Data protection
I. Name and address of the controller
The controller within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations for the website
www.syniotec.de
together with its subpages and for the use of the SAM platform (hereinafter “SAM”) is
Responsible person:
syniotec GmbH,
represented by the managing directors Manuel Kimanov, Rezi Chikviladze
Am Wall 146, 28195, Bremen
Phone: +49 421 83679700
E-mail: info@syniotec.com
Website:
https://syniotec.de/
II General information on data processing
1. scope of the processing of personal data and legal bases of the processing
We only process the personal data of our users to the extent permitted by data protection law. This is the case in particular in accordance with the following legal bases:
- Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a GDPR as the legal basis.
- Insofar as the processing of personal data is necessary for the performance of a contract to which you are a party, Art. 6 para. 1 lit. b GDPR as the legal basis. This also applies to processing operations that are carried out at your request in order to implement pre-contractual measures.
- Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR as the legal basis.
- In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as the legal basis.
- If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR as the legal basis for processing.
2. data deletion and storage duration
We store your data for as long as this is necessary for the provision of our online offering and the associated services or for the provision of our services or for as long as we have a legitimate interest in further storage. In all other cases, we delete your personal data with the exception of data that we must continue to store in order to fulfill contractual or statutory (e.g. tax or commercial law) retention periods (e.g. invoices). Contractual retention periods may also result from contracts with third parties (e.g. holders of copyrights and ancillary copyrights). We block data that is subject to a retention period until the period expires.
III. Disclosure of data to third parties; service providers
1. disclosure of data to third parties
Your personal data will only be disclosed by us to third parties if this is necessary for the fulfillment of the contract, if we or the third party have a legitimate interest in the disclosure or if you have given your consent. If data is transmitted to third parties on the basis of a legitimate interest, this is explained in these data protection provisions. In addition, data may be transferred to third parties if we are obliged to do so by law or by an enforceable official or court order.
2nd service provider
We reserve the right to use service providers for the collection and processing of data. Service providers only receive the personal data from us that they need for their specific activity. For example, your e-mail address may be passed on to a service provider so that they can deliver a newsletter you have ordered. Service providers can also be commissioned to provide server capacity. Service providers are generally integrated as so-called processors who may only process the personal data of the users of this online service in accordance with our instructions.
Insofar as service providers are not already named in this Privacy Policy, these are the following categories of service providers:
- IT service provider (technical support), [Georgien]
- IT service provider (hosting), [Georgien]
- IT service provider (push notifications), [Georgien]
- Customer support, [Deutschland]
3. transfer of data to non-EEA countries
We also transfer personal data to third parties or processors based in non-EEA countries. If this is the case and the European Commission has not issued an adequacy decision for these countries (Art. 45 GDPR), we ensure that the recipient either has an adequate level of data protection (e.g. the agreement of so-called EU standard contractual clauses of the European Union with the recipient) or that our users have given sufficient consent before transferring the data. You can obtain from us an overview of the recipients in third countries and a copy of the specifically agreed regulations to ensure an adequate level of data protection. Please use the information in the Contact section.
IV. Data collection when visiting our website
1. description and scope of data processing
If you only use our website for informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
(1) Information about the browser type and version used
(2) The user’s operating system
(3) The user’s internet service provider
(4) Date and time of access
(5) Websites from which the user’s system accesses our website
(6) IP address of the user
(7) Websites that are accessed by the user’s system via our website
The data may also be stored in the log files of our system. This data is not stored together with any personal data of the user other than that specified in this Section IV. 1. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to your computer. For this purpose, your IP address must remain stored for the duration of the session. Storage in log files takes place to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.
V. Contact form and e-mail contact
We use the Customer Relationship Management (CRM) service “Zendesk” on our websites and on SAM. The tool is operated by Zendesk Inc, 989 Market Street #300, San Francisco, CA 94102, USA. Zendesk is used for the integration of contact forms and the forwarding of your inquiries to us. The use of Zendesk is optional. If you do not agree to Zendesk collecting your data, we offer you alternative contact options for submitting service requests by telephone or post. In order to use Zendesk, you must provide at least one correct e-mail address. The service can also be used pseudonymized. There is no further disclosure to third parties. Further information can be found in Zendesk’s privacy policy.
In addition, cookies are set with the help of Zendesk. These cookies are technically necessary to ensure the technical functionality of the website and to protect the website from bot-driven attacks.
The following data may be collected and processed as part of the contact forms that are integrated using Zendesk:
– E-mail address
– Name
– Company
– Phone number
Insofar as the data used in the contact forms is used to provide contractual services to data subjects, the legal basis for processing is Art. 6 para. 1 lit. b GDPR. Furthermore, Art. 6 para. 1 lit. a GDPR as the legal basis if you have consented to the data processing.
