This page is a translation for convenience. The legally binding version is the German Datenschutzerklärung; where the two differ, the German text applies. References are to the GDPR and to German law.
The short version
This website is deliberately built lean. It sets no cookies, embeds no content from other people’s servers and uses no analytics or tracking services. Fonts, images and scripts all come from our own server. So you will look for a consent banner here in vain. There would be nothing for you to consent to.
Personal data arises in two places: in the technical logs of the server, and when you reach us through the contact form, by email or by phone.
Controller
aceArt GmbH
Sieglestraße 33G
70469 Stuttgart
Germany
Phone: +49 (0) 711 21955380
Email: info@aceart.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
Hosting
This website is hosted externally. The provider is netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. The host processes the data arising on our behalf and on the basis of a data processing agreement under Art. 28 GDPR.
The legal basis is our legitimate interest in providing this offering securely and reliably (Art. 6 (1) (f) GDPR) and, where a contractual relationship is being initiated, Art. 6 (1) (b) GDPR.
Server logs
When a page is requested, your browser transmits technically necessary data which the server records in log files:
- the address requested
- the date and time of the request
- the volume of data transferred and the status code
- browser type and operating system
- the referring page, if your browser sends one
- IP address
This data serves secure operation and fault-finding. It is not combined with other sources and is not used to build usage profiles. The legal basis is Art. 6 (1) (f) GDPR. The logs are deleted automatically after a short time, at the latest after seven days, unless they are needed longer to investigate a specific security incident.
Contact form
When you send us the form on the contact page, we process the details entered there (name, email address, optionally company and subject, and your message) in order to answer your enquiry.
The legal basis is Art. 6 (1) (b) GDPR where your enquiry serves the initiation of a contract, otherwise our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR), together with your consent under Art. 6 (1) (a) GDPR, which you give by sending the form and may withdraw at any time with effect for the future.
The details remain with us until your enquiry has been dealt with and no statutory retention obligations stand in the way. They are not passed on to third parties.
Protection against automated submissions
The form contains an extra field invisible to you and a simple sum. Both run on our own server and serve solely to sort out machine-generated submissions. No data is transmitted to third parties and no characteristics of your device are evaluated.
Enquiries by email or phone
When you reach us by email or by phone, we process your details in order to deal with the matter. Here too, Art. 6 (1) (b) GDPR applies to contract-related enquiries and otherwise Art. 6 (1) (f) GDPR. The data remains with us until the purpose no longer applies or you ask for deletion, subject to statutory retention obligations.
Encryption
This site is delivered exclusively over a TLS-encrypted connection, recognisable by the
https:// in the address bar. Content you send us therefore cannot be read by third parties.
Your rights
You have the right at any time to
- information about the data stored about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on legitimate interests (Art. 21 GDPR)
- withdraw consent given, with effect for the future (Art. 7 (3) GDPR)
Please contact the controller named above for this.
Independently of that, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.