Data Protection Statement

Us, you and your data

1. Name and con­tact inform­a­tion of the per­son or entity respons­ible for pro­cessing

This data pri­vacy inform­a­tion applies to data pro­cessing by:

Con­trol­ler: TFN GmbH & Co KG (here­in­after referred to as: TFN), Hudtwal­ck­er­strasse 21b, 22299 Ham­burg, Ger­many

Email: mail@tfn.de

Tele­phone: +49 4041303030

2. Col­lec­tion and stor­age of per­son­al data, as well as type and pur­pose of use

a) When vis­it­ing the web­site

When access­ing our web­site www.tfn.de, the browser oper­ated on your device auto­mat­ic­ally sends inform­a­tion to our web­site serv­er. This inform­a­tion is tem­por­ar­ily stored in a so-called log file. The fol­low­ing inform­a­tion is recor­ded and stored until auto­mat­ic eras­ure, without you hav­ing to do any­thing:

  • IP address of the inquir­ing com­puter

  • Date and time of access

  • Name and URL of the file accessed

  • Web­site from which our web­site is accessed (refer­rer URL)

  • Browser used and, if any, oper­at­ing sys­tem of your com­puter, as well as the name of the access pro­vider

We pro­cess the above-lis­ted data for the fol­low­ing pur­poses:

  • Ensur­ing smooth con­nec­tion to our web­site

  • Ensur­ing com­fort­able use of our web­site

  • Ana­lys­is of the sys­tem secur­ity and sta­bil­ity

  • For oth­er admin­is­trat­ive pur­poses

Leg­al basis for data pro­cessing is Art. 6 (1) s. 1 lit. f GDPR. We have a legit­im­ate interest in pro­cessing the data based on the above described pur­poses. Under no cir­cum­stances do we use the col­lec­ted data to draw con­clu­sions about your iden­tity.

Fur­ther­more, we use cook­ies and ana­lyt­ics ser­vices for vis­its to our web­site. For fur­ther details see para. (4) and (5) of this Data Pro­tec­tion State­ment.

b) Using our con­tact form

If you have any ques­tions, we give you the option to con­tact us via a form provided on our web­site. For this pur­pose, a val­id e‑mail address is required so that we know who sub­mit­ted the inquiry and are able to respond. Any addi­tion­al inform­a­tion is provided option­ally. The data provided for the pur­pose of con­tact­ing us is pro­cessed pur­su­ant to Art. 6 (1) s. 1 lit. a GDPR based on the con­sent you give vol­un­tar­ily. The per­son­al data which we col­lect for the pur­pose of using the con­tact form is auto­mat­ic­ally deleted upon suc­cess­ful pro­cessing of the inquiry you sub­mit­ted.

3. Dis­clos­ure of data

There will be no dis­clos­ure of your per­son­al data to third parties for pur­poses oth­er than those men­tioned.

We do not dis­close your data to third parties unless:

  • You have giv­en your expli­cit con­sent to do so pur­su­ant to Art. 6 (1) s. 1 lit. a GDPR

  • Dis­clos­ure is neces­sary pur­su­ant to Art. 6 (1) s. 1 lit. f GDPR to estab­lish, exer­cise, or defend leg­al claims

  • and there is no reas­on to assume that your legit­im­ate interest in non-dis­clos­ure of the data out­weighs ours to store the data

  • There is a leg­al oblig­a­tion under Art. 6 (1) s. 1 lit. c GDPR to dis­close the data

  • It is leg­ally per­miss­ible and, pur­su­ant to Art. 6 (1) s. 1 lit. b GDPR, neces­sary to dis­close the data for the pur­pose of per­form­ing con­tracts

  • entered into with you

4. Cook­ies

Our web­site uses cook­ies. Cook­ies are small files that your browser gen­er­ates auto­mat­ic­ally and stores on your device (laptop, tab­let, smart­phone, etc.) when you vis­it our web­site. Cook­ies do not cause any dam­age on your device; they do not con­tain any vir­uses, tro­jans, or oth­er mal­ware.

Cook­ies store inform­a­tion relat­ing spe­cific­ally to the used device. How­ever, that does not mean that we obtain inform­a­tion regard­ing your iden­tity. On the one hand, cook­ies serve the pur­pose of mak­ing the use of our offer­ing more con­veni­ent and pleas­ant for you. Hence, we use so-called ses­sion cook­ies to detect wheth­er you have vis­ited indi­vidu­al pages of our web­site before. After you leave our web­site, these cook­ies are deleted auto­mat­ic­ally.

