Source: http://gfe-service.de/en/dataprivacy.php
Timestamp: 2019-04-26 00:24:35+00:00

Document:
We are collecting and using personal data of our users in principle only as far as it is necessary to provide a functional website as well as our contents and services. Collection and use of our users personal data is carried out regularly only after the users approval. There is one exception for such cases where it is impossible to ask the user previously for his approval for factual reasons and where processing the data is allowed by legal stipulations.
As far as we are asking for the consent of the respective person to the processing of personal data, Art. 6 para. 1 lit. a of the General Data Protection Regulation serves as legal basis. As far as the processing of personal data is necessary to fulfil a legal obligation which our company is subject to, Art. 6 para. 1 lit. c GDPR serves as legal basis. In case of vital interests of a person involved or another natural person require processing of the personal data, Art. 6 para. 1 lit. d GDPR serves as legal basis. If processing of the data is necessary to meet rightful interests of our company or a third party and if the interests, basic rights and fundamental freedoms of the involved person are not affected by the interests mentioned before, Art. 6 para. 1 lit. f GDPR are the legal basis for processing the data.
User data recorded by cookies, which are technically necessary, are not used for the creation of user profiles. Within these purposes also lies our rightful interest in processing the personal data according to Art. 6 para. 1 lit. f GDPR.
Provided the user gave his approval, legal basis for processing of the data is Art. 6 para. 1 lit. a GDPR. In case the registration serves to fulfil a contract to which the user is a contractual party, or serves to carry out pre-contractual measures, additional legal basis for data processing is Art. 6 para. 1 lit. b GDPR.
the existence of an automatized decision-making, including profiling according to Art. 22 para. 1 and 4 GDPR and - at least in such cases - explicit information on: the logic involved, as well as the impact and the intended effect on the person concerned, by data processing of such kind.
In case processing of the personal data concerning you was limited, the data can only be processed - apart from your storage - with your consent or in order to claim, execute or defend legal rights, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or of a member state.
You are entitled not to be subjected to a decision which is based only on an automatized processing - including profiling, which has a legal effect against you or considerably affects you in similar ways.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22