Data protection

A. Subject matter of this data protection declaration

We appreciate your interest in our Internet presence and our services on our website.

The protection of your personal data is extremely important to us. Below, we therefore wish to provide you with detailed information as to what data is gathered when you visit our Internet  presence and use its services and how this is then processed and used by us, as well as what accompanying protective measures we have taken in technical and organisational terms.

As provided for under the GDPR (General Data Protection Regulation), we are informing you in accordance with Article 5 and Article 13 of the quoted ordinance in compliance with the principle of transparency of the type, scope and purpose of the data processing, as well as the legal basis which legitimises the data processing. Furthermore, we will explain the duration of the respective data processing, as well as your rights of objection and revocation, which both form part of the relevant measure under data protection legislation. Should no right of revocation be able to be granted for technical reasons, because the processing of the data is absolutely necessary for the technical operation of the website, we provide an undertaking that none of your data is saved by us.

Your other rights which you can claim regardless of the concrete measures can be found in the section "rights of the affected person" at the end of this data protection declaration. Here, the options of raising an objection and revoking consent are stated, regardless of the concrete measure and in accordance with the principle of transparency.

Responsible body / service provider

The responsible body under the General Data Protection Regulation (GDPR), the new German Federal Data Protection Act (BDSG), the data protection provisions of the state and the service provider as defined in the German Telemedia Act (TMG) is: 

Brähler ICS Konferenztechnik
International Congress Service AG
Wahlfelder Mühle 3
53639 Königswinter
GERMANY
Telephone number: +49 (0)2244 930 0
Email: info@braehler.com
Website: www.braehler.com
(see our legal notice for this purpose: https://www.braehler.com/impressum/).

Data protection officer

With Mr RA Oliver Niederjohann we have appointed an external data protection officer to ensure that sensitive data is handledin the correct manner.
Contact: datenschutz@braehler.com

Should you have any queries or comments concerning this data protection declaration or concerning data protection in general, please send these to the following email address: datenschutz@braehler.com

Legal basis for the processing of personal data

Should we obtain consent from the affected person in connection with the processing actions connected to personal data, the legal basis for the processing of personal data is Article 6 Paragraph 1 Letter a) GDPR.

When processing personal data which is necessary in order to fulfil a contract whose contracting party is the affected person, Article 6 Paragraph 1 Letter b) GDPR forms the legal basis. This also applies to processing procedures which are necessary to carry out pre-contractual measures.

Should processing of personal data be necessary in order to fulfil a legal obligation to which our company is subject, Article 1 Paragraph 1 Letter c) GDPR forms the legal basis of this.

In case that vital interests of the affected person or another natural person make the processing of personal data necessary, Article 6 Paragraph 1 Letter d) GDPR forms the legal basis of this.

Should the processing be necessary to safeguard a legitimate interest of our company or of a third party and should the interests, basic rights and basic freedoms of the affected person not outweigh the first mentioned interest, Article 6 Paragraph 1 Letter f) GDPR forms the legal basis for the processing.

Data deletion and duration of saving

The personal data of the affected person will be deleted or blocked, once the purpose of the saving no longer applies. Saving can also take place if this was mandated by the European or national legislator in ordinances, laws or other regulations under EU law to which the responsible body is subject. The data will also then be blocked or deleted if a retention provided for under the named norms expires, unless the necessity of continued saving of the data exists in order to conclude or fulfil a contract.

B. Processing actions which are relevant under data protection law

Gathering and processing of your data when you visit our website 

Description of the type and scope of the data processing

During simple use of the website for information purposes, ie where you do not register or otherwise provide us with information, we only gather the data which your browser automatically transmits to our server. The transfer of this data is necessary in order to display the website.

During this process, the following data is gathered:

  • Information concerning the browser type and version used
  • The operating system of the user
  • The Internet service provider of the user
  • The IP address of the user
  • Date and time of the access
  • Websites from which the system of the user came across our Internet site
  • Websites which are accessed by the system of the user via our website

Alongside the automated transfer of the data, this is also saved in the logfiles of our system. This data is not saved together with other personal data of the user.

Purpose of the data processing

The saving in logfiles takes place in order to ensure the functionality of the web site. In addition, the data enables us to ensure the security of our IT systems. The data is not evaluated for marketing purposes in this respect.

