Privacy

Table of contents
1. Objective and responsible body
2. Basic information on data processing
3. Collecting and processing of personal data
4. Transfer of data to third parties
5. Collection of access data
6. Cookies & reach measurement
7. Analytics
8. User rights and deletion of data
9. Changes to the privacy policy

1. Objective and responsible body
This privacy policy explains the nature, scope and purpose of the processing (including collection, processing and use, and obtaining consent) of personal data within our online offering and the websites, functions and content associated with it (hereinafter collectively referred to as “online offering” or “website”). The privacy policy applies regardless of the domains, systems, platforms and devices (e.g. desktop or mobile) used on which the online offer is executed.
The provider of the online offer and the entity responsible under data protection law is qwitto GmbH, Managing Director: Dr. Sebastian Voss, Frauenstr. 26, 80469 Munich (hereinafter referred to as “provider”, “website operator”, “we” or “us”). For contact details, please refer to our imprint.
The term “user” includes all customers and visitors of our online offer. The terms used, such as “user”, are to be understood as gender-neutral.

2. Basic information on data processing
We process users’ personal data only in compliance with the relevant data protection provisions in accordance with the requirements of data minimization and purpose limitation (see principles of processing: https://www.datenschutz-grundverordnung.eu/grundverordnung/art-5-ds-gvo/). This means that the user’s data will only be processed in the presence of a legal permission or obligation to fulfill contractual obligations (which are necessary, for example, for the provision of the services offered) or in the presence of a consent provided by you.
We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

3. Collecting and processing of personal data
The website operator collects, uses and discloses your personal data only if this is permitted by law or if you consent to the data collection. Personal data is any information that can be used to identify you and that can be traced back to you – for example, your name, e-mail address and telephone number.
You can also visit this website without providing any personal information.
When contacting us (by email), the user’s details are stored for the purpose of processing the request and in case follow-up questions arise. Personal data will be deleted if they have fulfilled their purpose and there are no retention obligations. If you instruct us, the following information will be collected: Salutation, title, first name, last name, address, e-mail address, telephone number (landline and/or mobile). In addition, all information is collected that is necessary for the fulfillment of the contract with you.
The personal data is collected in order to be able to identify you as a customer; to be able to advise you appropriately; to be able to fulfill our contractual obligations to you; to be able to fulfill our legal obligations; for correspondence with you; for invoicing or, if necessary, as part of the dunning process; for purposes of permissible direct advertising; to assert any claims against you.
The processing of personal data takes place on the occasion of your inquiry with us and is necessary for the aforementioned purposes for the processing of your order and for the fulfillment of obligations arising from the underlying contract.
The personal data collected will be stored until the expiry of the statutory retention obligation for merchants (6 years after the end of the calendar year in which the contractual relationship was terminated) and then deleted. This does not apply exceptionally if we are obliged to store data for a longer period of time due to tax or commercial law retention obligations (according to HGB, StGB or AO) or if you have consented to storage beyond this period.

4. Transfer of data to third parties
A transfer of your personal data to third parties does not take place in principle. Exceptions to this only apply if this is necessary for the processing of contractual relationships with you. This includes in particular the transfer to service providers commissioned by us (so-called order processors) or other third parties whose activities are necessary for the execution of the contract (e.g. banks). The data passed on may be used by the third parties exclusively for the purposes stated.

5. Collection of access data
We do not collect any data ourselves about access to the server on which this service is located.

6. Cookies & reach measurement
Cookies are pieces of information that are transmitted from our web server or third-party web servers to the users’ web browsers and stored there for later retrieval. Users are informed about the use of cookies in the context of pseudonymous reach measurement as part of this privacy policy.
The viewing of this online offer is also possible under exclusion of cookies. If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.
It is possible to manage many online ad cookies from companies via the US site http://www.aboutads.info/choices or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/.

7. user rights and deletion of data
Users have the right, upon request and free of charge, to obtain information about the personal data that we have stored about them.
In addition, users have the right to correct incorrect data, revoke consent, block and delete their personal data, as well as the right, in the event of the assumption of unlawful data processing ,to file a complaint with the competent supervisory authority.
The data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations.

8. Changes to the privacy policy
We reserve the right to change the privacy policy in order to adapt it to changed legal situations, or in the event of changes to the service as well as data processing. However, this only applies with regard to declarations on data processing. Insofar as user consents are required or components of the data protection declaration contain provisions of the contractual relationship with the users, the changes will only be made with the consent of the users.
Users are requested to inform themselves regularly about the content of the data protection declaration.