Data Privacy Statement"Controller" within the meaning of the General Data Protection
Regulation (GDPR) and other data protection laws and regulations
is:Primoforti GmbH & Co. KG
Max-Stromeyer-Str. 116
78467 Konstanz / GERMANY(„NIC.VOTING“)
The Data Protection Officer of NIC.VOTING can be contacted at
privacy[at]nic[dot]voting

1. General Information on Data Processing
1.1. Processing of Personal Data for the Purpose ofContract Execution
NIC.VOTING processes personal data exclusively to the extent
required for establishing, performing and executing the contractual
relationship with the customer and for performing the related billing
tasks.
These data are the domains, the names and addresses of the domain
holders, of the administrative and the technical contacts and of thezone administrator. In addition, phone and fax numbers as well as thee​mail addresses of the technical contact and of the zone administrator

are stored.
The collected personal data will be used exclusively for theaforementioned purposes and only to the extent required to achievethese purposes. The data will not be used for advertising, for advisingcustomers or for market research.

1.2. Processing of Usage Data for the Purpose ofProviding the NIC.VOTING Website
In order to analyse the usage behaviour of different (user) groups,NIC.VOTING temporarily collects statistical data using the "web​whois" (domain query). In this context, the answers of the users to
the listed questions will also be stored. NIC.VOTING uses thisinformation for performing random checks to verify whether the party
submitting a query is authorised to do so and for the purpose ofstatistical evaluation. NIC.VOTING will delete the data collected forthis purpose upon completion of evaluation, but no later than threemonths after the collection of such data.

1.3. Transfer of Personal Data
Data of the domain holders are published via the "whois" service.
Publication of the data in this database is necessary for registeringand using the domain and is performed in accordance with relevant
data protection legislation.

1.4. Legal Basis for the Processing of Personal Data
Article 6(1) (a) of the GDPR is the legal basis as far as theprocessing of personal data is concerned for which NIC.VOTING
obtains your, i.e. the data subject's, consent.

Article 6(1) (b) of the GDPR is the legal basis as far as theprocessing of personal data is concerned that is necessary for theperformance of a contract to which you as the data subject are aparty. The same applies to the processing of data which isnecessary for taking measures that are required prior to entering
into a contract.
Article 6(1) (c) of the GDPR is the legal basis as far as theprocessing of personal data is concerned that is necessary forcompliance with a legal obligation to which NIC.VOTING is subject.
Article 6(1) (d) of the GDPR is the legal basis as far as theprocessing of personal data is concerned that is necessary in orderto protect your, i.e. the data subject's, vital interests or those ofanother natural person.
Article 6(1) (f) of the GDPR is the legal basis as far as the processingof personal data is concerned for the purpose of safeguarding thelegitimate interests of NIC.VOTING or that of a third party, except
where such interests are overridden by your, i.e. the data subject's,interests or fundamental rights and freedoms.

1.5. Deletion of Data and Duration of Retention
Your personal data will be deleted or blocked as soon as the purposeof retention of such data no longer applies. Data may also be stored if
such retention is provided for by European or national legislation in
European Union laws, regulations or other legal provisions to which
NIC.VOTING is subject. The data will also be deleted or blocked whena storage period specified in the mentioned laws and regulations

expires, except where further retention of the data is necessary for theconclusion of a contract or for fulfilling a contractual obligation.

2. Provision of the Website and Creation of Log Files
Each time NIC.VOTING's web pages are accessed, the system
automatically collects data and information of the accessing
computer system. In this context, the following data is collected:
 ​Information about the browser type and the version used ​ ​Theuser's operating system ​ ​The user's Internet service provider ​The user's IP address ​ ​Date and time the pages are visited ​
Websites from which the user's system is referred to our website ​Websites which the user's system accesses via our website.
The log files contain IP addresses and other data that might enablethe user to be identified. This could be the case, e.g., if the link to thewebsite from which the user is referred to our website or the link to
the website to which the user exits our website contains personaldata.
Such data is also stored in the log files of the system. However, thisdata is not stored together with other personal data of the user.
The temporary storage of the IP address by the system is necessary
to enable the website to be made available on the computer of theuser. For this purpose, the IP address of the user must be retained forthe duration of the session.
The data in the log files is stored to ensure proper functioning of thewebsite. Moreover, this data is used to optimise NIC.VOTING's
website and to ensure the security of the IT systems. The data will not
be used for advertising, for advising customers or for market
research.
The data and the log files are stored on the basis of Article 6(1) (f) ofthe GDPR.
The data will be deleted as soon as their retention is no longer
required to achieve the intended purpose of their collection. As far as
the collection of data for the purpose of making the website available
is concerned, this is the case as soon as the corresponding session isterminated. As far as the storage of data in log files is concerned, thisis the case after a maximum period of seven days. Storage beyond
these limits is possible. In this case, the IP addresses of the users will
be deleted or disassociated, so that the accessing client can no longer
be identified.
The collection of the data for making the website available andstorage of the data in log files is essential for the purpose ofoperating our website. For this reason, the user cannot object tosuch collection and storage.