These purposes also represent our legitimate interest in the data processing in accordance with Article 6 Paragraph 1 Letter f) GDPR.

Legal basis

The temporary saving of the logfiles which are created automatically and are technically necessary takes place lawfully in accordance with Article 6 Paragraph 1 letter f) GDPR. The legitimate interest is demonstrated in the purpose of the processing.

Duration of the data processing

In case of the saving of the data in logfiles, this is the case after a maximum of seven days. Saving beyond this time is possible. In such a case, the IP addresses of the users will be deleted or disguised, so that it is no longer possible to carry out an assignment to the accessing client.

Objection and correction option

The recording of the data by means of the provision of the website and the saving in logfiles is essential for the operation of the website. Therefore, there is no option to raise an objection.

Email communication and contact form

Description of the type and scope of the data processing

In case of email communication via the email address shown on our website or in case of the submission of an enquiry via our contact form, we gather, process and save personal data such as surname, first name, title, address, email address and IP address of the user, as well as the date and time of the registration in order to provide the respective services, to get in touch and to process your matter, as well as in case of follow up queries.

For the processing of the data via a contact form, your consent is obtained during the sending process and reference is made to this data protection declaration. Alternatively, it is possible to get in touch via the email address which is provided. In such a case, the personal data of the user which is transferred by the email will be saved.

In such a case, the data will not be disclosed to third parties. The data will only be used for processing the conversation.

Purpose of the data processing

The processing of the personal data from the entry mask is only beneficial to us for the processing of the contact initiation. In case contact is made by email, the necessary legitimate interest is represented by the processing of the data.

The other personal data which is processed during the sending process enables us to prevent misuse of the contact form and to ensure the security of our IT systems. This represents our legitimate interest in the data processing.

Legal basis for the data processing

The legal basis for the processing of the data which is sent through an email is Article 6 Paragraph 1 Letter f) GDPR. Should the purpose of the email contact be the conclusion of a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Letter b) GDPR.

Duration of the saving

The data will be deleted once it is no longer necessary for the fulfilment of the purpose for which it was gathered. For the personal data from the entry mask of the contact form and the personal data which was sent by email, this is the case once the respective conversation with the user has been terminated. The conversation is at an end when it can be determined from the circumstances that the matter at hand has been fully and finally clarified. The personal data which is additionally gathered during the sending process is deleted at the latest after a period of seven days.

Objection and correction option


Should the user get in touch with us by email, he or she can object to the saving of his or her personal data at any time. In such a case, the conversation cannot be continued. All personal data which was saved in the contact initiation process will be deleted in such a case.

Security notice

We wish to point out that in case of making contact by email or by the contact form, the transfer of data via the Internet (for example in case of communication via email) can be subject to security loopholes and cannot be fully protected against third party access. Personal data provided in the course of email communication is generally transferred by your computer via the Internet via a non-secure connection. Information which you send by email in non-encrypted form can be read, saved and used for unauthorised purposes by third parties during the transfer process. Therefore we wish to advise you not to send any confidential information without using an encryption program.

Newsletter

Description of the type and scope of the data processing

Our Internet site provides the option of subscribing to a free-of-charge newsletter. During the newsletter registration process, the data from the entry mask is transferred to us. We use the service provider Newsletter2go GmbH for this purpose within the framework of order data processing (https://www.newsletter2go.de/datenschutz-uebersicht/).

The gathered data concerns the email address, joining date of the user and, optionally, the name (first name and surname) and gender.

For the processing of the data, your consent to the so-called double opt in procedure will be obtained during the registration process and reference will be made to this data protection declaration. The data will not be disclosed to third parties in connection with the data processing for the sending of newsletters. The data will only be used for sending the newsletter.

Legal basis for the data processing

The legal basis for the processing of the data following the registration for the newsletter by the user is article 6 Paragraph 1 Letter a) GDPR, should consent of the user be present.

Purpose of the data processing

The gathering of the email address of the user enables us to send the newsletter. The sending of the newsletter takes place once the user has registered on the website.

The gathering of other personal data during the registration process serves the process of preventing misuse of the services or of the email address which is used.

