Data Privacy Statement

Thank you for your interest in our company. The use of our website is generally possible without the provision of any personal data. If a data subject wants to use special services of our company through our website, the processing of personal data may be required.

With this data protection declaration we would like to inform the public of the way we collect, use and process personal data as well as of the extent to which we do so and for what purpose. Furthermore, this data protection declaration makes data subjects aware of their rights.

I. Definition

1) personal data

Personal data is information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). A natural person is considered to be identifiable if he/she can be identified directly or indirectly, especially by associating him/her to an identifier such as a name, to an identification number, to location data, to an online identifier or to one or more specific characteristics that reflect the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

2) data subjects

A data subject is any identified or identifiable natural person whose personal data is processed by the entity responsible for its processing.

3) processing

Processing refers to any procedure carried out with or without the assistance of automated processes or any series of procedures in connection with personal data such as collecting, recording, organising, sorting, adapting or changing, retrieving, accessing, using, disclosing through transmission, dissemination or another form of provision, comparing or linking, restricting, deleting or destroying data.

4) restriction of processing

The restriction of processing refers to the labelling of stored personal data with the aim of restricting its future processing.

5) Profiling

Profiling refers to any form of automated processing of personal data such that this personal data is used to evaluate certain personal aspects that relate to a natural person, in particular in order to analyse or predict aspects that relate to work performance, economic situation, health, personal preferences, interests, reliability, behaviour, place of abode or change of location of this natural person.

6) pseudonymisation

Pseudonymisation refers to the processing of person data such that the personal data, without additional information, can no longer be traced back to a specific data subject, provided this additional information is stored separately and technical and organisational measures are taken to ensure that the personal data cannot be traced back to an identified or identifiable natural person.

7) responsible entity or entity responsible for processing

A responsible entity or an entity responsible for processing is the natural or legal person, authority, facility or other institution which, alone or jointly with others, makes a decision regarding the purpose and means of processing of personal data. If the purposes and means of this processing are stipulated by EU law or the law of the Member States, then the responsible entity or certain criteria of its appointment can be specified under EU law or the law of the Member States.

8) order processor

An order processor refers to a natural or legal person, authority, facility or other institution which processes personal data on behalf of the responsible entity.

9) recipient

A recipient is a natural or legal person, authority, facility or other institution to which personal data is disclosed, regardless of whether they are a third party or not. Authorities which may obtain personal data as part of a specific investigation mandate under EU law or the law of the Member States are not considered recipients.

10) third party

A third party is a natural or legal person, authority, facility or other institution except for the data subject, the responsible entity, the order processor and the persons who, under the direct responsibility of the responsible entity or the order processor, is authorised to process personal data.

11) consent

Consent refers to any informed statement of intent made voluntarily and unequivocally by the data subject in certain cases in the form of a declaration or any other clear affirmative act with which the data subject communicates that they consent to the processing of their personal data.

II. Name and address of the responsible entity

The responsible entity within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States and other data protection regulations is:

3W International GmbH
Managing director: Mr. Karsten Schudt
Hollerstraße 12
61350 Bad Homburg
Germany
Phone: 06172-80 89 34-0
E-Mail: info@3w-international.com
Website: http://3w-international.com/

III. Name and address of the data protection officer

The data protection officer of the responsible entity is:
Mr. Karl Schudt
c/o 3W International GmbH
Hollerstraße 12
61350 Bad Homburg
Germany
Phone: 06172-80 89 34-0
E-Mail: Karl.schudt@3w-international.com
Website: http://3w-international.com/

IV. The scope of personal data processing

As a matter of principle, we process personal data of our users only to the extent necessary to provide a functioning website as well as our content and services.

V. Legal bases for personal data processing

In as far as we seek the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as a legal basis.

In the processing of personal data that is required to fulfil a contract whose contracting party is the data subject, Art. 6 para. 1 lit. b of the GDPR serves as a legal basis. This also applies to processing required to implement pre-contractual measures.

