隐私保护

隐私保护

此网站的运营商非常重视保护您的个人信息。我们依据隐私保护的法律规定和此隐私保护声明谨慎地处理您的个人信息。

使用我们的网站通常不需要提供个人信息。如需在我们的网站上提交个人信息(例如:姓名,地址或电邮地址),在尽可能的情况下,始终基于自愿的原则。未经您本人明确同意,这些信息不会透露给第三方。

我们特别指出,网络信息传输(例如通过电邮进行通讯)可能出现安全漏洞。完全防止第三方获取数据是不可能的。

 

加密

为了保护您在使用此网站时所提供给我们的数据不被非法获取,我们采取加密措施。在您输入的信息从您的计算机通过网络传输到我们的服务器,及反方向传输时,将使用SSL(Secure Socket Layer)加密技术。这一点您可以通过浏览器状态栏的安全上锁标志,及以https://为开头的网址来识别。

 

有关使用Facebook插件(Like-Button,“赞”按钮)的隐私保护声明

我们的网站使用社交网络Facebook的插件,提供者为Facebook公司 (Facebook Inc.,其地址为:1 Hacker Way, Menlo Park, California 94025, 美国)。通过我们网页上的Facebook标识或“赞”按钮,您可以识别这些插件。有关Facebook插件的总览请见这里: developers.facebook.com/docs/plugins/

如果您访问我们网站,通过这个插件,您的浏览器将直接与Facebook的服务器相连接。Facebook将因此获得有关您使用您的IP地址访问了我们网站的信息。如果您登录了Facebook,并点击了“赞”按钮,您可以在您的Facebook账户添加一个有关我们网站内容的链接。借此,Facebook可以在您的用户账户下记录您访问我们网站的信息。我们特别指出,作为网站提供者我们不掌握Facebook所获得的信息内容及如何使用这些信息。请参见Facebook的隐私保护声明如下,以了解更多: de-de.facebook.com/policy.php

如果您不希望Facebook在您的用户账户下记录您访问我们网站的信息,请登出您的Facebook账户。

 

有关使用Google服务的隐私保护声明

首先我们使用Google Analytics(分析),这是Google公司(Google Inc.,其地址为:1600 Amphitheatre Parkway, Mountain View, CA 94043, 美国; „Google“) 的一项网页分析服务。Google Analytics同样使用名为Cookie的文本文件,帮助分析您对我们网站及在线服务的使用情况。通过Cookie生成的有关您使用此网站及在线服务的信息将传输并保存至位于美国的Google服务器。我们Immonet GmbH使用Google Analytics的扩展功能"_anonymizeIp()"(IP-匿名),传输给Google的IP地址将首先在位于欧洲的服务器上被缩减及处理,以避免它们被直接关联到特定的个人。Google将利用此信息来评估您对网站的使用情况,为我们汇编网站活动报告,并提供有关网站使用和网络使用情况的其他服务。另外如果法律允许或者第三方受Google委托进行数据处理,Google也可能会向第三方转送这一信息。在任何情况下,Google都不会将您的IP地址与Google的其它数据相关联。您也可以通过您的浏览器软件的一项设置来阻止安装Google Analytics所使用的Cookie;我们特别向您指出,在这种情况下,您可能无法完全使用我们网站的所有功能。通过Google的一个浏览器插件,您可以随时撤销Google Analytics今后的数据收集保存功能。

另外我们作为AdWords(在线广告计划)客户还使用Google公司(Google Inc.,其地址为:1600 Amphitheatre Parkway, Mountain View, CA 94043, 美国; „Google“)的一项分析服务:Google Conversion Tracking(Google转换跟踪)。只要您通过Google广告连接至我们的网站,Google AdWords就会在您的计算机端产生一个Cookie("Conversion Cookie",转换Cookie)。这些Cookies在30天后失效,并不用作个人信息识别。在Cookie有效期内您访问我们的特定网页,我们及Google可以识别,曾经有人点击过此广告并转接至我们的网站。每个AdWords客户所获得的Cookie均不同。因此Cookies无法用于通过AdWords客户网站的跟踪。AdWords客户选择使用转换跟踪(Conversion-Tracking),从而获得转换统计,此统计是通过Conversion Cookies获取的信息汇总而来。AdWords客户所获取的是用户总数量,这些用户曾点击了他们的广告并转接至一个设置了转换跟踪功能的网页。但他们所获取的信息不包括用户个人识别数据。如果您不想参与跟踪流程,您可以拒绝生成Cookie——例如通过浏览器设置,来完全禁止自动生成Cookies。您也可以通过在您的浏览器内设置阻止来自域名"googleadservices.com"的Cookies,来禁止用于转换跟踪的Cookies。

如果您通过移动设备(例如智能手机或平板电脑)访问我们的网站,可以通过这个链接撤销Google Analytics在今后的应用。通过激活此链接,我们在您的浏览器内生成一个Cookie,以禁止在您的终端设备上应用Google Analytics。请注意,一旦您清除了此类Cookies,您必须再次提交撤销。

我们还使用Google AdSense,这是Google公司(Google Inc.,其地址为:1600 Amphitheatre Parkway, Mountain View, CA 94043, 美国; „Google“)的一项网页广告服务,用以显示广告(文字广告,广告条等)。在此您的浏览器可能会保存一个由Google或第三方发送的Cookie。保存在Cookie中的信息可能会被Google或第三方记录,收集及评估。此外,Google Adsense也使用小型且隐藏的图像以收集信息,通过该功能可以记录、收集并评估简单的操作行为,例如网站上的访客流量。通过Cookie和/或图像所产生的有关您使用此网站的信息被传输并保存至位于美国的Google服务器。Google利用这些收到的信息来评估您就AdSense广告的使用行为。如果法律允许或者第三方受Google委托进行数据处理,Google也可能会向第三方转移这一信息。Google不会将您的IP地址与Google的其它数据相关联。您可以阻止在您的硬盘上生成Cookies及显示上述的图像。有关其它所述Cookies的规则,同样适用于此:您必须在您的浏览器设置中禁止接收Cookies。

