General Information

On this page you will find detailed information about what happens to your personal data when you visit our website www.von-zedlitz.de. All data that allows for your personal identification constitutes personal data. When processing your data, we strictly adhere to legal requirements, in particular the General Data Protection Regulation ("GDPR"). It is very important to us that your visit to our website is completely secure.

Controller, Data Protection Officer

The controller responsible for the collection and processing of personal data on this website under data protection law is:

Sascha Freiherr von Zedlitz-Neukirch
Bismarckstraße 6, 71083 Herrenberg, Germany

sascha@von-zedlitz.de   |   0049 1573 433 533 7

If you have any questions or suggestions regarding data protection, you can contact our Data Protection Officer at any time.

Cookies

We use so-called cookies to make visiting our website attractive and to enable the use of certain functions. These are small text files that are stored on your end device. Cookies are not able to execute programs or transfer viruses to your computer system.

Necessary cookies, which are required for electronic communication or the provision of requested functions, are stored pursuant to Art. 6 Para. 1 lit. f GDPR. Our legitimate interest in storing these serves the technically error-free and optimized provision of our services. Other cookies (e.g., for analyzing your surfing behavior) are treated separately in this privacy policy.

We mainly use so-called "session cookies", which are automatically deleted after the end of your visit. In addition, we use cookies that remain stored on your end device until you delete them yourself. These enable us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies. You can then decide on an individual basis whether to allow cookies, whether to accept cookies for certain cases, or whether to reject cookies in general. You can also set cookies to be automatically deleted when you close your browser. Please note that disabling cookies may limit the functionality of this website.

Contact Form

If you contact us by email or via a contact form, the data transmitted, including your contact details, will be stored in order to process your request and to be available for any follow-up questions. This data will not be passed on to third parties without your explicit consent.

The processing of data submitted via the contact form takes place exclusively on the basis of your consent given pursuant to Art. 6 Para. 1 lit. a GDPR. A revocation of this consent is possible at any time without giving reasons. An informal notification by email to us is sufficient for the revocation. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

The data submitted via the contact form will remain stored by us until you request us to delete it, revoke your consent to storage, or the necessity for data storage no longer applies. Mandatory legal retention periods remain unaffected by this.

Use and Disclosure of Data

We assure you that personal data you communicate to us, for example by email (such as your name, address, or email address), will not be sold to third parties or otherwise used commercially. The processing of your data takes place exclusively for the purpose for which you provided us with the data. As part of payment processing, your payment data will be forwarded to the commissioned credit institution.

Data collected automatically during your visit to our website is used exclusively for the above-mentioned purposes. No other use of the data takes place.

The protection of your personal data is important to us. Therefore, we generally do not pass on your data to third parties unless there is a legal obligation to do so or you have given us your explicit consent.

Encryption

Our website uses SSL or TLS encryption to ensure the security and protection of the transmission of confidential content. This applies in particular to requests that you send to us as the site operator. An encrypted connection can be recognized by the "https://" in the address bar of your browser and the lock symbol in your browser line.

Activating SSL or TLS encryption ensures that data you transmit to us cannot be read by unauthorized third parties.

Storage Duration

Your personal data transmitted to us via our website will only be stored for as long as is necessary to achieve the respective purpose of data processing. In accordance with commercial and tax retention requirements, however, the storage of certain data may last up to 10 years.

Your Data Protection Rights

As a data subject of data processing, you have the following rights against the controller regarding your personal data in accordance with legal provisions:

A) Right to Revoke Consent

Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to revoke this consent pursuant to Art. 7 Para. 3 GDPR at any time with effect for the future. The legality of data processing carried out based on your consent up to the point of revocation remains unaffected. Storage of data for accounting and bookkeeping purposes is unaffected by a revocation.

B) Right of Access

Pursuant to Art. 15 GDPR, you have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have a right to information about this data, including the processing purposes, the categories of data processed, the recipients or categories of recipients to whom data has been or will be disclosed, the planned storage period or criteria for determining it, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the source of the data if not collected from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved as well as the scope and intended consequences of such processing, and your right to be informed of the safeguards pursuant to Art. 46 GDPR regarding the transfer of your data to third countries.

C) Right to Rectification

You have the right, pursuant to Art. 16 GDPR, to demand from us at any time the correction of inaccurate personal data concerning you and/or the completion of your incomplete data.

