Source: https://www.yusra-mardini.com/privacy-policy
Timestamp: 2019-07-22 09:29:59
Document Index: 781623294

Matched Legal Cases: ['Art. 6', 'Art. 46', 'Art. 22', 'Art. 21', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 6', 'Art. 9', 'Art. 21', 'Art. 8', 'Art. 6', 'Art. 89']

Yusra Mardini :: Privacy Policy
Privacy Policy according to EU General Data Protection Regulation (GDPR):
Yusra Mardini (hereinafter "website owner/controller")
Web: www.yusra-mardini.com
c/o StageField Management & Productions GmbH
Maximilianstraße 2 | 80539 Munich | Germany
Phone: +49 89 20500-8715
Fax: +49 89 20500-8716
E-Mail: management@stagefield.de
Collection, Processing and Erasure of Personal Data
The use of this website is basically possible without any indication of personal data. Should a processing of personal data, e.g. name, address, e-mail address or telephone number of the user, nevertheless become necessary in the context of the use of the website, the processing takes place according to the regulations of the valid data protection law (GDPR).
The website owner/controller processes and stores the personal data provided by the user only for the period of the usage relationship. After expiration of that period, the corresponding personal data is routinely deleted unless there is a longer period of storage for personal data, which must be observed by law or regulation (statutory retention period) to which the website owner/controller is subject.
Legal Basis for the Collection and Processing of Personal Data
If the processing of personal data will become necessary, the legal basis for the processing of personal data, provided by the user, by the website owner/controller is based on Art. 6 (1a-c) GDPR.
On the one hand, it is possible that the website owner/controller obtains the user's consent to the processing of personal data concerning him for one or more specific purposes (e.g. answering a request from the user without concluding a contract afterwards).
On the other hand, the processing is necessary for the fulfilment of a contract to which the user is or becomes a party or for the execution of pre-contractual measures which are taken at the user's request (e.g. reply to inquiries, delivery of goods or the provision of another service or consideration). If the user does not provide the personal data which are necessary to fulfil the contract, the contract with the user cannot be concluded.
The user can contact the website owner/controller directly regarding the following rights:
The user has the right to request confirmation from the website owner/controller as to whether the personal data provided will be processed. In addition, the user has the right of information about the following information:
where appropriate, the website owner’s/controller's intention to transfer the personal data to a third country or international organisation and the existence or absence of a Commission adequacy decision or, in the case of transfers pursuant to Art. 46, 47 or 49 (1) and (2) GDPR, a reference to the appropriate or appropriate safeguards and means of obtaining a copy of them or where available;
the existence of the right to request from the website owner/controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
If the user makes use of his right to information, a copy of the personal data which is the subject of the processing will be made available to the user. The website owner/controller can charge a reasonable fee based on administrative costs for any further copies requested by the user. If the user submits the application electronically, the information will be made available in a commonly used electronic form. The right to obtain a copy shall not adversely affect the rights and freedoms of others.
The user has the right to obtain from the website owner/controller without undue delay the rectification of inaccurate personal data concerning the user. Taking into account the purposes of the processing, the user shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
The user has the right to obtain from the website owner/controller restriction of processing where one of the following applies:
the accuracy of the personal data is contested by the user, for a period enabling the website owner/controller to verify the accuracy of the personal data.
the processing is unlawful and the user opposes the erasure of the personal data and requests instead the restriction of their use instead.
the website owner/controller no longer needs the personal data for the purposes of the processing, but they are required by the user for the establishment, exercise or defence of legal claims.
the user has objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the website owner/controller override those of the user.
Where processing has been restricted, such personal data may be processed only with the consent of the user or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
The user who has obtained a restriction of processing pursuant will be informed by the website owner/controller before the restriction of processing is lifted again.
The user has the right to receive the personal data provided in a structured, commonly used and machine-readable format in order to transmit this data to another controller, provided that the processing is based on a consent pursuant to Art. 6 (1a) or Art. 9 (2a) GDPR or on a contract pursuant to Art. 6 (1b) GDPR and the processing is carried out by automated means. The rights and freedoms of other persons may not be impaired by the data transmission.
The user has the right to demand from the website owner/controller that the personal data be transmitted directly to another controller, as far as this is technically feasible.
