Skip to content

Privacy Policy

Your privacy is important to us at Firmway. We respect your privacy regarding any information we may collect from you across our website.

I. Information on the Processing of Your Data in Accordance with Article 13 of the General Data Protection Regulation (GDPR)

1. Controller and Data Protection Officer

The controller for this website is:

Firmway GmbH
Große Gallusstraße 14
60311, Frankfurt am Main Germany
dataprotection@firmway.eu

You can contact the Data Protection Officer via email at:

dataprotection@firmway.eu

2. Data Processed for the Provision of the Website and the Creation of Log Files

a. What data is processed and for what purpose?

Each time content on the website is accessed, certain data is temporarily stored which may allow for identification. The following data is collected:

  • Date and time of access

  • IP address

  • Hostname of the accessing computer

  • Website from which the website was accessed

  • Websites accessed via our website

  • Pages visited on our website

  • Notification whether the retrieval was successful

  • Amount of data transmitted

  • Information about the browser type and version used

  • Operating system

Temporary storage of this data is necessary for the operation of the website to enable its delivery. Further storage in log files takes place to ensure the functionality of the website and the security of IT systems. These purposes also constitute our legitimate interest in data processing.

b. What is the legal basis for processing this data?

The data is processed on the basis of Article 6(1)(f) GDPR.

c. Are there any other recipients of the personal data besides the controller?

The website is hosted via Hubspot. The hosting provider receives the above-mentioned data as a processor acting on our behalf.

d. How long is the data stored?

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the provision of the website, this is the case when the respective session ends. The log files are stored for a maximum of 24h and are accessible only to administrators. After that, they are only indirectly available via backup tapes and are permanently deleted after four weeks.

3. Rights of Data Subjects

a. Right of Access

You have the right to request information pursuant to Article 15 GDPR about your personal data that we process.

b. Right to Object

You have the right to object to processing for specific reasons (see Section II below).

c. Right to Rectification

If the information concerning you is incorrect or no longer accurate, you may request rectification in accordance with Article 16 GDPR. If your data is incomplete, you may request completion.

d. Right to Erasure

You may request the erasure of your personal data in accordance with Article 17 GDPR.

e. Right to Restriction of Processing

You have the right under Article 18 GDPR to request the restriction of the processing of your personal data.

f. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right under Article 77(1) GDPR to lodge a complaint with a supervisory authority of your choice. This also includes the supervisory authority responsible for the controller:

State Commissioner for Data Protection and Freedom of Information of Hesse

poststelle@datenschutz.hessen.de

g. Right to Data Portability

If the conditions of Article 20(1) GDPR are met, you have the right to receive data that we process automatically based on your consent or a contract, or to have it transferred to a third party.

The collection of data for providing the website and storing log files is strictly necessary for the website’s operation. It is therefore not based on consent under Article 6(1)(a) GDPR or on a contract under Article 6(1)(b) GDPR, but is justified under Article 6(1)(f) GDPR. Thus, the requirements of Article 20(1) GDPR are not fulfilled in this case.

 

II. Right to Object Pursuant to Article 21(1) GDPR

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data that takes place on the basis of Article 6(1)(f) GDPR.

The controller will then no longer process the personal data unless they can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or if the processing serves the establishment, exercise, or defense of legal claims.

The collection of data for providing the website and storing log files is strictly necessary for the operation of the website.