close

Privacy and data protection

Privacy Statement

casavi GmbH (hereinafter referred to as “casavi”) complies with all relevant legal requirements in respect of data protection (German data protection legislation, European data protection regulations and any other applicable data protection law). This Privacy Statement is intended to inform you, the user, on the type, scope and purpose of personal data collection and use. This Privacy Statement is accessible here as a PDF file at all times.

Controller / Contact, Data Protection Officer

The Controller acc. to Art. 4 (7) EU General Data Protection Regulation (“GDPR”) is:

casavi GmbH

Sandstraße 33

80335 München

Germany

 

Represented by:

Peter Schindlmeier (General Manager)

Oliver Stamm (General Manager)

Local Court of Munich, Commercial Register No. HRB 218832

VAT No.: DE300436614

Contact:

Telephone: +49 (0)89 2154 5359-0

Telefax: +49 (0)89 2154 5359-9

Email: hello@casavi.de

If you have any questions concerning this Privacy Statement or privacy in general or have any comments to make thereon, please feel free to contact our Data Protection Officer via DSB@casavi.de or send a letter by mail to the attention of the Data Protection Officer.

Legal Bases for the Processing of Your Data

If the legal basis for data processing is not mentioned in this Privacy Statement, the following shall apply:

  • Where the processing of personal data is based on a consent we obtain from the data subject, Art. 6 (1) Sent. 1 lit. a) of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis.
  • Where the processing of personal data is necessary for the performance of a contract, Art. 6 (1) Sent. 1 lit. b) GDPR shall serve as the legal basis. This shall also apply to processing activities that are necessary for implementing measures prior to entering into a contract.
  • Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) Sent. 1 lit. c) GDPR shall serve as the legal basis.
  • Where the processing of personal data is necessary to safeguard vital interests of the data subject or another natural person, Art. 6 (1) Sent. 1 lit. d) GDPR shall serve as the legal basis.
  • Where the processing of personal data is necessary to safeguard the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1) Sent. 1 lit. f) GDPR shall serve as the legal basis for processing.

Retention Periods

The data processed by us will be deleted or their processing restricted in compliance with the legal regulations, particularly according to Art. 17 and 18 GDPR. Unless explicitly stated in this Privacy Statement, we will delete the data stored by us if these are no longer needed for the purpose they were collected for. Data will only be retained beyond the date on which their purpose ceases to exist, if the data are necessary for other and legally admissible purposes or if the data must continue to be stored due to statutory retention requirements. In these cases, the processing will be restricted (blocked); the data will not be processed for other purposes.

Data Processing and Recipients of Data

To process your data, we also use the services of external service providers that are bound by our instructions. These service providers were carefully selected and commissioned by us and are regularly subjected to an audit. The commissions (orders) are based on data processing agreements in accordance with Art. 28 GDPR. The processors will not process the data for their own purposes.

To operate this web service, we have engaged a hosting provider which processes – on our behalf and based on our legitimate interest in an efficient and secure provision of this online service according to Art. 6 (1) Sent. 1 lit. f), 28 GDPR – stock data, contact details, content data, contract details, usage data, meta and communication data of visitors to this website or clients of the web service.

Log Files

To use our Internet website for informational purposes, it is basically not necessary for you to actively provide personal data. Rather, in this case, we will only collect and use those data your Internet browser automatically transmits to us, including:

  • date and time of access to one of our webpages,
  • your browser type,
  • the browser settings,
  • the operating system used,
  • the page you visited last,
  • the transferred amount of data and the access status (file transferred, file not found etc.)
  • your IP address.

The data are stored on our servers. Storage of these data together with personal data other than those mentioned above does, on our part, not take place. Temporary storage of the IP address by the system is necessary to allow delivery of the website to the user’s computer. For this purpose, the IP address of the user must be stored for the duration of the session. In addition, we create so-called log files whereby, however, in this context your IP address will be truncated. The created log files are stored to ensure the security of our information technology systems (IT systems). There will be no person-related analysis of the data, e.g. for marketing purposes.

