Privacy Policy

This is a courtesy English translation of our German-language privacy policy (Datenschutzerklärung). In case of any discrepancy, the German version is authoritative.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

AVALON EDV Consulting GmbH
Bettinastraße 4 B
81739 Munich, Germany
Phone: +49 89 15930578
Email: ulrich.osterfeld@avalon-it-service.de

2. General Information on Data Processing

We generally only process personal data of our users to the extent necessary to provide a functional website and our content and services. Personal data of our users is generally only processed with the user's consent or on the basis of another legal permission pursuant to Art. 6 (1) GDPR.

3. Provision of the Website and Server Log Files

When you visit our website, our hosting provider automatically collects information in so-called server log files, which your browser automatically transmits. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources. The collection of this data is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website.

4. Hosting

This website is hosted by an external service provider. The personal data collected on this website is stored on the host's servers. This takes place within the framework of a data processing agreement pursuant to Art. 28 GDPR.

5. Contacting Us

If you send us enquiries via the contact form or by email, the information you provide, including the contact details you give, will be processed by us in order to handle your enquiry and in case of follow-up questions. The legal basis for this processing is Art. 6 (1)(b) GDPR (pre-contractual measures or contract performance) and, where applicable, Art. 6 (1)(f) GDPR (legitimate interest in responding to enquiries).

The contact form on this website is implemented purely on the client side: when submitted, it opens your local email program with a pre-filled message to us; no data is automatically transmitted to a website server. Only when you actively send the email from your mail program is your information transmitted to us and then stored and processed by us.

6. Google Maps (Directions)

On the contact page we link to an external map service (Google Maps) to show directions. No map is automatically embedded; instead, you will find a link there that only connects to Google Maps after you actively click it. Should a direct embed be introduced in the future, this will only happen with your prior consent. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

7. Your Rights as a Data Subject

Within the scope of applicable law, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as a right to rectification, restriction, or erasure of this data. You also have a right to data portability.

For this and any further questions on the subject of personal data, you may contact us at any time using the contact details given in the legal notice.

8. Right to Object

Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1)(f) GDPR, you have the right to object to this processing.

9. Right to Lodge a Complaint with a Supervisory Authority

In the event of a data protection violation, you have the right to lodge a complaint with the competent supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA).

10. SSL/TLS Encryption

For security reasons, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from “http://” to “https://” and by the lock icon in your browser bar.

11. Data Protection Officer

No data protection officer has been appointed. Under § 38 of the German Federal Data Protection Act (BDSG), the appointment of a data protection officer is only mandatory if at least 20 people are generally engaged in the automated processing of personal data. As our company has only two permanent employees, supplemented by freelance contractors, this threshold is not met.

12. Currency and Amendment of this Privacy Policy

This privacy policy is currently valid. Due to the further development of our website and offerings, or due to changed legal requirements, it may become necessary to amend this privacy policy.