We are pleased to welcome you to our
website at the address
https://www.integromed.de
(hereinafter: Website).
We hereby inform you in accordance with Artilce 13 and Article 14 of
the European General Data Protection Regulation (GDPR) about which personal
data is collected and processed as a result of your visit to the Website and
the use of the online services provided there. Below you will find information
on the following points:
I. Name and address of the controller
II. Name and address of the data protection officer
III. General information on data processing
IV. Provision of the Website and creation of log files
VI. Contact
Form and Email Contact
VII. Submission
of Applications
IX. Use of Script Libraries (Google Fonts)
X. Use of Google Ads (Conversion)
XII. Web Analysis with WP Statistics
XIII. Linking
to Social Media Portals
XV. Your Rights as a Data Subject
I.
Name and address of the
controller
The controller within the meaning of the GDPR
and other national data protection laws as well as other data protection
regulations is:
Integromed GmbH
Zimmerstraße 1, 04109 Leipzig
Tel.: +49 (0)341 222298 0, Email: info@integromed.de
II. Name and address of the data protection officer
You can reach
our data protection officer, Dr. Kirmse, at the following contact details:
KDSB Service GmbH,
Fregestraße 29, 04105 Leipzig
Tel.: +49 (0)341 221 710 69, Email: d.kirmse@kdsb.gmbh
III. General information on data processing
Personal data from you as a visitor to our Website is
generally only collected to the extent necessary to provide a correct view of
our Website or to use the content and services offered there. Processing
generally only occurs if you have previously given us your consent or if legal
regulations permit us to process the data.
Your personal data will be deleted as soon as the
purpose for which we stored it no longer applies. An exception applies only if
we are required by a legal regulation to store it for a longer period or if you
have given us consent for a longer use of your personal data.
IV.
Provision of the
Website and creation of log files
1.
Description
and scope of data processing
Each time our Website is accessed, we or our hosting
provider automatically collect data about the access to the server on which our
Website is stored. The following data is collected::
(1) Name of the retrieved file,
(2) Date and time of access,
(3) Access status (file transferred/file not found),
(4) Amount of data transferred,
(5) Information about the type and version of your
system’s browser,
(6) Information about your system’s operating system,
(7) IP address of the internet connection used by your
system, and
(8) Website from which your system accessed our Website
(referrer URL).
This data is also partially stored automatically in
log files (so-called log files) of our system. The IP address is not stored.
The data is not stored together with other personal data from you. Therefore,
the creation of personal user profiles is not possible.
2. Purpose of data processing, legal basis
The storage of your IP address by our
system during your stay on the Website is necessary to enable the delivery of
our Website to the computer system you are using. For this purpose, your IP
address must remain stored for the duration of the session.
The storage in log files is carried out to
ensure the functionality of the Website. In addition, the data is used to
optimize the Website and to ensure the security of our information technology
systems (e.g., to investigate misuse or fraud).
The legal basis for the temporary storage is Art. 6 (1) (f) GDPR. Our legitimate interest in data processing lies in being able to provide
a functional Website and ensure the security of our systems.
3.
Duration of Storage
Logfile information is stored for a maximum of 10 days.
After the 10 days have
expired, the log files are deleted. Data that needs to be retained for
evidentiary purposes is exempt from deletion until the respective incident is
fully clarified.
4. Right to Object and Removal Options
The collection of data for the provision of the
Website and the storage of data in log files and protocol files is essential
for the secure operation of our Website. Therefore, you do not have the right
to object.
V. Use of Cookies
1.
Description and Scope of Data
Processing
If data is stored only for the duration of
your visit or your browser session, it is referred to as temporary cookies
(also known as session cookies or transient cookies). For example, a shopping
cart from an online shop or the login status for a closed user area can be
stored in such a cookie. Temporary cookies are deleted when you leave the
visited website and close your browser. In contrast, permanent cookies (also
referred to as persistent cookies) remain stored on your system even after
closing the browser. The stored data remains available for new browser sessions
at a later time. Such cookies can be used for marketing purposes, for example,
to capture specific interests and individual usage behavior and to display
tailored advertising. Third-party cookies are those that originate from third
parties, as opposed to first-party cookies, which come from the website
operator.
