Source: https://www.territory.de/en/datenschutz/
Timestamp: 2018-12-19 10:19:47
Document Index: 726725460

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 18', 'Art. 20', 'Art. 6', 'Art 9', 'Art 6', 'Art. 20', 'Art. 21', 'Art. 6', 'Art. 4', 'Art. 89']

TERRITORY – PRIVACY POLICY
Protecting your privacy is a top priority for us. That is why we comply with all applicable legal regulations regarding privacy protection and data security in all of our web activities. This privacy policy explains how Territory handles information collected during your visit to our website.
The following information is meant to give you, as “data subject”, an overview of the processing of your personal data by us and your rights arising from the data protection laws and regulations. In general, you can use our internet pages without entering any personal data. If you wish to use specific services provided by our company via our website, however, processing of personal data may become necessary. We will generally obtain your consent if processing of personal data is required and if there is no legal basis for such processing.
The processing of personal data such as your name, address or email address will always be performed in accordance with the General Data Protection Regulation (GDPR) and also in accordance with the country specific data protection regulations applicable for the “Territory CTR GmbH”. In this Privacy Policy, we would like to inform you regarding the scope and purpose of the personal data that we collect, use and process.
As the party responsible for the processing (data controller), we have implemented a number of technical and organizational measures to ensure comprehensive protection to the extent possible of the personal data processed via this web page. However, internet-based data transmissions may generally have security gaps so that an absolute protection cannot be guaranteed. For this reason, you also have the option to provide personal data to us via alternative channels such as via the phone or by regular mail.
The responsible party (data controller) within the meaning of the GDPR is:
Manager of the responsible body: Stefan Postler, Gero Hesse, Soheil Dastyari
Please do not hesitate to contact our data protection officer directly in case of any questions or proposals.
This Privacy Policy uses the terms used by the European regulatory authority in the General Data Protection Regulation (GDPR). We intend our Privacy Policy to be easy to read and comprehend both for the general public as well as our customers and business partners. To ensure this, we would like to define the terms used in advance.
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether it is a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
point a of Art. 6 para. 1 of the GDPR forms the legal basis for our company for data processing operations where we obtain consent for a specific processing purpose.
If the processing of personal data is required for the fulfillment of a contract to which you are a contractual party, as is the case, for example, in processing operations that are required for the delivery of goods or other services or counter-performance of services, the processing is based on point b of Art. 6 para. 1 GDPR. The same applies for processing operations necessary to carry out measures in advance of a contract, e.g., queries relating to our products or services.
If our company is subject to a legal obligation that requires the processing of personal data, e.g. fulfilment of tax obligations, then the processing is based on point c of Art. 6 para. 1 GDPR.
In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or another natural person. This would, for example, be the case if a visitor of our company were injured and his/her name, age, health insurance information and other vital information would have to be provided to the attending physician, hospital or other third parties. In this case, the processing would be based on point d of Art. 6 para. 1 GDPR.
Ultimately, the processing operations could be based on point f of Art. 6 para. 1 GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is required to protect the legitimate interests of our company or a third party to the extent that the interests, fundamental rights and freedoms of the data subject are not overriding. We are allowed to carry out such processing operations because they were specifically mentioned by the European legislator. The European legislator stipulated in this regard that a legitimate interest could be assumed if you are a customer of our company (Recital 47 sentence 2 GDPR).
This website uses an SSL or TSL encryption to ensure data processing security and to protect confidential contents such as orders, login information or contact requests that you send to us as the operator. An encrypted connection can be recognized by the “https://” in the address line of the browser instead of “http://” and the lock symbol in your browser line.
When using our website only for informational purposes, meaning that you do not register and transmit information to us in other ways, we only collect the data that your browser sends to our server (in so-called “server log files”). Our website collects a number of general data and information every time you or an automated system visit one of our pages. These general data and information are stored in the server’s log files. The collected data includes
the webpage from which an accessing system is forwarded to our website (so-called referrer),
the sub-pages that are visited by an accessing system on our website,
When using these general data and information, we do not draw any conclusions regarding your person. This information is required to
to optimize the contents of our website as well as site-related advertising,
to ensure the continued functionality of our IT systems and technology of our website, and
to be able to provide the required information to law enforcement authorities in the event of a cyber attack.
The collected data is, on the one hand, analyzed for statistical reasons and, on the other, with the goal to increase data protection and security in our company to ultimately provide an optimal level of protection for the personal data that we process. The data in the server log files are stored separately from all other personal data provided by a data subject.
