Data protection is our top priority
As a matter of principle, your data transmitted via our online forms will be transmitted securely and encrypted to us. As a result, access by unauthorized third parties can be excluded. We use the SSL process to which our website has been certified by Host Europe. Information about our customers is important to us and helps us to optimize our offerings. We guarantee that we do not sell or rent any customer information. We only share information with our affiliates to the extent described below.
Our data protection officer
The German Doctors e.V. is advised by an external data protection officer. If you have questions about data protection, please contact Mr. Ralf A. Lanz: firstname.lastname@example.org
Responsible body within the meaning of the Federal Data Protection Act is the
German Doctors e.V.
Provision and use of the website
When calling and using our website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file. When you use our website, we collect the following information that is technically necessary for us to display our website and to ensure its stability and safety:
- IP address of the requesting computer
- Date and time of request or access
- Time Zone Difference to Greenwich Mean Time (GMT)
- Content of the request
- Name and URL of the retrieved file
- Access status / HTTP status code respectively transferred amount of data
- Website requesting or accessing (Referrer URL)
- used browser and, if applicable, the operating system of your computer and its interface as well as the name of your access provider
- Language and version of the browser software
For the mentioned data processing Art. 6 para. 1 lit. f GDPR serves as legal basis. The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard the legitimate interests of our company. The mentioned data for the display of the website are usually stored for 14 days. The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user. Further storage may be made in individual cases if required by law.
Donation and order forms
We collect personal data in the form of your donation form in the form of your name, address and contact details, if necessary your wishes for donation use, donation amount and frequency, if you need a donation receipt and if you would like to receive regular information from us. Furthermore, we collect your information about the payment method and, if necessary, your account number, PayPal ID or credit card information. In addition, it may be possible to make the donation on behalf of another person as a gift donation, so that you can specify the name of the donor, the cause of the donation and a message to the recipient. This information is used to issue the gift donation certificate. With donation actions we raise the donation goal and duration of the donation action as well as a message to the supporters of the action.
In the contact or order form you can tell us your material requirements, if necessary with a message to us, as well as your agreement to the principles of the dispenser.
Information for applicants
If you submit an unsolicited application to German Doctors e.V. or apply for an advertised position, we process the personal data you provide to us on the basis of Art. 6 (1) b DSGVO for the purpose of carrying out pre-contractual measures at the request of the data subject, as well as Art. 6 (1) c DSGVO for the purpose of fulfilling a legal obligation to which we are subject as the controller. The purpose of the processing is the implementation of application procedures to recruit new employees. The application documents are stored for a maximum of six months after completion of the application process, so that any follow-up questions about the application can be answered and obligations to provide evidence from the regulations on equal treatment of applicants can be fulfilled. If storage beyond this period is desired, the consent of the person concerned will be obtained.
Commenting on the blog
On our blog (https://www.german-doctors.de/blog/) users can leave individual comments on individual contributions. The comments can be read by all users and commented on again. If you leave a comment, not only the comments you leave behind will be saved but also the details of the time you entered your comments and your chosen username (pseudonym). Furthermore, the so-called server log files (browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of server request, IP address) and your e-mail address are also logged. The storage of this data is for evidence and for security reasons in case you violate the rights of third parties by posting a comment or posting illegal content. There is no disclosure of this personal data to third parties, unless such disclosure is required by law or serves our legal defense.
Cookies and Reach Measurement
If you do not want any cookies to be stored on your computer, you are requested to deactivate the corresponding option in your browser’s system settings. Stored cookies can be cleared in the browser’s system settings. Deactivating cookies may limit the Website’s functionality.
Internet Explorer: support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
Google Chrome: https://support.google.com/chrome/answer/95647?hl=en-GB
Using Google Analytics
On the basis of our legitimate interests (i.e. interests of analysis and optimisation within the meaning of § 6.1(f) GDPR), we employ Google Analytics, a web analysis service provided by Google Inc. (“Google”).
Google Ireland Limited
Gordon House, 4 Barrow Street
Dublin, D04 E5W5
Google Analytics utilises cookies (see § 7) to facilitate analysis of your website use. Your user data for the Website is generated by the cookie and thereafter generally transmitted to a Google server in the USA and stored there. Google is certified by the Privacy Shield Framework, guaranteeing its compliance with European data protection laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=active).
