Privacy and privacy

Privacy and privacy2019-04-22T11:44:51+01:00

Protecting your personal data is a top priority for Prothelis

With the introduction of the General Data Protection Regulation (GDPR), you as a visitor to our website as well as the use and purchase of our goods and services will be at your side with new dashing “affected rights.” Our aim is to provide you with a general privacy policy.

Below we would like to inform you that personal data is requested from you and that it is stored electronically. Your data will be stored and processed by us in accordance with the relevant regulations of the national data protection laws, as well as the GDPR. First, the general terms are explained. We will then show you what data you collect, stored and, if necessary, collected data and, if necessary, at what time. Be deleted again. With this, we will show you which “affected rights” are available to you.

If you have any further questions, please feel free to contact us.

Responsible in accordance with the aforementioned rules is:

Prothelis AG
Board: Yücel Taspinar
Chairman of the Supervisory Board: Dr. Thomas Freitag
Headquarters
: Dusseldorf
Schiessstraße 48
D-40549 Düsseldorf

Phone: + 49 (0) 211-936 729 70
Fax: + 49 (0) 211-936 729 50
Email: info@prothelis.de

1. Terms

In order to ensure the readability and intelligibility of our privacy policy, we inform you in advance about basic concepts used in the GDPR.

Personal data

Personal data is any information relating to an identified or identifiable natural person (‘ the person concerned ‘); Identifiable is a natural person who identifies directly or indirectly, in particular by assigning it to an identifier such as a name, to a identification number, to location data, to an online identifier or to one or more special features The expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

Affected person

The person concerned is any identified or identifiable natural person whose personal data is processed by the controller.

Processing

Processing is any operation performed with or without the help of automated procedures or any such series of operations in connection with personal data such as the collection, recording, organization, arranging, storage, adaptation or alteration, The reading, retrieval, use, disclosure by transmission, dissemination or any other form of provision, matching or linking, restriction, deletion or destruction.

Restriction of processing

Limitation of processing is the marking of stored personal data with the aim of limiting its future processing.

Profiling

Profiling is any form of automated processing of personal data, which consists in the use of such personal data to assess certain personal aspects relating to a natural person, in particular to include aspects To analyse or predict the performance, economic situation, health, personal preferences, interests, reliability, behaviour, whereabouts or location change of this natural person.

Pseudonymization

Pseudonymisation is the processing of personal data in a manner to which the personal data can no longer be assigned to a specific person concerned without the addition of additional information, provided that these additional Information shall be kept separately and subject to technical and organisational measures to ensure that the personal data are not assigned to an identified or identifiable natural person.

Responsible or responsible for processing

Responsible or responsible for processing is the natural or legal person, authority, institution or other body that decides alone or jointly with others about the purposes and means of processing personal data. Where the purposes and means of such processing are determined by union law or by the law of the Member States, the person responsible or may be entitled to the specific criteria of his designation in accordance with Union law or the law of the Member States Be.

Processor

A processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the Controller.

Recipient

The recipient is a natural or legal person, authority, institution or other body that discloses personal data, regardless of whether it is a third party or not. However, authorities which may receive personal data under a specific investigation mandate under Union law or the law of the Member States shall not be considered as recipients.

Third party

Third Party shall be a natural or legal person, authority, institution or other body other than the data subject, the person responsible, the processor and persons under the direct responsibility of the responsible or Processors are authorised to process the personal data.

Consent

Consent shall be provided by the person concerned voluntarily for the particular case in an informed and unambiguous manner, in the form of a declaration or any other clearly affirming act with which the person concerned Understand that you agree to the processing of the personal data relating to you.

2nd. The nature and scope of data collection

When accessing our website or website When retrieving a file stored on our website, data is collected and processed. As a matter of principle, this only happens if this is necessary to provide a functioning website as well as its contents and services. Furthermore, the collection and use of personal data is carried out on a regular basis only after appropriate consent. An exception applies in cases where prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.

a. Legal basis for the processing of personal data

If the processing of personal data is carried out in order to fulfil the contracts concluded with us, Art serves. 6 Abs. 1 lit. b GDPR as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.

