Source: http://ir.edag.com/websites/edag/English/101070/privacy-protection.html
Timestamp: 2019-04-20 23:11:50
Document Index: 800232586

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 22', 'Art. 46', 'Art. 21', 'Art. 6', 'Art. 9', 'Art. 21', 'Art. 21', 'Art. 8', 'Art. 17', 'Art. 9', 'Art. 9', 'Art. 89', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 6', 'Art. 9', 'Art. 9', 'Art. 78']

EDAG - Privacy Protection
In terms of the General Data Protection Regulation and other national data protection laws of the EU member states and Switzerland and other applicable data protection-related regulations ("applicable data protection legislation"), the data controller is:
Website: http://ir.edag.com
II.	General Data Processing Information
1.	Extent to which and purpose for which personal data is processed
We only ever collect and use personal data of our users to the extent to which this is necessary to provide a fully functional website and our contents and services. The regular collection and use of personal data of our users is only ever made with the user's consent. One exception to this rule applies in cases in which, for factual reasons, it is not possible to obtain the user's prior consent, or in which, according to applicable data protection legislation, the processing of this data is permitted on other legal grounds.
Insofar as we obtain the consent of the data subject to process his or her personal data, Art. 6 para. 1 p. 1 point a of the EU General Data Protection Regulation (GDPR) and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis for the processing of personal data.
Art. 6 para. 1 p. 1 point b of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is party. This shall also apply to processing necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 p. 1 point c of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis.
Should it be necessary to process personal data in order to protect the vital interests of the data subject or another natural person, Art. 6 para. 1 p. 1 point d of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis.
Should processing be necessary to protect the legitimate interests of our company or a third party and such interests are not overridden by the interests, fundamental rights and freedoms of the data subject, then Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis for processing.
3.	Data erasure and storage period
1.	Description and extent of data processing
(1)	The user's IP address
(2)	Date and time of access
(3)	Website visited
(4)	Quantity of data sent in bytes
(5)	Source/link from which you accessed the website
(6)	Browser used
(7)	Operating system used
Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions pursuant to applicable data protection legislation are the legal basis for the temporary storage of the data and the log files.
The temporary storage of the IP address by the system is necessary in order to be able to deliver the website to the user's computer. The data that has been acquired is used for statistical analyses and to improve the website. Your personal data (IP address) is first anonymised.
These purposes are also in our legitimate interests in data processing under Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
5.	Right to object and right of elimination
IV.	E-Mail Contact
Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions pursuant to applicable data protection legislation are the legal basis for the processing of data collected when an e-mail is being sent. If the point of the e-mail contact is to enter into a contract, then Art. 6 para. 1 p. 1 point b of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as an additional legal basis for processing.
V.	Rights of Data Subject
If personal data concerning you is processed, you are the data subject as defined in the GDPR and the analogous provisions pursuant to applicable data protection legislation, and have the following rights against the data controller:
(1)	The purposes for which the personal data is processed;
(2)	The personal data categories which are processed;
(3)	The recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
(4)	The planned storage duration of the personal data concerning you or, if it is not possible to provide concrete information on this point, criteria for defining the storage duration;
(5)	The existence of a right to correct or delete the personal data concerning you, a right to limit processing by the controller, or a right to object to such processing;
(7)	All available information concerning the origin of the data, if the personal data was not acquired from the data subject him or herself;
(8)	The existence of automated decision-making and profiling in accordance with Art. 22 para. 1 and 4 of the GDPR and the analogous provisions pursuant to applicable data protection legislation and – at least in these cases – meaningful information on the logic involved and the implications and intended impact of such processing for the data subject.
You have the right to request information on whether or not the personal data concerning you is transmitted to a third country or international organisation. In this context, you may ask for information on appropriate guarantees in accordance with Art. 46 of the GDPR and the analogous provisions pursuant to applicable data protection legislation relating to the transmission of data.
2.	Right to correction
3.	Right to restrict processing
(1)	If you dispute the accuracy of the personal data concerning you for a period which allows the controller to check the accuracy of the personal data;
(2)	the processing is unlawful and you refuse deletion of the personal data, instead requesting that use of the personal data be restricted;
(3)	the controller no longer needs the personal data for processing purposes, but you need it in order to establish, exercise or defend legal claims, or
(4)	if you have filed an objection to the processing of the data in accordance with Art. 21 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.
(1)	The personal data concerning you is no longer needed for the purposes for which it was collected or otherwise processed.
(2)	You revoke your consent, which served as the basis for processing in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 point a of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and there is no other legal basis for the processing.
(3)	You file an objection to processing in accordance with Art. 21 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and there are no overriding legitimate reasons for the processing, or you file an objection to processing in accordance with Art. 21 para. 2 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
(4)	The personal data concerning you has been unlawfully processed.
(5)	Deletion of the personal data concerning you is necessary in order to ensure compliance with a legal obligation under Union or Member State law to which the data controller is subject.
(6)	The personal data concerning you has been acquired in relation to the offer of information society services in accordance with Art. 8 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
If the controller has made the personal data concerning you public, and is obliged to delete such data in accordance with Art. 17 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, then, taking into account the technologies available and implementation costs, he - the controller - applies appropriate measures, which may also be of a technical nature, to inform the people responsible for processing personal data that, as the data subject, you have requested that they should delete all links to this personal data as well as all copies or replications of this personal data.
(1)	to exercise the rights to freedom of expression and freedom of information;
(2)	to comply with a legal obligation calling for processing on the basis of Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3)	for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 points h and i and Art. 9 para. 3 of the GDPR and the analogous provisions pursuant to applicable data protection legislation;
(4)	for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, insofar as the right set out in section a) is likely to render impossible or seriously impair the achievement of the purposes of this processing, or
(5)	to establish, exercise or defend legal claims.
(1)	processing is based on consent in accordance with Art. 6 para. 1 p. 1 point a of the GDPR or Art. 9 para. 2 point a of GDPR and the analogous provisions pursuant to applicable data protection legislation, or on a contract in accordance with Art. 6 para. 1 p. 1 point b of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 p. 1 point e or f of the GDPR and the analogous provisions pursuant to applicable data protection legislation; this also applies to profiling based on these provisions.
In the context of the use of information society services – notwithstanding Directive 2002/58/EG and the analogous provisions pursuant to applicable data protection legislation – you are entitled to exercise your right to object by automated means using technical specifications.
8.	Right to withdraw declaration of consent under data protection law
(1)	is necessary for entering into or the performance of a contract between you and the data controller,
(2)	is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests, or
(3)	is made with your explicit consent.
These decisions must not, however, be based on special categories of personal data referred to in Art. 9 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, unless Art. 9 para. 2 point a or g and the analogous provisions pursuant to applicable data protection legislation apply, and suitable measures have been undertaken to safeguard your rights and freedoms and your legitimate interests.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR and the analogous provisions pursuant to applicable data protection legislation.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy in accordance with Art. 78 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.