1. Privacy at a Glance

General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on data protection can be found in our privacy policy listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. Their contact details can be found in the section “Information on the Responsible Entity” in this privacy policy.

How do we collect your data?
Your data is collected in two ways: either you provide it to us (for example, by entering data in a contact form), or other data is automatically collected by our IT systems when you visit the website—primarily technical data (e.g., web browser, operating system, or time of the page request). The collection of this data happens automatically as soon as you enter this website.

What do we use your data for?
Some of the data is collected to ensure error-free operation of the website. Other data may be used to analyze your user behavior. If contracts are concluded or initiated via the website, the data transmitted will also be processed for contract offers, orders, or other requests.

What rights do you have regarding your data?
You have the right to receive, free of charge, information about the origin, recipients, and purpose of your stored personal data at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. Additionally, you have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the responsible supervisory authority.

For this and other questions regarding data protection, you can contact us at any time.

​

2. Hosting
We host the content of our website with the following provider:
WIX

The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter referred to as “WIX”).

WIX is a tool for creating and hosting websites. When you visit our website, WIX analyzes user behavior, visitor sources, the region of the website visitors, and visitor numbers. WIX stores cookies in your browser that are necessary for displaying the website and ensuring security (necessary cookies).

The data collected via WIX may be stored on various servers worldwide. WIX’s servers are located, among other places, in the USA.

Details can be found in WIX’s privacy policy:
https://de.wix.com/about/privacy.

According to WIX, data transfers to the USA and other third countries are based on the EU Commission’s standard contractual clauses or comparable guarantees according to Article 46 GDPR. Details can be found here:
https://de.wix.com/about/privacy-dpa-users.

The use of WIX is based on Article 6(1)(f) GDPR. We have a legitimate interest in the most reliable possible presentation of our website. If a corresponding consent has been obtained, processing is carried out exclusively based on Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Telemedia Data Protection Act (TTDSG), insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

The company holds certification under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF commits to adhering to these data protection standards. Further information is available from the provider at the following link:
https://www.dataprivacyframework.gov/participant/5626.

Cloudflare (Content Delivery Network)

Our website uses services from Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA, to increase the loading speed, stability, and security of our website (CDN = Content Delivery Network). In this process, data traffic is routed through Cloudflare servers, whereby, for example, IP addresses are processed.

Cloudflare operates servers worldwide, including in the EU. However, a transfer of data to the USA cannot be excluded. Cloudflare is certified under the EU-U.S. Data Privacy Framework. The processing is based on Article 6(1)(f) GDPR (legitimate interest).

More information:
https://www.cloudflare.com/privacypolicy

 

3. General Information and Mandatory Disclosures

Data Protection
The operators of these pages take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission over the Internet (e.g., communication via email) can have security vulnerabilities. Complete protection of data from access by third parties is not possible.

Information about the Responsible Entity
The responsible entity for data processing on this website is:

José Andrés González Valdés
Monterrey
Mexico
Phone: +52 811 665 4100
Email: joseandresgv@outlook.com

The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, provided we do not have other legally permissible reasons to retain your personal data (e.g., tax or commercial retention periods); in the latter case, deletion will occur after these reasons have ceased to apply.

General Information on the Legal Bases for Data Processing on This Website
If you have consented to data processing, we process your personal data based on Article 6(1)(a) GDPR or Article 9(2)(a) GDPR if special categories of data according to Article 9(1) GDPR are processed. In the case of an explicit consent to the transfer of personal data to third countries, data processing is also based on Article 49(1)(a) GDPR.

If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing is additionally based on Section 25(1) of the German Telecommunications Telemedia Data Protection Act (TTDSG). Consent can be revoked at any time.

If your data is necessary for the fulfillment of a contract or to carry out pre-contractual measures, we process your data based on Article 6(1)(b) GDPR. Furthermore, we process your data if it is required to fulfill a legal obligation based on Article 6(1)(c) GDPR.

Data processing may also be based on our legitimate interest according to Article 6(1)(f) GDPR. The relevant legal bases applicable in each individual case are explained in the following paragraphs of this privacy policy.