If we obtain consent from the person concerned for the processing of personal data, Art will serve. 6 Abs. 1 lit. a GDPR as the legal basis.

To the extent that processing of personal data is required to comply with a legal obligation to which our company is subject, Art serves. 6 Abs. 1 lit. c GDPR as the legal basis.

In the event that vital interests of the person concerned or another natural person require the processing of personal data serves Art. 6 Abs. 1 lit. D GDPR as the legal basis.

If processing is necessary to maintain the legitimate interest of our company or a third party and the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the former interest, it is not for Art. 6 Abs. 1 lit. f GDPR as the legal basis for processing.

b. Data erasure and storage time

The personal data we collect will be deleted as soon as the purpose of the storage is omitted.

Storage occurs if this is provided for by a law, an EU regulation or other regulations.

Furthermore, a deletion takes place when a storage period prescribed by the above standards expires, unless there is a requirement for further storage of the data for a contract or fulfillment of the contract.

1. Logfiles

A. Description and scope of data processing

When accessing our website,

  • Browser type version
  • Operating system used
  • Referrer URL (previously visited website), as well as pages viewed on our website
  • IP Address
  • Date and time of server request
  • Internet Service Provider

Logged.

b. Legal basis for data processing

The legal basis for storing the data and log files is type. 6 Abs. 1 lit. F DSGVO.

c. Purpose of data processing

Storing in log files ensures that our website functions properly. It also serves to optimize and secure our systems. An evaluation of the data for marketing purposes does not take place in this context.

D. Duration of storage

The data we store will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. This is the case after 14 days at the latest. Any storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that a mapping of the calling client is no longer possible.

e. Opjection and removal

The collection of these data is imperative for the operation of the website. Consequently, there is no possibility of opposition by the user.

2. Cookies

A. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored on the visitor’s computer system when our websites are visited. Cookies contain a string that allows the visitor’s browser to be identified when revisiting our website. We use technically necessary cookies to make our offer more user-friendly, effective and secure.

For example, the following data is stored in the cookies and transmitted:

  • Login data
  • Your behavior on the pages (such as clicks, scroll behavior, and length of stay)
  • Your approximate location (country and city)
  • Source of origin of your visit (i.e. About which website or website What advertising material you came to us about)
  • Technical information such as browser, internet provider, device and screen resolution.
  • Language

The data obtained from this is pseudonymised by us. It is therefore not possible to assign the data to the visitor. Furthermore, this data is not stored with other personal data.

You can adjust your browser so that for certain cases or generally rule out that you are informed and decide individually about their adoption the setting of cookies or accept cookies. For the non-acceptance of cookies, the functionality of our website may be limited.

In addition, we use cookies that allow an analysis of the browsing behavior of our website visitor (so-called. Analysis cookies).

For example, the following data is stored in the analysis cookies and transmitted:

  • Impressions
  • Use of website functions
  • Language
B. Legal basis for data processing

The legal basis for processing personal data using cookies is Art. 6 Abs. 1 lit. F DSGVO. The legal basis for processing personal data using cookies for analysis purposes is still the case in the event of user consent in this regard. 6 Abs. 1 lit. A DSGVO.

c. Purpose of data processing

Technically necessary cookies are used to make it easier to use websites. Some features of the website or The online shop cannot be offered without the use of cookies. This requires that the browser be recognized even after a page break.

The user data collected by technical cookies is not used to create user profiles.

The use of analysis cookies is done to improve the quality of our websites and their contents. Through the analysis cookies we learn how the website is used and can thus continuously optimize our offer.

d. Duration of storage, possibility of opposition and disposal

Cookies are stored on the user’s computer and transmitted by them. Therefore, users also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, all functions of the website may no longer be used in full.

3. Contact form and email

A. Description and scope of data processing

We provide visitors to our website with a contact form for quick, electronic contact. The data entered in the input mask is transmitted to us and stored.

