Data Protection

Story of a New World GmbH

We, Story of a New World GmbH, located at Liptinger Str. 25, 78532 Tuttlingen, Tel. +49 7462 92392-0, Email: office@storyofanewworld.de (hereinafter „Story of a New World“), inform you about the processing of personal data carried out by us. You can reach us with your questions at office@storyofanewworld.de or by post at:

Story of a New World GmbH
Liptinger Str. 25
78532 Tuttlingen

I. Information about the processing of your data in accordance with Article 13 of the General Data Protection Regulation (GDPR)

Controller and Data Protection Officer

The controller for this website is Story of a New World GmbH, located at Liptinger Str. 25, 78532 Tuttlingen, Tel. +49 7462 92392-0, Email: office@storyofanewworld.de. You can reach the data protection officer via email at office@storyofanewworld.de or by mail at the above address.
Data processed for the provision of the website and the creation of log files

a. What data is processed for what purpose?

When accessing content on the website, data is temporarily stored that may allow identification. The following data is collected:

– Date and time of access
– IP address
– Hostname of the accessing computer
– Website from which the website was accessed
– Websites accessed via the website
– Page visited on our website
– Message whether the retrieval was successful
– Amount of data transmitted
– Information about the browser type and version used
– Operating system

The temporary storage of data is necessary for the operation of a website visit to enable delivery of the website. Further storage in log files is carried out to ensure the functionality of the website and the security of information technology systems. Our legitimate interest in data processing also lies in these purposes.

b. On what legal basis are these data processed?

The data is processed on the basis of Art. 6 para. 1 letter f GDPR.

c. Are there any other recipients of the personal data besides the controller?

The website is hosted by Ionos SE (Elgendorfer Str. 57, 56410 Montabaur, info@ionos.de). The host receives the data mentioned above as a data processor.

d. How long will the data be stored?

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. In the case of providing the website, this is the case when the respective session is terminated. The log files are stored for a maximum of up to 24 hours directly and exclusively accessible to administrators. After that, they are only available indirectly via the reconstruction of backup tapes and are permanently deleted after a maximum of four weeks.
Rights of Data Subjects

a. Right to Information

You have the right to request information under Article 15 of the GDPR about the processing of your personal data by us.

b. Right to Object

You can object under certain circumstances as outlined in Section II.

c. Right to Rectification

If your personal data is incorrect or incomplete, you have the right under Article 16 of the GDPR to request rectification or completion.
d. Right to Erasure
According to Article 17 of the GDPR, you have the right to request the erasure of your personal data.
e. Right to Restriction of Processing
You have the right under Article 18 of the GDPR to request the restriction of processing of your personal data.
f. Right to Lodge a Complaint
If you believe that the processing of your personal data violates data protection laws, you have the right under Article 77(1) of the GDPR to lodge a complaint with a supervisory authority of your choice. This includes the data protection supervisory authority responsible for the controller: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (https://www.baden-wuerttemberg.datenschutz.de/beschwerde/).
g. Right to Data Portability
In the event that the conditions of Article 20(1) of the GDPR are met, you have the right to receive the data that we process automatically based on your consent or in fulfilment of a contract, either to yourself or to third parties. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website. Therefore, they are not based on consent pursuant to Article 6(1)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, but are justified under Article 6(1)(f) of the GDPR. Consequently, the conditions of Article 20(1) of the GDPR are not met in this respect.

II. Right to Object pursuant to Article 21(1) of the GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Article 6(1)(f) of the GDPR (data processing for the purposes of legitimate interests). The controller will then no longer process the personal data unless they can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defence of legal claims. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website.