Source: https://www.k2europe.net/en/data-protection/
Timestamp: 2019-04-24 20:40:09+00:00

Document:
As the operator of this website, we are committed to the protection of your personal data as our top priority. We keep your data confidential at all times and use it only in accordance with the legal data protection regulations. The following information is to explain to you what personal data we process, in which way and what your rights as a data subject are in this context. This data protection statement also serves the purpose of informing the data subject pursuant to Art. 13 and 14 GDPR.
Controller in the sense of the EU General Data Protection Regulation (EU Regulation 2016/679, hereinafter “GDPR”) and other national data protections laws of the member states as well as further data protection regulations is K2NE GmbH, Rathausstrasse 14, 6340 Baar, Zug, Switzerland, represented by the directors L. Evan Ellis and John D. Ederer. You can contact us at any time using the contact details shown on our website.
The controller’s representative in the European Union is K2NE Germany GmbH, Frauenplatz 11, 80331 Munich, Germany, represented by the directors L. Evan Ellis and John D. Ederer. You can contact our representative using the contact details shown on our website or by phone at +49 89 9545744-00.
In the following, the terms “we” or “us” refer to the said controller.
For all questions regarding the processing of your personal data and the exercising of your rights, you can contact our Data Protection Officer at K2NE-Privacy@k2.com.
1. To what extent and for which purposes do we process your personal data?
We process personal data only insofar as this is required for the purpose of providing a functional website as well as our contents and services. In general, we will only process our users’ personal data based on their consent. An exception applies where it is not possible to obtain a user’s prior consent due to practical reasons and the processing of personal data is permitted by law.
Where we obtain the data subject’s consent to processing personal data, the legal basis for the processing is provided in Art. 6(1)(a) GDPR. As a data subject, you have the right to withdraw your consent at any time without formal requirements; the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, the legal basis for the processing is provided in Art. 6(1)(b) GDPR. The same applies to processing operations necessary prior to entering into a contract.
Where the processing of personal data is necessary for compliance with a legal obligation to which we are subject, the legal basis for the processing is provided in Art. 6(1)(c) GDPR.
Where the processing of personal data is necessary for the purposes of the legitimate interests pursued by us or by a third party, and where such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis for the processing is provided in Art. 6(1)(f) GDPR. We will outline the applicable legitimate interests separately in this data protection statement where that is the case.
3. Which categories of recipients of personal data are there?
We may transfer your personal data to our affiliated companies within the purposes and legal bases set out in this data protection statement. Besides that, personal data are being processed on our behalf based on agreements pursuant to Art. 28 GDPR, especially by hosting providers or – as further described in this data protection statement – by website analysis, marketing and newsletter services. Public authorities may also be recipients of personal data where required by overriding legal regulations.
4. Do we intend to transfer personal data to a third country?
Due to our international company structure, personal data may also be transferred to our affiliated companies and their service providers in the third countries Switzerland, South Africa and the United States of America within the purposes and legal bases set out in this data protection statement. For transfers to Switzerland, an adequate level of data protection is guaranteed by the existence of an adequacy decision by the Commission according to Art. 45(3) GDPR. For transfers to South Africa and the United States of America, an adequate level of data protection is guaranteed in absence of an adequacy decision by the Commission according to Art. 45(3) GDPR by the conclusion of agreements on the basis of the EU standard contractual clauses concerning data protection. For the case that the United Kingdom should be considered a third country in the sense of the GDPR in future, we would already like to inform you that personal data may also be transferred to the United Kingdom and that an adequate level of data protection will be guaranteed by the conclusion of agreements on the basis of the EU standard contractual clauses concerning data protection, provided that there is no adequacy decision by the Commission according to Art. 45(3) GDPR.
Furthermore, we may also use processors based in third countries. Further details can be found in the following sections of this data protection statement.
5. For which period will your personal data be stored?
Personal data will be erased or blocked when the purpose of storing ceases to exist. Furthermore, we may store personal data as provided by Union or Member State law to which we are subject. Besides that, the duration of data retention follows the legal record keeping requirements and, as a general rule, amounts to 10 years. Erasure or blocking of personal data will also be carried out when a retention period prescribed by the applicable standards expires, unless there is a necessity to further retain such data for entering into, or performance of, a contract.