We use both our own cookies and
third-party cookies on our Website. The cookies we use store the settings and
confirmation you made regarding our cookie banner.
2.
Purpose
of Data Processing, Legal Basis
The cookies we use serve to ensure the lawful and
comfortable use of the Website and its functionalities. Your confirmation of
our cookie banner is stored so that the banner does not reappear with every
subsequent page view.
Overall, we pursue our legitimate interest in storing
cookies to provide you with the best possible functionality of the Website and
a customer-friendly and effective design of your visit to the site. The legal
basis in this respect is Art. 6 (1) (f) GDPR. The user data collected by our cookies
is not used to create personal user profiles.
The purpose and legal basis for the use of third-party
cookies on our Website are explicitly explained under the respective function
section.
3. Duration
of Storage
Temporary cookies are only temporarily
stored on your system and are deleted as soon as you close your browser.
Permanent cookies remain on your system even after the end of a browser session
until they are deleted. Since cookies are generally stored on your system and
the information stored in them is transmitted from there to our site, you also
have full control over the use of cookies.
4.
Right
to Object and Removal Options
Since cookies are stored on your computer for the
browser you are using, you as a user can also actively influence the data
processing. You can restrict or completely prevent the use of cookies at any
time with effect for the future. If you generally do not want cookies to be
stored on your computer, please disable the corresponding option in your
browser’s system settings. You can delete already stored cookies there at any
time.
If you only want to change the cookie settings for our
Website or revoke your consent with effect for the future, you can
access the
cookie settings HERE
[INSERT LINK TO THE SETTINGS OPTIONS OF THE CONSENT TOOL HERE]
and change your selection there. Please note that not
all functions of our Website may be fully usable if you generally prevent the
storage of cookies on your system.
For more information about cookies and
usage-based online marketing, you can visit the EU site www.youronlinechoices.com. There, you can also completely object to
the use of cookies for the purposes of usage-based online marketing or for
individual providers.
VI. Contact Form and
Email Contact
1.
Description
and Scope of Data Processing
Our Website includes contact forms for
electronic communication. Additionally, there is the option to contact us via
the provided email addresses.
Contact Forms
If you use the contact form to get in touch, the data
you enter and any attached documents will be transmitted to us and stored. The
transmission occurs over an encrypted connection. When the message is sent, the
IP address of the internet connection you are using, as well as the date and
time of sending, will also be stored.
The data you provide in connection with your inquiry
will be used to the necessary extent to process your request. There will be no
disclosure to third parties.
Email Contakt
Alternatively, you can contact us via the email addresses we provide for
this purpose. If you use this option, we will also store the personal data you
send with the email and use it to process your request. There will be no
disclosure of your data to third parties in connection with the contact.
2.
Purpose
of Data Processing, Legal Basis
The purpose of processing personal data from inquiries
via our contact forms or by email is solely to address the matter underlying
your contact.
The legal basis for processing the
transmitted data is Art. 6 (1) (f) GDPR. Our legitimate interest in processing lies in being
able to address your concerns. If your contact aims at the conclusion of a
contract, then Art. 6 (1) (b) GDPR serves as the legal basis for processing.
3.
Duration of the Storage
The data transmitted to us will be deleted as soon as
they are no longer necessary for the purpose for which they were collected. For
data transmitted via contact form or email, this generally applies when the
matter in question has been conclusively clarified.
4.
Right
to Object and Removal Options
You have the right to request the deletion of the
personal data transmitted to us in connection with an inquiry at any time. In
this case, all affected data will be deleted, provided they are not required
for the fulfillment of a contract or for the implementation of pre-contractual
measures, and as long as contractual or legal obligations do not prevent
deletion.
