Source: https://www.lavair.de/en/data-protection-policy
Timestamp: 2019-05-23 13:42:17
Document Index: 211890499

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 22', 'Art. 6', 'Art. 9', 'Art. 21', 'Art. 21', 'Art. 17', 'Art. 89', 'Art. 6', 'Art. 6', 'Art. 9', 'Art. 9', 'Art. 7']

Data protection policy | Lavair
Internet: www.lavair.de
We only collect and use personal data of our users insofar as this is necessary for the provision of a functional website as well as our content and services. The personal data of our users will normally only be collected and processed with the user's consent. An exception applies in those cases in which prior consent cannot be obtained for material reasons and the processing of the data is permitted by legal provisions.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) provides the legal basis for the processing of personal data. Art. 6(1)(b) GDPR provides the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary in order to carry out pre-contractual measures. Insofar as the processing of personal data is required in order to fulfil a legal obligation to which our company is subject, Art. 6(1)(c) GDPR provides the legal basis. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR provides the legal basis. If processing is necessary in order to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6(1)(f) GDPR provides the legal basis for processing.
The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if provision has been made for this by European or national legislators in EU regulations, laws or other provisions to which the controller is subject. The data will also be erased or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for the continued storage of the data for the conclusion or fulfilment of a contract.
The temporary storage of the IP address by the system is necessary in order to enable the website to be delivered to the user's computer. For this reason the IP address of the user must remain stored for the duration of the session.
If the data are stored in log files, this occurs after seven days at the latest. Continued storage is possible, but in this case the IP addresses of the users will be deleted or anonymized to prevent the calling client being identified.
We use cookies in order to make our website more user-friendly. Some elements of our web page need them in order to identify the browser again after the user has visited another page.
The language settings are stored and transmitted in the cookies.
These purposes also coincide with our legitimate interest in the processing of personal data pursuant to Art. 6(1)(f) GDPR.
Cookies are stored on the user’s computer and transmitted by it to our website. As a user, therefore, you have full control over the use of cookies. You can disable or restrict the transmission of cookies by making the corresponding settings in your web browser. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies for our website are disabled, it may no longer be possible to make full use of all functions of the website.
The transmission of flash cookies cannot be disabled by settings on the browser, but can be disabled by changes to the Flash Player settings.
Name, address, email, telephone number, message content
Your consent for the processing of the data will be obtained as part of the send process and you will be referred to this privacy statement.
Alternatively, you can make contact using the email address provided. In this case the user’s personal data provided with the email will be stored.
Data provided in this context will not be forwarded to third parties, but will only be used for the purposes of processing the conversation.
The legal basis for the processing of data where the user has given consent is Art. 6(1)(a) GDPR.
The legal basis for the processing of data transmitted when an email is sent is Art. 6(1)(f) GDPR. If the email contact is for the purpose of concluding a contract, Art. 6(1)(b) GDPR provides an additional legal basis for the processing.
The additional personal data collected during the send process will be erased not later than after seven days.
The user has the possibility at any time of withdrawing their consent to the processing of their personal data. If the user makes contact with us by email, they can at any time object to the storage of their personal data. In such a case the conversation cannot be continued.
You can demand confirmation from the controller whether we are processing personal data concerning you.
If such processing is taking place, you can demand the following information from the controller:
(8) the existence of automated decision-making including profiling in accordance with Art. 22(1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to obtain rectification and/or completion from the controller without undue delay if the personal data processed concerning you are incorrect or incomplete. The controller must perform the rectification without undue delay.
If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of the establishment, exercise or defence of rights or the protection of the rights of another natural or legal person or on grounds of important public interest of the Union or a Member State.
You can demand that the controller erase the personal data concerning you without undue delay. The controller is obliged to erase this data without undue delay if one of the following reasons applies:
(2) you withdraw your consent, on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing;
(3) you lodge an objection against the processing in accordance with Art. 21(1) GDPR and there are no compelling legitimate grounds for the processing, or you file an objection against the processing pursuant to Art. 21(2) GDPR;
(5) the deletion of personal data concerning you is necessary in order to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject; or
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Art. 17(1) GDPR, the controller, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89(1) in so far as the right referred to in paragraph (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
If you have exercised your right to have the controller rectify or erase data or restrict their processing, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1)(e) or (f) of Art. 6(1); this also applies for profiling based on those provisions.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies for profiling to the extent that it is related to such direct marketing.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your to object by automated means using technical specifications.
You have the right to withdraw your data protection declaration of consent at any time. The withdrawal of consent will not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal.
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard yours rights and freedoms and legitimate interests; or
However, these decisions must not be based on special categories of personal data pursuant to Art. 9(1) GDPR unless Art. 9(2)(a) or (g) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 7 GDPR.