The following data is retrieved and stored:

  • Name
  • Surname
  • E-mail address
  • Telephone number

In addition, the IP address of the user, as well as the date and time of the transfer, will be stored at the time of the dispatch.

Alternatively, you can contact us via the email address provided. In this case, the personal data of the user transmitted with the e-mail will be stored.

No disclosure of the data to third parties will be made. The data will only be used to process the request.

b. Legal basis for data processing

The legal basis for the processing of the data is in the presence of a consent of the user art. 6 Abs. 1 lit. A DSGVO.

The legal basis for processing the data transmitted in the course of sending an e-mail is art. 6 Abs. 1 lit. F DSGVO. If the e-mail contact is aimed at concluding a contract, then the additional legal basis for processing is art. 6 Abs. 1 lit. (b) DSGVO.

C. Purpose of data processing

The processing of the personal data is for the sole purpose of processing the contact. In case of contact by e-mail, this also includes the necessary legitimate interest in the processing of the data.

The other personal data processed during the submit operation are used to prevent misuse of the contact form and to ensure the safety of our information technology systems.

d. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. This is the case for the personal data from the input mask of the contact form and those sent by e-mail, if the respective conversation with the user is terminated. The conversation ends when it is clear from the circumstances that the facts concerned have been clarified.

The additional personal data collected during the submit operation will be deleted at the latest after a period of seven days.

E. Opjection and removal

The user has the possibility at any time to revoke his consent to the processing of the personal data. For this purpose, the user can contact the person responsible via the contact options made available on the website. If the user makes contact with us by e-mail, he may at any time object to the storage of his personal data. In such a case, the conversation cannot continue.

4th. Newsletter

A. Description and scope of data processing

Users have the opportunity to subscribe to our newsletter on our website. When you sign up for the newsletter, the data requested from the input mask is transmitted to us.

The following data are collected at the time of registration:

  • First and last name
  • E-mail address
  • IP Address of the applicant’s computer
  • Date and time of registration

As part of the registration process, consent is provided by a so-called one. Double-opt-in procedures.

If customers have purchased goods or services from us and have deposited your e-mail address, it can subsequently also be used to send a newsletter. In such a case, only direct mail for own similar goods or services will be sent via the newsletter.

B. Legal basis for data processing

The legal basis for the processing of the data after registration for the newsletter by the user is the case if the user has given its consent. 6 Abs. 1 lit. A DSGVO.

The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 (7). 3 UWG.

C. Purpose of data processing

The collection of the user’s e-mail address is used to deliver the newsletter.

The collection of other personal data as part of the registration process is intended to prevent misuse of the services or the e-mail address used.

d. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. The user’s e-mail address is therefore stored as long as the newsletter is subscribed to.

E. Opjection and removal

The subscription to the newsletter can be canceled by the affected user at any time. To this end, there is a corresponding link in each newsletter.

5. Newsletter tracking

A. Description and scope of data processing

The newsletters we send contain so-called newsletters. Counting pixels. Counting pixels are miniature graphics embedded in emails sent in HTML format to allow log file recording and log file analysis. The personal data collected in this way will not be passed on to third parties. As part of the registration process, your consent will be provided by a so-called one. Double-opt-in procedures.

B. Legal basis for data processing

The legal basis for processing the data after registration for the newsletter is the case if the user has given its consent. 6 Abs. 1 lit. a GDPR, by the way. 6 Abs. 1 lit. F DSGVO.

c. Purpose of data processing

Newsletter tracking is used to statistically evaluate the success or failure of online marketing campaigns. This allows us to understand if and when an e-mail will be opened and which links in the email will be clicked on. Newsletter tracking is also used to improve and optimize the newsletter.

d. Duration of storage

Your data will be deleted if it is no longer required for our business processes and no legal retention obligations are in the right place.

E. Opjection and removal

The consent of the affected user can be terminated at any time by the user unsubscribing from the newsletter. For this purpose, for example, there is a corresponding link in each newsletter.

