Source: https://infoportal.dscsag.com/en/content/privacy-policy
Timestamp: 2019-05-21 13:37:25
Document Index: 630700590

Matched Legal Cases: ['Art. 4', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 22', 'Art. 46', 'Art. 21', 'Art. 6', 'Art. 9', 'Art. 21', 'Art. 21', 'Art. 8', 'Art. 17', 'Art. 9', 'Art. 9', 'Art. 89', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 6', 'Art. 89', 'Art. 9', 'Art. 9', 'Art. 78']

Privacy Policy | DSC Info-Portal
Submitted by timo on Fri, 08/19/2016 - 00:26
Data protection is of very great importance to DSC Software AG.
This data privacy statement explains the method, extent and aim of the processing of personal data in our online offer and related websites, functions and contents (in the following referred to jointly as “online offer” or “website”). The data privacy statement applies independently of domains, systems, platforms and devices (e.g. desktop or mobile) on which the online offer is executed.
2 Person responsible
The party responsible in the sense of the General Data Protection Regulation (GDPR), plus other data protection laws applicable in the member states of the European Union and other regulations with data protection character is:
Phone: +49 721 9774 100
Phone: +49 721 75 40 88 40
E-mail: datenschutz@ah-consulting.gmbh
In the event of questions and suggestions on the subject of data protection, anybody concerned can apply to our data protection officer.
4.1. Our data privacy statement is based on the terminology used by the European Regulator in the adoption of the General Data Protection Regulation (GDPR). Our data privacy statement is intended to be easy to read and understand by the public, our customers, and our business partners.
4.2. In order to ensure this, we wish to explain the terminology used in advance. Terms used (such as “personal data” or its “processing”) are defined in Art. 4 of the General Data Protection Regulation (GDPR).
4.3. In this data privacy statement, we use (among others) the following terms:
4.3.1. Personal data
Personal data consists of all information referring to an identified or identifiable natural person (in the following referred to as the “person concerned”). An identifiable person is a natural person who can be identified directly or indirectly, in particular by means of an assignment to a label such as a name, to an ID number, to location data, to an online ID or to one or more special features that are an expression of the physical, physiological, genetic, psychic, economic, cultural or social identity of this natural person.
4.3.2. Person concerned
The person concerned is any identified or identifiable natural person whose personal data is processed by persons responsible for the processing.
4.3.3. Processing
Processing is any process or operation carried out with or without the help of automatic procedures or any such series of operations in connection with personal data, for example: collecting, recording, organizing, ordering, storing, adapting or changing, reading, retrieving, using, disclosing through transmission, dissemination or other form of provision, comparing or linking, restricting, deleting, or destroying.
4.3.4. Restricting processing
Restricting processing is the marking of stored personal data with the aim of restricting its future processing.
Profiling is any kind of automatic processing of personal data that consists in using such personal data in order to evaluate personal aspects referring to a natural person, in particular to analyze or predict aspects regarding job performance, economic situation, health, personal preference, interests, reliability, conduct, abode or change of abode of this natural person.
4.3.6. Pseudonymization
Pseudonymization is the processing of personal data in such a way that the personal data can no longer be assigned to a specific person concerned without additional information so long as this additional information is stored separately and is subject to technical and organizational measures that ensure that the personal data cannot be assigned to an identified or identifiable natural person.
4.3.7. Responsibility (including for processing)
The party responsible (including for processing) is the natural or legal person, authority, installation or other entity that decides, either alone or with others, on the aims and means of the processing of personal data. If the aims and means of this processing are controlled by EU law or the laws of EU member states, the party responsible – or the specific criteria of its nomination – can be so provided for according to EU law or the laws of EU member states.
4.3.8. Processor
The processor is a natural or legal person, authority, installation or other entity that processes personal data on behalf of those responsible.
4.3.9. Recipient
The recipient is a natural or legal person, authority, installation or other entity to whom personal data is disclosed, regardless of whether this was a third party or not. However, authorities that receive personal data in the course of a particular inquiry in accordance with EU law or the laws of EU member states are not considered as recipients.
4.3.10. Third party
A third party is a natural or legal person, authority, installation or other entity (other than the person concerned, the person responsible, the processor and the persons who are authorized to process the personal data under the direct responsibility of the person responsible or the processor) that is authorized to process the personal data.
