Source: https://www.english.ids-cologne.de/data-protection/data-protection-notice-7.php
Timestamp: 2020-08-09 08:37:33
Document Index: 563360036

Matched Legal Cases: ['Art. 26', 'Art. 26', 'Art. 13', 'Art. 14', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 19', 'Art. 20', 'Art. 21', 'Art. 24', 'Art. 32', 'Art. 35', 'Art. 36', 'Art. 24', 'Art. 24', 'Art. 28', 'Art. 30', 'Art. 33', 'Art. 37']

General data protection notice | IDS
The Controllers as defined under the data protection laws are
Gesellschaft zur Förderung der Dental-Industrie (GFDI) mbH
Aachener Str. 1053–1055
The Data Protection Officer of Koelnmesse GmbH can be contacted as follows: datenschutz-km@koelnmesse.de .
The Controllers will then no longer process your personal data, unless you can demonstrate compelling reasons for the processing warranting protection, and these prevail over your interests, rights and liberties, or if the processing is for the purpose of asserting, exercising or defence of legal entitlements.
Under certain circumstances, you can demand the erasure of the personal data concerning you. If the Controllers have made your personal data public and are obliged to erase them, they shall, with consideration for the available technology and implementation costs, take appropriate measures, including of a technical nature, to inform Controllers, responsible for the data pro-cessing and processing the personal data, that you, as data subject, have demanded that they delete all links to these personal data, or have demanded the deletion of copies or replications of these personal data.
If you have asserted the right of rectification, erasure or restriction of processing with respect to one of the Controllers, the latter is obliged to inform all recipients, to whom your personal data have been disclosed, of this rectification or erasure of the data or of the restriction of processing, unless this proves to be impossible or involves disproportionate expense. You have a right with respect to the Controller to be informed of these recipients.
You have a right to receive your personal data, provided by you, in a structured, commonly-used and machinereadable format. You also have a right to insist that these data be transferred directly to another controller, insofar as this is technically possible. Liberties and rights of other persons must not be impaired as a result.
The data processing is also carried out on the basis of an agreement between jointly responsible par-ties pursuant to Article 26 GDPR. The essential features of this agreement are:
Obligations resulting from the GDPR
Determining the purpose and the means of the data processing x x
Determining the type of the personal data x x
Art. 26 (1): Determining in a transparent manner their respective responsibilities for compliance with the obligations under this regulation. The arrangement shall duly reflect the respective roles and relationships of the joint controllers vis-à-vis the data subjects. x x
Art. 26 (2): The essence of the arrangement shall be made available to the data subject. x x
Art. 13: Information to be provided where personal data are collected. x
Art. 14: Information to be provided where personal data have not been obtained from the data subject. x
Art. 15: Processing of requests to obtain information. x
Art. 16: Processing of requests to obtain rectification. x
Art. 17 or 18: Processing of requests for the erasure or restriction of processing and Art. 19 Notification obligation regarding erasure of personal data. x
Art. 20: Processing of requests to receive personal data concerning the data subject (data portability). x
Art. 21: Process objections. x
Art. 24 (1) in connection with Art. 32: Determining the technical and organisational measures after carrying out risk assessment and insofar as necessary data protection impact assessment (Art. 35) and consultation with a supervisory authority/transfer of the necessary information (Art. 36 (3)). x
Art. 24 (1) Documentation of the choice of the technical and organisational measures (as demonstration of compliance). x
Art. 24 (1) Review und updating of the measures. x
Art. 28: Use of processors and other (third-party) processors and their review. x x
Art. 30: Maintaining the record of processing activities. x
Art. 33, 34: Process in the event of a data breach subject to obligatory notification. x
Art. 37: Designation of a data protection officer. x
(last amended 4 November, 2019)