Google Analytics

A. Description and scope of data processing

This website uses the web analytics service Google Analytics provider is the Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Google Analytics uses analysis cookies. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. We are adding the code “gat. _ anonymizeIp ().” This code causes the recorded IP address of Google to be shortened within Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area prior to transfer. Only in exceptional cases, the full IP address to a server of Google in the USA is transferred and cut there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports about the website activities and to provide further services related to website activity and Internet usage for website operators. The IP address transmitted by your browser as part of the use of Google Analytics will not be merged with other Google data. For more information, please visit https://www.google.com/analytics/terms/de.html or Under https://policies.google.com/?hl=de

B. Legal basis for data processing

The legal basis for the processing of the personal data of the users is art. 6 Abs. 1 lit. F DSGVO.

c. Purpose of data processing

The processing of the personal data of the users allows us an analysis of the surfing behaviour of our users. We are able to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us improve our website and its user-friendliness. This is also our legitimate interest in the processing of the data in kind. 6 paragraph. 1 lit. f GDPR. By anonymizing the IP address, the interest of the users in their protection of personal data is duly taken into account.

d. Duration of storage

Your data will be deleted if it is no longer required for our business processes and no legal retention obligations are in the right place.

We have also stipulated that Google will automatically delete the data after 14 months.

e. Opjection and removal

Cookies are stored on the user’s computer and transmitted by them. Therefore, users also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, all functions of the website may no longer be used in full.

In addition, you can capture data (incl. tax) generated by the cookie and your use of the site Prevent Google from processing your IP address) and Google from processing this data by downloading and installing the Add-On browser at https://tools.google.com/dlpage/gaoptout?hl=de.

Q. Use by a mobile device

If you visit our website via a mobile device (smartphone or tablet), you must click this link to turn Google Analytics off to prevent the collection and processing of your data.

Turn off Google Analytics

Crashlytics

A. Description and scope of processing

We use the error diagnostic service “Crashlytics,” which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA (referred to below as “Google”). Should the site crash when you visit our website, or should unexpected errors occur, then specific information, namely device type, operating system version, date and time of error, will be land from which the query takes place and the set Language of the operating system sent to Crashlytics. Crashlytics is used by me only without recording your IP address. For more information on Crashlytics ‘ privacy, click here: https://fabric.io/terms

B. Purpose

Processing is done to detect and evaluate errors. The information gained is used to maintain and improve our offer.

C. Legal basis for data processing

Processing is necessary to safeguard the overriding legitimate interests of the person responsible (Art. 6 Abs. 1 lit. f GDPR). Our legitimate interest lies in that, under b. The named purpose.

D. Duration of storage and right to object

You can object to data processing by Crashlytics at any time by eliminating the collection and transmission of usage information and diagnostic data by Crashlytics in the settings. The analysis data processed and stored with Crashlytics is automatically deleted by us after one year.

E. Recipients, transmission to third countries

The use of Crashlytics may become the result of Crashlytics. Personal data transmitted to Google. Google is acting as a service provider for us as part of an order processing process. Google also processes your data in the US and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework.

Answers.io

A. Description and scope of processing

We use the usage analysis service “Answers.io,” which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA (referred to below as “Google”). Through Answers.io we can collect and evaluate individual sub-pages or menu items of our website with so-called “Custom Events” and the interaction of our users with these Custom Events. With Answers.io we use (e.g. The click of a menu item), as well as the type of device, the operating system version and date of the event collected and sent to Answers.io. Answers.io is used by us only without a recording of your IP address. For more information on privacy at Answers.io, please visit https://fabric.io/terms.

B. Purpose

Processing is done to evaluate the use of our website. The information gained is used to improve and develop the online shop.

C. Legal basis

Processing is necessary to safeguard the overriding legitimate interests of the person responsible (Art. 6 Abs. 1 lit. f GDPR). Our legitimate interest lies in that, in subsection b. The named purpose.

