With this privacy policy, we would like to inform you about the type, scope, and purpose of the personal data we collect, use, and process. Furthermore, this privacy policy will provide you with information about your rights. The processing of personal data, such as a person’s name, address, email address, or telephone number, always takes place in accordance with the General Data Protection Regulation (EU). Our privacy policy is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). According to the regulation, the privacy policy should be easily readable and understandable. If you have any questions or require detailed information, please do not hesitate to contact us.

1. Name and Address of the Data Controller
The data controller in accordance with Art. 4 (7) EU General Data Protection Regulation (GDPR) is:
Perl Carbon and Design
Owner: Bernhard Perl
Falterhaid 56
94436 Simbach/Landau
Phone: +49 9954 9904880
Fax: +49 9954 9904882
Email: info@design-modellbau-perl.de

2. Your Rights
Under the GDPR, you have the following rights concerning your personal data:

• Right to information
• Right to rectification
• Right to erasure (Right to be forgotten)
• Right to restriction of processing
• Right to data portability
• Right to lodge a complaint: If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. You can contact the supervisory authority of your place of residence or workplace for this purpose.

3. Objection or Withdrawal Against the Processing of Your Personal Data
It is your right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Art. 6 (1) letters e or f GDPR. This applies, for example, if the processing is not necessary for the performance of a contract. If you exercise your right to object, we ask you to state the reasons. After examining the facts, we will either cease processing your personal data or demonstrate compelling legitimate grounds for processing which override your interests, rights, and freedoms. If you have given your consent to the processing of your personal data, you can withdraw your consent at any time in accordance with Art. 7 (3) GDPR. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Regardless of this, you have the right to object at any time to the processing of your personal data for advertising and data analysis purposes. You can address your objection to the contact address provided above for the data controller.

4. Collection of General Data and Information
When using our website for purely informative purposes, data and information are automatically stored on the server of our internet service provider by the computer system of the accessing computer, known as server log files. This data collection is technically necessary to ensure the stability and security of our website. When using this general data and information, the website operator does not draw any conclusions about the data subject. The legal basis for storing the data and log files is Art. 6 (1) lit. f GDPR. The following data is collected:

• IP address
• Date and time of the website access
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (homepage and subpages visited)
• Amount of data transmitted
• Access status/HTTP status
• Internet service provider

of the accessing system

• Website from which the request comes (referrer URL)
• Browser type, browser version, language of the browser software
• Operating system used

5. Cookies
We do not use cookies in the public area of our website. For the login area, which is exclusively reserved for authorized persons, we use technically necessary cookies for the login process. These cookies are automatically deleted after closing the browser program.

6. Contact
If you provide us with personal data via email or a contact form, this data will be automatically stored and processed by us to handle your request. When data is transmitted via a contact form, it is done over an encrypted SSL connection. We do not share this personal data with third parties. Your data provided to us will be deleted as soon as it is no longer required for storage, or we restrict processing if legal retention periods apply.

7. Routine Deletion of Personal Data
nly store and process your personal data for the period required to achieve the storage purpose or as provided for by the European legislator or another legislator in laws or regulations. When the storage purpose ceases to apply or when a retention period prescribed by the European legislator or another competent legislator expires, your personal data will be routinely blocked or deleted in accordance with legal requirements.

8. Legal Basis for Processing Personal Data
To the extent that we obtain the consent of the data subject for processing personal data, Art. 6 (1) lit. a GDPR serves as the legal basis for processing. When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. If processing personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis. In cases where vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis for processing.

9. External hosting
In order to ensure a reliable and secure display of our homepage, we use the services of an external web hosting provider. The legal basis for this is a legitimate interest in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. In addition to the collection of access data and server log files, no other personal data of homepage visitors is collected and stored. The aforementioned server log files are automatically deleted after 14 days. The hosting server is located in Germany.