Source: https://blog.avarteq.com/data-protection-policy/
Timestamp: 2020-04-08 16:21:18
Document Index: 176718630

Matched Legal Cases: ['Art. 22', 'Art. 6', 'Art. 9', 'Art. 21', 'Art. 21', 'Art. 8', 'Art. 1', 'Art. 6', 'Art. 89', 'Art. 4']

Data Protection Policy – Avarteq Blog
Posted 24. May 2018 by Patrick Ross
Thank you for visiting our website. We take data protection very seriously and make every effort to protect your personal data as part of our web offering.
We understand personal data to be all data concerning a natural person’s personal and factual relationships. Personal data that are collected on our website are exclusively used for our own purposes.
1.2.	Legal basis for data processing
Declaration of consent: If your consent was obtained for personal data collected for processing, Article 6 Paragraph 1 lit. a of the EU General Data Protection Regulation (GDPR) is the legal basis for data processing.
Contract: When processing personal data to fulfil a contract to which your are a contractual party, Article 6 Paragraph 1 lit. b GDPR is the legal basis. This also applies to processing that is required to implement measures in advance of a contract.
Statutory obligation: If personal data is processed to fulfil a legal obligation to which our company is subject, Article 6 Paragraph 1 lit. c GDPR is the legal basis.
In the event that your existential interests – or those of another natural person – make the processing of personal data necessary, the legal basis is Article 6 Paragraph 1 lit. d GDPR.
Justified interest: If the processing is required to maintain a justified interest of our company or a third party and the interests, basic rights, and freedoms of the affected person do not outweigh the interest stated first, Article 6 Paragraph 1 lit. f GDPR is the legal basis for the processing. The justified interest of our company is in implementing our business activity.
1.3.	Rights of those affected
Your personal data is processed by us as part of our data processing. You have the rights from the Third Chapter of the GDPR with regard to our company.
We comply with the rights to information, correction, restriction of processing, deletion, or the ability to transfer your personal data. You can asset these rights as follows:
You have the right to request confirmation from us on whether we process your personal data. If this is the case, you have the right to receive information on this personal data and the following information:
a)	the processing purposes;
b)	the categories of personal data that were processed;
c)	the recipients or categories of recipients to whom the personal data was published or will be published, in particular for recipients in third countries or international organizations;
d)	if possible the planned duration for which the personal data is stored, or, if this is not possible, the criteria for setting this term;
e)	the existence of a right to correction or deletion of your personal data or a right to restrict the processing by the responsible person or a right to object to this processing;
f)	the existence of a complaint right to a supervisory authority;
g)	if the personal data are not collected from the affected person, all information available on the origin of the data;
h)	the existence of automated decision-making including profiling under Art. 22 Para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved, extent, and the desired effects of such processing for the affected person.
If personal data is transferred to a third country or international organization, you have the right to be informed about suitable guarantees under Article 46 GDPR in relation to the transfer.
We provide a copy of the personal data that are subject to the processing. For all further copies that you request, we may require an appropriate fee based on the administrative costs. If you make a request for information electronically, and if you have not stated anything further, we have to provide the information in a common electronic format.
The right to receive a copy may not adversely affect the rights and freedoms of other people.
You also have the right to request the correction without delay of incorrect personal data relating to you. Whilst taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – even using an additional declaration.
You also have the right to request that we delete your personal data without delay and we are obligated to delete the data without delay if one of the following reasons applies:
a)	Your affected personal data are no longer required for the purposes for which they were collected or any other processing.
b)	You revoke your consent on which the processing is based as per Art. 6 I lit. a or Art. 9 Para. 2 lit. a GDPR and there is no other legal basis for the processing.
c)	You object to the processing under Art. 21 Para. 1 GDPR and there are no other priority justified reasons for the processing or you object to the processing under Art. 21 Para. 2 GDPR.
d)	Your personal data was processed illegally.
e)	The deletion of your personal data is required to fulfil a legal obligation under Union law or the law of the member state to which we are subject.
f)	Your personal data were collected for information company services offered under Art. 8 Para. 1 GDPR.
(2) If we have published your personal data and are obliged to delete it under Art. 1, whilst taking into account the available technology and implementation costs, we must undertake appropriate measures, including of a technical nature, to inform the person responsible for data protection who is processing the personal data that you have requested the deletion of all links to this personal data or copies or replications of this personal data. This does not apply if the processing is required a) to execute the right to freedom of expression and information; b) to fulfil a legal obligation that requires processing under the law of the Union or member states to which we are subject or to undertake a task that is in the public interest or to execute public authority that was transferred to us; c) for reasons of public interest relating to public health under Article 9 Paragraph 2 Letters h and i and Article 9 Paragraph 3; d) for archive purposes in the public interest, academic or historic research purposes, or for statistical purposes under Article 89 Paragraph 1 if the right stated in Paragraph 1 is expected to make the implementation of the objectives of this processing impossible or seriously adversely affect them, or e) to assert, exercise, or defend legal claims.
