Data Privacy

1. Summary

General Information

What happens to your personal data when you visit this website is described in general terms in the following. Personal data is any data that can be used to identify you. The data privacy declaration below contains more detailed information.

Data capture on this website
Who is responsible for capturing data on this website?
Data is processed by this website's operator, whose contact details are provided further below.

How do I capture your data?
Your data is captured when you provide it to me. This can be, for example, data that you enter in a contact form. Other data may be captured automatically or with your consent by my IT systems while you are visiting this website.

What do I use your data for?
Some data is captured to ensure that the website is correctly displayed. Other data can be used to analyze your behavior as a user.

What are your rights in connection with this data?
You have the right to receive, free of charge and at any time, information on the origin and recipient(s) of your stored personal data and the purpose for which it has been stored. You also have the right to request that this data be corrected or deleted. If you have consented to processing of your data, you may revoke this consent at any time. You also have the right to request that processing of your personal data be restricted under certain circumstances. In addition, you have the right to lodge a complaint with the responsible authorities.

You are free to contact me if you have any questions regarding data privacy.

2. Hosting
My website is hosted by Wix.com Ltd, 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (in the following, “WIX”). WIX is a tool for creating and hosting websites. WIX is used to analyze the number of visitors to this website, where they are located and what they do while visiting this website. WIX stores cookies on your browser only to the extent that they are required for displaying the website and ensuring security (mandatory cookies).

Data captured via WIX may be stored on multiple servers worldwide. WIX servers are located in the USA and other countries. Details are available in the WIX privacy policy, which can be viewed at https://de.wix.com/about/privacy.

According to WIX, data is transferred to the USA and other countries based on the standard contractual clauses of the EU Commission or comparable guarantees in accordance with Art. 46 of the General Data Protection Regulation (GDPR). More detailed information is available here: https://de.wix.com/about/privacy-dpa-users.

The use of WIX is based on Art. 6, paragraph 1 letter f of the GDPR. I have a legitimate interest in having my website presented as reliably as possible. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6, paragraph 1 letter a of the GDPR and Art. 25 paragraph 1 of the German Digital Telecommunications Services Data Protection Act (TTDSG) to the extent that this consent also covers the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined there. This consent may be revoked at any time.

Wix.com Ltd is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA for ensuring that processing of data in the USA conforms to European data privacy standards. Every company certified under the DPF undertakes to comply with these standards. Additional information is available from the provider via the following link:
https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt0000000GnbGAAS&status=Active

Contract processing
I have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This contract is required by data privacy laws and ensures that the personal data of website visitors is only processed in

accordance with my instructions and in compliance with the GDPR.

3. General and required information

Data privacy
As the operator of this website, I take the protection of your personal data very seriously. I treat your personal data confidentially and in accordance with the applicable data privacy regulations and this privacy policy. When you use this website, a variety of personal data is captured.

Personal data is data that can be used to identify you. This privacy policy explains which data I capture, how I do it and the purposes for which this is done.

Data transmission over the Internet (e.g. when communicating by email) may not be seamlessly secure. In other words, it is not possible to completely and reliably protect data from being accessed by third parties.

Responsible for data processing on this website (controller):
Gregory Woods
Gründenseestrasse 34
D-60386 Frankfurt am Main
Phone: +49 69 90 54 58 52
Email: english@mrwoods.de

Duration of data storage
Unless otherwise specified in this privacy policy, I will keep your personal data until the purpose for which it has been processed no longer exists. If you submit a justified request for deletion or revoke your consent to data processing, I will delete your data unless I have other legally sound reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place if and when these reasons no longer apply.

General information on the legal basis for data processing on this website
If you have consented to data processing, I process your personal data on the basis of Art. 6 paragraph 1 letter a of the GDPR or Art. 9, paragraph 2, letter a of the GDPR, to the extent that data of specific types is processed in accordance with Art. 9, paragraph 1 of the GDPR. If you have expressly consented to the transfer of your personal data to third countries, data processing is also performed on the basis of Art. 49 paragraph, 1 letter a of the GDPR in this case. If you have consented to the storage of cookies or access to information in your terminal device (e.g. with device fingerprinting), data is also processed on the basis of section 25 (1) of the German Digital Telecommunications Services Data Protection Act (TTDSG). You may withdraw this consent at any time. I may also process your data If this is required to fulfill the contract, carry out precontractual measures as per Art. 6, paragraph 1, letter b of the GDPR or meet a legal obligation as per Art. 6, paragraph 1, letter c of the GDPR. Data may also be processed on the basis of a legitimate interest on my part as per Art. 6, paragraph 1, letter f of the GDPR (see below).