6. Is there a requirement or obligation to provide personal data?
The provision of personal data is neither a statutory nor a contractual requirement, nor are you obliged to provide us with personal data. However, the provision of personal data may be necessary for the conclusion of a contract or for other reasons. Further details can be found in the following sections of this data protection statement.
7. How are confidential data secured during transmission?
We use SSL/TLS encryption to secure the data you send to us through our website. The lock symbol in your browser window and the string “https://” (instead of “http://”) in the address line indicate that the connection is encrypted. Data sent to us through an SSL/TLS-encrypted connection cannot be read by third persons.
1. How and to which extent are personal data being processed in this context?
g) websites which you access through our website.
The information will also be stored in the log files of our system. These data will not be combined with data from other sources.
2. On which legal basis are personal data being processed in this context?
The legal basis for the processing of personal data is provided in Art. 6(1)(f) GDPR. Our legitimate interests in the processing are based on the purposes described in the following.
3. For which purposes are personal data being processed in this context?
It is necessary for our system to temporarily store the IP address in order to facilitate the delivery of our contents to the user’s client system. For this purpose, the IP address needs to remain stored for the duration of the session.
Storing data in log files is required to ensure the functionality and operability of our website. These data will also be used to optimise our website and to ensure the security of our information technology systems. We will not use the data collected in this context for marketing purposes.
4. For which period will personal data be stored in this context?
The data will be erased as soon as they are no longer necessary for the purposes for which they were collected. With regard to data collected for the provision of the website, this will be the case when the respective session has ended.
Data stored in log files will be erased within a maximum of seven days. Data may be further processed if the users‘ IP addresses have been deleted or distorted in such a way that makes it impossible to associate the accessing client.
5. How can you avoid the processing of your personal data in this context?
The processing of data for the provision of the website and storage in log files is mandatory for operating the website. The website cannot be used without the processing of personal data in this context.
Our website uses so-called “cookies”. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient and secure. Cookies are small text files that are stored on your computer and saved by your browser. Such cookies contain, for instance, your language or other user preferences so that they can be kept when changing between pages.
Most of the cookies we use are so-called “session cookies”. Such cookies are automatically deleted after your visit (session). Other cookies remain in your device’s memory until their validity expires or until you delete them. These cookies make it possible to recognise your browser when you next visit our website.
As far as other cookies (e.g. cookies used to analyse your surfing behavior by use of analysis or marketing tools) are also stored, they will be described separately in this data protection statement.
The legal basis for the processing of personal data using the aforementioned cookies is provided in Art. 6(1)(f) GDPR. Our legitimate interests in the processing are to provide optimised contents and services free of technical errors.
Cookies that are required for an error-free and optimised provision of our contents and services will be deleted automatically within a maximum of one day from your last visit to our website. The actual storage period for cookies also depends on your browser settings.
You have the option to subscribe to a free newsletter via our website and, thus, to register for our marketing communication. When signing up for our newsletter, the details entered into the form (title; first name; last name; e-mail address; company; position, where applicable; phone number, where applicable; country; industry) will be transmitted to, and processed by, us. These details are optional unless they are mandatory for the delivery of our newsletters.
We will ask you for your consent to the processing of data in the course of the registration process and refer to this data protection statement. The registration will only become effective when you have confirmed your consent by clicking a link in a one-time e-mail that we will send to you once the newsletter registration form has been submitted (so-called “double opt-in” procedure).
c) date and time of confirming the registration.
When registering for a webinar or an event via our website, you also have the option to subscribe to our newsletter at the same time by submitting the registration form. Also in this case, we will ask you for your consent in the same way and refer to this data protection statement.
In the context of data processing for purposes of marketing communication, data will not be transmitted to third parties except for our processors.
The legal basis for the processing of personal data for purposes of marketing communication is provided in Art. 6(1)(a) GDPR. As a data subject, you have the right to withdraw your consent for purposes of marketing communication at any time; the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. For this purpose, an unsubscribe link can be found in every newsletter, but you can also withdraw your consent at any time by notifying us without formal requirements.
The legal basis for the processing of personal data for documentation purposes in order to prove the consent given by the recipient and to prevent the abuse of the services or the e-mail address used is provided in Art. 6(1)(f) GDPR. Our legitimate interests in the processing are based on these documentation purposes.
