No personal data is collected by me unless you contact Superstuktur via the contact form or use our newsletter subscription form. This website also does not use cookies. Using this website is generally possible without providing any personal data. For more information, please read the complete privacy policy below
The use of Superstruktur's website is generally possible without providing any personal data. However, there are situations where you interact with the website (e.g. via the contact form) where personal data is collected. Through this privacy policy, I would like to inform the public about the nature, scope, and purpose of the personal data collected, used, and processed by me. Furthermore, data subjects are informed about their rights through this privacy policy.
Since data protection is also important to me, as the data controller, I have implemented technical and organizational measures to ensure the most comprehensive protection possible of personal data processed through this website. Nevertheless, internet-based data transmissions can generally have security vulnerabilities, so absolute protection cannot be guaranteed. For this reason, every visitor is free to transmit personal data to me through alternative means, for example by telephone. The legal foundations of data protection can be found in the EU General Data Protection Regulation (hereinafter GDPR) and in the Federal Data Protection Act (BDSG).
This website uses the web hosting provider Netlify of the American company Netlify Inc. with the address 2325 3rd Street, Suite 29, San Francisco, CA 94104, USA. Log files can be created by the hosting provider. Please read the section "Automatically collected data" below for more information.
When you use the contact form or the newsletter subscription form, the data you enter through the contact form is processed by our web hosting provider Netlify. This processing also takes place in the USA, among other locations. Netlify is a participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA.
Controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union, and other provisions of a data protection nature is:
Alexandra Steinbrück / Superstruktur
Ludwigstraße 20
04315 Leipzig
Germany
With each access to the website and with each retrieval of a file, data about this process is temporarily stored in a log file, some of which is automatically transmitted by your browser. This includes date, time, operating system, browser type, browser version, referrer (URL of the page from which you came to our website) and IP address. This data might potentially allow identification, however, no personal use of this data takes place. It may be evaluated for statistical purposes, but individual users remain anonymous.
If you provide me with personal data, I will use it in accordance with Art. 6 GDPR only for processing your contact request.
Every data subject has the right granted by the European directive and regulation maker to obtain from the controller confirmation as to whether personal data concerning them are being processed. If a data subject wishes to exercise this right of confirmation, they may contact me at any time.
Every person affected by the processing of personal data has the right granted by the European directive and regulation maker to obtain from the controller free information about their personal data stored and a copy of this information. Furthermore, the European directive and regulation maker has granted the data subject access to the following information:
Every person affected by the processing of personal data has the right granted by the European directive and regulation maker to demand the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary statement, taking into account the purposes of the processing. If a data subject wishes to exercise this right to rectification, they may contact me at any time.
Every person affected by the processing of personal data has the right granted by the European directive and regulation maker to obtain from the controller the erasure of personal data concerning them without undue delay, where one of the following grounds applies and insofar as the processing is not necessary:
If one of the above reasons applies and a data subject wishes to arrange for the erasure of personal data stored by me, they may contact me at any time. I will comply with the erasure request without delay. If the personal data have been made public by me and I am obliged to erase the personal data pursuant to Article 17(1) GDPR, I shall, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers which are processing the published personal data that the data subject has requested the erasure by such controllers of any links to, or copies or replications of, those personal data, insofar as processing is not required.
Every person affected by the processing of personal data has the right granted by the European directive and regulation maker to obtain from the controller restriction of processing where one of the following applies:
If one of the aforementioned conditions is met and a data subject wishes to request the restriction of the processing of personal data stored by me, they may contact me at any time. I will arrange the restriction of the processing.
Every person affected by the processing of personal data has the right granted by the European directive and regulation maker to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format. They also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, in exercising their right to data portability pursuant to Article 20(1) GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others. To assert the right to data portability, the data subject may contact me at any time.
Every person affected by the processing of personal data has the right granted by the European directive and regulation maker to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them which is based on Article 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.
In the event of an objection, I will no longer process the personal data unless I can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims.
If I process personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data for such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to me processing for direct marketing purposes, I will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to their particular situation, to object to the processing of personal data concerning them which is carried out by me for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR, unless such processing is necessary for the performance of a task carried out for reasons of public interest.
To exercise the right to object, the data subject may directly contact me. The data subject is also free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise their right to object by automated means using technical specifications.
Every person affected by the processing of personal data has the right granted by the European directive and regulation maker not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless the decision (1) is necessary for entering into, or performance of, a contract between the data subject and the controller, or (2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is based on the data subject's explicit consent.
If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the controller, or (2) it is based on the explicit consent of the data subject, I shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision.
If the data subject wishes to exercise rights relating to automated decision-making, they may contact me at any time.
Every person affected by the processing of personal data has the right granted by the European directive and regulation maker to withdraw their consent to the processing of personal data at any time. If the data subject wishes to exercise their right to withdraw consent, they may contact me at any time.