Recipients of personal data
I work with various external entities within the scope of my business activities. In some cases, it may also be necessary to transfer personal data to these external bodies. However, I only pass on personal data to them if this is necessary to fulfill a contract, if I have a legal obligation to do so (e.g. to the tax authorities), if I have a legitimate interest in passing on the data in accordance with Art. 6, paragraph 1, letter f of the GDPR or if there is another legal basis for doing so. When using data processing equipment, I only pass on my customers' personal data on the basis of a valid order processing contract. In the case of joint processing, a corresponding agreement is concluded.

Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You may withdraw this consent at any time. The legality of the data processing carried out until such revocation remains unaffected.

Right to object to the capture of data in special cases and for direct marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6 ABS. 1, LETTER E OR F OF THE GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE CORRESPONDING LEGAL BASIS FOR PROCESSING IS INDICATED IN THIS PRIVACY POLICY. IF YOU OBJECT, I WILL CEASE TO PROCESS YOUR PERSONAL DATA UNLESS I CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING IT THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR FOR ESTABLISHING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTIONS UNDER ARTICLE 21(1) OF THE GDPR). IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING, INCLUDING PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THIS PURPOSE (PURSUANT TO ART. 21 PARAGRAPH 2 OF THE GDPR).

Right to lodge a complaint with the responsible supervisory authority
In the event that the GDPR is violated, data subjects have the right to lodge a complaint with a supervisory authority in the member state where they habitually reside, their place of work or the location of an alleged infringement. The right to lodge a complaint has no effect on your right to demand other administrative or judicial remedies.

Right to data portability

You have the right to request that data that I automatically process either on the basis of your consent or to fulfill a contract be provided to you or a third party in a shared machine-readable format. If you request direct transfer of the data to another controller, this will only be done if it is technically feasible.

Information, correction and deletion

Within the framework of the applicable legal provisions, you have the right to receive information at no charge about your stored personal data, its origin and recipients and the purpose of data processing. If necessary, you may also exercise the right to have this data corrected or deleted at any time. You are free to contact me if you have any questions related to your personal data.

Right to restrict processing
You have the right to request the restriction of the processing of your personal data. You are free to contact me for this purpose. If you dispute the accuracy of your personal data stored by me, I usually need time to check this. While I am doing so, you have the right to request that processing of your personal data be restricted; if the processing of your personal data has been and/or is unlawful, you may request that this processing be restricted instead of deleting the data.

If I no longer need your personal data, but you require it for exercising, defending or asserting legal claims, you have the right to request me to restrict processing of your personal data instead of deleting it. If you object to processing on the basis of Art. 21, paragraph 1 of the GDPR, it is necessary to weigh our respective interests against one another. Until it is established which party's interests outweigh the other's, you have the right to request that processing of your personal data be limited.

If you have restricted processing of your personal data, it can continue to be stored but may only be processed with your consent or in order to establish, exercise or defend legal claims or protect the rights of another natural or legal person or for reasons related to a major public interest of the European Union or a member state.

Objection to advertising emails
I hereby object to the use of contact data that I am legally required to publish on this website for sending unsolicited advertising and informational materials. I expressly reserve the right to take legal action in the case of unsolicited advertising such as spam emails.

4. Data capture on this website

Requests by email or telephone
If you contact me by email or telephone, your request, including all associated personal data, will be stored and processed by me for the purpose of meeting it. I will not pass this data to any third parties without your consent. T is based on Art. 6 paragraph 1 letter b of the GDPR, provided that your request is related to the fulfillment of a contract or is necessary for implementing precontractual measures. In all other cases, processing is based on my legitimate interest in effectively processing inquiries addressed to me (Art. 6 paragraph 1 letter f GDPR) or on your consent (Art. 6 paragraph 1 letter a GDPR) if requested; this consent may be revoked at any time.

I will keep data that you send to me until you request me to delete it or revoke your consent to its storage, or until the reason for storing ceases to exist (e.g. subsequent to processing your request). Mandatory statutory provisions – in particular, statutory retention periods – remain unaffected.