In as far as the processing of personal data is required to comply with a legal obligation that our company is subject to, Art. 6 para. 1 lit. c GDPR serves as a legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as a legal basis.

If the processing of personal data is required to protect a legitimate interest of our company or a third party and if the interests, basic rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as a legal basis.

VI. Data deletion and storage duration

The personal data of the data subject is deleted or blocked as soon as the purpose of the storage ceases to apply. Furthermore, data may be stored if this is laid down by the European or national legislators in EU regulations, laws or other rules that the responsible entity is subject to. The data is also blocked or deleted if a data retention period stipulated by the mentioned standards expires, unless there is a requirement for further storage of the data for the purpose of contract conclusion or contract performance.

VII. Transmission of data to third parties

Your data is not passed on to third parties for any purpose other than those listed below. We pass on your personal data to third parties only if:

  • you have given express consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR;
  • passing on the data in accordance with Art. 6 para. 1 p. 1 lit. f GDPR is required for the assertion, exercising or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being passed on;
  • in the event of there being a legal obligation to pass on the data in accordance with Art. 6 para. 1 p. 1 lit. c GDPR, and
  • this is legally permissible and required in accordance with Art. 6 para. 1 p. 1 lit. b GDPR for the processing of contractual relationships.

VIII. Description and scope of data processing

  1. Accessing the website

 

  1. Description and scope of data processing

Whenever our website is accessed, our system automatically collects data and information from the computer system of the computer doing the accessing.

In that case, the following data is collected:

(1)            Information about browser type and version

(2)            The user’s operating system

(3)            The user’s internet service provider

(4)            The user’s IP address

(5)            Date and time of access

(6)            Websites from which the user’s system reaches our website

(7)            Websites which are accessed via our website from the user’s system

The log files contain IP addresses or other data which can identify a user. This may be the case if the link to the website from which the user reaches the website, or the link to the website the user moves to, contains personal data.

This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

 

  

  1. Legal basis

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f GDPR

 

  1. Purpose

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this to happen, the IP address of the user must remain stored for the duration of the session.

The log files are stored to ensure the functionality of the website. In addition, this data helps us improve the website and safeguard the security of our IT systems. In this context, the data is not analysed for marketing purposes.

These purposes are also what our legitimate interest in the data processing in accordance with Art. 6 para. 1 lit. f GDPR is based on.

 

  1. Storage duration

The data is deleted as soon as they it no longer required to fulfil the purpose of its collection. With regard to data collection for the provision of the website, this is the case when the session has ended.

With regard to the storage of data in log files, this is the case after no later than seven days. The data can no longer be stored after that time. In this case, the IP addresses of the users are deleted or altered such that the accessing client can no longer be identified.

 

  1. Possibility of appeal and elimination

The collection of data for the provision of the website and the storage of the data in log files is essential for the running of the website. The user therefore does not have the option to object.

 

  1. Cookies
  2. Description and scope of data processing

Our website uses cookies. Cookies are text files which are stored in the internet browser or by the internet browser on the computer system of the user. When a user visits a website, a cookie may be stored in the user’s operating system. This cookie contains a string of characters that enables the browser to be identified uniquely when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require the calling browser to be identifiable even after a page change.

We also use cookies on our website which enable the analysis of the surfing behaviour of the users.

The following data can be transmitted this way:

(1)            Entered search terms

(2)            Frequency of page views

(3)            Use of website features

When visiting our website, the user is informed about the use of cookies for analysis purposes and the user’s consent to the processing of personal data used in this context is obtained.  In this context, reference is also made to this data protection declaration.

 

  1. Legal basis

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a GDPR if the user has given his/her consent.

 

  1. Purpose

The purpose of the use of technically necessary cookies is to make it easier for users to use websites. Some features of our website are not available without the use of cookies. For this it is necessary that the browser is recognised even after a page change. The user data collected by technically necessary cookies are not used to create user profiles.

The analysis cookies are used to improve the quality of our website and its content. The analysis cookies tell us how the website is used, which allows us to continually improve our offerings.