For the provision of a website, in accordance with Art. 6 (1) Sent. 1 lit. b), lit. c), lit. f) GDPR, processing of the aforementioned data is technically essential to correctly display our website and to ensure stability and security. The main purpose of log file creation is to enable us to provide evidence of attacks to our systems. The server log data are removed from our systems after 7 days at the latest.

Newsletter

By giving your consent, you can subscribe to our newsletter and receive information about our latest interesting offers.

For newsletter registration, we use the so-called double opt-in procedure which means that, after registration, we will send you an email to the email address you specified, asking you to confirm that you wish to receive our newsletter. If you do not confirm within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we will save the IP addresses you used as well as the time of registration and the time of confirmation. This procedure is intended to enable us to provide evidence of your registration and, if necessary, to clear up any misuse of your personal data. The only mandatory information to be provided for receiving the newsletter is your email address. All other information is optional and will be used to address you personally. After having received your confirmation, we will save your email address for the purpose of newsletter dispatch. The legal basis for data processing is Art. 6 (1) Sent. 1 lit. a) GDPR.

You can unsubscribe the newsletter by clicking on the link provided for this purpose in each newsletter email, sending an email to hello@casavi.de or informing us using the contact details in the Site Notice.

Contact Form

The processing of your data provided when you contact us by email, contact form or telephone is carried out, depending on the content, in the case of purely informational requests on the basis of your (presumed) consent according to Art. 6 (1) Sent. 1 lit. a) GDPR or according to Art. 6 (1) Sent. 1 lit. b) GDPR if contacting is related to the performance of a contract. When you contact us using our contact form, we only need your email address in order to be able to reply. As an option, you can additionally give us your name to allow us to address you personally.

Your contact requests will be deleted immediately after processing unless there are statutory retention periods in place that require storage beyond that point in time.

Social Media Presence

We maintain social media accounts in order to communicate with and provide information to our clients and prospects. The use of these networks is subject to the terms of the respective operators.

Obligation to Grant Access / Obligation to Rectify

You have the right to obtain access, on your request, to your personal data stored by casavi. Moreover, you have the right to obtain the rectification of inaccurate data as well as the blocking and erasure of your data. Please send an email to hello@casavi.de for this purpose or a letter to the address indicated at the beginning of this Privacy Statement. If your request is of a confidential nature, you can also contact our Data Protection Officer.

According to the legal regulations, you have in particular the following gratuitous rights that can be asserted towards casavi:

  • right of access (Art. 15 GDPR),
  • right to rectification or erasure (Art. 16 and Art. 17 GDPR),
  • right to restriction of processing (Art. 18 GDPR),
  • right to data portability (Art. 20 GDPR),
  • right to object to processing (Art. 21 GDPR).

In addition, you have the right to lodge a complaint with a supervisory authority in respect of the processing of your personal data by the Controller.

Security

casavi implements technical and organisational security measures in order to protect the data you made available against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. These security measures are being improved continuously in line with technological progress. Apart from that, all staff and agents have been placed under the obligation to maintain data secrecy.

Amendments to this Privacy Statement

casavi reserves the right to amend this Privacy Statement. You can access this Privacy Statement, as amended, at all times via https://casavi.de/datenschutz 1.

Cookies

Cookies used by casavi

casavi may also collect data about the use of its website by means of so-called browser cookies. These are small text files that are placed in the hard disk of your computer and that store certain settings and data for exchange with casavi via your browser. A cookie usually contains the name of the domain from which the cookie data were sent as well as information on the age of the cookie and an alphanumeric identifier. Cookies allow the system to identify the computer of the user and to promptly make available any default settings. When a user accesses the platform, a cookie is sent to the hard disk of this user’s computer. Cookies help casavi improve the website and provide the user with a better service that is even more tailored to his or her needs. Cookies enable casavi to recognise a user’s computer the next time he or she visits the casavi website, allowing casavi to do the following:

  • to store information on your preferred activities on the website and adapt our website to your individual interests, including e.g. personalised advertisements;
  • to speed up handling of your requests;
  • the cookies we use only store the above mentioned information concerning your use of the website; this is not done through an association with you but through assignment of an identification number to the cookie (cookie ID); the cookie ID will not be merged with the name, IP address or similar data that would allow the cookie to be associated with the user.

