Source: https://www.ehf-patent.com/cn/privacypolicy/
Timestamp: 2019-04-26 16:29:53+00:00

Document:
We take the protection of your personal data very seriously. Therefore we process personal data in compliance with current European and national legislation.
The following declaration provides an overview of what kind of data is collected, how these data are used and forwarded, what security provisions we have to ensure the protection of your data and how you can acquire information about the data given to us.
If we obtain the consent of the data subject for the processing of his or her personal data, Article 6(1) Sec. 1 lit. a of the European General Data Protection Regulation serves as the legal basis.
For the processing of personal data necessary for the performance of a contract to which the data subject is party, the legal basis for processing personal data is Article 6(1) Sec. lit. b GDPR. This also applies to processing operations that are required for the implementation of pre-contractual measures.
Where processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6(1) Sec. 1 lit. c GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not override the first-mentioned interest, Art. 6(1) Sec. 1 lit. f GDPR shall serve as the legal basis for the processing.
The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Personal data may be further stored if this is provided for by European or national legislation in EU regulations, laws or other provisions to which we are subject. Data is also blocked or erased when a storage period that has been prescribed by the stated standards has expired, unless there is a requirement for continued storage of the data to conclude or fulfil a contract.
Personal data means any information relating to an identified or identifiable natural person (in the following ‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Data subject means any identified or identifiable natural person whose personal data are processed by the controller responsible for the processing.
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction , erasure or destruction.
Controller or data controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
HTTP status code (e.g. ‘request succeeded’ or ‘file not found’).
The data will also be stored in the log files of our system. These data are not stored together with other personal data of the user.
provide law enforcement authorities with the necessary information to prosecute in the event of a cyber attack.
Log files are used for storage in order to ensure the proper functionality of the website. The data also helps us to optimize the website and to safeguard the security of our information technology systems. In this context the data is not analysed for marketing purposes.
Our legitimate interest in data processing also lies in these purposes pursuant to Art. 6(1) Sec 1 lit. f GDPR.
The data will be deleted as soon as they are no longer required for the purpose for which they were stored – in this case when the session has ended.
When data are stored in log files, they are deleted after not more than seven days. It is possible to store the data beyond that time. In this case the IP addresses will be deleted or anonymised so that it is no longer possible to determine the accessing client.
The collection of data for the provision of the website and the storage of data in log files are essential for the operation of the website. Consequently there is no possibility of objection to this.
This website uses so-called cookies. Cookies are small text files that are sent to your browser from a web server when you visit a website and are stored on your computer or end device (PC, notebook, tablet, smartphone etc.) to give the website operator (in this case us) certain information. Cookies are used to make the website more user-friendly and secure as well as to track use-related information such as user traffic patterns and site usage. Cookies do not cause any damage to your computer and do not contain any viruses.
This cookie contains a characteristic string (so-called cookie ID) that allows the browser to be uniquely identified when the website is revisited.
User data collected through technically necessary cookies will not be used to create a user profile.
The information generated by the cookie about the use of this website is usually transmitted to a Google server in the USA and stored there.
This website uses the Google Analytics extension “_anonymizeIp()”. The software is configured so that IP addresses will not be fully stored, but will be truncated. In this way, it is not possible to assign the truncated IP address to the requesting computer. Only in exceptional circumstances is the full IP address sent to a Google server in the USA and truncated there. The IP address transmitted by your browser within the context of Google Analytics will not be merged with other data from Google.
The legal basis for the processing of personal data is Art. 6(1) Sec 1 lit. 1f GDPR. For exceptional cases in which personal data are transmitted to the USA, Google has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU–US–Framework.
Google will use this information on our behalf to evaluate your use of our website and compile reports on website activity. The analysis of this collected data enables us to gain information on the use of the individual components of our website. This helps us to make our site more user-friendly and continuously improve it. Our legitimate interest in processing the data also lies in these purposes pursuant to Art. 6(1) lit. f GDPR. By anonymising the IP address, users’ interest in protecting their personal data is sufficiently taken into account.
• The data will be deleted as soon as they are no longer required for the purpose for which they were stored.
The cookies will be stored on your computer and transmitted to our site from there. If you do not agree to the collection and analysis of your data, you can deactivate or limit the transmission of cookies through the settings of your internet browser. Cookies that are already stored can be deleted at any time. However, in this case it is possible that not all functions of this website can be used to their full extent.