VII. Submission of Applications
1.
Description
and Scope of Data Processing
Our Website also provides the option to apply for a
job with us. For this purpose, email addresses are provided on the Website that
you can use for electronic communication. If you take advantage of this option,
we will use the contact details you provide and any other attached data and
documents, such as cover letters and other application materials, to the
necessary extent to process your application. There will be no disclosure to
third parties.
2.
Purpose
of Data Processing, Legal Basis
The purpose of processing and possibly
disclosing the data transmitted to us via the application form is to process
your application and to consider and contact you as a potential candidate for a
job in our company. The other data processed during the submission process
serves to prevent misuse of the application form and to ensure the security of
our information technology systems.
The legal basis for processing the applicant data and application
documents you provide is Art. 6 (1) (b) GDPR. There will be no transfer of your personal data to
entities outside the EU or the EEA .
3. Duration
of Storage
Your data will be stored as long as it is
necessary to achieve the purpose for which it was collected. For data you
provide in connection with an application, this will be the case until your
application has been conclusively processed or has otherwise been resolved. We
will delete the data no later than 6 months after the conclusion of the
application process
4.
Right
to Object and Removal Options
You have the right to request the deletion
of the personal data transmitted to us in connection with an application at any
time. In this case, all affected data will be deleted unless it is still
required for the fulfillment of a contract with you. After the complete
fulfillment of all contracts, we will only process your data to the extent
necessary to comply with our legal obligations, such as tax and commercial
retention periods. For any further processing, your data will be blocked and
deleted after the expiration of these retention periods, unless you have
expressly consented to further use or further data use is legally permitted for
other reasons.
VIII.
Newsletter
1.
Description
and Scope of Data Processing
On the Website, we offer you the opportunity to
subscribe to a newsletter free of charge. If you take advantage of this option,
the email address you enter in the input field will be transmitted to us.
Additionally, the following data will be collected upon submission of the
registration:
(1) the IP address of the internet connection used by
your system
(2) date and time of registration
After registration, we will send a message to the
provided email address requesting confirmation of the newsletter subscription.
This is to prevent newsletter subscriptions using foreign email addresses. If
you confirm the subscription using the designated link, we will store and log
the time of confirmation. After complete registration, we will send you the
subscribed newsletters. Your data will not be disclosed to third parties in
connection with the registration for our newsletters.
2.
Purpose
of Data Processing, Legal Basis
The collection of your email address in connection
with the order of our newsletter serves to enable us to deliver the newsletter
to you. The legal basis for processing the data after subscribing to the
newsletter is your consent under Art. 6 (1) (a) GDPR. The logging of your
newsletter registration and the confirmation of the email address serves the
purpose of conducting a registration process in accordance with legal
requirements. The legal basis for this is Art. 6 (1) (f) GDPR. Our legitimate
interest lies in being able to demonstrate lawful registration.
3. Duration
of Storage
Your data will be deleted as soon as it is
no longer necessary to achieve the purpose for which it was collected.
Therefore, it will be stored as long as the newsletter subscription is active.
4.
Right
to Object and Removal Options
You can cancel your newsletter
subscription at any time. For this purpose, there is a corresponding link in
every newsletter.
IX. Use of Script
Libraries (Google Fonts)
To correctly and
visually appealingly display the content of our Website across different
browsers, we use Google Fonts, a script or font library from Google LLC, 1600
Amphitheatre Parkway, Mountain View, CA 94043 USA (Google). The provider of
Google services in the territory of the European Union and Switzerland is
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
(Google). For more information about Google Fonts, please visit https://fonts.google.com/.
The Google Fonts
are installed locally on our web space. No connection to Google servers takes
place.
X. Use of Google Ads
(Conversion)
1.
Description
and Scope of Data Processing
To draw the attention of interested
customers to our offerings through advertising placements (so-called Google
Ads) on external websites and to measure the success of this advertising, we
use the conversion function of Google Ads. Google Ads is an internet
advertising service that allows advertisers to display interest-relevant ads both
in Google search results and in the Google advertising network and to evaluate
their success.
