Data Controller
The data controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Curious Company® GmbH
Völckersstr. 14-20
D – 22765 Hamburg
Phone:
+49 40 743 2606 00
Represented by the managing directors:
Henning Westerwelle, Julia Wübbe
Contact:
mail@curiouscompany.de
Data Protection Officer
We have appointed the following Data Protection Officer:
Henning Westerwelle
Your Rights as a Data Subject
Under the contact details provided above, you may exercise the following rights at any time in accordance with the EU General Data Protection Regulation (GDPR):
- Right of access to your stored data and information on how it is processed (Art. 15 GDPR),
- Right to rectification of inaccurate personal data (Art. 16 GDPR),
- Right to erasure of your stored data (Art. 17 GDPR),
- Right to restriction of processing, provided we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),
- Right to object to the processing of your data (Art. 21 GDPR) and
- Right to data portability, provided you have given consent to data processing or have entered into a contract with us (Art. 20 GDPR).
If you have given us your consent, you may revoke it at any time with effect for the future.
You may also lodge a complaint with a supervisory authority, e.g. the competent supervisory authority of the federal state of your place of residence or the authority responsible for us as the data controller.
A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Processing Activities
Collection of General Information When Visiting Our Website
Nature and Purpose of Processing
When you access our website, i.e. if you do not register or otherwise submit information, general information is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and similar data.
In particular, it is processed for the following purposes:
- Ensuring a smooth connection to the website
- Ensuring smooth use of the website
- Ensuring and evaluating system security and stability, in particular for abuse detection
- Ensuring a technically error-free presentation and optimization of the website
We do not use your data to draw conclusions about your identity. However, we reserve the right to retrospectively review the server log files if there are concrete indications of unlawful use.
Legal Basis and Legitimate Interest
Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and abuse detection.
Recipients
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage Duration
Data is stored in server log files in a form that allows identification of the data subjects for a maximum of 6 weeks; unless a security-relevant event occurs (e.g. a DDoS attack).
In the event of such an incident, server log files are stored until the security-relevant event has been resolved and fully clarified.
Provision Required by Law or Contract
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, certain services and features may be unavailable or restricted.
Right to Object
Please refer to the information on your right to object pursuant to Art. 21 GDPR below.
Contact
Nature and purpose of processing
Our website provides a contact form that can be used to contact us electronically. If a user makes use of this option, the data entered into the input form is transmitted to us and stored.
Contact is also possible via the email addresses provided. In this case, the personal data transmitted with the email will be stored. This includes the date and time the email was sent, the email address, IP addresses, and information about the servers involved in the email communication.
Regardless of the chosen method of communication, we collect the content of your inquiry. Your data is stored for the purpose of individual communication with you.
Legal Basis
Data is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR).
Our legitimate interest in processing your data is to enable uncomplicated contact.
If you contact us to request an offer, data processing is carried out to perform pre-contractual measures (Art. 6(1)(b) GDPR).
Recipients
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage Duration
Data will be deleted no later than 6 weeks after the processing of the contact request has been completed.
If a contractual relationship is established, we are subject to statutory retention periods. These generally amount to 6 or 10 years due to proper accounting and tax law requirements.
Provision Required by Law or Contract
The provision of your personal data is voluntary. However, we can only process your request if you provide us with the necessary data and the reason for your inquiry.
Right to Object
Please refer to the information on your right to object pursuant to Art. 21 GDPR below.
Information on Your Right to Object Pursuant to Art. 21 GDPR
Right to Object on a Case-by-Case Basis
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) GDPR (processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.
If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Recipient of an Objection
Curious Company GmbH
Völckersstr. 14-20
22765 Hamburg
Represented by Mr. Henning Westerwelle (Managing Director)
mail@curiouscompany.de
Changes to This Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to reflect changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
Questions About Data Protection
If you have any questions regarding data protection, please send us an email to the data controller listed above.
Copyright Notice
This privacy policy was created with the assistance of activeMind