Source: https://www.asp-stuttgart.de/en/en-datenschutz/
Timestamp: 2019-04-23 10:26:55+00:00

Document:
As operators of the website at asp-stuttgart.de (also “website”), we are responsible for the personal data of the user (“you”) of this website within the meaning of the applicable data protection law, in particular the basic data protection regulation (“GDPR”).
In the following we inform you clearly in the context of our duty to inform (art. 13 ff. GDPR) about which data is processed during your visit to our website and on what legal basis this is done. You will also receive information on how we protect your data from a technical and organisational point of view and what rights you have vis-à-vis us and the responsible supervisory authority.
We have appointed a company data protection officer.
When you browse to our website to simply visit it, so-called log files are processed by our system to automatically collect them.
The log files contain your IP address and possibly other personal data. Therefore, an assignment to you is always possible. However, we store your data only temporarily and in particular not together with other personal data.
The processing of the above data is necessary for the availability of our website. We also store the data for the purpose of the security of our information technology systems. These purposes also justify our legitimate interest in processing the data on the legal basis Art. 6 (1) lit. f GDPR. The log files, which also contain your IP address, will be deleted or made anonymous immediately after they are no longer necessary to achieve the aforementioned purposes, but at the latest after one year.
You have the possibility to contact us by e-mail. Your personal data transmitted in the e-mail will be stored by us. The data will not be passed on to third parties. The data will only be processed in order to handle your contact. The legal basis for processing your personal data is art. 6 (1) lit. f GDPR. We will store the data until it is no longer necessary to reach the purpose of the conversation with you and until the reason for your contacting us has been fully clarified.
If your e-mail is intended to conclude a contract with us, the additional legal basis for processing your personal data is art. 6 (1) lit. b GDPR. These data are stored as long as they are necessary for the execution of the contract. In addition, we only store your data in order to comply with contractual or legal obligations (e.g. tax obligations) (art. 6 (1) lit. c GDPR).
[MAILADRESSE ]. In this case all personal data of the conversation will be deleted and a continuation of the conversation is not possible.
Please note the following: You can ensure yourself that no cookies at all are stored on your computer, or that storage is only permitted by certain cookies. You can select this in your Internet browser settings. You can also view and delete the cookies stored there.
If you block all cookies, you may not be able to use all the features of our website.
We use our own cookies to ensure the functionality of our website. Some elements of our website require that your internet browser be recognized after a page change.
For the processing of personal data in cookies that we place on our website to ensure the functionality of our website and our offer, the legal basis is Art. 6 (1) lit. f GDPR.
As explained in the introduction to this section, you can enable or restrict the transmission of cookies by changing the settings in your Internet browser. You can delete cookies that have already been saved by your Internet browser at any time. If cookies for our website are restricted or deactivated, it is possible that not all functionalities can be used.
On our website we inform you about vacancies in our team and you can send us your application by e-mail. We process your data to manage your application process, which means that your application will be viewed by the employees responsible for pre-selection. Your data will not be passed on to third parties and we will not use your data for any other purposes.
Your application data will be stored by us. If we reject your application, we will only store the data for as long as necessary, for a maximum period of six months, unless you give us your consent that we may store the applicant data for longer in order to contact you after this period if necessary.
The legal basis for the processing of your data is § 26 BDSG and Art. 88 GDPR.
When we process your data, you are “affected” within the meaning of the GDPR. You have the following rights: right to information, right to rectification, right to limitation of processing, right to cancellation, right to notification and right to data transferability. In addition, you have a right of objection and a right of revocation.
• the existence of automated decision-making, including profiling in accordance with Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for you.
If we transfer your data to an international organisation or to a third country, you also have the right to request information as to whether suitable guarantees pursuant to Art. 46 GDPR exist in connection with the transmission.
You have the right to rectification and/or completion of the data that we have stored about you if this data is incorrect or incomplete. We will make the rectification or completion without delay.
• You have filed an objection to the processing pursuant to Art. 21 (1) GDPR, as long as it is not yet clear whether our justified reasons outweigh your interests.
• You revoke your consent on which the processing was based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.
• You file an objection to processing pursuant to Article 21 (1) GDPR and there are no overriding legitimate reasons for processing, or you file an objection to processing in accordance with Article 21 (2) GDPR.
• Your personal data has been processed unlawfully.
• Your personal data have been collected in relation to information society services offered in accordance with Art. 8 (1) GDPR.
If we have made your personal data public and we are obliged to delete them in accordance with the aforementioned conditions, we will take appropriate measures, including technical measures, taking into account the technologies and implementation costs available to us, to inform other data processors who process the personal data, that you have requested us to delete all links to this personal data or copies or replications of this personal data.
• for asserting, exercising or defending legal claims.
If you have exercised your right of rectification, deletion or restriction against us, we are obliged to inform all recipients to whom we have disclosed your personal data of the rectification, deletion or restriction of the processing of your data, unless this proves impossible or involves a disproportionate effort.
(2) processing shall be carried out by means of automated methods.
You have the right that we transfer your personal data directly to another responsible person, as far as this is technically feasible and freedoms and rights of other persons are not affected by this.
This right to data transferability shall not apply if the processing is necessary for the performance of a task in the public interest or in the exercise of official authority conferred on us.
You have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. e or lit. f GDPR for reasons arising from your particular situation. This also applies to any profiling referred to in these provisions.
After an objection, we will no longer process your personal data unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling as far as it is connected with direct advertising.
If you object to the processing of your personal data for direct marketing purposes, we will no longer process it for these purposes.
You have the possibility of exercising your objection in connection with the use of information society services – notwithstanding directive 2002/58/EC (Directive on privacy and electronic communications) – by means of automated procedures using technical specifications.
According to Art. 7 (3) GDPR you have the right to revoke your consent at any time. The revocation of consent does not render the legality of the processing retroactively ineffective.
You have the right of appeal to a supervisory authority, without prejudice to any other administrative or judicial remedy. In particular, you may assert your right of appeal in your Member State of residence, place of work or place of suspected infringement if you believe that the processing of your personal data is contrary to GDPR.

References: Art. 6
 art. 6
 art. 6
 Art. 6
 § 26
 Art. 88
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 8
 Art. 6
 Art. 7