Controller & Data Protection Officer
Data Protection Officer
What are personal data?
Personal data are information that identifies you, such as your name or information that makes you identifiable, such as your address, telephone number or IP address.
Processing of personal data
Personal data will only be processed if this is necessary to provide a functional and comfortable usage of our website as well as our contents and services.
For various services, it is also necessary that you provide us with certain personal data of your own accord.
Your personal data will always be processed in accordance with the relevant legal laws and regulations.
Your data will be stored until the purpose of storage no longer applies. This can occur, for example, over time, but also if you exercise your data subject rights (see below). Even after the purpose has been achieved or not achieved, we may still have to store your data if European or national laws, regulations or other regulations or contracts require us to do so. The deletion takes place at the latest after expiry of this period.
The following statements contain further information about the processing of your personal data, the legal basis of the processing, the purpose of the processing, the retention and deletion period as well as your rights as a data subject.
If we ask external service providers at your request for the execution of the contract, this will be done for the processing of your request to them as their own responsible body. With regard to the processing of your data within the framework of our contractual relationship, please also observe the data protection information attached to the contractual documents.
If we also use personal data for a purpose that requires your consent in accordance with the statutory provisions, we will ask you for your express consent in each case. You can revoke your consent at any time.
Every time you visit our website, our system automatically collects personal data and information from your computer and stores it in so-called log files on the web server and in our system. This processes the following data:
- Information about the browser type and version used
- Your operating system
- Your IP address
- Date and time of access
- Websites from which your system reaches our website
- Websites accessed from your system through our website
We do not store any other data on the basis of which it is possible to assign the data to your person. The aforementioned data is not stored together with other personal data.
It is necessary that our system temporarily stores the IP address so that the website can be delivered to your computer. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. GDPR. The legitimate interest lies in the fact that we can improve the functionality and optimization of the website as well as secure our IT systems. Furthermore, temporary storage is used for error detection and avoidance. The personal data will not be used for marketing purposes in this context.
The data will be stored as long as necessary to achieve the purpose for which they were collected. If data is required to provide the website, it is not required once the respective session has ended. The data will then be deleted. If the data is stored in log files, this is the case after 30 days at the latest.
Technically required cookies
The personal data collected by technically necessary cookies are not used to create user profiles.
The legal basis for the use of technically necessary cookies is Art. 6 para. 1 lit. GDPR. The legitimate interest is that a provision of the website would not be possible without the setting of these cookies and that a large number of services could not be offered.
Technically necessary cookies cannot be manually deactivated by you via our website. However, you have the option of using your browser settings to specify that cookies should generally be rejected. Please note that in this case some functions of the website cannot be used.
Your rights regarding the processing of personal data
We would like to inform you about your rights in the processing of your personal data. If you have any questions about your rights or wish to assert your rights against us, please contact our data protection officer at email@example.com or by post to the "Data Protection Officer ".
Withdrawal of your consent (Art. 7 para. 3 GDPR)
If you have given your consent to the processing of your personal data, you can withdraw this at any time. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent until withdrawal. You will be informed of this right of withdrawal before you give your consent.
Right of access by the data subject right (Art. 15 GDPR)
You have the right to ask us to confirm whether we are processing personal data about you. If this is the case, you have a right to information about this personal data. When transferring personal data to a third country or international organization, you also have the right to be informed of appropriate safeguards to ensure that recipients comply with the provisions of the GDPR.
Right to rectification (Art. 16 GDPR)
You may request us to correct any incorrect data concerning you without delay. Taking into account the purposes of the processing, you also have the right to request the supplementation of incomplete personal data - also by a supplementary declaration.
Right to erasure or „right to be forgotten“ (Art. 17 GDPR)
You have the right to request the immediate erasure of your personal data if one of the following reasons applies:
- Personal data for the purposes for which they were collected or otherwise processed are no longer required,
- You have withdrawn your consent and there is no other legal basis for the processing,
- You object the processing under Art. 21 para. 2 sentence 1 GDPR for reasons arising from your particular situation and there are no compelling legitimate reasons for the processing,
- You object the processing for direct marketing pursuant to Art. 21 para. 2 p. 2 GDPR,
- The personal data have been processed unlawfully,
- The personal data must be deleted in order to fulfil a legal obligation under European or German law,
- The data were collected directly from a child in connection with an offer of information society services, Art. 8 para. 1 GDPR.
We will comply with the request for deletion unless we are legally obliged or entitled to store and process your personal data further. In addition, we are entitled to further storage if we are unable to assert, exercise or defend legal claims without your personal data.
Right to restriction of processing (Art. 18 GDPR)
According to Art. 18 GDPR, we may only process personal data to a limited extent in the following cases if:
- You dispute the accuracy of your personal data until we can verify its accuracy,
- The processing is unlawful and you refuse to delete the data and instead request the restriction of use,
- We no longer need the data for the purposes of processing, but you do need them to assert, exercise or defend legal claims, or
- You object to the processing pursuant to Art. 21 para. 1 No. 2 GDPR for reasons arising from your particular situation, provided it is not yet clear whether the legitimate reasons for processing by us outweigh your interests.
If processing is restricted, we may only store this data. In this case, further processing shall only be permitted with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State. You can withdraw your consent to this at any time. You will be notified by us before the restriction is lifted.
Notification obligation (Art. 19 GDPR)
Please note that we are obliged to inform all recipients to whom your personal data has been disclosed of any correction or deletion of your data or any restriction on processing. This does not apply if such information is impossible or involves a disproportionate effort.
Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right that we transmit those personal data to another controller in certain cases. However, this right must not impair the rights and freedoms of other persons, including our company. If this is the case, we are entitled to refuse the surrender or transfer of your personal data.
Right to object (Art. 21 GDPR)
If we process your data on the basis of a legitimate interest (Art. 6 para. 1 lit. GDPR) you have the right to object to this if the reasons for this arise from your particular situation. This also applies to profiling based on these provisions.
In this case, we will no longer process your personal data unless we can prove compelling reasons worthy of protection for the processing. These must outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process your personal data for direct marketing purposes, you may object to the processing of your personal data. This also applies to profiling insofar as it is connected with such direct advertising.
After your objection your personal data will no longer be processed for these purposes.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
You have the right to complain to a supervisory authority, in particular in the Member State where you are staying, working or suspected of infringing, if you believe that the processing of personal data concerning you is contrary to the General Data Protection Regulation. Other administrative or judicial remedies that you may be entitled to remain unaffected.