Source: https://www.sim.spk-berlin.de/en/privacy_policy_11.html
Timestamp: 2019-04-21 10:57:34+00:00

Document:
In general, we collect and use the personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. The collection and use of the personal data of our users is consistently carried out only with the consent of the user. An exception is made in such cases in which it is not possible to obtain prior consent due to practical reasons and where data processing is permitted by statutory provisions.
Insofar as we ask the person concerned to give consent to the processing of his or her personal data, then Art. 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data which is necessary for the performance of a contract to which the person concerned is a party, then Art. 6 Para. lit. b of the GDPR serves as the legal basis. This also applies to processing operations which must be necessarily carried out prior into entering into a contract.
Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our institution is subject, then Art. 6 Para. 1 lit. c of the GDPR serves as the legal basis.
If processing is necessary for the purposes of legitimate interests pursued by our institution or by a third party, and the interests, fundamental rights and freedoms of the person concerned do not prevail over the first-mentioned interest, then Art. 6 Para. 1 lit. f of the GDPR serves as the legal basis for the processing.
The personal data of the person concerned shall be erased or locked as soon as the purpose for the storage ceases to apply. Furthermore, data may be stored when this is provided for by European or national legislators in regulations, laws or other provisions to which the controller is subject according to Union law. Locking or erasure of the data shall also take place when the storage period prescribed by the standards mentioned expires, unless it is necessary that the data should continue to be stored for the conclusion or performance of a contract.
Every time a user accesses our web page, our system automatically records data and information from the computer system of the calling computer.
(7) websites which are accessed by the users system via our website.
The data shall be likewise stored in our systems log files. These data shall not be stored together with other personal data of the user.
The legal basis for the temporary storage of the data and the log files is Art. 6 Para 1 lit. f of the GDPR.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the users computer. The users IP address must remain stored for the duration of the session for this.
Data are stored in log files to ensure the functionality of the website. In addition, the data serve to optimise the website and ensure the security of our information technology systems. Data are not evaluated for marketing purposes in this context.
In accordance with Art. 6 Para 1 lit. f of the GDPR, our legitimate interest in the data processing is likewise present for these purposes.
The data shall be erased as soon as they are no longer necessary to fulfil the purpose for which they have been collected. Where the data have been recorded to provide the website, this is the case when the respective session is terminated.
Where the data are stored in log files, this is the case within seven days at the latest. Storage over and above this is possible. In this case the users IP addresses shall be erased or distorted, so that it is not possible to identify the client calling.
To operate the web page it is absolutely necessary to record data to provide the website and to store data in log files. Consequently, the user has no right to object to this.
The legal basis for the processing of personal data using cookies which are necessary for technical reasons is Art 6. Para 1 lit. f of the GDPR. The legal basis for the processing of personal data using cookies for analysis purposes with the consent of the user in this respect is Art. 6 Para 1 lit. a of the GDPR.
The purpose for using cookies which are necessary for technical reasons is to simplify the use of websites for the user. Some functions of our web page are not available without using cookies. For these it is necessary that the browser can be identified, even after moving to another page.
The user data collected by cookies which are necessary for technical reasons shall not be used to create user profiles.
In accordance with Art. 6. Para 1 lit. f of the GDPR, our legitimate interest in the data processing is likewise present for these purposes.
On our web page it is possible to subscribe to a newsletter free of charge. On registering for the newsletter the data from the input mask (title, surname, first name(s), e-mail address) shall be passed on to us.
(2) date and time of registering.
No data shall be disclosed to third parties in connection with the data processing for sending newsletters. The data shall be used exclusively for sending the newsletter.
The legal basis for processing data after a user has registered for a newsletter with the consent of the user in this respect is Art. 6 Para 1 lit. a of the GDPR.
Collecting the users e-mail address serves to deliver the newsletter.
Collecting other personal data within the framework of the registration procedure serves to prevent an abuse of the services or the e-mail address used.
The data shall be erased as soon as they are no longer necessary to fulfil the purpose for which they have been collected. The users e-mail address shall thus be stored for as long as the subscription for the newsletter is active.
As a rule, other personal data collected within the framework of the registration procedure shall be erased after a period of seven days.
The user concerned may cancel the subscription to the newsletter at any time. There is a corresponding link in every newsletter for this purpose.
On doing this it is possible to revoke the consent for the storage of data collected during the registration procedure.
On our web page there is a contact form which can be used for electronic contact. If a user takes the opportunity to use this, then the data entered into the input mask shall be passed on to us and stored. These data are the title, surname (required), first name(s) (required), e-mail address (required), street, house number, postcode, place, country, telephone and fax.
Alternatively, it is possible to get in contact via the e-mail address provided. In this case, the users personal data passed on in the e-mail shall be stored.
No data shall be disclosed to third parties in connection with this. The data shall be used exclusively to process the conversation.
The legal basis for processing the data with the consent of the user is Art. 6 Para 1 lit. a of the GDPR.
The legal basis for processing the data which is passed on by sending an e-mail is Art. 6 Para 1 lit. f of the GDPR. Should the e-mail contact have the conclusion of a contract as its aim, then the additional legal basis for the processing is Art. 6 Para 1 lit. b of the GDPR.
