English
Privacy Information
I. Name and address of the responsible person
The person responsible within the meaning of the General Data Protection Regulation GDPR and other national data protection laws of the member states as well as other data protection regulations is :
APE GmbH
Website: www.ape-berlin.de
APE’s data protection officer can be contacted under: datenschutz@ape-berlin.de
II. General information about data processing
1. Extent of processing of personal data
Personal data of our users is only processed insofar as this is necessary to provide a functioning website, its content and our services. The processing of personal data of our users regularly only takes place with the consent of the user. An exception applies to cases in which prior consent cannot be obtained for reasons of fact and law permits the processing of the data.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the person concerned for processing of personal data, the legal basis is Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR).
In the processing of personal data necessary for the performance of a contract to which the person concerned is a party, the legal basis is Art. 6 para. 1 lit. b EU General Data Protection Regulation (GDPR). This also applies to processing operations required to carry out pre-contractual actions.
Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, the legal basis is Art. 6 para. 1 lit. c EU General Data Protection Regulation (GDPR).
In the event that vital interests of the person concerned or another natural person require the processing of personal data, the legal basis is Art. 6 para. 1 lit. d EU General Data Protection Regulation (GDPR).
If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the person concerned do not prevail over the first interest, the legal basis for processing is Art. 6 para. 1 lit. f EU General Data Protection Regulation (GDPR).
3. Data erasure and storage duration
The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage is inapplicable. In addition, a storage can take place if this was intended by the European or national legislator by union-legal regulations, laws or other rules by which the responsible is subject to. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned, expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
III. Supply of the website and creation of log files
1. Description and extent of the data processing
By every call of our Internet page, our system automatically registers data and information of the computer system of the requesting computer. The following data are collected:
- Information about the browser type and the applied version
- The operation system of the user
- IP-address of the user
- Date and time of the access
- The websites from which the system of the user reaches our Internet page
The data are also stored in the log files of our system. A storage of these data together with other personal data of the user does not take place.
2. Legal basis for the data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f EU General Data Protection Regulation (GDPR).
3. Purpose of data processing
The storage in log files takes place to guarantee the effectiveness of the website. Moreover, the data serve us for the optimization of the website and for the backup of the security of our information-technical systems. An evaluation of the data for marketing purposes does not take place.
For these purposes, it is our legitimate interest for processing the data according to Art. 6 para. 1 lit. f EU General Data Protection Regulation (GDPR).
4. Duration of data storage
For data stored in log files this is the case no later than 2 months. A longer storage is possible. In this case the IP addresses of the users are deleted or are alienated, so that an allocation of the requesting clients is not possible any more.
5. Objection and removal possibility
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. Therefore, there is no opposition for the user.
IV. Use of Cookies
1. Description and extent of the data processing
Our website uses cookies. Cookies are text files which are stored in the Internet browser or from the Internet browser on the computer system of the user. If a user calls a website, a Cookie can be stored on the operating system of the user. This Cookie contains characteristic strings that allows an unambiguous identification of the browser when calling the website again.
We use Cookies to make our website user-friendly. Some elements of our website require that the calling browser can be identified even after a page break.
The following data is stored and transmitted in the Cookies:
- Language settings
- Acceptance of the Cookie note
When accessing our website, the user is informed about the use of cookies for analysis purposes and his consent to the processing of the personal data used in this context is requested. In this context, there is also a reference to this Privacy Statement.
2. Legal basis for the data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f EU General Data Protection Regulation (GDPR).
3. Purpose of data processing
The purpose of using technically necessary cookies is to facilitate the use of websites for users. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break.
(1) Language settings
(2) Acceptance of the Cookie note
The user data collected through technically necessary cookies will not be used to create user profiles. For these purposes, it is our legitimate interest for processing the data according to Art. 6 para. 1 lit. f EU General Data Protection Regulation (GDPR).
4. Duration of data storage
Cookies are stored on the computer of the user and are transmitted by this to our website. Therefore, the user has full control over the use of Cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website completely.
V. Newsletter
1. Description and extent of the data processing
On our Website, you can subscribe to a free newsletter. When registering for the newsletter, the e-mail address from the input mask will be sent to us. For the processing of the data, your consent is obtained during the registration process and reference is made to this Privacy Statement.
If you purchase goods or services from us and deposit your e-mail address here, we can subsequently use this for sending a newsletter. In such a case, the newsletter will only be used to advertise similar goods or services.
In connection with the processing of data for the sending of newsletters, there is no disclosure of the data to third parties. The data will be used exclusively for sending the newsletter.
2. Legal basis for the data processing
The legal basis for the processing of data after subscription for the newsletter is Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR).