Duration of the saving

The data will be deleted once it is no longer necessary for the fulfilment of the purpose for which it was gathered. The email address of the user will then be saved for as long as the subscription to the newsletter is active. The personal data which is additionally gathered during the registration process generally are deleted after a period of seven days.

Objection and correction option

The subscription to the newsletter can be terminated by the user concerned at any time. For this purpose, a corresponding link can be found in every newsletter. The sending of the newsletter takes place once the user has registered on the website. By means of this, a revocation of the consent to the saving of the personal data which is gathered during the registration process is enabled.

We wish to inform you that we evaluate your user behaviour when we send the newsletter. For this evaluation, the sent emails contain so-called web beacons and tracking pixels which represent a pixel picture file which is saved on our website. The data is only gathered in the form of a pseudonym, ie the ID's are not combined with your other personal data and it is not possible to trace your person directly.

You can object to this tracking at any time by clicking on the separate link which is provided in every email or by informing us of your decision via another means of contact. The information will be saved for as long as your subscription to the newsletter continues. Following the de-registration, we only save the data anonymously and in statistical form.

Passing on of data to third parties

For the purpose stated above, your personal data may be passed on to the service provider which supports us for the above-mentioned purpose. We have selected this service provider carefully. This can be a technical service provider, a service provide which supports us with shipping or third party companies in connection with data processing (so-called data processing under an engagement, order data processor). Should we make use of order data processors, they are contractually obliged, in accordance with the regulations under data protection laws and in accordance with our instructions, to handle your data carefully and not to use it for their own purposes or forward it on to third parties.

Otherwise, the disclosure of your data to other third parties is only carried out by us if we are legally obliged to do so. Due to legal requirements, we are obliged in certain cases to forward personal data on to third parties. For example, this is the case if suspicion of commission of a crime or abuse of this website is present. In such a case, we are obliged to forward your data on to the competent prosecution authorities. Following an order by the competent bodies, we may therefore issue information in individual cases concerning this data, should this be necessary for purposes of criminal prosecution, defending against dangers,  fulfilment of the statutory duties of the German constitution protection authorities or the military counter intelligence service or in order to assert the intellectual property rights.

Duration of the saving

Your personal data will only be saved for as long as is necessary for the required purpose. Personal data will be deleted once it is no longer necessary for the fulfilment of the purpose of the saving.

Use of cookies

Type and scope of the data processing

Our website uses cookies. Cookies are text files which are saved in the Internet browser and/or by the browser in the computer system of the user. Should a user access a website a cookie can be saved in the operating system of the user. This cookie contains a character sequence which enables a clear identification of the browser next time the website is accessed.

We use cookies in order to make our website more user friendly. Certain elements of our website require the accessing browser to also be able to be identified after a page change.

In addition, so-called session cookies are used by the web analysis services named in this data protection declaration. Session cookies are small information units which a provider saves in the random access memory of the computer of the visitor. A randomly generated ID number is stored in a session cookie, a so-called session ID. In addition, a cookie contains information concerning its origin and saving period. These cookies cannot save any other data.

Purpose of the processing

The purpose of the use of technically required cookies is to simplify the use of websites for the users. Certain functions of our website cannot be provided without the use of cookies. For these, it is necessary for the browser to be recognised again also after a page change. This represents our legitimate interest in the data processing.

The user data which is gathered through the technically required cookies is not used to create user profiles.

The use of the analysis cookies takes place in order to improve the quality of our website and its contents. By means of the analysis cookies, we are informed as to how the website is being used and are able to continually optimise our service.

Legal basis for the processing

The legal basis for the processing of personal data by using cookies is Article 6 Paragraph 1 Letter f) GDPR, provided that consent is present. 

The legal basis for the processing of personal data by using cookies for analysis purposes is Article 6 Paragraph 1 Letter a) GDPR, provided that consent is present in this respect.

Duration of the saving, objection and correction option

Cookies are saved on the computer of the user and transferred from this to our website. Therefore, you as the user also have full control over the use of cookies. By changing the settings in your Internet browser, you can also de-activate or restrict the transfer of cookies. Cookies which have already been saved can be deleted at any time. This can also take place automatically. Should cookies be de-activated for our website, it may be the case that not all functions of the website will be able to be used in full from this time.

