I. General
The information in this declaration applies to the data processing of personal data on our website and is intended to inform you about the processing purposes, recipients, legal bases, storage periods and your rights. We collect and utilise our users' personal data only insofar as this is necessary for provision of an operational site and of our content and services. Personal data are all data that can be related to you personally, such as your name, your address or your email address. The term "processing of data" refers in particular to the collection, storage, use and transmission of your data.
Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 Para. 1 (a) EU General Data Protection Regulation (GDPR) serves as legal basis.
In processing personal data necessary for performance of a contract to which the data subject is a party, Art. 6 Para. 1 (b) GDPR applies as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 Para. 1 (c) GDPR applies as the legal basis.
In the event that vital interests of the data subject or another natural person require a processing of personal data, Art. 6 Para. 1 (d) GDPR applies as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Para. 1 (f) GDPR applies as the legal basis for processing.
The personal data of a relevant person will be deleted or blocked as soon as the purpose of storage ceases to exist. Storage may take place after the storage purpose has ceased, if this is provided for by law. Blocking or erasing of data will also be carried out if a storage deadline prescribed by the above-mentioned standards expires, unless data storage is a necessity for concluding or performing a contract.
Further information on the legal basis of the processing and on the duration of storage of specific personal data can be found in the relevant subsection.
Information on the rights to which you are entitled can be found under III.
II. Responsible party
The responsible party within the meaning of the Genera Data Protection Regulation as well as the national data protection laws of the Member States and other data protection regulations:
Peter Tommerdich
Juristische und Allgemeine Deutschkurse
Obere Osterfeldstrasse 45
86156 Augsburg
Germany
Phone: +49 176 51124270
Email: info@german-for-lawyers.de
III. Rights of the data subject
If personal data is processed by you, you are the data subject within the meaning of the GDPR and you have the following rights regarding our company:
-
Right to information
You can request that the responsible party confirm whether we will process personal data that concerns you. If such processing is taking place, you can request to be informed by the data controller regarding the following information:
(1) the purposes for processing the personal data;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
(4) the planned storage duration of personal data concerning you or, if specific information in this respect is not possible, criteria for determining the storage period;
(5) the existence of a right of rectification or deletion of personal data that concerns you or of a restriction on processing by the responsible party or of a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information on the origin of the data if the personal data has not been collected from the data subject;
(8) the existence of automated decision-making, including profiling in accordance with Art. 22 para. 1 and 4 of the GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information regarding whether your personal information will be transmitted to a third-party country or an international organisation. In this respect, you can request the appropriate guarantees in accordance with Art. 46 of the GDPR in connection with the transmission.
-
The right of rectification
You have a right of rectification and/or completion with respect to the data controller if the personal data processed concerning you is incorrect or incomplete. The correction shall be made immediately.
-
The right to limitation of processing
Under the following conditions, you may request that the processing of personal data concerning you be restricted if:
(1) you dispute the accuracy of the personal data concerning you for a period that enables the responsible party to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
(3) the responsible party does not need the personal data for longer than the processing's purposes, but you need it for the assertion, exercise or defence of legal claims, or
(4) you object to the processing in accordance with Art. 21 para. 1 of the GDPR and it is not yet clear whether the legitimate reasons of the responsible party outweigh your reasons.
Where processing of the personal data that concerns you has been restricted, such data – apart from being stored – may be processed only with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on the grounds of an important public interest of the Union or of a Member State.
If the processing restriction has been done in accordance with the above conditions, you will be informed by the responsible party before the restriction is lifted.
-
Right to deletion
-
Deletion obligation
You have the right to obtain the erasure of personal data concerning you from us without undue delay and we have the obligation to erase personal data without undue delay where one of the following grounds applies:
(1) the personal data that concerns you is no longer necessary for the purposes for which it was collected or otherwise processed;
(2) you revoke your consent to the processing pursuant to Art. 6 para. 1 (a) or Art. 9 para. 2 (a) of the GDPR and there is no other legal basis for processing;
(3) you submit an objection to the processing pursuant to Art. 21 para. 1 of the GDPR, and there are no overriding legitimate grounds for processing, or you submit an objection to the processing pursuant to Art. 21 para. 2 of the GDPR.
(4) the personal data that concerns you has been processed unlawfully;
(5) the deletion of personal data is required to comply with legal obligations according to Union law or the laws of the Member States to which the responsible party is subject;
(6) the personal data that concerns you has been collected in connection with offered information society services pursuant to Art. 8 para. 1 of the GDPR.
-
Transfer of personal data to third parties
If we have made personal data public that concerns you and if we are obliged to delete it pursuant to Art. 17 para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.
-
Exceptions
The right to deletion does not exist insofar as the processing is necessary
(1) to exercise the right of freedom of expression and information;
(2) for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the responsible party is subject or for the performance of a task in the public interest or in the exercise of official authority conferred to the responsible party;
(3) for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 (h) and (i), as well as Art. 9 para. 3 of the GDPR;
(4) for archiving purposes in the interest of public, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 of the GDPR, to the extent that the law referred to in (a) is likely to render impossible or seriously prejudicial the attainment of the objectives of such processing; or
(5) to assert, exercise or defend legal claims.
-
Right to information
If you have exercised your right to have the responsible party correct, delete or limit the processing, this party is obliged to inform all recipients to whom the personal data that concerns you has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.
It is your right to be informed regarding such recipients.