These purposes are also what our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR is based on.

 

  1. Duration of storage, possibility of appeal and elimination

Cookies are stored on the user’s computer and transmitted to our website by it. You as a user therefore have full control over the use of cookies. By changing the settings in your internet browser you can disable or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be automated. If cookies are disabled for our website, you may not be able to use all the features of the website.

3.       Email contact

  1. Description and scope of data processing

We can be contacted via the email address provided. In this case, the personal data of the user transmitted with the email is stored. In this context, the data are not passed on to third parties. The data are used exclusively for the processing of the conversation.

 

  1. Legal basis

The legal basis for the processing of the data that are transmitted in the course of making contact is Art. 6 para. 1 lit. f GDPR. If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

  1. Purpose

The personal data is processed exclusively to facilitate communication. When we are contacted by email, this is where the required legitimate interest in the processing of the data lies.

 

 

  1. Duration

The data is deleted as soon as it is no longer required to fulfil the purpose of their collection. With regard to personal data that was transmitted by email, this is the case when the communication with the user has ended. The communication has ended when the circumstances make it clear that the relevant matter has been resolved.

  1. Possibility of appeal and elimination

The user can withdraw his/her consent to the processing of personal data at any time. When the user contacts us by email, the user can object to the storage of his/her personal data at any time. In such a case, the conversation cannot be continued.

In this case all personal data that was stored in the course of making contact will be deleted.

  1. Contact form

 

  1. Description and scope of data processing

There is a contact form on our website which can be used to contact us electronically. If the user makes use of this option, the data entered into the form is transmitted to us and stored. The fields marked with (*) have to be filled in so that we can contact you. These are:

Title/ Gender

Name, Surname

Email address

Furthermore, at the time the message is submitted, the following data is stored:

(1)            The data provided, i.e. name, title and email address

(2)            Date and time of submission

(3)            Content of the message

(4)            The user’s IP address

In this context, the data is not passed on to third parties. The data is used exclusively for the processing of the conversation.

 

  1. Legal basis

The legal basis for the processing of the data that is transmitted in the course of making contact is Art. 6 para. 1 lit. f GDPR. If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

 

  1. Purpose

The personal data that is entered into the form are processed exclusively to facilitate communication. If contact is established via e-mail, this also constitutes our legitimate interest.

  1. Duration

The data is deleted as soon as it is no longer required to fulfil the purpose of its collection, except where its storage is necessary under civil, commercial or tax law in accordance with Art. 6 para. 1 lit. c GDPR. With regard to personal data that was transmitted via the contact form, this is the case when the communication with the user has ended. The communication has ended when the circumstances make it clear that the relevant matter has been resolved.

The additional personal data collected during the submission process will be deleted within seven days.

 

  1. Possibility of appeal and elimination

The user can withdraw his/her consent to the processing of personal data at any time. When the user contacts us by email, he/she can object to the storage of his/her personal data at any time. In such a case, the conversation cannot be continued.

In this case all personal data that was stored in the course of making contact will be deleted.

 

  1. Download

 

  1. Description and scope of data processing

Commercial users can download company brochures at http://3w-international.com/3w-brochure/.

Company name

Name

First name

Email address

When this feature is used, the IP address and the time of the respective user activity are stored. Their storage is based on our legitimate interests as well as the user’s protection against misuse and other unauthorised use. This data is not passed on to third parties unless this is necessary to pursue our claims or there is a legal obligation in accordance with Art. 6 para. 1 lit. c GDPR. The IP addresses are anonymised or deleted after no more than 7 days.

 

  1. Legal basis

If the user has given consent, the legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR; if there is a legitimate interest, it is Art. 6 para. 1 lit. f GDPR.

If the registration serves to execute a contract whose contractual party is the user or to implement pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.

 

  1. Purpose of the data processing

The making available of company brochures.

 

  1. Duration of storage

The user data is deleted as soon as its storage is no longer required, except where its storage is necessary under civil, commercial or tax law in accordance with Art. 6 para. 1 lit. c GDPR.