D. Duration of storage and right to object

You can object to data processing by Answers.io at any time by eliminating Crashlytics in the settings and transmission of usage information and diagnostic data. The analysis data processed and stored with Answers.io will also be automatically deleted by us after one year.

E. Recipients and transmission to third countries

By using Answers.io, you may become. Personal data transmitted to Google. Google is acting as a service provider for us as part of an order processing process. Google also processes your data in the US and has submitted to the EU-US Privacy Shield. For more information on the EU-US Privacy Shield, see https://www.privacyshield.gov/EU-US-Framework.

1. Google Remarketing

A. Description and scope of data processing

This website uses the Google Remarketing service of Google Inc. Provider is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. This service allows us to display user-related and interest-based advertising to our visitors. Cookies are used to recognize the visitor to our website if they subsequently visit websites that are also members of the Google advertising network. Google receives personal data about the visitor, such as his IP address or surfing behavior. Google Inc. uses the data obtained in this way to display the advertisement.

B. Legal basis for data processing

The legal basis for processing personal data using cookies is Art. 6 Abs. 1 lit. F DSGVO. The legal basis for the processing of personal data using cookies for analysis purposes is in the presence of a corresponding consent of the user type. 6 Abs. 1 lit. A DSGVO.

C. Purpose of data processing

The analysis cookies are used to optimize the advertisements displayed to the user.

d. Duration of storage

Your data will be deleted if it is no longer required for our business processes and no legal retention obligations are in the right place. We have no control over the storage of the data at the provider. You can reach the provider under the above contact details.

e. Possibility of opposition and elimination

Cookies are stored on the user’s computer and transmitted by them. Therefore, users also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, all functions of the website may no longer be used in full.

Furthermore, the person concerned has the possibility to object to the advertising of interest by Google. To do this, the data subject must access the Www.google.de/settings/ads link from each of the Internet browsers it uses and make the desired settings there.

Further information and the applicable Google Privacy policy can be obtained at https://www.google.de/intl/de/policies/privacy/.

2. Google Adwords

A. Description and scope of data processing

We have integrated Google AdWords on our website. The provider is operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

By using Google AdWords, the application of our website is made possible by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the search engine Google and a display of Foreign advertising on our website. If a user clicks on a Google Ad Words ad, a conversion cookie is placed on the user’s computer. Conversion cookies are not used to identify users. Conversion cookies help to determine which subpages were accessed on our website, whether a revenue was generated or canceled. The personal data is stored by Google in the USA. Google may share them with third parties.

B. Legal basis for data processing

The legal basis for processing personal data using cookies is Art. 6 Abs. 1 lit. F DSGVO. The legal basis for the processing of personal data using cookies for analysis purposes is in the presence of a corresponding consent of the user type. 6 Abs. 1 lit. A DSGVO.

c. Purpose of data processing

Google AdWords allows you to view internet advertising in Google’s search engine results, as well as in the Google advertising network. To do this, we specify in advance key words that show an ad in Google’s search engine results only when the user retrieves a keyword-relevant search result with the search engine. On the Google network, the ads are distributed on topic-relevant web pages by means of an automatic algorithm and in compliance with the previously defined keywords. The data we get helps us optimize our ads.

D. Duration of storage

Your data will be deleted if it is no longer required for our business processes and no legal retention obligations are in the right place. We have no control over the storage of the data at the provider. You can reach the provider under the above contact details.

E. Possibility of opposition and elimination

Cookies are stored on the user’s computer and transmitted by them. Therefore, users also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, all functions of the website may no longer be used in full.

Furthermore, the person concerned has the possibility to object to the advertising of interest by Google. To do this, the data subject must access the Www.google.de/settings/ads link from each of the Internet browsers it uses and make the desired settings there.

Furthermore, the person concerned has the possibility to object to the advertising of interest by Google. To do this, the data subject must access the Www.google.de/settings/ads link from each of the Internet browsers it uses and make the desired settings there.