The user has the right not to be subject to a decision based exclusively on automated processing, including profiling, which has legal effect on the user or significantly impairs it in a similar manner, provided that the decision is not necessary for entering into, or performance of, a contract between the user and a the website owner/controller or is authorised by Union or Member State law to which the website owner/controller is subject and which also lays down suitable measures to safeguard the user’s rights and freedoms and legitimate interests or is based on the user’s explicit consent.
If the decision to conclude or fulfil a contract between the user and the website owner/controller is necessary or if the decision was made with the express consent of the user, the website owner/controller shall implement suitable measures to protect the rights and freedoms as well as the legitimate interests of the user, including at least the right to obtain human intervention on the part of the website owner/controller, to express his or her point of view and to contest the decision.
The website owner/controller does not use automatic decision-making or profiling on this website.
Right to Erasure ("Right to be Forgotten")
The user has the right to obtain from the website owner/controller the erasure of personal data concerning him or her without undue delay and the website owner/controller has the obligation to erase personal data without undue delay where one of the following grounds applies and processing is not necessary (e.g. to exercise the right to freedom of expression and information; for reasons of public interest):
the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
the user withdraws his consent, on which the processing was based according to Art. 6 (1a) or Art. 9 (2a) GDPR, and there is no other legal basis for the processing
the user files an objection against the processing in accordance with Art. 21 (1) and (2) GDPR and there are no overriding legitimate reasons for the processing
the personal data have been processed unlawfully
the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the website owner/controller is subject
the personal data have been collected in relation to the offer of information society services in accordance with Art. 8 (1) GDPR.
If the website owner/controller has made the personal data public and if the website owner/controller is obliged to erase them in accordance with the above-mentioned reasons, the website owner/controller takes appropriate measures, including technical measures, taking account of available technology and the costs of implementation, to inform other controllers which are processing the personal data that the user has requested the erasure of all links to this personal data or of copies or replications of this personal data, insofar as the processing is not necessary.
The user has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Art. 6 (1e) and (1f) GDPR, including profiling based on those provisions.
Where personal data are processed for direct marketing purposes, the user has the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where the user objects to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the user may exercise his or her right to object by automated means using technical specifications.
Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, the user, on grounds relating to his or her particular situation, has the right to object to processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Should the user have given consent to the website owner/controller to process the personal data provided, he can withdraw this consent at any time. The user can send the withdrawal informally by post, telephone, fax or e-mail directly to the website owner/controller without giving reasons.
Anonymised Data Collection and Data Processing
As far as log file data (date and time, the browser type and the operating system of the user’s PC and the pages viewed by the user) are automatically collected on the server of the website owner/controller and stored in an internal log file and communicated via the user’s browser to the website owner/controller, the website owner/controller will collect and process these data in anonymised form, i.e. they cannot be assigned to a particular person. The purpose of the data collection and data processing is the analysis for internal system-related and statistical purposes. This means that no conclusions are drawn about the user, since this data is stored separately from the other personal data provided by the user.
As far as the website owner/controller uses cookies (small text files) for this website that are stored on the user’s computer and saved by the user’s browser, the web server of the website owner/controller can, if cookies are set, identify the user’s browser and the individual settings of the users in the websites of the website owner/controller and if applicable parts of the registration data in encrypted form so that the use of this website is made easier for the user and automatic log-in is made possible. Users can apply their browser settings to reject cookies, delete cookies from their computer, block cookies or receive a request before a cookie is set. If the user deactivates the setting of cookies in the Internet browser used, not all functions of this website may be entirely usable. The cookies set by the website owner/controller are deleted from the user's computer after each session.
This website uses Google Analytics, a web analysis service of Google LLC ("Google") in 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA.
The website owner/controller points out to the user that on this website Google Analytics has been extended by the code "gat._anonymizeIp();" to guarantee an anonymous collection of IP addresses (so-called IP masking). However, Google will reduce the user's IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area and make it anonymous beforehand. Only in exceptional cases can the full IP address be transmitted to a Google server in the USA and shortened there.
IP anonymization is active on this website. On behalf of the website owner/controller, Google will use the collected data and information to evaluate the use of this website by the user, to provide online reports on website activities and to provide the website owner/controller with other services concerning the use of this website.
