Source: https://www.kongressagentur.net/service/Datenschutz.php
Timestamp: 2019-01-18 04:23:20
Document Index: 762253016

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 22', 'Art. 46', 'Art. 21', 'Art. 6', 'Art. 9', 'Art. 21', 'Art. 21', 'Art. 8', 'Art. 17', 'Art. 9', 'Art. 9', 'Art. 89', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 6', 'Art. 9', 'Art. 9', 'Art. 78']

Data Controller in terms of the General Data Protection Regulation and other national data protection laws of the member states as well as any other data protection regulations is
Phone: 0831 57 53 26 0
In principle, we only process the personal data of our users insofar as doing so is required for providing a functioning website as well as our content and services. We will only process personal data of our users following consent of the user. An exception applies in cases where a consent cannot be obtained in advance for factual reasons and where processing of the data is permitted by legal provisions.
Where we obtain consent from a data subject for the processing of personal data, the legal basis is Art. 6(1) point (a) EU General Data Protection Regulation (GDPR). Where processing of personal data is necessary for the performance of a contract to which the data subject is a party, the legal basis is Art. 6(1) point (b) GDPR. This also applies to processing operations that are required in order to take steps prior to entering into a contract.
Where processing of personal data is necessary for compliance with a legal obligation that our company is subject to, the legal basis is Art. 6(1) point (c) GDPR. In case that vital interests of the data subject or another natural person necessitates the processing of personal data, the legal basis is Art. 6(1) point (d) GDPR. If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former, the legal basis is Art. 6(1) point (f) GDPR.
The personal data of the data subject are erased or blocked once the purpose of storage no longer applies. Beyond that period, data may be saved if saving is stipulated by European or national legislators in regulation, laws or other provisions of EU law that the Data Controller is subject to. The data will also be blocked or erased if a retention period set out by the above regulations lapses, unless it is necessary to continue to save the data for conclusion or fulfilment of a contract.
Our website uses cookies. Cookies are text files that are saved in the Internet browser or on the computer system of the user by the Internet browser. When a user accesses a website, the cookie can be saved on the operating system of the user. This cookie contains a characteristic character sequence which allows for an unequivocal identification of the browser when the website is accessed again.
We use cookies in order to make our website more user-friendly. Some elements on our website make it necessary to be able to identify the browser, also after a change of websites.
Moreover, we use cookies on our website that allow for an analysis of the browsing behaviour of the user.
(2) Frequency of website access
The data of the user collected this way are pseudonymised using technical means. Accordingly, it is no longer possible to link the data to the accessing user. The data are not saved together with other personal data of the users.
When users access our website, they are informed of the use of cookies for analysis purposes by an information banner and are referred to this privacy notice. In this context, there will also be information as to how the saving of cookies can be prevented in the browser setting.
When a user accesses our website, they are informed of the use of cookies for analysis purposes and their consent to processing of personal data used in this context is obtained. As part of this process, they are also made aware of this privacy notice.
The legal basis for the processing of personal data using cookies that are necessary from a technical point of view is Art. 6(1) point (f) GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes when the corresponding consent of the user has been obtained is Art. 6(1) point (a) GDPR.
The purpose of using cookies that are necessary from a technical point of view is making the use of websites easier for users. Some functions of our website cannot be offered without using cookies. To achieve this, it must also be possible to recognise the browser after changing to a different web page.
The data collected by using cookies that are necessary from a technical point of view are not used for creating user profiles.
Analysis cookies are used for improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and are thus able to continuously optimise our content.
These purposes also constitute our legitimate interest in processing personal data pursuant to Art. 6(1) point (f) GDPR.
Cookies are saved on the user's computer and are sent to our website by the computer. Accordingly, you as the user have full control over the use of cookies. By changing the settings of your Internet browser, you can deactivate or restrict the transfer of cookies. Cookies that were already saved can be erased at any time. This process may also be automated. If cookies are deactivated for our website, it may no longer be possible to use all features of our website to their full extent.
You can subscribe to a free newsletter on our website. In this case, the data entered into the input screen when registering for the newsletter will be sent to us.
We will also collect the following data upon registration:
In order to process the data, we will obtain your consent during the registration process and we will refer you to this privacy notice.
We will not disclose the data to third parties in connection with data processing for sending of newsletters. These data will only be processed for sending the newsletter.
The legal basis for the processing of personal data after registration for the newsletter by the user if consent of the user has been obtained is Art. 6(1) point (a) GDPR.
Purpose of collecting the e-mail address of the user is sending the newsletter.