Google will use these data in accordance with our instructions to evaluate how our online services are being used, to compile reports about activities within the online services, and to perform additional services connected to the use of these online services and the internet. Pseudonymous user profiles can then be generated from the processed data.
We employ Google Analytics to show advertisements via the advertisement services of Google and its partners to only such users as have demonstrated an interest in our online services or as possess particular characteristics (e.g. an interest in certain topics or products, which is determined using websites visited) which we share with Google (so-called “Remarketing Audiences” or “Google Analytics Audiences”). We would also like to use Remarketing Audiences to ensure that our advertisements correspond to the users’ potential interests and are not annoying.
Please note that the “anonymizeIp” code was added to Google Analytics on the Website in order to ensure the anonymised collection of IP data (IP masking). This means that Google shortens users’ IP addresses within European Union member states or in other contracting member states of the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and be shortened there. The IP address transmitted by the user’s browser will not be combined with other data in the possession of Google. You can prevent cookies from being stored through a corresponding setting of your browser software; however, please note that this may potentially prevent you from using each of the Website's functions to its full extent.
In addition, you can prevent Google from collecting and processing the data that the cookie generated regarding your usage of our online services by downloading and installing the browser plugin accessible via the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB.
You can prevent Google Analytics from capturing data by clicking the following link. This will put an opt-out cookie in place to prevent your data from being captured during future visits to this website: Deactivate Google Analytics
Remember to renew this opt-out cookie if you delete this or all cookies via your browser settings.
You can find additional information regarding data use by Google as well as setting and opt-out options on the following Google web pages: https://policies.google.com/technologies/partner-sites?hl=en-GB (“How Google uses information from sites or apps that use our services”), https://policies.google.com/technologies/ads?hl=en-GB (“Advertising”), http://www.google.de/settings/ads (“Control the information Google uses to show you ads”).
Using Google Remarketing
On the basis of our legitimate interests (i.e. interests of analysis and optimisation within the meaning of § 6.1(f) GDPR), we employ the marketing and remarketing services (“Google Marketing Services”) of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Irland (“Google”). Google is certified by the Privacy Shield Framework, guaranteeing its compliance with European data protection laws (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google Marketing Services allows us to better target our online advertisements for our website in order to show users only advertisements that potentially correspond to their interests. When a user is, for example, shown advertisements for products that he viewed on other websites, this is known as remarketing. For these purposes, a Google code is immediately executed by Google when a website on which Google Marketing Services is active is accessed, and (re)marketing tags—invisible graphics or code also known as “web beacons”—are affixed to the website. Using said remarketing tags, an individual cookie, i.e. a small file, is saved on the user's device (comparable technologies can also be used instead of cookies). This file makes note of which websites the user visited, which content he viewed, and where he clicked; it also records technical information regarding the browser and operating system, referring websites, the time of the visit, and other data related to the usage of the online services.
The user’s IP address is also captured; within the context of Google Analytics, the IP address is shortened within member states of the European Union or in other contracting member states of the European Economic Area and only in exceptional cases transmitted to a Google server in the USA and shortened there. The IP address is not connected to user data from other Google services. The above information can also be combined by Google with similar information from other sources. If the user subsequently visits other websites, he may be shown advertisements targeted to his interests.
Google Marketing Services processes user data pseudonymously. This means that Google does not save and process data such as the names or email addresses of the users but rather processes relevant data based on cookies within pseudonymous user profiles. From Google’s perspective, the advertisements are therefore not administered and shown with reference to a concretely-identified person but rather with reference to the holder of the cookie regardless of said holder’s identity. This does not apply if a user has expressly permitted Google to process his data with this pseudonymisation. The data captured by Google Marketing Services about the user are transmitted to Google and saved on Google servers in the USA.
We also employ the Google Optimize service on our Website. Google Optimize allows us to use so-called A/B tests to reconstruct how various changes can affect a website (e.g. changes to input fields, design changes etc.). Cookies are stored on your device for these purposes. All data processed in this context are pseudonymous. Furthermore, we use Google Tag Manager to incorporate Google’s analysis and marketing services into our Website and to administer the same.