The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 Abs. 3 UWG (law against unfair competition).
3. Purpose of data processing
The collection of the user’s e-mail address serves to deliver the newsletter.
4. Duration of data storage
The data are deleted, as long as they are not required for the reaching of the purpose of their elevation any more. Therefore, the E-mail address of the user is stored as long as the subscription of the Newsletters is active.
5. Objection and removal possibility
The person concerned can cancel the subscription of the Newsletters at any time. For this purpose, an appropriate link can be found in every Newsletter.
A revocation of the consent to save data when subscribing to the newsletter is also possible at any time.
VI. Contact form and e-mail contact
1. Description and extent of the data processing
A contact form is available on our website, which can be used for electronic contact. If a user utilizes this option, the data entered in the input mask will be transmitted to us and saved. These data are:
- Name
- E-Mail address
- Country
- Institute/company
- Subject
- Message
At the time of sending the message, also the following data are stored:
- IP-address of the user
- Date and time of sending
In the process of sending the data your consent for the processing of the data is obtained and it is referred to this Privacy Statement.
Alternatively, contact via the provided e-mail address is possible. In this case, the user’s personal data transmitted by e-mail will be stored.
In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.
2. Legal basis for the data processing
Legal basis for the processing of the data in the presence of the consent of the user is Art. 6 para. 1 lit. a EU General Data Protection Regulation GDPR.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
3. Purpose of data processing
The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of data storage
The data will be deleted as soon as they are no longer needed for the purpose they have been collected for. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has been terminated. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.
The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.
5. Objection and removal possibility
At any time, the user has the possibility to revoke his consent to the processing of the personal data. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting will be deleted in this case.
VII. Payment
1. Description and extent of the data processing
If you make use of online-payment by credit card or online form, further data will be collected. We use the external service provider Wirecard for the collection and processing of payment data. APE collects and stores the following data:
- Name und Email-Adress
- Order amount
- Credit card provider (e.g. Visa or Mastercard)
- A unique APE reference number for the payment
- A unique payment reference number from the payment provider Wirecard
- An incomplete credit card number where at least 6 digits are deleted
At no time during or after the payment process does APE collect or store informtion of the complete credit card number or the security code of the credit card. This information is collected and stored exclusively by the payment service provider Wirecard.
2. Contact of the payment provider
Provider of the Wirecard payment service is Wirecard AG, Einsteinring 35, 85609 Aschheim, Germany. When you pay via Wirecard, the payment data you enter is transmitted to Wirecard. Detailed information on data protection at Wirecard can be found here: https://www.wirecard.at/datenschutz/
VIII. Tracking and advertising
1. Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie such as:
a. Browser type/version,
b. Operating system used,
c. Referrer URL (the previously visited page),
d. Host name of the accessing computer (IP address),
e. Time of the server request
are usually transferred to a Google server in the USA and stored there. IP anonymization is activated on this website, which means that the user’s IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating the use of the website by users, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. You can prevent the storage of cookies by selecting the appropriate settings on your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent the collection by Google Analytics within this website in the future (the opt-out only works in this browser and only for this domain). This will place an opt-out cookie on your device. If you delete your cookies in this browser, you must click this link again.
More information on terms of use and data protection can be found at http://www.google.com/analytics/terms/en.html and https://www.google.com/intl/en/policies/ respectively. This offer also uses Google Analytics to analyze data from AdWords and the Double Click cookie for statistical purposes. If you do not wish this to happen, you can deactivate it via the Ads Preferences Manager (http://www.google.com/settings/ads/onweb/?hl=en). The processed data will be deleted after a period of 14 months at the latest.
2. Google Analytics Remarketing
We have integrated Google Remarketing services on this website. Google Remarketing is a function of Google AdWords that allows a company to display advertisements to Internet users who have previously visited the company’s website. The integration of Google Remarketing thus allows a company to create user-related advertisements and consequently to display interest-relevant advertisements to the Internet user.
The operating company of the Google Remarketing services is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google Remarketing is the display of interest-relevant advertising. Google Remarketing enables us to display advertisements via the Google advertising network or to have them displayed on other Internet pages that are tailored to the individual needs and interests of Internet users.
Google Remarketing sets a cookie on your IT system of the data subject. By setting the cookie, Google is able to recognize the visitor to our website when he or she subsequently visits websites that are also members of the Google advertising network. Each time you visit a website on which the Google Remarketing service has been integrated, your internet browser automatically identifies itself to Google. Within the scope of this technical procedure, Google obtains knowledge of personal data, such as your IP address or surfing behavior, which Google uses, among other things, to display interest-relevant advertising.