Further information and the applicable Google Privacy policy can be obtained at https://www.google.de/intl/de/policies/privacy/.

3. Facebook remarketing

A. Description and scope of data processing

On our website, we have integrated Facebook pixels. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. For EU-based users, the provider is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

For users who have been forwarded to our website by clicking on an advertisement submitted by the provider, click behavior can be recorded and tracked.

This gives us a static and market-relevant analysis of the ads we run. The data we receive is anonymous to us. Your data will be stored and processed by the provider and, if necessary, will be stored and processed, and if necessary. Associated with your Facebook account.

For more information, visit https://www.facebook.com/about/privacy/.

B. Legal basis for data processing

The legal basis for using the Facebook pixel is Art. 6 Abs. 1 lit. F DSGVO. Our legitimate interest lies in the analysis and optimization of the economic operation of our website.

C. Purpose of data processing

The provider allows you to view Internet advertising of its pages, as well as its partner pages. The analysis provides us with statistical and promotional analysis of the advertising we serve and the click behavior on our website. The data we get helps us optimize our ads.

D. Duration of storage

Your data will be deleted if it is no longer required for our business processes and no legal retention obligations are in the right place. We have no control over the storage of the data at the provider. You can reach the provider under the above contact details.

e. Possibility of opposition and elimination

You can make changes to advertising settings with the provider. You also have the option of prohibiting the provider and its partners from running advertisements. You can make the appropriate settings under https://www.facebook.com/ads/website_custom_audiences/.

Google Maps

A. Description and scope of data processing

We have integrated maps from Google Maps on our website. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

By using Google Maps, information about the use of the website (click behavior, including your IP address) can be transmitted to the provider. The data can be transferred to a provider’s server in the United States and stored there.

For more information, see https://policies.google.com/privacy?hl=de.

b. Legal basis for data processing

The legal basis for processing the data is Art. 6 Abs. 1 lit. F DSGVO.

C. Purpose of data processing

We integrate the provider’s map material to represent our location and improve discoverability.

D. Duration of storage

We have no control over the storage of the data at the provider. You can reach the provider under the above contact details.

e. Opjection and removal

The user can prevent the transfer of the data to the provider by disabling the JavaScript.

Security

We have taken a variety of security measures to adequately protect personal information. Our databases are protected by physical and technical measures as well as procedural measures that restrict access to the information to specially authorized persons in accordance with this Privacy Statement. We are continuously updating our technical and organisational security measures. With us in the house, only certain persons in the IT administration are entitled under strict conditions and have the right to take access to your account. You should never pass on your password to third parties for access to our website and/or to activate the location of the tracker and you should change this password regularly. If you have left our pages or the application, you should log out to avoid unauthorized users gaining access to your user account. When communicating by e-mail, we cannot guarantee complete data security.

1. Right to information

Any person affected by the processing of personal data may require the person responsible to confirm whether personal data of the person concerned is being processed.

If such processing is available, you can request information from the person responsible about the following information:

  • Processing purposes
  • Categories of personal data being processed
  • Recipients or recipients The categories of recipients to whom the personal data in question has been disclosed or is still being disclosed
  • Planned time of storage of the personal data concerning you or, if concrete information is not possible, criteria for determining the storage time
  • Existence of a right to correct or delete the personal data relating to you, a right to restrict the processing by the person responsible or a right of objection to this processing
  • Existence of a right to complain to a supervisory authority
  • All available information about the origin of the data if the personal data is not collected from the person concerned
  • Pass automated decision-making, including profiling according to the type. 22 paragraph. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved, as well as the scope and desired impact of such processing on the person concerned
  • The person concerned also has the right to request information as to whether the personal data relating to him will be transferred to a third country or to an international organisation. In this context, you may require the appropriate guarantees in accordance with the Article. 46 GDPR in connection with the transmission.
  • In the case of data processing for scientific, historical or statistical research purposes:
    This right of information may be limited to the extent that it is likely to make it impossible or seriously impaired the implementation of research or statistical purposes and the restriction is necessary for the fulfilment of research or statistical purposes.