Notice Regarding Data Transfer to Data Protection Non-Compliant Third Countries and Transfer to US Companies Not Certified Under the DPF
We use tools from companies based in data protection non-compliant third countries as well as US-based tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in these countries. We point out that in data protection non-compliant third countries, a data protection level comparable to that of the EU cannot be guaranteed.

We also point out that the USA is generally considered a safe third country with a data protection level comparable to the EU. Data transfer to the USA is therefore permitted if the recipient holds certification under the “EU-US Data Privacy Framework” (DPF) or provides appropriate additional safeguards. Information on transfers to third countries including data recipients can be found in this privacy policy.

Recipients of Personal Data
As part of our business activities, we cooperate with various external parties. In some cases, this also requires transferring personal data to these external parties. We only share personal data with external parties if it is necessary for contract fulfillment, if we are legally obligated to do so (e.g., sharing data with tax authorities), if we have a legitimate interest under Article 6(1)(f) GDPR in the data transfer, or if another legal basis allows the data transfer. When using processors, we only transfer personal data of our customers based on a valid contract for order processing. In cases of joint processing, a contract on joint processing is concluded.

Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke consent already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Advertising (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE SPECIFIC LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION ACCORDING TO ART. 21(2) GDPR).​

Right to File a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the place of the alleged infringement. This right to complain is without prejudice to other administrative or judicial remedies.

Right to Data Portability
You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract in a commonly used, machine-readable format and to have this data transmitted to yourself or a third party. If you request the direct transfer of the data to another controller, this will only be done as far as it is technically feasible.

Right to Access, Rectification, and Deletion
You have the right, under applicable legal provisions, at any time to obtain free information about your stored personal data, its origin, recipients, and the purpose of processing, and if applicable, the right to rectify or delete this data. For this and any further questions regarding personal data, you can contact us at any time.

Right to Restrict Processing
You have the right to request the restriction of processing of your personal data. You can contact us at any time to exercise this right. The right to restriction of processing applies in the following cases:

• If you dispute the accuracy of your personal data stored with us, we generally need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data.

• If the processing of your personal data was/is unlawful, you can request restriction of processing instead of deletion.

• If we no longer need your personal data but you need it to assert, exercise, or defend legal claims, you have the right to request restriction of processing instead of deletion.

• If you have objected to processing under Article 21(1) GDPR, a balance between your interests and ours must be made. As long as it is not yet clear whose interests prevail, you have the right to request restriction of processing of your personal data.

If you have restricted the processing of your personal data, these data may only be processed — aside from storage — with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection by the address line of the browser changing from “http://” to “https://” and by the lock symbol in your browser’s address bar.
When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Objection to Advertising Emails
The use of contact data published within the framework of the imprint obligation for sending unsolicited advertising and informational materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

​

4. Data Collection on This Website

Cookies
Our websites use so-called “cookies.” Cookies are small data packets and do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit ends. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g., cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., shopping cart functionality or video display). Other cookies can be used to analyze user behavior or for advertising purposes.

Cookies required for the electronic communication process, for providing certain functions you desire (e.g., shopping cart function), or to optimize the website (e.g., cookies for measuring web traffic) (necessary cookies) are stored based on Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to provide its services in a technically error-free and optimized manner.

If consent for storing cookies and comparable recognition technologies has been requested, processing occurs exclusively based on this consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); the consent can be revoked at any time.

You can configure your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate automatic deletion of cookies when closing the browser. Disabling cookies may restrict the functionality of this website.

Which cookies and services are used on this website can be found in this privacy policy.

Server Log Files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically sends to us. These include:

• Browser type and version

• Operating system used

• Referrer URL

• Hostname of the accessing computer

• Time of the server request

• IP address

These data are not combined with other data sources.

The collection of these data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of the website—hence the server log files must be collected.

Requests via Email, Phone, or Fax

If you contact us by email, phone, or fax, your inquiry including all personal data arising from it (e.g., name, inquiry content) will be stored and processed for the purpose of handling your request. We do not pass on this data without your consent.

This processing is based on Art. 6(1)(b) GDPR if your inquiry relates to contract fulfillment or pre-contractual measures. In all other cases, processing is based on our legitimate interest in effective handling of requests (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if requested; consent can be revoked at any time.