-
Right to data portability
You have the right to obtain your personal data, which you have provided to the controller, in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit this data to another person responsible without any hindrance by us, provided that
(1) the processing is based on consent pursuant to Art. 6 para. 1 (a) of the GDPR or Art. 9 para. 2 (a) of the GDPR or on a contract pursuant to Art. 6 para. 1 (b) of the GDPR and
(2) the processing is undertaken using automated procedures.
In exercising this right, you also have the right to request that the personal data concerning you be transferred directly by us to another person responsible, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the responsible party.
-
The right of objection
You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning you at any time, which is carried out in accordance with Art. 6 para. 1 (e) or (f) of the GDPR, including profiling based on those provisions.
The responsible party will no longer process the personal data that concerns you, unless the party can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data that concerns you is being processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data that concerns you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.
If you object to processing that is for direct marketing purposes, the personal data that concerns you will no longer be processed for these purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
-
The right to revoke the data protection declaration of consent
You have the right at any time to revoke your data protection declaration of consent. The withdrawal of consent shall not affect the lawfulness of processing taking place on the basis of this consent before its revocation.
-
Automated decision in individual cases, including profiling
You have the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against you or significantly impairs you in a similar manner. This shall not apply if the decision:
(1) is necessary for the conclusion or fulfilment of a contract between you and the responsible party;
(2) is permissible on the basis of legislation of the Union or the Member States, to which the responsible party is subject, and these laws contain adequate measures to safeguard your rights and freedoms, as well as your legitimate interests, or
(3) is undertaken with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9, Para. 1 GDPR, unless Art. 9 para. 2 lit a or g GDPR and appropriate measures have been taken to protect your rights and freedom as well as your legitimate interests.
In the cases referred to in (1) and (3), the responsible party shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person on the part of the responsible party, to state his or her own position and to challenge the decision.
-
The right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of GDPR.
The supervisory authority with which the complaint has been filed shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.
IV. Visiting the website and log files
1. Scope of the processing of personal data
Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer.
(1) Information regarding the used browser type and version
(2) The user's operating system
(3) The user's Internet service provider
(4) The IP address of the user
(5) Date and time of access
(6) Websites from which the user's system reaches our website
(7) Websites accessed by the user's system via our website
The data is also stored in the log files of our system.
2. Legal basis for the processing of personal data
The legal basis for the collection and storage of data is Art. 6 Para. 1 (f) of the GDPR.
3. Purpose of data processing
Temporary storage of the IP address is required to view the website. To this end, the user's IP address must remain stored for the duration of the session. The remaining data is collected for technical reasons to ensure stability and security.
This also gives rise to the legitimate interest in the processing pursuant to Art. 6 para. 1 (f) of the GDPR.
4. Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of data collection for provision of the website, this will be undertaken once the respective session has ended.
If the data is stored in log files, this will be undertaken after 30 days at the latest. Further storage is possible. In this case, the user's IP addresses will be deleted or distorted so that assignment to the accessing client is no longer possible.
5. Objection and deletion option
Collection of data for provision of the website and storage of data in log files is absolutely necessary for operation of the website. Consequently, there is no option to object on the part of the user.
V. Cookies
1. Scope of the processing of personal data
Our website uses technically necessary cookies. Cookies are small text files which are saved on your computer system. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after changing pages.
These cookies are used to check whether the contact form was sent correctly or whether it was misused by a spam bot for sending unsolicited messages, as well as for switching the language on the website.
2. Legal basis for the processing of personal data
The legal basis for processing personal data using cookies is Art. 6 1 (f) of the GDPR.
3. Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of our website for you. Some features of our website will not be available without the use of cookies. In this case, it is necessary that the browser be recognised even after changing the page.
The user data collected by technically necessary cookies shall not be used to create user profiles.
4. Duration of storage
As a rule, the technically necessary cookies are deleted when the browser is closed, i.e. at the end of the session. You can also delete cookies that have already been saved at any time.
5. Objection and deletion option
Cookies are stored on your device and transmitted to our site. You therefore have the option of deactivating or restricting the transmission of cookies by changing the settings in your browser. If cookies are deactivated for our website, it may no longer be possible to use all of the website's features in full.
VI. Contact form
1. Scope of the processing of personal data
You can use the contact form on our website to get in touch with us this way. When used, the data entered there will be transmitted to us and stored with us. This is at least the following data:
(1) First name
(2) Last name
(3) Email address
(4) Your message to us
(5) Answer to the security question
In addition, if you also provide us with this data, which is not necessary for the use of the form:
(1) Telephone number
At the same time, the following additional data is collected and stored when the request is sent:
(1) The user's IP address
(2) Date and time of use
We process the collected data to answer and deal with your inquiries. You are not required by law to provide your personal data. However, we will not be able to reply to your inquiry.
2. Legal basis for the processing of personal data
If you send your data in a pre-contractual context, for example, with the request to send an offer or with questions about our products, Art. 6 Para. 1 (b) GDPR provides the legal basis. In all other cases Art. 6 para. 1 (f) GDPR provides the legal basis.
3. Purpose of data processing
We only use personal data provided on contact forms to make the requested contact. In the event of contact by email, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process is for preventing the misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of storage
Your data will be deleted if it can be inferred from the circumstances that your enquiry or the facts in question have been finally clarified.
Personal data that was additionally collected during the sending procedure will be deleted at the latest after a period of seven days.
5. Objection and deletion option
The collection of the data is absolutely necessary to answer the inquiries sent via the contact form. Consequently, there is no option to object on the part of the user.