Source: http://www.itg-graph.de/index.php?id=229&L=1
Timestamp: 2019-04-25 01:53:56+00:00

Document:
For the terminology used, such as “personal data” or their “processing”, refer to the definitions in Art. 4 of the EU General Data Protection Regulations.
The term “user” includes all categories of person subjected to data processing. This includes our business partners, customers, prospective customers, and other visitors to the website.
We process the personal data of users only in accordance with applicable data protection regulations. This means that user data is processed only if legal permission has been given. Especially when data processing is needed or is required by law to perform our contractual services (e.g.order processing) as well as online services, consent of the user exists due to our legitimate interests (i.e. interest in the analysis, optimization, and business-related operation and security of our website content within the meaning of Art. 6, para. 1 lit. f of the EU General Data Protection Regulations, particularly for audience measurement, the creation of profiles for advertising and marketing purposes, as well as the collection of access data and use of third-party services.
We would like to point out that the legal basis of the consent is Art. 6, para. 1 lit. a. and Art. 7; the legal basis for processing to perform our services and implement contractual measures is Art. 6, para. 1 lit. b; the legal basis for processing to fulfill our legal obligations is Art. 6, para. 1 lit. c; and the legal basis for processing to protect our legitimate interests is Art. 6, para. 1 lit. f of the EU General Data Protection Regulations.
We perform organizational, contractual, and technological security measures in accordance with the state of the art to ensure that the rules of data protection laws are observed and to protect the data processed by us from accidental or intentional manipulation, loss, destruction, or from access by unauthorized persons.
In particular, the security measures include the encrypted transmission of personal data between your browser and our servers.
A transfer of data to third parties is performed only in accordance with legal regulations. We transfer user data to third parties only if, for example, this is required for contractual purposes based on Art. 6 para. 1 lit. b or required for legitimate interests for the economic and effective operation of our business based on Art. 6 para. 1 lit. f of the EU General Data Protection Regulations.
If we use subcontractors to provide our services, we will take appropriate legal measures and appropriate technical and organizational measures to ensure the protection of personal data in accordance with the relevant statutory provisions.
When contacting us (via email), the user’s information is processed according to the EU General Data Protection Regulations in order to handle the contact request.
Based on our legitimate interests acc. to the meaning of Art. 6, para. 1 lit. fof the EU General Data Protection Regulations, we generate data on every access to the server on which this service is located (server log files). Access data includes the name of the visited web page, the file, the date and time of access, the quantity of data transferred, the notification of successful retrieval, the browser type and version, the user’s operating system, the referrer (previously visited) URL, the IP address, and the requesting provider.
For security reasons (e.g. for the investigation of abuse or fraud), log file information is stored for a maximum period of seven days and then deleted. Data that require extended storage for evidentiary purposes is excluded from deletion until a final solution to the respective incident.
Cookies are information that is transferred from our web server or from web servers of third parties to the user’s web browser and stored for later retrieval. Cookies may be small files or other types of information storage.
If a user does not want cookies to be stored on their computer, they are asked to disable the corresponding option in the system settings of their browser. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies may lead to functional limitations of this website.
Upon request, users have the right to receive, free of charge, information about their personal data that we store.
In addition, users have the right to correct inaccurate data, to limit the processing and deletion of their personal data, to assert their rights regarding data portability (if applicable), and – in case of suspected unlawful data processing – to file a complaint with the responsible authority.
Likewise, users can always revoke any consent,including future use.
The data we store is deleted when it is no longer required for its intended purpose and there are no legal storage requirements opposing deletion. If the data of the users is not deleted because it is needed for other lawful purposes,its processing is restricted, i.e. the data is locked and not processed for other purposes. This applies e.g. to user data that must be retained for commercial or fiscal reasons.
According to statutory provisions, data is stored for 6 years in accordance with § 257, para. 1 of the German Commercial Code (account books, inventories, opening balances, annual reports, business letters, accounting documents, etc.) and for 10 years in accordance with § 147, para. 1 of the German Fiscal Code (books, recordings, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).
Users can object at any time to the future processing of their personal data according to legal requirements. In particular, objection may be made regarding processing for direct marketing purposes.

References: Art. 4
 Art. 6
 Art. 6
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 257
 § 147