1. General information

Personal data is any data that can be used to identify you personally. The following information gives you an overview of how we process your personal data and what happens to your personal data when you visit our website.

1.1. Controller

Who is responsible for data collection on this website?

The controller responsible for the processing of personal data when using the website is:

PI Nymphenburg Entwicklungs GmbH & Co KG

• Address: Tölzer Straße 30a, 82031 Grünwald
• Phone: +49 89 74 28 75 266
• Fax: +49 89 74 28 75 267
• Email: prkmmblnbschl-grppd

The data protection officer should be contacted directly for data protection inquiries.

1.2. Data protection officer and supervisory authority

Who is the data protection officer and how can I contact them?

• Our data protection officer is: Hans Peter Fries
• Address: Theodor-Fontane-Weg 16 // D-51503 Rösrath

If you have any questions regarding data protection, you can contact the data protection officer at the following email address: hns-ptrfrs-dtnschtzd

Responsible supervisory authority (for data protection) with address is:

• Bavarian State Office for Data Protection Supervision (“BayLDA”)
• Postal address: P.O. Box 1349 // 91504 Ansbach // Germany
• Phone: +49 (0) 981 180093-0
• Email: pststllldbyrnd

(Only PDF files will be accepted by email)

2. Rights as a data subject

Any person whose personal data is processed can assert the following rights as a data subject against the controller (see section 1.1).

2.1. Right to information and copy, Art. 15 GDPR

Data subjects can request information from the controller in accordance with Art. 15 GDPR as to whether personal data relating to them is being processed. If this is the case, data subjects can request the information on the data processing referred to in Art. 15 GDPR. At the request of the data subject, the controller shall provide a copy of the personal data being processed.

2.2. Right to rectification, Art. 16 GDPR

In accordance with Art. 16 GDPR, data subjects may request the controller to rectify inaccurate personal data concerning them or, if necessary, to complete incomplete personal data.

2.3. Right to erasure, Art. 17 GDPR

Data subjects may request the controller to erase personal data concerning them in accordance with Art. 17 GDPR, provided that the conditions set out in Art. 17 GDPR are met.

2.4. Right to restriction of processing, Art. 18 GDPR

Pursuant to Art. 18 GDPR, data subjects may request the controller to restrict the processing of personal data concerning them, provided that the conditions set out in Art. 18 GDPR are met.

2.5. Right to data portability, Art. 20 GDPR

Pursuant to Art. 20 GDPR, data subjects may receive the personal data concerning them in a structured, commonly used and machine-readable format and transmit this data from one controller to another, provided that the conditions set out in Art. 20 GDPR are met.

2.6. Right to object to the processing, Art. 21 GDPR

Data subjects may, for reasons arising from their particular situation, object to the controller pursuant to Art. 21 GDPR to the processing of personal data concerning them, which is carried out, for example, on the legal basis of Art. 6 (1) sentence 1 lit. f GDPR.

The controller will then no longer process the personal data unless it can demonstrate and, if necessary, prove that the conditions for continuing the processing of the personal data in accordance with Art. 21 GDPR are met.

Data subjects can also object to the processing of personal data for direct marketing purposes at any time. The controller will then no longer process the personal data for this purpose.

2.7. Right to withdraw consent that has been granted, Art. 7 (3) GDPR

Data subjects may at any time withdraw consent that they have given to the controller for the processing of personal data concerning them in accordance with Art. 7 (3) GDPR. The withdrawal of consent is only effective for the future; the processing of personal data that has already taken place based on the consent is not affected by the withdrawal.

2.8. Right to lodge a complaint with a data protection supervisory authority, Art. 77 (1) GDPR

Pursuant to Art. 77 (1) GDPR, data subjects may lodge a complaint about the processing of personal data concerning them at any time. Such a complaint must be submitted to the competent data protection supervisory authority. The competent regulatory authority for data protection issues is the data protection officer of the federal state in which our company is headquartered, in this case the federal state of Bavaria. A list of data protection officers and their contact details can be found at the following link:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

3. Processing of personal data on the website

3.1. General information

a. How do we collect your personal data?

Your personal data is collected when you provide it to us. This may, for example, be data that you enter in the contact form. Other data is collected automatically by our IT systems when you visit our website. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you visit our website. We may only process other personal data if you have previously consented to the data processing. This applies, for example, to the analysis of your user behavior.

b. How do we use your personal data?

Some of the data is collected to ensure that the website is provided without errors. When you visit our website, your surfing behavior can be statistically evaluated. This is mainly done using cookies and analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you.

c. SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

3.2. Use of cookies and similar technologies

We use cookies and similar technologies (hereinafter uniformly referred to as "cookies"). Cookies are small text files that are stored on your end device by us or by another entity and through which certain information flows to the entity that sets the cookie. By using cookies, it is not possible to execute programs or transfer viruses to your end device.

You can disable cookies by adjusting your browser settings. However, this may mean that you will not be able to use all the functions of our website. Our website only uses so-called “third-party cookies”. Third-party cookies are cookies that are not stored on your device by us, but by third-party providers.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can adjust the settings on your browser so that you are informed when cookies are set and only allow cookies in individual cases, accept cookies in certain cases or generally exclude them, and activate the automatic deletion of cookies when you close your browser.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. saving language selection) are stored on the legal basis of Art. 6 (1) sentence 1 lit. f GDPR. We have a legitimate interest in the storage of cookies for the technically error-free and optimized provision of our services. If we evaluate your user behavior using cookies, this will only be done with your prior consent.

Further information on the scope and purpose of data processing, the respective legal basis, the storage period and the objection and removal options regarding third-party cookies can be found below in the explanation of the individual cookies we use.

a. Necessary cookies

These cookies are necessary for the operation of the website and therefore cannot be deselected:

• "WSESSIONID"

Storage period: Session

Function: Necessary standard cookie to use session data with PHP.

The legal basis for data processing is our legitimate interest in accordance with Art. 6 (1) sentence 1 lit. f GDPR in conjunction with § 25 (2) no. 2 Telecommunications Digital Services Data Protection Act (“TDDDG”) for the faultless operation of the website.

• "hideCookieNotice"

Storage period: 30 days

Function: Stores that the cookie or data protection notice is not displayed again each time the website is accessed.

The legal basis for data processing is our legitimate interest in accordance with Art. 6 (1) sentence 1 lit. f GDPR in conjunction with § 25 (2) no. 2 TDDDG for the faultless operation of the website.

b. Optional cookies

These cookies are not necessary for the operation of the website and require the consent of the data subject:

• "allowLoadExternalResources"

Storage period: 30 days

Function: Remembers the user decision as to whether external components may be loaded automatically, e.g. playing videos.

The legal basis for data processing is your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR in conjunction with § 25 (1) TDDDG.

• "allowTracking"

Storage period: 30 days

Function: Saves the user decision that your surfing behavior may be tracked.

The legal basis for data processing is your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR in conjunction with § 25 (1) TDDDG.

c. Server log files

The provider of the Website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

The legal basis for data processing is our legitimate interest in accordance with Art. 6 (1) sentence 1 lit. f GDPR in conjunction with § 25 (2) no. 2 TDDDG to defend against attacks.

3.3. Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions.

These data are:

• First name
• Last name
• Email address
• Phone number (not mandatory)
• Content of the notification

The data entered in the contact form is therefore processed exclusively on the legal basis of your consent (Art. 6 (1) sentence 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.