我们使用Google公司(Google Inc.,其地址为:1600 Amphitheatre Parkway, Mountain View, CA 94043, 美国; „Google“)的Remarketing Technologie(再营销技术)。这项技术可以通过Google合作伙伴网络上有针对性的广告再次吸引访问过我们的网页和对我们的产品感兴趣的用户。广告投放是基于生成的Cookies,这是小的文本文件,保存在用户的计算机上。借助此文本文件,可以分析网页访问时的用户行为,然后有针对性地推荐产品和使用兴趣导向广告。

如果您不希望收到兴趣导向广告,您可以禁止Google使用基于此目的的Cookies,请访问 www.google.de/settings/ads 。用户也可以通过访问网络广告联盟(Network Advertising Initiative)的取消激活页面,以禁用来自第三方提供者的Cookies。

您可以通过您的浏览器软件的相关设置来阻止保存Cookies;但我们特别向您指出,在这种情况下,您可能无法完全使用此网站的所有功能。此外,您可以下载并安装下述链接所提供的浏览器插件,用于阻止通过Cookie生成的、和您使用网站时被获取的数据(包括您的 IP 地址)被发送给Google并由Google处理的问题:tools.google.com/dlpage/gaoptout

如您使用此网站,即意味着您同意Google以上述方式和为了达到上述目的来处理您提交的个人信息。我们特别指出,Google另有自己的隐私保护政策,与我们的隐私保护声明无关。我们对此政策及方式不承担责任或义务。请在使用我们的网站之前先了解Google的隐私保护规定。

 

有关使用Google +1的隐私保护声明

我们的网站使用Google +1的功能。提供者为Google公司(Google Inc.,其地址为:1600 Amphitheatre Parkway, Mountain View, CA 94043, 美国)。

信息的收集及转发:借助Google +1按钮,您可以在全球发布信息。通过Google +1按钮,您及其他用户获得来自Google和我们的合作伙伴的个性化内容。Google既保存您为一项内容点击了+1的信息,也保存您点击+1时所查看的网页的信息。您的+1可以作为提示,与您的个人资料名字和您的照片一起,被插入在Google服务(比如搜索结果)中,或您的Google个人资料中,或网页和网络广告的其它位置。谷歌收录有关您+1活动的信息,用于改进为您和其他人提供的谷歌服务。要使用Google +1按钮,您需要一份可以在全球查看的、公开的Google个人资料,其中至少须包括为此个人资料而选择的名字。此名字用于所有Google服务。在某些情况下,该名字也可以代替您在通过Google账户分享内容时所使用的其他名字。如果其他用户知道您的电邮地址,或了解其它有关您身份验证的信息,那么此类用户可以看到您的Google个人资料的身份信息。

所收集信息的使用:除了上述用途以外,您提供的信息将根据适用的Google隐私保护规定来使用。Google有可能公布有关用户+1活动的汇总统计情况,或将此情况转发给用户和合作伙伴,比如出版商、广告客户或相关网站。

 

有关使用etracker的隐私保护声明

我们的网站使用etracker分析服务。提供者为etracker公司(etracker GmbH, 其地址为:Erste Brunnenstraße 1 20459 Hamburg 德国)。

通过数据可以编制成采用化名方式的使用行为资料。在此可能会用到Cookies。Cookies是储存在您的浏览器当地临时存储空间中的小型文本文件。Cookies使您的浏览器能被再次识别。没有当事人的明确同意,这些通过etracker技术收集的数据不会用来辨识我们网站访问者的个人身份,也不会与化名收集的个人信息相连。

您可以随时撤销今后的数据收集保存功能。如需撤销今后有关您访问数据的收集保存功能,您可以通过下述链接来获取etracker的一个Opt-Out-Cookie,它的作用是阻止您浏览器中的访问数据被etracker收集及保存: www.etracker.de/privacy

借此将生成一个etracker的Opt-Out-Cookie,其名称为"cntcookie"。如果您想保留您的撤销,请勿删除此Cookie。请参见etracker的隐私保护规定如下,以了解更多: www.etracker.com/de/datenschutz.html

 

有关使用Twitter的隐私保护声明

我们的网站与Twitter服务的功能相连。这些功能由Twitter公司(Twitter Inc., 其地址为:1355 Market Street, Suite 900, San Francisco, CA 94103, 美国)提供。通过使用Twitter及"Re-Tweet"(转发)功能,您所访问的网页将与您的Twitter账户建立联系,并且其他用户可见。数据也将同时传输给Twitter。我们特别指出,作为网站提供者我们不掌握Twitter所获得的信息内容及如何使用这些信息。请参见Twitter的隐私保护声明如下,以了解更多: twitter.com/privacy

您可以在账户设置内修改有关Twitter隐私保护的设置: twitter.com/account/settings

 

有关使用Xing的隐私保护声明

我们的网站使用Xing网络的功能。提供者为Xing公司(XING AG, 其地址为:Dammtorstraße 29-32, 20354 Hamburg, 德国)。每次访问我们含有Xing功能的网页时,将与Xing服务器建立连接。据我们所知,在此过程中不会保存个人信息。尤其不会保存IP地址或评估使用行为。

请参见Xing的隐私保护声明如下,以了解更多有关隐私保护及Xing分享按钮的信息: www.xing.com/app/share

 

有关使用Pinterest的隐私保护声明

我们在我们的网站上使用社交网络Pinterest的社交插件,运营者是Pinterest公司(Pinterest Inc.,其地址为:6 35 High Street, Palo Alto, CA, 94301, 美国)。当您访问含有此插件的网页时,您的浏览器将与Pinterest的服务器建立直接连接。插件在此过程中向位于美国的Pinterest服务器传输日志数据。日志数据可能包括您的IP地址,同样含有Pinterest功能的所访问网页的网址,浏览器的类型和设置,查询日期和时间,您对Pinterest的使用方式以及Cookies。

有关Pinterest对数据的目的、范围及进一步处理、使用的更多信息,以及有关保护您隐私的相关权限和可能性的更多信息,请参见Pinterest的隐私保护提示: about.pinterest.com/de/privacy-policy