The session cookies which are used are deleted by the web analysis services, once you end the setting, ie when you close the browser window or access a different site.

Use of Google Analytics

Type and scope of the data processing

This website uses Google Analytics, a web analysis service of Google Inc ("Google"). Google Analytics uses so-called "cookies", text files which are saved on your computer and which enable an analysis of the use of the website by you. The information generated by the cookie concerning your use of the website is, as a rule, transferred to a server operated by Google in the USA and saved there. In case of the activation of IP anonymisation on this website, your IP address will however be shortened first by Google within Member States of the European Union or in other Member States of the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information in order to evaluate your use of the website, to compile reports concerning the website activities and to provide further services to the website operator connected to the use of the website and use of the Internet.

The IP address which is transferred by your browser within the framework of Google Analytics will not be combined with other data by Google.

This website uses Google Analytics with the "_anonymizeIp()“ extension. By means of this, IP addresses are further processed in shortened form and it is not possible to trace any person. Should your person be traced by the data gathered in relation to you, this will be immediately excluded and the personal data will then be deleted immediately.

Purpose

We use Google Analytics in order to analyse the use of our website and so that we can continually improve it. By means of the statistics which are generated, we can improve our service and make it more interesting to you. This represents our legitimate interest.  For the exceptional cases in which personal data is transferred to the USA, Google has agreed to abide by the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Information concerning the third party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms and conditions of use: https://www.google.com/analytics/terms/de.html, data protection overview: https://www.google.com/intl/de/analytics/learn/privacy.html, and data protection declaration: https://www.google.de/intl/de/policies/privacy

Legal basis,

The legal basis for the use of Google Analytics is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR.

Objection and correction option

You can prevent the saving of the cookies by means of a corresponding setting of your browser software. However we wish to point out that in such a case, you may not be able to fully use all functions of this website. In addition, you can also prevent the recording of the data created by the cookie which relates to your use of the website (including your IP address) by Google, as well as the processing of this data by Google by downloading and installing the browser plugin which can be obtained via the following link. https://tools.google.com/dlpage/gaoptout?hl=de

To prevent Universal Analytics tracking across devices, you must opt-out on all systems you use. If you click here, the opt-out cookie will be set: Disable Google Analytics

Route planner Google Maps

Type and scope of the data processing

We use Google Maps with our website, in order to display interactive maps and create routefinders. Google Maps is a map service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA ("Google"). By means of the use of Google Maps, information concerning the use of this website, including your IP address and the (start) address entered within the framework of the route planner function can be transferred to Google in the USA. Should you access a website of our Internet presence which contains Google Maps, your browser creates a direct connection to the servers of Google. The content of the map is transferred by Google directly to your browser and is incorporated by it into the website. We do not have any control over the extent of the data which is gathered by Google in this way. According to our knowledge, this concerns the following data as a rule:

  • IP address,
  • Internet address or URL of the accessed website,
  • Date and time of the visit to the website concerned,
  • within the framework of the route planning, the (start) address entered.

We have no influence over the further processing and use of the data, in particular the duration of the saving of the data above by Google and therefore cannot accept any responsibility in this respect.

Further information concerning the purpose and scope of the data gathering and its processing by the plugin provider can be found in the data protection declarations of the provider. Here, you can also find additional information concerning your rights and settings options in this respect in order to protect your private sphere: https://www.google.de/intl/de/policies/privacy Google also processes your personal data in the USA and has agreed to abide by the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Purpose of the use of Google Maps

The use of Google Maps is intended to facilitate use for you by showing you the location of our company digitally and making navigation easier if you wish to visit us. By means of Google Maps, we can display an interactive map directly in the website and this enables you to use the map function comfortably.

Legal basis

We wish to point out that the data referred to above is not gathered and processed by us, rather this is undertaken by Google. As a mere alternative, we base the use of Google Maps on Article 6 Paragraph 1 Letter f) GDPR. The legitimate interest in the use of Google Maps is the display of the location of the company and providing the customer with a simple navigation option.

Objection and correction option

Should you not wish for Google to gather, process or use data relating to you via our Internet presence, you can de-activate Javascript in your browser settings. However in such a case, you cannot use the map display. You have a right of objection against the creation of these user profiles, whereby you need to contact Google in order to claim this.

