Datenschutzerklärung
Responsible body within the meaning of Section 13 (1) TMG
team neusta SE
Konsul-Smidt-Straße 24
28217 Bremen
Phone: +49 421 20696-0
Email: info@neusta.de
Chairman of the Supervisory Board:
Dipl.-Ökonom (univers.) Frank Lotze
Executive Board:
Carsten Meyer-Heder (Chairman)
Fabian Gutsche
Uwe Scheja
We take the protection and security of your personal data very seriously and collect, process, store, and use your personal data exclusively in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the data protection laws of the Federal Republic of Germany.
To give you the best possible control over your data, we would like to inform you in our privacy policy about what personal data we collect when you use our website “www.team-neusta.de” (hereinafter referred to as “website”), how we use this data, and what rights and options you have.
Personal data is any information relating to identified or identifiable natural persons, e.g., first name, last name, email address.
2. COLLECTION, PROCESSING, STORAGE, AND USE OF YOUR DATA
2.1. COLLECTION, PROCESSING, STORAGE, AND USE OF YOUR DATA WHEN USING OUR WEBSITE
2.1.1. LOG DATA WHEN VISITING OUR WEBSITE
Our website is available to everyone without prior registration. For technical reasons, your internet browser or mobile device automatically transmits the following data to our web server when you access our website:
- IP address of your device,
- date and time of access,
- URL of the requesting website,
- http response code,
- name of the file accessed,
- Amount of data sent,
- Browser type and version, and
- Operating system of your device.
This data is stored by our web server in log files. This data is not stored together with other personal data.
The legal basis for the storage of this data is Art. 6 (1) lit. f GDPR.
We use this data to enable the use of our website and its technical administration, to ensure the security of our information technology systems, to prevent misuse of our website, and to optimize our website. These purposes are the legitimate interests pursued by us in processing the data in accordance with Art. 6 (1) lit. f GDPR.
We delete the data as soon as it is no longer necessary for the purpose for which it was collected. If the data is stored in log files, it is deleted after seven days at the latest. Further storage of the log data is possible if the IP address of your device is deleted or altered in such a way that it can no longer be assigned to you.
2.1.2. COOKIES
We use cookies and other third-party services on our websites. Cookies are small files that are stored on the hard drive of the device you are using at the instigation of our web server. They enable your computer system to be uniquely identified when you visit our website again and can be used to analyze your use of our website. Cookies may also contain personal data.
We also use third-party services. When you use these services, your personal data is transferred to the third-party providers and used there to evaluate your user behavior.
You can also use our websites without agreeing to the use of cookies or other services. You can refuse their use and delete cookies at any time by adjusting the settings on your device. If you decide against the use of cookies or other services, certain functions of our website may not be available to you or may only be available to a limited extent. The use of cookies and also their rejection or deletion is linked to the device used and also to the browser used in each case. You must therefore make the cookie settings separately for each of your devices and, if you use multiple browsers, also for each browser.
We use the following cookies and services:
Necessary:
These cookies are essential for the functioning of the websites. Without these cookies, we cannot offer you our services. We may use these cookies without your consent.
Advanced features and statistics:
These cookies facilitate the use and improve the functionality of the websites, or they collect information about your use of our websites. They enable us to improve our offering for you.
Personalization and marketing
These cookies are used by us or third-party providers to store and/or retrieve data regarding your use of and interaction with their online services and to provide you with information that is specifically relevant to you.
Consent to the use of cookies and management of cookies via the cookie consent banner:
The legal basis for the processing of your data via cookies is Art. 6 (1) (a) GDPR in conjunction with EU Directive 2002/58. If your consent is required for the use of certain cookies, we will only use these cookies when you use the website if you have given your prior consent.
In the cookie consent banner, you agree to the use of all cookies by clicking the “ACCEPT ALL” button. You can accept or reject cookies in the respective categories using the “Advanced features and statistics” or “Personalization and marketing” checkboxes and the “SAVE AND CONTINUE” button. You can select individual cookies via “Show more details.” You can revoke or change your settings at any time via the “Cookie settings” link.