Fur­ther­more, we also use tem­por­ary cook­ies to optim­ise user-friend­li­ness of our web­site; these cook­ies are stored on your device for a spe­cif­ic peri­od of time. If you vis­it our web­site again to use our ser­vices, our sys­tem auto­mat­ic­ally detects that you have vis­ited our web­site already and which data entries and set­tings you have made; thus, you do not have to make such set­tings or entries again.

On the oth­er hand, we use cook­ies to stat­ist­ic­ally record the use of our web­site and to ana­lyse such data for the pur­pose of optim­ising our offer­ing (see para. (5)). These cook­ies allow us to estab­lish auto­mat­ic­ally that you have vis­ited our web­site before. These cook­ies are auto­mat­ic­ally deleted after a spe­cif­ic peri­od of time.

The data pro­cessed by cook­ies are neces­sary for pro­tect­ing our legit­im­ate interests as well as the legit­im­ate interests of third parties as set forth in Art. 6 (1) s. 1 lit. f GDPR. Most browsers accept cook­ies auto­mat­ic­ally.

How­ever, you can con­fig­ure your browser in such a man­ner that no cook­ies are stored on your com­puter or that you are noti­fied each time before a new cook­ie is installed. How­ever, deac­tiv­at­ing cook­ies com­pletely may res­ult in you not being able to use all func­tion­al­it­ies of our web­site.

5. Ana­lyt­ics tools

a) Track­ing tools

We use the fol­low­ing track­ing meas­ures pur­su­ant to Art. 6 (1) s. 1 lit. f GDPR. These track­ing meas­ures are used to ensure the need-based design and con­tin­ued optim­isa­tion of our web­site. On the oth­er hand, we use the track­ing meas­ures to stat­ist­ic­ally record the use of our web­site and to ana­lyse such data for the pur­pose of optim­ising our offer­ing. These interests shall be con­sidered as legit­im­ate interests under the above pro­vi­sion. The cor­res­pond­ing track­ing tools out­line the rel­ev­ant data cat­egor­ies and pur­poses for pro­cessing.

b) Google Ana­lyt­ics

We use Google Ana­lyt­ics, a web ana­lyt­ics ser­vice offered by Squarespace Inc. (https://www.squarespace.com/about/company, here­in­after referred to as Google”), for the pur­pose of ensur­ing the needs-based design and con­tin­ued optim­isa­tion of our web­site. Pseud­onymised user pro­files are cre­ated and cook­ies (see para. (4)) are used in con­nec­tion to this. The inform­a­tion about your use of the web­site gen­er­ated by the cook­ie such as

  • Browser type/version

  • Oper­at­ing sys­tem used

  • Refer­rer URL (the page used pre­vi­ously)

  • Host name of the access­ing com­puter (IP address)

  • Time of the serv­er enquiry

is sent to a Google serv­er in the USA where it is then stored. This inform­a­tion is used in order to ana­lyse your use of the web­site, to com­pile reports about web­site activ­it­ies and to render fur­ther ser­vices asso­ci­ated with web­site use and inter­net use for the web­site oper­at­or. This inform­a­tion is also trans­ferred to third parties where this is leg­ally pre­scribed or where third parties are respons­ible for pro­cessing this data on Google’s behalf. Under no cir­cum­stances is your IP address kept togeth­er with oth­er Google data. IP addresses are anonymised to ensure that they can­not be recon­nec­ted (IP mask­ing). You can pre­vent the stor­age of the cook­ies using the rel­ev­ant set­tings in your browser soft­ware; how­ever, please note that in this case you may not be able to make full use of all the func­tions of the web­site.

6. Right of access by the data sub­ject

You have the right:

  • Pur­su­ant to Art.{j}15 GDPR, to obtain from us con­firm­a­tion as to wheth­er or not your per­son­al data is being pro­cessed. In par­tic­u­lar, you have the right to obtain the fol­low­ing inform­a­tion: the pur­poses of the pro­cessing; the cat­egor­ies of per­son­al data con­cerned; the cat­egor­ies of recip­i­ent to whom the per­son­al data have been or will be dis­closed; the envis­aged peri­od for which the per­son­al data will be stored; the exist­ence of the right to request from us rec­ti­fic­a­tion or eras­ure of per­son­al data or restric­tion of pro­cessing of your per­son­al data or to object to such pro­cessing; the right to lodge a com­plaint with a super­vis­ory author­ity; where the per­son­al data are not col­lec­ted from you, any avail­able inform­a­tion as to their source; the exist­ence of auto­mated decision-mak­ing, includ­ing pro­fil­ing, and, if any, mean­ing­ful inform­a­tion about the details.