Social plugins

Type and scope of the data gathering

We currently use the following social media plugins: Facebook, Twitter, Xing and YouTube. Thereby we use the so-called two click solution. This means that when you visit our site, no personal data is passed on to the provider of the plugins at first as a rule. You can recognise the provider of the plugin via the marking in the box above its initial letters or from the logo. We provide you with the option of communicating with the provider of the plugin directly via the button. Only when you click on the marked field and activate it as a result, does the plugin provider receive notification that you have accessed the corresponding website of our online presence. In addition, the following information is transferred:

  • IP address,
  • Date and time of the access
  • Time zone difference to GMT
  • Content of the request (concrete page)
  • Access status / HTTP status code
  • Respective data quantity transferred
  • Website from which the request originates
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

In the case of Facebook and Xing, according to the information issued by the respective providers in Germany, the IP address is anonymised immediately after being gathered. By means of the activation of the plugin, personal data is transferred from you to the respective plugin provider and saved there (in the USA in case of American providers). As the plugin provider carries out the data gathering via cookies in particular, we would recommend that you delete all cookies via the security settings of your browser prior to clicking on the greyed out box.

We have no influence over the data which is gathered and the data processing procedures and we are not aware of the full extent of the data gathering, the purposes of the processing and for how long the data is saved. We also have no information concerning the deletion of the gathered data by the plugin provider.

Purpose of the data gathering

The plugin provider saves the data gathered in relation to you as use profiles and uses these for the purposes of advertising, market research and/or tailoring the design of its website to customer requirements. Such an evaluation takes place in particular (also for users who are not logged in) in order to display advertising which is tailored to customer requirements and in order to inform other users of the social network of your activities on our website. Via the plugin, we provide you with the option of interacting with the social networks and other users, so that we can improve our service and make it more interesting to you as a user.

The passing on of the data takes place regardless of whether you hold an account with the plugin provider and are logged in or not. Should you be logged in with the plugin provider, your data gathered from us will be assigned directly to the account which you hold with the plugin provider. Should you click on the activated button and, for example, provide a link to the page, the plugin provider also saves this information in your user account and notifies your contacts of this publicly. We would recommend that you regularly log out after using a social network, however in particular prior to activating the button, as by doing so you can prevent the assignment to your profile with the plugin provider.

Further information concerning the purpose and scope of the data gathering and its processing by the plugin provider can be found in the data protection declarations of these providers. Here, you can also find additional information concerning your rights and settings options in this respect in order to protect your private sphere.

Addresses of the respective plugin providers and URL with their data protection notices:

a)

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php; further information concerning data gathering: https://www.facebook.com/help/186325668085084, https://www.facebook.com/about/privacy/your-info-on-other#applications and https://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has agreed to abide with the EU-US Privacy Shield,  https://www.privacyshield.gov/EU-US-Framework.

b)

You Tube, Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has agreed to abide with the EU-US Privacy Shield,  https://www.privacyshield.gov/EU-US-Framework.

c)

Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy, Twitter has agreed to abide with the EU-US Privacy Shield,  https://www.privacyshield.gov/EU-US-Framework.

d)

Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; https://www.xing.com/privacy.

Legal basis for the data gathering

The legal basis for the use of the plugins is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR

Objection and correction option

You have a right of objection against the creation of these user profiles, whereby you need to contact the respective plugin provider in order to claim this.

We would recommend that you regularly log out after using a social network, however in particular prior to activating the button, as by doing so you can prevent the assignment to your profile with the plugin provider.

C. Rights of the affected person

Should personal data relating to you be processed, you are an affected person in accordance with the GDPR and you have the following rights in relation to the responsible body:

Right of information

You can request confirmation from the responsible body as to whether personal data which relates to you is being processed by us.