The operator of Google Ads is Google Inc.,
1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The provider of Google
services in the territory of the European Union and Switzerland is Google
Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google).
To ensure data protection on the Website,
Google Ads is disabled when you first visit our Website. If you consent to the
use of marketing features, Google Ads will be activated. The conversion
function then stores a cookie with a randomly generated user ID on your system
when you reach our Website by clicking on one of our ads on a Google
advertising network website. Various other information is stored in this
cookie, which allows conclusions to be drawn about which ad was clicked, so
that successes such as orders or contact inquiries can be attributed to that
ad.
We do not collect or process any personal
data in connection with advertising measures through Google Ads. We only
receive statistical evaluations from Google, which allow us to see which of the
advertising measures used are particularly effective. We do not receive further
data from the use of the advertising media, and in particular, we cannot
identify the visitors to our Website based on this information.
To transmit the data stored in the
cookies, your browser automatically establishes a direct connection to Google’s
servers. We have no influence on the scope and further use of the data collected
by Google through the use of this tool and therefore inform you according to
our current knowledge: By integrating Ads Conversion, Google receives the
information that you have accessed the corresponding part of our online
presence or clicked on one of our ads. If you are registered with a Google
service, Google can assign the visit to your account. Even if you are not
registered with Google or have not logged in, there is a possibility that the
provider will learn and store your IP address.
We cannot exclude the possibility that Google uses
servers outside the territory of the European Union, particularly in the USA,
to provide the Google Ads functionality. However, through certification under
the EU-US Privacy Shield Framework, Google assures that it will comply with the EU data
protection requirements even when processing data in the USA.
2.
Purpose
of Data Processing, Legal Basis
The purpose of using Google Ads is to
promote our Website and our services by displaying interest-relevant
advertising on third-party websites and in the search results of the Google
search engine, as well as to evaluate the success of these measures.
The legal basis for processing is Article 6 (1)(a)
GDPR..
3. Duration
of Storage
The cookies set in connection with the use
of Google Ads Conversion on our Website have a storage duration of up to 180
days.
4.
Right
to Object and Removal Options
If you do not agree with this processing
of your data by Google, you have the option to prevent the installation of
cookies by making the appropriate settings in your internet browser. Details on
this can be found above under the section „Cookies“ (Section V). Additionally,
you can
access
the corresponding settings of our consent tools HERE
[INSERT LINK TO THE SETTING OPTIONS OF
THE CONSENT-TOOL]
and change your consent to
the use of marketing cookies there. You can also generally object to
interest-based advertising by Google. To do this, you need to visit https://adssettings.google.de from each of the internet
browsers you use and make the desired settings there. Alternatively, you have
the option to disable the use of cookies for interest-based advertising through
the Network Advertising Initiative by following the instructions at http://optout.networkadvertising.org/?c=1. Further information and
the applicable data protection regulations from Google can be accessed at https://www.google.de/intl/de/policies/privacy/.
XI. Use of Google Maps
To visually represent
geographical information, we use the Google Maps API on our Website. The API
(Application Programming Interface) is an interface that allows us to integrate
map material from Google Maps into our Website. The provider of Google Maps is
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. The
provider of Google services in the territory of the European Union and
Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,
Ireland (Google).
To ensure data protection on
the Website, Google Maps is disabled when you first visit the Website. If you
consent to the use of Google Maps and its cookies, the service will be
activated to ensure the correct display of Google Maps on our Website. When you
access the subpage with the Google Maps functionality, Google subsequently
stores a cookie on your system via your internet browser and establishes a
connection to a Google server.
By connecting to a Google
server, Google can recognize that your request has been sent from our Website.
Additionally, Google recognizes that the geographical information is
transmitted to the IP address associated with the internet connection you are
using. The legal basis for using Google Maps is Art. 6 (1) (a) GDPR.