The data processing that takes place via the cookies is based on Art. 6 para. 1 lit. f GDPR – a legitimate interest. Our legitimate interest is that we need to ensure the functionality and security of our website. The personal data is stored for as long as it is required to fulfill the purpose of processing. The data will be deleted as soon as it is no longer required for the purpose for which it was collected.
As part of processing via Zendesk, data may be transferred to the USA. The security of the transmission is regularly guaranteed by standard contractual clauses and binding corporate rules. If these standard contractual clauses and binding corporate rules are not sufficient to establish an adequate level of security, Art. 49 para. 1 lit. a GDPR serve as the legal basis.
VI Cookies/web analytics services and consent management tool
On our websites, we use cookies and other web analytics services (collectively “cookies”) that are technically necessary for the use of our websites or that serve to continuously optimize the presentation and content of our website, for example by using cookies to improve the user experience. record their use statistically. Cookies are small text files that are assigned to the browser you are using and stored on your hard disk by means of a characteristic string of characters and through which certain information flows to the site that sets the cookie. Cookies cannot run programs or transfer viruses to your computer and therefore cannot cause any damage.
Insofar as the use of cookies is technically necessary for the use of our website, we base the processing of your data on Art. 6 para. 1 lit. f) GDPR. In addition, the legal basis for the processing of your data is solely your consent in accordance with Art. 6 para. 1 lit. a) GDPR.
We use the consent management tool from Cookie Hub to obtain and manage your consent. You can also revoke your consent – if you have given it to us – at any time for the future by clicking on the “Cookie settings” cogwheel at the bottom left.
We use the following cookies:
1. google analytics
This website and SAM use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called cookies and similar technologies which are stored on your computer and which enable your use of the website to be analyzed. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transferred to a Google server in the USA and stored there.
This website and SAM use Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymization of the IP address by shortening it and excludes direct personal reference. By extension, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
Google will use this information on our behalf to evaluate your use of the website and SAM, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again):
https://tools.google.com/dlpage/gaoptout?hl=de
You can find more information on how Google Analytics handles user data in Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de
2. hotjar
This website and SAM use the web analysis service Hotjar to analyze usage. Hotjar Ltd (St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta) complies with the provisions of the Data Protection Act, Chapter 440 of the Laws of Malta, which implements all relevant European Union directives on data protection. Hotjar is a service that analyzes the behavior and feedback of users on websites through a combination of analysis and feedback tools. Hotjar provides syniotec GmbH with an “overall picture” of how the end user experience and website performance can be improved. The following information is collected for this purpose: The IP address of the end device (it is collected and stored in anonymized format), resolution of the screen/display, type of end device, operating system, browser type, geographical location (country only), preferred language and mouse events (movements, position and clicks). The data collected is transferred and stored via an encrypted connection to servers located in Ireland (EU). The sole purpose of this data collection is to improve the user experience on Hotjar-based websites. Personal data is neither collected nor stored. You can find more information on Hotjar’s compliance with data protection here: www.hotjar.com/privacy. You can go to Hotjar’s opt-out page and by clicking on “Deactivate Hotjar” under https://www.hotjar.com/legal/compliance/opt-out refuse the collection of your data by Hotjar when visiting the syniotec websites at any time. The legal basis is Art. 6 para. 1 S.1 lit. f GDPR.
3. google tag manager
Our website also uses the Google Tag Manager, which is provided for users from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other users by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (together “Google”). The Tag Manager is used to manage tracking tools and other services, so-called website tags. A tag is an element that is stored in the source code of our website, for example to record predefined usage data. The Google Tag Manager triggers other tags, which in turn may collect data. Some of the data is stored on a Google server in the USA. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
The legal basis for the use of Google Tag Manager is Art. 6 para. 1 lit. f GDPR, based on our interest in the efficient management of the tools we use.
You can also find more information in Google’s information on the Tag Manager.
4. google adwords
We use Google Adwords to draw attention to our services on external websites with the help of advertising material (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the advertising campaign data. We do this in order to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.
These advertising materials are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies generally lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
These cookies enable Google to recognize your Internet browser. If a user visits certain pages of an Adwords customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.
You can prevent participation in this tracking process in various ways:
a) By setting your browser software accordingly, in particular by suppressing third-party cookies, you will not receive any ads from third-party providers;
b) By deactivating cookies for conversion tracking by setting your browser so that cookies from the domain
https://adssettings.google.com/authenticated
are blocked,
https://www.google.de/settings/ads
whereby this setting is deleted when you delete your cookies;
c) By deactivating the interest-based ads of providers that are part of the “About Ads” self-regulation campaign via the link
http://www.aboutads.info/choices
whereby this setting is deleted when you delete your cookies;
d) By permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browsers under the link
http://www.google.com/settings/ads/plugin
. We would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
Further information on data protection at Google can be found here:
http://www.google.com/intl/de/policies/privacy
and
https://services.google.com/sitestats/de.html
.