If you would like to opt out of Google Marketing Services’ targeted advertisements, you can make use of Google's settings and opt-out options: http://www.google.com/ads/preferences.
Using Google Adwords Conversion Tracking
This website also uses Google Conversion Tracking of Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Irland (“Google”). Google Adwords sets a cookie on your computer if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Every Adwords customer receives a different cookie. Cookies can not be tracked via the websites of Adwords customers. The information gathered using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers hear the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users.
Using Google Maps
On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Irland (“Google”). Google Maps is a web service for displaying interactive (land) maps to visually display geographic information. As soon as you visit the sub-pages in which the map of Google Maps is integrated, information about your use of our website (such as your IP address) is transmitted to Google's servers in the USA and stored there. Google may transfer this information to third parties, as far as required by law or third parties process this data on behalf of Google.
Google will not associate your IP address with other Google data. However, it would be technically possible for Google to use the user data obtained through the use of Google Maps to identify users, use it to create or otherwise use users' personality profiles for which we have no control or influence.
Using Facebook Remarketing
On the basis of and for the purposes of our legitimate interests of analysis, optimisation, and commercial operation regarding our online services, said services employ Facebook Pixel, a tool of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). Facebook is certified by the Privacy Shield Framework, guaranteeing its compliance with European data protection laws (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
Using Facebook Pixel, Facebook can categorise the visitors of our online services as a target group for advertisements (“Facebook Ads”). As a result, we use Facebook Pixel to show our Facebook Ads to only such Facebook users as have demonstrated an interest in our online services or as possess certain characteristics (e.g. an interest in particular topics or products, determined using websites visited) which we communicate to Facebook (“Custom Audiences”).
We also use Facebook Pixel to ensure that our Facebook Ads correspond to the user’s potential interests and are not annoying. Using Facebook Pixel, we can also track the effectiveness of Facebook Ads for purposes of statistics and market research by seeing if users are redirected to our Website by clicking on a Facebook Ad (“Conversion”).
Facebook Pixel is immediately integrated by Facebook when our Website is accessed; it can store a cookie, i.e. a small file, on your device. If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our online services is noted in your profile. The data collected about you are anonymous for us and therefore do not allow us to infer user identities. However, the data are saved and processed by Facebook, so a connection to the respective user profile may be made and used by Facebook for purposes of its own market research and advertisement.
Should we share any data with Facebook for purposes of reconciliation, they will be encrypted locally in the browser before being sent to Facebook via an encrypted https connection. This is only done to reconcile with Facebook's similarly-encrypted data.
You can opt out of data capture by Facebook Pixel and the use of your data to display Facebook Ads. In order to determine which kinds of advertisements can be shown to you on Facebook, you can open Facebook’s corresponding page and follow the instructions to adjust the settings for user-based advertisements: https://www.facebook.com/settings?tab=ads. These settings are platform-independent, i.e. they are synchronised for all devices such as desktop computers or mobile devices.
This website also uses the Omniconvert service (Researchers Friends SRL, Ion Brezoianu 4, 050023 Bucharest, Romania) to improve the user-friendliness of the website. Omniconvert allows us to understand how various changes to our homepage affect us (for example, changes to the input fields, the design, etc.) within the framework of so-called "A / B testings". "A / B Tests" are designed to improve the usability and performance of our websites and offers. Here we introduce our user e.g. different versions of a site that may have different content placement or navigation element labels. Then we can understand the behavior of the users, e.g. Longer stays on the website or more frequent return, determine which of these sites more closely match the needs of users. Cookies can only be stored on users' devices for these purposes. Only pseudonymous data of users and no personal data are stored. All stored data will not be shared with third parties.
Processing is based on Art. 6 (1) lit. f GDPR from the legitimate interest in the above purpose. You have the right to object at any time to the processing of personal data concerning you, based on Art. 6 (1) f GDPR. If you do not want Omniconvert to track your usage behavior, you can go to the link https://www.german-doctors.de/?mktz_optout=1 and disagree with the data collection.
