Source: https://www.metten.com/contactform/Data-protection/
Timestamp: 2019-04-23 16:00:08+00:00

Document:
We appreciate your interest in our online offer. Below we inform you about the handling of personal data and about the data subject rights in accordance with the provisions of the General Data Protection Regulation (GDPR). Personal data is any data which is personal to you, e.g. name, address, e-mail address, user behaviour.
We secure our website and other systems by technical and organisational measures against loss, destruction, access, modification or dissemination of your data by unauthorised persons. Access to customer accounts is only possible after entering a user ID and a personal password. You should always treat your access data confidentially and close the browser window when you have finished communicating with us, especially if you share the computer with others.
For secure communication with us, we offer encrypted communication via the SSL protocol, which we use to secure the transfer of your personal data in our online shop.
To enable access to our web site, there is limited to a no longer 30 days period, in principle, of temporarily data storage carried out for the purpose of ensuring data and system security. This refers to data that may allow identification of a person (e.g., the IP address). The potential processing of such personal data for the purposes of data and system security is based on stipulations under Art. 6 para. 1 sentence 1 lit. f GDPR and our legitimate interest in securing our systems and preventing abuse.
Personal data will only be processed for the period required to achieve the respective processing purpose or if provided for in applicable laws or regulations, e.g. commercial or tax retention requirements. If a storage purpose ceases or if a legally prescribed storage period expires, the personal data concerned will be routinely and in accordance with the statutory provisions deleted or their processing will be restricted, e.g. limited under commercial or fiscal retention requirements.
The processing of personal data based on a legal obligation, namely the fulfilment of statutory retention obligations, and is based on stipulations under Art. 6 para. 1 sentence 1 lit. c GDPR Insofar as personal data pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR are processed for purposes of securing evidence; these processing purposes are dispensed with after expiry of the statutory limitation periods; the statutory period of limitation is of three years.
In the case of merely informative use of the website, i.e. if you do not register or otherwise provide us with information, we will only collect the following personal data that your browser transmits to our server, which is technically necessary for us to display our website and to ensure its stability and safety: IP address, date and time of the request, Greenwich Mean Time (GMT), time zone difference, request content (concrete page), access status / HTTP status code, amount of data transferred, the website that receives the request, browser, operating system and its interface as well as language and version of the browser software. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest in the sense of this standard lies in the provision of a functional website. The personal data will be deleted as soon as the purpose of the storage is omitted.
As part of the operation of this website and related processes, we may be assisted by other service providers (for example, web hosting and web development) who work for us as contracted processors. These service providers are strictly bound by instructions and contractually obliged to us.
Our legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR consists in providing and optimising our services.
We use the web tracking tool "Matomo" (formerly "Piwik"), an open-source software for the statistical analysis of visitor access. Matomo uses for the analysis of the use of the website cookies, which are stored on your computer. The usage information generated by the cookie is transmitted and stored onto our server for the purpose of optimising our online offer. An evaluation of IP address data is carried out in any case only in abbreviated / anonymised form, so that a personal reference is excluded. Regarding the nature, extent and functionality of cookies in general, we refer to the general cookie explanation above.
The legal basis for the processing of personal data using Matomo is Art. 6 (1) sentence 1 lit. f) GDPR. Our legitimate interest in the sense of this standard is to provide a user-friendly and optimised website.
In the sense of an opt-out, you can decide whether a web analytics cookie for Matomo may be stored in your browser, in order to enable us to collect and analyse various statistical data provided by Matomo.
This places a so-called deactivation cookie in your browser. Please note that the Matomo deactivation cookie of this website will also be deleted if you remove the cookies stored in your browser. In addition, if you're using another computer or web browser, you'll need to go through the deactivation process again.
On our website, we offer you various ways to contact us and send us messages. Contact is in particular carried out by means of a phone, e-mail or via the provided contact form which can be used for electronic contact. As far as you agree to this, the data entered in the input mask will be transmitted to us and stored. At the time of sending the completed contact form, the following data will also be stored: IP address of the calling computer, date and time of sending. Alternatively, contact via the provided e-mail address or by phone is also possible. In this case, your personal data transmitted by e-mail or by phone will be stored.
The data is used exclusively for processing the conversation. The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. f) GDPR. If the establishment of contact aims at concluding a contract, then additional legal basis for the processing is Art. 6 para. 1 p.1 lit. b) of GDPR. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. This is also our legitimate interest.
The personal data transmitted to us in case of a contact made will be deleted if the respective conversation with you is over and the storage of the data is no longer necessary.
On our website is a registration form available, which can be used for electronic registration to our events. As far as you agree to this, the data entered in the input mask will be transmitted to us and stored.
The data is used exclusively for processing the registration request. The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. b) GDPR. At the time of sending the completed registration request form, the following data will also be stored: IP address of the calling computer, date and time of sending. The other personal data processed during the sending process serve to prevent misuse of the registration form and to ensure the security of our information technology systems. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR.
The personal data transmitted to us in the event of registration will be deleted after the performance of the respective event, subject to other retention obligations.
The data subject has the right to ask the person responsible for its presumable data processing for a confirmation of the processing of the personal data concerned.
if personal data are transmitted to a third country or to an international organisation, to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
The data subject has the right to provide a copy of the personal data with regard to the personal data relating to him or her that is the subject of a data processing.
The data subject has the right to demand from the person responsible without delay the correction of incorrect personal data concerning him. In consideration of the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary statement.
the data subject has lodged an objection to the processing pursuant to Art. 21 (1) GDPR, as long as it is not certain that the legitimate reasons of the person responsible outweigh those of the data subject.
The data subject revokes their consent to the processing pursuant to Art. 6 para. 1 sentence 1 lit. a or Art. 9 para. 2 lit. GDPR and there is no other legal basis for processing.
According to Art. 21 (1) GDPR, the data subject objects to the processing of his or her personal data and there are no legitimate reasons for such processing, or the data subject objects to the processing according to rights pursuant to Art. 21 (2) GDPR.
The erasure of personal data is necessary to fulfil a legal obligation under the European Union law or a national law to which the data controller is subject.
The data subject has the right to receive personal data relating to him or her which were prior provided to a data controller, in a structured, common and machine-readable format. S/he has the right to request the transfer of that information to another person, without interference from the data controller having being prior provided with such data, subject to the fact that the respective data processing is based on a consent or on a contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR and the data processing is carried out using automated procedures.
In exercising the right to data portability, the data subject has the right to obtain the personal data to be transferred directly from one controller to another, where this is technically feasible.
The data subject has the right to revoke any consent granted, at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent given, until the revocation.
Any data subject shall have the right to complain to a supervisory authority, in particular in the Member State of his or her residence, place of work or place of alleged infringement, if the data subject considers that the processing of personal data concerning him/her violates this Regulation.
For reasons arising from your particular situation, you have the right, at any time, to object against the Processing of personal data related to you, which was carried out pursuant to Art. 6 para. 1 lit. e or f GDPR. This also applies to profiling based on these provisions. If you object, your personal data will no longer be processed, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms of the data subject, or the processing is carried out for the purposes of asserting, exercising or defending legal claims.
If personal data is processed in order to operate Direct mail activities, you have the right to object at any time against the processing of your personal data for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct mail activities.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 6
 Art. 6