1. *Controller and Data Protection Officer*  
  Responsible for this website is  
  Yvonne Hornig, Kleeweg 1a, 22885 Barsbüttel, Germany.  
  The Data Protection Officer can be reached via email at  
  info@charlene.hamburg  
  or at the address mentioned above.

2. *Data Processed for Providing the Website and Creating Log Files*  
  a. *What data is processed for what purpose?*  
  Every time content from the website is accessed, temporary data is stored, which may allow for identification. The following data is collected:  
  - Date and time of access  
  - IP address  
  - Hostname of the accessing computer  
  - Website from which the site was accessed  
  - Websites accessed through the website  
  - Page visited on our website  
  - Notification of whether the retrieval was successful  
  - Amount of data transmitted  
  - Information about the browser type and version used  
  - Operating system  

---

### The temporary storage of data is necessary for the course of a website visit to enable the delivery of the website. Further storage in log files is carried out to ensure the functionality of the website and the security of the information technology systems. Our legitimate interest in data processing lies in these purposes.

b. *On what legal basis is this data processed?*  
  The data is processed on the basis of Art. 6 Para. 1 Letter f of the GDPR.

c. *How long is the data stored?*  
  The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of providing the website, this is when the respective session is terminated. The log files are retained [maximum up to 24 hours] and are accessible only to administrators. After that, they are only indirectly available through the reconstruction of backup tapes and will be permanently deleted after a maximum of four weeks.

### 3. Rights of the Data Subject

a. *Right to Information*  
  You can request information pursuant to Art. 15 of the GDPR about your personal data that we process.

b. *Right to Object*  
  You have the right to object for specific reasons (see point II).

c. *Right to Rectification*  
  If the information concerning you is (no longer) accurate, you can request rectification pursuant to Art. 16 of the GDPR. If your data is incomplete, you can request completion.

---

d. *Right to Deletion*  
  You can request the deletion of your personal data pursuant to Art. 17 of the GDPR.

e. *Right to Restriction of Processing*  
  You have the right to request a restriction of processing your personal data according to Art. 18 of the GDPR.

f. *Right to Lodge a Complaint*  
  If you believe that the processing of your personal data violates data protection laws, you have the right to lodge a complaint with a supervisory authority of your choice pursuant to Art. 77 Para. 1 of the GDPR. This also includes the supervisory authority responsible for the controller: Data Protection Officer for Schleswig-Holstein.

g. *Right to Data Portability*  
  In the event that the conditions of Art. 20 Para. 1 of the GDPR are met, you have the right to request that data which we process automatically based on your consent or in fulfillment of a contract be provided to you or a third party. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website. Therefore, they are not based on consent under Art. 6 Para. 1 Letter a of the GDPR or a contract under Art. 6 Para. 1 Letter b of the GDPR, but are justified under Art. 6 Para. 1 Letter f of the GDPR. Thus, the conditions of Art. 20 Para. 1 of the GDPR are not fulfilled in this respect.

### II. Right to Object According to Art. 21 Para. 1 of the GDPR  
You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data which is carried out based on Article 6 Para. 1 Letter f of the GDPR. The controller will no longer process the personal data unless they can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website.