Should such processing exist, you can request the following information from the responsible body:

  • the purposes for which the personal data is being processed;
  • the categories of personal data which are being processed;
  • the recipients or categories of recipients in relation to whom the personal data concerned has been disclosed or will be subsequently disclosed;
  • the planned duration of the saving of the personal data relating to you or, should concrete information in this respect not be possible, the criteria for determining the duration of the saving;
  • the existence of a right to have the personal data relating to you corrected or deleted, a right to have the processing by the responsible body restricted or the right to raise an objection to this processing;
  • the existence of the right to complain to a supervisory authority;
  • all available information concerning the origin of the data, should the personal data not have been gathered from the affected person;
  • the existence of automated decision making, including profiling in accordance with Article 22 Paragraphs 1 and 4 GDPR and, at least in these cases, detailed information concerning the involved logic and the breadth and intended effects of such processing for the affected person.

You have the right to request information as to whether the personal data relating to you is being transferred to a third country or an international organisation. In this context, you can request to be informed of the suitable guarantees in accordance with Article 46 GDPR in connection with the transfer.

Right of correction

You have the right of correction and/or completion in relation to the responsible body, should the personal data which is being processed and which concerns you be incorrect or incomplete. The responsibly body must carry out the correction immediately.

Right to have the processing restricted

Under the following conditions, you can request that the processing of the personal data relating to you be restricted:

  • should you dispute the correctness of the personal data relating to you for a period of time which enables the responsible body to check the correctness of the personal data;
  • the processing is unlawful and you reject the deletion of the personal data and instead request that the use of the personal data be restricted;
  • the responsible body no longer requires the personal data for the purposes of the processing, however you require this in order to assert, exercise or defend legal claims or
  • you have raised an objection to the processing in accordance with Article 21 Paragraph 1 GDPR and it is not yet clear whether the legitimate reasons of the responsible body outweigh your reasons.

Should the processing of the personal data relating to you be restricted, this data, regardless of its saving, may only be processed with your consent or in order to assert, exercise or defend legal claim or to protect the rights of another natural or legal person or for reasons connected to an important public interest of the EU or a Member State.

Should the restriction of the processing have been carried out under the conditions above, you will be informed by the responsible body before the restriction is lifted.

Right of deletion

Deletion obligation

You can request from the responsible body that the personal data relating to you be immediately deleted and the responsible body is obliged to delete this data immediately, should one of the following reasons be present:

  • The personal data relating to you is no longer necessary for the purpose for which it was gathered or otherwise processed.
  • You revoke your consent on which the processing in accordance with Article 6 Paragraph 1 Letter a) or Article 9 Paragraph 2 Letter a) GDPR is based and there is no other legal basis for the processing.
  • You raise an objection to the processing in accordance with Article 21 Paragraph 1 GDPR and there are no legitimate reasons for the processing which take priority or you raise an objection to the processing in accordance with Article 21 Paragraph 2 GDPR.
  • The personal data relating to you has been processed unlawfully.
  • The deletion of the personal data relating to you is necessary to fulfil a legal obligation under EU law or the law of the Member States to which the responsible body is subject.

The personal data relating to you was gathered in relation to the services offered by the information company in accordance with Article 8 Paragraph 1 GDPR.

Information to third parties

Should the responsible body have made the personal data relating to you public and should be obliged to delete this in accordance with Article 17 Paragraph 1 GDPR, then taking the available technology and implementation costs into account, it will take reasonable measures, also of a technical nature in order to inform the responsible body for the processing which processes the personal data that you as the affected person have requested from it the deletion of all links to this personal data or of copies or reproductions of this personal data.

Exceptions

The right of deletion does not apply, should the processing be necessary:

  • to exercise the right to freedom of expression of opinions and information;
  • to fulfil a legal obligations which requires the processing under EU law or the law of the Member States to which the responsible body is subject or in order to carry out a task which is in the public interest or which takes place by means of the exercising of public powers which have been assigned to the responsible body;
  • for reasons in the public interest in the area of public health in accordance with Article 9 Paragraph 2 Letters h) and i) and Article 9 Paragraph 3 DGPR;
  • for archiving purposes, scientific or historical research or for statistical purposes in accordance with Article 89 Paragraph 1 GDPR which are in the public interest and the right named under section a) being expected to make the attainment of the objectives of this processing impossible or is expected to seriously hinder this or
  • in order to assert, exercise or defend legal claims.