The personal data will be processed for purposes of delivering our newsletters and marketing communication. Furthermore, the personal data will be processed for documentation purposes in order to prove the consent given by the recipient and to prevent the abuse of the services or the e-mail address used.
The data will be erased as soon as they are no longer necessary for the purposes for which they were collected. User data submitted when subscribing to our newsletter will thus be erased within a maximum of one year from unsubscribing from our newsletter, unless a longer retention period is required to prove the consent given by the recipient in case of a legal dispute.
You cannot receive our newsletter without providing personal data. However, when signing up for our newsletter, you only need to provide those details that are mandatory for this purpose.
You have the option to register for webinars and events via our website. When submitting the registration, the details entered into the form (title; first name; last name; e-mail address; company; position, where applicable; phone number, where applicable; country; industry) will be transmitted to, and processed by, us. These details are optional unless they are mandatory for conducting, and following up, the webinar or event.
We will ask you for your consent to the processing of data in the course of the registration process and refer to this data protection statement. At the same time, you will have the option to register for our marketing communication. The registration will only become effective when you have confirmed your consent by clicking a link in a one-time e-mail that we will send to you once the registration form has been submitted (so-called “double opt-in” procedure).
In the context of data processing for purposes of conducting, and following up, the webinar or event, data will not be transmitted to third parties except for our processors.
The legal basis for the processing of personal data for purposes of conducting, and following up, the webinar or event is provided in Art. 6(1)(a) GDPR. As a data subject, you have the right to withdraw your consent at any time without formal requirements; the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
The legal basis for the processing of personal data for purposes of compliance with legal, especially fiscal, record-keeping and documentation requirements in the context of events to which we are subject is provided in Art. 6(1)(c) GDPR.
The personal data will be processed for purposes of conducting, and following up, the webinar or event; this expressly includes providing presentation documents, recordings or similar information.
Furthermore, the personal data will be processed for documentation purposes in order to prove the consent given by the recipient and to prevent the abuse of the services or the e-mail address used.
The personal data will also be processed in order to comply with legal, especially fiscal, record-keeping and documentation requirements in the context of events to which we are subject.
The data will be erased as soon as they are no longer necessary for the purposes for which they were collected. User data submitted when registering for a webinar or an event will thus be kept until the webinar or event, as well as the follow-up actions involved, have been completed. In addition to this, data will be kept for as long as it is required to comply with legal, especially fiscal, record-keeping and documentation requirements in the context of events to which we are subject, or to prove the consent given by the recipient in case of a legal dispute.
Where consent to data processing for purposes of marketing communication has been given, data will be further stored for such purposes. Details regarding this processing operation can be found in the section “Marketing communication / newsletters” of this data protection statement.5. How can you avoid the processing of your personal data in this context?You cannot participate in webinars or events without providing personal data. However, when registering for a webinar or an event, you only need to provide those details that are mandatory for this purpose.
You cannot participate in webinars or events without providing personal data. However, when registering for a webinar or an event, you only need to provide those details that are mandatory for this purpose.
b) date and time of submission.
We will ask you for your consent to the processing of data in the course of submitting the contact form and refer to this data protection statement.
Alternatively, you may contact us by e-mail using the addresses shown on our website. In this case, the personal data submitted by the sender as part of the e-mail will be processed.
In this context of data processing, data will not be transmitted to third parties except for our processors.
The legal basis for the processing of personal data for purposes of handling and responding to an enquiry sent through our contact form is provided in Art. 6(1)(a) GDPR. As a data subject, you have the right to withdraw your consent at any time without formal requirements; the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
The legal basis for the processing of personal data for purposes of handling and responding to an enquiry sent by e-mail is provided in Art. 6(1)(f) GDPR. Our legitimate interests in the processing are based on these purposes. Where the enquiry is targeted at entering into a contract, an additional legal basis for the processing of personal data is provided in Art. 6(1)(b) GDPR.
The legal basis for the processing of personal data for purposes of compliance with legal record-keeping and documentation requirements in the context of business correspondence to which we are subject is provided in Art. 6(1)(c) GDPR.
The personal data will be processed for purposes of handling and responding to the enquiry and potential follow-up questions; this expressly includes providing the requested information by e-mail and, if a phone number has been provided, contacting you by phone with regard to the enquiry.
The personal data will also be processed in order to comply with legal record-keeping and documentation requirements in the context of business correspondence to which we are subject.