By means of the cookie, personal information, for example the Internet pages visited by you, is stored. Each time you visit our website, personal data, including your IP address, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.
You can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on your IT system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
Furthermore, you have the option to object to interest-based advertising by Google. To do this, you must call up the link www.google.com/settings/ads from any Internet browser used and make the desired settings there.
Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit.f DS-GVO on the basis of our legitimate interest in the display of personalized advertising, market research and / or needs-based design of its website.
Further information and the applicable data protection provisions of Google can be found at https://www.google.com/intl/en/policies/privacy/.
3. Google (AdWords) Remarketing
Our website uses the functions of Google AdWords Remarketing, with this we advertise for this website in Google search results, as well as on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For this purpose, Google sets a cookie in the browser of your terminal device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit.
The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para. 1 lit. f DS-GVO.
Further data processing only takes place if you have consented to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalize ads you view on the web. In this case, if they are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form target groups.
You can permanently disable the setting of cookies for ad targeting by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/.
Alternatively, you can obtain information about the setting of cookies and make settings for this from the Digital Advertising Alliance at the Internet address www.aboutads.info. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.
Google LLC, based in the USA, is certified for the us-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.
Further information and the data protection provisions regarding advertising and Google can be viewed here: https://www.google.com/policies/technologies/ads/
4. Google AdWords with conversion tracking
We have integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to place ads both in Google’s search engine results and in the Google advertising network. Google AdWords allows an advertiser to specify certain keywords in advance, by means of which an ad is displayed in Google’s search engine results exclusively when the user retrieves a keyword-relevant search result using the search engine. In the Google advertising network, the ads are distributed on topic-relevant websites by means of an automatic algorithm and in compliance with the previously defined keywords.
The operating company of the Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and to display third-party advertising on our website.
If you reach our website via a Google advertisement, a so-called conversion cookie is stored on your IT system by Google. A conversion cookie loses its validity after thirty days and is not used to identify you. If the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages, for example the shopping cart of an online store system, have been called up on our website. Through the conversion cookie, both we and Google can track whether a user who arrived on our website via an AdWords ad generated a sale, i.e. completed or cancelled a purchase of goods.
The data and information collected through the use of the conversion cookie are used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other advertisers of Google AdWords receive information from Google by means of which you could be identified.
By means of the conversion cookie, personal information, for example the Internet pages visited by you, is stored. Each time you visit our website, personal data, including the IP address of the internet connection you are using, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.
You can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on your IT system. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.
Furthermore, you have the option to object to interest-based advertising by Google. To do this, you must call up the link www.google.com/settings/ads from the Internet browser you are using and make the desired settings there.
Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit.f DS-GVO on the basis of our legitimate interests in the display of personalized advertising, market research and / or needs-based design of its website.
Further information and the applicable data protection provisions of Google can be found at https://www.google.com/intl/en/policies/privacy/.
IX. Services
1. Google Maps
On our website we use Google Maps (API) from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps is a web service for displaying interactive (land) maps in order to visually present geographical information. By using this service, our location can be displayed to you, for example, and a possible journey can be made easier.
Already when calling up those sub-pages in which the map of Google Maps is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out of your Google user account. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit.f DS-GVO on the basis of Google’s legitimate interests in the insertion of personalized advertising, market research and/or needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Google LLC, based in the USA, is certified for the us-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.
If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you also have the option of completely disabling the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.
The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f DS-GVO.
You can view Google’s terms of use at https://www.google.com/intl/en/policies/privacy/, the additional terms of use for Google Maps can be found at https://www.google.com/intl/en_US/help/terms_maps.html.
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website (“Google Privacy Policy”): https://www.google.com/intl/en/policies/privacy/
2. Google WebFonts
Our website uses so-called web fonts provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google’s servers. This gives Google knowledge that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our website.
This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DS-GVO.
Google LLC, based in the USA, is certified for the us-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/
3. YouTube Videos
We have integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and TV shows, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time you call up one of the individual pages of this website operated by us on which a YouTube component (YouTube video) has been integrated, the Internet browser on your IT system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at "https://www.google.com/intl/en/policies/privacy/" target="_blank" rel="noopener noreferrer">https://www.google.com/intl/en/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.
X. Rights of the persons concerned
If your personal data are processed, you are a person concerned according to GDPR and you have the following rights towards the responsible person:
1. Right of Access
You may ask the responsible person to confirm if personal data concerning you is processed by us. If such a processing takes place, you can require the following information from the person responsible:
- the purposes for which the personal data are processed;
- the categories of personal data that are processed;
- the recipients or categories of recipients to whom your personal data have been or will be disclosed;
- the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
- the existence of a right to rectification or erasure of your personal data, a right to restriction of processing by the responsible person or a right to object to such processing;
- the existence of a right to complain at a regulation authority;
- all available information about the origin of the data if the personal data are not collected from the concerned person;
- the existence of automated decision-making including profiling under Art. 22 para 1 and 4 GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data of the concerned person
You have the right to request information about whether your personal data is transferred to a third country or an international organization. In this context, you can request the appropriate guarantees in accordance with. Art. 46 GDPR in connection with the transfer of your personal data.
