Data protection

Data protection declaration according to the GDPR This data protection declaration informs you about the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our website.

Name and address of the person responsible

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is: TSE AG Technology and service for Events AG Bergiusstrasse 52 12057 Berlin T +49 (0)30 390610 Email: INFO@TSE-AG.COM Name and address of the data protection officer The data protection officer of the person responsible is: Bulent Ergun Bergiusstraße 52, 12057 Berlin Germany Tel.: 030 390610 E-Mail: Datenschutz@tse-ag.com General information on data processing

Scope of processing of personal data

In principle, we only process personal data of our users to the extent that this is necessary to provide a functional website and our content and services. The processing of our users’ personal data regularly only takes place with the user’s consent. An exception applies in cases in which obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations. Legal basis for processing personal data If we obtain the consent of the data subject for processing personal data, Article 6 Paragraph 1 Letter a of the EU General Data Protection Regulation (GDPR) serves as the legal basis. When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 Paragraph 1 Letter c GDPR serves as the legal basis. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis. If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Para. 1 lit. f GDPR serves as the legal basis for the processing. Data deletion and storage period The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data to conclude or fulfill a contract.

Collaboration with processors and third parties

If, as part of our processing, we disclose data to other people and companies (processors or third parties), transfer it to them or otherwise grant them access to the data, this will only be done on the basis of a legal permission, you have consented, a legal obligation provides for this or based on our legitimate interests (e.g. when using agents, web hosts, etc.). If we commission third parties to process data on the basis of a so-called “order processing contract”, this is done on the basis of Art. 28 GDPR.

Hosting

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services, which we use for the purpose of operating this online offering. In doing so, we, or our hosting provider, process inventory data, contact data, content data, usage data, meta and communication data from interested parties and visitors to this website based on our legitimate interests in the efficient and secure provision of this website in accordance with Art. 6 Para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of order processing contract).

Business-related processing

Additionally we process – Contract data (e.g., subject matter of the contract, term, customer category). – Payment data (e.g., bank details, payment history) from our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research. Such data will be deleted after statutory warranty and comparable obligations have expired; the necessity of storing the data will be checked every three years. In the case of statutory archiving obligations, deletion occurs after their expiry (end of commercial law (6 years) and tax law (10 years) retention obligations); Information in the customer account remains until it is deleted. Provision of the website and creation of log files

Description and scope of data processing

Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

Information about the browser type and version used
The user’s operating system
The user’s Internet service provider
The user’s IP address
Date and time of access
Websites from which the user’s system accesses our website
Websites that are accessed by the user’s system via our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. Legal basis for data processing The legal basis for the temporary storage of data and log files is Article 6 (1) (f) GDPR. Purpose of data processing The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. To do this, the user’s IP address must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. The data also serves us to optimize the website and to ensure the security of our information technology systems. The data will not be evaluated for marketing purposes in this context. These purposes also include our legitimate interest in data processing in accordance with Article 6 Paragraph 1 Letter f of the GDPR. Duration of storage The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the data is collected to provide the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the users’ IP addresses are deleted or altered so that it is no longer possible to assign the calling client. Possibility of objection and removal The collection of data to provide the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility for the user to object. Use of cookies

a) Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie can be stored on the user’s operating system. These cookies contain a characteristic string that allows the browser to be uniquely identified when the website is accessed again. We use cookies on our website that enable analysis of users’ surfing behavior. The following data can be transmitted in this way:

Entered search terms
Frequency of page views
Use of website functions

The user data collected in this way is pseudonymized using technical precautions. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the users. When accessing our website, users are informed by an information banner about the use of cookies for analysis purposes and are referred to this data protection declaration. In this context, there is also a note on how the storage of cookies can be prevented in the browser settings.

b) Legal basis for data processing

The legal basis for the processing of personal data using cookies is Article 6 (1) (f) GDPR.

c) Purpose of data processing

The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies we learn how the website is used and can therefore continually optimize our offering. For these purposes, our legitimate interest lies in the processing of personal data in accordance with Article 6 Paragraph 1 Letter f of the GDPR.