We cannot exclude the
possibility that Google uses servers outside the territory of the European
Union, particularly in the USA, to provide the Google Maps functionality.
However, Google assures that it will comply with the EU data protection
requirements even when processing data in this manner. The use of Google Maps
and the processing of data collected by Google in this context is based on
Google’s Terms of Service (https://policies.google.com/terms?gl=DE&hl=de) and the Terms of Service
for Google Maps (https://www.google.com/intl/de_de/help/terms_maps.html). Additional information
from Google can be found at https://adssettings.google.de/ or https://policies.google.com/privacy.
If you do not agree with this processing of your data by Google, you have the
option to prevent the installation of cookies by making the appropriate
settings in your internet browser. Details on this can be found above under the
section „Cookies“ (Section V).
XII. Web Analysis with WP
Statistics
1.
Description
and Scope of Data Processing
We use functions of WP Statistics on our Website. WP
Statistics is a web analytics plugin developed by Veronalabs from Estonia
(Tornimäe 5, 10145 Tallinn, Estonia). Web analytics refers to the collection,
storage, and evaluation of data about the browsing behavior of visitors to
websites. Various data about the visitor is collected during a visit to a
website.
WP Statistics does not use cookies for
data collection. Statistics about the use of our Website are generated by WP
Statistics only in anonymized form. Even the IP address of your internet
connection is stored only in an anonymized manner. Therefore, you cannot be
identified based on the data.
Specifically, WP Statistics collects and
stores the following data when you access our Website and your device’s web
browser connects to our web server:
(1) the URL of the page accessed on our
Website,
(2) date and time of access,
(3) country/city or region from which the access occurs,
(4) the browser you are using and its version,
(5) the operating system you are using,
(6) the website from which you accessed our Website (referrer URL),
(7) the hostname and (anonymized) IP address of the accessing device,
(8) the search engine through which our Website was found,
(9) your duration of stay on the Website, and
(10) clicks on the Website.
The data is not shared with third parties and is not
sold, in particular.
2.
Purpose
of Data Processing, Legal Basis
The processing allows us to
analyze the browsing behavior of visitors to our Website. By evaluating the
data obtained, we can compile information about the use of the individual
components of our Website. This helps us to continuously improve our online
offerings and their user-friendliness. Additionally, the use of WP Statistics
serves to measure reach and conduct market research.
The processing only occurs if you provide us with your consent. We obtain this
consent through our cookie consent tool, which displays a banner when you first
visit our Website and requests your consent. The legal basis for processing
based on your consent is Art. 6 (1) (a) GDPR.
3.
Duration of Storage
The data collected by us in
connection with the use of WP Statistics will be stored on our web server as
long as they are needed for the purposes mentioned above.
4.
Right
to Object and Removal Options
You can withdraw your
consent to the collection and storage of personal data in connection with the
use of WP Statistics at any time. To do this, you can
access the
corresponding settings of our consent tools HERE
[INSERT LINK TO THE SETTINGS OPTIONS OF
THE CONSENT TOOL HERE]
and change your selection
there.
XIII.Linking to Social Media Portals
We maintain online presences
on social media portals such as LinkedIn, Facebook, Instagram, and YouTube. We
use these platforms to connect with customers and interested parties who are
active on these platforms and to inform them about our offerings. Our website
contains buttons that link to these presences.
If you use one of the
buttons, you will be redirected to our presence on the respective portal. If
you contact us there, we will process the data you provide accordingly. Please
note in this context that the terms of use and data processing rules of the
respective operator apply to the processing of your data within the social
media portals, and we therefore have only limited influence over how personal
data you provide to us through these platforms is processed.
Further information about
the collection and use of data, as well as your rights and protection options
in this regard, is provided by the portal operators in their privacy notices.
XIV.
YouTube-Videos
Our website includes videos
that have been published on YouTube (hereinafter: YouTube videos). YouTube is
an internet video portal that allows for the free publication of video clips as
well as their free viewing, rating, and commenting.