4.3.11. Consent
Consent is any expression of willingness issued freely for the specific case in an informed manner and unambiguously by the person concerned in the form of a declaration or any other clearly affirmative act, with which the person concerned makes it quite clear that he or she agrees with the processing of the personal data concerned.
5 General notes on data processing
5.1 Extent of processing of personal data
Basically, we collect and use personal data of our users only if this is necessary for a functioning website as well as for our contents and services. The collection and use of personal data of our users takes place regularly only after consent has been granted by the user. An exception applies in cases where it is impossible to obtain consent in advance and the processing of the data is permitted by legal regulations.
5.2 Legal framework for processing personal data
5.2.1. If we obtain the consent of the person concerned for the processing of personal data, Art. 6 Sec. 1 lit. a EU General Data Protection Regulation serves as the legal basis.
5.2.2. In the processing of personal data that is required for fulfilling a contract of which the person concerned is a contractual party, Art. 6 Sec. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations required for the implementation of pre-contractual measures.
5.2.3. If the processing of personal data is required for meeting a legal obligation to which our company is subject, Art. 6 Sec. 1 lit. c GDPR serves as the legal basis.
5.2.4. In the event that vital interests of the person concerned or of another natural person necessitate the processing of personal data, Art. 6 Abs. 1 lit. d GDPR serves as the legal basis.
5.2.5. If processing is required for safeguarding a justified interest of our company or a third party, and if the die interests, basic rights and fundamental freedoms of the person concerned do not outweigh the first-named interest, Art. 6 Abs. 1 lit. f GDPR serves as the legal basis for the processing.
5.3 Data deletion and storage duration
5.3.1. The personal data of the person concerned is deleted or locked as soon as the purpose of the storage is no longer valid. Storage can also take place if provided for by European or national legislation in EU regulations, laws or other rules to which the party responsible is subject.
5.3.2. The data can also be locked or deleted if a storage period prescribed by the named standards expires – unless it is necessary to store the data for the purposes of the conclusion or fulfillment of a contract.
6 Provision of website and creation of log files
6.1.1. Every time our website is called, our system automatically records data and information of the computer system of the calling computer.
Session cookie for identifying the logged-in user
Date and time of the user log-in
Storage of failed log-in attempts
Date and time of the creation of the user
Storage of denied accesses (403)
Storage of sites not found (404)
Acceptance of cookie policies
Store whether the user has activated JavaScript
6.1.3. The data is saved in the log files of our system. This data is not saved together with other personal data of the user.
7 Legal framework for data processing
7.1. The legal framework for the temporary storage of data and log files is Art. 6 Sec. 1 lit. f GDPR.
8 Purpose of data processing
8.1. The temporary storage of the IP address by the system is necessary to enable the website to be sent to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
8.2. Data is stored in log files in order to ensure the correct functioning of the website. The data also serves to optimize the website and ensure the security of our information-technical systems. In this context, there is no evaluation of the data for marketing purposes.
8.3. These aims also include our justified interest in data processing according to Art. 6 Sec. 1 lit. f GDPR.
9.1. The data is deleted as soon as it is no longer required for achieving the purpose of its collection. Where data is recorded for providing the website, this applies when the respective session is ended.
9.2. If the data is stored in log files, this applies after a maximum of seven days. Longer storage is possible. In this case, the user’s IP addresses are deleted or distorted so that the calling client can no longer be identified.
10 Appeal and disposal possibility
The recording of data for providing the website and the storage of the data in log files is mandatory for the operation of the website. The user therefore has no possibility of appeal against this.
11.1 Description and extent of data processing
11.1.1. Due to our justified interest, we use so-called cookies on this website. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. If a user calls a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string that enables a unique identification of the browser when the website is called again.
11.1.2. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can still be identified following a website change.
11.1.3. The following data is stored and transmitted in the cookies:
Technical cookies or system cookies (Session, JavaScript)
Cookies for improving usability (status of pop-up menus)
Analysis cookies for analyzing and improving site accesses
When users are logged in, www.infoportal.dscsag.com contains a session cookie to identify the user. The corresponding information on the user is stored.
11.1.4. Furthermore, on www.dscsag.com we use cookies that enable an analysis of the user’s surfing behavior.
11.1.5. In this way, the following data can be transmitted on www.dscsag.com:
Frequency of site calls
11.1.6. User data collected in this way is pseudonymized by technical measures. Thus an assignment of the data to the calling user is no longer possible. The data is not stored together with other personal data of the user.