e) Duration of storage, possibility of objection and removal

Cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website. Newsletter

Description and scope of data processing

1.1 It is possible to subscribe to a free newsletter on our website. When you register for the newsletter, the following data is sent to us from the input mask:

E-Mail-Address

Your consent will be obtained for the processing of data as part of the registration process and reference will be made to this data protection declaration. Registration for our newsletter takes place in a so-called double opt-in process. This means that after registering you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can log in with someone else’s email address. Registrations for the newsletter are logged in order to be able to provide evidence of the registration process in accordance with legal requirements. This includes storing the registration and confirmation times as well as the IP address. Changes to your data stored by the shipping service provider are also logged. In connection with data processing for sending newsletters, the data will not be passed on to third parties. The data is used exclusively for sending the newsletter. Legal basis for data processing The legal basis for the processing of data after the user has registered for the newsletter is Art. 6 Para. 1 lit. a GDPR if the user has given his consent. Purpose of data processing The purpose of collecting the user’s email address is to deliver the newsletter. Duration of storage The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user’s email address is therefore stored as long as the subscription to the newsletter is active. Possibility of objection and removal The subscription to the newsletter can be canceled by the affected user at any time. For this purpose, there is a corresponding link in every newsletter. E-Mail-Contact

Description and scope of data processing

You can contact us using the email address provided. In this case, the user’s personal data transmitted with the email will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation. Legal basis for data processing The legal basis for the processing of data transmitted in the course of sending an email is Article 6 (1) (f) GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Letter b GDPR. Purpose of data processing We process the personal data from the email solely to process the contact. This also includes the necessary legitimate interest in processing the data. Duration of storage The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation ends when it can be seen from the circumstances that the matter in question has been finally clarified. Possibility of objection and removal The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by email at INFO@TSE-AG.COM, they can object to the storage of their personal data at any time. In such a case, the conversation cannot continue. In this case, all personal data that was stored in the course of contacting you will be deleted. Contact form If you have any questions, we offer you the opportunity to contact us using a form provided on the website. The following personal data must be provided – Name, -Telephone, – Email, so that we know who the request came from and so that we can answer it. Data processing for the purpose of contacting us is carried out in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. The personal data we collect when using the contact form will be automatically deleted after the request you have submitted has been processed. Data security When visiting our website, we use the common SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. This is usually 256 bit encryption. If your browser doesn’t have one While 256-bit encryption is supported, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the bottom status bar of your browser. We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. Google Analytics

Scope of processing of personal data

On our website, we use Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, (“Google”) to analyze the surfing behavior of our users. Google uses cookies. The information generated by the cookie about users’ use of this website is usually transmitted to a Google server in the USA and stored there. Google is certified under the Privacy Shield Agreement and thereby offers a guarantee that it will comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering and to provide us with other services related to the use of this online offering and internet usage. Pseudonymous user profiles can be created from the processed data. The processing of users’ personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continually improve our website and its user-friendliness. These purposes also include our legitimate interest in processing the data in accordance with Article 6 Paragraph 1 Letter f of the GDPR. By anonymizing the IP address, the user’s interest in protecting personal data is sufficiently taken into account. We use Google Analytics to show the advertisements placed within the advertising services of Google and its partners only to those users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products) based on the information they visit websites) that we transmit to Google (so-called “remarketing” or “Google Analytics audiences”). With the help of remarketing audiences, we also want to ensure that our ads match the potential interest of users and do not appear annoying. We only use Google Analytics with IP anonymization activated. This means that the user’s IP address is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user’s browser is not merged with other Google data.