The operating company of
YouTube is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC
is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA
94043-1351, USA. You can find more information about YouTube at https://www.youtube.com/yt/about/de/.
When you access a YouTube
video that is integrated on a subpage of our website, the internet browser you
are using is prompted to download and display this video from YouTube. As part
of this process, YouTube and Google also become aware that this video is being
accessed via the IP address of your internet connection on the subpage of our
website. If you are logged into a user account with YouTube and/or Google,
YouTube and/or Google can also register your visit to the affected subpage
without you accessing the video. In this case, YouTube and/or Google can also
assign your activities on our websites to your person or the account you are
using. This information is likely collected and further evaluated by YouTube and/or
Google. You can prevent this association and evaluation by logging out of your
YouTube account before accessing one of our websites.
Further information about the collection, processing, and use of personal data
by YouTube and Google can be found in YouTube’s privacy policy, which is
available at https://www.google.de/intl/de/policies/privacy/.
XV. Your Rights as a Data
Subject
1.
Right
to Access, Art. 15 GDPR
You can request information
from us at any time about whether personal data concerning you is being
processed by us. If such processing occurs, you have the right to further
information about:
(1) the purposes for which the
personal data is processed;
(2) the categories of personal
data that are processed;
(3) the recipients or categories
of recipients to whom we have disclosed or will disclose the personal data
concerning you;
(4) the planned duration of
storage of the personal data concerning you or, if specific details are not
possible, the criteria for determining the storage duration;
(5) the existence of a right to
rectification or erasure of the personal data concerning you, a right to
restriction of processing by us, or a right to object to this processing;
(6) the existence of a right to
lodge a complaint with a supervisory authority;
(7) all available information
about the source of the data if we did not collect the personal data from you;
(8) the existence of automated
decision-making, including profiling, according to Art. 22 (1) and (4) GDPR, and – at least in these
cases – meaningful information about the logic involved, as well as the
significance and the intended effects of such processing for the data subject.
You have the right to
request information about whether the personal data concerning you is
transferred to a third country or to an international organization. In this
context, you can request to be informed about the appropriate safeguards
according to Art. 46 GDPR in connection with the
transfer.
2.
Right
to Rectification, Art 16 GDPR
You have the right to
request rectification and/or completion from us if the personal data concerning
you is inaccurate or incomplete. If you exercise this right, we will make the
rectification without delay.
3.
Right
to Restriction of Processing,
Art. 18 GDPR
You can request
the restriction of processing of personal data concerning you if:
(1) you contest the accuracy of
the personal data concerning you for a period that allows us to verify the
accuracy of the data;
(2)
the processing
is unlawful, and you oppose the erasure of the personal data and instead
request the restriction of its use;
(3) we no longer need the personal data for the purposes
of processing, but you need it for the establishment, exercise, or defense of legal claims; or
(4) you have objected to the
processing according to Art. 21 Abs. 1 GDPRand it is not yet clear
whether our legitimate grounds override your grounds.
If we have restricted the
processing of personal data concerning you at your request, these data – apart
from their storage – may only be processed with your consent or for the
establishment, exercise, or defense of legal claims or to protect the rights of
another natural or legal person or for reasons of important public interest of
the Union or a Member State.
If you have enforced the
restriction of processing under the aforementioned conditions, we will inform
you before we lift the restriction.
4.
Right
to Erasure, Art. 17 DSGVO,
You can request that the
personal data concerning you be erased without delay. We are obliged to erase
this data without delay if:
(1)
the data is no
longer necessary for the purposes for which it was collected or otherwise
processed;
(2)
you withdraw
your consent on which the processing is based according to Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR, and there is
no other legal basis for the processing;
(3)
you object to
the processing according to Art. 21 (1) GDPR and there are
no overriding legitimate grounds for the processing;
(4)
you object to
the processing according to Art. 21 (2) GDPR;
(5)
the personal
data concerning you has been unlawfully processed;
(6)
the erasure of
the personal data concerning you is necessary for compliance with a legal
obligation under Union law or the law of the Member States to which we are
subject; or
(7)
the personal
data concerning you has been collected in relation to the offered services of
the information society according to Art. 8 (1) GDPR.