11.1.7. When our website is called, the user is informed by an info banner about the use of cookies for analysis purposes and is referred to this data privacy statement.
11.1.8. When our website is called, the user is informed about the use of cookies for analysis purposes. In this context, information is displayed referring to this data privacy statement.
11.2 Legal framework for data processing
11.2.1. The legal framework for the processing of personal data with the use of cookies is Art. 6 Sec. 1 lit. f GDPR.
11.2.2. The legal framework for the processing of personal data with the use of technically necessary cookies is Art. 6 Sec. 1 lit. f GDPR.
11.3.1. The purpose of using technically necessary cookies is to simplify the use of websites for users. Some of the functions of our website cannot be offered without the use of cookies. For these it is necessary that the user be recognized following a change of website.
11.3.2. User data collected by technically necessary cookies is not use on www.dscsag.com for the creation of user profiles. For the use of www.infoportal.dscsag.com, these technical cookies are necessary for access with a user profile and a password.
11.3.3. We need cookies for the following applications:
Assent for cookie disclaimer
Toolbar opened
Authentication of user in logged-in state to the website
Request limitation
11.3.3.2. www.infoportal.dscsag.com
11.3.4. Analysis cookies are used for improving the quality of our website and its contents. The analysis cookies tell us how the website is used, so we can continuously optimize our offer.
11.3.5. In the cookie, an ID is stored linking the user with the data sent.
11.3.6. These aims also include our justified interest in the processing of personal data according to Art. 6 Abs. 1 lit. f GDPR.
11.4 Duration of storage, appeal and disposal possibility
11.4.1. Cookies are stored on the user’s computer and transferred by that computer to us. As user, you therefore have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transfer of cookies. Stored cookies can be deleted at any time. This can also be done automatically. If cookies for our website are disabled, it is possible that not all features of the website can be used fully.
11.4.2. The transfer of flash cookies cannot be prevented with the settings of the browsers but rather by changing the settings of the flash player.
12.1 Description and extent of data processing
12.1.1. On the basis of our justified interests, we offer users on this website the possibility of registering by entering personal data. The data is entered in an input mask and transferred to us and stored. The data is not passed on to any third parties.
12.1.2. The following data is collected in the registration process:
12.1.2.1. This data is entered in these mandatory fields:
12.1.2.2. All other entries that are not mandatory are also transmitted and stored.
12.1.3. The following data is also stored with the time of registration:
12.1.4. As part of the registration process, the user’s consent to the processing of the data is obtained.
12.2 Legal framework for data processing
12.2.1. The legal framework for the processing of the data if the user consents is Art. 6 Sec. 1 lit. a GDPR.
12.2.2. If the registration serves the fulfillment of a contract where the user is a contractual party, or the implementation of pre-contractual measures, an additional legal framework for the processing of the data is Art. 6 Sec. 1 lit. b GDPR.
12.3.1. User registration is required for keeping specific contents and services ready on our website.
Contents and services in detail:
A closer identification of the user is necessary to enable an assignment of the acquired product and thus also the provision of the right documents and software updates.
12.4.1. The data is deleted as soon as it is no longer required for achieving the purpose of its collection.
12.5 Appeal and disposal possibility
12.5.1. As user, you can terminate the registration at any time. You can have data stored on you changed at any time.
12.5.2. You can change data by logging in to www.infportal.dscsag.com. You can delete your account by sending us an e-mail.
12.5.3. If the data is required for the fulfillment of a contract or the implementation of pre-contractual measures, it can only be deleted prematurely if there is no conflict with contractual or legal obligations.
13.1 Description and extent of data processing
13.1.1. On the basis of our justified interests, we offer our users on this website the chance to subscribe to a free RSS feed.
13.1.2. We send this information (referred to in the following as “RSS feed”) only with the consent of the recipients or a statutory permit. During registration for the RSS feed, the IP address is stored.
13.1.3. If during registration for RSS feed its contents are actually rewritten, they are relevant for the user’s consent. Additionally, our RSS feed contains information on our products.
13.1.4. No other user data is collected.
14 Contact form and e-mail contact
14.1 Description and extent of data processing
14.1.1. On the basis of our justified interests, we use on this website a contact form that can be used for the electronic first contact. If a user uses this form, the data entered in the input mask is transmitted to us and stored.
