Data privacy statement
As the operator of this website,
Venator & Hanstein KG
Buch- und Graphikauktionen
takes the protection and confidentiality of personal data very seriously. We collect and use personal data only in the context of legal provisions, i.e. within the valid German and European data protection legislation. The purpose of this data pivacy statement is to inform visitors to our site about the personal data we collect, the purpose for which we use the data and the rights of the visitors to our site regarding their personal data.
We have taken the appropriate organisational, contractual and technical security measures to ensure compliance with data protection laws and to prevent accidental or intentional manipulation, loss, destruction or access by unauthorised persons. However, please be aware that it is not possible to guarantee 100% security when transferring data over the Internet.
1. Access data
We collect data via our website providers regarding every access to our online offer (server log files). The access data includes the name of the website accessed, file, data and time of access, volume of data transferred, the message regarding successful access, browser type and version, the user’s operating system, referrer URL (previously visited page) and the requesting provider.
In accordance with statutory provisions, the log data is not assigned to the specific person of the visitor to the site and no additional profiling is carried out; the data is used exclusively for statistical analyses for the operation, security and the optimisation of the online offer. However, the provider reserves the right to subsequently review the log data if, based on demonstrable evidence, a legitimate suspicion of unlawful use exists.
We store IP addresses in the log files for a limited period if such storage is required for security purposes, if this is necessary to provide services or if a legitimate suspicion of unlawful use exists in connection with the use of our website.
Processing is carried out in accordance with Art. 6 para. 1 (f) GDPR based on our legitimate interest to improve the stability and functionality of our website. We neither transfer data nor use it for any other purpose.
2. Inventory data
Personal data is collected when you contact us (e.g. via email). We only store and use additional personal data if you submit this information voluntarily, for example, when you contact us. Insofar as you have submitted personal data, we will only use such data to respond to your enquiries, to transact contracts concluded with you and for technical administration.
The personal data collected during your registration for and subscription to our online catalogue will be stored by us to submit binding offers. The passwords you enter will be stored encrypted. The data entered on the forms will be stored in a database on the same web server. This data is transferred to the Venator & Hanstein auction software using a synchronisation process that is initiated manually.
The legal basis for the processing of data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 (f) GDPR and with the consent provided by you upon entering the data.
If your contact is to fulfil a contract, the additional legal basis for processing is Art. 6 para. 1 (b) GDPR. Your data will be deleted after the definitive processing of your request. This is the case if it can be inferred from the circumstances that the matter has been finally clarified and provided this does not conflict with the respective statutory storage obligations.
We use "cookies" as part of our online offer. Cookies are small files that can be placed on the computer of visitors to the website which store information for providers.
4. Sending information via our newsletter
Emails containing promotional information about our company and services are only sent with the explicit consent of visitors to the site. Users have the option to unsubscribe to the newsletter, for example at the bottom of every email.
After signing up for the newsletter, the owner of the email address will receive a confirmation email to confirm the registration.
When users register for the newsletter, we save the time of the registration, confirmation time and the IP address of the site visitor. We are required by law to log applications to provide evidence of a correct and proper registration.
5. Your rights as a data subject
The applicable data protection law grants you comprehensive data protection rights (right to information and intervention) with respect to the controller regarding the processing of your personal data as follows:
- Right of information pursuant to Art. 15 GDPR: In particular, you have a right to information about the personal data processed by us, the purposes of such processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the anticipated period of storage or the criteria for determining such storage period, the right of correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, information on the origin of your data, if such data was not collected by us, the existence of automated decision-making including profiling and any potentially meaningful information about the logic involved and the relevant scope, the intended effects of such processing and your right to information regarding the guarantees implemented pursuant to Art. 46 GDPR when forwarding your data to third countries;
- Right to correction pursuant to Art. 16 GDPR: You have the right to the immediate correction of incorrect data concerning you and/or the completion of your incomplete data stored by us;
- Right to deletion in accordance with Art. 17 GDPR: You have the right to request the deletion of your personal data if the conditions of Art. 17 para. 1 GDPR are fulfilled. This right shall not apply in particular if the processing is essential to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal rights;
- Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data provided the correctness of the relevant data is checked, if you decline the deletion of your data following unlawful data processing but instead wish to restrict the processing of your data, if you require your data to assert, exercise or defend legal rights after we no longer need such data after the intended purpose has been fulfilled or if you have objected for reasons arising from your particular situation, insofar as it is not established in law that our legitimate reasons to process such data prevail;
- Right to information pursuant to Art. 19 GDPR: If you have asserted the right of rectification, deletion or restriction of the processing with respect to the controller, the controller must rectify or delete the data with respect to all recipients to whom the personal data relating to you has been disclosed or limit the processing of such, unless such action proves to be impossible or disproportionate. You have the right to receive information regarding such recipients.
- Right to data portability in accordance with Art. 20 GDPR: You have the right to receive the personal data you submit to us in a structured, standard and machine-readable format or to request us to transfer the data to another controller insofar as this is technically feasible;
- Right to revocation of consent pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw your previous consent to the processing of data at any time with effect for the future. In the event of a revocation, we will delete the relevant data immediately, provided further processing has no legal basis for processing without your consent. The revocation of consent does not affect the lawfulness of the processing carried out based on consent up to the point of the revocation;
- Right to complain pursuant to Art. 77 GDPR: If you assert that the processing of your personal data conflicts with the provisions of the GDPR, you have the right to complain to a supervisory authority, without prejudice to any other administrative or judicial remedy, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement.
- Right to object: If we process your personal data in the context of a balance of interests due to our prevailing legitimate interest, you may object to such processing with effect for the future at any time for reasons arising from your particular situation.
If you exercise this right of objection, we will cease processing the relevant data, but reserve the right to further processing if we can demonstrate compelling legitimate reasons for such processing that prevail over your interests, basic rights and fundamental freedoms or if the processing serves to assert, exercise or defend legal claims.
You can contact a competent supervisory authority regarding our processing as follows:
State Representative for Data Protection and Freedom of Information, North Rhine-Westphalia:
However, we would hope that you will have no cause for complaint and that we can address your concerns to your satisfaction through direct and personal contact with us.
6. Responsible body for data protection legislation
Venator & Hanstein KG • Buch- und Graphikauktionen • Cäcilienstr. 48 • D-50667 Cologne
firstname.lastname@example.org • Tel. +49 221 257 54 19 • Fax +49 221 257 55 26