Andrea Hoppe

Privacy Policy

Personal data (hereinafter usually referred to simply as “data”) is processed by us only as necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

Pursuant to Art. 4 No. 1 of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter “GDPR”), “processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With this privacy policy, we inform you in particular about the nature, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide, either alone or jointly with others, on the purposes and means of processing. In addition, we inform you below about third-party components used for optimisation purposes and to improve the quality of use, insofar as third parties process data on their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as controller
II. Rights of users and data subjects
III. Information on data processing

I. Information about us as controller

The controller responsible for this website under data protection law is:

Andrea Hoppe
Am Beethovenpark 15
50935 Cologne
Germany

Phone: +49 (0)221 – 420 609 42
Email: info@andreahoppe.com

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right

  • to obtain confirmation as to whether data concerning them is being processed, to obtain information about the processed data, further information about the data processing and copies of the data (see also Art. 15 GDPR);
  • to have inaccurate or incomplete data rectified or completed (see also Art. 16 GDPR);
  • to have data concerning them erased without undue delay (see also Art. 17 GDPR), or alternatively, where further processing is required pursuant to Art. 17 para. 3 GDPR, to restrict processing in accordance with Art. 18 GDPR;
  • to receive the data concerning them and provided by them and to have this data transmitted to other providers/controllers (see also Art. 20 GDPR);
  • to lodge a complaint with the supervisory authority if they believe that data concerning them is being processed by the provider in breach of data protection regulations (see also Art. 77 GDPR).

In addition, the provider is obliged to inform all recipients to whom data has been disclosed of any rectification or erasure of data or restriction of processing carried out pursuant to Articles 16, 17 para. 1 and 18 GDPR. This obligation does not apply if such notification is impossible or involves disproportionate effort. Without prejudice to this, the user has the right to information about these recipients.

Users and data subjects also have the right under Art. 21 GDPR to object to future processing of data concerning them, provided that the data is processed by the provider on the basis of Art. 6 para. 1 lit. f GDPR. In particular, an objection to processing for direct marketing purposes is permissible.

III. Information on data processing

The data processed when you use our website will be deleted or blocked as soon as the purpose of storage no longer applies, provided that no statutory retention obligations prevent deletion and unless otherwise specified below for individual processing procedures.

Server data

For technical reasons, in particular to ensure a secure and stable website, data is transmitted by your web browser to us or to our web hosting provider. These server log files include, among other things, the type and version of your browser, the operating system, the website from which you came to our website (referrer URL), the pages of our website that you visit, the date and time of access and the IP address of the internet connection from which the website is used.

This data is stored temporarily, but not together with other data about you.

This storage is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in improving the stability, functionality and security of our website.

The data is deleted after seven days at the latest, unless further retention is required for evidentiary purposes. Otherwise, the data is fully or partially excluded from deletion until an incident has been finally clarified.

Contract processing

The data you provide in order to use our goods and/or services is processed by us for the purpose of contract processing and is required for this purpose. Conclusion and performance of the contract are not possible without providing your data.

The legal basis for processing is Art. 6 para. 1 lit. b GDPR.

We delete the data once the contract has been fully performed, while observing tax and commercial law retention periods.

As part of contract processing, we pass your data on to the transport company commissioned with delivery or to the financial service provider, insofar as this is necessary for delivery or payment purposes.

The legal basis for passing on the data is Art. 6 para. 1 lit. b GDPR.

Contact enquiries / contact options

If you contact us via contact form or email, the data you provide will be used to process your enquiry. Providing this data is necessary to process and answer your enquiry; without it, we cannot answer your enquiry, or can do so only to a limited extent.

The legal basis for this processing is Art. 6 para. 1 lit. b GDPR.

Your data will be deleted once your enquiry has been answered conclusively, provided that no statutory retention obligations prevent deletion, for example in the case of any subsequent contractual processing.

Webinars & online meetings

I also offer webinars and online meetings via this website. This requires technology with which the webinars and online meetings can be conducted. I currently use “Zoom”, a service provided by the US provider Zoom Video Communications, Inc.

Further information on my use of “Zoom” can be found here. The legal basis for processing data via “Zoom” is Art. 6 para. 1 lit. b GDPR. I use “Zoom” to provide my contractual services, in particular for my data protection clients. In addition to conducting webinars and online meetings, this also includes the follow-up processing of participant data for the creation of documentation, for example online employee training.

The appropriate level of data protection at Zoom Video Communications, Inc. is guaranteed by the following measures:

Zoom Video Communications, Inc. is certified under the Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TNkCAAW&status=Active.

I have concluded a data processing agreement with Zoom Video Communications, Inc. based on the EU standard contractual clauses: https://www.privacyshield.gov/participant?id=a2zt0000000TNkCAAW&status=Active