14.1.2. This data is entered in these mandatory fields:
14.1.3. All other entries that are not mandatory are also transmitted and stored.
14.1.4. The following data is also stored with the time of registration:
14.1.5. During this process, your consent is obtained and you are referred to this data privacy statement.
14.1.6. Alternatively, an initial contact is possible by means of the e-mail address provided. In this case, the user’s personal data sent with the e-mail is stored.
14.1.7. In this context, no data is passed on to third parties. The data is used exclusively for processing the conversation.
14.2 Legal framework for data processing
14.2.1. The legal framework for the processing of the data if the user consents is Art. 6 Sec. 1 lit. a GDPR.
14.2.2. The legal framework for the processing of the data transmitted with an e-mail is Art. 6 Sec. 1 lit. f GDPR. If the aim of the e-mail contact is to conclude a contract, an additional legal framework for the processing is Art. 6 Sec. 1 lit. b GDPR.
14.3 Purpose of data processing
14.3.1. We need to process personal data from the input mask only for dealing with the initial contact. If contact is made by e-mail, there is also a justified interest in the processing of the data.
14.3.2. The other data processed during the transmission procedure serves to prevent a misuse of the contact form and ensure the security of our informationtechnical systems.
14.4.1. The data is deleted as soon as it is no longer required for achieving the purpose of its collection. For the personal data from the input mask of the contact form and the data sent by e-mail, this is the case when the respective conversation with the user ends. The conversation ends when it can be inferred from circumstances that the situation concerned has finally been clarified.
14.4.2. The extra data collected during the send process is deleted after a period of seven days at the latest.
14.5 Appeal and disposal possibility
14.5.1. At all times, users can withdraw their consent to the processing of their personal data. If users contact us by e-mail, they can forbid the storage of their personal data at any time. In such a situation, the conversation cannot be continued.
14.5.2. The withdrawal of consent and the forbidding of storage must be sent in writing to the data protection officer.
14.5.3. In this case, all personal data stored during the contact is deleted.
15.1 Extent of processing of personal data
15.1.1. On the basis of our justified interests, we use the web analysis service Google Analytics of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”). This helps us to analyze the surfing habits of our users.
15.1.2. Google uses cookies. The information generated by the cookie on users’ usage of the online offer is normally transferred to a Google server in the USA and stored there.
15.1.3. Through the setting of this cookie, Google can analyze the use of our website. Every time a page is called of this website (which is operated by the person responsible for processing and on which a Google Analytics component has been integrated), the internet browser on the IT system of the person concerned is automatically prompted by the respective Google Analytics component to transfer data for online analysis to Google. As part of this technical procedure, Google receives knowledge about personal data, such as the IP address of the person concerned, which helps Google among other things to trace the origin of the visitors and clicks and thus enable commission settlements.
15.1.4. With the use of this cookie, personal information is stored, e.g. the access time, the place from which access was made, and the frequency of visits to our website by the person concerned. For every visit to our websites, this personal data, including the IP address of the internet connection used by the person concerned, is transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. In certain circumstances, Google passes data gathered by this technical procedure to third parties.
15.1.5. When parts of our website are called, the following data is stored:
IP address of the user’s calling system
The website from which the user reaches the called website (referer)
The subpages called by the called website
The frequency of the call of the website
15.1.6. Google is certified under the Privacy Shield Agreement, which means it offers a guarantee to comply with European data protection laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
15.1.7. Google will use this information on our behalf to analyze the use of our online offer by users, to compile reports about the activities within this online offer, and to provide us with other services connected with the use of this online offer and the internet. Pseudonymous user profiles can be created from the processed data.
15.1.8. The user’s IP address identified by the browser is not merged by Google with other data.
15.1.9. We use Google Analytics to restrict the display of advertisements activated within the commercial services of Google and its partners to those users who have shown interest in our online offer or have specific features (e.g. interest in particular subjects or products determined by the websites visited) that we transmit to Google (so-called “remarketing audiences“ or “Google Analytics audiences”). With the aid of remarketing audiences, we also wish to ensure that our advertisements meet the potential interest of users and do not bother or annoy them.
15.1.10. We use Google Analytics only with enabled IP anonymization. That means that a user’s IP address is abbreviated by Google within the member states of the European Union or in other signatories of the agreement across the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and abbreviated there.