 

有关使用Tumblr的隐私保护声明

我们的网站使用Tumblr服务的按钮。提供者为Tumblr公司(Tumblr, Inc., 其地址为:35 East 21st St, 10th Floor, New York, NY 10010, 美国)。这些按钮让您可以在Tumblr分享一篇文章或一个网页,也可以关注网站提供者在Tumblr的动态。当您访问我们含有Tumblr按钮的网页时,浏览器将与Tumblr的服务器建立直接连接。对于Tumblr借助此插件所获取的数据的范围,我们无法施加影响。按照当前的状态,所获取的数据包括用户IP地址及所访问的网址。

请参见Tumblr的隐私保护声明如下,以了解更多: www.tumblr.com/policy/de/privacy

 

有关使用Instagram的隐私保护声明

我们的网站与Instagram服务的功能相连。这些功能由Instagram公司(Instagram Inc., 其地址为:1601 Willow Road, Menlo Park, CA, 94025, 美国)提供。在您登录Instagram账户的情况下,通过点击Instagram按钮,您可以将我们的网页内容与您的Instagram账户建立链接。借此,Instagram可以在您的用户账户下记录您访问我们网站的信息。我们特别指出,作为网站提供者我们不掌握Instagram所获得的信息内容及如何使用这些信息。请参见Instagram的隐私保护声明如下,以了解更多: instagram.com/about/legal/privacy/

 

服务器日志文件(Server-Log-Files)

此网站提供者自动收集并保存所谓的服务器日志文件,此类文件由您的浏览器自动传输给我们。这包括:

  • 浏览器类型/浏览器版本
  • 所使用的操作系统
  • HTTP来源地址,URL地址
  • 访问所用计算机的名称
  • 查询服务器的时间

此数据无法用于特定人群的归类。此数据不会与其它数据来源相关联。当我们获知确凿的非法使用证据时,我们保留事后检查此数据的权利。

 

Cookies

网页有时会使用所谓的Cookies。Cookies不会对您的计算机造成损害,也不包含病毒。Cookies使我们提供的内容更方便使用,更高效,更安全。Cookies是储存在您的计算机和浏览器上的小型文本文件。

我们所使用的大多数Cookies是所谓的"临时Cookies"(Session-Cookies)。在您结束访问时它们将被自动删除。其它Cookies储存在您的终端设备上,直至您将其删除。在您下次访问时,Cookies使我们可以再次识别出您的浏览器。

您可以设置您的浏览器,在Cookies被使用时您将收到通知,并且只单项允许在特定情况下接收Cookies,或者全部禁止接收Cookies,以及在关闭浏览器时自动删除Cookies。在禁用Cookies时,此网站的功能会受到限制。

 

联系表格

当您通过联系表格向我们提交询问时,表格中的内容( 包括您给出的联系方式)将被我们保存,用于处理您的询问及可能的后续问题。没有您的同意,我们不会将此信息转交给他人。

 

针对广告邮件的驳回

在版本说明义务范围之内公开的联系信息,不得用于发送未经明确索要的广告和信息材料。我们特此驳回此类用途。对于未经索要而发送的广告信息(例如通过垃圾邮件),此网站的运营者明确保留法律追究权利。

 

时事通讯(Newsletter)

如果您想订阅网站提供的时事通讯,请给出一个电邮地址,同时允许我们确认您是此电邮地址的持有者,您并同意接收此类时事通讯。我们将不会收集其它信息。此电邮地址仅用于发送所请求的信息,我们不会将它转交给第三方。

针对已保存的信息和电邮地址以及将其用于发送时事通讯,您可以随时撤销您的同意,比如通过点击时事通讯中的"退出"链接。

 

注册流程

您可以在我们的网站注册。在注册流程范围之内,我们收集并处理如下信息:

电邮地址,姓名,地址,出生日期

这些信息用于创建您的用户个人资料,向您发送必需的登录信息,及与您取得联系。

在您的用户账户存在的情况下,和/或出于提供服务的原因(例如法定保存期限),您的个人信息将一直被保存。

您无法自主删除您的账户。

没有您的同意,我们不会将此信息转交给他人。

 

有奖竞猜

经参与者同意,对于在有奖竞猜流程范围之内收集的信息,我们只提供给由我们指定的有奖竞猜合作伙伴。

 

问讯,删除,冻结

针对您被保存的个人信息,其来源和接收者,以及信息处理的目的,您有权随时提出免费问讯。您也有权修正,冻结或删除此类信息。对此及有关个人信息的其它问题,您可以随时通过在版本说明中给出的地址与我们联系。

 

联系

Ledlenser GmbH & Co.KG

地址:Kronenstr.5-7

42699 索林根

info@ledlenser.com

Privacy Statement

 

Data Protection Declaration of Ledlenser GmbH & Co KG

I.         Name and address of the responsible party

The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the EU Member States as well as other data protection regulations is:

Ledlenser GmbH & Co. KG
Kronenstr. 5 – 7
42699 Solingen
Germany

Ledlenser Beteiligungs GmbH
Headquarters: Solingen, Germany

ledlenser.com
leatherman.de

II.       Name and address of the Data Protection Officer

The responsible party's Data Protection Officer is:

Christoph Strieder
Ahrstrasse 1
42655 Solingen
Germany
Phone: 02123820860
datenschutz@anwalt-strieder.de

III.    General information on data processing

1.        Scope of the personal data processing

We collect and utilise our users' personal data only insofar as this is necessary for provision of an operational site and of our content and services. Collection and utilization of our users' personal data is only undertaken periodically with the user's consent. An exception applies in those cases where prior consent cannot be obtained for legal or factual reasons and the processing of the data is permitted by law.

2.        Legal basis for processing personal data

Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 para. 1 (a) EU General Data Protection Regulation (GDPR) serves as legal basis. In processing personal data necessary for performance of a contract to which the data subject is a party, Art. 6 Para. 1 lit. b GDPR applies as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR applies as the legal basis. In the event that vital interests of the data subject or another natural person require a processing of personal data, Art. 6 1 lit. d GDPR applies as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Para. 1 lit. f GDPR applies as the legal basis for processing. 

