Source: https://www.struccess.de/en/datenschutz/
Timestamp: 2019-04-21 01:09:45+00:00

Document:
Personal data is all information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). An identifiable person is a natural person who can be identified directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier or to one or more specific characteristics that are an expressions of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
The data subject is any identified or identifiable natural person whose personal data is processed by the person responsible for the processing of data.
Processing is any procedure or series of procedures involving personal data, carried out with or without the help of automated methods, such as the collection, capture, organisation, arrangement, storage, adaptation or alteration, selection, retrieval, use, disclosure by transmission, dissemination or any other form of provision, comparison or linkage, restriction, deletion or destruction.
Profiling is any kind of automated processing of personal data, which consists of using this personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects of such natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behaviour, place of residence or relocation.
Controller or person responsible for the processing of data shall mean the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of the processing are determined by EU law or by the law of the member states, the controller or the specific criteria for his nomination may be prescribed by EU law or by the law of the member states.
Processor shall mean any natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller.
Recipient shall mean any natural or legal person, public authority, agency or any other body to which personal data is disclosed, regardless of whether or not it is a third party. However, authorities that may receive personal data in the context of a specific investigation mandate according to EU law or the law of a member state law shall not be considered to be recipients.
Consent is any declaration or other unambiguous and informed expression of intent given voluntarily by the data subject in the form of a declaration or any other clear, unequivocal action by the data subject that he or she agrees to the processing of personal data concerning him or her.
We generally collect and use personal data of users only insofar as this is necessary for a functioning website and to allow users access to our content and services. The collection and use of personal data of our website users is being done regularly only after consent is given by the respective user. An exception applies in such cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.
If the processing of personal data is required for the performance of a contract to which the data subject is a party, Art. 6 paragraph 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Where the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 paragraph 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 paragraph lit d. GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interests, Article 6 paragraph 1. lit. f GDPR serves as the legal basis for processing.
Any personal data of the data subject will be erased or blocked as soon as the purpose of processing no longer applies. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
Every time you visit our website, our web server automatically collects data and information transmitted by the inquiring computer system.
7. the internet address of websites that are accessed by the user’s system via our websites.
The data is stored in the log files of our system. This does not include the IP addresses of the users or other data that enables the association of the data with a user. This data is not stored together with any other personal data of the user.
The temporary storage of the IP-address by the system is necessary to enable the website to be delivered to the user’s computer. For this, the IP-address of the user must remain stored for the duration of the session. These purposes constitute our legitimate interest in the processing of data in accordance with Art. 6 paragraph 1 lit. f GDPR.
The legal basis for the processing of personal data by using cookies is Art. 6 paragrapah 1 lit. f GDPR.
Our website offers a contact form which can be used for contacting us electronically. If a user utilises this tool, data that is entered into the input mask (possibly including company, name, email address and message) is transmitted to us and stored. Alternatively, you can contact us using the specified email address. In this case, the personal data transmitted by the user will be stored automatically.
This personal data is not passed on to third parties. The data is used exclusively for processing the conversation.
The legal basis for the processing of personal data is Art. 6 paragrapah 1 lit. b GDPR.
Personal data from the input mask is processed by us for the sole purpose of facilitating communication.
Data which is no longer necessary for the purpose of achieving the aim in question will be deleted. Concerning personal data from the contact form’s input mask and data that is sent by email, this is the case if the respective communication with the user is completed. The conversation is deemed completed if based on the circumstances it can be concluded that the relevant facts have been clarified conclusively.
You have the right to obtain confirmation from the controller as to whether personal data concerning you is being processed by us.
8. the existence of automated decision-making, including profiling, referred to in Article 22 paragraph 1 and 4 GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
If your personal data being processed is incorrect or incomplete, you have the right to demand from the controller correction and/or completion. The controller has to make the correction without undue delay.
4. if you have objected to processing pursuant to Art. 21 paragraph GDPR pending the verification whether the legitimate grounds of the controller override those of yourself.
Where processing of the personal data relating to you has been restricted, such personal data shall – with the exception of storage – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
1. the personal data relating to you is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
2. you withdraw your consent on which the processing is based according to Art. 6 paragraph 1 lit. a or Art. 9 paragraph 2 lit. a GDPR, and there is no other legal ground for the processing.
3. you object to the processing pursuant to Article 21 paragraph 1 GDPR and there are no overriding legitimate grounds for the processing, or your object to the processing pursuant to Art. 21 paragraph 2 GDPR.
4. the personal data relating to you has been unlawfully processed.
5. the personal data relating to you has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
6. the personal data relating to you has been collected in relation to the offer of information society services referred to in Art. 8 paragraph 1 GDPR.
Where the controller has made the personal data relating to you public and is obliged pursuant to Art. 17 paragraph 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, this personal data.
1. for exercising the right of freedom of expression and information.
Furthermore, in exercising this right you shall have the right to have the personal data relating to you transmitted directly from one controller to another, where technically feasible. This shall not adversely affect the rights and freedoms of others.
The right to data portability shall not apply to processing of personal data where this is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 paragraph 1 lit. e or f GDPR; this shall also apply to profiling based on these provisions.
The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves the purpose of establishing, exercising or defending legal claims.
Where personal data relating to you is processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing; this shall include profiling to the extent that it is related to such direct marketing.
In the cases referred to in (1.) and (3.), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, which shall include at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 8
 Art. 17
 Art. 6