15.2 Legal framework for processing personal data
The legal framework for the processing of users’ personal data is Art. 6 Sec. 1 lit. f GDPR.
15.3 Purpose of data processing
15.3.1. The processing of users’ personal data enables us to analyze the surfing habits of our users. By analyzing this data, we can compile information on the use of the individual component of our website. This helps us in the continuous improvement of our website and its user-friendliness. These aims also include our justified interest in data processing according to Art. 6 Sec. 1 lit. f GDPR.
15.3.2. Through the anonymization of the IP address, we also do justice to users’ interest in the protection of their personal data.
15.4 Duration of storage
15.4.1. The data is deleted as soon as it is no longer required for our recording purposes. In our case, this is 14 months.
15.5 Appeal and disposal possibility
15.5.1. Cookies are stored on the user’s computer and transferred by that computer to us. As user, you therefore have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transfer of cookies. Stored cookies can be deleted at any time. This can also be done automatically. If cookies for our website are disabled, it is possible that not all features of the website can be used fully.
15.5.2. Users can prevent the storage of cookies by making a corresponding setting in their browser software; they can also prevent the recording of data generated by cookies relating to their use of the online offer, its transfer to Google and the processing of this data by Google by downloading and installing the browser plug-in available under this link: http://tools.google.com/dlpage/gaoptout?hl=de.
This browser plug-in uses JavaScript to inform Google Analytics that no data or information on visits to websites is allowed to be transmitted to Google Analytics. The installation of the browser plug-in is interpreted by Google as a withdrawal of consent. If the IT system of the person concerned is later deleted, formatted or reinstalled, the person concerned has to reinstall the browser plug-in in order to disable Google Analytics. If the browser plug-in is uninstalled or disabled by the person concerned or any other person ascribed to his or her sphere of influence, the browser plug-in can be reinstalled or re-enabled.
15.5.3. For further information on Google’s use of data and setting and appeal options, see the following Google websites: https://www.google.com/intl/de/policies/privacy/partners (“How Google uses information from sites or apps that use our services”), http://www.google.com/policies/technologies/ads (“How Google uses cookies in advertising”), http://www.google.de/settings/ads (managing information used by Google to display advertising).
16.1 Extent of processing of personal data
16.1.1. On the basis of our justified interests, we use the Google Fonts service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”).
16.1.2. Google Fonts provides an intuitive and robust directory of open-source designer web fonts. With a comprehensive catalogue, typography can be integrated seamlessly in any design project.
16.1.3. This service is used to integrate web fonts in our websites. The integration of the Google fonts takes place with a server call to Google, regularly via the URL https://fonts.google.com. The fonts are supplied by various designers and are open-source.
16.1.4. When a user calls our online offer, a request is usually transmitted to a Google server in the USA, where it is stored and processed.
16.1.5. Technically, the fonts embedded in our website are stored on a Google server and loaded from there when the site is called. Through the use of the Google Fonts, the Google server sends a corresponding file to each user, based on the technologies supported by the user’s browser.
16.1.6. Google is certified under the Privacy Shield Agreement, which means it offers a guarantee to comply with European data protection laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
16.1.7. The connection to Google Fonts is not authenticated. During a visit to our online offer, no cookies or log-in information is sent to Google. Corresponding queries to Google Fonts servers are sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com, so that requirements for fonts are basically separated from log-in information, which otherwise is sent to Google domains such as google.com or google.de, where it can be authenticated.
16.1.8. Google Fonts logs records of the CSS and the font file requirements. For statistical purposes, Google assigns aggregated usage numbers showing how popular font families are, and publishes these results on an Analytics website (https://fonts.google.com/analytics).
16.1.9. For further information on the Google Fonts service, see https://developers.google.com/fonts/faq.
16.2 Legal framework for processing personal data
16.3 Purpose of data processing
16.3.1. Data is processed out of interest in the analysis, optimization and economic operation of the online offer in order to integrate content or service offers from third parties or their contents and services.
16.3.2. We use Google Fonts to make our website independent of the fonts installed by the user, the so-called system fonts, and to ensure a consistent display on different systems.
16.3.3. The purpose and extent of data collection and the further processing and use of the data by Google can be seen in the Google data privacy statement under https://policies.google.com/privacy?hl=de.
