore, they are not based on consent pursuant to Article 6(1)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, but are justified pursuant to Article 6(1)(f) GDPR. The conditions of Article 20(1) GDPR are therefore not met in this respect.
Right to object pursuant to Article 21(1) GDPR
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data which is based on point (f) of Article 6(1) of the GDPR. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website.