Legal basis for processing personal data

Scope and purpose of processing personal data

On our website, we use the marketing and remarketing services (“Google Marketing Services” for short) from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, ( “Google”). Google Analytics, a web analysis service provided by Google LLC (“Google”). Google is certified under the Privacy Shield Agreement and thereby offers a guarantee that it will comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). The Google marketing services allow us to display advertisements for and on our website in a more targeted manner in order to only show users advertisements that potentially match their interests. For example, if a user is shown ads for products that they were interested in on other websites, this is referred to as “remarketing”. For these purposes, when you visit our and other websites on which Google marketing services are active, Google directly executes a code from Google and so-called (re)marketing tags (invisible graphics or code, also known as “Web Beacons”) are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user’s device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which websites the user has visited, what content they are interested in and which offers they have clicked on, as well as technical information about the browser and operating system, referring websites, visiting time and other information about the use of the online offer. The user’s IP address is also recorded, although we inform Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states to the Agreement on the European Economic Area and only in exceptional cases Transferred to servers by Google in the USA and shortened there. The IP address is not merged with the user’s data within other Google offerings. Google may also combine the information mentioned above with such information from other sources. When the user then visits other websites, ads tailored to their interests can be shown to them. User data is processed pseudonymously as part of Google marketing services. This means that Google does not store and process the user’s name or email address, for example, but rather processes the relevant cookie-related data within pseudonymous user profiles. This means that from Google’s perspective, the advertisements are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who the cookie holder is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google’s servers in the USA. The Google marketing services we use include the online advertising program “Google AdWords”. In the case of Google AdWords, each AdWords customer receives a different “conversion cookie”. Cookies cannot therefore be tracked via the websites of AdWords customers. The information collected using the cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users. We can integrate third-party advertisements based on the Google marketing service “DoubleClick”. DoubleClick uses cookies that enable Google and its partner websites to serve ads based on users’ visits to this website or other websites on the Internet. We can integrate third-party advertisements based on the Google marketing service “AdSense”. AdSense uses cookies to enable Google and its partner websites to serve ads based on users’ visits to this website or other websites on the Internet. We can also use the “Google Optimizer” service. Google Optimizer allows us to use so-called “A/B testing” to understand the impact of various changes to a website (e.g. changes to input fields, design, etc.). Cookies are stored on users’ devices for these testing purposes. Only pseudonymous user data is processed. We can also use the “Google Tag Manager” to integrate and manage Google analysis and marketing services into our website.

Legal basis for processing personal data

Scope and purpose of processing personal data

Adobe Analytics (Omniture) This website also uses Adobe Analytics, a web analysis service from Adobe Systems Software Ireland Limited (“Adobe”). Adobe Analytics uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. If the information generated by the cookies about the use of the website is transmitted to an Adobe server, the settings ensure that the IP address is anonymized before geolocation and replaced by a generic IP address before storage. On our behalf, Adobe will use this information to evaluate the use of the website by users, to compile reports on website activity and to provide other services related to website activity and internet usage. These purposes also include our legitimate interest in processing the data in accordance with Article 6 Paragraph 1 Letter f of the GDPR. By anonymizing the IP address, the user’s interest in protecting personal data is sufficiently taken into account. The IP address transmitted by your browser as part of Adobe Analytics is not merged with other Adobe data.

Legal basis for processing personal data

The legal basis for the processing of users’ personal data is Article 6 (1) (f) GDPR.

Duration of storage

The data will be deleted as soon as it is no longer required for our recording purposes. In our case this is the case after 30 days.

Possibility of objection and removal

You can prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to fully use all of the functions of this website. You can also prevent Adobe from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Adobe by using the browser plug-in available under the following link. Download and install in: http://www.adobe.com/de/privacy/opt-out.html . Facebook Social Plugins

Scope and purpose of processing personal data

On our website, we use social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, to analyze the surfing behavior of our users and to optimize our website. Ireland (“Facebook”). The plugins can display interaction elements or content (e.g. videos, graphics or text posts) and can be recognized by one of the Facebook logos (white “f” on a blue tile, the terms “Like”, “Like” or a “thumbs up” sign ) or are marked with the addition “Facebook Social Plugin”. The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/< /a>. Facebook is certified under the Privacy Shield Agreement and thereby offers a guarantee of compliance with European data protection law (https:/ /www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). When a user accesses a function of this online offering that contains such a plugin, their device establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user’s device and integrated into the online offering. User usage profiles can be created from the processed data. We therefore have no influence on the amount of data that Facebook collects with the help of this plugin and therefore inform users according to our level of knowledge. By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offering. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. When users interact with the plugins, for example by clicking the Like button or leaving a comment, the corresponding information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany. The purpose and scope of data collection and the further processing and use of the data by Facebook as well as the relevant rights and setting options to protect the privacy of users can be found in Facebook’s data protection information: https://www.facebook.com/about/privacy/.

