Source: https://ecomvat.com/datenschutz.php?l=1
Timestamp: 2019-04-23 06:59:49+00:00

Document:
The client IP address is used for the purpose of transmitting the requested data; it will be anonymised after deletion of the technical requirement by deleting the last number pad (Ipv4) or the last octet (Ipv6).
The data is stored with each access of a user on one side of our offer and with each call of our Internet presence and is deleted, as soon as they are no longer necessary for the purpose of the survey, which is the case when the visitor leaves our website.
The temporary storage of the aforementioned data is based on the legal basis of Art. 6 para. 1 lit. f EU General Data Protection Regulation ("GDPR"). The legitimate interest lies in the provision of our website.
The person concerned may object to the processing.
Name, address (s), bank details, e-mail address, telephone or fax number, client IP address at the time of submission of a contract are collected, stored and processed solely for the purpose of establishing or carrying out the contract, in particular the billing and the Execution of the contract.
The personal data will only be disclosed to third parties if this is necessary for the purpose of implementing the contract, for example when commissioning a shipping company or when using a payment service provider.
The data will be deleted as soon as they are no longer required for the purposes for which they were collected or otherwise processed. This deadline is five years for personal data subject to § 147 AO and ten years for personal data subject to § 257 HGB. The deadlines start at the end of the calendar year in which the data was collected.
The storage of the aforementioned data is based on the legal basis Art. 6 para. 1 lit. b and lit. c DSGVO.
Since there are legally standardized retention periods and the data for the execution of the contract must be stored and processed, a contradiction or a deletion is not possible.
A user can contact us by e-mail (also by contact form), fax or telephone. We store the data transmitted to us and provided by the data subject for processing the request. These data are the name, address, e-mail address, telephone and / or fax number, date and time of the request and the description of the request, if applicable, contract data if the request is made as part of contracting or processing. The data will not be passed on to third parties. They are used to process the contact request of the person concerned.
Once the data is no longer necessary to achieve its purpose, it will be deleted, which is the case when the conversation is finalized and the facts clarified and there are no contractual or tax retention periods. This deadline is five years for personal data subject to § 147 AO and ten years for personal data subject to § 257 HGB. The deadlines start at the end of the calendar year in which the data was collected.
The storage of the aforementioned data is based on the legal basis Art. 6 para. 1 lit. a GDPR only with prior consent in the context of the request, in accordance with Art. 6 para. 1 lit. b DSGVO in the context of contract initiation or fulfillment or according to Art. 6 para. 1 lit. f DSGVO. The legitimate interest of the person responsible is to be able to process the contact request and to be able to prevent abuse of the contact request. The revocation of the consent at any time does not affect the legality of the processing of personal data on the basis of the consent until the revocation.
The person concerned has the option at any time to revoke the consent given to him for data processing and to object to the storage. Then the data stored for the process is deleted. If a contract has been concluded, the provisions of section II.2. Above apply.
If "personal data" is processed by the user on our website, then the data subject (person concerned) has the following rights towards the person responsible in accordance with the GDPR.
(h) the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.
(i) where personal data are transmitted to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards in accordance with Article 46 of the GDPR in connection with the transfer.
We provide the person concerned with a copy of the personal data that is the subject of the processing. For all other copies requested by the data subject, the person responsible may request an appropriate fee based on the administrative costs.
f) the personal data were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
d) the data subject has lodged an objection to the processing pursuant to Art. 21 (1) GDPR, as long as it is not certain that the responsible reasons of the person responsible prevail over those of the data subject.
If the person concerned has asserted a correction pursuant to Art. 16 DSGVO, a deletion of Art. 17 (1) GDPR or a restriction of processing pursuant to Art. 18 GDPR with respect to the person responsible, and the person in charge has all the recipients against whom the personal data of the person concerned, about the request of the data subject informed (as far as this was not impossible or associated with disproportionate effort), the person concerned has the right to be informed by the person responsible about the recipient.
b) the processing is done by automated means. Rights and freedoms of other persons must not be affected. When exercising the right to data portability in accordance with paragraph 1, the data subject has the right to obtain that the personal data are transmitted directly by us to another person responsible, as far as this is technically feasible. The exercise of the right to data portability is without prejudice to the right of cancellation under Art. 17 GDPR. The right to data portability does not apply to any processing necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
The data subject has the right, at any time for reasons arising from his particular situation, against the processing of personal data pertaining to him which, on the basis of Article 6 (1) lit. e or f DSGVO takes an objection; this also applies to profiling based on these provisions.
We no longer process personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or processing for the purposes of asserting, exercising or defending legal claims.
If personal data are processed in order to operate direct mail, the data subject has the right at any time to object to the processing of personal data concerning him for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes. A consent given by the person concerned can be revoked at any time. However, the collection and processing up to that date remains legal.
c) with the express consent of the person concerned.
These decisions may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Article 9 (2) lit. a or g DSGVO applies and appropriate measures have been taken to protect the rights and freedoms as well as the legitimate interests of the data subject.
In the cases referred to in paragraphs (a) and (c), we shall take reasonable steps to safeguard the rights and freedoms and legitimate interests of the person concerned, including at least the right to obtain the intervention of a person on our side, the statement of one's own position and heard on challenge of the decision.
Without prejudice to any other administrative or judicial remedy, each interested party shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if the person concerned considers that the processing of the personal data concerning him or her is against him this Regulation infringes.
Without prejudice to any available administrative or extrajudicial remedy, including the right to complain to a supervisory authority under Article 77 GDPR, any person concerned shall have the right to an effective judicial remedy, if he considers that the rights conferred on him by that regulation are not in conformity infringement of the processing of his personal data.
Claims against us against a processor are brought before the courts of the Member State in which we or the processor have a place of business. Alternatively, such actions may be brought before the courts of the Member State in which the person concerned is resident unless we or the processor is an authority of a Member State acting in the exercise of its sovereign powers.

References: Art. 6
 § 147
 § 257
 Art. 6
 § 147
 § 257
 Art. 6
 Art. 6
 Art. 6
 Art. 8
 Art. 21
 Art. 16
 Art. 17
 Art. 18
 Art. 17
 Art. 9