  • Pur­su­ant to Art. 16 GDPR, you have the right to obtain from us without undue delay the rec­ti­fic­a­tion of inac­cur­ate or incom­plete per­son­al data.

  • Pur­su­ant to Art. 17 GDPR, you have the right to obtain from us the eras­ure of per­son­al data con­cern­ing your­self and we have the oblig­a­tion to erase per­son­al data unless the data is neces­sary: for exer­cising the right of free­dom of expres­sion and inform­a­tion; for com­pli­ance with a leg­al oblig­a­tion; for reas­ons of pub­lic interest; or for the estab­lish­ment, exer­cise or defence of leg­al claims.

  • Pur­su­ant to Art.18 GDPR, you have the right to obtain from us restric­tion of pro­cessing when and if you con­test the accur­acy of the per­son­al data; the pro­cessing is unlaw­ful and you oppose the eras­ure of the per­son­al data and we no longer need the per­son­al data for the pur­poses of the pro­cessing, but you require the data for the estab­lish­ment, exer­cise or defence of leg­al claims;or you have objec­ted to pro­cessing pur­su­ant to Art. 21 GDPR.

  • Pur­su­ant to Art. 20 GDPR, you have the right to receive the per­son­al data con­cern­ing your­self, which you have provided to us, in a struc­tured, com­monly used and machine-read­able format and have the right to trans­mit the data to anoth­er con­trol­ler.

  • Pur­su­ant to Art.7 (3) GDPR, you have the right to with­draw your con­sent at any time. This res­ults in us no longer being author­ised to pro­cess the data for which you had pre­vi­ously giv­en con­sent.

  • Pur­su­ant to Art. 77 GDPR, you have the right to lodge a com­plaint with super­vis­ory author­ity. For this pur­pose you can nor­mally con­tact the reg­u­lat­ory author­ity that has jur­is­dic­tion for your res­id­ence, your place of work or our leg­al office.

7. Right of objec­tion

If your per­son­al data is pro­cessed based on our legit­im­ate interests as defined by Art. 6 (1) s. 1 lit. f GDPR, you have the right in accord­ance with Art.{j}21 GDPR to object to the pro­cessing of your per­son­al data for reas­ons res­ult­ing from your par­tic­u­lar situ­ation or if your objec­tion is aimed at pro­cessing of your per­son­al data for dir­ect mar­ket­ing pur­poses. In the lat­ter case, you have a gen­er­al right to object and we shall com­ply, without you being required to provide inform­a­tion regard­ing spe­cif­ic cir­cum­stances. If you wish to make use of your right of revoc­a­tion or right of objec­tion, you just need to send an e‑mail to mail@T‑F-N.de

8. Data pro­tec­tion

We pro­tect web­site vis­it data using the pop­u­lar SSL encryp­tion pro­ced­ure (Secure Lock­et Lay­er) at the highest encryp­tion level sup­por­ted by your browser. Typ­ic­ally, we use a 256-bit encryp­tion option. If your browser does not sup­port this type of encryp­tion, we use 128-bit v3 tech­no­logy instead. To determ­ine wheth­er a single page of our web­site is trans­mit­ted in an encryp­ted mode, please check for the closed depic­tion of the key/lock icon in the bot­tom status bar or the address line of your browser.

Incid­ent­ally, we use suit­able tech­nic­al and organ­isa­tion­al safety pre­cau­tions to pro­tect your data against acci­dent­al or inten­tion­al manip­u­la­tion, par­tial or com­plete loss, destruc­tion or unau­thor­ised access by third parties. Our secur­ity meas­ures are con­stantly optim­ised in accord­ance with the latest tech­nic­al devel­op­ments.

9. Updates and changes to this data pro­tec­tion state­ment

This data pri­vacy notice is cur­rently applic­able and was last updated in Janu­ary 2020.

The fur­ther devel­op­ment of our web­site and our ser­vice port­fo­lio offered via this web­site or changes in leg­al or reg­u­lat­ory require­ments may render it neces­sary or may require revi­sion of this data pro­tec­tion state­ment.