1. data protection at a glance

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to personally identify you. For detailed information on the subject of data protection, please refer to our data protection declaration below this text.

Data collection on our website

Who is responsible for the data collection on this website?

The data processing on this website is carried out by the website operator. The operator’s contact details can be found in the imprint of this website.

How do we collect data from you?

On the one hand, your data is collected when you provide it to us. This may be data that you enter in a contact form, for example.

Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other data can be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. For this purpose, as well as for further questions regarding data protection, you can contact us at any time at the address given in the imprint. Furthermore, you have the right to appeal to the relevant supervisory authority.

Analysis tools and third-party tools

When you visit our website, your surfing behaviour can be statistically evaluated. This is done primarily with cookies and with so-called analysis programmes. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find detailed information on this in the following data protection declaration.

You can object to this analysis. We will inform you below about how to exercise your options in this regard.

General information and mandatory information

Data privacy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data are data that can be used to identify you personally. This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the internet (e.g. when communicating by email) can have security gaps. It is not possible to provide seamless protection of data from access by third parties.

The party responsible for processing data on this website

changeways GmbH
Ludwig-Erhard-Str. 26
41564 Kaarst, GERMANY

Fon +49 2154 / 933400-0
E-Mail: info@changeways.de

The responsible body is the natural or legal person who, alone or together with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. To do so, an informal message to us by e-mail is sufficient. The legality of the data processing carried out up to the point of revocation remains unaffected by the revocation.

Right of appeal to the competent supervisory authority

In the event of violations of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the German state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Information, blocking, deletion

Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified, blocked or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time at the address provided in the imprint.

Objection to advertising e-mails

The use of contact data published in accordance with the imprint obligation for sending unsolicited advertising and information materials is hereby prohibited. The site operators expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam e-mails.

3. Data collection on our website

Use of cookies and DOM storage

Our website partly uses so-called cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and can be read during a subsequent visit.

Most of the cookies we use are so-called ‘session cookies.’ They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser the next time you visit.

You can adjust the settings on your browser so that you are informed when cookies are set and only allow cookies in individual cases, accept cookies in certain cases or generally exclude them, and activate the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be limited.

DOM Storage is a technique in which website data is stored in your web browser and can be read during a subsequent visit. Files can be stored for the duration of a session or persistently. A session typically lasts until the browser window is closed.

Necessary cookies and DOM storage

Necessary cookies and DOM storage help to make a website usable by enabling basic functions such as page navigation, shopping carts and access to protected areas of the website. The website cannot function properly without these functions. These cookies and DOM storage are used on the basis of a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

Name Anbieter Zweck Ablauf Typ
wordpress_* {{ URL der Website }} Das Content Management System WordPress, auf dem unsere Website basiert, nutzt diese Cookies, um Authentifizierungsdetails zu speichern. Session HTTP-Cookie
wordpress_logged_in_* {{ URL der Website }} Das Content Management System WordPress, auf dem unsere Website basiert, nutzt diesen Cookie, um eingeloggte Nutzer zu identifizieren. Session HTTP-Cookie
wordpress_test_cookie {{ URL der Website }} Das Content Management System WordPress, auf dem unsere Website basiert, setzt dieses Cookie, wenn man die Login-Seite für den Redaktionsbereich aufruft. Das Cooke zeigt an, ob der Browser so eingestellt ist, dass er Cookies akzeptiert. Session HTTP-Cookie

Preference cookies and DOM storage

Preference cookies and DOM storage enable a website to store information that changes the behaviour or appearance of the website, such as your preferred language or the region in which you are located. The use of these cookies and DOM storage is based on a legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f DSGVO.

Name Anbieter Zweck Ablauf Typ
borlabs-cookie {{ URL der Website }} Wird verwendet, um Nutzer-Zustimmung oder -Ablehnung zur Speicherung nicht-notwendiger Cookies und DOM-Storage zu speichern. 6 Monate HTTP-Cookie
wp-settings-*, wp-settings-time-* {{ URL der Website }} Das Content Management System WordPress, auf dem unsere Website basiert, nutzt diese Cookies, um das Interface zu personalisieren. Permanent HTTP-Cookie

Tracking cookies

Tracking cookies help us to understand how visitors interact with our website by collecting and reporting information anonymously. This can involve tracking users across multiple websites from different providers. We only use these cookies with the express consent of the user.

Name Anbieter Zweck Ablauf Typ

Contact form

If you send us an enquiry using the contact form, the information you provide in the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not share this information without your consent.

The processing of the data entered into the contact form is therefore carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal notification by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g. after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions – in particular retention periods.

Brute force protection

Our website is based on the WordPress content management system. WordPress provides an administrative area where the contents of the website can be edited. This area can only be accessed by editors and administrators of this website. Access is monitored and logged by the WordPress plugin ‘Solid Security’, for example in the event of incorrect logins or attempts to find out access data by frequently testing passwords (‘brute force attack’). Access attempts to the administrative area are stored in our database including the IP address for 7 days and then deleted. In the event of multiple unauthorised access attempts, the IP address will be stored and blocked beyond this period. There is a legitimate interest in the collection and processing of the IP address by ‘Solid Security’ in accordance with Art. 6 para. 1 lit. f DSGVO, because this site is protected against technical attacks and unauthorised access attempts. This ensures the security of the entire website and the stability of our server, and also protects personal data that may have been processed elsewhere. The IP addresses used for testing are used by ‘Solid Security’ only for this purpose. The brute force protection only applies to the administrative area of our website and therefore does not affect the use of our website outside the protected area.

ManageWP

We manage our website with the help of the tool ManageWP. The provider is GoDaddy.com WP Europe, Trg republike 5, 11000 Belgrade, Serbia. With ManageWP, we can, among other things, monitor the security and performance of our website and create automatic backups. ManageWP thus has access to the contents of the website, including our databases. ManageWP is hosted on the provider’s servers. Tracking does not take place. ManageWP is used on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the most effective and secure operation of his website.

4. Analysis tools

Matomo

Scope of personal data processing

We use the open-source software tool Matomo on our website to analyse the surfing behaviour of our users. The software does not set any cookies on your device. If individual pages of our website are accessed, the following data is stored:

  1. Two bytes of the IP address of the user’s system
  2. The website accessed
  3. The website from which the user accessed the website visited (referrer)
  4. The subpages that are accessed from the accessed website
  5. The time spent on the website
  6. The frequency with which the website is accessed

The software runs exclusively on the local servers of the hosting provider ALL-INKL.COM, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, on behalf of our service provider, Montagmorgens GmbH, Gahlingspfad 31, 47803 Krefeld. This data is only stored there. The data will not be passed on to third parties. The software is configured so that the IP address is not stored in full, but two bytes of the IP address are masked (e.g. 192.168.xxx.xxx). This means that it is no longer possible to assign the abbreviated IP address to the accessing computer.

Legal basis for the processing of personal data

The legal basis for the processing of personal data is Art. 6 (1) (f) GDPR. Our legitimate interest in this data processing lies in our need to provide you with a website that is designed to meet your needs and is optimised for the end devices used.

Purpose of data processing

Processing personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. These purposes also constitute our legitimate interest in the processing of the data in accordance with Article 6(1)(f) of the GDPR. The anonymisation of the IP address sufficiently takes into account the interest of users in the protection of their personal data.

Storage duration

The data will be deleted as soon as it is no longer needed for our record-keeping purposes. In our case, this is after five years.

Right to object and to have it removed

For more information on the privacy settings of the Matomo software, please see the following link: matomo.org/docs/privacy/.