Please note that if you deactivate cookies, their functions (e.g., analyses) will no longer be performed.
2.2. COLLECTION, PROCESSING, STORAGE, AND USE OF YOUR DATA FOR RECEIVING OUR NEWSLETTER
2.2.1. SUBSCRIBING TO THE NEWSLETTER
You can subscribe to our free newsletter via our website by entering your name and email address. After entering your email address, you will receive a welcome email from us at the email address you provided. By clicking on the link contained in the email, you confirm that you are the actual authorized user of the email address provided (known as the double opt-in procedure) and activate the newsletter subscription. When you subscribe to our newsletter, we obtain your consent to the processing of your data.
The legal basis for processing your data after you subscribe to our newsletter is Art. 6 (1) (a) GDPR.
We use the email address you provide exclusively for sending our newsletter.
We only store the email address you provide for as long as you wish to receive our newsletter. You can revoke your consent at any time and thereby unsubscribe from the newsletter with effect for the future. You can also revoke your consent by clicking on the unsubscribe link contained in the footer of each newsletter. Revoking your consent does not affect the lawfulness of the processing of your data for the purpose of receiving the newsletter that took place on the basis of your consent until revocation.
2.2.2. LOG DATA WHEN REGISTERING FOR THE NEWSLETTER
When you access our websites, the data specified in section 2.1 of this privacy policy is also automatically collected and stored.
2.3. COLLECTION, PROCESSING, STORAGE, AND USE OF YOUR DATA WHEN CONTACTING US
2.3.1. CONTACT BY EMAIL
You have the option of contacting us via our email addresses
or
and sending us a message (electronic contact). In this case, we will store your personal data transmitted by email.
The legal basis for the processing of your personal data that you transmit to us in the context of electronic contact by email is Art. 6 (1) lit. f GDPR. If the electronic contact by email is aimed at concluding a contract with us, the legal basis for the processing of your personal data is also Art. 6 (1) lit. b GDPR.
We use your data to process your request and to contact you. These purposes are the legitimate interests pursued by us in processing the data in accordance with Art. 6 (1) lit. f GDPR.
Your data will be deleted by us as soon as it is no longer required to achieve the aforementioned purposes, unless contractual or legal obligations prevent deletion; this is the case when the matter underlying your electronic contact has been completely clarified. If you conclude a contract with us on the basis of your electronic contact, your data will only be deleted when it is no longer necessary for the fulfillment of the contract or the implementation of pre-contractual measures. We would like to point out that it may be necessary to store your data even after the contract has been fulfilled in order to comply with contractual or legal obligations.
You may object to the use of your personal data at any time without incurring any costs other than the transmission costs. In such a case, your data stored in the context of the electronic contact will be deleted; the processing of your request cannot be continued. If your data is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures, (early) deletion of your data is only possible if there are no contractual or legal obligations that prevent deletion.
2.3.2. LOG DATA WHEN CONTACTING US BY EMAIL
When you access our website, the data specified in section 2.1 of this privacy policy is also automatically collected and stored.
2.3.3. CONTACT VIA OUR CONTACT FORM
You have the option of contacting us via our contact form and sending us a message by providing the mandatory data
name and email address
.
The legal basis for the processing of your data that you provide to us when contacting us is Art. 6 (1) lit. f GDPR. If your contact with us is aimed at concluding a contract with us, the legal basis for the processing of your data is also Art. 6 (1) lit. b GDPR.
We use your data exclusively for processing your request, executing any contract, and contacting you. These purposes are the legitimate interests pursued by us in processing the data in accordance with Art. 6 (1) lit. f GDPR.
Your data will be deleted by us as soon as it is no longer required to achieve the aforementioned purposes, unless contractual or legal obligations prevent deletion. This is the case when your request has been answered and the matter underlying your contact has been completely clarified. If you enter into a contract with us as a result of your contact, your data will only be deleted when it is no longer necessary for the fulfillment of the contract or the implementation of pre-contractual measures. We would like to point out that it may be necessary to store your data even after the contract has been fulfilled in order to comply with contractual or legal obligations.