D) Right to Erasure

You have the right, pursuant to Art. 17 GDPR, to demand the deletion of your personal data if one of the following reasons applies:

a) Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

b) You revoke your consent legitimizing processing pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR, and there is no other legal basis for processing.

c) You object to processing pursuant to Art. 21 Para. 1 GDPR and there are no overriding legitimate grounds for processing, or you object to processing pursuant to Art. 21 Para. 2 GDPR.

d) The personal data has been unlawfully processed.

e) Deletion of the personal data is required to comply with a legal obligation under Union or Member State law to which we are subject.

f) The personal data was collected in relation to the offer of information society services pursuant to Art. 8 Para. 1 GDPR.

This right may be restricted under the following circumstances where processing is essential:

a) For compliance with a legal obligation requiring processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority;

b) For compliance with a legal obligation requiring processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;

c) For reasons of public interest in the area of public health pursuant to Art. 9 Para. 2 lit. h and i, and Art. 9 Para. 3 GDPR;

d) For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89 Para. 1 GDPR, in so far as the rights of the data subject are likely to render impossible or seriously impair the achievement of the objectives of that processing; or

e) For the establishment, exercise, or defense of legal claims.

If we have made your personal data public and are obliged to delete it pursuant to the above provisions, we will, taking into account available technology and implementation costs, take reasonable steps, including technical measures, to inform controllers processing the data that you as the data subject have requested the erasure of any links to, or copy or replication of, those personal data.

E) Right to Restriction of Processing

Pursuant to Art. 18 GDPR, you have the right to request the restriction of processing (blocking) of your personal data. To exercise this right, you can contact us at any time. The contact details can be found in the legal notice (Impressum). A restriction of processing can be requested in the following cases:

a) If you contest the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the verification, you have the right to request restriction of processing of your personal data.

b) If the processing of your personal data was/is unlawful, you can demand restriction of processing instead of erasure.

c) If we no longer need your personal data, but you require it to exercise, defend, or assert legal claims, you have the right to request restriction of processing instead of erasure.

d) If you have lodged an objection pursuant to Art. 21 Para. 1 GDPR, a balancing of your interests against ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of processing of your personal data.

After restricting the processing of your personal data, it may generally only be processed with your consent. Exceptions apply to certain legally defined cases, such as asserting legal claims or protecting public interests.

F) Right to Information

If you exercise your right to rectification, erasure, or restriction of processing of your personal data, we are obliged pursuant to Art. 19 GDPR to inform all recipients to whom the data was disclosed. This does not apply if notification proves impossible or involves disproportionate effort. Upon your request, we will inform you about the recipients of your data.

G) Protection against Automated Decision-Making (Profiling)

Pursuant to Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing—including profiling—which produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision:

a) is necessary for entering into, or performance of, a contract between you and us,

b) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or

c) is based on your explicit consent.

However, decisions in the cases referred to in (a) to (c) shall not be based on special categories of personal data referred to in Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g applies and suitable measures to safeguard your rights, freedoms, and legitimate interests are in place.

In the cases referred to in (a) and (c), we take suitable measures to safeguard your rights, freedoms, and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.

H) Right to Data Portability

In the case of processing your personal data based on your consent pursuant to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b GDPR, carried out by automated means, you have the right pursuant to Art. 20 GDPR to receive your data provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller or demand its transfer by us to another controller, where technically feasible.

I) Right to Object

Where we process your personal data based on a balancing of interests pursuant to Art. 6 Para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis for processing can be found in this privacy policy. In the event of an objection, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims (Objection pursuant to Art. 21 Para. 1 GDPR).

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. In the event of an objection, your personal data will no longer be used for direct marketing purposes (Objection pursuant to Art. 21 Para. 2 GDPR).

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

J) Right to Lodge a Complaint with the Competent Supervisory Authority pursuant to Art. 77 GDPR

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a competent supervisory authority. The complaint may be lodged in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement. The right to lodge a complaint under this provision exists without prejudice to any other administrative or judicial remedies.

Our competent supervisory authority is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Postfach 10 29 32, 70025 Stuttgart, Germany

or

Lautenschlagerstraße 20, 70173 Stuttgart, Germany
Phone: 0049 711 61 55 41 0 | poststelle@lfdi.bwl.de
https://www.baden-wuerttemberg.datenschutz.de

Validity and Amendment of this Privacy Policy

This privacy policy becomes effective on September 4, 2026. We reserve the right to amend this declaration as necessary and in compliance with applicable data protection laws. This may be necessary, for example, to comply with new legal requirements or to take account of changes to our website or new services offered on our website. The currently valid version of the privacy policy accessible on our website at the time of your visit is binding.

In the event of changes to this privacy policy, we will publish them on this page to comprehensively inform you about what personal data we collect, how we process it, and under what conditions we may disclose it.