Purpose of the collection of other personal data as part of the registration process is preventing misuse of the services or the e-mail address used.
The data will be erased once they are no longer required for achieving the purpose for which they were collected. This means that the e-mail address of the user will be saved while the newsletter subscription is active.
The newsletter subscription can be cancelled by the user in question at any time. There is a corresponding link for this purpose in each newsletter.
Our website offers a contact form which you can use to contact us electronically. If a user avails themselves of this option, the data entered into the input mask are sent to us and saved by us.
When the message is sent, the following data will be saved as well:
(3) Postcode, town
When the user registers, the following data will be saved as well:
In order to process the data, we will obtain your consent during the sending process and we will refer you to this privacy notice.
Alternatively, you may contact us using the e-mail address provided. In this case, the personal data of the user transmitted in the e-mail will be stored.
We will not disclose the data to third parties in this context. These data will only be processed for handling the conversation.
The legal basis for the processing of personal data if consent of the user has been obtained is Art. 6(1) point (a) GDPR.
The legal basis for the processing of personal data transmitted as part of an e-mail is Art. 6(1) point (f) GDPR. Where the purpose of the e-mail correspondence is conclusion of a contract, the additional legal basis for processing is Art. 6(1) point (b) GDPR.
The sole purpose of processing the personal data from the input mask is handling the contact request. In case of contact via e-mail, this also is the required legitimate interest in processing of the data.
The purpose of the other personal data processed as part of the sending process is preventing misuse of the contact form and to ensure the security of our information technology systems.
The data will be erased once they are no longer required for achieving the purpose for which they were collected. As regards the personal data from the input mask of the contract form and those that were sent by e-mail, this is the case when the respective conversation with the user is terminated. A conversation is deemed terminated when it can be inferred from the circumstances that the matter has been settled in a final manner.
Any additional personal data that are collected during the sending process will be erased following a period of seven days.
The user has at any time the option to withdraw their consent to processing of personal data. If the user contacts us by e-mail, they may object to the saving of their personal information at any time. In such case, the conversation cannot be continued.
All personal data that were saved as part of the contact request will then be erased.
VI. Data protection regulations regarding the use and application of Google Analytics, YouTube, Facebook, Instagram, Google Maps & Google Fonts
VI.I. Data protection regulations regarding the use and application of Google Analytics (with anonymisation feature)
The Data Controller has integrated the component Google Analytics (with anonymisation feature) into this website. Google Analytics is a web analysis service. Web analysis is the recording, collection, and analysis of data regarding the behaviour of website visitors. Amongst others, a web analysis service collects data on the website from which the individual in question accessed the website (so-called referrer), which subpages they accessed and how often and for how long subpages were visited. A web analysis services is primarily used for optimisation of a website and to conduct a cost-benefit analysis regarding online advertisement.
Operator of the component Google Analytics is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The Data Controller uses the addition "_gat._anonymizeIp" for the web analysis via Google Analytics. With this addition, the IP address of the Internet connection of the individual is shortened and anonymised by Google if our websites are accessed from a member state of the European Union or from another contracting state of the European Economic Area.
The purpose of the Google Analytics component is the analysis of visitor streams on our website. Google uses the collected data and information to, amongst others, analyse the use of our website in order to create online reports for us that illustrate the activities on our websites and in order to provide further services in connection with the use of our website.
Google Analytics places a cookie on the information technology system of the data subject. Please see above for an explanation regarding the nature of cookies. By placing a cookie, Google is enabled to analyse the use of our website. By accessing individual pages of this website that is operated by the Data Controller and for which a Google Analytics component was integrated, the Internet browser on the information technology system of the individual in question is automatically prompted by the respective Google Analytics component to transmit data for online analysis to Google. As part of this technical procedure, Google gains access to personal data such as the IP address of the data subject, which Google uses, amongst others, to trace the origin of the visitors and clicks and to thus make the invoicing of commissions possible.
With the help of cookies, personal data such as time of access, place from which the access request originated, and the frequency of visits to our website by the data subject are saved. Every time you visit our website, these personal data, including the IP address of the Internet access used by the data subject, are transmitted to Google in the United States of America. These personal data are saved by Google in the United States of America. Google may disclose personal data that are collected using this technical procedure to third parties.
The data subject may prevent the placing of cookies by our website as illustrated above at any time by choosing the corresponding setting of the browser they use and may thus object to the placement of cookies on a permanent basis. Such settings of the browser used by the user would also prevent Google Analytics from placing a cookie on the information technology system of the individual in question. Additionally, any cookies placed by Google Analytics can be erased via the web browser or other software systems at any time.
