Source: https://www.aqas.eu/privacy/
Timestamp: 2018-11-14 05:22:24
Document Index: 381419164

Matched Legal Cases: ['Art. 4', 'Art. 13', 'Art. 6', 'art. 6', 'art. 6', 'Art. 28', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', '§ 26', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 7', '§ 7', 'Art. 6', '§ 7', 'Art. 6', 'Art. 28', 'Art. 28', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 7']

Privacy policy – AQAS e.V.
Privacy policyRené Adrian2018-10-05T13:37:24+00:00
This privacy policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as „data“) in the context of the provision of our services and within our online services and the associated websites, functions and content as well as external online presences, such as our Social Media Profile (hereinafter jointly referred to as „Online Service“). With regard to the terms used, such as „processing“ or „person responsible“, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
Hohenstaufen ring 30-32
Authorized representative of the board: Prof. Dr. Eberhard Menzel, Prof. Dr. Jens Hermsdorf
„Personal data“ means any information relating to an identified or identifiable natural person (hereinafter „data subject“); an identifiable natural person is one who can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier (e.g. a cookie) or with one or more specific characteristics that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
„processing‘ means any operation or set of operations which is carried out with or without the aid of automated processes and which involves personal data. The term is broad and covers practically every handling of data.
In accordance with Art. 13 GDPR we inform you about the legal basis of our data processing. For users from the area of application of the data protection basic regulation (GDPR), i.e. the EU and the EEC, the following applies, provided that the legal basis is not mentioned in the data protection explanation
The legal basis for the processing to protect our legitimate interests is Art. 6 para. 1 lit. f GDPR.
We shall take appropriate technical and organisational measures to ensure a level of protection commensurate with the risk, in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, extent, circumstances and purposes of the processing, as well as the varying probability and severity of the risk to the rights and freedoms of natural persons.
These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data as well as access to, inputting, forwarding, securing and separating the data. In addition, we have established procedures to ensure the exercise of data subjects‘ rights, the deletion of data and the reaction to data threats. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings.
If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or if this is done in the context of the use of third party services or disclosure or transfer of data to other persons or companies, this will only occur if it is done to fulfil our (pre)contractual obligations, on the basis of your consent, a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or leave the data in a third country only if the legal requirements are met. I.e. the processing takes place e.g. on basis of special guarantees, like the officially recognized statement of a data protection level corresponding to the EU (e.g. for the USA by the „Privacy Shield“) or observance of officially recognized special contractual obligations.
You have the right to request confirmation as to whether the data in question will be processed and to request information about this data and further information and a copy of the data in accordance with the statutory provisions.
„Cookies“ are small files that are stored on the user’s computer. Different data can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after the user’s visit to an online service. Temporary cookies, or „session cookies“ or „transient cookies“, are cookies that are deleted after a user leaves an online offer and closes his browser. The content of a shopping basket in an online shop or a login status, for example, can be stored in such a cookie. Cookies are referred to as „permanent“ or „persistent“ and remain stored even after the browser has been closed. For example, the login status can be saved if users visit it after several days. The interests of the users can also be stored in such a cookie, which are used for range measurement or marketing purposes. Third party cookies“ are cookies that are offered by providers other than the person responsible for operating the online service (otherwise, if they are only the latter’s cookies, we speak of „first party cookies“).
A general objection to the use of cookies used for online marketing purposes can be raised for a large number of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. In addition, cookies can be stored by switching them off in the browser settings. Please note that this may mean that not all functions of this online service can be used.
We process the data of our customers within the scope of our contractual services which include conceptual and strategic consulting, campaign planning, software and design development / consulting or maintenance, implementation of campaigns and processes / handling, server administration, data analysis / consulting services and training services.
We process inventory data (e.g., customer master data, such as names or addresses), contact data (e.g., e-mail, telephone numbers), content data (e.g., text entries, photographs, videos), contract data (e.g., subject matter of contract, term), payment data (e.g., bank details, payment history), usage and metadata (e.g., within the scope of evaluating and measuring the success of marketing measures). We do not process any special categories of personal data, unless these are components of a commissioned processing. The affected parties include our customers, interested parties and their customers, users, website visitors or employees as well as third parties. The purpose of the processing is the provision of contractual services, billing and our customer service. The legal basis of the processing results from art. 6 para. 1 lit. b GDPR (contractual services), art. 6 para. 1 lit. f GDPR (analysis, statistics, optimisation, security measures). We process data which are necessary for the justification and fulfilment of the contractual services and point out the necessity of their disclosure. Disclosure to external parties shall only take place if it is necessary within the framework of an order. When processing the data provided to us within the framework of an order, we shall act in accordance with the instructions of the customer and the legal requirements for order processing pursuant to Art. 28 GDPR and shall not process the data for any purposes other than those specified in the order.