3.                  Data deletion and storage duration

The data subject's personal data will be deleted or blocked as soon as the purpose of storage ceases to apply.

In the event that you send us speculative application data via our website or otherwise electronically, we will delete the data immediately if we do not initiate an application procedure. In the event that we initiate an application procedure or you send us application data at our request, we will delete your data at the latest 4 months after completion of the application procedure if an employment relationship does not come into existence. A longer storage takes place if you have expressly declared your consent to this.

Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject. Blocking or erasure of data will be carried out even if a storage deadline prescribed by the above-mentioned standards expires, unless data storage is a necessity for concluding or performing a contract.

4.                  Categories of recipients

Unless otherwise described below, the person responsible or the company responsible for the processing of personal data via our website is generally responsible for the processing of personal data (see Clause I of this data protection declaration). The personal data will not be communicated to third parties. A transmission to third parties, however, takes place in compliance with the provisions of the GDPR and the BDSG as well as other data protection regulations, if and insofar as this is necessary within the framework of a contract that has come into being via our website (contract initiations, contract execution and contract execution), insofar as this is legally prescribed, within the framework of the requirements specified by the respective law and, if applicable, consideration of the interests concerned. Such a case can, for example, be part of a criminal investigation. Such a transmission also takes place, as far as a legally effective consent by it is present.

If you submit your data to us in order to apply for our company as an employee, data will only be transferred to the relevant department or departments within our company.

IV.    Provision of the website and creation of log files

1.        Description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer. 

The following data is collected:

- Information regarding the used browser type and version
- The user’s operating system
- The user's IP address
- Date and time of access

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2.                  Legal basis for the data processing

The legal basis for temporary storage of data and log files is Art. 6 para. 1 lit. f of the GDPR.

3.                  Purpose of the data processing

Temporary storage of IP address by the system is necessary to enable delivery of the website to the user's computer. To this end, the user's IP address must remain stored for the duration of the session. The data is stored in log files to ensure the website's functionality. The data is also used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context. These purposes also encompass our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f of the GDPR.

4.                  Duration of Retention

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for provision of the website, this will be undertaken once the respective session has ended. If the data is stored in log files, this is the case after 14 days at the latest, unless otherwise stated in this DSE.

5.        Objection and removal option

Collection of data for provision of the website and storage of data in log files is absolutely necessary for operation of the website. Consequently, there is no option to object on the part of the user.

V.       Use of cookies

a) Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the internet browser on the user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a distinctive character string that enables unique identification of the browser when the website is accessed again. We use cookies to make our website more user-friendly. Some elements of our website require that the browser's accessing can be identified even after changing the page. The following data is stored and transmitted in the cookies:

- Language settings

We also use cookies on our website which enable analysis of the user's surfing behaviour. The following data can be transmitted in this way:

- Entered search term
- Frequency of page views
- Use of website functions
- Session duration up to 20 minutes
- Campaign tracking - Analysis of the user's origin
- Areas where the user clicks the most
- Bounce rate
- Viewing contact details
- Viewing ratings
- Playing media
- Updating the page
- Add to Favorites
- Sharing content (social media)

The user data collected in this way is pseudonymised via technical precautions. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with users' other personal data. When accessing our website, users are informed by an information banner on the use of cookies for analytical purposes and referred to this data protection declaration. A note is also included in this context as to how the user can disable the storage of cookies in the browser settings. 

b) Legal basis for the data processing
The legal basis for processing personal data using cookies is Art. 6 para. 1 lit. f of the GDPR.

c) Purpose of the data processing 

The purpose of using technically necessary cookies is to simplify use of websites for users. Some features of our website are not offered without the use of cookies. In this case, it is necessary that the browser be recognised even after changing the page.

We require cookies for the following applications: 

- Acceptance of language settings
- Transfer of data for contact forms
- Search results
- Product Consultant
- Product Comparison

The user data collected by technically necessary cookies shall not be used to create user profiles.

The analysis cookies are used to improve the quality of our website and its content. Using analysis cookies, we learn how the site is used and can constantly optimise our service. By making your data anonymous, we record which areas of our website and the media made available are particularly used for our users in terms of content and/or design and are therefore of particular interest to them in order to ensure that such an offer is constantly improved and can be found and updated. For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f of the GDPR.

e) Duration of storage, objection and removal option

Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user you have full control of the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's features in full.

VI.    Newsletter

1.        Description and scope of data processing

You can subscribe to a free newsletter on our website. The data from the input screen is sent to us when you subscribe to the newsletter.

- Email address
- First name
- Surname
- Dealer or endcustomer
- Date of birth (voluntary)

The following data will also be collected upon subscription:

- IP address of the calling computer
- The date and time of registration

During the registration process, your consent is obtained for processing data and reference is made to this Date Protection Declaration.

2.                  Mailchimp

The newsletter is sent via the provider "MailChimp" (provider: Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA). In so doing, we transmit the following data, which is also stored by this provider on a server in the USA, to the provider as our contractual partner for sending newsletters:

- Email address
- First name
- Surname

The data is also evaluated by the provider in order to improve his own services, e.g. by technical optimisation of the dispatch under presentation of newsletters. However, under no circumstances does the provider use the data transmitted to him to pass it on to third parties or to address the person behind the personal data.

According to its own statements, the provider uses the EU/US Privacy Shield on the basis of a certification for data protection (https://mailchimp.com/legal/privacy/?cf. _ga=2.248350592.642654411.1526902929-1842242371.1526902929). According to this, a level of data protection in accordance with European data protection law should be guaranteed when the data is transmitted to the provider.

In addition, we have concluded a contract on order data processing with the provider, according to which the provider is obliged to protect the data of our users and to insure an appropriate level of protection and to process on our behalf, in particular also not to pass the data on to third parties.