If the user does not want browser cookies to be used, he or she can refuse to accept the storage of cookies in his or her browser settings. The user takes note of the fact that, in this case, our website may only be usable to a limited extent or not at all.

The use of cookies is legally based on Art. 6 (1) Sent. 1 lit. f) GDPR unless stated otherwise.

Third-party cookies and services

You can configure your browser settings as desired and e.g. refuse to accept third-party cookies or any cookies at all. The use of third-party cookies is legally based on Art. 6 (1) Sent. 1 lit. f) GDPR unless stated otherwise.

Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). Google Analytics uses so-called cookies, text files that are stored in your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, in member states of the European Union or in other states which are parties to the Agreement on the European Economic Area, Google will truncate your IP address before transfer if IP anonymisation is activated on this website. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports about the website activities and to provide additional services for the website operator related to the use of the website and the Internet. Google will not associate the IP address transferred by your browser in the context of Google Analytics with any other data held by Google. You can prevent the transfer of the data generated by the cookie and related to your use of the online service to Google as well as the processing of these data by Google by downloading and installing the browser plugin available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

For more information on the data usage by Google as well as the configuration options and possibilities to object please refer to the following websites of Google:

https://www.google.com/intl/de/policies/privacy/partners

http://www.google.com/policies/technologies/ads

http://www.google.de/settings/ads

We would like to point out that IP addresses are only processed to a limited extent on this website as we use Google Analytics with the “_anonymizelp()” extension, which makes it impossible to directly associate the IP addresses with specific individuals.

Google is certified under the Privacy Shield framework which provides a guarantee of compliance with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google remarketing

This website uses the remarketing feature of Google Inc. (“Google”).

The remarketing feature serves to show, within the Google advertising network, interest-based advertisements to visitors of the website. Your browser will store cookies (text files) on your computer for this purpose which makes it possible to recognise you as visitor when you access websites that are also part of the Google advertising network. This also includes Internet sites of Google itself.

The cookie files stored by Google contain a numerical sequence which is used to record the visits to the website as well as anonymised data regarding the use of the website. For information on how to stop the use of cookies via your browser settings please refer to your browser’s help function.

When you access websites of the advertising network, you may be shown interest-based advertisements which, in terms of content, are related to the previously accessed websites (including this website).

If you do not want the Google remarketing feature to be used, you can disable it via the following link: http://www.google.com/settings/ads.

You can also prevent the use of cookies by Google by following the below link and downloading the plugin available there and installing it: https://www.google.com/settings/ads/plugin.

Alternatively, you can disable the use of cookies for interest-based advertisements via the Network Advertising Initiative by following the instructions given here:

http://www.networkadvertising.org/managing/opt_out.asp.

For more information on the Google remarketing feature and the Privacy Policy of Google please refer to http://www.google.com/privacy/ads/.

Google is certified under the Privacy Shield framework which provides a guarantee of compliance with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google fonts

On this website, we integrated specific fonts provided by Google for display purposes. When you access a page, your browser will load these fonts from a Google server which means that your IP address including URL (Internet address) of the Internet page you are visiting will be transmitted to this Google server. If you are logged in to your Google account, you enable Google to directly associate your surfing habits with your personal profile. You may prevent this by logging out from your Google account.

Google is certified under the Privacy Shield framework which provides a guarantee of compliance with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

For more information on these Google fonts please refer to https://developers.google.com/fonts/faq and the Google Privacy Statement at https://www.google.com/policies/privacy.

 

Last update: 22 May 2018