16.4 Duration of storage
16.4.1. The data is deleted as soon as it is no longer required for our recording purposes.
16.5 Appeal and disposal possibility
16.5.1. For further information on Google’s use of data and setting and appeal options, see the following Google websites: (“How Google uses information from sites or apps that use our services”), http://www.google.com/policies/technologies/ads (“How Google uses cookies in advertising”), http://www.google.de/settings/ads (managing information used by Google to display advertising).
17.1 Description and extent of data processing
17.1.1. On the basis of our justified interests, we use components of the YouTube service, which is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”).
17.1.2. YouTube is an internet video portal that enables video publishers to post video clips free of charge on the internet and other users to view, evaluate and comment on these, also free of charge. YouTube permits the publication of all types of videos, which is why not only complete film and TV programs but also music videos, trailers or users’ own home-made videos can be called via this internet portal.
17.1.3. Every call of a page of this website, which is operated by the person responsible for processing and on which a YouTube component (YouTube video) is integrated, automatically causes (due to the respective YouTube component) the internet browser on the IT system of the person concerned to download a display of the corresponding YouTube component from YouTube. For further information on YouTube, see under https://www.youtube.com/yt/about/de/. During this technical procedure, YouTube and Google receive knowledge about the actual subpage of our website that is visited by the person concerned.
17.1.4. If the person concerned is simultaneously logged into YouTube, YouTube recognizes with the call of the subpage exactly which subpage of our website is visited by the person concerned. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned.
17.1.5. By means of the YouTube component, YouTube and Google always receive information that the person concerned has visited our website if the person concerned is simultaneously logged into YouTube; this takes place independently of whether the person concerned clicks a YouTube video or not. If the person concerned does not want this information to be transmitted to YouTube and Google, he or she can prevent it by logging off from the You Tube account before calling our website.
17.2 Legal framework for data processing
17.3 Purpose of data processing
17.3.1. Data is processed out of interest in the analysis, optimization and economic operation of the online offer.
17.3.2. The purpose and extent of data collection and the further processing and use of the data by YouTube can be seen in the data privacy statement of YouTube under https://www.google.de/intl/de/policies/privacy/.
17.4 Duration of storage
17.4.1. The data is deleted as soon as it is no longer required for achieving the purpose of its collection.
17.5 Appeal and disposal possibility
17.5.1. If a user is simultaneously using the services of YouTube and doesn’t want YouTube to collect data about this online offer and link it to the user data stored with YouTube, he or she should log off from YouTube and delete all related cookies before using our online offer.
17.5.2. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. It may therefore be necessary that the user logs off from any possible Google user account and delete all related cookies.
17.5.3. Under https://www.google.de/settings/ads/authenticated, YouTube offers the option of forbidding targeted advertising.
18.1 Description and extent of data processing
18.1.1. On the basis of our justified interests, we use components of the Vzaar service, which is operated by Vzaar Ltd. 31-33 Bondway London SW8 1SJ United Kingdom (“Vzaar”).
18.1.2. Vzaar is an internet video portal that enables video publishers to post video clips and other users to view them. Vzaar permits the publication of all types of videos.
18.1.3. Every call of a page of this website, which is operated by the person responsible for processing and on which a Vzaar component is integrated, automatically causes (due to the respective YouTube component) the internet browser on the IT system of the person concerned to download a display of the corresponding Vzaar component from Vzaar. For further information on Vzaar, see under https://help.vzaar.com/article/131-terms-conditions. During this technical procedure, Vzaar receives knowledge about the actual subpage of our website that is visited by the person concerned.
18.2 Legal framework for data processing
18.3 Purpose of data processing
18.3.1. Data is processed out of interest in the analysis, optimization and economic operation of the online offer.
18.3.2. The purpose and extent of data collection and the further processing and use of the data by Vzaar can be seen in the data privacy statement of Vzaar under https://help.vzaar.com/article/132-privacy-policy.
18.4 Duration of storage
18.4.1. The data is deleted as soon as it is no longer required for achieving the purpose of its collection.
18.5 Appeal and disposal possibility
18.5.1. Under https://vzaar.com/contact, the user can contact Vzaar and forbid data storage.
If your personal data is being processed, you are the person concerned in the sense of GDPR and you have the following rights vis-à-vis the person responsible:
19.1 Right to information
19.1.1. From the person responsible, you can demand confirmation about whether personal data concerning you is processed by us.
