2. Definitions
Personal data is any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
3. Legal basis of processing
If we obtain your consent for the processing of personal data, Article 6(1)(1)(a) of the European General Data Protection Regulation (GDPR) serves as the legal basis.
The processing of personal data required for the fulfilment of a contract with you is based on Article 6(1)(1)(b) GDPR. This also applies to processing operations that are necessary in order to take steps prior to entering into a contract.
If the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, this is done within the scope of Article 6(1)(1)(c) GDPR.
If the processing is necessary to protect a legitimate interest of ourselves or a third party, and this legitimate interest is not overridden by your interests or fundamental rights and freedoms, Article 6(1)(1)(f) GDPR serves as the legal basis for the processing. If data is stored on your device, e.g. in the form of cookies (see also no. 5.2 and 5.6), the admissibility of the data usage is also pursuant to section 25 (1) of the Telecommunications-Telemedia Data Protection Act (TTDSG) (Consent) and in cases where storage is necessary pursuant to section 25 (2) no. 1 (Communication process) and no. 2 (Provision of a telemedia service) TTDSG. The legitimate interest of our company usually lies in the provision of the services due from us and/or ongoing optimisation of our services and presentations.
4. Erasure of data and length of time stored
Your personal data will be erased or blocked as soon as the purpose for which it is stored no longer exists. Personal data may also be stored if this is required by the European or national legislator in EU regulations, laws or other legislation. The data will also be blocked or erased if a retention period required by the standards referred to expires, unless the continued storage of the data is necessary for entry into a contract or performance of a contract.
5. Collection of personal data
We generally do not collect or use any personal data when you visit our website. This only happens as far as this is necessary for the provision of a functional website as well as our content and services. Our users' personal data is collected and used regularly only after they have given their consent. It is also processed when the processing of data is allowed by statutory regulations.
In the following we would like to inform you about the nature, scope and purpose of our data processing on this website:
5.1 Server log files
Whenever our website is accessed, the user's login data required to access the website and to measure the use is stored on our server in a log file, which your browser sends to us automatically. The information collected and stored:
The log files are stored for the following purposes:
The legal basis for the data processing is provided by Article 6(1)(1)(f) GDPR. Our legitimate interest is established by the aforementioned data collection purposes. Under no circumstances do we collect data in order to draw immediate conclusions about your person. We do not combine this data with other data sources.
5.2 Necessary Cookies
Whenever our website is accessed, cookies are stored on the user's computer. Cookies are small text files stored in a designated file directory of the user's computer. This file is used to identify the user's computer for the duration of the session. These cookies cannot be used to manipulate the user's device and can be deleted manually at any time - most easily in the browser.
You can adjust the settings in your internet browser so that cookies are rejected or only accepted after confirmation. The purpose of the cookies, in this case session cookies, is to enhance the function of our internet offering and to make it as easy as possible for you to use. Please note that if you reject cookies, you will limit the functionality of our application.
The processing of data with cookies is necessary for the aforementioned purposes to protect our legitimate interests as well as the legitimate interests of third parties pursuant to Article 6(1)(1)(f) GDPR and section 25 (2) TTDSG.
5.3 Usage data
We collect and use personal data from you on the basis of Article 6(1)(1)(b) GDPR, if applicable in conjunction with section 25 (2) no. 2 TTDSG, as far as this is necessary to enable the use of our website (usage data).
5.4 Data disclosed when you contact us
If you send us an enquiry via the contact form, we will store the data entered on the form, or via the e-mail address provided for contact purposes, including the contact details disclosed by you, solely for the purpose of replying to the respective enquiry and for follow-up enquiries.
We will not share this data with third parties without your consent. The data is used on the basis of Article 6(1)(1)(b) GDPR in the processing of our request.
5.5 Tracking measures
Tracking tools and the cookies placed in this connection are used on the basis of Article 6(1)(1)(a) GDPR / section 25 (1) TTDSG with your consent that can be withdrawn at any time. In using these tracking measures, we want to ensure that our website is tailored to the needs of users and its continuous optimisation (through statistical analyses).
6. Newsletter
This website uses Rapidmail to send newsletters. The provider is rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany. Rapidmail is a service with which the sending of newsletters can be organised and analysed. The data you enter for the purpose of newsletter subscription will be stored on Rapidmail's servers in Germany. If you do not want an analysis by Rapidmail, you must unsubscribe from the newsletter. For this purpose, we provide an appropriate link in every newsletter message. You can also unsubscribe from the newsletter directly on the website. Data analysis by Rapidmail: For analysis purposes, e-mails sent with Rapidmail contain a so-called "tracking pixel" that connects to Rapidmail's servers when the e-mail is opened. In this way it can be determined if a newsletter message has been opened. Furthermore we can determine with the help of Rapidmail whether and which links are clicked in the newsletter message. All links in the e-mail are so-called tracking links with which your clicks can be counted.
For more information on Rapidmail's analysis functions, please follow this link: https://de.rapidmail.wiki/kategorien/statistiken/. Legal basis: The data is processed exclusively on the basis of your consent (Article 6(1)(1)(a) GDPR. You can withdraw this consent at any time. The lawfulness of the processing that has already taken place will not be affected by the withdrawal. Retention period: The data disclosed to us for the purpose of newsletter subscription will be stored by us until you unsubscribe from the newsletter. The data disclosed to us will be deleted from our servers as well as from the Rapidmail servers after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this. For more information, please refer to Rapidmail's data security information at: https://www.rapidmail.de/datensicherheit. Conclusion of a contract data processing agreement: In an agreement concluded with Rapidmail, we have placed Rapidmail under obligation to protect our customers' data and not to disclose it to third parties. This agreement can be viewed at the following link: https://de.rapidmail.wiki/files/adv/muster-auftragsdatenverarbeitung.pdf
In order to add you to our e-mail distribution list, we need your confirmation or consent that you are the owner of the e-mail address stated and that you consent to receiving the messages.