Right to restriction on processing
(1) The affected person has the right to request the restriction of processing from the person responsible if the following requirements are met:
a)	the correctness of the personal data is disputed by the affected person for the duration it takes the person responsible to check the correctness of the personal data
b)	the processing is illegal and the affected person rejects the deletion of the personal data and instead requests a restriction on the use of the personal data;
c)	the responsible person no longer requires the personal data for the processing purposes but the affected person does require them to assert, exercise, or defend legal claims, or
d)	if you have submitted an objection against the processing under Article. 21 Paragraph. 1 GDPR and it is not yet clear whether the justified reasons of the responsible person outweigh your reasons.
(2) If the processing was restricted, this personal data – apart from its storage – can only be processed with the consent of the affected person or to assert, exercise, or defend legal claims or to protect the rights of another natural person or legal entity, or due to the important public interest of the Union or a member state. 4.5.2016 L 119/44 Official Journal of the European Communities DE
(3) An affected person that has brought about a restriction on processing is informed by the person responsible before the restriction is lifted.
Article 19 Notification obligation relating to the correction or deletion of personal data or restricting its processing
The person responsible informs all recipients whose personal data was published of all corrections to or deletions of the personal data or a restriction on the processing under Article 16, Article 17 Paragraph 1 and Article 18 unless this proves to be impossible or is associated with disproportionate costs. The person responsible informs the affected person about these recipients if the affected person requests this.
Article 20 Right to data transfer
(1) The affected person has the right to receive their personal data that they provided to a responsible person in a structured, common, machine-readable format and they have the right to transfer these data to another responsible person without hindrance by the person responsible to whom the person data was provided, if
a)	the processing is based on consent under Article 6 Paragraph 1 Letter a or Article 9 Paragraph 2 Letter a or a contract based on Article 6 Paragraph 1 Letter b and
b)	the processing takes place using automated processes.
(2) In executing your right to transfer data under Paragraph 1, the affected person also has the right to ensure that your personal data is transferred directly from one responsible person to another if this is technically feasible.
(3) The utilization of the right in Paragraph 1 of the Article stated above does not affect Article 17. This right does not apply to processing personal data that are required to undertake a task that is in the public interest or to exercise public authority that has been transferred to the person responsible.
(4) The right under Paragraph 2 may not adversely affect the rights and freedoms of other people.
You also have the right to call on our data protection officer for advice on the stated rights and all questions related to the processing of your personal data.
In addition, our customers can also assert their complaint right to the responsible supervisory authority.
You have the right for reasons arising from your special situation to object to the processing of your personal data at any time as a result of Art. 6 Para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. The responsible person no longer processes your personal data unless they can demonstrate binding reasons requiring protection for the processing that outweigh your interests, rights, and freedoms or the processing is used to assert, exercise, or defend legal claims.
2) If your personal data is processed for direct advertising purposes, you have the right to object to the processing of your personal data for such advertising purposes at any time; this also applies to profiling if it is in connection with direct advertising.
3) If you object to the processing for the purposes of direct advertising, your personal data is no longer processed for these purposes.
4) You have the opportunity to exercise your objection right in relation to the use of the services of the information company – notwithstanding Directive 2002/58/EU – when technical specifications are used for automated processes.
5) You have the right for reasons arising from your specific situation to object to the processing of your personal data for academic, historic research, or statistical purposes under Art. 89 Para. 1 unless the processing is required in the public interest.
Notwithstanding any other administrative law or legal assistance, you have the right to complain to a supervisory authority if you are of the opinion that the processing of your personal data infringes the GDPR.
1.4.	Web server logs
When using our website the connection information is stored in the server log files.
•	IP address of the system used to call up
•	Browser information such as operating system used and screen resolution
•	Website called up
•	Originating website
•	Time of call up
The web server logs are only processed for security purposes.
We use the logged data only for statistical analyses for the purposes of operating, securing, and optimizing the offering. However, we reserve the right to check the logged data subsequently if there are specific concerns leading to a justified suspicion of illegal use.
1.5.	Cookies
This website uses cookies. Cookies are text files that are stored on your device. Cookies can be read, transferred, or modified by the website when calling up the website. We only use cookies with random, pseudonym identification numbers. These identification numbers are used to analyze your usage behavior on our website. At no time is the usage profile assigned to the name of a natural person. If you use special functions (e.g. shopping basket or “stay logged in”) on our website, cookies are also used for these functions.