The legal basis for the data processing is point f of Art. 6 para. 1 sentence 1 GDPR. Our legitimate interest follows from the above listed purposes for data collection.
a shortened internet protocol address (anonymized IP address),
The collected data is, on the one hand, analyzed for statistical reasons and, on the other, with the goal to increase data protection and security in our company to ultimately provide an optimal level of protection for the personal data that we process. The anonymous data in the server log files are stored separately from all other personal data provided by a data subject.
We use cookies on our website. These are small files that your browser creates automatically and which are stored on your IT system (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not harm your device, they do not contain viruses, Trojans or other malware.
The cookie stores information that arises in connection with the specific device used. This, however, does not mean that we receive any direct information regarding your identity.
The purpose of using cookies is to make the use of our website more convenient for you. We use, for example, so-called session cookies to detect whether you have already visited individual pages on our website. These are automatically deleted when you leave our website.
In addition, we also use temporary cookies, which are stored on your device for a certain determined period of time, to optimize user friendliness. If you visit our site again to use our services, we will automatically be able to detect that you have visited us before and which entries and settings you have already made so you do not need to enter them again.
In addition, we use cookies to collect statistical data on the use of our website and analyze it to optimize how it is presented to you. These cookies enable us to recognize you during repeat visits to our website and automatically detect that you have visited us before. These cookies are automatically deleted after a defined time period.
The data processed by the cookies are required for the named purposes to protect our legitimate interests and the interests of third parties in accordance with point f of Art. 6 para. 1 sentence 1 GDPR.
Most browsers accept cookies automatically. You can, however, configure your browser so that no cookies are stored on your computer or that you will always be notified before a new cookie is placed on it. You may, however, not be able to use all functions of our website if you completely deactivate cookies.
8. Content of our website
8.1 Establishment of contact / Contact form
Personal data is collected when you contact us (e.g. via the contact form or email). Which data is collected when using a contact form can be gleaned from the contact form in question. These data are only stored and used to answer your queries or for establishing contact with each other and the related technical administration. The legal basis for the data processing is our legitimate interest in responding to your request in accordance with point f of Art. 6 para. 1 GDPR. If you contact us with the goal of concluding a contract, point b of Art. 6 para. 1 GDPR forms an additional legal basis for the processing. Your data is deleted after your query has been conclusively processed; this is the case when it can be concluded from the circumstances that the facts of the matter have been conclusively clarified and to the extent that no legal retention obligations exist.
9.1 Advertising newsletter
On our website, you are given the option to subscribe to our company’s newsletter. Which personal data is transmitted to us during the subscription to the newsletter can be gleaned in the entry screen used for this purpose.
In the newsletter, we inform our customers and business partners at regular intervals about the products we offer. You can generally receive our company’s newsletter only if
have subscribed to the newsletter.
For legal reasons, we will send a confirmation email using the double opt-in process to the email address you entered initially in order to receive the newsletter. This confirmation email is used to verify whether you as the owner of the email address have authorized receipt of the newsletter.
When you subscribe to the newsletter, we also store the IP address assigned to your system by your internet service provider (ISP) as well as the date and time of your registration. The collection of this data is required to trace any (possible) misuse of your email address at a later point in time and is therefore necessary for our legal protection.
The personal data collected as part of a registration process are exclusively used for sending the newsletter. In addition, subscribers to the newsletter could be sent information via email if this is necessary for the operation of the newsletter service or if registration is required, as could be the case in the event of changes to the newsletter or a change to the technical circumstances. The personal data collected as part of the newsletter service is not disclosed to third parties. You can cancel your subscription to our newsletter at any time. The consent for storing your personal data which you provided to us for so we can send you the newsletter can be revoked at any time. Every newsletter contains a link enabling you to cancel the newsletter subscription. Furthermore, you also have the option to cancel the newsletter subscription directly on our website or inform us of your cancellation in another way.
The legal basis for data processing for the purpose of sending newsletters is point a of Art. 6 para. 1 GDPR.
We use Google Analytics, a web analysis service provided by Google Inc. (https://www.google.de/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”) on our websites. Pseudonymized user profiles are created and cookies (see Section 4) are used in this context. The information generated by the cookie about your use of the website such as
are transmitted to a Google server in the United States and stored there. This information is used to analyze website use, to create reports about website activities and to provide additional services in relation to website and internet use for market research purposes and a demand-oriented design of these websites. This information may be transmitted to third parties, if legally required or if third parties process these data as part of subcontracted data processing. Your IP address will never be combined with other Google data. The IP addresses will be anonymized to ensure that an attribution is not possible (IP masking).