 

  1. Option to object

As a user, you have the option to object to the storage at any time.

 

  1. Newsletter

 

  1. Description and scope of data processing

 

You have the option to sign up for a newsletter. We make a form available that allows you to sign up for our newsletter.

The form collects the following data:

Company name

Title/ Gender

Name, First name

Email address

in addition, the following data is collected when you sign up:

  • IP address
  • Date and time of registration

Once you have signed up, you will receive a confirmation email. The newsletter signing up processes are logged in order to be able to show that the signing up process complies with the legal requirements. This includes the storage of the time of registration and the time of confirmation as well as the IP address. Similarly, changes to the data stored with the service provider are also logged.

 

  1. Legal basis

The sending of the newsletter and the associated performance measurement is based on the consent of the recipients in accordance with Art. 6 para. 1 lit. a, Art. 7 GDPR in conjunction with section 7 para. 2 no. 3 UWG (law against unfair competition).

The logging of the registration process is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. Our interest focuses on the use of a user-friendly and secure newsletter system, which both serves our business interests and is in line with user expectations and also allows us to prove consent.

 

  1. Purpose

The newsletter serves to manage our image and the dissemination of up-to-date information about our company to interested users.

 

  1. Newsletter/ Direct advertising

 

If we have obtained your email address in connection with the sale of a product and service

and

if we use the email address to directly advertise similar goods or services

and

if you have not objected to the use of the email address

and if it was clearly and explicitly pointed out to you when you submitted the email address and in every newsletter that you can object to its use without you incurring transmission costs other than the basic rate, the legal basis for the sending is section 7 para. 3 UWG (law against unfair competition).

 

  1. Duration

When users have unsubscribed from the newsletter / news feed, the data is deleted, except where its storage is necessary under civil, commercial or tax law in accordance with Art. 6 para. 1 lit. c GDPR.

 

  1. Termination/Cancellation

You can terminate your subscription to the newsletter at any time, i.e. revoke your consent.

We may store the email address associated with the terminated newsletter for up to three years before deleting it on the basis of our legitimate interests, in order to be able to give proof of previously given consent. The processing of this data is limited to the possible defence against claims. An individual request for cancellation is possible at any time, provided that at the same time the existence of a previous consent is confirmed.

 

  1. Google Analytics

 

  1. Description and scope of data processing

This website uses Google Analytics, a web analysis service by Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyse how you use the website. In this context, pseudonymised user profiles are created and cookies are used. The cookie generates the following information about your use of this website

  • Browser type/version,
  • Operating system used,
  • Referrer URL (the page previously visited),
  • Host name of the accessing computer (IP address),
  • Time of server request,

The information generated by the cookie about your use of the website will usually be transmitted to and stored by Google on servers in the USA.

You can find more information about how Google Analytics handles user data in the data protection declaration of Google or in the Google Analytics help centre.

We use the “activation of the IP anonymisation” feature on this website. This means that your IP address will be stored by Google in shortened form within Member States of the European Union or in other states that are contracting parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to analyse your use of the website, compile reports on website activity and provide the website operator with other services related to website usage and internet activity. The IP address sent by your browser as part of Google Analytics will not be associated by Google with any other data.

 

 

 

  1. Legal basis

The legal basis for our legitimate interest in the needs-based design and improvement of the website is Art. 6 para. 1 lit. f GDPR.

 

  1. Purpose

We use Google Analytics, a web analysis service of Google Inc for the purpose of ongoing improvement and needs-based design of our web pages. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website and internet usage for the purposes of market research and the demand-oriented design of these internet pages. This information may be passed on to third parties insofar as the law requires this or if third parties process the data on another party’s behalf.

 

  1. Duration

The users’ personal data will be deleted after 14 months.

 

  1. Objection to data collection

You can prevent the installation of the cookies by selecting the appropriate settings in the browser; please note, however, that in this case it is possible that you will not be able to use all the features of our website.