3. Cookies
NIC.VOTING's website uses so​called cookies in various places. Inthe cookies, the following data are stored and transmitted:
 ​Language settings ​ ​Items in a shopping basket ​ ​Log​ininformation. Cookies are used to make the NIC.VOTING web pages
more user​ friendly. The legal basis for the processing of personal
data using cookies is Article 6(1) (f) of the GDPR.
Cookies are stored on the computer of the user and from theretransmitted to NIC.VOTING's website. Users may change the settingsin their Internet browser so as to deactivate or restrict thetransmission of cookies. Cookies that have been stored may bedeleted at any time. This can also be effected in an automated way. Ifcookies are deactivated for NIC.VOTING's website, it may no longer
be possible to use all functions to their full extent.

4. Web Analysis
The website of NIC.VOTING uses Piwik, an open source software
for preparing statistical analyses of visits to the website. This does
not involve the creation of personal user profiles, but only thecollection of anonymous measurement data. The purpose of thisweb analysis is to improve the quality of our website.
Piwik works with cookies (see above), which allows an analysis ofwebsite usage. The information about NIC.VOTING website usage
generated by means of these cookies is stored on the servers of Piwik
PRO GmbH in Germany. Users of our website may technically preventthe execution of the web analysis by deactivating JavaScript andcookies in their web browsers. For details about thecorresponding settings to be made, please refer to the productdescriptions and instructions of the respective browser vendors.
The legal basis for data processing in this context is Article 6(1 (a)of the GDPR.

5. Security
NIC.VOTING has technical and organisational security measures inplace to protect your personal data administered by us from accidental
or intentional manipulation, loss, destruction or access byunauthorised persons. We continuously improve our security
measures in line with technological evolution.

6. Rights of the Data Subject
If NIC.VOTING processes your personal data, you are a data subject
within the meaning of Article 4(1) of the GDPR, which gives you thefollowing rights vis​​à​vis NIC.VOTING:

6.1. Right of Access
You have the right to obtain from NIC.VOTING confirmation as towhether or not personal data concerning you are being processed.
Where that is the case, you are entitled to obtain the following
information from NIC.VOTING: ​The purposes of processing; ​ ​The categories of personal dataprocessed by NIC.VOTING; ​ ​The recipients or categories ofrecipients to whom the personal data have been or will be disclosed; ​(Where possible), the envisaged period for which the personal
data will be stored, or, if not possible, the criteria used to determinethat period; ​The existence of the right to request rectification or deletion of
personal data concerning you, the right to restrict processing byNIC.VOTING or the right to object to such processing; ​ ​The
existence of the right to lodge a complaint with a supervisory
authority; ​ ​Where the personal data are not collected from yourself,
any available information as to their source; ​ ​The existence ofautomated decision​making, including profiling (as referred to in Article
22(1) and (4) of the GDPR) and, at least in those cases, meaningful
information about the logic involved, as well as the significance andthe envisaged consequences of such processing for you as the data
subject. You have the right to be informed on whether or not yourpersonal data are transferred to a third country or to an internationalorganisation. In this context, you are entitled to be informed of theappropriate safeguards regarding the transfer pursuant to Article 46of the GDPR.

6.2. Right to Rectification
You have the right to request NIC.VOTING to rectify and/or
complete any inaccurate personal data concerning you.

6.3. Right to Erasure
You have the right to request NIC.VOTING to delete your personal
data without undue delay. NIC.VOTING will be obliged to delete yourdata without undue delay if one of the following reasons applies: ​a. Your personal data are no longer necessary for the purposes
for which they were collected or otherwise processed; ​ ​b. You
withdraw your consent on which the processing is based according toArticle 6(1) (a), or Article 9(2) (a) of the GDPR, and there is no otherlegal basis for the processing; you object to the processing pursuant
to Article 21(1) of the GDPR and there are
no overriding legitimate grounds for the processing, or you object tothe processing pursuant to Article 21(2) of the GDPR; ​ ​c. Your
personal data have been unlawfully processed; ​ ​d. The personal
data have to be erased for compliance with a legal obligation in Union
or Member State law to which NIC.VOTING is subject; ​ ​e. Your
personal data have been collected in relation to offered services of theinformation society referred to in Article 8(1) of the GDPR. If
NIC.VOTING has made the personal data public and is obliged
pursuant to Article 17(1) of the GDPR to delete the personal data,NIC.VOTING, taking account of available technology and the cost ofimplementation, will take reasonable steps, including technicalmeasures, to inform controllers which are processing the personal
data that you as the data subject have requested that these controllers
erase any links to your personal data, copy or replication of this data.
The right to erasure does not exist if the data processing is required ​a. For exercising the right of freedom of expression andinformation; ​ ​b. For compliance with a legal obligation which
requires processing in accordance with Union or Member State law towhich NIC.VOTING is subject or for the performance of a task carriedout in the public interest or in the exercise of official authority vested inNIC.VOTING; ​ ​c. For reasons of public interest in the area of publichealth (Articles 9(2) (h) and (i) and 9(3) of the GDPR); ​ ​d. For
archiving purposes in the public interest, scientific or historicalresearch purposes or statistical purposes in accordance with Article
89(1) of the GDPR in so far as the right referred to under (a) is likely torender impossible or seriously impair the achievement of theobjectives of such processing; ​ ​e. For the establishment, exercise ordefence of legal claims.