You can prevent the installation of cookies by changing a corresponding setting in your browser software; however, we would like to point out that you may not be able to fully utilize all website functions in this case.
You gave your consent to this within the meaning of point a of Art. 6 para. 1 GDPR via our opt-in cookie banner.
Furthermore, you can download and install a browser add-on (http://tools.google.com/dlpage/gaoptout?hl=en) in order to prevent Google from collecting and processing the data generated by the cookie relating to your use of the website (including your IP address).
Alternatively to the browser add-on, particularly for browsers on mobile devices, you can also prevent data collection by Google Analytics by clicking on the following link: deactivate Google Analytics. An opt-out cookie is set to prevent future collection of your data when you visit this website. The opt-out cookie only works in this browser and only for our website and is placed on your device. If you delete the cookies in your browser, you have to install the opt-out cookie again.
Additional information regarding data protection in relation with Google Analytics can be found in the Google Analytics Help section (https://support.google.com/analytics/answer/6004245?hl=de).
We use Adobe Typekit to improve the visual design of our website. Typekit is an Adobe Systems Software Ireland Ltd. service which gives us access to a font library. To integrate the fonts we use, your browser must establish a connection with an Adobe server in the USA and download the font required for our website. In this process, Adobe receives the information that our website was accessed from your IP address. Additional information regarding the Adobe Typekit can be found in Adobe’s privacy policy that you can find here: www.adobe.com/privacy/typekit.html
We use Google Maps (API) of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA on our website. Google Maps is a web service that provides interactive maps in order to visually represent geographic information. By using this service, you can, for example, view our location and a route description to simplify visits by car.
When the subpages with integrated Google Maps are accessed, information generated regarding your use of our website (e.g. your IP address) is transmitted to a Google server in the USA and stored there. This occurs regardless of whether Google provides a user account via which you are logged in or whether there is no user account. If you are logged in with Google, your data is directly associated with your account. If you do not wish the association with your Google profile, you will have to log out of your Google user account. Google stores your data (even the data of users who are not logged) as user profiles and analyzes them. This type of analysis is performed in accordance with point f of Art. 6 para. 1 GDPR based on Google’s legitimate interest in providing personalized advertising, market research and/or the demand-oriented design of its website. You have the right to object against the creation of these user profiles, however, your assertion of this right must be addressed to Google.
Google LLC, with headquarters in the USA, is certified for the U.S.-European data protection agreement “Privacy Shield” which ensures compliance with the data protection levels applicable in the EU.
If you do not agree with the future transmission of your data to Google as part of your Google Maps use, you also have the option to fully deactivate Google Maps’ web service by switching of JavaScript in your browser. In this case, Google Maps and also the map shown on this website cannot be used.
The Google terms of use can be found at https://policies.google.com/terms?hl=en&gl=en, the additional terms of use for Google Maps can be found at hthttps://www.google.com/intl/en_US/help/terms_maps.html
Detailed information regarding the privacy policy in connection with Google Maps can be found on Google’s website (“Google Privacy Policy”): https://policies.google.com/privacy?hl=en
We also use the reCAPTCHA function provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) on our website. This function is primarily used to distinguish whether an entry was carried out by a natural person or whether it was improperly carried out through machine and automated processing. This service also includes the sending of the IP address and additional data to Google, if any, required by Google for the reCAPTCHA service and takes place in accordance with point f of Art. 6 para. 1 GDPR based on our legitimate interest in the determination of the individual intention of actions in the internet and to avoid misuse and spam.
With this tool it is possible to implement “website tags” (i.e. keywords integrated in HTML elements) and managed via an interface. By using Google Tag Manager, we are automatically able to see which button, link or personalized image you have actively clicked on and can then record which content on our website is of particular interest to you.
The tool also triggers other tags which may also collect data. Google Tag Manager does not access this data. If you have carried out a deactivation on a domain or cookie level, then this remains in effect for all tracking tags that are implemented by the Google Tag Manager.
The tracking tool Google Analytics is automatically integrated in Vimeo videos that are integrated on our page. This is Vimeo’s own tracking that we do not have access to and cannot influence from our side. Google Analytics uses so-called “cookies” for tracking; these are text files which are stored on your computer and permit the analysis of your use of the website. The information generated by the cookie about your use of the website is typically transmitted to and stored by Google on servers in the USA.
You have given your respective consent within the meaning of point a of Art. 6 para. 1 GDPR via our opt-in cookie banner.