Processing is based on Art. 6 (1) lit. f GDPR from the legitimate interest in the above purpose. You have the right to object at any time to the processing of personal data concerning you, based on Art. 6 (1) f GDPR. In addition, Hotjar offers each user the option of using a "Do Not Track header" to prevent the use of the tool Hotjar, so that no data on the visit of the respective website are recorded. This is a setting that supports all common browsers in current versions. For this, your browser sends a request to Hotjar, with the hint to disable the tracking of the respective user. If you use our website with different browsers / computers, you must set up the "Do Not Track header" for each of these browsers / computers separately. For detailed instructions with information about your browser, visit https://www.hotjar.com/opt-out. We point out, however, that in this case you may not be able to use all the functions of this website in full. More about Hotjar's data processing can be found at https://www.hotjar.com/privacy.
To improve the comfort and quality of our service, we use conversion tracking and retargeting technology, both web services, from Adform ApS, Hovedvagtsgade 6, 1103 Copenhagen K, Denmark. The temporary conversion tracking cookie is set when a user contacts an Adform ad. Users who do not wish to participate in tracking may disable the Adform or Google cookie through their Internet browser or object to data collection and storage at any time in the future at https://site.adform.com/privacy-center/platform-privacy/opt-out/. You can remove cookies already stored on your computer by deleting temporary websites. This site also uses Adform's retargeting technology. This makes it possible to specifically target Internet users with advertising who have already taken an interest in our website and our products on the websites of our partners. The insertion of the advertising material takes place during retargeting on the basis of a cookie-based analysis of the previous user behavior. This is a temporary cookie that expires after 60 days.
Processing is based on Art. 6 (1) lit. f GDPR of legitimate interest in targeting visitors to the Website through advertising by showing personalized, interest-based advertising ads to visitors to the Provider's website when visiting other sites on the Adform Partner Network. If you do not want to receive Adform interest-based advertising, you can opt out of data collection and storage at any time in the future at https://site.adform.com/privacy-center/platform-privacy/right-to-be-forgotten/.
If you would like to receive the newsletter offered on the website, we need an e-mail address from you, as well as information that allows us to verify that you agree with the owner of the e-mail address you have given us and with the receipt of the newsletter. To ensure that the newsletter is sent to us, we use the double-opt-in procedure. In the course of this, the potential recipient can be included in a distribution list. Afterwards, the user receives a confirmation e-mail to confirm the application legally. Only when the confirmation is made, the address is actively included in the distributor. We use this data exclusively for the delivery of the requested information and offers.
Newsletter2Go is used as newsletter software. Your data will be transmitted to Newsletter2Go GmbH, Köpenicker Str. 126, 10179 Berlin. Newsletter2Go is prohibited from selling and using your data for purposes other than sending newsletters. Newsletter2Go is a German, certified provider, which was selected according to the requirements of the General Data Protection Regulation and the Federal Data Protection Act. Further information can be found at https://www.newsletter2go.de/informationen-newsletter-empfaenger/.
Processing is based on Art. 6 (1) lit. f GDPR from the legitimate interest to inform our donors and new interested parties at regular intervals about the progress of our aid projects by e-mail. You have the right to object at any time to the processing of personal data concerning you, based on Art. 6 (1) f GDPR. The granted consent to the storage of the data, the e-mail address and their use for sending the newsletter you can therefore revoke at any time, such as the "unsubscribe" link in the newsletter.
Integration and use of social media plugins
On the website of the German Doctors e. V. Plugins are used by social networks. The purpose of the integration is to enable our users to redistribute the contents of this website, to publicize the German Doctors' aid work in the digital world and to increase the number of visitors to our website in order to generate more donations for those in need in the long term. The necessary data processing constitutes a legitimate interest on the basis of Art. 6 (1) lit. In particular, this concerns the plugins of Facebook, Twitter, Instagram, Google+, YouTube and Wakelet:
Our website uses so-called social plugins ("plugins") of the social network Facebook operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins are marked with a Facebook logo or the addition "Social Plug-in of Facebook" or "Facebook Social Plugin". An overview of the Facebook plugins and their appearance can be found at https://developers.facebook.com/docs/plugins.
