Source: https://www.trive.me/en/privacy-protection/
Timestamp: 2019-04-22 13:05:59+00:00

Document:
We only ever collect and use personal data of our users to the extent to which this is necessary to provide a fully functional website and our contents and services. The regular collection and use of personal data of our users is only ever made with the user’s consent. One exception to this rule applies in cases in which, for factual reasons, it is not possible to obtain the user’s prior consent, and the processing of this data is permitted by law.
Insofar as we obtain the consent of the data subject to process his or her personal data, Art. 6 para. 1 p. 1 point a of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis for the processing of personal data.
Art. 6 para. 1 p. 1 point b of the GDPR shall serve as the legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is party. This shall also apply to processing necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 p. 1 point c of the GDPR shall serve as the legal basis.
Should it be necessary to process personal data in order to protect the vital interests of the data subject or another natural person, Art. 6 para. 1 p. 1 point d of the GDPR shall serve as the legal basis.
Should processing be necessary to protect the legitimate interests of our company or a third party and such interests are not overridden by the interests, fundamental rights and freedoms of the data subject, then Art. 6 para. 1 p. 1 point f of the GDPR shall serve as the legal basis for processing.
The personal data of the data subject will be deleted or blocked as soon as the purpose for which it has been saved ceases to apply. Further, data may also be stored if provided for by European or national legislators in Union directives, laws or other regulations, to which the data controller is subject. The data will also be deleted or blocked at such time as the storage period prescribed by the designated standards expires, unless it is necessary for the data to be stored for a further period for the conclusion or performance of a contract.
Every time our website is accessed, our system automatically acquires data and information from the computer system of the calling computer.
The data is also stored in the log files of our system. This data is not stored with other personal data of the user.
Art. 6 para. 1 p. 1 point f of the GDPR is the legal basis for the temporary storage of the data and the log files.
The temporary storage of the IP address by the system is necessary in order to be able to deliver the website to the user’s computer. To this end, the user’s IP address must be stored for the duration of the session.
Data is stored in log files to ensure that the website functions properly. In addition, the data serves to optimise the website and to guarantee the security of our IT systems. No data evaluation is carried out for marketing purposes in this context.
These purposes are also in our legitimate interests in data processing under Art. 6 para. 1 p. 1 point f of the GDPR.
Data is deleted as soon as it is no longer needed for the purpose for which it was collected. In the case of data being collected in order to make the website available, this is the case when the session is terminated.
In the case of data stored in log files, this is the case after a maximum of seven days. Storage beyond this point in time is possible. In this case, the user’s IP address will be deleted or distorted, so that it can no longer be attributed to the accessing client.
Data acquisition is essential for the provision of the website and the storage of data in log files is essential for operating the website. The user therefore has no right to object.
When accessing our website, the user is informed that cookies are used for analysis purposes, and requested to provide his or her consent to the processing of the personal data used in this respect. Information regarding this data privacy statement is also issued in this context.
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 p. 1 point f of the GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes, provided the user’s consent for this purpose has been obtained, is Art. 6 para. 1 p. 1 point a of the GDPR.
The analysis cookies are used for the purpose of improving the quality of our website and its contents. Through the analysis cookies, we find out how the website is used, which enables us to constantly improve our services. This enables us to provide optimum user guidance and to present as varied a website as possible, along with new contents, when you when you re-visit the site.
These purposes are also in our legitimate interests in the processing of personal data under Art. 6 para. 1 p. 1 point f of the GDPR.
Your consent to the processing of this data will be requested and reference made to this data privacy statement when you send your message.
Alternatively, an e-mail address is provided if you prefer to contact us this way. In this case, the personal data of the user transmitted with the e-mail is stored.
In this respect, there is no disclosure of data to third parties. Such data is used solely to process the communication.
The legal basis for the processing of data, provided the user’s consent has been obtained, is Art. 6 para. 1 p. 1 point a of the GDPR.
The legal basis for the processing of data collected when an e-mail is being sent is Art. 6 para. 1 p. 1 point f of the GDPR. If the point of the e-mail contact is to enter into a contract, then Art. 6 para. 1 p. 1 point b of the GDPR will serve as an additional legal basis for processing.
The sole reason for processing personal data from the input mask is to enable us to handle communication with you. If contact is established by e-mail, this also establishes a legitimate interest in processing the data.
The other personal data collected when the message is sent serve to prevent any abuse of the contact form and to guarantee the security of our IT systems.