5. zoho
We use Zoho CRM on this website. The provider is Zoho Corporation GmbH, Trinkausstr. 7 40213 Düsseldorf, Germany (hereinafter “Zoho CRM”).
Among other things, Zoho CRM enables us to manage existing and potential customers and customer contacts and to organize sales and communication processes. The use of the CRM system also enables us to analyze and optimize our customer-related processes. The customer data is stored on the Zoho CRM servers. Details on the functions of Zoho CRM can be found here: https://www.zoho.com/de/crm/help/getting-started/key-features.html
The use of Zoho CRM is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most efficient customer management and customer communication possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time.
Data transfer to third countries outside the European Union is based on the standard contractual clauses of the EU Commission. Details can be found here:
For details, please refer to the Zoho CRM privacy policy:
https://www.zoho.com/privacy.html
and
https://www.zoho.com/gdpr.html
.
Data processing agreement: We have concluded a data processing agreement with Zoho CRM. This is a contract required by data protection law, which ensures that Zoho CRM processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
6. salesViewer®
This website uses SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research and optimization purposes on the basis of the website operator’s legitimate interests (Art. 6 (1) (f) GDPR).
For this purpose, a javascript-based code is used to collect and use company-related data. The data collected using this technology is encrypted using a non-reversible one-way function (known as hashing). The data is immediately pseudonymized and not used to personally identify the visitor to this website.
The data stored within the framework of Salesviewer® will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.
You can object to the collection and storage of data at any time with effect for the future by clicking on this link
https://www.salesviewer.com/opt-out
to prevent SalesViewer® from collecting data on this website in the future. An opt-out cookie for this website is stored on your device. If you delete your cookies in this browser, you must click this link again.
VII Use of social plugins
We use social plugins (hereinafter referred to as “social plugins” or “plugins”) from the following providers on our website:
1. facebook
Plugins from Facebook; Facebook is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). The plugins are marked with a Facebook logo or the addition “Social plugin from Facebook” or “Facebook Social Plugin”. An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins
Information on data protection at Facebook can be found here:
http://www.facebook.com/policy.php
2. instagram
Plugins from Instagram; Instagram is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera”. An overview of the Instagram plugins and their appearance can be found here:
https://help.instagram.com/2284971015132274
Information on data protection at Instagram can be found here
https://help.instagram.com/155833707900388/
3. twitter
Plugins from Twitter; Twitter is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). An overview of the Twitter plugins and their appearance can be found here:
https://developer.twitter.com/en
Information on data protection on Twitter can be found here:
https://twitter.com/privacy
4. LinkedIn
Plugins from LinkedIn; LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA (“LinkedIn”). An overview of the LinkedIn plugins and their appearance can be found here: https://developer.linkedin.com/plugins
Information on data protection at LinkedIn can be found here:
https://www.linkedin.com/legal/privacy-policy
5. xing
Plugins from Xing; Xing is operated by XING AG, Dammtorstraße 30, 20354 Hamburg, Germany (Xing). An overview of the XING buttons and their appearance can be found here: https://dev.xing.com/
Information on data protection at Xing can be found here:
https://dev.xing.com/plugins/share_button/privacy_policy
6. grds. How plugins work
With the aforementioned social plugins, we want to give you the opportunity to communicate directly with the provider of the respective plugin, e.g. by clicking on a link. link this website there.
When using the plugins, your Internet browser establishes a direct connection to the servers of the respective social network. In this way, the respective provider receives the information that your Internet browser has accessed the corresponding page of our online offering, even if you do not have a user account with the provider or are not currently logged into it. Log files (including the IP address) are transmitted directly from your Internet browser to a server of the respective provider and may be stored there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider – if you do not want this, log out of the respective provider.
The provider or its server may be located outside the EU or the EEA (e.g. in the USA). Insofar as the providers of the social plugins transmit data to servers in the USA, we will only permit such transmission if you consent to such data transmission to the USA when visiting this website in accordance with Art. 49 (1) GDPR. 1 lit. a) GDPR have consented.
If you do not want the plug-in providers to receive the data collected via this Internet portal and possibly store or use it further, you should not use the respective plug-ins. You can also completely prevent the plugins from loading with the help of add-ons for your browser, so-called script blockers.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of the respective providers provided above. There you will also find further information on your rights in this regard and setting options to protect your privacy.
