Source: https://meta-e2f.eu/privacy-policy/?lang=en
Timestamp: 2019-04-18 12:34:17+00:00

Document:
Protecting your privacy and your personal data is important to us. Therefore, we wish to describe the contact options and ways of obtaining and processing personal data relating to data subjects as simply and accurately as possible.
We prefer contact via e-mail. However, you are welcome to contact our data protection officer by post or by telephone. If you wish to encrypt your e-mail to our data protection officer, then we recommend that you read the following section.
When sending an enquiry per e-mail within regular business hours, we will confirm receipt of your message on the same day. If you do not receive such confirmation, please contact us by telephone.
When sending an enquiry per post, we will post confirmation of receipt of your message on the day that we receive your enquiry, at the latest on the next day. If you do not receive such confirmation, please contact us by telephone.
If you wish to make an enquiry by telephone, we would ask you to contact our data protection partner, eye-i4 GmbH, directly by telephone.
We prefer an encrypted transmission via e-mail. Therefore, to safeguard confidentiality and integrity, we would ask you to send your enquiries to our data protection officer in encrypted form.
For information in English please go to, for example, https://www.openpgp.org/software/.
If you require fingerprint verification, please contact our data protection partner, eye-i4 GmbH, by telephone.
Should you have any further questions regarding encryption, please contact our data protection officer.
‘Controller’ means the natural or legal person, public authority, agency or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by EU or Member State law, the controller or the specific criteria for nomination of the controller may be provided for by EU or Member State law.
‘Personal data’ means any information relating to an identified or identifiable natural person (hereinafter called ‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
‘Processing’ means any operation or set of operations that is performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
‘Processor’ means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
‘Personal data breach’ means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to personal data that are transmitted, stored or otherwise processed.
‘Data concerning health’ means personal data related to the physical or mental health of a natural person, including the provision of healthcare services, which reveal information about his or her health status.
‘Enterprise’ means a natural or legal person engaged in an economic activity, irrespective of its legal form, including partnerships or associations regularly engaged in an economic activity.
‘Supervisory authority’ means an independent public authority that is established by a Member State pursuant to GDPR Art. 51.
‘Relevant and reasoned objection’ means an objection to a draft decision as to whether there is an infringement of the GDPR, or whether envisaged action in relation to the controller or processor complies with the GDPR, which clearly demonstrates the significance of the risks posed by the draft decision as regards the fundamental rights and freedoms of data subjects and, where applicable, the free flow of personal data within the EU.
‘Filing system’ means any structured set of personal data which is accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis.
Cookies are text files that are saved by a website on your terminal by way of your browser. These text files might be intended for realising technical features such as a shopping cart function but also to identify your behaviour as a visitor. To do this, the text files can be provided with identification attributes and additional information.
Server logs are log files that are compiled by the web server and record access to a website. Considerable information can be collected in a log entry, e.g. time of access, type of browser, IP address of visitor, etc.
The referrer designates the website from which the visitor has gained access to the website of the controller. Information about, for example, the referrer, can be obtained from the server logs.
The data subject has a right to obtain information about the personal data on the data subject which are held if the data were collected from the data subject or if the data were not collected from the data subject. This is regulated in GDPR chapter 3, Art. 13 and Art. 14.
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed and, where that is the case, access to the personal data and information according to GDPR Art. 15.
The data subject shall have the right to demand that the controller rectify inaccurate personal data concerning the data subject without undue delay.
The data subject shall have the right to demand that the controller erase personal data concerning the data subject without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the grounds according to GDPR Art. 17 applies.
The data subject shall have the right to demand that the controller restrict processing where one of the conditions of GDPR Art. 18 applies.
The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with GDPR Art. 16, Art. 17(1) and Art. 18 to each recipient to whom the personal data have been disclosed unless this proves impossible or involves disproportionate effort.
right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on GDPR Art. 6, 1(e) or 1(f), including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or such processing serves for the establishment, exercise or defence of legal claims.
According to GDPR Art. 77, you have the right to lodge a complaint with a supervisory authority. As a rule, to do this, you can contact the supervisory authority of your habitual residence or place of work or the location of the controller.
Further information about the controller can be found in the Legal Notice.
We use the SSL (secure socket layer) protocol to encrypt the transmission of and enquiries about data on our website. Apart from that, we make use of suitable technical and organisational security measures in order to protect your data against random or premeditated manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continually improved in line with technological developments.
To protect your personal data, we have removed all cookies.
Unless explicitly specified, we save personal data only for the time necessary to complete the intended purpose or to fulfil the order or assignment. In some cases, e.g. tax or commercial law, legislators prescribe the retention of personal data. In these cases the data continue to be stored by us for these statutory purposes only, but are not processed in any other way and are deleted upon expiry of the statutory period of retention.
if transmission is legally permissible and necessary for the performance of a contract to which the data subject is party according to GDPR Art. 6, 1(b).

References: Art. 51
 Art. 13
 Art. 14
 Art. 15
 Art. 17
 Art. 18
 Art. 16
 Art. 17
 Art. 18
 Art. 6
 Art. 77
 Art. 6