19.1.2. If your data is being processed, you can demand information from the person responsible about the following:
The reason why the personal data is being processed
The recipients or categories of recipients to whom your personal data has been or will be disclosed
The planned duration of storage of your personal data or, if nothing concrete can be specified here, criteria for defining the duration of storage
A right to correct or delete your personal data, a right to restrict processing by those responsible, or a right of appeal against this processing
All available information about the origin of the data if the personal data is not collected for the person concerned
The right to an automatic decision-making including profiling in accordance with Art. 22 Sec. 1 and 4 GDPR and – in these cases at least – meaningful information about the logic involved as well as the scope and the intended effects of such processing for the person concerned.
19.1.3. You have the right to demand information about whether your personal data is transmitted to a third country or an international organization. In this context, you can demand to be informed about suitable guarantees acc. to Art. 46 GDPR in connection with the transmission.
19.1.4. This right to information can be restricted if it is foreseeable that it will make the realization of research or statistics purposes impossible or extremely difficult and if the restriction is necessary for fulfilling research and statistics purposes.
19.2 Right to correction
19.2.1. You have a right to correction and/or completion vis-à-vis the person responsible if your processed personal data is incorrect or incomplete. The person responsible has to make the correction immediately.
19.2.2. Your right to correction can be restricted if it is foreseeable that it will make the realization of research or statistics purposes impossible or extremely difficult and if the restriction is necessary for fulfilling research and statistics purposes.
19.3 Right to restriction of processing
19.3.1. You can demand restriction of processing of your personal data under the following conditions:
You dispute the correctness of your personal data for a duration that enables the person responsible to check the correctness of your personal data
Processing is illegal and you reject the deletion of your personal data and instead demand the restriction of the use of your personal data
The person responsible no longer requires the personal data for purposes of processing, but you require it for the assertion, enforcement or defense of your legal rights
You have appealed against processing in accordance with Art. 21 Sec. 1 GDPR and it is not yet certain whether the justified reasons of the person responsible outweigh your reasons.
19.3.2. If processing of your personal data has been restricted, this data – apart from its storage – may only be processed with your consent or for the assertion, enforcement or defense of your legal rights or to protect the rights of another natural or legal person or for reasons of an important public interest of the EU or a member state.
19.3.3. If restriction of processing is limited to the conditions listed above, you will be informed of this by the person responsible before the restriction is lifted.
19.3.4. Your right to restriction of processing can be restricted if it is foreseeable that it will make the realization of research or statistics purposes impossible or extremely difficult and if the restriction is necessary for fulfilling research and statistics purposes.
19.4 Right to deletion
19.4.1. You can demand from the person responsible that your personal data be deleted immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:
Your personal data is no longer required for the purposes for which it was collected or otherwise processed.
You withdraw your consent on the basis of which processing was carried out in accordance with Art. 6 Sec. 1 lit. a or Art. 9 Sec. 2 lit. a GDPR, and there exists no other legal basis for processing.
You appeal against processing in accordance with Art. 21 Sec. 1 GDPR and there exist no overriding justified reasons for processing, or you appeal against processing in accordance with Art. 21 Sec. 2 GDPR.
Your personal data concerned was unlawfully processed.
The deletion of your personal data is necessary for the fulfillment of a legal obligation according to EU law or the laws of a member state to which the person responsible is subject.
Your personal data was collected with regard to services offered by information society in accordance with Art. 8 Sec. 1 GDPR.
19.5 Information to third parties
If the person responsible has published your personal data and is legally obliged to delete it in accordance with Art. 17 Sec. 1 GDPR, he or she must take appropriate (including technical) measures, having regard to the available technology and the implementation costs, to inform those responsible for data processing who also process your personal data that you as the person concerned have demanded the deletion of all links to this personal data or of copies or replications of this personal data.