6.4. Right to Restriction of Processing
You have the right to demand restriction of processing of yourpersonal data if one of the following applies: ​a. If you contest the accuracy of your personal data, for a period
enabling NIC.VOTING to verify the accuracy of the personal data; ​b. The processing is unlawful and you decline erasure of yourpersonal data, requesting restriction of their use instead; ​ ​c.
NIC.VOTING no longer needs the personal data for the purposes ofthe processing, but you need such data to assert, exercise or defend
legal claims; ​ ​d. You have objected to processing pursuant to Article
21(1) of the GDPR pending the verification whether the legitimate
grounds of NIC.VOTING override your grounds. Where processing ofyour personal data has been restricted, such data shall, with theexception of storage, only be processed with your consent or for theestablishment, exercise or defence of legal claims or for the protectionof the rights of another natural or legal person or for reasons ofimportant public interests of the Union or a Member State.
If the processing of your personal data is restricted due to one of theabove​mentioned circumstances, NIC.VOTING will inform you before
the restriction of processing is lifted.

6.5. Notification Obligation
Once you have exercised your right to rectification, erasure orrestriction of processing, NIC.VOTING is obliged to communicate such
rectification or erasure of personal data or restriction of processing to
all recipients to whom the personal data have been disclosed, unless
this proves impossible or involves disproportionate effort.
You have the right to request NIC.VOTING to be informed about
those recipients.

6.6. Right to Data Portability
You have the right to receive your personal data which you havemade available to NIC.VOTING, in a structured, commonly used
and machine​readable format. Furthermore, you have the right totransmit those data to another data controller without hindrance
from NIC.VOTING, to which your personal data have been madeavailable, if ​a. The processing is based on consent pursuant to Article 6(1) (a)or Article 9(2) (a) of the GDPR or on a contract pursuant to Article 6(1)(a); and ​ ​b. Processing is carried out by automated means. In
exercising this right, you can also demand that the personal data betransmitted directly from NIC.VOTING to another controller, if this istechnically feasible. However, this must not impair any freedoms andrights of other persons. The right to data portability shall not apply tothe processing of personal data which is necessary for theperformance of a task carried out in the public interest or in theexercise of official authority vested in NIC.VOTING.

6.7. Right to Object
You are entitled to object, for reasons relating to your particularsituation, at any time to the processing of your personal data which isbased on Article 6(1) (e) or (f) of the GDPR, including profiling basedon these provisions.
In this case, NIC.VOTING will no longer process your personal data
unless NIC.VOTING demonstrates compelling legitimate grounds forthe processing which override your interests, rights and freedoms, orunless the processing is necessary to assert, exercise or defend anylegal claims.

6.8. Right to RevokeYour Consent to Data Processing You have the right to withdraw
your consent vis​​à​vis NIC.VOTING at any time. The withdrawal ofconsent will not affect the lawfulness of the processing that wasbased on the consent before it was revoked.

6.9. Automated Decision​Making in Individual Cases
including Profiling
You have the right not to be subject to a decision based exclusively
on automated processing, including profiling, which produces legal
effects concerning you or significantly affects you in a similar manner.
This does not apply if the decision ​a. Is necessary for the purpose of entering into or performing acontract between you and NIC.VOTING; ​ ​b. Is authorised by Union
or Member State law to which NIC.VOTING is subject and which alsolays down suitable measures to safeguard your rights and freedoms
as well as your legitimate interests; or ​ ​c. Is based on your explicit
consent.

6.10. Right to Lodge a Complaint with a Supervisory
Authority
Without prejudice to any other administrative or judicial remedy, youare entitled to lodge a complaint with a supervisory authority, inparticular in the Member State of your habitual residence, place ofwork or place of the alleged infringement, if you consider that theprocessing of your personal data infringes the GDPR.

7. Inclusion, Validity and Up​to​Dateness of the Data
Privacy Statement
By using our website, you consent to your data being used as
described above. This data privacy statement is the currently valid
version and dates from May 18th 2018.
Further development of our website or the implementation of newtechnologies may render amendments to this data privacy statement
necessary. NIC.VOTING reserves the right to change this data privacy
statement at any time with effect for the future. The relevant version ofthis statement is always the version that is available at the time you
visit our website.