Furthermore, the data subject has the option to object to a collection of the data referring to the use of this website that are generated by Google Analytics as well as to their processing by Google and to prevent any such. To do so, the data subject has to download and install the browser add on under the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information must be collected by and transmitted to Google Analytics in regard to the visits to websites. The installation of the browser add-on is considered an objection by Google. If the information technology system of the data subject is erased, formatted or installed anew at a later point, the data subject will have to reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is deinstalled or deactivated by the data subject or any person within the former's sphere of influence, the browser add-on may be installed or activated again.
Please see https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html for further information and details regarding applicable data protection regulations of Google. You can find more information about Google Analytics under this link https://www.google.com/intl/de_de/analytics/.
VI.II. Data protection regulations regarding the use and application of YouTube
The Data Controller has integrated the YouTube components into this website. YouTube is an online video portal that allows video publishers the free uploading of video clips and other users, also free of charge, the viewing and rating of as well as commenting on these videos. YouTube permits the publication of all kinds of videos, which is why both complete films and TV programmes, but also music videos, trailers or videos made by the users themselves can be accessed via the online portal.
By accessing individual pages of this website that is operated by the Data Controller and for which a YouTube component (YouTube video) was integrated, the Internet browser on the information technology system of the individual in question is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Please see https://www.youtube.com/yt/about/de/ for further information about YouTube. As part of this technical process, YouTube and Google become aware of which specific subpages of our website are visited by the data subject.
If the data subject is logged into YouTube at the same time, YouTube recognises, when the subpage that contains a YouTube video is accessed, which specific subpage of our website is visited by the data subject. This information is collected by YouTube and Google and is linked to the respective YouTube account of the data subject.
YouTube and Google are always informed by the YouTube component that a data subject accessed our website if the individual in question was logged into YouTube when accessing our website; this takes place irrespective of whether the data subject does click on a YouTube video or not. If the data subject does not want such transmission of this information to YouTube and Google, they can prevent transmission by logging out of their YouTube account before accessing our website.
The privacy notice published by YouTube, which can be accessed under https://www.google.de/intl/de/policies/privacy/, provides information on the collection, processing, and use of the personal data by YouTube and Google.
VI.III. Data protection regulations regarding the use and application of Facebook
The Data Controller has integrated components of the company Facebook into this website. Facebook is a social network.
A social network is an online social meeting place, an online community that usually allows users to communicate with one another and to interact in the virtual world. A social network can serve as platform for exchanging opinions and experiences or enables the Internet community to provide personal or company-related information. Amongst others, Facebook makes it possible for users of the social network to create private profiles, upload photos, and network via friend requests.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The data controller for the processing of personal data is, if an individual resides outside of the USA or Canada, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
By accessing individual pages of this website that is operated by the Data Controller and for which a Facebook component (Facebook plug-in) was integrated, the Internet browser on the information technology system of the individual in question is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. You can find an overview over all Facebook plug-ins on https://developers.facebook.com/docs/plugins/?locale=de_DE. As part of this technical process, Facebook becomes aware of which specific subpage of our website is visited by the data subject.
If the data subject is logged into Facebook at the same time, Facebook recognises, every time our website is accessed by the data subject and for the entire duration of the respective visit to our website, which specific subpage of our website is visited by the data subject. This information is collected by the Facebook component and is linked to the respective Facebook account of the data subject by Facebook. If the data subject clicks on any of the Facebook buttons that are integrated into our website, for example the "Like" button, or if the data subject posts a comment, Facebook links this information to the personal Facebook user account of the data subject and stores this personal data.
Facebook is always informed by the Facebook component that a data subject accessed our website if the individual in question was logged into Facebook when accessing our website; this takes place irrespective of whether the data subject does click on a Facebook component or not. If the data subject does not want such transmission of this information to Facebook, they can prevent transmission by logging out of their Facebook account before accessing our website.
The data protection guideline published by Facebook, which can be accessed under https://de-de.facebook.com/about/privacy/, provides information on the collection, processing, and use of the personal data by Facebook. Additionally, it explains which settings Facebook offers for the protection of the privacy of the data subject. Moreover, there are various applications available that allow for suppressing the transmission of data to Facebook. A data subject may use such applications to prevent a transmission of data to Facebook.