When you visit a page of our website that contains such a plugin, your browser connects directly to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are currently not logged in to Facebook. This information (including your IP address) will be transmitted from your browser directly to a Facebook server in the US and stored there. If you are logged in to Facebook, Facebook can immediately assign the visit to our website to your Facebook profile. If you interact with the plugins, for example, click the "Like" button or leave a comment, this information is also transmitted directly to a Facebook server and stored there. The information will also be posted on your Facebook profile and displayed to your Facebook friends.
Our website uses so-called social plugins ("plugins") from the online service Twitter, which is operated by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA ("Twitter"). The plugins are marked with a Twitter logo. An overview of the Twitter plugins and their appearance can be found at https://dev.twitter.com/web/overview.
By calling up one of the sub-pages of this website, which is operated by us and on which a Twitter component (Twitter button) has been integrated, the Internet browser on your information technology system is automatically prompted by the respective Twitter component, a representation of the corresponding Twitter Component from Twitter. As part of this technical process, Twitter will be aware of which specific subpage of our site you are visiting. If you are also logged in to Twitter at the same time, with each visit to our website by you and during the entire duration of your stay on our website, Twitter recognizes which specific subpage you are visiting; this happens regardless of whether or not the subject clicks on the Twitter component. This information is collected through the Twitter component and associated with your Twitter account through Twitter. If you do not want to transmit this information to Twitter, you can prevent it from being logged out of your Twitter account before you visit our website. If you press one of the Twitter buttons integrated on our website, the data and information transmitted with it will be assigned to your personal Twitter user account and stored and processed by Twitter. The applicable privacy policies of Twitter are available at https://twitter.com/privacy?lang=de. You can completely prevent the loading of the Twitter plugins even with add-ons for your browser, e.g. with the script blocker "NoScript", which can be found at http://noscript.net.
Our website uses social plugins ("plugins") from the Instagram online service operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera". An overview of the Instagram plugins and their appearance can be found at https://www.instagram.com/developer/embedding/.
When you visit a page of our website that contains such a plugin, your browser connects directly to Instagram's servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are currently not logged in to Instagram. This information (including your IP address) is sent from your browser directly to an Instagram server in the US and stored there. If you're logged in to Instagram, Instagram can instantly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking on the "Instagram Camera" button, this information is also sent directly to an Instagram server and stored there. The information will also be posted on your Instagram account and displayed there to your contacts.
This site uses the YouTube Embedding feature to view and play videos from the YouTube publisher, which is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA ("YouTube"). The plugins are marked with a logo from YouTube. For an overview of the YouTube plug-ins and their look, visit https://developers.google.com/youtube/.
Our website uses so-called social plugins ("plugins") from the online service Wakelet operated by Wakelet Limited, 76 Quay Street, Manchester, M3 4PR, United Kingdom ("Wakelet"). The plugins are marked with a Wakelet logo. An overview of the Wakelet plugins and their appearance can be found at https://wakelet.com/brand.html.
With Wakelet articles, tweets, postings, photos, videos and other content from the Internet and social media can quickly be summarized. These network reports will be integrated into our website directly from Wakelet with a plugin. The plugin builds connections to other services - like Facebook, Twitter, Instagram, Google and YouTube - and transmits technical data such as Your IP address.
Collection and use of personal information
You can use this website without disclosing your personal data. This is data that can be used to disclose your identity, such as your name, postal or e-mail address. There is no personal evaluation of the information obtained by our provider by calling this website. Any personal information provided on this website by you is voluntary. As a matter of principle, your data transmitted via our online forms will be transmitted securely and encrypted to us. As a result, access by unauthorized third parties can be excluded.
The German Doctors e.V. collects from donors and interested parties personal data that are required for the purposes of (new) donation extraction and donation management or for the processing of inquiries. an online donation, the conclusion of a project sponsorship, registration for the newsletter or participation in a raffle. The purpose of the processing is the collection and collection of donations, in particular for the purposes of our association, such as the organization, mediation and supervision of medical, social and humanitarian aid for the sick and the needy, as well as the planning, care and support of medical aid projects in emergency areas and medically underserved areas of the Third World. Another purpose of the processing is to obtain your consent that we may provide you with regular information about the work of our association.