For the registration for our newsletter we use the double-opt-in process. This means that after you have registered, we will send you an e-mail to the e-mail address specified in which we will ask you to confirm that you would like to be sent the newsletter. If you do not confirm your registration within 7 days, your information will be deleted. The data collected will be used exclusively to inform you about events and presentations and to document your consent. We also store your IP addresses used and the times of registration and confirmation. The purpose of the process is to verify your registration and to clear up any possible misuse of your personal data.
It is not disclosed to third parties.
This consent is given voluntarily. The legal basis for your consent is provided by Article 6(1)(1)(a) GDPR.
Your consent to the sending of the newsletter can be withdrawn at any time with effect for the future. Your aforementioned data will then be deleted without delay and you will receive no further messages.
7. Your rights
Insofar as we process your personal data on our website, you are the "data subject" within the meaning of GDPR. You have the following rights:
7.1 Right to information
You can ask us to confirm whether we are processing your personal data. If we are processing your personal data, you can ask for the following information from us:
You also have the right to ask for information on whether your personal data is transferred to a third country or to an international organization. In this connection, you can ask to be informed of the suitable safeguards relating to the transfer pursuant to Article 46 GDPR.
7.2 Right to rectification
You have the right to the rectification and/or completion of your personal data if your processed data is incorrect or incomplete. If this is the case, we will make the correction without delay.
7.3 Right to restriction of processing
You have the right to ask for the restriction of the processing of your personal data under the following conditions, if:
If you have asked for the restriction of the processing of your personal data, this data will, with the exception of storage, only be processed with your consent or for the enforcement, exercising or defence of legal rights or for the protection of the rights of another natural person or legal entity or for reasons of substantial public interest of the European Union or of a Member State. You will be informed by us before the restriction is lifted.
7.4 Right to erasure
You can ask us to erase your personal data immediately. We are obliged to erase this data immediately if one of the following reasons applies:
If we have published your personal data and are accordingly required to delete it pursuant to Article 17(1) GDPR, we will take appropriate measures, taking into account the available technology and implementation costs, to inform the persons responsible for the data processing that you have asked them to delete all links to this personal data or copies or replications of this personal data.
Your right to erasure does not exist if the processing is necessary:
7.5 Right to be informed
If you have exercised your right to rectification, erasure or restriction of processing, we are obliged to inform all recipients to whom your personal data have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves this proves to be impossible or involves unreasonable cost. You have the right to be informed about these recipients.
7.6 Right to data portability
You have the right to receive any personal data that you may have disclosed to us in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without any hindrance us, if
Furthermore, you have the right to arrange for your personal data to be transferred directly by us to another controller, if this is technically feasible. The rights and freedoms of other persons will not be affected by this.
The right to data portability shall not apply to any processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us. With regard to the offering on our website, we do not currently believe that data subject to the right to data portability is processed.
7.7 Right to object
You have the right to object at any time for reasons relating to your particular situation to the processing of your personal data which is performed on the basis of Article 6(1)(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. We will no longer process your personal data, unless we can provide proof of compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the enforcement, exercising or defence of legal claims. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning yourself for the purpose of such advertising; this also applies to profiling, if it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data will no longer be processed for such purposes. In the context of the use of information society services, and notwithstanding Directive
2002/58/EC, you can exercise your right to object by automated means using technical specifications.
7.8 Right to withdraw consent required under data protection law
You have the right to withdraw your consent required under data protection law at any time. The lawfulness of the processing that has taken place based on the consent up until the withdrawal will not be affected by the withdrawal.
7.9 Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning yourself or similarly significantly affects you. We do not carry out such processing.
7.10 Right to complain to a supervisory authority
Without prejudice to any other rights of appeal, you have the right to complain to a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged breach, if you are of the view that the processing of your personal data is in breach of GDPR.
8. Responsibility for linked content
On our website we may also use links to websites of other providers. This privacy policy does not apply in this respect. If personal data is collected, processed or used when using the websites of these other providers, please note the information on data protection of the respective providers. We are not responsible for their privacy practices.
9. Disclosure of personal data to third parties
Your personal data will only be stored on our servers or on servers used on our behalf. Access to and use of the data is only possible for authorised employees or service providers and is also limited to the data required to perform the respective task. Your data will not be transmitted to third parties without your consent. Data is not transferred to third countries (countries outside the European Economic Area - EEA), unless otherwise stated in this privacy policy. There is also no intention to transfer data to third countries in the future.
10. Data security
To protect your personal data, we have taken technical and organisational measures to ensure that your data is protected against accidental or intentional loss, destruction or manipulation as well as access by unauthorised persons. Our protective measures are reviewed regularly and adjusted to take into account technological progress.
11. Data Protection Officer
If you have any questions concerning the processing of your personal data, please contact our Data Protection Officer:
12. Changes to the privacy policy
We reserve the right to change this privacy policy at any time as necessary and also taking into consideration the data protection regulations applicable at the time of the change.
Date: April 2022
Sous réserve de modifications techniques sans préavis.