VI.IV. Data protection regulations regarding the use and application of Instagram
Embedded in our websites are features of the service Instagram. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link content of our websites to your Instagram profile by clicking the Instagram buttons. This allows Instagram to link the visit to our website to your user account. Please note that we as the provider of the website are not informed of the content of the transmitted data or their use by Instagram. Please see the privacy notice of Instagram under: http://instagram.com/about/legal/privacy/ for more information.
VI.V. Data protection regulations regarding the use and application of Google Maps
This website uses the "Google Maps and route planner" functions of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google") in order to display or calculate geographical information and approach routes. Via Google Maps, data regarding your use of this website may be transmitted to and collected and processed by Google. You can prevent the transmission of such data by deactivating "Javascript" in your browser. In this case, however, no maps can be displayed. By using this website and the non-deactivation of "Javascript", you declare your consent to the processing of your data by Google for the above purposes. For more information on how "Google Maps" and the route planner use your data as well as the privacy notice of Google, please visit: https://www.google.com/intl/de_de/help/terms_maps.html
VI.VI. Data protection regulations regarding the use and application of Google Fonts
We incorporate the fonts ("Google Fonts") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy notice: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.
VII. Legal basis for processing of personal data
The legal basis for the processing of personal data of users is Art. 6(1) point (f) GDPR.
VIII. Purpose of data processing
Processing the personal data of users allows us to analyse the browsing behaviour of our users. By analysing the collected data, we are able to compile information about the use of individual components of our website. This helps us to continuously improve our website and the user-friendliness of our website. These purposes also constitute our legitimate interest in processing the data pursuant to Art. 6(1) point (f) GDPR. By anonymising the IP address, the interest of the users in the protection of their personal data is taken into account in a sufficient form.
The data will be erased once they are no longer required for our recording purposes.
X. Options for objection and erasure
On our website, we offer our users the option to opt-out of the analysis process. To do so, please follow the link below. Doing so places another cookie in your system that informs our system to not save the data of the user. If the user erases the corresponding cookie from their system in the meantime, they will have to place the opt-out cookie again.
If your personal data are being processed, you are a data subject in terms of the GDPR and you have the following rights towards the Data Controller:
You may request confirmation by the Data Controller as to whether personal data concerning you are being processed by us.
If such processing does take place, you can request the following information from the Data Controller:
(3) the recipients and/or the categories of recipients to whom your personal data were or will be disclosed;
(4) the intended period for which your personal data will be saved or, if specific information in this regard cannot be provided, criteria for determination of the storage period;
(5) the existence of a right to rectification or erasure of your personal data, a right to restriction of processing by the Data Controller or a right to objection against such processing;
(7) all available information regarding the source of the data if the personal data are not obtained from the data subject;
(8) the existence of an automated decision-making process including profiling in terms of Art. 22(1) and (4) GDPR and – at least in these cases – conclusive information as to the logic involved as well as the scope and intended effects of any such processing for the data subject.
You have the right to demand information as to whether your personal information is transmitted into a third country or to an international organisation. In this regard, you may request to be informed of suitable guarantees pursuant to Art. 46 GDPR in connection with transmission.
You are entitled to a right to rectification and/or completion towards the Data Controller should your personal data that are processed be incorrect or incomplete. The Data Controller must rectify these immediately.
Subject to the following conditions, you may request the restriction of processing of your personal data:
(1) if you contest the accuracy of your personal data for a period that allows the Data Processor to verify the accuracy of the personal data;
(2) if processing is unlawful and if you object to a erasure of the personal data and instead request restriction of the use of the personal data;
(3) if the Data Controller no longer requires the personal data for the purpose they were processed for, but if you require them for assertion, exercising or defence of legal claims; or
(4) if you have raised objections against processing pursuant to Art. 21(1) GDPR and if it is not yet clear whether the legitimate reasons of the Data Controller outweigh your reasons.
If the processing of the personal data in question was restricted, these data may – with the exception of storing them – only be used with your consent or in order to assert, exercise or defend legal claims or to protect the rights of another natural or judicial person or for reasons of an essential public interests of the Union or of a member state.
If processing was restricted in accordance with the above conditions, you will be informed by the Data Controller before the restriction is lifted.
You may demand the Data Controller to erase the personal data concerning you immediately and the Data Controller is obliged to erase these data immediately, provided one of the following reasons applies:
(1) The personal data concerning you are no longer required for the purposes they were collected or otherwise processed for.
(2) You withdraw your consent on which the processing pursuant to Art. 6(1) point (a) or Art. 9(2) point (a) GDPR was based and there is no other legal reason for them to be processed.