3.                  Legal basis for the data processing

The legal basis for processing data after the user registers for the newsletter is, if the user's consent to this has been obtained, is Art. 6 para. 1 lit. a GDPR; in addition, the transmission in accordance with Art. 45 GDPR in connection with the EU/US Privacy Shield is justified.

4.                  Purpose of the data processing

The user's email address is collected in order to deliver the newsletter. Collection of other personal data as part of the subscription process is for preventing the misuse of the services or of the used email address.

5.                  Duration of Retention

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user's email address will therefore be stored for as long as the subscription to the newsletter is active.

6.                  Objection and removal option

The subscription to the newsletter can be cancelled by the user at any time. A link to do this can be found in every newsletter. This also enables withdrawal of consent for storage of personal data collected during the subscription process.

VII.  Registration

1.        Description and scope of data processing

On our website, we offer users the ability to register with the entry of personal data. The data is entered into an input screen, transmitted to us, and stored. This data is not transferred to third parties.

The following data is collected during the registration process:

 Serial number, date of purchase, dealer information (town, name of dealer), first name, surname, postal code, town, street, house number, country, date of birth (optional), email address. optional newsletter registration or participation in market research (survey and collection of individual views on our products and services, their presentation and distribution).

The following data is stored during registration:

- The IP address of the user
- The date and time of registration
- For product registration: first name, last name, address, email address, gender, serial numbers of purchased products, seller designation, date of purchase

The user's consent to processing this data is obtained during the registration process.

2.                  Legal basis for the data processing

The legal basis for processing the data, if the user's consent to this has been obtained, is Art. 6 para. 1 lit. a of the GDPR. If registration is for the fulfilment of a contract to which the user is a party or for the implementation of pre-contractual measures, an additional legal basis for the data processing is Art. 6, para. 1 lit.b of the GDPR.

3.                  Purpose of the data processing

Registration of the user is useful for the warranty processing of our manufacturer's warranty and for the product management of the products manufactured by us. It is subject to the user's consent. If and to the extent that a registration option for the creation of a user account is offered on our website, it is also possible via this user account to register products in order to extend the warranty conditions for certain products of which we are the manufacturer (manufacturer's warranty) with us.

4.                  Duration of Retention

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case for those during the registration process to fulfill a warranty contract (manufacturer's warranty) when the data is no longer required for the execution of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.

5.                  Objection and removal option

As a user you have the option of cancelling the registration at any time. You can change the data stored about you at any time. Please use the contact form provided on our website to send us an email with the email address used for registration. We will then verify your request by contacting you, after which we will delete or amend your request if it is positively verified. If the data is required for the fulfillment of a contract or the implementation of pre-contractual measures, early erasure of data is only possible insofar as contractual or legal obligations do not preclude erasure.

VIII.    Contact form and email contact

1.             Description and scope of data processing

There are contact forms on our website which can be used for electronic contact. If a user accepts this option, the data entered in the input screen will be transmitted to us and stored. These data are (depending on the type of contact form used):

General contact form: name, email address, requests, questions about purchased products, support,

- Spare part enquiries and warranty: name, email address, address, product, serial number, request, date of purchase
- Sales and advertising material trade: concern, email address, company, address

During the sending process, your consent is obtained for processing data and reference is made to this data protection declaration. Alternatively, you can contact us via the provided email address. In this case, the user's personal data that is transmitted along with the email will be stored.The data will not be disclosed to third parties during the course of this. The data is used exclusively for the processing of the conversation.

2.                  Legal basis for the data processing

The legal basis for processing the data, if the user's consent to this has been obtained, is Art. 6 para. 1 lit. a of the GDPR. The legal basis for processing the data transferred in the course of sending an email is Art. 6 Para. 1 lit. f of the GDPR. If the email contact aims at the conclusion of a contract, then an additional legal basis for the processing is Art. 6 Abs. 1 b of the GDPR.

3.                  Purpose of the data processing

The processing of personal data in the input screen is used by us only for processing the contact. In the event of contact by email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process is for preventing the misuse of the contact form and to ensure the security of our information technology systems.

4.                  Duration of Retention

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the contact form input screen and the data that was sent by email, this is the case when the respective conversation with the user has been completed. The conversation will have ended when it is evident from the circumstances that the matter at hand has been conclusively resolved. Personal data that was additionally collected during the sending procedure will be deleted at the latest after a period of seven days.

5.                  Objection and removal option

The user has the option of revoking his or her consent to the processing of personal data at any time. A user who has contacted us by email can object at any time to the storage of his or her personal data. It will not be possible to continue the conversation in this case. All personal data stored in the course of making contact will be deleted in this case if and insofar as this is not contrary to statutory provisions, e.g. under the German Commercial Code or the Tax Code, or any other justification under data protection regulations, which requires storage after weighing up all interests.

IX.     Web analysis by Google Analytics

1.        Scope of the personal data processing

We use the software "Google Analytics" (Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website to analyse the surfing behaviour of our users. The use of this software makes it possible to assign user behavior to a user's pseudonym ID, even across devices.

Terms of use of Google Inc. for Google Analytics:

www.google.com/analytics/terms/de.html policies.google.com

According to its own statements, the provider uses the EU/US Privacy Shield due to certification for data protection (https://support.google.com/analytics/answer/7105316?hl=en). According to this, a level of data protection in accordance with European data protection law should be guaranteed when the data is transmitted to the provider.

In addition, we have concluded a contract on order data processing with the provider, according to which the provider is obliged to protect the data of our users and to insure an appropriate level of protection and to process on our behalf, in particular also not to pass the data on to third parties.

The software sets one or more cookies on the user's end device (see above for cookies). If individual pages of our website are accessed, the following data is stored:

Two bytes of the IP address of the user's calling system

- The called up web page
- The website from which the user has accessed the accessed website (referrer)
- The subpages that are called up from the called up web page
- The time spent on the website
- The frequency with which the website is accessed

The user behaviour information stored in such cookies is automatically transferred to a server of the software provider (Google), which is usually located in the USA, i.e. in a third country outside the EU and the EEA. However, we use the anonymisation of the IP address provided by the software on our website. This will shorten your IP address, which would otherwise have made it possible to identify the respective user, within the member states of the EU and the EEA, before such a transmission, whereby in exceptional cases a reduction can also take place after such a transmission. Under no circumstances will your IP address be combined with other data in order to record and analyse profiles and user behaviour. Google only analyses and displays your website activity in relation to our website as part of our order data processing in order to make information collected in this way available to us as a service. This is also our legitimate interest in data processing.

