Privacy notice

This is a translation for convenience. The German version is the legally binding one.

1. Controller and contact

The controller for personal data processed through this website is:

PHP Schmiede KG, represented by Fabian Lücker

Hagenstr. 18, 48429 Rheine, Germany

Phone: +49 5971 9588922

Email: kontakt@php-schmiede.com

This information covers our company website and the CoreSystem product presentation we operate. Separate product applications are covered by the privacy information provided with those applications.

2. Website access and technical logs

When you access the website, technical data transmitted by your browser is processed. This may include your IP address, date and time, requested URL, browser and operating-system information, data volume and technical status information. The referring page may also be recorded where transmitted by your browser.

Processing is necessary to deliver the website, investigate errors and maintain security. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and functional provision of the website.

Technical logs are kept only for as long as required for these purposes. If information is needed to investigate a specific security incident, the necessary records may be retained until the investigation is completed and, where applicable, for legal claims.

3. Hosting and technical service providers

The website is technically provided using its hosting provider, Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hosting may involve the technical information described in section 2 and data you submit through website features.

Where service providers process personal data on our behalf, they do so under a processing agreement and our instructions. Other recipients may be involved where necessary to handle your request, perform a contract, comply with a legal obligation or on another applicable legal basis.

4. Contact form, email and telephone

When you contact us, we process the information you provide. This includes your name, contact details, message and, where supplied, company, telephone number and other information you provide voluntarily.

We use this information to respond, clarify questions and, where applicable, prepare or perform a contract. Article 6(1)(b) GDPR applies where the enquiry concerns a contract or pre-contractual steps requested by you. For other enquiries, the basis is Article 6(1)(f) GDPR; our legitimate interest is handling incoming communication.

Form fields marked as required are needed to handle the enquiry. Additional optional information is not mandatory. Without the contact information needed to respond, we may be unable to answer your request.

Information is deleted when it is no longer required for the purpose and no statutory retention requirement or other legal basis requires further storage. If a contract results from the enquiry, relevant information may become part of the contractual documentation.

Please do not submit passwords or confidential customer or health information through the general contact form.

5. Technically necessary storage on your device

Where information is stored on or accessed from your device to provide a feature you request, this takes place to the extent necessary. Examples may include session handling or retaining a privacy choice you have made.

Section 25(2) of the German TDDDG applies to strictly necessary operations. Where personal data is involved, the legal basis depends on the purpose, particularly Article 6(1)(f) GDPR for secure and functional operation.

Optional technologies requiring consent may only be used after that consent is given. Consent can be withdrawn with effect for the future. The baseline configuration described here does not use marketing or web-analytics tools.

6. Locally delivered media and external links

Fonts and media used for page presentation are delivered through our website infrastructure in this configuration. Viewing the relevant text or preview image alone does not contact an external font or media platform.

Our website links to services including YouTube, the Shopware Store, partners and social networks. Following a link takes you away from our website. Processing on the destination website is the responsibility of its provider. If you are signed into an account there, the provider may be able to associate the visit with your account.

7. Internal publisher and platform accounts

PHP-Schmiede uses an internal API client for its own video content. It is not a public website service and does not provide visitor registration. Publishing our content may require transmission of video files, publication information and technical account information to the platform providers used.

Visiting this website does not start a publication or transmit visitor information through that internal workflow. The privacy policies of external platforms apply when you visit them.

Further information is provided on our API client page. Google’s privacy information for YouTube is available at https://policies.google.com/privacy. Account permissions can be managed at https://myaccount.google.com/permissions.

8. General retention criteria

We retain personal data for the duration of its purpose. Statutory retention obligations, handling claims or establishing, exercising or defending legal claims may require further storage. When the purpose ends and there is no further legal reason to retain the information, it is deleted or changed so that individuals can no longer be identified.

9. Your rights

Subject to the applicable legal conditions, you have rights including access, rectification, erasure, restriction of processing and data portability. Where processing is based on consent, you may withdraw it at any time with effect for the future. Withdrawal does not affect the lawfulness of earlier processing.

Right to object: Where processing is based on Article 6(1)(e) or (f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. Following such an objection, we stop processing the affected data unless legally recognised overriding grounds or the establishment, exercise or defence of legal claims justify continuation. You may object to processing for direct marketing at any time.

Use the contact details above to exercise your rights. You may also lodge a complaint with a data-protection supervisory authority. One relevant authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf, Germany, https://www.ldi.nrw.de/.

10. Automated decisions

Our general website contact process does not make solely automated decisions with legal or similarly significant effects on you within the meaning of Article 22 GDPR.