2. Right to rectification
You have a right to rectification and / or completion towards the responsible person, if the personal data you process is incorrect or incomplete. The responsible person must do the correction without delay.
3. Right to restriction of processing
Under the following conditions, you may request the restriction of the processing of your personal data:
- if you deny the correctness concerning your personal for a duration which enables the responsible person to check the correctness of the personal data;
- the processing is unlawful and you reject to delete the personal data and instead request the restriction of the use of the personal data;
- the responsible person no longer requires the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
- if you objected to the processing pursuant to Art. 21 para. 1 GDPR and it is not yet certain whether the legitimate reasons of the person responsible prevail over your reasons.
- If you have restricted the processing of your personal data, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the European Union or its Member State. If the restriction on processing has been restricted in accordance with the above-mentioned conditions, the person responsible will notify you before the restriction is canceled.
4. Right to delete
- Deletion obligation
You may require the responsible person to delete your personal information without delay, and the responsible person is required to delete that information immediately if one of the following is true:
- Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- You revoke your consent to the processing according to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for processing.
- You file an objection according to Art. 21 para. 1 GDPR and there are no prior justifiable reasons for the processing; or appeal against the processing of your data according to Art. 21 para. 2 GDPR.
- Your personal data has been processed unlawfully.
- The deletion of your personal data is required to fulfill a legal obligation under the law of the European Union or the law of the Member States to which the responsible person is subject to.
- Your personal data were collected in relation to the services offered by the information society pursuant to Art. 8 (1) GDPR.
- Information to third parties
If the responsible person has made your personal data public and is the responsible person bound according to Art.17 para. 1 of the GDPR, to delete your personal data, he shall take appropriate measures, including technical means, to inform data controllers who process your personal data that you have requested, to delete all links to or copies of these personal data.
- Exceptions
The right to delete does not exist if the processing of the data is necessary
- to exercise the right to freedom of expression and information;
- to fulfil a legal obligation required by the law of the European Union or of the Member States to which the responsible person is subject, or to carry out a task of public interest or in the exercise of official authority conferred on the responsible person;
- for reasons of public interest in the field of public health according to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
- for archival purposes of public interest, scientific or historical research purposes or for statistical purposes according to Art. 89 para 1 GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
- to assert, exercise or defend legal claims.
5. Right to Information
If you have exercised the right of rectification, erasure or restriction of processing to the responsible person, he is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to the responsible person to be informed about these recipients.
6. Right to Data Portability
You have the right to receive personally identifiable information, you provide to the responsible person, in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the responsible person that received your personal data, provided that
- the processing is based on a consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract according Art. 6 para. 1 lit. b GDPR, and
- the processing is done using automated procedures.
In exercising this right, you also have the right to effect that your personal data are transmitted directly from one person to another, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the responsible person.
7. Right of objection
You have the right of objection at any time, for reasons that arise from your particular situation, against the processing of your personal data, which have been collected according to Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.
The responsible person will no longer process your personal data unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, exercising or defending legal claims.
If your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
8. Right to revoke the data protection consent declaration
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
9. Automated decision on a case-by-case basis, including profiling
You have the right not to be subjected to a decision based solely on automated processing – including profiling – that will have legal effect or affect you in a similar manner. This does not apply if the decision
- is required for the conclusion or fulfilment of a contract between you and the responsible person,
- is legal, based on special provisions of the European Union or Member State to which the responsible person is subject to, and that these special provisions contain adequate measures to safeguard your rights and freedoms and your legitimate interests, or
- is made with your express consent.
However, these decisions must not be based on special categories of personal data according to Art. 9 para. 1 GDPR, unless Art. 9 para 2 lit. a or g GDPR applies and reasonable measures have been taken to protect the rights and freedoms as well as your legitimate interests.
With regard to the cases referred to in (1) and (3), the responsible person shall take appropriate measures to uphold the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person by the responsible person, to express his own position and appeal of the decision.
10. Right to complain to a Regulation Authority
Regardless of any other administrative or judicial remedy, you shall have the right to complain to a regulation authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you believe that the processing of your personal data violates the GDPR.
The regulatory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy according to Article 78 of the GDPR.
(Last Updated July 20, 2022)
