Source: https://www.northchannelbank.de/en/legal-navigation/data-protection/
Timestamp: 2019-04-18 19:14:06+00:00

Document:
As a matter of principle, we collect and use personal data solely if doing so is necessary for the provision of a functional website and our content and services. Personal data are obtained and used solely after receipt of consent. An exception to this applies in cases in which obtaining prior consent is not possible for actual reasons and statutory provisions permit processing of the data. The collection and use of personal data of our users regularly takes place only with the consent of the user. An exception applies to cases in which prior consent cannot be obtained for reasons of fact and the processing of the data is permitted by law.
Insofar as we obtain the consent of the data subject for activities that entail processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as legal basis.
With regard to processing of personal data necessary to fulfil a contract to which the data subject is a contracting party, Art. 6 (1) (b), GDPR, serves as the legal basis. This also applies to processing activities that are necessary to implement pre-contractual measures.
If processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 (1) (c), GDPR, serves as the legal foundation.
For the event that vital interests of the affected person, or of another natural person, render processing of personal data necessary, Art. 6 (1) (d), GDPR, serves as the legal foundation.
If the processing is necessary to safeguard a justified interest that our company or a third party has, and if the data subject’s interests, basic rights and basic freedoms do not override that interest, Art. 6 (1) (f), GDPR, serves as the legal foundation for the data processing.
The data subject’s personal data are erased or blocked as soon as the purpose of storing the data no longer applies. In addition, data can be stored if provision to do so is made by the European or national legislature in EU law regulations, and other law or stipulations to which the person responsible is subject. The data is blocked or erased even in instances in which a storage time limit, determined by the stated norms, expires; this is the case unless a necessity arises to continue storing the data in order to conclude a contract or to fulfil a contract.
ach time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The data is also stored in the log files of our system. Not affected hereof are the IP addresses of the user or other data, which allow for the assignment of the data to a user. Any storage of this data in combination with other personal data of the user does not occur.
The legal basis for the temporary storage of data is Art. 6 (1) (f), GDPR.
The temporary storage of the IP address by the system is necessary to allow the delivery of the website to the computer of the user. For this purpose the IP address of the user must remain stored for the duration of the session.
These purposes also constitute the basis for our legitimate interest in the data processing according to Art. 6 (1) (f), GDPR.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data to provide the website this is the case when the respective session is over.
The collection of data for the provision of the website is absolutely necessary for the operation of the website. Consequently, there can be and is no right of objection on the part of the user.
The legal basis for the processing of personal data using cookies is Art. 6 (1) (f), GDPR.
The user data collected by technically necessary cookies will not be used for the creation of user profiles.
Our website enables contact support via the provided e-mail address. In this case, the personal data transmitted by the e-mail of the user is saved.
In this context, there will be no disclosure of the data to third parties. The data are used exclusively for processing the conversation.
Legal basis for the processing of the data in the course of sending an e-mail is Art. 6 (1) (f), GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) (b), GDPR.
The processing of the personal data from the e-mail is solely used by us to process the contact request.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data sent by e-mail this is the case when the conversation with the user ends. The conversation ends when it can be derived from the circumstances that the concerned facts are finally clarified.
At any time, the user has the opportunity to revoke his consent to the processing of personal data. If the user contacts us by e-mail, he may object to the storage of his personal information at any time. In such a case, the conversation cannot continue.
The revocation should be directed to the responsible person (see section I).
You are entitled to ask the person responsible for a confirmation of whether personal data concerning you is processed by us.
All available information on the source of the data, if the personal data is not collected from the affected person.
You have a right to rectification and / or completion in relation to the person responsible, provided that the personal data processed relating to you is incorrect or incomplete. The person responsible is obligated to perform the correction immediately.
If you objected to the processing according to Art. 21 (1), GDPR, and it has not yet been determined whether the legitimate reasons of the responsible person outweigh your reasons.
If the processing of the personal data relating to you has been restricted, these data may – with the exception of storage – only be used with your consent, or to assert, exercise or defend legal claims, or to protect the rights of another natural or legal person or for reasons of important public interest of the EU or of a Member State.
If the limitation of the processing has been restricted according to the above- mentioned preconditions, you will be informed by the person responsible before the restriction is suspended.
You revoke your consent on which the processing was based according to Art. 6 (1) (a) or Art. 9 (2) (a), GDPR, and there is no other legal basis for processing.
3) You file an objection against processing according to Art. 21 (1), GDPR, and there are no legitimate grounds for the processing, or you file an objection against processing according to Art. 21 (2), GDPR.
The deletion of your personal data is required to fulfil a legal obligation under EU or international law of the Member States to which the person responsible is subject.
(6) The personal data relating to you were collected in relation to offered services of the information society pursuant to Art. 8 (1), GDPR.
If the person in charge has publicly disclosed personal data relating to you, and he is obligated to delete them according to Art. 17 (1), GDPR, he shall take appropriate measures – taking into account both available technology and implementation costs –, including technical ones, to inform responsible persons for data processing, who process the personal data, that you as affected person have requested them to delete all links to these personal data or of copies or replications thereof.
If you have asserted the right to rectification, deletion or restriction of processing to the person responsible, he shall be obliged to inform all recipients to whom the personal data relating to you have been disclosed, about the correction or deletion of data or limitation of processing unless it turns out to be impossible or of disproportionate effort.
The processing is performed by automated procedures.
In exercising this right, you also have the right to obtain that the personal data relating to you be transferred directly from one responsible person to another responsible person, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.
The right to data transferability does not apply to the processing of personal data required for the performance of a task performed in public interest or in the exercise of public authority, which was transferred to the person responsible.
You have the right, for reasons that arise from your particular situation, to file an objection at any time against the processing of your personal data which is carried out on the basis of Art. 6 (1) (e) or (f), GDPR; this applies also for profiling based on these provisions.
The person responsible shall not process personal data relating to you any more, unless he can provide evidence of compelling legitimate interests for the processing that outweighs your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
If your personal data are processed to conduct direct mailings, you have the right at any time to object to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.
If you object to processing for direct marketing purposes, the personal data relating to you will no longer be processed for these purposes.
In connection with the use of services of the information society – irrespective of the Directive 2002/58 / EC – you have the opportunity to exercise your right to object by means of automated procedures involving the use of technical specifications.
You have the right to revoke your declaration of consent regarding data protection law at any time. The legality of the processing conducted on the basis of consent until the revocation remains unaffected by the revocation of consent.
However, these decisions may not be based on specific categories of personal data pursuant to Art. 9 (1), GDPR, unless Art. 9 (2) (a) or (g) GDPR applies and appropriate measures for the protection of the rights and liberties and your legitimate interests have been taken.
With regard to the cases referred to in (1) and (3), the person responsible shall take appropriate measures to safeguard the rights and freedoms and your legitimate interests, which at least comprises the right to obtain the intervention of a person assigned by the person responsible, the statement of one’s own position and challenge of the decision itself.
Without prejudice to any other administrative or judicial legal remedy you have the right to complain to a supervisory authority, particular in the Member State of your place of residence, employment or place of the alleged infringement, if you assert that the processing of your personal data violates the GDPR.
The supervisory authority to which the complaint has been filed shall inform the complainant on the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78, GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78