Source: http://www.wichmann-os.de/en/data-privacy-statement/
Timestamp: 2019-04-20 08:19:55+00:00

Document:
Thank you for your interest in our website. We place great emphasis on the protection of your personal data. Your personal data is processed and used in compliance with the applicable data protection regulations. Our data protection provisions are based on the European General Data Protection Regulation (EU-GDPR), the Federal Data Protection Regulation (GDPR), and the Telemedia Act (TMA).
When you visit our website, the only data collected is what your browser automatically transmits to our hosting provider.
A transmission of personal data for simply accessing our website is not required.
The log data is used without any assignment to your person for statistical evaluations to ensure the operation and optimisation of our Internet presence via a limited period of time. In case of any actual suspicion of illegal use, we reserve the right to check the stored log files.
These data are used and processed exclusively for the purpose of providing our website on the basis of Art. 6 Sect. 1 lit. f and Art. 28 EU-GDPR.
We transmit to CRIF Bürgel GmbH, Radkoferstrasse 2, 81373 Munich, Germany, the personal data collected within the scope of a contractual relationship concerning the application for, implementation and termination of a business relationship as well as data concerning non-contractual or fraudulent behaviour.
The legal basis for these transfers is Art. 6 Sect. 1 lit. b and Art. 6 Sect. 1 lit. f EU-GDPR. Data transmissions pursuant to Art. 6 Sect. 1 lit. f EU-GDPR may only take place if necessary to protect the legitimate interests of our company or third parties and does not outweigh the interests or fundamental rights and freedoms of the data subject which require the protection of personal data. The data exchange with CRIFBÜRGEL also serves the fulfilment of legal obligations to carry out creditworthiness checks of customers (§ 505a and 506 German Civil Code).
Your personal data will only be stored for as long as necessary to fulfil the purposes pursued, should your data be subject to tax, commercial or other legal storage obligations, your data will be archived taking into account the storage obligations.
You have the right to clear information regarding the processing of your personal data.
the existence of any automated decision making, including profiling, in accordance with Art. 22 Sect. 1 and 4 EU-GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for you.
If personal data are transferred to a third country or an international organisation, you have the right to be informed of the appropriate guarantees in accordance with Art. 46 EU-GDPR in connection with such transfer.
You have the right to request from us the immediate correction of any inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data by means of a supplementary statement.
Pursuant to Art. 17 Sect. 1 EU-GDPR, you have the right to demand that we immediately delete personal data concerning you, and we are obliged to immediately delete personal data if one of the following reasons applies.
You revoke your consent on the basis of the processing pursuant to Art. 6 Sect. 1 lit. a EU-GDPR or Art 9 Sect. 2 lit. a EU-GDPR and there is no other legal basis for the processing.
You file an objection to the processing pursuant to Art 21 Sect. 1 EU-GDPR and there are no overriding legitimate reasons for the processing or you file an objection to the processing pursuant to Art 21 Sect. 2 EU-GDPR.
The personal data have been processed illegally.
The personal data was collected in relation to information society services offered in accordance with Art. 8 Sect. 1 EU-GDPR.
If we have made personal data public and we are obliged to delete them pursuant to Art. 17 Sect. 1 EU-GDPR, we will also take appropriate measures of a technical nature, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you have requested the deletion of all links to this personal data or of copies or replications of this personal data.
You have filed an objection to the processing pursuant to Art. 21 Sect. 1 EU-GDPR, as long as it is not yet clear whether the justified reasons of our company outweigh yours.
You have the right to receive the personal data concerning you that you have provided to us in a regular, structured, and machine-readable format, and you have the right to transmit this data to another responsible party without our interference, provided that the processing is based on consent pursuant to Art. 6 Sect. 1 lit. a EU-GDPR or Art. 9 Sect. 2 lit. a EU-GDPR or on a contract pursuant to Art. 6 Sect. 1 lit. b EU-GDPR and processing is carried out using automated methods.
When exercising your right to data transferability in accordance with Section 1, you have the right to request that we transfer the personal data directly to another responsible party, if technically feasible.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you on the basis of Art. 6 Sect. 1 Sentence 1 lit. e or f EU-GDPR; this also applies to profiling based on these provisions. We no longer process personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling if associated with such direct marketing.
You have the right to object to the processing of your personal data, for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Sect. 1 EU-GDPR, for personal reasons unless the processing is necessary to fulfil a task in the public interest.
You have the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against you or significantly impairs you in a similar manner. An automated decision making based on the collected personal data does not take place.
We make every effort to ensure the security of your data in accordance with the applicable data protection laws and technical capabilities. To secure your data, we maintain technical and organisational security measures in accordance with Art. 32 EU-GDPR, which we constantly adapt to the state of the art.
In principle, we only use your personal data within our company. If and to the extent that we involve third parties in the performance of contracts (such as logistics service providers), these personal data are only transmitted to the extent to which the transfer is necessary for the corresponding service. In the event that we outsource certain parts of data processing ("contract processing"), we contractually oblige contractors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject. A data transmission to places or persons outside the EU outside the case mentioned in this statement in paragraph 3 neither takes place nor is it planned.

References: Art. 6
 Art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 17
 Art. 6
 Art 9
 Art 21
 Art 21
 Art. 8
 Art. 17
 Art. 21
 Art. 6
 Art. 9
 Art. 6
 Art. 6
 Art. 89
 Art. 32