The integration of social plugins on our website is in the interest of an appealing and contemporary online presentation of our company. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR represent.
VIII. YouTube
We have uploaded videos from the video platform of YouTube, LLC, 901 Cherry Ave. San Bruno, CA 94066, USA (“YouTube”) into our online offer, which is based on
http://www.YouTube.com
and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned below be transmitted.
Just by visiting our website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, log files (including the IP address) are transmitted directly from your Internet browser to a YouTube server and may be stored there. This takes place regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.
Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and settings options to protect your privacy:
https://www.google.de/intl/de/policies/privacy
.
Insofar as YouTube transmits data to servers in the USA, we will only allow such transmission if you consent to such data transmission to the USA in accordance with Art. 49 para. 1 lit. f GDPR when visiting this website. 1 lit. a) GDPR have consented.
The integration of YouTube is in the interest of presenting essential product information to the customer and an appealing presentation of our online offering. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR represent.
IX. Google Maps
We use Google Maps on this website and SAM. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. (“Google”). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.
When you visit our website and use SAM, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, log files (including the IP address) are transmitted directly from your Internet browser to a Google server and may be stored there. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy:
http://www.google.de/intl/de/policies/privacy
.
Insofar as Google transmits data to servers in the USA, we will only permit such transmission if you consent to such data transmission to the USA when visiting this website in accordance with Art. 49 para. 1 lit. a) GDPR have consented.
The integration of Google Maps is in the interest of an appealing and up-to-date online presentation of our company. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR represent.
X. Use of the SAM platform
If you are a user of our SAM platform, we process the following personal data:
- Names of SAM users
- Name of the SAM user who reported an error
- Directorate / area of the SAM user who reported an error
- Attachments, possibly screenshots of the SAM user’s own screen who has reported an error
- Company e-mail of SAM users
- Browser used by the SAM user
- url / link of the SAM environment used by the SAM user
The processing is carried out in order to provide our contractually agreed SAM services. The processing is therefore carried out on the basis of Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. c GDPR.
SAM uses the jira ticket system, including the jira Issue Collector, to record an error message from SAM. The provider of jira is Altlassian. When you report an error from SAM via the jira Issue Collector, the following personal data is collected via the systems of: Name and e-mail of the SAM user reporting the error or, if different, of the SAM user who noticed the error, any personal data visible on the screenshot of the SAM user’s screen to be attached to describe the error, the browser used by the SAM user and the URL of the SAM environment used by the SAM user.
For more information on jira and its processing of personal data, please refer to Altlassian’s privacy policy (
https://www.atlassian.com/legal/privacy-policy
).
XI. Newsletter
On our website we offer you the opportunity to subscribe to our newsletter. In order to ensure that no errors have been made when entering the email address and that it can be assigned to the actual owner, we use the so-called double opt-in procedure with the help of our service provider zoho campaigns: After you have entered your e-mail address in the registration field, we will send you a confirmation link. Only when you click on this confirmation link will your e-mail address be added to our mailing list. You can revoke your consent at any time with effect for the future. All you need to do is send a short email to info@syniotec.com.
After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist if this is necessary to prevent future mailings. The data from the blacklist is only used for this purpose and is not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time.
XII Rights of the data subject
The applicable data protection law grants you comprehensive data subject rights (information and intervention rights) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:
1. right to information pursuant to Art. 15 GDPR
In particular, you have a right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, if applicable, meaningful information on the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed of the guarantees pursuant to Art. 46 GDPR if your data is transferred to third countries;
2. right to rectification pursuant to Art. 16 GDPR
You have a right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored by us;
3. right to erasure pursuant to Art. 17 GDPR
You have the right to request the erasure of your personal data if the requirements of Art. 17 para. 1 of the GDPR. However, this right does not exist in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
4. right to restriction of processing pursuant to Art. 18 GDPR
You have the right to demand the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse to delete your data due to inadmissible data processing and instead demand the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;
5. right to information pursuant to Art. 19 GDPR
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
6. right to data portability pursuant to Art. 20 GDPR
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller, insofar as this is technically feasible;
7. right to revoke consents granted pursuant to Art. 7 para. 3 GDPR
You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;
8. right to lodge a complaint pursuant to Art. 77 GDPR
If you believe that the processing of your personal data violates the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with the supervisory authority responsible for us. Alternatively, you can contact the data protection authority in your place of residence, which will then forward your request to the competent authority.
Due to our registered office in Bremen, the supervisory authority responsible for us is
The State Commissioner for Data Protection and Freedom of Information, Arndtstraße 1, 27570 Bremerhaven
RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
XII. Further information and contacts
If you have any further questions on the subject of data protection, please contact us at the address given in Section I above.