If we have made the personal
data concerning you public and are obliged to erase it according to Art. 17 (1) GDPR we will take reasonable steps, taking into account
available technology and implementation costs, to inform other data controllers
processing the personal data that you, as the data subject, have requested the
deletion of all links to this personal data or copies or replicas of this
personal data.
The right to erasure does not exist insofar as the
processing is necessary
(1) for the exercise of the
right to freedom of expression and information;
(2) for compliance with a legal
obligation that requires processing under Union law or the law of the Member
States to which we are subject, or for the performance of a task carried out in
the public interest or in the exercise of official authority vested in us;
(3) for reasons of public
interest in the area of public health according to Art. 9 (2) lit. h and i as well as Art. 9 (3) GDPR;
(4) for archiving purposes in
the public interest, scientific or historical research purposes, or for
statistical purposes according to Art. 89 (1) GDPR, insofar as the right
mentioned in section (a) is likely to make it impossible or seriously impair
the achievement of the objectives of that processing; or
(5) for the establishment,
exercise, or defense of legal claims.
5.
Right
to Notification, Art. 19 GDPR
If you have asserted the
right to rectification, erasure, or restriction of processing against us, we
are obliged to inform all recipients to whom we have disclosed the personal
data concerning you of this rectification or erasure of the data or restriction
of processing, unless this proves impossible or involves a disproportionate
effort. You have the right to be informed by us about these recipients.
6.
Right
to Data Portability, Art. 20 GDPR
You have the right to
receive the personal data concerning you that you have provided to us in a
structured, commonly used, and machine-readable format. You also have the right
to transmit this data to another controller without hindrance from us, provided
that:
(1)
the processing
is based on consent according to. Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR or on a contract according to Art. 6 (1) lit. b GDPR, and
(2)
the processing
is carried out by automated means.
In exercising this right,
you also have the right to have the personal data concerning you transmitted
directly by us to another controller, where technically feasible. The freedoms
and rights of others must not be adversely affected by this.
The right to data
portability does not apply to the processing of personal data that is necessary
for the performance of a task carried out in the public interest or in the
exercise of official authority vested in us.
7.
Right
to Object, Art. 21 GDPR
You have the right to object
at any time, on grounds relating to your particular situation, to the
processing of personal data concerning you, which is based on Art. 6 (1) lit. e or f GDPR. This also
applies to profiling based on these provisions.
We will no longer process
the personal data concerning you unless we can demonstrate compelling
legitimate grounds for the processing that override your interests, rights, and
freedoms, or the processing is necessary for the establishment, exercise, or
defense of legal claims.
If the personal data
concerning you is processed for the purpose of direct marketing, you have the right
to object at any time to the processing of personal data concerning you for the
purposes of such marketing; this also applies to profiling to the extent that
it is related to such direct marketing.
If you object to the
processing for the purposes of direct marketing, the personal data concerning
you will no longer be processed for these purposes.
You have the option to
exercise your right to object in connection with the use of services of the
information society – notwithstanding Directive 2002/58/EC – by automated means
using technical specifications.
8.
Right
to Withdraw Consent, Art. 7 (3) GDPR
If we process personal data
about you based on your consent, you have the right to withdraw your consent at
any time. The withdrawal of consent does not affect the lawfulness of
processing based on consent before its withdrawal.
9.
Right
to Lodge a Complaint with a Supervisory Authority, Art. 77 GDPR
Without prejudice to any
other administrative or judicial remedy, you have the right to lodge a
complaint with a supervisory authority, in particular in the Member State of
your residence, your workplace, or the place of the alleged infringement, if
you believe that the processing of personal data concerning you violates the
GDPR.
When you lodge a complaint,
the supervisory authority will inform you about the status and the results of
the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.