2.                  Legal basis for processing personal data

The legal basis for the use of Google Analytics is Art 6 Paragraph 1 lit a) GDPR, in addition Art. 6 para. 1 lit a) GDPR, and Art. 6 para. 1 lit. f GDPR, Art. 45 GDPR in conjunction with EU/US Privacy Shield.

3.                  Purpose of the data processing

The processing of users' personal data enables us to analyse the surfing behaviour of our users. We are in a position to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f of the GDPR. By anonymising the IP address, users' interest in protecting their personal data is sufficiently taken into account.

4.                  Duration of Retention

The data processed by us when using our website via the "Google Analytics" service is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

5.             Objection and removal option

Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user you have full control of the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's features in full.

We offer our users on our website the possibility of an opt-out from the analysis procedure. To do this, you must follow the corresponding link. In this way, another cookie is placed on your system, which signals to our system not to store the user's data. If the user deletes the corresponding cookie from his own system in the meantime, he must set the opt-out cookie again. By changing the security settings of your Internet browser, you can prevent cookies from being stored in the devices it uses. However, this can lead to restrictions in the use of Internet pages

You can also prevent the processing of your data collected in cookies by the Google Analytics software by using software provided by Google Inc. (browser add-on for deactivating Google Analytics), which you can download and use under the link  tools.google.com/dlpage/gaoptout. The provider is exclusively Google Inc. so that its terms of use and, where applicable, restrictions must be observed. It cannot be guaranteed that the software provider makes this software available for all operating systems and/or devices.

X.       Web analysis by Sizmek

1.        Scope of the personal data processing

On our website we use the software "Sizmek" (provider: Sizmek Inc., 401 Park Avenue S, 10016 New York City / USA) to analyse the surfing behaviour of our users. The use of this software makes it possible for us, on the basis of your interests and your user behaviour on our website, to place advertising material and advertisements relating to you within the offers of third parties. In addition, we can determine your interaction with our advertisements for operational evaluation.

According to its own statements, the provider applies the EU/US Privacy Shield (https://www.sizmek.com/privacy-policy/) on the basis of a certification for data protection. According to this, a level of data protection in accordance with European data protection law should be guaranteed when the data is transmitted to the provider. 

In addition, we have concluded a contract on order data processing with the provider, according to which the provider is obliged to protect the data of our users and to insure an appropriate level of protection and to process on our behalf, in particular also not to pass the data on to third parties.

The software places one or more cookies on the user's end device (see above for cookies) or uses other techniques, e.g. advertising pixels on our website or in our advertisements and "statistical identification", which determine to which advertising a user reacts.

If individual pages of our website are accessed, the following data is recorded and stored in a non-personal or non-personal manner:

information about the Internet browser you are using

- Day/time
- The type of hardware and software used on your device
- The time spent on the website
- The frequency with which the website is accessed
- Internet pages called up by the device
- Advertisements displayed on the device
- Your interaction with ads displayed on your device
- approximate geographical location of the terminal's Internet service provider
- demographic data (e.g. gender and age groups and their Internet activity)

The non-personal or related user behavior information stored in cookies or processed by other techniques is automatically transferred to a server of the software provider (Sizmek), which is usually located in the USA, i.e. in a third country outside the EU and the EEA. Under no circumstances will your data be merged in order to be able to record and analyse individual profiles and user behaviour in this way. This is also our legitimate interest in data processing.

2.                  Legal basis for processing personal data

The legal basis for the use of Google Analytics is Art 6 Paragraph 1 lit. a) GDPR, in addition Art. 6 para. 1 lit. a) GDPR, and Art. 6 para. 1 lit. f GDPR, Art. 45 GDPR in conjunction with EU/US Privacy Shield.

3.                  Purpose of the data processing

The processing of users' personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are in a position to design our advertising media and advertisements in a targeted manner and to measure and statistically evaluate the success of advertisements.

 This helps us to continuously improve our website and its user-friendliness. For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f of the GDPR. By anonymising the IP address, users' interest in protecting their personal data is sufficiently taken into account.

4.                  Duration of Retention

The data processed by us when using our website via the  "Google Analytics"  service is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. In all other respects, data is only stored to the extent and as long as this is necessary in the context of the use of the service.

5.             Objection and removal option

As a user, you have full control over the use of cookies used by Sizmek. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's features in full.

By changing the security settings of your Internet browser, you can prevent cookies from being stored in the devices it uses. However, this can lead to restrictions in the use of Internet pages.

You can also object to the use of Sizmek via an opt-out tool at www.sizmek.com/privacy-policy-de/ at any time. To do this, simply follow the instructions described under this link, which you can call up on your respective mobile device.

XI.     Doubleclick Ad Exchange Buyer

1.         Scope of the personal data processing

We use the software "Ad Exchange Buyer" (Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website to analyse the surfing behaviour of our users. The use of this software makes it possible for us to effectively design advertising material and advertisements on Internet pages that concern you on the basis of your interests and your user behaviour. Privacy Policy of Google Inc policies.google.com/privacy

According to its own statements, the provider applies the EU/US Privacy Shield (https://www.sizmek.com/privacy-policy/) on the basis of a certification for data protection. According to this, a level of data protection in accordance with European data protection law should be guaranteed when the data is transmitted to the provider.

In addition, we have concluded a contract on order data processing with the provider, according to which the provider is obliged to protect the data of our users and to insure an appropriate level of protection and to process on our behalf, in particular also not to pass the data on to third parties.

The software sets one or more cookies on the user's end device (for cookies, see above), which determine what advertising reference the user has when accessing Internet pages and to which advertising a user reacts.