You can additionally prevent the collection of data generated by the cookie and associated with your use of the website (including your IP address), its transmission to, and its processing by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de)

As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent data collection by Google Analytics by clicking on this link. This sets an opt-out cookie, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid for this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you have to set the opt-out cookie again.

IX. Business-related data processing

We process

  • contract data, e.g. subject of the contract, duration, customer category, name, address
  • payment information, e.g. bank details, payment history

of our customers, prospective customers and business partners for the purpose of contractual performance, service provision and customer care, marketing, advertising and market research.

X. Business analysis and market research

In order to operate our business economically, to identify market trends, and customer and user needs, we analyse the data that we have on business activity, contracts, inquiries etc. We process user-related data, communication data, contract data, payment data, user data, metadata on the basis of Art. 6 para. 1 lit. f GDPR.

The analyses are carried out for the purpose of business analysis, marketing and market research. We can take into account the profiles of registered users with information about their buying processes. The analyses help us improve user-friendliness and our offerings and increase business efficiency. The analyses are only used by us and are not disclosed to third parties, unless they are anonymous analyses with aggregated values.

If these analyses or profiles are person-specific, they will be deleted or made anonymous upon termination of the user, otherwise after three years from the conclusion of the contract. Apart from that, the general economic and trend analyses are, whenever possible, generated anonymously.

XI. Rights of data subjects

If your personal data is processed you are a data subject within the meaning of the GDPR. You have the following rights vis-à-vis the responsible entity:

 

1.       Right to information, Art. 15 GDPR

In accordance with Art. 15 GDPR, you can request a confirmation from the responsible entity about whether your personal data is processed by us.

If this is the case, you can request the following information from the responsible entity:

(1)            the purposes for which the personal data is processed;

(2)            the categories of personal data which is processed;

(3)            the recipients or categories of recipients to whom the relevant personal data was disclosed or will be disclosed;

(4)            the planned duration of storage of your personal data or, if no specific information can be provided, criteria for determining the duration of storage;

(5)            the existence of a right to correction or deletion of your personal data, a right to restricting its processing by the responsible entity or a right of objection against its processing;

(6)            the existence of a right to appeal to a supervisory authority;

(7)            all available information about the source of the data, if the personal data was not collected from the data subject;

(8)            the existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 GDPR and – at least in these cases – relevant information about the logic involved as well as the implications and the intended effects of such processing for the data subject.

 

You have the right to request information about whether your personal data is transmitted to a third country or an international organisation. In this context, you can request to be informed of the appropriate safeguards in accordance with Art. 46 GDPR relating to the transmission.

2.       Right to rectification, Art. 16 GDPR

In accordance with Art. 16 GDPR you have the right vis-à-vis the responsible entity to correction and/or completion if the personal data concerning you is incorrect or incomplete. The responsible entity must perform the correction immediately.

 

3.       Right to deletion (“right to be forgotten”) Art. 17 GDPR

a)       Deletion obligation

You can request that the responsible entity immediately deletes your personal data, and the responsible entity is obliged to immediately delete this data if one of the following reasons applies:

(1)            Your personal data is no longer necessary for the purposes for which they were collected or otherwise processed.

(2)            You revoke your consent which the processing in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR was based on, and there is no other legal basis for its processing.

(3)            You file an objection against its processing in accordance with Art. 21 para. 1 GDPR and there are no overriding legitimate reasons for its processing, or you file an objection against its processing in accordance with Art. 21 para. 2 GDPR.

(4)            Your personal data was processed unlawfully.

(5)            The deletion of your personal data is required to meet a legal obligation under EU law or the law of the Member States the responsible entity is subject to.