You may object to the use of your personal data at any time without incurring any costs other than the transmission costs. In such a case, your data stored in connection with the contact will be deleted; your request cannot then be processed further. If your data is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures, (premature) deletion of your data is only possible if there are no contractual or legal obligations preventing deletion.
2.4. COLLECTION, PROCESSING, STORAGE, AND USE OF YOUR DATA IN THE CASE OF (SPONTANEOUS) APPLICATIONS BY EMAIL
2.4.1. (SPONTANEOUS) APPLICATIONS BY EMAIL
You have the option of applying for a job with us via our email address
to apply for a job vacancy or send us a speculative application. In this case, we will store the personal data you send us by email.
The legal basis for the processing of your personal data that you send us in your (speculative) application by email is Art. 6 (1) (f) GDPR. If your (unsolicited) application by email leads to the establishment of an employment relationship with us, the legal basis for the processing of your personal data is also Art. 6 (1) lit. b GDPR and § 26 (1) BDSG (new).
We use your personal data to carry out the application process, to review and process your (unsolicited) application, to decide on the establishment of an employment relationship with us, and to respond to your inquiries and contact you. These purposes are the legitimate interests pursued by us in processing the data in accordance with Art. 6 (1) lit. f GDPR.
Your data will be deleted by us 6 months after completion of the application process, unless contractual or legal obligations prevent deletion. If you enter into a contract with us on the basis of your (unsolicited) application, your data will only be deleted when it is no longer required for the performance of the contract or pre-contractual measures. Please note that it may be necessary to store your personal data even after the contract has ended in order to comply with contractual or legal obligations.
You can object to the use of your personal data at any time without incurring any costs other than the transmission costs. In such a case, your data stored in the context of your (unsolicited) application by email will be deleted; and your (unsolicited) application cannot be processed further. If your data is required for the performance of a contract or pre-contractual measures, (premature) deletion of your data is only possible if there are no contractual or legal obligations preventing deletion.
2.4.2. LOG DATA FOR (UNSOLICITED) APPLICATIONS BY EMAIL
When you access our website, the data specified in section 2.1 of this privacy policy is also automatically collected and stored.
2.4.3. APPLICATIONS VIA THE CAREER PORTAL
Please also note our privacy policy regarding the processing of application data.
3. TRANSFER OF PERSONAL DATA
3.1. Your personal data will not be disclosed, sold or otherwise transferred to third parties unless this is necessary for the purpose of fulfilling a contract. Otherwise, we will only disclose your personal data to third parties within the scope of a legal permission or on the basis of your consent, which can be revoked at any time for the future, and only to the extent necessary to fulfill our contractual obligations.
3.2. Our service partners (e.g., hosting service providers) require your personal data and process it exclusively on our behalf within the scope of order processing, which is expressly provided for in Art. 28 (3) GDPR.
3.3. We will only transfer your personal data to government agencies or authorities if we are required to do so by law.
4. EVALUATION OF USAGE BEHAVIOR
4.1. GOOGLE ANALYTICS
We use the services of Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), on our website.
Google Analytics uses tracking code and “cookies,” small text files that are stored on the device you are using and enable an analysis of your use of our website. The information generated by the cookie about your use of our website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization “anonymizeIp”, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The legal basis for the processing of your data is Art. 6 (1) lit. a GDPR.
We use Google's web analysis service to design our website in line with user needs and to continuously improve and optimize it. On our behalf, Google uses the data and information obtained to evaluate your use of our website, to compile reports on website activity, and to provide us with other services related to the use of our website and the internet. These purposes are the legitimate interests pursued by us in processing the data in accordance with Art. 6 (1) lit. f GDPR.
You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of our website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de
For more information on terms of use and data protection, please visit:
https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de&gl=de
https://marketingplatform.google.com/about/analytics/terms/de/ You can change your settings for the Google Analytics cookie at any time via the “Cookie settings” link. If the cookie is deactivated, you do not give your consent and its function is no longer performed. Please note that this may limit the functionality of our website, meaning that you may not be able to use all of its features.