19.6 Exceptions
The right to deletion does not exist if processing is necessary for the following:
Fulfilling a legal obligation that requires processing according to EU law or the laws of the member states to which the person responsible is subject, or performing a task that is in the public interest or in the exercise of official authority that is assigned to the person responsible
For reasons of public interest in the area of public health in accordance with Art. 9 Sec. 2 lit. h and i as well as Art. 9 Sec. 3 GDPR
For archive purposes in the public interest, scientific or historical research purposes, or for statistical purposes in accordance with Art. 89 Sec. 1 GDPR, provided the right named under Section a) will foreseeably make the realization of the aims of processing impossible or extremely difficult
For the assertion, enforcement or defense of legal rights
19.7 Right to information
19.7.1. If you have enforced you right to correction, deletion or restriction vis-àvis the person responsible, this person is legally obliged to inform all recipients to whom your personal data was disclosed about this correction or deletion of the data or restriction of processing unless this proves to be impossible or is connected with disproportionate effort.
19.7.2. You have the right vis-à-vis the person responsible to be informed about these recipients.
19.8 Right to data portability
19.8.1. You have the right to receive the personal data that you have provided to the person responsible in a structured, common and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance by the person responsible to whom the personal data was provided, if:
Processing is based on consent in accordance with Art. 6 Sec. 1 lit. a GDPR or Art. 9 Sec. 2 lit. a GDPR or on a contract in accordance with Art. 6 Sec. 1 lit. b GDPR and
Processing takes place with the aid of automatic procedures.
19.8.2. In enforcing this right, you also have the right to ensure that your personal data is transferred directly from one person responsible to another person responsible as far as this is technically possible. The freedoms and rights of other persons many not be impaired by this.
19.8.3. The right to data portability does not apply to the processing of personal data that is required for performing a task that is in the public interest or in the exercise of official authority that is assigned to the person responsible.
20.1. You have the right for reasons applying to your particular situation to appeal at any time against the processing of your personal data that takes place on the basis of Art. 6 Sec. 1 lit. e or f GDPR; this also applies to profiling based on these regulations.
20.2. The person responsible no longer processes your personal data unless he or she can provide compelling legitimate reasons for processing that outweigh your interest, rights and freedoms, or the processing serves the assertion, enforcement or defense of your legal rights.
20.3. If your personal data is processed to pursue direct advertising, you have the right to appeal at any time against the processing of your personal data for the purposes of such advertising; this also applies to profiling if this is in connection with such direct advertising.
20.4. If you appeal against processing for the purposes of direct advertising, your personal data is no longer processed for these purposes.
20.5. In connection with the use of services of the information society – irrespective of Regulation 2002/58/EG – you can exercise your right to appeal using automatic procedures for which technical specifications are used.
20.6. You also have the right for reasons applying to your particular situation to appeal against the processing of your personal data conducted for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Sec. 1 GDPR.
20.7. Your right to appeal can be restricted if it is foreseeable that it will make the realization of research or statistics purposes impossible or extremely difficult and if the restriction is necessary for fulfilling research and statistics purposes.
21 Right to withdraw declaration of consent concerning data privacy
You have the right at any time to withdraw your consent concerning data privacy. Through the withdrawal of consent, the legitimacy of the processing carried out on the basis of your consent up to its withdrawal is not affected.
22 Automatic decision case by case including profiling
You have the right not to be subjected to a decision based exclusively on automatic processing including profiling, a decision that evolves a legal effect on you or that considerably adversely affects you. This does not apply if the decision:
is necessary for the conclusion or fulfillment of a contract between you and the person responsible
is permissible on the basis of legal regulations of the EU or the member states to which the person responsible is subject and these legal regulations include appropriate measures for preserving your rights and freedoms as well as your justified interests, or
22.1. However, these decisions may not be based on special categories of personal data in accordance with Art. 9 Sec. 1 GDPR, as long as Art. 9 Sec. 2 lit. a or g GDPR does not apply and appropriate measures have been taken to protect your rights and freedoms as well as your justified interests.
22.2. With regard to the cases named in (1) and (3), the person responsible takes appropriate measures to protect your rights and freedoms as well as your justified interests, to which at least belongs the right to obtain the intervention of a person on the part of the person responsible, to present one’s own position, and to challenge the decision.
23 Right to complain to a supervisory authority
23.1. Irrespective of any other regulatory or legal remedy, you have the right to complain to a supervisory authority, in particular in the member state of your whereabouts, your workplace, or the place of the presumed infringement if you are of the opinion that the processing of your personal data violates the General Data Protection Regulation.
23.2. The supervisory authority to which the complaint is submitted informs the complainant about the state and results of the complaint including the possibility of a legal remedy in accordance with Art. 78 of the General Data Protection Regulation.