Privacy Policy
1. Data Protection at a Glance
General information
The following gives a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information follows in the sections below.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details are in the section "Responsible party" below.
How do we collect your data?
Some data is collected when you provide it to us, for example by entering it in a contact form. Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This is mainly technical data such as your browser, operating system or the time you accessed the page.
What do we use your data for?
Some data is collected to ensure the website works without errors. Other data may be used to analyse how visitors use the site.
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipients and purpose of your stored personal data. You may also request its correction or deletion. If you have given consent to data processing, you can revoke it at any time with effect for the future. Under certain circumstances you can request that processing be restricted. You also have the right to lodge a complaint with the competent supervisory authority. For these and any other data protection questions, you can contact us at any time.
2. Hosting
This website is hosted by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel ("Wix").
Wix is a tool for creating and hosting websites. When you visit this website, Wix collects data about user behaviour, visitor sources, visitor regions and visitor numbers. Wix stores cookies in your browser that are necessary to display the website and ensure its security.
Data collected via Wix may be stored on servers worldwide, including in the USA. Israel is recognised by the European Commission as providing an adequate level of data protection. For transfers to the USA and other third countries, Wix relies on the EU Standard Contractual Clauses or comparable safeguards under Art. 46 GDPR. Details: https://de.wix.com/about/privacy and https://de.wix.com/about/privacy-dpa-users
The use of Wix is based on Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. Where consent has been requested, processing is based solely on Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent covers storing cookies or accessing information on your device. Consent can be revoked at any time.
We have concluded a data processing agreement with Wix in accordance with Art. 28 GDPR.
3. General Notes and Mandatory Information
Data protection
We take the protection of your personal data seriously. We treat it confidentially and in accordance with the statutory data protection regulations and this privacy policy. Please note that data transmission over the internet, for example by email, can have security gaps. Complete protection of data against access by third parties is not possible.
Responsible party
The party responsible for data processing on this website is:
Nye Horisonter UG (haftungsbeschränkt) i.G.
represented by its managing director Christopher Walker Larson
c/o Killian Bayer
Bizetstraße 123
13088 Berlin
Germany
Phone: +49 1520 2445171
Email: info@nye-horisonter.com
The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
Storage period
Unless a more specific storage period is stated in this policy, your personal data will remain with us until the purpose for processing no longer applies. If you make a legitimate deletion request or revoke your consent, your data will be deleted unless we have other legally permissible reasons for storing it, such as retention periods under tax or commercial law. In that case, it will be deleted once those reasons no longer apply.
Legal basis for processing
Where you have consented, we process your data on the basis of Art. 6(1)(a) GDPR, or Art. 9(2)(a) GDPR for special categories of data. Where you have explicitly consented to a transfer to a third country, processing is also based on Art. 49(1)(a) GDPR. Where you have consented to cookies or to access to information on your device, processing is additionally based on § 25(1) TDDDG. Consent can be revoked at any time.
We process data on the basis of Art. 6(1)(b) GDPR where it is needed to perform a contract or take pre-contractual steps. We rely on Art. 6(1)(c) GDPR where it is needed to fulfil a legal obligation. Processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR. The legal basis for each case is stated in the relevant section of this policy.
Transfers to the USA and other third countries
We use tools from companies based in the USA or other third countries. When these tools are active, your personal data may be transferred to and processed in those countries.
The European Commission has adopted an adequacy decision for the USA (EU–US Data Privacy Framework). Transfers to US companies certified under this framework are therefore permitted without further safeguards. For companies that are not certified, and for other third countries without an adequacy decision, transfers are based on the EU Standard Contractual Clauses or other safeguards under Art. 46 GDPR.
Revocation of consent
Many processing operations are only possible with your express consent. You can revoke consent at any time. The lawfulness of processing carried out before the revocation remains unaffected.
Right to object (Art. 21 GDPR)
WHERE PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (ART. 21(1) GDPR).
WHERE YOUR DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO SUCH PROCESSING, INCLUDING RELATED PROFILING. YOUR DATA WILL THEN NO LONGER BE USED FOR THIS PURPOSE (ART. 21(2) GDPR).
Right to lodge a complaint
If you believe the GDPR has been violated, you have the right to lodge a complaint with a supervisory authority. This applies in particular in the Member State of your habitual residence, your place of work or the place of the alleged violation. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
Right to data portability
You have the right to receive data that we process automatically on the basis of your consent or a contract in a common, machine-readable format. You can also have it transferred to another controller, where technically feasible.
Access, correction and deletion
Within the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin, recipients and the purpose of processing. You may also have a right to correction or deletion of this data.
Right to restriction of processing
You may request that the processing of your personal data be restricted. This right applies in four cases:
-
You dispute the accuracy of your data, for as long as we need to verify it.
-
The processing is unlawful and you prefer restriction to deletion.
-
We no longer need the data, but you need it to establish, exercise or defend legal claims.
-
You have objected under Art. 21(1) GDPR and it has not yet been determined whose interests prevail.
While processing is restricted, the data may only be stored. Any other processing requires your consent, or must serve legal claims, the protection of another person's rights, or an important public interest of the EU or a Member State.
SSL/TLS encryption
This site uses SSL/TLS encryption for security and to protect confidential content you send us. You can recognise an encrypted connection by "https://" and the lock symbol in your browser's address bar.
Objection to advertising emails
We object to the use of the contact details published in our imprint for sending unsolicited advertising and information material. We reserve the right to take legal action against unsolicited advertising, such as spam emails.
4. Data Collection on This Website
Contact form
If you send us an enquiry via the contact form, we store the details you enter, including your contact information. We use them to process your enquiry and to handle any follow-up questions. We do not pass this data on without your consent.
Processing is based on Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures. In all other cases, it is based on our legitimate interest in handling enquiries effectively (Art. 6(1)(f) GDPR), or on your consent (Art. 6(1)(a) GDPR) where requested.
We keep this data until you ask us to delete it, revoke your consent, or the purpose no longer applies (e.g. once your enquiry has been dealt with). Mandatory statutory retention periods remain unaffected.
Some things to check on your end:
-
Contact form. The old text mentioned one, but I didn't see a form on the site. If there isn't one, delete that section. If you use other tools (embedded Vimeo or YouTube players for the films, Google Fonts, Wix Forms, a newsletter), each needs its own section.
-
Wix processing agreement. Wix provides a data processing agreement (DPA) in its account settings. I added the line saying you've concluded one, so make sure that's actually true.
-
"i.G." status. As with the Impressum, remove "i.G." once the company is registered.
-
Source line. You can drop the "Source: e-recht24" line.
-
Cookie banner. Check that the Wix cookie banner is switched on, since the policy refers to consent-based cookies.