What this website collects, why it collects it, who else sees it, how long it is kept, and what you can ask us to do with it. Twelve sections, in the order the questions usually come.
The controller decides why and how personal data is processed on this website. For this site that is:
The provider details for this site are set out separately in the imprint.
[Whether a data protection officer has been appointed, and if so, the name and the address at which that person can be reached.] Where the appointment is not required, this section says so instead of being left out.
A message to the officer does not have to go through anyone else, and it is not read by the department it concerns.
Opening a page here causes the server to record a small set of technical details. That happens for every request and cannot be switched off, because without those details a page cannot be delivered at all.
No profile is built from these entries, and they are not combined with anything you send us by other means.
Each purpose stands on its own. Data collected for one of them is not quietly used for another.
For each purpose named above there is one legal basis, and it is stated here rather than left to be inferred. The provisions themselves are set by the client's lawyer: [legal bases, by purpose].
Where processing rests on a legitimate interest, the interest is named. Where it rests on consent, the consent can be withdrawn at any time with effect for the future, and the withdrawal is as easy as giving it was.
This site stores small entries in your browser. They fall into two groups, and only the second one needs your agreement.
You can delete existing entries in your browser settings and refuse new ones. Refusing the first group means parts of the site stop working; refusing the second changes nothing you can see.
If you send an enquiry, we process what you put in it: your name, your address, the company you write for, and whatever else you choose to tell us. We use it to answer, and for nothing else.
If you ask for an appointment, the details you give are used to arrange one. They are not passed to anyone who is not part of that appointment.
An exchange is kept for as long as the matter it concerns is open, and afterwards for [retention period] where a legal obligation requires it. After that it is deleted.
Some of the work is done by service providers acting on instructions — hosting, email, and the tools used to run an appointment. They act only on our instructions and may not use the data for their own purposes.
Where data is processed outside the country or region in which it is collected, this section names the country and the safeguard on which the transfer rests: [safeguards for transfers to third countries].
Beyond these, data is passed on only where a legal obligation or a court order requires it.
Nothing is kept because it might one day be useful. Each kind of data has an end, and the end is either an event or a period.
The rights below apply to the data this site holds about you. Exercising one of them costs nothing and does not have to be justified.
Send a request to the address in section 1. We answer within the period the law sets, and we say what we did rather than only that we did something. Where a request cannot be met in full, the reason is given.
If you think the processing described here is unlawful, you can complain to a supervisory authority — in the country where you live, where you work, or where the alleged infringement took place.
The authority responsible for this controller is [supervisory authority, with address]. A complaint there does not stop you from also writing to us, and it does not affect any other remedy.
This notice is updated when the processing it describes changes — a new tool, a new provider, a new purpose. The version and the date of the current text stand at the top of this page.
Where a change requires your agreement, it is not applied until you have given it. Where it does not, the updated text applies from the date shown.