The processing of personal data from the input mask serves solely to deal with the contact being made. In the case that contact is made by e-mail, we also have the necessary legitimate interest here in the processing of the data.
Other personal data processed during the transmission procedure serve to prevent an abuse of the contact form and to ensure the security of our information technology systems.
The data shall be erased as soon as they are no longer necessary to fulfil the purpose for which they have been collected. For personal data from the contact forms input mask which have been sent by email, this is the case when the respective conversation with the user is terminated. The conversation is terminated when it can be inferred from the circumstances that the issues concerned have been conclusively settled.
Additional personal data collected during the transmission procedure shall be erased after a period of seven days.
The user may at any time withdraw his consent to the processing of personal data. In this case, all personal data stored in the course of making contact shall be erased. Withdrawal of the consent and objection to the storage are possible by e-mail or by post.
The following list covers all rights of the person concerned in accordance with the GDPR. Rights which are not relevant for our own website do not have to be named. The list can be shortened in this respect.
(8) the existence of automated decision-making , including profiling, according to Art. 22 Paras 1 and 4 of the GDPR and  at least in these cases  meaningful information about the logic involved, as well as about the implications and the intended effects of such processing for the person concerned.
You have the right to request information as to whether the personal data concerning you shall be passed on to a third country or to an international organisation. In this context you may request to be informed about the appropriate safeguards, according to Art. 46 of the GDPR, in connection with the transfer.
You have the right to obtain rectification and/or completion from the controller, inasmuch as the processed personal data concerning you are incorrect or incomplete. The controller must carry out the rectification without undue delay.
(4) if you have lodged an objection to the processing in accordance with Art. 21 Para 1 of the GDPR and it has not yet been determined whether the legitimate interests of the controller override your interests.
Where processing of personal data concerning you has been restricted, these data  with the exception of their storage  may only be processed with your consent, or for the purpose of asserting, exercising or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the Union or of a member state.
If the processing has been restricted in accordance with the above-mentioned conditions, you shall be informed by the controller before the restriction is lifted.
(1) The personal data concerning you are no longer necessary for the purpose for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing is based in accordance with Art. 6 Para 1 lit. a or Art. 9 Para 2 lit. a of the GDPR and there is no other legal basis available for the processing.
(3) You lodge an objection against the processing in accordance with Art. 21 Para 1 of the GDPR and there are no overriding legitimate reasons for the processing, or you lodge an objection against the processing in accordance with Art. 21 Para 2 of the GDPR.
(5) The erasure of the personal data concerning you is necessary for compliance with a legal obligation in Union or member state law to which the controller is subject.
(6) The personal data concerning you were collected in relation to the offer of information society services in accordance with Art. 8 Para 1 of the GDPR.
Where the controller has made personal data concerning you public and is obliged to erase these data in accordance with Art. 17 Para 1 of the GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the costs of implementation, to inform controllers for data processing who are processing these personal data that you, as the person concerned, have requested them to erase all links to these personal data or copies or replications of these personal data.
If you have asserted the rights to rectification, erasure or restriction of processing against the controller, then the controller shall be obliged to inform all recipients to whom the personal data concerning you have been disclosed about this rectification or erasure of the data or the restriction of processing, unless this proves impossible or requires a disproportionate effort.
You have the right to request the controller to inform you about these recipients.
When exercising this right you also have the right to have the personal data concerning you transferred directly from one controller to another controller, to the extent that this is technically feasible. The freedoms and rights of other persons may not be adversely affected as a result of this.
The right to data portability shall not apply to the processing of personal data which is necessary to perform a task which is in the public interest, or in the exercise of official authority vested in the controller.
Based on Art. 6 Para 1 lit. e or f of the GDPR, you have the right to object at any time to the processing of personal data concerning you in relation to your particular situation; this also applies to profiling based on these provisions.
The controller shall no longer process the personal data concerning you, unless he/she can demonstrate compelling legitimate reasons which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Where the personal data concerning you are processed for direct advertising purposes, you shall have the right to lodge an objection at any time against the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, to the extent that this is connected with such direct advertising.
Should you lodge an objection to processing for the purposes of direct advertising, then the personal data concerning you shall no longer be used for these purposes.
In the context of using information society services  notwithstanding Directive 2002/58/EG  it is possible for you to exercise your right to object by automated means, in which technical specifications are used.
You have the right to withdraw your declaration of consent regarding data protection law at any time. The withdrawal of consent shall not affect the lawfulness of the processing already carried out on the basis of the consent up to the withdrawal.
However, these decisions may not be based on special categories of personal data in accordance with Art. 9 Para 1 of the GDPR, unless Art. 9 Para 2 lit. a or g of the GDPR applies and appropriate measures have been taken to safeguard your rights and freedoms as well as your legitimate interests.
As regards the cases referred to in (1) and (3), the controller shall take appropriate measures to safeguard these rights and freedoms as well as your legitimate interests, which include at least the right of a person to intervene on behalf of the controller, to declare ones own point of view and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 of the GDPR.
The General Data Protection Regulation (GDPR) has strengthened the rights of persons concerned. It is possible that there are persons depicted in images and videos on our website whose consent for this has not been obtained in the past. If you should be affected by this, you have the right to withdraw your consent with reason at any time for the future.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78