Data is deleted as soon as it is no longer needed for the purpose for which it was collected. For personal data from the input mask of the contact form and data transmitted by e-mail, this is the case when a particular communication with the user is finished. Communication is finished when circumstances indicate that the matter concerned has been fully resolved.
The additional personal data collected while the message is being sent will be deleted after a period of no more than seven days has elapsed.
The user has the right to withdraw his or her consent to the processing of the personal data at any time. If the user contacts us by e-mail, he or she can object to the storage of his or her personal data at any time. If this is the case, then the communication cannot be continued.
In this case, all personal data collected as a result of contact being made will then be deleted.
This website uses the Matomo web analytics service to analyse and make regular improvements to the use of our website. The statistics obtained enable us to improve our services and make them more interesting to you, our users.
The legal basis for the use of Matomo is Art. 6 para. 1 p. 1 point f of the GDPR.
The purpose behind the use of the web analytics service is to analyse and make regular improvements to the use of our website. The statistics obtained enable us to improve our services and make them more interesting to you, our users.
The Matomo program is an open source project. For information of the third party supplier on the subject of data protection, see https://matomo.org/privacy-policy/.
You can ask the controller to provide you with confirmation as to whether or not personal data concerning you is processed by us.
(8) The existence of automated decision-making and profiling in accordance with Art. 22 para. 1 and 4 of the GDPR and – at least in these cases – meaningful information on the logic involved and the implications and intended impact of such processing for the data subject.
You have the right to request information on whether or not the personal data concerning you is transmitted to a third country or international organisation. In this context, you may ask for information on appropriate guarantees in accordance with Art. 46 of the GDPR relating to the transmission of data.
You have a right to have the controller correct or complete any personal data concerning you which, having been processed, is either incorrect or incomplete. The data controller must carry out any corrections without undue delay.
(4) if you have filed an objection to the processing of the data in accordance with Art. 21 para. 1 of the GDPR, and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.
If the processing of the personal data concerning you has been restricted, then, storage aside, this data may only be processed with your consent, or to establish, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of substantial public interest on the basis of Union or Member State law.
If restriction of the processing has been restricted under the above-mentioned conditions, you will be informed by the controller before the restriction is lifted.
(1) The personal data concerning you is no longer needed for the purposes for which it was collected or otherwise processed.
(2) You revoke your consent, which served as the basis for processing in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 point a of the GDPR, and there is no other legal basis for the processing.
(3) You file an objection to processing in accordance with Art. 21 para. 1 of the GDPR, and there are no overriding legitimate reasons for the processing, or you file an objection to processing in accordance with Art. 21 para. 2 of the GDPR.
(4) The personal data concerning you has been unlawfully processed.
(5) Deletion of the personal data concerning you is necessary in order to ensure compliance with a legal obligation under Union or Member State law to which the data controller is subject.
(6) The personal data concerning you has been acquired in relation to the offer of information society services in accordance with Art. 8 para. 1 of the GDPR.
If the controller has made the personal data concerning you public, and is obliged to delete such data in accordance with Art. 17 para. 1 of the GDPR, then, taking into account the technologies available and implementation costs, he – the controller – applies appropriate measures, which may also be of a technical nature, to inform the people responsible for processing personal data that, as a data subject, you have requested that they should delete all links to this personal data as well as all copies or replications of this personal data.
(5) to establish, exercise or defend legal claims.
If you have exercised your right to have the controller correct, delete or restrict the processing of your data, then the controller is obliged to inform all recipients to whom the personal data concerning you has been disclosed of such correction or deletion of the data or restriction of the processing, unless it proves impossible to do so or would involve unreasonable expense and effort.
You are entitled to have the controller inform you of these recipients.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This shall not adversely affect the rights and freedoms of others.
The right to data portability does not apply to processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 p. 1 point e or f of the GDPR; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims.
If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling, insofar as it is related to such direct marketing.
Should you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
In the context of the use of information society services – notwithstanding Directive 2002/58/EG – you are entitled to exercise your right to object by automated means using technical specifications.
You have the right to withdraw your declaration of consent to the processing of personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on your consent before its withdrawal.
These decisions must not, however, be based on special categories of personal data referred to in Art. 9 para. 1 of the GDPR, unless Art. 9 para. 2 point a or g applies, and suitable measures have been undertaken to safeguard your rights and freedoms and your legitimate interests.
With regard to the cases described in points (1) and (3), data controller will implement suitable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy in accordance with Art. 78 of the GDPR.

References: Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78