The data will be erased as soon as they are no longer necessary for the purposes for which they were collected. Data submitted when contacting us will thus be kept until the enquiry and any follow-up questions have been answered. In case of doubt, the enquiry will be considered answered when it can be reasonably concluded from the circumstances that the underlying issue has been clarified, and when no further questions have been raised. In addition to this, data will be kept for as long as it is required to comply with legal record-keeping and documentation requirements in the context of business correspondence to which we are subject, or to prove the consent given by the recipient in case of a legal dispute, in principle for 10 years.
Handling and responding to your enquiry and potential follow-up questions is not possible for us without you providing personal data. However, when contacting us, you only need to provide those details that are mandatory for this purpose.
e) date and time of use.
When initiating a live chat, we will ask you for your consent to the processing of your personal data and refer to this data protection statement.
The legal basis for the processing of personal data for purposes of handling and responding to an enquiry sent through our live-chat functionality is provided in Art. 6(1)(a) GDPR. As a data subject, you have the right to withdraw your consent at any time without formal requirements; the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
The legal basis for the processing of personal data for documentation purposes in order to prove the consent given by the live-chat user and to prevent the abuse of the live-chat functionality is provided in Art. 6(1)(f) GDPR. Our legitimate interests in the processing are based on these documentation purposes.
The personal data will be processed for purposes of handling and responding to the enquiry and potential follow-up questions; this explicitly includes providing the requested information by e-mail and, if a phone number has been provided in the course of the live-chat communication, contacting you by phone with regard to the enquiry.
Furthermore, the personal data will be processed for documentation purposes in order to prove the consent given by the live-chat user and to prevent the abuse of the live-chat functionality.
The data will be erased as soon as they are no longer necessary for the purposes for which they were collected. Data submitted through the live-chat functionality will thus be kept until the enquiry and any follow-up questions have been answered. In case of doubt, the enquiry will be considered answered when it can be reasonably concluded from the circumstances that the underlying issue has been clarified, and when no further questions have been raised. In addition to this, data will be kept for as long as it is required to comply with legal record-keeping and documentation requirements in the context of business correspondence to which we are subject, or to prove the consent given by the recipient in case of a legal dispute, in principle for 10 years.
The use of the live-chat functionality on our website is not possible without you providing personal data. However, when using the live-chat functionality, you only need to provide those details that are mandatory for this purpose.
This website uses features of the LinkedIn Insight Tag. This service is operated by LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA (“LinkedIn”).
When loading one of our pages containing LinkedIn functions, a connection to LinkedIn’s servers will be established. Thus, LinkedIn receives information about the visit to our website and your system. Such information includes your IP address, the URL visited, the URL of the previously visited page, the device used, the type and version of the browser used, date and time of the visit as well as the page views.
The LinkedIn Insight Tag enables us to analyse the success of our marketing campaigns within LinkedIn and to determine our target audience for such campaigns based on the user interaction with our website. This allows us to better adapt our marketing campaigns to our target audience and thus to deliver more relevant contents. LinkedIn will not share any personal data with us and will only provide us with aggregated reports.
In case you are a registered LinkedIn user, LinkedIn will be able to match your interaction with our website to your LinkedIn user account. The same applies when you decide to share or recommend contents from our website on LinkedIn.
You can disable the collection of your data for the LinkedIn Insight Tag feature under the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. If you are a LinkedIn member, please click “Opt Out on LinkedIn”, otherwise click “Opt Out”.
The legal basis for the processing of personal data for purposes of analysing user behaviour and placing targeted adverts is provided in Art. 6(1)(f) GDPR. Our legitimate interests in the processing are based on direct marketing purposes.
We have entered into a data processing agreement with LinkedIn and implemented the strict requirements of the EU data protection regulations for the use of the LinkedIn Insight Tag.
For transfers to the United States of America, an adequate level of data protection is guaranteed in absence of an adequacy decision by the Commission according to Art. 45(3) GDPR by LinkedIn’s commitment to comply with the EU-US Privacy Shield framework for transatlantic exchanges of personal data for commercial purposes between the European Union and the United States of America, and by the corresponding certification obtained by LinkedIn.
The data will be processed in order to analyse the user behavior of our website visitors and thus to better adapt our marketing campaigns to our target audience and to deliver more relevant contents.
The data collected by LinkedIn in encrypted form will be anonymised after seven days and the anonymised data will be deleted after 90 days. No data will be shared with us.