4.2. GOOGLE ADWORDS CONVERSION TRACKING
We also use Google Adwords Conversion Tracking on our website, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View,
CA 94043, USA (“Google”).
Google Adwords uses tracking code and “cookies,” small text files that are stored on the device you are using, provided that you have accessed our website via a Google ad. The cookie expires after 30 days. If you visit our website again within these 30 days, Google can recognize that you clicked on a Google ad and were redirected to our website.
The legal basis for the processing of your data is Art. 6 (1) lit. a GDPR.
We use Google's web analysis service to statistically record the use of our website and to continuously improve and optimize our website. On our behalf, Google uses the data and information obtained to evaluate your use of our website and to compile reports (so-called conversion statistics) for us. The conversion statistics tell us how many users clicked on our ad and were redirected to our website with a conversion tracking tag.
You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.
For more information on data protection, please visit:
https://services.google.com/sitestats/de.html
You can change your settings for the Google Adwords Conversion Tracking cookie at any time via the “Cookie settings” link. If the cookie is deactivated, you do not give your consent and its function is no longer performed. Please note that this may limit the functionality of our website, so that you may not be able to use all the functions of our website.
4.3. FACEBOOK PIXEL
We use Facebook Pixel on our website, a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; website: https://www.facebook.com.
With the help of Facebook Pixel, Facebook is able to identify visitors to our online offering as a target group for the display of advertisements (so-called “Facebook Ads”). Accordingly, we use Facebook Pixel to display the Facebook Ads we place only to those users on Facebook and within the services of Facebook's cooperating partners (so-called “Audience Network” https://www.facebook.com/audiencenetwork/ ) who have also shown an interest in our online offering or who have certain characteristics (e.g., interest in certain topics or products, which can be seen from the websites visited) that we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interests of users. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion measurement”).
Facebook Pixel transmits usage data (e.g., websites visited, interest in content, access times), meta/communication data (e.g., device information, IP addresses), and location data (information about the geographical position of a device or person).
Facebook Pixel is only used with your consent. The legal basis for the processing of your data is Art. 6 (1) (a) GDPR. You can change your settings for the Facebook Pixel cookie at any time via the “Cookie settings” link. If the cookie is deactivated, you do not give your consent and its function is no longer performed. Please note that this may limit the functionality of our website, meaning that you may not be able to use all of its features.
Our website incorporates social media plugins (“plugins”) from the social networks Facebook, Google+, and Instagram, the microblogging service Twitter, and the video portal YouTube (“providers”) on the basis of Art. 6 (1) (f) GDPR. In order to increase the protection of your data when visiting our website, we integrate the plugins into our website using the so-called “2-click solution.” This integration ensures that no connection to the providers' servers is established when you visit our website. Only when you activate the plugins and thus give your consent to the data transfer does your browser establish a direct connection to the providers' servers.
5. SOCIAL MEDIA PLUGINS
5.1. FACEBOOK
Our website incorporates social media plugins (“plugins”) from the social network Facebook. Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). An overview of Facebook plugins and their appearance can be found here:
https://developers.facebook.com/docs/plugins
When you visit our website and activate the plugin, a direct connection is established between your browser and the Facebook server via the plugin. Facebook receives the information that you have accessed our website with your browser, even if you do not have a Facebook profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged into Facebook, Facebook can immediately associate your visit to our website with your Facebook profile. If you interact with the plugin, for example by clicking the “Like” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on the social network and displayed to your contacts there.
For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please refer to Facebook's privacy policy at:
http://www.facebook.com/policy.php
If you do not want Facebook to be able to associate your visit to our website with your Facebook user account, please log out of your Facebook user account.
