Thank you for visiting our website. Protecting your personal data is very important to us. In the following, we will inform you about the collection and handling of your data:
This data protection information applies for the data processing by Solectric GmbH, Ubstadter Str. 23, 76698 Ubstadt-Weiher, email: info@solectric.de, tel.: 07251 93693-0.
The operational data protection officer can be reached at the above address for the attention of Mr Olaf Kappler at datenschutz@solectric.de.
Data protection information for customers and interested parties
1. Access data when visiting our website
You can visit our website without giving us any details about you as a person. If you only use the website for informational purposes, in other words, if you do not register on the website or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you visit our website, www.solectric.de, your device’s browser automatically sends information to the server on our website. This information is temporarily stored in a so-called “log file”. The following information is collected without any action on your part and stored until it is automatically deleted after 6 months:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the retrieved file,
- website from which access takes place (reference URL),
- browser used and, if applicable, the operating system of your computer and the name of your access provider.
The data specified above are processed by us for the following reasons:
- to ensure the establishment of a smooth connection to the website,
- to ensure convenient use of our website,
- to evaluate system security and stability, and
- for administrative purposes
The legal basis for the data processing is Art. 6 (1)(1)(f) GDPR. Our legitimate interest results from the data collection purposes listed above. We never use the data collected for the purpose of drawing conclusions about you as a person.
The services for hosting and displaying this website are carried out by a third party that is commissioned by us to do so. This serves to safeguard our legitimate interests in displaying our offer correctly; this predominates in the context of a weighing of interests. All data that are collected while using this website or in the forms provided in the online shop as described below are processed on its servers. Processing on other servers only takes place to the extent explained here. The service provider is based in a country of the European Union or the European Economic Area.
2. Data collection and use for contract execution
We collect personal data if you voluntarily provide them to us when placing an order or when contacting us (e.g. by using the contact form or by email). We have marked mandatory fields as such. These data are imperative for us to process your request. You can find out which data these are in the relevant forms.
When using our contact form for inquiries of any kind, you must provide a name and a valid email address so that we know who sent the inquiry and can answer it.
We use these data in accordance with Art. 6 (1)(b) GDPR to execute the contract or to process your request. After the contract has been fully executed, your data will be restricted for further processing and deleted by us after the statutory retention period has expired, unless you have expressly consented to further use of the data. We reserve the right to use your data beyond this, provided that this is legally permissible. We will give you more information on this below. You can delete your customer account or have it deleted at any time by sending a message to the contact address below.
2a. Contact form on this website
Purpose: The request form on our home page lets you ask us general questions, for example about the hotel, its location, breakfast, parking or groups. We do not take bookings there. We use your details only to answer your question.
Data: Your name, email address and message are required. Your phone number and the topic of your question (for example groups or parking) are optional. We do not ask for travel dates. We also technically process your IP address (to protect the form against mass submissions) and the time of the request.
Legal basis: Art. 6 para. 1 (b) GDPR where your question relates to a booking or a contract with us; otherwise Art. 6 para. 1 (f) GDPR. Our legitimate interest is answering requests and protecting the form against misuse.
Recipients: The form is sent to a function run by our hosting provider Vercel Inc. (USA). It checks your entries and sends them as an email via Microsoft 365 (Microsoft Ireland Operations Limited, Dublin, Ireland) to our mailbox. Both providers process the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Processing in the USA cannot be ruled out; it is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on EU standard contractual clauses. We do not pass your details on to any other third parties.
Storage period: The form function itself does not store your details permanently. Your IP address is only kept briefly in memory (ten minutes at most) to limit repeated requests; the hosting provider's technical logs are covered by section 1. We delete the email containing your request once it has been dealt with, unless statutory retention obligations (for example for a resulting booking under German commercial and tax law) require longer storage.
No cookies, no tracking: The form sets no cookies and loads no third-party content, including no external captcha. We fend off automated submissions with a hidden field and a minimum time for filling in the form.
Without your name, email address and message we cannot answer your question. Your rights under section 6 and your right to object under section 7 also apply here.