(3) You lodge a complaint against processing pursuant to Art. 21(1) GDPR and there are no outweighing legitimate reasons for processing or you lodge a complaint against processing pursuant to Art. 21(2) GDPR.
(5) The erasure of the personal data concerning you is required to meet a legal obligation under Union law or the law of the member states the Data Controller is subject to.
(6) The personal data concerning you were collected in regard to services offered by the information society in accordance with Art. 8(1) GDPR.
If the Data Controller made the personal data concerning you public and if the Data Controller is, pursuant to Art. 17(1) GDPR, obliged to erase them, they shall take appropriate measures, taking into consideration the available technology and implementation costs, also technical measures, to inform data controllers who process personal data that you as data subject have requested from the Data Controller the erasure of any and all links to these personal data or copies or replications of these personal data.
There is no right to erasure insofar as processing is necessary
(2) to meet a legal obligation that necessitates processing pursuant to Union law or the law of the members states the Data Controller is subject to, or to carry out a task that is in the public interest or that is carried out as part of exercising a public authority that was conferred to the Data Controller;
(3) for reasons of public interest in public health matters pursuant to Art. 9(2) points (h) and (i) as well as Art. 9(3) GDPR;
(4) for archiving purposes that are in the public interest or for scientific or historic research purposes or for statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right set out under a) is likely to make attaining the goals of such processing impossible or severely impairs achievement of the goals; or
Where you have asserted the right to rectification, erasure or restriction of processing towards the Data Controller, the Data Controller is obliged to inform all recipients to whom the personal data concerning you were disclosed of this rectification or erasure of the data or the restriction of processing, unless it is established that doing so is impossible or would require a disproportionate effort.
You have the right to have the Data Controller inform you of these recipients.
You have the right to receive the personal data concerning you that you provided the Data Controller with in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit these data to another data controller without obstruction by the Data Controller whom you provided the personal data to, provided that
(1) processing is based on consent pursuant to Art. 6(1) point (a) GDPR or Art. 9(2) point (a) GDPR or on a contract pursuant to Art. 6(1) point (b) GDPR and
(2) processing takes place using automated processes.
When exercising this right, you are also entitled to have the personal data concerning you transmitted directly from one data controller to another data controller where doing so is possible from a technical point of view. This must not affect the freedoms and rights of others.
The right to data portability does not apply to any processing of personal data that is necessary to carry out a task that is in the public interest or that is carried out as part of exercising public authority that was conferred to the Data Controller.
You have the right, based on reasons stemming from your particular situation, to object at any time against the processing of the personal data concerning you that takes place based on Art. 6(1) points (e) or (f) GDPR; this also applies to any profiling based on this regulation.
The Data Controller will then no longer processes the personal data concerning you, unless they can prove compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms or if the purpose of processing is the establishment, exercising or defence of legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time against processing of the personal data concerning you for such marketing purposes; this also applies to profiling, insofar as it is associated with direct advertisement.
You have the option, in connection with the use of services of the information society – irrespective of Directive 2002/58/EC – to exercise your right to objection using automated processes that utilise technical specifications.
You have the right to withdraw your consent under data protection law at any time. When withdrawing this consent, the lawfulness of any processing subject to that consent prior to revocation remains unaffected.
You have the right to not be subjected to a decision that is solely based on automated processing – including profiling – which becomes legally effective for you or which may have other serious negative effects on you. This does not apply if the decision
(1) is required for conclusion or fulfilment of a contract between you and the Data Processor;
(2) is permissible based on Union law or laws of the member states that the Data Controller is subject to and if these laws contain appropriate measures to protect your rights and freedoms as well as your legitimate interests; or
(3) was made with your explicit consent.
However, these decisions may not be based on the special categories of personal data in terms of Art. 9(1) GDPR, unless Art. 9(2) points (a) or (g) GDPR apply and appropriate measures to protect your rights and freedoms as well as your legitimate interests must be taken.
As regards the cases set out in (1) and (3), the Data Controller takes appropriate measures to protect your rights and freedoms as well as your legitimate interests, which includes at least the right to effect intervention of a person on the part of the Data Controller, the right to presentation of the own point of view, and the right of challenging the decision.
Without prejudice to any other remedy under administrative law or the right to apply to the courts, you have the right to file a complaint with a supervisory authority, especially in the member state of your habitual residence, place of or work, or place of the alleged infringement, if you are of the opinion that processing of the personal data concerning you violates the GDPR.
The supervisory authority to which the complaint was submitted will inform the complainant of the status and results of the complaint including the option to apply to the courts pursuant to Art. 78 GDPR.