5.2. TWITTER
Our website incorporates social media plugins (“plugins”) from the microblogging service Twitter. Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). An overview of the Twitter buttons and their appearance can be found here:
https://twitter.com/about/resources/buttons
When you visit our website and activate the plugin, a direct connection is established between your browser and the Twitter server via the plugin. By integrating the plugin, Twitter receives the information that your browser has accessed our website, even if you do not have a Twitter profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a Twitter server in the USA and stored there. If you interact with the plugin, for example by clicking the “Tweet” button, the corresponding information is transmitted directly to a Twitter server and stored there. The information is also published on your Twitter account and displayed to your contacts there.
For the purpose and scope of data collection and the further processing and use of your data by Twitter, as well as your rights in this regard and setting options for protecting your privacy, please refer to Twitter's privacy policy at:
https://twitter.com/privacy
If you do not want Twitter to assign the data collected via our website directly to your Twitter profile, you must log out of Twitter before activating the plugin.
5.3. GOOGLE
Our website also incorporates social media plugins (“plugins”) from the social network Google+, operated by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google+”). An overview of the Google+ plugins can be found here:
https://developers.google.com/+/plugins
When you visit our website and activate the plugin, the plugin establishes a direct connection between your browser and the Google servers in the USA, and the button is displayed on our website by sending a message to your browser. By integrating the plugin, Google receives the information that your browser has accessed our website. This information (including your IP address) is transmitted directly from your browser to a Google server in the USA and stored there. This applies regardless of whether you are registered with Google+ or logged in. Google stores this information for approximately two weeks for system maintenance and troubleshooting purposes.
If you interact with the plugin while you are logged into Google+, the corresponding information is transmitted directly to a Google server and stored there. The information collected is also linked to your Google+ account and disclosed to other users.
For more information about Google's collection and use of your data, your rights in this regard, and settings options for protecting your privacy, please refer to Google's privacy policy at:
http://www.google.com/intl/de/policies/privacy/
If you do not want Google to assign the collected information directly to your Google+ profile, you must log out of Google+ before visiting our website.
5.4. YOU TUBE
Our website also incorporates social media plugins (“plugins”) from the YouTube video portal. YouTube is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”).
When you visit our website and activate the plugin, the plugin establishes a direct connection between your browser and the YouTube server. YouTube thereby receives the information that you have accessed our website with your browser, even if you do not have a YouTube account or are not currently logged in. This information (including your IP address) is transmitted from your browser directly to a YouTube server in the USA and stored there. If you are logged in to YouTube, YouTube can immediately associate your visit to our website with your YouTube account.
For more information about the collection and use of your data by YouTube, your rights in this regard, and settings options for protecting your privacy, please refer to YouTube's privacy policy at:
https://www.google.de/intl/de/policies/privacy
If you do not want YouTube to associate the collected information directly with your YouTube account, you must log out of YouTube before visiting our website.
5.5. INSTAGRAM
Our website incorporates social media plugins (“plugins”) from the Instagram service. Instagram is operated by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). An overview of the Instagram plugins can be found here:
http://blog.instagram.com/post/36222022872/introducing-instagram-badges
When you visit our website and activate the plugin, the plugin establishes a direct connection between your browser and Instagram's servers, and the button is displayed on our website by sending a message to your browser. By integrating the plugin, Instagram receives the information that your browser has accessed our website. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. This applies regardless of whether you have an Instagram profile or are logged in to Instagram.
If you interact with the plugin while logged in to Instagram, the corresponding information is transmitted directly to an Instagram server and stored there. The information collected is also published on your Instagram profile and displayed to your contacts.
For more information about the collection and use of your data by Instagram, your rights in this regard, and settings options for protecting your privacy, please refer to Instagram's privacy policy at:
https://help.instagram.com/155833707900388/
If you do not want Instagram to assign the collected information directly to your profile, you must log out of Instagram before visiting our website.
We use the services of Google Maps, a map service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) on our website.
If you have JavaScript enabled in your browser but have not installed a JavaScript blocker, your browser will briefly connect directly to Google's servers in the USA to deliver the map content to your browser and transmit your IP address to Google. The map content is transmitted directly from Google to your browser and integrated into the website. If you use the route planner function, the (start) address you entered will also be transmitted to Google.
