Punctus attaches great importance to the protection of your data and the preservation of your privacy

Data protection declaration

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

Punctus Greenkeeping GmbH
Kohlenstr. 36
44795 Bochum
Germany

Commercial register: HRB 21713
Register court: Local court Bochum

Managing Director:
Benjamin Lemme
Anton Steinbeck

E-mail address: support@punctus.com

Telephone: 0151 70 31 26 61

Website: punctus.com

This privacy policy explains the type, scope and purpose of the processing of personal data within our online offer and the associated websites, functions and content as well as external online presences, such as our social media profiles. With regard to the terms used, such as “processing” or “controller”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Punctus takes the protection of your personal data very seriously. We treat your personal data confidentially, in accordance with the statutory data protection regulations and this privacy policy. It is generally possible to use our website without providing personal data. However, if a data subject wishes to make use of special services of our company via our website, it may be necessary to process personal data.

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to Punctus.

As the controller, Punctus has implemented measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmissions can generally have security gaps, so absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

Cookies

Some of our Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer

more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Collection of general data and information / server log files

Punctus collects and stores information in so-called server log files, which your browser automatically transmits. The following can be recorded:

  • browser types and versions used
  • the operating system used by the accessing system
  • the website from which an accessing system accesses our website (so-called referrer)
  • the sub-websites that are accessed via an accessing system on our website
  • the date and time of access to the website
  • an internet protocol address (IP address)
  • the internet service provider of the accessing system and
  • other similar data and information used for security purposes in the event of attacks on our information technology systems.

This anonymously collected data and information is evaluated both statistically and with the aim of increasing data protection and data security in our company. The anonymous data of the server log files are stored separately from personal data.

Contact form

The Punctus website contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the controller are stored for the purposes of processing or contacting the data subject. This personal data is not passed on to third parties.

Service provider commissioned data processing

If we disclose data to other persons and companies (processors or third parties) as part of our processing, transfer it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if the transfer of data to third parties, such as payment service providers, is necessary for the performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR), you have given your consent, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). If we commission third parties to process data on the basis of a so-called “order processing contract”, this is done on the basis of Art. 28 GDPR.

We currently work with these service providers:

Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany

https://www.hetzner.com/legal/privacy-policy/

SSL encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only take place if it is done to fulfill our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or have the data processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. This means, for example, that the processing takes place on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).

Social media plugins

Content from our social media channels is displayed on our website. For this service, data is read from various social media platforms and displayed and linked on the website.

Social plugins (“plugins”) from the social network Facebook and the Instagram service are used on our website. These services are offered by the companies Facebook and Instagram (“providers”).

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook or Instagram servers. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider in the USA and stored there.

If you are logged in to one of the services, the providers can directly associate your visit to our website with your profile on Facebook, LinkedIn, Twitter or Instagram. If you interact with the plugins, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network and displayed to your contacts there.

Sind Sie bei einem der Dienste eingeloggt, können die Anbieter den Besuch unserer Website Ihrem Profil auf Facebook, LinkedIn, Twitter bzw. Instagram unmittelbar zuordnen. Wenn Sie mit den Plugins interagieren, wird die entsprechende Information ebenfalls direkt an einen Server der Anbieter übermittelt und dort gespeichert. Die Informationen werden außerdem in dem sozialen Netzwerk veröffentlicht und dort Ihren Kontakten angezeigt.

Data protection information from Facebook: http://www.facebook.com/policy

Data protection information from Instagram: https://help.instagram.com

If you do not want Facebook or Instagram to assign the data collected via our website directly to your profile in the respective service, you must log out of the respective service before visiting our website. You can also completely prevent the plugins from loading with add-ons for your browser.

Routine erasure and blocking of personal data

The data processed by us will be deleted or its processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

Duration for which the personal data is stored

The criterion for the duration of the storage of personal data is the respective statutory retention period. Once this period has expired, the corresponding data is routinely deleted, provided it is no longer required for the fulfillment or initiation of a contract.

Business-related processing

In addition, Punctus processes master and contact data (e.g. addresses, email, telephone), contract data (e.g. term, customer category) and payment data (e.g. bank details) of our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.

Your rights in dealing with your data

You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.

You have accordingly. Art. 16 GDPR, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you. In accordance with Art. 17 GDPR, you have the right to demand that the data in question be deleted immediately or, alternatively, to demand that the processing of the data be restricted in accordance with Art. 18 GDPR.

You have the right to request to receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request its transfer to other controllers. You also have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR.

You have the right to withdraw your consent in accordance with Art. 7 (3) GDPR with effect for the future.

You can object to the future processing of data concerning you in accordance with Art. 21 GDPR at any time. In particular, you may object to processing for direct marketing purposes.

Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

Relevant legal bases

In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. If the legal basis is not stated in the privacy policy, the following applies The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR, the legal basis for processing for the performance of our services and implementation of contractual measures as well as responding to inquiries is Art. 6 para. 1 lit. b GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 para. 1 lit. c GDPR, and the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

Legal or contractual regulations for the provision of personal data

We inform you that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual regulations (e.g. information on the contractual partner). Sometimes it may be necessary for you to provide us with personal data in order to conclude a contract, which must subsequently be processed by us - for example when we conclude a contract. Failure to provide the personal data would mean that we would not be able to conclude the contract. Before providing personal data, you can contact us to clarify whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences of not providing the personal data would be.