If individual pages of our website are accessed, the following data is recorded and stored in a non-personal or non-personal manner:

- information about the Internet browser you are using
- Product search keyword
- (previously) visited websites

The user behaviour information stored in such cookies is automatically transferred to a server of the software provider (Google), which is usually located in the USA, i.e. in a third country outside the EU and the EEA. A personal reference is not established. Under no circumstances will your data be merged in order to be able to record and analyse individual profiles and user behaviour in this way. This is also our legitimate interest in data processing.

2.                  Legal basis for processing personal data

The legal basis for the use of the Google Ad Exchange Buyer service is Art. 6 para. 1 lit. a) GDPR, i.Ü. Art. 6 para. 1 lit. f GDPR, Art. 45 GDPR in conjunction with EU/US Privacy Shield.

3.                  Purpose of the data processing

The processing of users' personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are in a position to design our advertising media and advertisements in a targeted manner and to measure and statistically evaluate the success of advertisements. This helps us to continuously improve our website and its user-friendliness. For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f of the GDPR. By anonymising the IP address, users' interest in protecting their personal data is sufficiently taken into account.

4.                  Duration of Retention

The data processed by us when using our website via the  "Google Analytics"  service is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. In all other respects, data is only stored to the extent and as long as this is necessary in the context of the use of the service.

5.             Objection and removal option

As a user, you have full control over the use of cookies used by Google as part of the Ad Exchange Buyer service. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's features in full. You can also set your browser to block cookies from the "googleadservices.com" domain so that cookies from other providers are permitted by you.

By changing the security settings of your Internet browser, you can prevent cookies from being stored in the devices it uses. However, this can lead to restrictions in the use of Internet pages.

XII.  Google Tag Manager

1.        Scope of the personal data processing

On our website we use the service "Google Tag Manager" (provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The Tag Manager is a service with which we can manage website tags (e.g. tracking code) via an interface. The tool provides the administration of other "tags" (e.g. Google Analytics), which in turn may collect data. The Google Tag Manager does not access this data. If deactivation occurs at domain or cookie level, it remains in use for all tracking tags, which are implemented by Google Tag Manager. Google LLC in the USA participates in the EU/US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI), which is intended to guarantee an adequate level of data protection when transmitted to this provider outside the EU/EEA.

2.        Legal basis for processing personal data

If you have given your consent, the legal basis for the use of Google Tag Manager is Art. 6 Paragraph 1 lit. a GDPR, also Art. 6 para. 1 lit. f GDPR, Art. 45 GDPR in conjunction with EU/US Privacy Shield.

3.         Purpose of the data processing

The use of the "Google Tag Manager" service improves the programming and administration of our website with regard to text (e.g. tracking code, Google Analytics) and the functionality of the website.

4.                  Duration of Retention

No personal data is collected via the service, but possibly via the managed day (with us Google Analytics, see above ) web analysis by Google Analytics.

5.                  Objection and removal option

You can exclude the Service by deactivating the "Javascript" function within the software you are using on the device with which you are accessing our website. If deactivation occurs at domain or cookie level, it remains in use for all tracking tags, which are implemented by Google Tag Manager.

XIII.          Social Networks

1. Description and scope of data processing

Our website provides links (identified by a pictogram) to other websites of our Internet presence in social networks, enabling us to call up our respective website in these social networks.

(1) Facebook is a social network of Facebook Ireland Limited (Hanover Reach, 5-7 Hanover Quay, Dublin 2 Ireland). We have integrated our company website into Facebook 

(2) Youtube is a social network of YouTube LLC (operator) (901 Cherry Ave.

San Bruno, CA 94066 USA). We have integrated our company website into YouTube.

(3) Instagram is a social network of Instagram LLC, (operator) (1601 Willow Rd, Menlo Park, CA, USA. We have integrated our company website on Instagram.

(4) Pinterest is a social network of Pinterest Europe Ltd. (operator) (Palmerston House, 2nd Floor) Fenian Street Dublin 2, Ireland). We have integrated our company website on Pinterest.

(These are hereinafter referred to as “social network(s)”)

 By clicking on the link (hyperlink) on our website, which refers to the website of the respective social network, you call up the website of the operator of the social network. If necessary, you may need to log into your social network customer account to fully access our website on the website of the respective social network. We may then have access to your public information on the social network or information that you share for that particular application on the social network. The public information can be viewed by any third party. Such information includes in particular your name, your profile, cover pictures and photographs, gender, networks, user name (also called Facebook URL on Facebook) and user ID (also called Facebook ID on Facebook), comments and contributions (user content). In accordance with contractual agreements between the operators of the respective social networks, information may also be exchanged between these networks, e.g. on the social network "Pinterest", if you sign up for this service with a Facebook or Google account in accordance with the contractual conditions of the respective operators. Details of personal data processed within the social network are decided by your contractual relationship with the operator of the social network and its respective data protection regulations and data protection regulations to which reference is made in this respect. These are available on the social network website. They are also used and processed by us only within the social network within the framework of the functions and procedures offered there in each case. Personal data that we use within our Internet presence on Facebook will not be transmitted by us to third parties unless and to the extent that nothing to the contrary has been expressly agreed to or permission has been given for such transmission. This may be the case, for example, if you request a newsletter (see "Newsletter" above) about our companies.

2. Legal basis for data processing

The legal basis for processing the data, if the user's consent to this has been obtained, is Art. 6 para. 1 lit. a of the GDPR.

3. Purpose of the data processing

We use your personal data exclusively for the purpose of offering and making them available in the respective service in social networks. Any further use will only take place if your legally effective consent is available or we are legally obliged to do so.

4. Duration of storage

The data is stored for the duration of the link to our website in the social network and for the duration of the inventory of our website in the social network.

5. Objection and removal option

The user has the option of revoking his or her consent to the processing of personal data at any time. Such a revocation can be given to us at any time electronically by email, by post, by fax or (remotely) orally. You can also use the contact form provided on the website or the contact data given in the imprint of the website as well as the contact data given next to the contact form on our website.

All personal data stored by us in the course of using our services in social networks will be deleted in this case, provided that data protection regulations which require a legal or according to the purpose of the contract necessary storage of the respective data do not conflict.