The legal basis for the processing of your data is Art. 6 (1) lit. f GDPR.
We use Google's map service to display interactive maps, in particular to create directions so that you can find us easily. These purposes are the legitimate interests pursued by us in processing data in accordance with Art. 6 (1) lit. f GDPR.
You can deactivate JavaScript by adjusting your browser software settings accordingly; however, we would like to point out that in this case you will not be able to use the map display.
For more information on terms of use and data protection, please visit:
https://www.google.com/intl/de_de/help/terms_maps.html and https://www.google.de/intl/de/policies/.
6. GOOGLE MAPS
We use the services of Google Maps, a map service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), on our website.
If you have JavaScript enabled in your browser but have not installed a JavaScript blocker, your browser will briefly establish a direct connection to the Google servers in the USA to deliver the map content to your browser and transmit your IP address to Google. The map content is transmitted directly from Google to your browser and integrated into the website. If you use the route planner function, the (start) address you entered will also be transmitted to Google.
The legal basis for the processing of your data is Art. 6 (1) lit. f GDPR.
We use Google's map service to display interactive maps, in particular to create directions so that you can find us easily. These purposes are the legitimate interests pursued by us in processing the data in accordance with Art. 6 (1) lit. f GDPR.
You can deactivate JavaScript by adjusting your browser software settings accordingly; however, we would like to point out that in this case you will not be able to use the map display.
For more information on terms of use and data protection, please visit:
https://www.google.com/intl/de_de/help/terms_maps.html and https://www.google.de/intl/de/policies/.
7. RESPONSIBLE BODY
The controller responsible for processing your personal data is:
team neusta SE
Konsul-Smidt Straße 24
28217 Bremen
Phone: +49 421 / 20 696 - 0
Fax: +49 421 / 20 696 - 99
Email: info@team-neusta.de
8. DATA PROTECTION OFFICER
We have appointed the following person as our data protection officer
Ms. Bärbel Rolfes
HEC GmbH
Konsul-Smidt-Straße 20
28217 Bremen
Phone: +49 421 / 20750-0
Email: datenschutz@neusta.de
9. LOCATION OF YOUR DATA / DATA SECURITY
9. LOCATION OF YOUR DATA / DATA SECURITY
9.1. Our servers and data centers are located at infrastructure services GmbH. Data processing is carried out by team neusta GmbH.
9.2. As a rule, we process your personal data within the European Union. However, we also use the services of some third-party providers. If these third-party providers are located in areas where the level of data protection does not meet the standards applicable within the European Union, we take all necessary steps to ensure that your personal data is adequately protected. We achieve this either by concluding data protection agreements or by ensuring that the third-party providers comply with appropriate security standards.
9.3. We take various physical, technical, organizational, and administrative security measures to protect your data to an appropriate extent, depending on the sensitivity of the data.
9.4. We use SSL encryption on our website for security reasons, in particular to protect your personal data. You can recognize the encrypted connection by the lock symbol in the address bar of your browser, among other things.
10. YOUR RIGHTS
10.1. RIGHT TO INFORMATION
10.1.1. You are entitled to request information from us at any time, free of charge, as to whether we are processing personal data relating to you. If this is the case, you have the right to obtain information about this personal data and the following information:
- the purposes for which the personal data relating to you is processed;
- the categories of personal data that are being processed;
- the recipients or categories of recipients to whom the personal data concerning you have already been disclosed or will be disclosed;
- the planned duration of storage of the personal data concerning you, or, if this is not possible, the criteria for determining the storage period;
- the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by us as the controller, and a right to object to processing;
- the existence of a right to lodge a complaint with a supervisory authority;
- all available information on the origin of the data if the personal data is not collected from you;
- the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You are also entitled to request information from us as to whether your personal data is transferred to a third country or to an international organization. In this context, you may request that we inform you of the appropriate safeguards pursuant to Article 46 GDPR.