Legal basis for processing personal data

The legal basis for the processing of users’ personal data is Article 6 (1) (f) GDPR. Duration of storage The data will be deleted as soon as it is no longer required for our recording purposes. In our case this is the case after 30 days. Possibility of objection and removal By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website. If a user is a Facebook member and does not want Facebook to collect data about them via this online offering and link it to their membership data stored on Facebook, they must log out of Facebook and delete their cookies before using our online offering. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com /settings?tab=ads or via the US website http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices. To prevent your data from being collected using the Facebook pixel on our website, please click the following link: Facebook Opt-Out Note: If you click the link an “opt-out” cookie is stored on your device. If you delete the cookies in this browser, you will have to click the link again. Furthermore, the opt-out only applies within the browser you are using and only within our web domain on which the link was clicked. Inclusion of services and content from other third parties On our website, we use content or service offerings from third parties to analyze the surfing behavior of our users and to optimize our website in order to integrate their content and services (hereinafter referred to as “content”). This always assumes that the third party providers of this content are aware of the user’s IP address, as without the IP address they would not be able to send the content to their browser. The IP address is therefore required to display this content. We strive to only use content whose respective providers only use the IP address to deliver the content. Third parties may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user’s device and can contain, among other things, technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offering, as well as can be linked to such information from other sources. The legal basis for the processing of users’ personal data is Article 6 (1) (f) GDPR. The following presentation provides an overview of third-party providers and their content, along with links to their data protection declarations, which contain further information on the processing of data and, in some cases already mentioned here, objection options (so-called opt-out):

a) Maps from the “Google Maps” service provided by the third-party provider Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data protection declaration: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.
b) On our site we use the “+1” button from the provider Google+ from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter “Google”. Every time you access our website, which is equipped with such a “+1” component, this component causes the browser you are using to download a corresponding representation of the component from Google. Through this process, Google is informed which specific page of our website is currently being visited. According to Google’s information, your visit will not be further evaluated if you are not logged into your Google account.

If you access our site and are logged in to Google, Google can collect information about your Google account, the website you recommended as well as your IP address and other browser-related information when you confirm the “+1” button. This way, your “+1” recommendation can be saved and made publicly available. Your Google “+1” recommendation can then be displayed as a reference together with your account name and, if applicable, your photo stored with Google in Google services, such as in search results or in your Google account or in other places, such as on websites and advertisements on the Internet. Furthermore, Google can link your visit to our site with your data stored on Google. Google also records this information to further improve Google services. If you want to prevent the above-mentioned collection by Google as best as possible, you must log out of your Google account before visiting our website. You can access Google’s data protection information on the “+1” button with all further information on the collection, transfer and use of data by Google, your rights in this regard and your profile setting options here: https://developers.google.com/+/web/buttons-policy

c) Functions of the service or the Twitter platform can be integrated into our website (hereinafter referred to as “Twitter”). Twitter is an offering from Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The functions include the display of our posts within Twitter within our website, the link to our profile on Twitter as well as the possibility of interacting with the posts and the functions of Twitter, as well as measuring whether users have access to the posts we have placed on Twitter Advertisements reach our website (so-called conversion measurement). Twitter is certified under the Privacy Shield Agreement and thereby offers a guarantee of compliance with European data protection law (https:/ /www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Data protection declaration: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization.
d) We use functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Every time you access one of our pages that contains Xing functions, a connection is established to Xing servers. To our knowledge, personal data is not stored. In particular, no IP addresses are stored or usage behavior is evaluated. Data protection declaration: https://www.xing.com/app/share?op=data_protection.
e) We use components of the LinkedIn network on our site. LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Every time you access our website, which is equipped with such a component, this component causes the browser you are using to download a corresponding representation of the component from LinkedIn.