It is possible at any time to object to the setting of cookies by making the relevant change in the settings of the browser. Set cookies can be deleted. It is emphasized that when deactivating cookies not all of the functions of our website may be fully available.
The precise functions of the cookies can be viewed from the more detailed information in this data protection policy.
1.6.	Google Analytics
This website uses Google Analytics, a web analysis service by Google Inc. (Google). Google Analytics uses so-called “cookies”, text files that are saved on your computer and enable the use of the website to be analyzed. The information created by the cookie on your use of this website is transferred to and stored on a Google server in the US. However, if IP anonymization has been activated on this website, Google will first shorten your IP address within European Union Member States or in other signatory states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google uses this information to analyze your use of the website, create reports on the website activities, and provide other services associated with the website and internet use for the website operator. The IP address provided using Google Analytics is not combined with other Google data. You can prevent the installation of cookies by adjusting the relevant setting in your browser software; but in this case we expressly point out that you may not be able to use the full functions of this website. You can also prevent the recording of the data created by the cookie related to your use of the website (incl. your IP address) by Google and the processing of this data by Google by downloading and installing a browser plug-in available from the following link: http://tools.google.com/dlpage/gaoptout?hl=de.”
We have concluded a processing contract with Google Germany GmbH – GOOGLE ANALYTICS DEUTSCHLAND that ensures that the personal data is only processed according to our instructions and generally in Europe. IP anonymization (IP masking method) is activated on our website, whereby the IP address is made anonymous automatically.
You can find more information on Google Analytics and data protection on the website https://www.google.com/intl/de/analytics/privacyoverview.html
1.7.	Comment function
When using the comment function, the user’s IP address is stored for the purpose of monitoring abuse.
1.8.	YouTube Videos
The website uses videos and plug-ins from the service provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. Youtube is represented by law through Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
As soon as even a paused image of a video is displayed on our website, a communication link is created to the YouTube server by which the service receives various data. This data includes the IP address of your computer, any cookies, and information already stored on your computer that was stored during previous contacts with YouTube. If no data has been stored yet, the service stores cookies on your computer for the first time. For contact with YouTube, the service also receives notification on a user account you may have with YouTube. Additional information on the interaction with the video such as clicking the start, pause, and end buttons is also transferred to the supplier. You can end the data processing by visiting a page that does not contain a video and deleting all cookies from your computer.
You can find more information on data processing and data processing information from YouTube at https://policies.google.com/privacy
1.9.	Social Plug-ins
We use social media plug-ins. We use the so-called 2-click solution. This means that when you visit our page, initially no personal data is transferred to the supplier of the plug-in. You can recognize the supplier of the plug-in via the marking on the grayed out box showing the initial letter. Only if you click one of the plug-ins are personal data transferred. By activating the plug-in, the data is transferred to the relevant social media service and stored there (in the relevant country for international suppliers). We do not have influence on the data collected or data collection processes nor are we aware of the full extent of the data collection, purposes of processing, or storage periods. As the social media service undertakes data collection in particular via cookies, we recommend deleting all cookies in your browser’s security settings before clicking the grayed out box.
If you deactivate a plug-in, the social media service receives notification that you have called up the relevant sub-page of our online offering. In addition, the IP address, supplier cookie, browser setting, and other data is also transferred. This takes place independently of whether you have an account with the social media service and are logged in there. If you have an account with the social media service or are logged into it, this data is directly associated with your account. If you press the activated button and e.g. link the page, the social media service also stores this information in your user account and shares it publicly with your contacts. If you do not want the assignment with your profile at the social media service, you must log out before activating the button.
The social media service stores your data as usage profiles and uses these for the purposes of advertising, market research, and/or needs-led design of its website. Such an analysis takes place in particular (even for users not logged in) to show needs-led advertising and inform other users of the social network about your activities on our website. You have a right to refuse the formation of these user profiles, but you have to contact the relevant social media service to exercise this right.
You receive other information on the scope and purpose of data collection and its processing by the social media service in the data protection policies of these suppliers shown below. You can also receive additional information on related rights and setting options to protect your private sphere.
Addresses of the relevant suppliers and URLs with data protection advice:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; other information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other applications and http://www.facebook.com/about/privacy/your-info everyoneinfo.
1.10.	Log-in area
If data is recorded as part of a user login, it is only used to provide the relevant service. An analysis only takes place to ensure comfortable and secure operation of the system.
1.11.	Data protection contact
The responsible entity for data processing as defined by Art. 4 GDPR is
Phone: +49 (0)681 – 30964190
Fax: +49 (0)681 – 309 64 191
Statutory representative
Dipl.-Inf.(FH) Julian Fischer
Tel.: +49 (0)228 – 28614060
Mail: dataprivacy@avarteq.de