Google Analytics uses "cookies", which are text files placed on the user's computer, to analyze the use of this website. The information generated by the cookie (such as access time, access location and frequency of visits) about the use of this website is generally transmitted to and stored by Google on servers in the United States of America. This gives Google knowledge of personal information, such as the IP address of the user, which serves Google, i.e., to understand the origin of visitors and clicks, and subsequently create commission settlements. Therefore it is not impossible that Google may pass these personal data collected through the technical procedure to third parties.
The user may, as stated above, prevent the storage/setting of cookies through this website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. The website owner/controller points out, that if the user deactivates the setting of cookies in the Internet browser used, not all functions of this website may be entirely usable. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
Furthermore, the user has the possibility of objecting to a collection of data that are generated by Google Analytics, which is related to the use of this website (including his IP address), as well as the processing of this data by Google and thus prevent this by the user downloading and installing the browser add-on available under the following link (https://tools.google.com/dlpage/gaoptout) to deactivate Google Analytics.
Further information on Google's Terms of Use and Privacy Policy can be found at https://www.google.com/analytics/terms/us.html and https://www.google.com/intl/en/policies/privacy/ respectively. Detailed explanations on Google Analytics can also be found at https://www.google.com/analytics/.
The website owner/controller uses browser plug-ins and links from social networks (e.g. Facebook, Twitter, Instagram, Google, Pinterest etc.) on this website. These social networks are operated exclusively by third parties, some of whom have their registered offices outside the EU or the EEA. The browser plug-ins and links on this website are marked with logos or other information. When the user visits this website, which contains such a browser plug-in, a connection between the computer (browser) of the user and the servers of the respective social network is established by clicking on the corresponding link. This will forward the information that the user has visited this information to the social network. If the user is logged in to the social network via his personal user account or if the user log in during his visit to this website, the visit to this website will be assigned to his account. By interacting with browser plug-ins or links, e.g. by pressing a "Like" button or leaving a comment, this information is transmitted to the respective social network and stored there. This data transfer can be prevented by logging out under his account (on the social network) before visiting this website.
The purpose and scope of the data collection by social networks as well as the further processing and use of the user’s data as well as the respective rights and settings for the protection of privacy can be found in the data protection information (privacy policy) of the respective operators:
On this website, the website owner/controller uses the browser plug-in of YouTube LLC in 901 Cherry Ave., San Bruno, CA 94066, UNITED STATES, an Internet video portal, which is a subsidiary of Google Inc. in 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.
When the user visits this website on which the YouTube browser plug-in (YouTube video) was integrated, a connection between the computer (browser) of the user and the server of the YouTube browser plug-in is established by clicking on the corresponding link. The Internet browser on the information technology system of the user is automatically prompted to download a display of the corresponding YouTube component. This will forward the information to YouTube and Google that the user has visited this website.
If the user is logged in on YouTube via his personal user account or if the user log in during his visit to this website, the visit to this website will be assigned to his account. This occurs regardless of whether the person clicks on a YouTube video or not. This data transfer can be prevented by logging out under his personal user account on YouTube before visiting this website.
Further information on You Tube’s Terms of Use and Privacy Policy can be found at https://www.google.com/policies/privacy/.
As a precaution, the website owner/controller points out that when using this website by means of so-called mobile devices (smartphones, mobile phones, tablets, etc.) precise location data may be collected, used and forwarded, including the geographical location of the user's mobile device. In addition, further data may be collected, processed and used within the framework of the usage conditions of the user’s respective telecommunications provider.
Technical Gaps in Security
The website owner/controller has implemented comprehensive technical and organisational measures to ensure the safest possible protection of personal data processed through this website.
The website owner/controller explicitly points out that security gaps can occur with regard to data transmission on the Internet, e.g. during e-mail correspondence, and that there is no complete protection against access by third parties. For this reason, every user is free to transmit personal data to the website owner/controller by telephone, fax or mail.
Use of the Contact Data of the Website Owner Details & Imprint
The website owner/controller and all persons named on this website hereby object to any commercial use and forwarding of their data, in particular the contact data stated in the privacy policy and imprint may not be used for commercial advertising without the written consent of the website owner/controller or without the existence of a business relationship.
© Yusra Mardini, 2017. All rights reserved.