(6)                              Your personal data was collected in relation to the services offered by the information society in accordance with Art. 8 para. 1 GDPR.

b)       Information to third parties

Where the responsible entity has made the personal data public and is obliged in accordance with  Art. 17 para. 1 GDPR to delete the personal data, the responsible entity, taking into account available technology and the cost of implementation, will take reasonable steps, including technical steps, to inform responsible entities which are processing the personal data that the data subject has requested the deletion by such responsible entities of any links to, or copy or replication of, this personal data.

c)       Exceptions

The right to deletion does not apply if the processing is required

(1)            to exercise the right to freedom of expression and information;

(2)            to comply with a legal obligation which requires processing by EU or Member State law which the responsible entity is subject to or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the responsible entity;

(3)            for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 GDPR;

(4)            for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR in so far as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or

(5)            to assert, exercise or defend legal claims.

 

 

 

4.       Right to restriction of processing, Art. 18 GDPR

You may request the restriction of the processing of your personal data under the following conditions:

(1)            if you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the data;

(2)            the processing is unlawful and you oppose the deletion of the personal data and request the restriction of its use instead;

(3)            the responsible entity no longer needs the personal data for the purposes of the processing, but you need it to assert, exercise or defend legal claims, or

(4)            if you have objected to processing in accordance with Art. 21 para. 1 GDPR and it is not yet certain whether the legitimate grounds of the responsible entity override yours.

Where processing of your personal data has been restricted, this data, with the exception of storage, may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

If processing of data was restricted pursuant to the above points, you will be informed by the responsible entity before the restriction of processing is lifted.

 

5.       Duty of notification, Art. 19 GDPR

If you have asserted the right of correction, deletion or restriction of processing to the responsible entity, the responsible entity must communicate any correction or deletion of personal data or restriction of processing to each recipient to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort.

You have the right to request that the responsible entity informs you about those recipients.

6.       Right to data portability, Art. 20 GDPR

You have the right to receive your personal data, which you have provided to a responsible entity, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another responsible entity without hindrance from the responsible entity to which the personal data was provided, in so far as:

(1)            the processing is based on consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract in accordance with Art. 6 para. 1 lit. b GDPR and

(2)            the processing of data was carried out in automated form.

In exercising your right to data portability, you also have the right to have the personal data transmitted directly from one responsible entity to another, if this is technically feasible.  This must not impact the freedoms and rights of other persons.

The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the responsible entity.

7.       Right to object, Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, to the processing of your personal data at any time based on Art. 6 para. 1 lit. e or f GDPR; this includes profiling based on those provisions.

The responsible entity will no longer process your personal data unless the responsible entity shows that is has compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the assertion, exercise or defence of legal claims.

Where your personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes, which includes profiling in as far as this is related to such direct marketing.

Where you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.

In the context of the use of information society services – notwithstanding Directive 2002/58/EC – you may exercise your right to object by automated means using technical specifications.

8.       Right to revoke the declaration of consent regarding data protection, Art. 7 para. 3 GDPR

You have the right to revoke the declaration of consent regarding data protection at any time. The revocation of consent does not affect the lawfulness of processing based on consent before its revocation.

9.       Automated decision-making in individual cases, including profiling, Art. 22 GDPR

You have the right not to be subjected to a decision solely based on automated decision-making – including profiling – which affects you legally or has another similar significant impact. This does not apply if the decision

(1)            is necessary for entering into or performing a contract between you and a responsible entity,

(2)            is authorised by regulations of the Union or Member State law which the responsible entity is subject to and which also lay down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or

(3)            is based on your explicit consent.

 

The above decisions, however, are not based on special categories of personal data referred to in Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR apply and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

 

In the cases mentioned in sections (1) and (3), the responsible entity will implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain intervention by a person on the part of the responsible entity, to express your point of view and to contest the decision.

 

 

10.     Right to lodge a complaint with a supervisory authority, Art. 77 GDPR

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, place of work or place of the alleged violation if you believe that the processing of personal data relating to you violates the GDPR.

The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.

XII. Updating and making changes to this data protection declaration

This data protection declaration is currently valid and was last updated in May 2018.

Because of the development of our website and its offerings or because of changed legal or regulatory requirements, it may become necessary to change this data protection declaration. You can access the most recent version of the data protection declaration at any time on our website.

Contact us