Privacy Policy

This is a non-binding English translation provided for convenience only. The legally binding version is the German original (Datenschutzerklärung). In the event of any discrepancy, the German version shall prevail.

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. For detailed information on data protection, please refer to this privacy policy.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the section "Notice on the responsible party" in this privacy policy.

How do we collect your data?

This website is a purely informational site without forms, newsletter sign-up, or booking functions. Data is collected automatically only through our IT systems or those of our hosting provider when you visit the website (technical data such as browser type, operating system, or the time of the page request).

What do we use your data for?

The data collected is used exclusively to ensure the technically error-free provision of the website. No analysis of your user behavior, no tracking, and no sharing for advertising purposes takes place.

What rights do you have regarding your data?

You have the right, at any time, to obtain information free of charge about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of this data. You furthermore have the right to lodge a complaint with the competent supervisory authority. For this and any further questions on data protection, you may contact us at any time.

2. Hosting

We host the content of this website with the following provider:

Microsoft Azure
The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (hereinafter "Microsoft Azure"). When you visit our website, Microsoft Azure collects technical log files, including your IP address, in order to provide and secure the website.

The use of Microsoft Azure is based on our legitimate interest in a secure and reliable provision of our website (Art. 6 para. 1 lit. f GDPR). We have entered into a data processing agreement (DPA) with Microsoft under Art. 28 GDPR. Processing is subject to Microsoft's EU Data Boundary; to the extent personal data is nevertheless transferred to the US, this is based on the EU Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework, under which Microsoft is certified.

3. General Information and Mandatory Notices

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

We point out that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Notice on the Responsible Party

The party responsible for data processing on this website is:

arades GmbH
Lilistr. 6
63067 Offenbach am Main
Germany
Phone: +49 (0)69 401 507 260
Email: website@arades.de

The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Data Protection Officer

arades GmbH is currently not legally required to appoint a data protection officer (§ 38 BDSG in conjunction with Art. 37 GDPR). Please direct data protection inquiries to website@arades.de under the subject "Data Protection", or by post to the address stated in the Imprint.

Storage Duration

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for its processing no longer applies. Mandatory statutory retention periods remain unaffected.

General Information on the Legal Basis for Data Processing

Where your data is required for the performance of a contract or the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, where processing is necessary to comply with a legal obligation, processing is based on Art. 6 para. 1 lit. c GDPR. Processing may also be based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

Right to Object to Data Collection in Special Cases (Art. 21 GDPR)

WHERE DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT, AT ANY TIME AND FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for arades GmbH is:

The Hessian Commissioner for Data Protection and Freedom of Information
Postfach 3163, 65021 Wiesbaden, Germany
Phone: +49 611 1408-0
Web: datenschutz.hessen.de

Right to Access, Rectification, and Erasure

Within the scope of applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the processing, and, where applicable, a right to rectification or erasure of this data. For this and any further questions regarding personal data, you may contact us at any time using the address stated in the Imprint.

SSL / TLS Encryption

For security reasons, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock icon in your browser bar.

4. Data Collection on This Website

Cookies

This website uses only technically necessary storage mechanisms, if any, and does not by default set cookies that require consent. No analytics, marketing, or third-party cookies are used.

Server Log Files

The hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not combined with other data sources. Collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website — for this purpose, server log files must be collected.

Inquiries by Email or Phone

If you contact us by email or phone, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.

This data is processed on the basis of our legitimate interest in efficiently handling inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or, where the inquiry relates to the performance of a contract, on the basis of Art. 6 para. 1 lit. b GDPR.

5. Data Processing Agreements

Microsoft (Hosting, Email)

For hosting our website as well as for sending and receiving emails to the address stated in the Imprint, we use Microsoft services. Microsoft processes the data required for this purpose as a data processor on the basis of an agreement pursuant to Art. 28 GDPR (Microsoft Products and Services Data Protection Addendum). Microsoft's data protection representative for the European Economic Area and Switzerland is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.