We process data within the scope of administrative tasks as well as the organisation of our business, financial accounting and compliance with legal obligations, such as archiving. Here we process the same data that we process within the framework of the provision of our contractual services. The processing bases are Art. 6 para. 1 lit. c. GDPR, Art. 6 para. 1 lit. f. GDPR. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, office organization, archiving of data, i.e. tasks which serve the maintenance of our business activities, performance of our tasks and provision of our services. The deletion of the data with regard to contractual services and contractual communication corresponds to the data specified in these processing activities.
We also store information on suppliers, event organisers and other business partners on the basis of our business interests, e.g. for the purpose of establishing contact at a later date. This data, which is mainly company-related, is stored permanently by us.
We process the data of our members, supporters, interested parties, customers or other persons according to Art. 6 Para. 1 lit. b. GDPR, insofar as we offer them contractual services or act within the framework of an existing business relationship, e.g. with members, or are themselves recipients of services and benefits. Otherwise, we process the data of data subjects in accordance with Art. 6 Para. 1 lit. f. of the GDPR. GDPR on the basis of our legitimate interests, e.g. in the case of administrative tasks or public relations work.
The data processed here, the type, scope and purpose and the necessity of its processing are determined by the underlying contractual relationship. This basically includes the inventory and master data of the persons (e.g., name, address, etc.), as well as the contact data (e.g., e-mail address, telephone, etc.), the contract data (e.g., services used, contents and information provided, names of contact persons) and, if we offer payable services or products, payment data (e.g., bank details, payment history, etc.).
We process the applicant data only for the purpose and within the scope of the application procedure in accordance with the legal requirements. The processing of the applicant data takes place in order to fulfil our (pre)contractual obligations within the scope of the application procedure in the sense of Art. 6 Para. 1 lit. b. GDPR Art. 6 para. 1 lit. f. GDPR if data processing becomes necessary for us, e.g. within the framework of legal proceedings (in Germany, § 26 BDSG additionally applies).
The application procedure requires that applicants provide us with the applicant data. If we offer an online form, the necessary applicant data is marked, otherwise it results from the job descriptions and basically includes personal details, postal and contact addresses and the documents belonging to the application, such as cover letter, curriculum vitae and certificates. In addition, applicants can voluntarily provide us with additional information.
When establishing contact with us (e.g. via contact form, e-mail, telephone or via social media), the user’s details are used for processing the contact request and its processing in accordance with Art. 6 Para. 1 lit. b. (within the framework of contractual/pre-contractual relationships), Art. 6 Para. 1 lit. f. (within the framework of contractual/pre-contractual relationships), Art. 6 Para. 1 lit. f. (within the framework of contractual/pre-contractual relationships). (within the framework of contractual/pre-contractual relationships), Art. 6 Para. 1 lit. f. (other inquiries) (other inquiries) GDPR. The data of the users can be stored in a customer relationship management system („CRM system“) or comparable inquiry organization.
Content of the newsletter: We send newsletters, e-mails and other electronic notifications containing advertising information (hereinafter „newsletter“) only with the consent of the recipient or a legal permission. Insofar as the contents of the newsletter are specifically described within the scope of registration, they are decisive for the consent of the user. In addition, our newsletters contain information about our services and us.
The dispatch of the newsletter and the performance measurement associated with it are based on the consent of the recipients pursuant to Art. 6 para. 1 lit. a, Art. 7 GDPR in conjunction with § 7 para. 2 no. 3 UWG or, if consent is not required, on our legitimate interests in direct marketing pursuant to Art. 6 para. 1 as per f. GDPR in conjunction with § 7 Para. 3 UWG.
Here we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online service on the basis of our legitimate interests in the efficient and secure provision of this online service in accordance with Art. 6 Para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of a contract for the processing of orders). Art. 28 GDPR (conclusion of a contract for the processing of orders).
We, or our hosting provider, collect data on the basis of our legitimate interests within the meaning of Art. 6 Para. 1 lit. f. of the German Data Protection Act (GDPR). GDPR data about each access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, data volume transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Within the scope of Matomo’s range analysis, the following data are processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. of the German Data Protection Ordinance): the browser type and browser version used by you, the browser version, the operating system used by you, the GDPR browser version, etc. GDPR) processes the following data: the type and version of browser you use, the operating system you use, your country of origin, the date and time of the server enquiry, the number of visits, your length of stay on the website and the external links you click on. The IP address of the user is anonymised before it is stored.
The processing of users‘ personal data is carried out on the basis of our legitimate interests in the effective information of users and communication with users in accordance with Art. 6 Para. 1 lit. f. of the German Data Protection Act. GDPR. If the users are asked by the respective providers of the platforms for their consent to the aforementioned data processing, the legal basis for the processing is Art. 6 Para. 1 lit. a., Art. 7 GDPR.
https://www.openstreetmap.de), which are offered by the OpenStreetMap Foundation (OSMF) on the basis of the Open Data Commons Open Database License (ODbL). Privacy Statement: https://wiki.openstreetmap.org/wiki/Privacy_Policy.