You can also remove or restrict a link between your data and our Internet service by making settings in your social media account.

XIV.         Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights with respect to the responsible party:

1.        Right to information

You can request that the responsible party confirm whether we will process personal data that concerns you. If such processing is taking place, you can request to be informed by the responsible party regarding the following information:

(1) the purposes for processing the personal data; 

(2) the categories of personal data being processed;

(3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;

(4) the planned storage duration of personal data concerning you or, if specific information in this respect is not possible, criteria for determining the storage period; 

(5)the existence of a right of rectification or deletion of personal data that concerns you or of a restriction on processing by the responsible party or of a right to object to such processing;

(6)the existence of a right of appeal to a supervisory authority;

(7) any available information on the origin of the data if the personal data has not been collected from the data subject;

(8) the existence of automated decision-making, including profiling in accordance with Art. 22 Par. 1 and 4, GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information regarding whether your personal information will be transmitted to a third-party country or an international organisation. In this respect, you can request the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transmission.

2.        The right of rectification

You have a right of rectification and/or completion with respect to the responsible party if the personal data processed concerning you is incorrect or incomplete. The controller shall make the correction immediately.

3.                  The right to limitation of processing

Under the following conditions, you may request that the processing of personal data concerning you be restricted if:

(1) you dispute the accuracy of the personal data concerning you for a period that enables the responsible party to verify the accuracy of the personal data;

(2) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;

(3) the responsible party does not need the personal data for longer than the processing's purposes, but you need it for the assertion, exercise or defence of legal claims, or

(4) you object to the processing in accordance with Art. 21, Para. 1, GDPR and it is not yet clear whether the legitimate reasons of the responsible party outweigh your reasons.

Where processing of the personal data that concerns you has been restricted, such data – apart from being stored – may be processed only with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on the grounds of an important public interest of the Union or of a Member State.

If the processing restriction has been done in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted.

4.      Right to deletion

a)        Deletion obligation

You may request that the responsible party delete the personal data that concerns you immediately, and the responsible party will be obliged to delete this data immediately if one of the following reasons applies:

(1)       the personal data that concerns you is no longer necessary for the purposes for which it was collected or otherwise processed;

(2)       you revoke your consent to the processing pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR and there is no other legal basis for processing;

(3)       pursuant to Art. 21 Para. 1 GDPR, you object to the processing and there are no overriding justifiable reasons for the processing, or Art. 21 Para. to the processing pursuant to Art. 21 Para. 2 GDPR;

(4)       the personal data that concerns you has been processed unlawfully;

(5)       the deletion of personal data is required to comply with legal obligations according to Union law or the laws of the Member States to which the responsible party is subject;

(6)       the personal data that concerns you has been collected in connection with offered information society services pursuant to Art. 8 Para. 1, GDPR.

b)        Passing information to third parties

If the responsible party has made the personal data that concerns you public and if the responsible party is obliged for its deletion pursuant to Art. 17, Para. 1 of the GDPR, that responsible party shall take appropriate measures, including technical means, while taking into account available technology and implementation costs, to inform the parties responsible for data processing who process the personal data, that you as the person concerned have requested deletion of all links to such personal data or of copies or replications of such personal data.

c)        Exceptions

The right to deletion does not exist insofar as the processing is necessary

(1)       to exercise the right of freedom of expression and information;

(2)       for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the responsible party is subject or for the performance of a task in the public interest or in the exercise of official authority conferred to the responsible party;

(3)       for reasons of public interest in the field of public health in accordance with Art. 9 Para. 2 lit. h and i, as well as Art. 9 Para. 3, GDPR;

(4)       for archiving purposes in the interest of public, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, to the extent that the law referred to in (a) is likely to render impossible or seriously prejudicial the attainment of the objectives of such processing; or

(5)       to assert, exercise or defend legal claims.

5.      Right to information

If you have exercised your right to have the responsible party correct, delete or limit the processing, this party is obliged to inform all recipients to whom the personal data that concerns you has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.

It is your right to have the controller inform you regarding such recipients.

6.        Right to data portability

You have the right to obtain your personal data, which you have provided to the controller, in a structured, commonly used and machine-readable format. In addition, you have the right to pass this data on to another responsible party without obstruction by the responsible party to whom the personal data was provided, insofar as

(1)       the processing is based on consent pursuant to Art. 6 Para. 1 lit. a, GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b GDPR and

(2)       the processing is undertaken using automated procedures.

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one responsible party to another responsible party, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the responsible party.

7.        Right to object

You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning you at any time, which is carried out in accordance with Art. 6 para. 1 lit. e or lit. f, GDPR; the same applies to profiling based on these provisions.

The responsible party will no longer process the personal data that concerns you, unless the party can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data that concerns you is being processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data that concerns you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.

If you object to processing that is for direct marketing purposes, the personal data that concerns you will no longer be processed for these purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

8.                  The right to revoke the data protection declaration of consent

You have the right at any time to revoke your data protection declaration of consent. The withdrawal of consent shall not affect the lawfulness of processing taking place on the basis of this consent before its revocation.

9.        Automated decision in individual cases, including profiling

You have the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against you or significantly impairs you in a similar manner. This does not apply if the decision

(1) is necessary for the conclusion or fulfilment of a contract between you and the responsible party;

(2) is permissible on the basis of legislation of the Union or the Member States, to which the responsible party is subject, and these laws contain adequate measures to safeguard your rights and freedoms, as well as your legitimate interests, or

(3) is undertaken with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9, Para. 1 GDPR, unless Art. 9 para. 2 lit. a or g of the GDPR and appropriate measures have been taken to protect your rights and freedom as well as your legitimate interests.

In the cases referred to in (1) and (3), the responsible party shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person on the part of the responsible party, to state his or her own position and to challenge the decision.

10.  The right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of GDPR.

The supervisory authority with which the appeal has been lodged shall inform the appellant of the status and results of the appeal, including the possibility of a judicial remedy under Art. 78 GDPR.

Updated: 22.05.2018