10.1.2. To protect your data, we reserve the right to request proof of identity.
10.1.3. We can provide the information required under data protection law in a commonly used electronic format.
10.2. RIGHT TO RECTIFICATION
You also have the right to request that we rectify inaccurate personal data. Furthermore, taking into account the purposes of the processing of your personal data, you have the right to request that we complete incomplete personal data.
10.3. RIGHT TO RESTRICT PROCESSING
10.3.1. You have the right to request that we restrict the processing of your personal data if one of the following conditions applies:
- if you dispute the accuracy of the personal data concerning you, for a period enabling us to verify the accuracy of the personal data;
- if the processing is unlawful and you oppose the erasure of the personal data concerning you and request the restriction of the use of the personal data instead;
- we no longer need the personal data concerning you for the purposes of the processing, but you require it for the establishment, exercise, or defense of legal claims;
or
- you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether our legitimate grounds override yours.
10.3.2. If the processing of your personal data has been restricted, this data may – apart from its storage – only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
10.3.3. If you have obtained a restriction on the processing of your personal data, we will inform you before the restriction is lifted.
10.4. RIGHT TO ERASURE (“RIGHT TO BE FORGOTTEN”)
10.4.1. You have the right to request that we erase your personal data without undue delay if one of the following reasons applies:
- The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed;
- You withdraw your consent on which the processing was based in accordance with Art. 6 (1) (a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing;
- You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR;
- The personal data concerning you has been processed unlawfully;
- The erasure of the personal data concerning you is necessary to comply with a legal obligation under Union or Member State law to which we are subject;
- The personal data concerning you has been collected in relation to the offer of information society services pursuant to Art. 8 (1) GDPR.
10.4.2. If we have made personal data public and are obliged to erase it in accordance with Art. 17 (1) GDPR, we shall take reasonable measures, including technical measures, taking into account the available technology and implementation costs, to inform data controllers who process your personal data that you have requested us to erase all links to your personal data or copies or replications of your personal data.
10.4.3. The right to erasure of your personal data does not apply if the processing is necessary
- for exercising the right of freedom of expression and information;
- to comply with a legal obligation which requires processing under Union or Member State law to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in us;
- for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 para. 1 GDPR, insofar as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of this processing;
or
- for the establishment, exercise, or defense of legal claims.
10.4.4. If you have asserted your right to rectification, erasure, or restriction of processing of your personal data against us, we are obliged to notify all recipients to whom your personal data has been disclosed of the rectification, erasure, or restriction of processing of your personal data, unless this proves impossible or involves disproportionate effort. You have the right to be informed by us about the recipients of your personal data.
10.5. RIGHT TO DATA PORTABILITY
10.5.1. You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that
- the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and
- the processing is carried out using automated procedures.
10.5.2. In exercising your right to data portability, you also have the right to have your personal data transferred directly from us to another controller, without hindrance from us, insofar as this is technically feasible. The freedoms and rights of others must not be affected by this.
10.5.3. The right to data portability does not apply to the processing of your personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
10.6. RIGHT TO OBJECT
10.6.1. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
10.6.2. We will no longer process your personal data after your objection, unless we can demonstrate compelling legitimate grounds for the further processing of your personal data that outweigh your interests, rights, and freedoms, or the further processing of your personal data serves to assert, exercise, or defend legal claims.
10.7. RIGHT TO REVOKE DATA PROTECTION CONSENT
You have the right to revoke your data protection consent at any time. Your revocation does not affect the lawfulness of the processing of your personal data based on your consent until revocation.
10.8. RIGHT TO LODGE A COMPLAINT
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes the provisions of the GDPR. The supervisory authority to which you have lodged your complaint will inform you of the progress and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.
11. UPDATES
11.1. We reserve the right to change this privacy policy from time to time.
We will inform you in advance if we make any significant changes to the privacy policy.
11.2. The use of your personal data is subject to the current version of the privacy policy, which can be accessed via “DATA PROTECTION” on our websites. If you continue to access our websites after the changes have come into effect, you declare your agreement with the updated privacy policy.
If you have any questions or comments about the above privacy policy, please do not hesitate to contact us. Please send an email to
Status: August 2023