Legal
Privacy Policy
Controller
The controller responsible for data processing on this website is:
Yachttransporte Faltus & Bantje – sole proprietorship
Owner: Ulrich Faltus
Alte Meierstraße 8
28844 Weyhe
Germany
We have not appointed a data protection officer; as a sole proprietorship we are not legally required to do so.
Contact
Phone: +49 4203 810554
Mobile: +49 172 5403842
Email: info [at] yachttransporte [dot] de
Your rights as a data subject
Within the framework of the applicable law you have, at any time, the following rights: access to your stored data (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR). Where processing is based on your consent, you may withdraw it at any time with effect for the future (Art. 7(3) GDPR); the lawfulness of processing carried out before the withdrawal remains unaffected.
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation.
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
Right to lodge a complaint with a supervisory authority
In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover, Germany
Retention period
Unless a more specific retention period is stated in this policy, your personal data will remain with us until the purpose of processing no longer applies. If you make a legitimate request for erasure or withdraw a consent, your data will be deleted, provided there are no statutory retention obligations to the contrary – in particular commercial and tax-law periods (6 years under § 257 HGB, 10 years under § 147 AO). Once these periods expire, the data is deleted as a matter of routine.
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption throughout. You can recognise an encrypted connection by the “https://” in the address bar and the padlock symbol in your browser.
Hosting
We host this website with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany. Hetzner processes the data arising from your visit on our behalf (see “Server log files”). The legal basis is our legitimate interest in the reliable and secure provision of the website (Art. 6(1)(f) GDPR). A data-processing agreement (Art. 28 GDPR) is in place with Hetzner. No transfer to third countries takes place.
Server log files
The hosting provider automatically collects and stores information in so-called server log files, which your browser transmits: browser type and version, operating system used, referrer URL, hostname of the accessing device, time of the server request and the IP address. This data is not merged with other data sources and serves the technically error-free provision and the security of the website. The legal basis is Art. 6(1)(f) GDPR. The log files are automatically deleted after 7 days.
Cookies
This website uses only technically necessary cookies that are required for the secure and functional operation of the site. We do not use any analytics, tracking or marketing technologies, nor do we store any data in local storage, session storage or comparable storage on your device. The storage of technically necessary cookies is permitted without consent under § 25(2) TDDDG, so no cookie consent banner is required. The associated processing is based on our legitimate interest in the technically error-free and secure provision of the site (Art. 6(1)(f) GDPR).
Enquiry form, email and telephone contact
If you contact us via the enquiry form, by email or by telephone, we process the details you provide (e.g. name, company, address, email address, telephone number and information about the desired transport) in order to handle your request and in case of follow-up questions. The form is sent exclusively via our own server at the hosting provider (using PHPMailer); no third-party providers or services in third countries are involved. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in handling enquiries). The data remains with us until your request has been fully processed; statutory retention periods remain unaffected.
Applications by email
You have the option of applying to us by email. We process the personal data associated with this (e.g. contact and communication data as well as your application documents) insofar as this is necessary for the decision on establishing an employment relationship. The legal basis is § 26(1) BDSG in conjunction with Art. 88 GDPR as well as Art. 6(1)(b) GDPR. If no employment relationship comes about, we store your documents for up to 6 months after completion of the application process in order to comply with the burden of proof under the German General Equal Treatment Act (AGG) (Art. 6(1)(f) GDPR); they are then deleted. Longer storage only takes place with your express consent (Art. 6(1)(a) GDPR).
Map display (OpenStreetMap)
On the contact page we embed a map from the OpenStreetMap service. The provider is the OpenStreetMap Foundation (OSMF), St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom; an adequacy decision of the EU Commission exists for the United Kingdom. The map is initially deactivated and only loads after you have actively clicked “Load map” – no data is transferred to OpenStreetMap beforehand. On loading, your IP address is transmitted to the OSMF. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time with effect for the future by reloading the page.
Fonts (locally hosted)
To display fonts consistently, we use the typefaces “Archivo” and “Montserrat”, which are stored locally on our server and delivered from there. No connection to third-party servers – in particular to Google – is established in the process; no data is transferred to third parties. The legal basis is our legitimate interest in a consistent, appealing presentation of our online offering (Art. 6(1)(f) GDPR).