3. Transmission of data
We do not transfer your personal data to third parties for purposes other than those listed below. We only transmit your personal data to third parties if:
- you have given your express consent thereto in accordance with Art. 6 (1)(1)(a) GDPR,
- the transmission, in accordance with Art. 6 (1)(1)(f) GDPR, is necessary to assert, exercise, or defend legal claims, and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
- there is a legal obligation for the transmission according to Art. 6 (1)(1)(c) GDPR, as well as
- if this is legally permissible and required according to Art. 6 (1)(1)(b) GDPR for the processing of the contractual relationship with you.
4. Email advertising without prior registration for the newsletter
If we have received your electronic postal address from you in connection with the provision of services, we reserve the right to send you offers on services by email at regular intervals (§ 7 (3) of the Act against Unfair Competition – UWG). This does not apply if you have objected to the use of your data for this purpose. You can object to us using your electronic postal address at any time. To do so, use the contact options specified above or the link provided for this in the advertising email sent to you. You will not incur any costs other than the transmission costs in accordance with the basic tariffs.
5. Postal advertising
We reserve the right to use your first and last name, your postal address, and, if applicable, your trade name for our own advertising purposes, e.g. to send offers and information by post on the products and services we offer. This is done on the basis of our outweighing legitimate interest in advertising to our customers in accordance with Art. 6 (1)(1)(f) GDPR. You can object to us using your electronic postal address at any time. To do so, use the contact options specified above, which we will also point out to you again separately in our offers sent by post.
6. Rights of data subjects
You have the right:
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain further information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection to processing, the existence of a right to lodge a complaint, the right to know the origin of your data, if we have not collected these, as well as about the existence of automated decision-making, including profiling and, if necessary,
- conclusive, detailed information;
- to immediately request the correction of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR;
- to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is required to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims;
- to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as you dispute the correctness of the data, the processing is unlawful, but you reject the deletion, and we no longer need the data, but you need them to assert, exercise, or defend legal claims, or you have objected to processing in accordance with Art. 21 GDPR;
- to receive the personal data that you have provided to us in a structured, common, and machine-readable format in accordance with Art. 20 GDPR, or to request the transfer to another controller;
- to revoke the consent that you granted us at one time in accordance with Art. 7 (3) GDPR. As a result, we are no longer permitted to continue data processing based on this consent in the future; and
- to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. Generally, you can contact the supervisory authority of your usual place of residence or work, or our office.
7. Right to object
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 (1)(1)(f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for doing so which arise from your particular situation, or the objection is against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation.
8. Data security
We use the common SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser when you visit our website. This is generally a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed key or lock symbol in the lower status bar of your browser. We also implement appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or against unauthorised access by third parties. We continuously improve our security measures in line with technological developments.
9. Up-to-dateness and changes to this Privacy Policy
This Privacy Policy is currently valid and effective as of December 2021. Due to the further development of our website and offers, or due to changed legal or official requirements, it may be necessary to amend this Privacy Policy. You can view and print out the currently valid Privacy Policy at any time on our website under https://solectric.de/datenschutz
Data protection information for customers and interested parties
according to Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
We take data protection very seriously. The information below will explain how we process your data and what your rights are.
1. Who is responsible for data processing and who can you contact?
Solectric GmbH
represented by the
Managing Director Mr D. Hausberger and O- Kappler
Ubstadter Str. 23
76698 Ubstadt-Weiher
Phone: +49 7251 9369344
E-Mail: Info@solectric.de
Internet: www.solectric.de
2. Contact details of the data protection officer
Christoph Boser
3. Processing purposes and legal basis
Your personal data will be processed in accordance with the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other relevant data protection provisions. The processing and use of the individual data depends on the agreed or requested service.
3.1 Consent (Art. 6 para. 1 (a) GDPR)
If you have given us your consent to process your personal data, the respective consent is the legal basis for the processing specified there. You have the right to revoke your consent at any time with effect for the future.
3.2 Performance of contractual duties
(Art. 6 para. 1 (b) GDPR)
We process your personal data to perform our contractual duties and execute agreements made with you. Furthermore, your personal data will be processed to implement measures and carry out activities within the framework of pre-contractual relationships.
3.3 Compliance with legal obligations
(Art. 6 para. 1 (c) GDPR)
We process your personal data if this is necessary to comply with legal obligations (e.g., commercial, tax laws). Furthermore, we process your data if this is required to fulfil tax monitoring and reporting obligations and to archive data for the purposes of data protection and data security, as well as for audits by tax authorities and other authorities. Moreover, the disclosure of personal data may become necessary as part of official/judicial measures for the purposes of evidence collection, criminal prosecution or enforcing claims under civil law.