This website uses features of Google Remarketing. This service is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google Remarketing allows for the presentation of adverts to users that have visited our website before. Within the Google advertising network, adverts you see can be tailored to your interests.
Google Remarketing uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the United States of America and stored there.
We have entered into a data processing agreement with Google and implemented the strict requirements of the EU data protection regulations for the use of Google Remarketing.
For transfers to the United States of America, an adequate level of data protection is guaranteed in absence of an adequacy decision by the Commission according to Art. 45(3) GDPR by Google’s commitment to comply with the EU-US Privacy Shield framework for transatlantic exchanges of personal data for commercial purposes between the European Union and the United States of America, and by the corresponding certification obtained by Google.
The data will be processed in order to analyse the user behavior of our website visitors and to place adverts that are tailored to the user’s interests in the Google advertising network..
Cookies created in the course of using Google Remarketing will be deleted automatically within a maximum of two years from your last visit to our website. The actual storage period for cookies also depends on your browser settings.
You can prevent these cookies from being stored by selecting the appropriate settings in your browser. However, please note that doing so may limit the functionality of this website.
You can prevent or limit the collection of your data for the Google Remarketing feature by choosing the relevant settings on https://www.google.com/settings/ads.
This website uses features of Google Analytics, a web analytics service. This service is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the United States of America and stored there.
We have activated the IP anonymisation feature on this website. Your IP address will be shortened by Google within the European Union or in another state that is a party to the Agreement on the European Economic Area prior to transmission to the United States of America. Only in exceptional cases, the full IP address may be sent to a Google server in the United States of America and shortened there. Google will use this information on behalf of the operator of this website in order to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
2. On which legal basis are personal data being processed and transferred to third countries in this context?
The legal basis for the processing of personal data for purposes of analysing user behaviour is provided in Art. 6(1)(f) GDPR. Our legitimate interests in the processing are to optimise our website and marketing communications.
We have entered into a data processing agreement with Google and implemented the strict requirements of the EU data protection regulations for the use of Google Analytics.
The data will be processed in order to analyse the user behavior of our website visitors and to gain knowledge from such analysis for the further development and optimisation of our website and marketing communications.
Cookies created in the course of using Google Analytics will be deleted automatically within a maximum of two years from your last visit to our website. The actual storage period for cookies also depends on your browser settings.
You can also prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will then be set to prevent your data from being collected during future visits to this website.
Click here to be excluded from the Google Analytics data collection.
This website uses technologies operated by Marketo EMEA Ltd., Cairn House, South County Business Park, Leopardstown Road, Dublin 18, Ireland (“Marketo”) to collect and store data for marketing purposes and for the optimisation of our contents.
Furthermore, we track your activity on the website. When you, for instance, load contents from our website or access media content, we can use the Marketo cookies to determine your identity and to learn which areas of our website you are visiting. The Marketo cookies also allow us to keep track of repeated visits to our website.
We also use the Marketo cookies for sending e-mails in order to draw conclusions from your interaction with our e-mails and to know whether our e-mails have been opened as well as whether and, where applicable, which links have been clicked. This allows us to associate all activities on our website with the e-mails we send to your e-mail address. By tracking e-mail open and click rates, we obtain information about your user behaviour with respect to e-mail marketing and can ensure that we provide you with relevant information.
• When we send you a targeted e-mail in which we use web beacons, cookies or related technologies, we will find out if you open, read or delete the message.
• When you click on a link in a marketing e-mail from us, we will use a cookie to track which pages you view and which contents you load from our website.
• However, if you are not a registered user and do not access our website through a link sent by e-mail, we will not collect any information that would allow us to identify you.
The legal basis for the processing of personal data for purposes of analysing user behaviour and the generation of user profiles is provided in Art. 6(1)(f) GDPR. Our legitimate interests in the processing are based on direct marketing purposes and the purpose to optimise our website and marketing communications.
We have entered into a data processing agreement with Marketo and implemented the strict requirements of the EU data protection regulations for the use of Marketo.
The data will be processed in order to address persons showing interest in our contents in a more targeted manner for promotional purposes and to tailor the contents provided to their person and interests. The data will also be processed in order to analyse the user behavior of our newsletter recipients and website visitors and to gain knowledge from such analysis for the further development and optimisation of our newsletters, our website and our marketing communications.
