Source: https://www.sharepa.com/data-protection
Timestamp: 2019-04-18 18:55:38+00:00

Document:
We process the personal data of our users only to the extent necessary to provide a functioning website as well as our content and services. The processing of personal data of our users takes place regularly only after consent of the user. An exception applies in those cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by statutory provisions.
Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 Para. 1 lit. a EU General Data Protection Regulation (DSGVO) serves as the legal basis.
Art. 6 para. 1 lit. b DSGVO serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Art. 6 para. 1 lit. d DSGVO serves as the legal basis in the event that vital interests of the data subject or another natural person requires the processing of personal data.
If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for the processing.
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, the data may be stored if the European or national legislator has provided for this in EU ordinances, laws or other regulations to which the person responsible is subject. The data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless it is necessary for further storage of the data for the conclusion or performance of a contract.
The data is stored in log files to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. In this context, there is no evaluation for marketing purposes.
The user data collected in this way is anonymised by technical precautions. It is therefore no longer possible to assign the data to the calling user. The data are not stored together with other personal data of the user.
The analysis cookies are used for the purpose of improving the quality of our website and its content. The analysis cookies tell us how the website is used and enable us to continually optimise our services.
Our legitimate interest in the processing of personal data pursuant to Art. 6 Para. 1 lit. f DSGVO also lies in these purposes.
The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent.
If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b DSGVO.
Sharepa is a file transfer service that offers its users a platform on which the users of the premium version with costs can upload premium data up to a size of 20 gigabytes, comment on it and at the same time secure it with a password. For a period of seven days, the uploaded data can be downloaded by third parties by means of an automatically generated link or by the user himself by entering his registration data.
The personal data of the user which can be entered for the registration are for the individualization of the user of the liable to pay the costs Premium version of Sharepa and thus of the respective contracting partner of the RenderThat GmbH & CO. KG necessary.
This is the case during the registration process for the fulfilment of a contract or for the implementation of pre-contractual measures if the data are no longer required for the implementation of the contract. Even after the conclusion of the contract, it may be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations.
If the data are necessary for the fulfilment of a contract or for the execution of pre-contractual measures, an early deletion of the data is only possible, as far as contractual or legal obligations do not stand in the way of a deletion.
Your consent will be obtained for the processing of the data during the upload process and reference will be made to this data protection declaration.
The data will not be passed on to third parties in this context.
The processing of personal data from the upload function serves us to process the upload process and to individualise the respective user in order to prevent misuse of the upload function and to ensure the security of our information technology systems.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. A deletion takes place at the latest when the uploaded files have been completely deleted or the files have to be deleted for legal reasons.
The user has the possibility to revoke his consent to the processing of personal data at any time.
In this case, an e-mail must be sent to: info@sharepa.com.
All personal data stored in the course of commenting on the upload will be deleted in this case.
The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. In all other respects the storage takes place due to the rightful interests of the RenderThat GmbH & Co. KG in the sense of the art. 6 exp. 1 lit. f. DSGVO and serves its security as a website operator. Because if the comment of the user should offend against applicable law, the RenderThat could GmbH & CO. KG could be prosecuted for this, which is why there is an interest in the identity of the comment author.
The processing of personal data from the input mask serves us solely to process the comment function. The other personal data processed during the sending process serve to prevent misuse of the comment function and to ensure the security of our information technology systems.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The data will be deleted at the latest when the commented data has been completely deleted or the comments have to be deleted for legal reasons. The personal data additionally collected during the sending process will be deleted at the latest after a period of seven days.
Your consent will be obtained for the processing of the data as part of the sending process and reference will be made to this privacy statement.
The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. Furthermore, the purpose of this data collection is to invoice the fee for the booking and provision of the premium version of Sharepa, so that the legal basis for this is Art. 6 para. 1 lit. b DSGVO.
The processing of personal data serves us solely for the processing and billing of the fee for the booking and the provision of the premium version of Sharepa.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. This is in particular the case, if the Premium version was effectively terminated by the respective user and no legal obligations of the user opposite the RenderThat GmbH & Co. KG exist.
Alternatively, you can contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
In this case, please send an e-mail to: info@sharepa.com.
If you have given your consent, this website uses Google Analytics, a web analysis service of Google Inc. "("Google"). The use includes the operation type "Universal Analytics". This makes it possible to allocate data, sessions and interactions across several devices to a pseudonymous user ID and thus to analyse the activities of a user across all devices. This data protection notice is provided by www.intersoft-consulting.de.
The legal basis for the use of Google Analytics is the user's consent pursuant to Art. 6 Para. 1 S. 1 lit. a DSGVO.
The recipient of the collected data is Google Analytics.
The personal data will be transferred to the USA under the EU-US Privacy Shield on the basis of the European Commission's adequacy decision. The certificate can be downloaded here.
You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser add-on. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting your information across multiple devices, you must opt-out of all systems you use. If you click here, the opt-out cookie will be set: Disable Google Analytics.
the existence of automated decision-making including profiling in accordance with Article 22(1) and (4) DSGVO and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to have your personal data corrected and/or completed by the person responsible if the personal data processed concerning you is inaccurate or incomplete. The person in charge must carry out the rectification immediately.
if you have lodged an objection against the processing pursuant to Art. 21 para. 1 DSGVO and it has not yet been determined whether the legitimate reasons of the liability outweigh your reasons.
You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO and there is no other legal basis for the processing.
If the person responsible has made the personal data concerning you public and is obliged to delete them in accordance with Art. 17 para. 1 DSGVO, he shall take appropriate measures, also of a technical nature, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you, as the person concerned, have requested them to delete all links to this personal data or copies or replications of this personal data.
If you have exercised your right to rectify, cancel or limit the processing of your personal data against the data controller, the data controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, cancellation or limitation of processing, unless this proves to be impossible or requires a disproportionate effort.
In exercising this right, you also have the right to request that the personal data relating to you be transferred directly by a responsible person to another responsible person, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data transfer shall not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority transferred to the controller.
The controller will no longer process the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
If personal data concerning you are processed for the purpose of direct marketing, you have the right at any time to object to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct marketing.
If you object to the processing for purposes of direct marketing, the personal data concerning you will no longer be processed for these purposes.
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of your consent does not affect the legality of the processing that took place on the basis of your consent until you revoke your consent.
With regard to the cases mentioned in 1. and 3. above, the person responsible shall take appropriate measures to protect the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the person responsible, to state his own position and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of suspected infringement, if you consider that the processing of your personal data is in breach of the DSGVO.
The supervisory authority to which the complaint was submitted will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.

References: Art. 6

Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 9
 Art. 17