Right of notification

Should you have claimed the right of correction, deletion or restriction of the processing in relation to the responsible body, it is obliged to notify all recipients to whom it disclosed the personal data relating to you of the correction or deletion of the data or the restriction to the processing of the data, unless this is shown to be impossible or only possible with disproportionate costs and effort.

You have the right to be informed of these recipients by the responsible body.

Right of data portability

You have the right to receive the personal data relating to you which you have provided to the responsible body in a structured, up-to-date and machine readable format. You also have the right to transfer this to another responsible body, without hindrance on the part of the responsible body to whom the personal data was provided, should:

  • the processing be based on consent in accordance with Article 6 Paragraph 1 Letter a) GDPR or Article 9 Paragraph 2 Letter a) GDPR or on a contract in accordance with Article 6 Paragraph 1 Letter b) GDPR and
  • the processing takes place with the assistance of automated procedures.

When exercising this right, you also have the right to ensure that the personal data relating to you is transferred from one responsible body directly to another responsible body, provided that this is technically possible. Freedoms and rights of other persons must not be impaired as a result.

The right of data portability does not apply to processing of personal data which is necessary to carry out a task which is in the public interest or takes place in the exercising of public powers which have been assigned to the responsible body.

Right of objection

You have the right at any time for reasons connected to your specific situation to raise any objection to the processing of the personal data relating to you which takes place under Article 6 Paragraph 1 Letter e) or f) GDPR; this also applies to any profiling based on these provisions. Please address your objection to our data protection officer.

The responsible body will no longer process the personal data relating to you, unless it can prove mandatory protectable reasons for the processing which outweigh your interests, rights and freedoms or the processing serves the purpose of asserting, exercising or defending legal claims.

Should the personal data relating to you be processed in order to carry out direct advertising, you have the right to raise an objection at any time to the processing of the personal data relating to you for the purposes of such advertising; this also applies to the profiling, should it be connected to such direct advertising.

Should you object to the processing for purposes connected to direct advertising, the personal data relating to you will no longer be processed for these purposes.

In connection with the use of services of the information company, you have the option, regardless of Directive 2002/58/EC to exercise your right of objection by means of automated procedures where technical specifications are used.

Right to revoke the declaration of consent under data protection laws

You have the right to revoke your declaration of consent under data protection laws at any time. By means of the revocation of the consent, the lawfulness of the processing which took place prior to the consent will not be affected.

 

Automated decision making in the individual case, including profiling

You have the right not to be subject to a decision which is based exclusively on automated processing, including profiling, which has legal effect over you or which otherwise impairs you in a similar manner. This does apply if the decision:

  • is necessary to conclude or fulfil a contract between yourself and the responsible body;
  • is permitted under legal regulations of the EU or the Member States to which the responsible body is subject and these legal regulations contain reasonable measures in order to safeguard your rights and freedoms, as well as your legitimate interests or
  • takes place with your express consent.

However, these decisions may not be based on special categories of personal data under Article 9 Paragraph 1 GDPR, unless Article 9 Paragraph 2 Letter a) or g) applies and reasonable measures have been taken to protect the rights and freedoms and your legitimate interests.

In relation to the first and third exception, the responsible body will take reasonable measures in order to safeguard the rights and freedoms and your legitimate interests, whereby as a minimum this includes the right to have a person on the part of the responsible body intervene, to set out one's own position and to contest a decision.

Right to complain to a supervisory authority

Regardless of legal remedies elsewhere under administrative laws or before a court, you have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, your place of work or the location of the alleged breach, should you be of the opinion that the processing of the personal data relating to you breaches the GDPR.

The supervisory authority to which the complaint was issued will inform the complainant of the status and outcome of the complaint, including the option of legal remedy before a court in accordance with Article 78 GDPR.

D. Data protection in case of hyperlinks to third party websites

Should you discover hyperlinks on our website which forward you directly to the website of other providers (for example can be recognised by the change in URL), we cannot accept any responsibility for the confidential treatment of your data. This is because we have no control as to whether these companies comply with the data protection regulations. In respect of the handling of your personal data by these companies, please refer to their websites directly.

E. Data security

We use technical and organisational measures in order to protect personal data relating to you which is created or gathered, in particular against accidental or intentional manipulation, loss, destruction or attacks by unauthorised persons. Our security measures are continually improved in line with technical developments.