2. Right to Rectification

Affected persons have the right to correct and/complete to the person responsible, provided that the processed personal data relating to them is incorrect or incomplete. The person responsible must make the correction immediately.

For data processing for scientific, historical or statistical research purposes:

Your right to rectification may be limited to the extent that it is likely to make it impossible or seriously impaired the implementation of research or statistical purposes and the restriction necessary for the fulfilment of research or statistical purposes. Is.

3. Right to restrict processing

Under the following conditions, affected persons may request that the processing of the personal data relating to you be restricted:

  • If the accuracy of the personal data in question is disputed for a period of time that allows the person responsible to verify the accuracy of the personal data
  • The processing is illegal and the person concerned refuses to delete the personal data and instead requires the restriction of the use of the personal data
  • The person responsible no longer needs the personal data for the purposes of processing, but the person concerned needs it to assert, exercise or defend legal claims, or
  • If the person concerned objects to the processing in accordance with the type of method. 21 para. 1 has filed GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh the reasons of the person concerned.

If the processing of the personal data in question has been restricted, this data may –, apart from its storage – only with the consent of the person concerned or to assert, exercise or defend legal claims or to protect the Rights of another natural or legal person or for the sake of an important public interest of the Union or a Member State.

The restriction of processing according to the above was restricted. Requirements restricted, the person concerned will be informed by the person responsible before the restriction is lifted.

For data processing for scientific, historical or statistical research purposes:

The right of the person concerned to restrict processing may be limited to the extent that it is likely to make the implementation of the research or statistical purposes impossible or seriously impair and the restriction on the fulfilment of the Research or statistical purposes.

4. Right to delete

A. Redefment

The person responsible may require the person responsible to delete the personal data concerning him immediately, and the person responsible is obliged to delete that data immediately if one of the following reasons applies:

  • The personal data in question is no longer necessary for the purposes for which it was collected or otherwise processed;
  • The person concerned has your consent to which the processing is due. Article. 6 Abs. 1 lit. a or kind. 9 para. 2 lit. A GDPR supported revoked and there is no other legal basis for processing;
  • The person concerned lays a gem. Article. 21 para. 1 GDPR objected to the processing and there are no primary legitimate reasons for processing, or the person concerned specifies a-based manner. Article. 21 para. 2 GDPR objection to processing;
  • The personal data was processed unlawfully;
  • The deletion of the personal data in question is necessary to fulfil a legal obligation under EU law or the law of the Member States to which the person responsible is subject;
  • The personal data in question was used in relation to the information society’s services provided in accordance with the nature of the information society. 8 para. 1 GDPR.
B. Information to third parties

If the person responsible has made the personal data in question public and he is. Article. 17 para. 1 GDPR obliges to delete it, taking into account the available technology and implementation costs, it shall take appropriate measures, including technical ones, to deal with data controllers who process the personal data, Inform that you, as the person concerned, have required you to delete all links to this personal data or copies or replications of this personal data.

c. Exceptions

The right to delete does not exist as far as the processing is required

  • To exercise the right to freedom of expression and information;
  • In order to fulfil a legal obligation requiring processing under the law of the Union or the Member States to which the person responsible is subject, or in order to carry out a task which is in the public interest or in the exercise of public authority. Transferred to the person responsible:
  • For reasons of public interest in public health, in accordance with the species. 9 para. 2 lit. h and i as well as kind. 9 para. 3 GDPR;
  • For archival purposes in the public interest, scientific or historical research purposes or for statistical purposes. Article. 89 ABS. 1 GDPR, insofar as the law referred to under Section (a) is likely to make the achievement of the objectives of this processing impossible or seriously impaired, or
  • To assert, exercise or defend legal claims.
5. Right to be informed

If the person concerned has asserted the right to correct, delete or restrict the processing to the person responsible, he is obliged to provide all recipients to whom the personal data in question have been disclosed, the recipient is obliged to disclose the personal data in question. Correction or deletion of the data or limitation of the processing, unless this proves impossible or involves a disproportionate effort. The person concerned has the right to be informed of these recipients to the person responsible.