Through this process, LinkedIn is informed which specific page of our website is currently being visited. If you click the LinkedIn “Recommend button” while logged into your LinkedIn account, you can link the content of our pages to your LinkedIn profile. This enables LinkedIn to assign your visit to our pages to your LinkedIn user account. We have no influence on the data that LinkedIn collects, nor on the extent of this data collected by LinkedIn. We also have no knowledge of the content of the data transmitted to LinkedIn. Details on data collection by LinkedIn as well as your rights and setting options can be found in LinkedIn’s data protection information. These notices can be found at http://www.linkedin.com/legal/privacy-policy Rights of the data subject If your personal data is processed, you are the data subject within the meaning of the GDPR and you have the following rights towards the person responsible:

Right to information

You can request confirmation from the person responsible as to whether personal data concerning you is being processed by us. If such processing occurs, you can request information from the person responsible about the following information: (1) the purposes for which the personal data are processed; (2) the categories of personal data that are processed; (3) the recipients or categories of recipients to whom your personal data has been or will be disclosed; (4) the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period; (5) the existence of a right to rectification or deletion of personal data concerning you, a right to restrict processing by the controller or a right to object to this processing; (6) the existence of a right to lodge a complaint with a supervisory authority; (7) all available information about the origin of the data if the personal data is not collected from the data subject; (8) the existence of automated decision-making including profiling in accordance with Article 22 Paragraphs 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject. You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer. Right to rectification You have the right to request correction and/or completion from the person responsible if the personal data processed concerning you is incorrect or incomplete. The person responsible must make the correction immediately. Right to restriction of processing You can request the restriction of the processing of personal data concerning you under the following conditions: (1) if you dispute the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data; (2) the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data; (3) the person responsible no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or (4) if you have lodged an objection to the processing in accordance with Article 21 Para. 1 GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons. If the processing of personal data concerning you has been restricted, this data – apart from its storage – may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted. Right to deletion

Duty to delete

You can request that the person responsible delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies: (1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed. (2) You revoke your consent on which the processing was based in accordance with Article 6 Paragraph 1 Letter a or Article 9 Paragraph 2 Letter a GDPR and there is no other legal basis for the processing. (3) You object to the processing in accordance with Article 21 Paragraph 1 of the GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Article 21 Paragraph 2 of the GDPR. (4) The personal data concerning you were processed unlawfully. (5) The deletion of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject. (6) The personal data concerning you was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR. exceptions There is no right to deletion if processing is necessary (1) to exercise the right to freedom of expression and information; (2) to comply with a legal obligation requiring processing under Union or Member State law to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller became; (3) for reasons of public interest in the area of public health in accordance with Article 9 Paragraph 2 Letters h and i and Article 9 Paragraph 3 GDPR; (4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, insofar as the law referred to in section a) is likely to make the achievement of the objectives of this processing impossible or seriously impair it, or (5) to assert, exercise or defend legal claims. Right to information If you have asserted the right to rectification, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of processing, unless: this turns out to be impossible or involves disproportionate effort. You have the right to be informed about these recipients by the person responsible. Right to object You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is carried out on the basis of Article 6 (1) (e) or (f) of the GDPR; this also applies to profiling based on these provisions. The person responsible will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; This also applies to profiling insofar as it is connected to such direct advertising. If you object to processing for direct advertising purposes, your personal data will no longer be processed for these purposes. In connection with the use of information society services – regardless of Directive 2002/58/EC – you have the opportunity to exercise your right to object using automated procedures that use technical specifications. Right to revoke the data protection declaration of consent You have the right to revoke your data protection declaration of consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent before its revocation. Right to complain to a supervisory authority Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you are of the opinion that the processing of personal data concerning you is contrary to violates the GDPR. The supervisory authority to which the complaint was submitted will inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR. Stand: May 2018

Datenschutz – Englisch

Data protection

Informations

What we can do

Technologies