We have integrated YouTube components on this website. YouTube is an internet video portal that gives video publishers the opportunity to post video clips free of charge and enables other users to watch, evaluate and comment on these video clips also free of charge. YouTube allows the publication of all types of videos, which is why entire films and TV shows, but also music videos, trailers or user-produced videos can be viewed via the internet portal.
Any visit to an individual page of this website which we operate and on which we have integrated a YouTube component (YouTube video) causes the internet browser on your IT system to automatically download a representation of the YouTube component in question from YouTube. Further information regarding YouTube can be viewed at https://www.youtube.com/yt/about/. As part of this technical process YouTube and Google receive information which specific subpage of our website you visited.
If the data subject is logged in to a YouTube account at the same time, YouTube will detect which specific subpage of our website you are visiting when a subpage is accessed that contains a YouTube video. This information is collected by YouTube and Google and associated with your YouTube account.
YouTube and Google will always be notified via the YouTube component that you have visited our website if you are logged in to YouTube when you access our website; this occurs independently of whether you have clicked on a YouTube video or not. If you do not wish for this type of information to be provided to YouTube and Google, you can prevent the transmission by logging out of your YouTube account before accessing our website.
You have the right to request confirmation from us whether personal data is processed concerning your person.
12.2 Right of information Art. 15 GDPR
You have the right to receive information from us regarding your personal data that we store free of charge at any time, and you have also the right to receive a copy of these data.
12.3 Right to rectification Art. 16 GDPR
You have the right to request rectification of incorrect personal data regarding your person. Furthermore, the data subject has the right to request the completion of incomplete personal data taking into account the purpose of the processing.
12.4 Erasure Art. 17 GDPR
You have the right to request from us that your personal data is immediately erased if one of the legally provided reasons applies and to the extent that processing is not required.
12.5 Restriction of processing Art. 18 GDPR
You have the right to request a restriction of the processing if one of the provided legal preconditions applies.
12.6 Data portability Art. 20 GDPR
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format. You have also the right to transmit these data, without obstruction by us, who were provided the personal data, to another data controller to the extent that the processing is based on consent in accordance with point a of Art. 6 para. 1 GDPR or point a of Art 9 para. 2 GDPR or on a contract in accordance with Art 6. para 1b GDPR and if the processing is carried out on the basis of automated processes to the extent that the processing is not required for fulfilment of a task that is in the public interest or is carried out in execution of an official authority which was vested in us.
Furthermore, as part of your right to data portability, you have the right in accordance with Art. 20 para. 1 GDPR to request that your personal data is directly transmitted from one data controller to another to the extent this is technically feasible and does not impair the rights and freedoms of other persons.
12.7 Objection Art. 21 GDPR
For reasons that arise from your special situation, you have the right to object against the processing of your personal data, which may occur based on point e (Data processing in the public interest) or f (Data processing based on legitimate interests) of Art. 6 para. 1 GDPR.
This also applies for profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.
If you object, we will cease to process your personal data unless we can show compelling justified reasons for the processing overriding your interests, rights and freedoms, or if the processing is carried out to assert, exercise or defend legal claims.
In individual cases, we process personal data to carry out direct advertising. You can object against the processing of your personal data for the purposes of this type of advertising. This also applies to profiling to the extent it is related to such direct advertising. If you object against the processing of your personal data by us for direct advertising purposes, we will no longer process your personal data for these purposes.
Furthermore, you have the right, for reasons that result from your special situation to object against the processing of your personal data which we perform for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 GDPR, unless such processing is necessary to fulfill a task that is in the public interest.
Regardless of Directive 2002/58/EC, you have the right to assert your right to objection in connection with the use of services of the information society by employing automated processes where technical specifications are used.
12.8 Revocation of consent to data processing
You have the right to complain to a supervisory authority responsible for data protection regarding our processing of your personal data.
13. Routine storing, erasure and blocking of personal data
We process and store your personal data only for the time period that is required to fulfill the storage purpose and if intended by the legal provisions to which our company is subject.
The personal data is routinely blocked or erased if the reason for storing the data no longer exists or if a legally prescribed storage period expires.
The criterion for the duration of the storage of personal data is the relevant legal retention period. After the retention period expires, the data is routinely erased if they are no longer required for fulfilling or concluding a contract.
15. Up-to-dateness and modification of the Privacy Policy
This Privacy Policy statement is currently valid in the version of May 2018.
Due to the ongoing development of our webpages and products, or due to changing legal or official guidelines, it may become necessary to modify this Privacy Policy. You can view and print the current Privacy Policy on our website under “https://www.territory.de/en/datenschutz/”.