Privacy Policy
This data protection statement explains the nature, scope and purpose of processing personal data in connection with our services, our online offering and related websites, functions, content, and external online presences such as social media profiles.
Data Controller
Astropel International Consulting UG (Hb) Storkower Str.158, 10407 Berlin, Germany Telephone: +49 (0)30 588 417 50 Fax: +49 (0)30 588 417 59 Mobile: +49 (0)176 8228 5246 Email: [email protected]
Types of Data Processed
- Inventory data (e.g., names, addresses) - Contact data (e.g., email, phone numbers) - Content data (e.g., text entries, images, videos) - Usage data (e.g., visited pages, access times) - Meta/communication data (e.g., device info, IP addresses)
Categories of Data Subjects
Visitors and users of our online offering (collectively referred to as “users”).
Purposes of Processing
- Provision of online offering, its functions and content - Responding to contact requests and user communication - Security measures - Reach measurement and marketing
Terminology
Terms such as “personal data”, “processing”, “pseudonymization”, “profiling”, “controller” and “processor” are based on definitions in Article 4 GDPR.
Applicable Legal Bases
Under Article 13 GDPR, relevant legal bases include: - Art. 6(1)(a), Art. 7: consent - Art. 6(1)(b): contract performance / pre-contractual inquiries - Art. 6(1)(c): legal obligations - Art. 6(1)(d): protection of vital interests - Art. 6(1)(e): task in the public interest / official authority - Art. 6(1)(f): legitimate interests - Art. 6(4): further processing for other purposes - Art. 9(2): special categories of personal data
Security Measures
We implement appropriate technical and organizational measures, considering state of the art, implementation costs, scope and risk, to ensure confidentiality, integrity and availability of personal data.
Cooperation with Processors, Joint Controllers and Third Parties
Data is disclosed only where legally permitted, contractually required, based on consent, legal obligation, or legitimate interest. Transfers within our group are limited to administrative necessity and legal compliance.
Transfers to Third Countries
Transfers outside the EU/EEA/Switzerland occur only when legal requirements are met, such as adequacy decisions or standard contractual safeguards.
Rights of Data Subjects
You have rights of access, rectification, erasure, restriction of processing, portability, objection, and complaint to a supervisory authority subject to legal requirements.
Withdrawal
You may withdraw your consent at any time with effect for the future.
Right to Object
You may object at any time to future processing of your data, especially for direct marketing purposes.
Cookies and Objection to Direct Marketing
Cookies are small files stored on user devices. Session and persistent cookies may be used. You can disable/delete cookies in browser settings; some functions may then be limited. General opt-out links: http://www.aboutads.info/choices/ and http://www.youronlinechoices.com/
Deletion of Data
Data we process is deleted when the purpose ceases and no legal retention obligation applies. If deletion is not possible due to legal obligations, processing is restricted.
Changes and Updates to this Privacy Policy
We regularly update this privacy policy to reflect changes in our processing activities and legal requirements.
Hosting and Email Delivery
Our hosting services provide infrastructure, storage, database, email, security and technical maintenance. Processing is based on Art. 6(1)(f) GDPR and Art. 28 GDPR where applicable.
Collection of Access Data and Log Files
Server logs may include time of access, URL, file, transferred data volume, browser type, operating system, referrer URL, IP address and provider. Logs are generally stored up to 7 days for security, longer where incident clarification is necessary.
Integration of Third-Party Services and Content
For analysis, optimization and efficient operation, we may integrate third-party content/services (e.g., videos, fonts). This may require processing IP addresses and may involve cookies or pixel tags for statistical/marketing purposes.