Source: http://t-m-a.de/impressum/?lang=en
Timestamp: 2019-04-25 08:48:05+00:00

Document:
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person\’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject\’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
On the website of the TMA Hellerau e.V., users are given the opportunity to subscribe to our enterprise\’s newsletter. The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter is ordered from the controller.
The TMA Hellerau e.V. informs its customers and business partners regularly by means of a newsletter about enterprise offers. The enterprise\’s newsletter may only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter shipping. A confirmation e-mail will be sent to the e-mail address registered by a data subject for the first time for newsletter shipping, for legal reasons, in the double opt-in procedure. This confirmation e-mail is used to prove whether the owner of the e-mail address as the data subject is authorized to receive the newsletter.
Each data subject shall have the right granted by the European legislator not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her, as long as the decision (1) is not is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) is not authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject\’s rights and freedoms and legitimate interests, or (3) is not based on the data subject\’s explicit consent.
If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject\’s explicit consent, the TMA Hellerau e.V. shall implement suitable measures to safeguard the data subject\’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.
If the data subject uses “PayPal” as the payment option, data of the data subject is transmitted to PayPal. By using this payment option, the data subject agrees to the transfer of personal data required for payment processing.
– Usage data (e.g., pages visited on our website, access times).
– visitors and users of the online offer (hereinafter we also refer to the persons concerned in summary as “users”).
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if we do so in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only take place if it is necessary to fulfil our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or leave the data in a third country only if the special requirements of Art. 44 ff. Process DSGVO. This means, for example, processing is carried out on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to the EU (e.g. for the USA by the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).
Our hosting provider, on the basis of our legitimate interests within the meaning of Art. 6 para. 1 letter f. DSGVO data on each access to the server on which this service is located (so-called server log files). Access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Our website uses the “Akismet” service offered by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA, for comment checking, exclusively in WordPress blogs. The use is based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f) DSGVO. With the help of this service, comments of real people are distinguished from spam comments. All comment information is sent to a server in the USA, where it is analyzed and stored for four days for comparison purposes. If a comment has been classified as spam, the data will be stored after this time. This information includes the name entered, the e-mail address, the IP address, the comment content, the referrer, information on the browser used, the computer system and the time of entry.
Within our online offer, we make no representations or warranties of any kind based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. ( DSGVO) content or service offerings of third parties to incorporate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”).
This always presupposes that the third party providers of this content know the IP address of the users, since without the IP address they could not send the content to their browser. The IP address is therefore required for the display of this content. We make every effort to use only those contents whose respective providers use the IP address only for the delivery of the contents. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may include technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offer, as well as be linked to such information from other sources.
DSGVO) content or service offerings of third parties to incorporate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”).
The IP address is therefore required for the display of this content. We make every effort to use only those contents whose respective providers use the IP address only for the delivery of the contents. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may include technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offer, as well as be linked to such information from other sources.
You may be able to prevent third-party services and content from being included through add-ons or settings in your web browser.
When contacting us (e.g. via contact form, e-mail, telephone or social media), the user’s details are processed for processing the contact request and its processing in accordance with Art. 6 Para. 1 lit. b) DSGVO. User information can be stored in a customer relationship management system (“CRM system”) or comparable request organization.
The follow-up comments may be subscribed to within our WordPress blogs by users with their consent pursuant to Art. 6 para. 1 lit. a DSGVO. Users will receive a confirmation email to verify that they are the owner of the email address they entered. Users can unsubscribe from ongoing comment subscriptions at any time. The confirmation email will contain information on the cancellation options. For the purpose of providing proof of user consent, we store the login dot along with the user’s IP address and delete this information when users unsubscribe from the subscription.
The newsletter is sent by the mail order service “MailChimp”, a newsletter delivery platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the data protection provisions of the shipping service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European data protection level (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The dispatch service provider is used on the basis of our legitimate interests according to Art. 6 Para. 1 letter f DSGVO and an order processing contract according to Art. 28 Para. 3 S. 1 DSGVO.
The newsletters may contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from the mail service provider’s server when the newsletter is opened. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are initially collected.

References: Art. 44
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28