Alternatively, you can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set to prevent your data from being collected on future visits to this website: disable Google Analytics.
The third-party provider is Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Further information can be found in the user conditions under http://www.google.com/analytics/terms/de.html, the overview of data protection http://www.google.com/intl/de/analytics/learn/privacy.html, and the data privacy statement under http://www.google.de/intl/de/policies/privacy.
This is done regardless of whether you are logged into a user account provided by Google, or if there is no user account. When you are logged into Google, your data will be assigned directly to your account. The use of Google Web Fonts is to enable a homogenous and attractive display of fonts for our online services. Therein lies our legitimate interest pursuant to Art. 6(1) Sec. 1 lit. f GDPR.
(2) The legal basis for the processing of the personal data is Art. 6(1) lit. Sec. 1 f GDPR. Google also processes your personal data in the USA and has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU–US–Framework.
(3) Google stores your data as a user profile and uses this data for the purposes of advertising, market research and/or demand-oriented design of its website. Such analysis takes place in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users about your activities on our website.
(4) You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
the existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR and – at least in those cases – meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information about whether the personal data relating to you are transferred to a third country or to an international organisation. In this context, you can request to be informed of the appropriate guarantees pursuant to Art. 46 of the GDPR in connection with such transmission.
You have a right to immediate rectification and/or completion vis-à-vis the controller if your processed personal data are incorrect or incomplete.
the controller no longer needs the personal data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims, or if you have objected to processing pursuant to Art. 21(1) of the GPDR and verification is pending on whether the legitimate grounds of the controller override your grounds.
Where processing of your personal data has been restricted, such data may only be processed – apart from being stored – with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of the processing has been restricted in accordance with the aforementioned conditions, you will be notified by the controller before the restriction is lifted.
You withdraw consent on which the processing pursuant to Art. 6(1) lit. a or Art. 9(2) lit. a GDPR was based and where there is no other legal ground for the processing.
You lodge an objection to the processing pursuant to Art 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you lodge an objection to the processing pursuant to Art. 21(2) GDPR.
Your personal data have been collected in relation to offered information society services pursuant to Art. 8(1) GDPR..
b) Where the controller has made your personal data public and is obliged pursuant to Art 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers who are processing the personal data that you as the data subject have requested the erasure by such controllers of all links to those personal data or copies or replications of those personal data.
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89(1) GDPR in so far as the right referred to in a) is likely to render impossible or seriously impair the achievement of the objectives of such processing or for the establishment, exercise or defence of legal claims.
Where you have exercised your right to have the controller rectify, erase or restrict the processing, the controller is obliged to notify all recipients to whom your personal data have been disclosed of this rectification/erasure/restriction of processing, unless this proves impossible or involves a disproportionate amount of effort. You have the right vis-à-vis the controller to be notified of such recipients.
In exercising this right you also have the right to request that your personal data be transmitted directly from one controller to another controller, where technically feasible. The freedoms and rights of other persons may not be affected by this.
The data subject has the right to contact the controller at any time to assert the right to data portability.
The controller then no longer processes your personal data unless he can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
You may exercise your right to object in connection with the use of information society services – notwithstanding Directive 2002/58/EC – by automated means using technical specifications.
•The data subject has the right to contact the controller at any time to assert the right to object.
You have the right to withdraw your data protection declaration of consent at any time. The withdrawal of consent will not affect the legality of processing carried out on the basis of consent before withdrawal. To assert this right you may contact the controller.
However, these decisions may not be based on special categories of personal data according to Art. 9(1) GDPR unless Art. 9(2) lit. a or lit. g applies and appropriate measures have been taken to protect your rights, freedoms and legitimate interests.
In the cases referred to in (1) and (3), the controller shall take suitable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to state his or her own position and to contest the decision.
The data subject has the right to contact the controller at any time to assert these rights regarding automated decision-making.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
We reserve the right to modify our data protection practices and this policy to bring them in line with changes to relevant laws and/or regulations where applicable or to better address your needs. Accordingly, any changes to our data protection practices will be disclosed here.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art 21
 Art. 21
 Art. 8
 Art 17
 Art. 89
 Art. 9
 Art. 9
 Art. 78