6. Right to Data transferability

Affected persons have the right to receive the personal data that has been provided to the person responsible in a structured, common and machine-readable format. In addition, persons concerned have the right to transmit this data to another person responsible without hindrance by the person responsible for providing the personal data, provided that

  • Processing on a consent gem. Article. 6 Abs. 1 lit. a GDPR or kind. 9 para. 2 lit. A GDPR or on a contract gem. Article. 6 Abs. 1 lit. b GDPR and
  • Processing is done using automated procedures.

In exercising that right, concerned persons also have the right to obtain that the personal data relating to them be transmitted directly by another person responsible, as far as this is technically feasible. Freedoms and rights of other persons may not be affected by this.

The right to data portability does not apply to the processing of personal data required to perform a task that is in the public interest or in the exercise of public authority that has been entrusted to the person responsible.

7. Right to Object

Affected persons have the right, for reasons arising from their particular situation, at any time against the processing of the personal data concerning them, which is due to nature. 6 Abs. 1 lit. Ee or f GDPR is made to appeal; This also applies to profiling based on these provisions.

The person responsible will no longer process the personal data in question unless he can demonstrate compelling grounds for processing worthy of protection, which outweigh the interests of the persons concerned, their rights and freedoms, or the Processing is used to assert, exercise or defend legal claims.

If the personal data in question is processed in order to conduct direct advertising, the persons concerned have the right to object at any time to the processing of the personal data relating to them for the purpose of such advertising; This also applies to profiling, as far as it is associated with such direct advertising.

If affected persons object to processing for direct advertising purposes, the personal data relating to them will no longer be processed for these purposes.

Persons concerned have the opportunity to exercise their right to object to – in connection with the use of information society services in connection with the use of information society services, regardless of Directive 2002/58/EG – by means of automated procedures in which technical specifications are subject to Be used.

For data processing for scientific, historical or statistical research purposes:

Persons affected also have the right, for reasons arising from your particular situation, when processing personal data relating to them, which is relevant for scientific or historical research purposes or for statistical purposes. Article. 89 ABS. 1 GDPR is made to contradict this.

The right to object may be restricted to the extent that it is likely to make the implementation of research or statistical purposes impossible or seriously impair and the restriction is necessary for the fulfilment of research or statistical purposes.

8. Right to revoke the data protection declaration of consent

Affected persons have the right to revoke their declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing due to the consent until the revocation.

9. Automated decision-making in individual cases including profiling

Affected persons have the right not to be subject to a decision based solely on automated processing – including profiling – which has a legal effect against or similarly substantially unfolds against this legal effect. Affected. This does not apply if the decision

  1. Is necessary to conclude or fulfil a contract between the person concerned and the person responsible
  2. It is permissible, as a result of legislation by the Union or Member States to which the person responsible is subject, and this legislation is appropriate measures to safeguard the rights and freedoms of the persons concerned and their legitimate interests. Included or
  3. With explicit consent,

However, these decisions may not be made on special categories of personal data by type. 9 para. 1 GDPR, unless type. 9 para. 2 lit. (g) GDPR and appropriate measures have been taken to protect rights and freedoms as well as your legitimate interests.

With regard to the cases referred to in paragraphs 1 and 3, the person responsible shall take appropriate measures to safeguard the rights and freedoms and legitimate interests of persons concerned, for which at least the right to the effect of a person’s intervention by the person Responsible, at the presentation of one’s own position and on challenge to the decision.

10. Right to appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, the persons concerned have the right to complain to a supervisory authority, in particular in the Member State of their place of residence, their job or the place of the Suspension infringement, if they believe that the processing of the personal data relating to them is contrary to the GDPR.

The supervisory authority to which the complaint was filed informs the complainant of the status and results of the complaint, including the possibility of a court appeal by type. 78 GDPR.

Subscribe to our Newsletter