Disclosure of usage data and / or personal data
By order of the competent authorities, we may in individual cases provide information about data stored by our provider or by the German Doctors, as far as this is necessary for purposes of law enforcement, security, fulfillment of the statutory duties of the constitutional protection authorities or for the enforcement of intellectual property rights , This is also the case if we have reason to believe that there is a violation or misuse of our website. In these cases, we reserve the right to disclose the necessary personal information or the information requested by the authorities.
Legal basis of data processing
The legal basis of the data processing is your consent to the processing of your data, which you declare by submitting them to us.
Recipient of the data
Duration of storage
It is our legitimate interest under the Basic Data Protection Regulation to send you information about our charitable work and to solicit donations. For this purpose, your data will be stored until your withdrawal. At least, however, the period of storage of your donation data extends to the processing time of your donation and the issuing of your annual donation receipt, as well as to statutory retention periods, or the periods for which the retention of the data is necessary to assert legal claims.
Automated decision-making or profiling
Automated decision-making or profiling within the meaning of Article 22 paragraphs 1 and 4 DS-GVO does not take place by us.
Our users' rights
You have the following rights under the European General Data Protection Regulation as the person concerned:
Information: You have the right to require the person responsible to confirm whether your data is processed by him and, if necessary, the right to information about this personal data, the purpose of processing, the categories of personal data, the recipients or categories of recipients to whom your data have been or will be disclosed, if possible, the planned duration of the data storage, or the criteria for determining the duration of the processing. The right of access is restricted if the provisions of § 34 (1) of the Federal Data Protection Act n.F. are fulfilled.
If the data are not collected directly from you, there is a right to information about their origin. If the data are transmitted to an EEA-third country or an international organization, you have the right to be informed about appropriate guarantees under Article 46 of the GDPR. The controller will provide a copy of the data that is the subject of the processing.
Correction: You have the right to demand from the person responsible immediate correction of incorrect personal data concerning you and to demand the completion of incomplete personal data, taking into account the processing purpose.
Cancellation: You have the right to ask the person responsible for your personal data to be deleted immediately, provided that
- the data has been processed for the purposes of the survey and is no longer necessary or
- You have revoked your consent in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR and that there is no other legal basis for the processing, or
- You object to the processing in accordance with Article 21 (1) of the GDPR and there are no legitimate reasons for the
- processing, or you object to the processing pursuant to Article 21 (2) of the GDPR, or
- if your data was processed unlawfully or
- the cancellation of the fulfillment of legal obligations is subject to or
- the data relating to an information society service offered were collected in accordance with Article 8 (1) GDP
If the controller has made the personal data publicly available and is required to delete it in accordance with Article 17 (1) of the GDPR, he shall take appropriate measures, including technical ones, to data controllers processing the personal data, taking into account available technology and implementation costs to inform you that the data subject has requested that you delete all links to such personal data or copies or replications.
The aforementioned rights do not apply insofar
- the processing is necessary to exercise the right to freedom of expression,
- it is necessary to fulfill a legal obligation of the person responsible for the processing or
- they are needed to assert, exercise or defend legal claims.
- The cancellation statutory or contractual retention periods in accordance with § 35 paragraph 3 Federal Data Protection Act n.F. conflict.
The right to erasure may be replaced in cases of § 35 Federal Data Protection Act n.F., in which a deletion is not possible or with a disproportionate effort, possibly by a restriction of processing. The same applies if the person responsible has reason to believe that deletion would adversely affect a legitimate interest of the data subject. If possible, the person responsible informs the person concerned about the restriction.
Restriction of processing: You have the right to demand that the person responsible for the processing be restricted under the following conditions:
- You deny the accuracy of the personal data, for the duration that allows the person responsible to verify the accuracy or,
- if the processing is unlawful and a cancellation is denied or
- the data controller no longer needs the data for the purpose of the processing but the data subjects need it for the purpose of
- asserting, exercising or defending legal claims; or
- if you objected to the processing pursuant to Article 21 (1) GDPR, as long as it is not certain that the responsible person's
- legitimate reasons prevail over the data subject.