3.4 Legitimate interest pursued by the controller or by a third party (Art. 6 para. 1 (f) GDPR)
We can also use your personal data on the basis of a weighing of interests to protect our legitimate interests or those of third parties. This takes place for the following purposes:
4. Categories of personal data that we process
The following data are processed:
• Personal data (name, date of birth, profession/industry and similar data)
• Contact details (address, email address, telephone number and similar data)
• Customer history
We also process data from public sources (e.g., Internet, media, press)
5. Who receives your data?
We disclose your personal data within our company to those departments that require these data to fulfil contractual and legal obligations or to implement our legitimate interest.
Beyond that, the following entities may receive your data:
- Processors commissioned by us (Art. 28 GDPR), service providers for auxiliary activities and other controllers within the meaning of the GDPR, especially in the areas of IT services, logistics, courier services, printing services, external data centres, support/maintenance of IT applications, archiving, document processing, accounting and controlling, data destruction, purchasing/procurement, customer administration, letter shops, marketing, telephony, website management, tax consultancy, auditing services, credit institutes
- Public offices and institutions if there is a legal or official obligation under which we must provide information, or report and pass on data
- Other entities for which you have given us your consent to transfer data.
6. Transfer of your data to a third country or an international organisation
Data processing does not take place outside of the EU or the EEA.
7. For how long do we store your data?
Where necessary, we process your personal data for the duration of our business relationship; this also includes the initiation and execution of a contract.
Moreover, we are subject to various storage and documentation obligations, which arise from the German Commercial Code (HGB) and the Tax Code (AO), inter alia. The storage and documentation periods specified therein are up to ten years after the end of the business relationship or the pre-contractual legal relationship.
Ultimately, the storage period is also based on the statutory limitation periods, which, according to §§ 195 et seq. of the German Civil Code (Bürgerliches Gesetzbuch – BGB), for example, can usually be three years, but can also be up to thirty years in certain cases.
8. To what extent is there automated decision-making in individual cases?
We do not implement any purely automated decision-making processes in accordance with Article 22 GDPR. If we do implement these processes in individual cases, we will inform you separately, insofar as this is required by law.
9. Your data protection rights
You have the right to information according to Art. 15 GDPR, the right to rectification according to Art. 16 GDPR, the right to erasure according to Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR, as well as the right to data portability according to Art. 20 GDPR. In addition, you also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). In principle, you have the right to object to us processing your personal data according to Article 21 GDPR. However, this right to object only applies if special circumstances in your personal situation exist, whereby the rights of our company may conflict with your right to object. If you want to exercise one of your rights, please contact our data protection officer (datenschutz@solectric.de).
10. Extent of your obligations to provide us with your data
You only need to provide the data that are required for the establishment and execution of a business relationship or for a pre-contractual relationship with us, or the data that we are obligated to collect by law. We will generally not be able to conclude or execute the contract without these data. This can also relate to data required later in the context of the business relationship. If we request additional data from you, you will be informed separately that providing the information is voluntary.
11. Information pertaining to your right to object Art. 21 GDPR
You have the right to object at any time to the processing of your data based on Art. 6 para. 1(f) GDPR (data processing on the basis of a weighing of interests) or Art. 6 para. 1(e) GDPR (data processing in the public interest), if reasons for this arise from your particular situation. This also applies to profiling based on this provision within the meaning of Art. 4 no. 4 GDPR.
If you exercise your right to object, we will no longer process your personal data unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or the processing is required to assert, exercise, or defend legal claims. We may also process your personal data to carry out direct advertising. If you do not wish to receive any advertising, you have the right to object to this at any time. We will take this objection into account for the future.
We will no longer process your data for direct advertising purposes if you object to the processing for these purposes. The objection can be sent by letter, without the need to complete a form, to the address listed under Section 1.
12. Your right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
The supervisory authority responsible for us:
Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg (State Representative for Data Protection and Freedom of Information Baden-Wuerttemberg)
Königstrasse 10 a
70173 Stuttgart
Phone: 0711/615541-0
poststelle@lfdi.bwl.de