Cookies created in the course of using Marketo will be deleted automatically within a maximum of two years from your last visit to our website. The actual storage period for cookies also depends on your browser settings.
User profiles derived from the use of Marketo relating to users that have given their consent to data processing for the purposes of marketing communication will be erased within a maximum of four years from the last user activity. User profiles relating to users that have not given their consent to data processing for the purposes of marketing communication, or that have withdrawn such consent, will be erased within a maximum of one year from the last user activity.
If you would like to prevent Marketo from analysing personal data in the context of e-mail communication, you must unsubscribe from our newsletter. For this purpose, an unsubscribe link can be found in every newsletter, but you can also withdraw your consent for purposes of marketing communication at any time by notifying us without formal requirements.
We use the services of MailChimp to send some of our newsletters. This service is operated by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (“MailChimp”).
MailChimp is a service which allows us to organise and analyse the distribution of newsletters. If you provide data to subscribe to our newsletter, it will be stored on MailChimp servers in the United States of America.
We use MailChimp to analyse our newsletter campaigns. When you open an e-mail sent through MailChimp, a file included in the email (a so-called web beacon) connects to MailChimp servers in the United States of America. This allows us to determine whether a newsletter message has been opened as well as whether and, where applicable, which links have been clicked. In addition, technical information will be collected (e.g. time of retrieval, IP address, browser type and operating system). This information cannot be assigned to a specific recipient. It will be used exclusively for the statistical analysis of our newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the recipients’ interests.
The legal basis for the processing of personal data for purposes of analysing user behaviour is provided in Art. 6(1)(f) GDPR. Our legitimate interests in the processing are based on direct marketing purposes and the purpose to optimise our website and marketing communications.
We have entered into a data processing agreement with MailChimp and implemented the strict requirements of the EU data protection regulations for the use of MailChimp.
For transfers to the United States of America, an adequate level of data protection is guaranteed in absence of an adequacy decision by the Commission according to Art. 45(3) GDPR by MailChimp’s commitment to comply with the EU-US Privacy Shield framework for transatlantic exchanges of personal data for commercial purposes between the European Union and the United States of America, and by the corresponding certification obtained by MailChimp.
The personal data will be processed for purposes of delivering our newsletters and marketing communication. The data will also be processed in order to analyse the user behavior of our newsletter recipients and website visitors and to gain knowledge from such analysis for the further development and optimisation of our newsletters, our website and our marketing communications.
If you would like to prevent MailChimp from analysing personal data in the context of e-mail communication, you must unsubscribe from our newsletter sent through MailChimp. For this purpose, an unsubscribe link can be found in every newsletter, but you can also withdraw your consent for purposes of marketing communication at any time by notifying us without formal requirements.
This website uses plugins of YouTube, a service offered by Google. This service is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”).
When you visit one of our pages featuring a YouTube plugin, a connection to the YouTube server will be established. At that time, the YouTube server will receive information about the page you are visiting. If you are logged in to your YouTube account, YouTube will be able to associate your browsing behaviour directly with your personal profile. You can avoid this by logging out of your YouTube account.
You have the right to obtain access to your personal data undergoing processing by us as well as to request copies of these data. This includes information on the purposes of the processing, the categories of personal data concerned, the recipients and accessors as well as, where possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period.
As far as the processing of personal data concerning you is based on Art. 6(1)(e) or Art. 6(1)(f) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of these data, including profiling based on those provisions. We will then no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such direct marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
Where processing is based on consent, you have the right to withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. To withdraw your consent, you can contact us or our Data Protection Office at any time under the contact details stated above.
• the personal data have been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.
• you have objected to processing pursuant to Art. 21(1) GDPR pending the verification whether our legitimate grounds override yours.
Where processing has been restricted under this section, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
The exercise of the right to data portability is without prejudice to the right to erasure. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Such decisions may not be based on special categories of personal data referred to in Art. 9(1) GDPR, unless Art. 9(2)(a) or Art. 9(2)(g) GDPR apply and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in points a) and c), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

References: Art. 13
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 45
 Art. 45
 Art. 45
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 45
 Art. 45
 Art. 6
 Art. 6
 Art. 6
 Art. 45
 Art. 6
 Art. 6
 Art. 8
 Art. 21
 Art. 9
 Art. 9
 Art. 9