If processing has been restricted in accordance with Article 18 (1) GDPR, these data may not be stored except with the consent of the data subject or for the purposes of asserting, exercising or defending legal claims or for the protection of another natural or legal person or for important public reasons Interests are processed. The data subject who has obtained a restriction of processing will be informed by the controller before the restriction is lifted.
Objection to processing: You may object to the processing of your data at any time for reasons of your particular situation, provided that the processing is based on Article 6 (1) (e) or (f) of the GDPR. The controller only processes the personal data if he can demonstrate compelling legitimate reasons against processing that outweigh the interests, rights and freedoms of the data subject or if the processing of the assertion, exercise or defense of legal claims serves the purpose of processing.
If personal data are processed in order to operate direct mail, then the data subject has the right to object at any time to the processing of his personal data. This also applies to profiling, as far as it is related to direct mail. The data will then no longer be processed for the purpose of direct mail. The reference to this right must be made at the latest at the time of the first communication. In relation to the use of information society services, the data subject may exercise his right of opposition through automated procedures using technical specifications.
Revocation of consent: If the processing of your personal data is based on your consent, you have the right to revoke your consent at any time in accordance with Article 7 (3) GDPR.
Consequences of not providing the data: You are not obliged to provide us with the data of the inquiry form. However, a non-provisioning might have the consequence that your request can not be processed.
Right to Data Portability: You have the right to receive personal data relating to you, provided to the controller, in a structured, common and machine-readable format, and to communicate that information to another person without hindrance, provided that
- processing on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) GDPR, or
- is based on a contract pursuant to Article 6 (1) (b) GDPR; or
- the processing is carried out by means of automated methods.
In the exercise of this right, the data subject can obtain that the data is transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible and no rights and freedoms of other persons are impaired.
Automated Decisions or Profiling: If the controller performs automated decision making or profiling, you have the right not to be subjected solely to automated processing - including profiling - based decisions that have legal effects on you or similarly affect you in a similar manner. This does not apply if
- the decision is required for the conclusion or the fulfillment of a contract between you and the person responsible or
- legal provisions to which the controller is subject allow this, and these rules contain appropriate measures to safeguard the
- rights and freedoms and the legitimate interests of the data subject; or
- the processing takes place with your express consent.
Unless the processing is based on law, the controller will take reasonable steps to safeguard your rights and freedoms, as well as your legitimate interests.
Decisions according to the aforementioned exceptions may not be based on specific categories of personal data under Article 9 (1) GDPR except where Article 9 (2) (a) or (g) GDPR applies and appropriate measures have been taken to safeguard your rights and freedoms and legitimate interests.
Right to complain to a supervisory authority: You have the right to complain to a supervisory authority.
Explanation of terms
Personal data means any information relating to an identified or identifiable natural person ('the data subject'); a natural person is considered as being identifiable, directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics expressing the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.
Processing means any process, performed with or without the aid of automated procedures, or any such process associated with personal data, such as collecting, collecting, organizing, organizing, storing, adapting or modifying, reading, querying, using, disclosure by submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.
Restriction of the processing is the marking of stored personal data with the aim to limit their future processing.
Profiling is any type of automated processing of personal data that involves the use of such personal information to evaluate certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, personal preferences To analyze or predict interests, reliability, behavior, whereabouts or location of this natural person.
The person responsible is the natural or legal person, public authority, body or other body that, alone or in concert with others, decides on the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union or national law.
A processor shall mean a natural or legal person, public authority, body or body that processes personal data on behalf of the controller.
Recipient is a natural or legal person, agency, agency or other entity to whom Personal Data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered to be recipients; the processing of such data by the said authorities shall be in accordance with the applicable data protection rules in accordance with the purposes of the processing.
Third is a natural or legal person, public authority, body or body other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or processor.
The data subject's consent shall be deemed to be voluntary in a written, informed and unambiguous manner in the form of a statement or other unambiguous confirmatory act by which the person concerned indicates that he is involved in the processing of his personal data Data agrees.
Supervisory authority is an independent government agency set up by a Member State that promotes and monitors compliance with data protection rules.