The data you send to us remains stored until you request deletion, revoke consent, or the purpose for storage ceases (e.g., after your inquiry is processed). Mandatory legal retention periods remain unaffected.

Contact via WhatsApp

For communication with our visitors, we also offer WhatsApp (a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). When using this channel, personal data (e.g., phone number, message content) is processed and stored on WhatsApp’s servers.

The data processing is based on Article 6(1)(a) GDPR (consent) or Article 6(1)(b) GDPR (performance of a contract).

Please note that when using WhatsApp, data may be transferred to Meta Platforms Inc. in the USA. More information:
https://www.whatsapp.com/legal/privacy-policy-eea

5. Social Media

Social Media Elements with Shariff
This website uses social media elements (e.g., Facebook, X [Twitter], Instagram, Pinterest, XING, LinkedIn, Tumblr). You can usually recognize these elements by their respective social media logos.

To protect your privacy on this website, we only use these elements together with the so-called Shariff solution. This application prevents the integrated social media elements from transmitting your personal data to the provider as soon as you enter the website.

Only when you activate a social media element by clicking its button will a direct connection to the provider’s server be established (with your consent). Once you activate it, the provider receives information that your IP address visited this website. If you are logged into your social media account (e.g., Facebook) simultaneously, the provider may assign the visit to your user account.

Activating the plugin constitutes consent in the sense of Article 6(1)(a) GDPR and § 25(1) TDDDG. This consent can be revoked at any time with effect for the future.
The use of the service takes place in order to obtain the legally required consents for the use of certain technologies. The legal basis for this is Article 6(1)(c) GDPR.

LinkedIn Plugin & Insight Tag

Unsere Website kann Funktionen des Netzwerks LinkedIn einbinden. Anbieter ist LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland. Bei Besuch unserer Seiten wird ggf. eine Verbindung zu Servern von LinkedIn hergestellt. Dabei wird dem LinkedIn-Server mitgeteilt, welche unserer Seiten Sie besucht haben.

Wenn Sie bei LinkedIn eingeloggt sind, kann LinkedIn Ihren Besuch mit Ihrem Nutzerkonto verknüpfen. Die Nutzung erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO (berechtigtes Interesse).

Weitere Informationen:
https://www.linkedin.com/legal/privacy-policy

​

6. Plugins and Tools

Google Fonts
This site uses so-called Google Fonts to ensure a uniform presentation of fonts, which are provided by Google. When you access a page, your browser loads the required fonts into its browser cache to display texts and fonts correctly.
To do this, the browser you are using must establish a connection to Google's servers. This enables Google to learn that this website was accessed via your IP address.
The use of Google Fonts is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the uniform display of fonts on their website. If a corresponding consent has been requested, processing takes place exclusively based on Article 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.
If your browser does not support Google Fonts, a standard font from your computer will be used.
More information about Google Fonts can be found at:
https://developers.google.com/fonts/faq 

and in Google’s privacy policy:
https://policies.google.com/privacy?hl=de.
The company holds certification under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, ensuring compliance with European data protection standards for data processing in the USA. Every company certified under the DPF commits to adhering to these data protection standards. Further information can be found at:
https://www.dataprivacyframework.gov/participant/5780.

Font Awesome
This site uses Font Awesome to provide a uniform display of fonts and icons. The provider is Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, Massachusetts, USA.
When you access a page, your browser loads the necessary fonts into its browser cache to display texts, fonts, and icons correctly. For this purpose, your browser must establish a connection to the Font Awesome servers. This allows Font Awesome to learn that this website was accessed via your IP address.
The use of Font Awesome is based on Article 6(1)(f) GDPR. We have a legitimate interest in the uniform display of fonts on our website. If a corresponding consent has been requested, processing takes place exclusively based on Article 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.
If your browser does not support Font Awesome, a standard font from your computer will be used.
More information about Font Awesome and its privacy policy can be found at:
https://fontawesome.com/privacy.

Google Tag Manager

This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager is used to manage website tags through an interface but does not itself process any personal data.

The data processing is based on Article 6(1)(f) GDPR (legitimate interest in efficient management of website tags).

Details at:
https://support.google.com/tagmanager/answer/9323295?hl=de

​

Source:
https://www.e-recht24.de