Privacy Policy

With this privacy policy, we will inform the users of this website about the nature, the scope and the purpose of collection and use of personal data by us as website operator. We take data protection very seriously and treat the confidentiality of your data accordingly. But basically some security vulnerabilities cannot be ruled out during data transfers on the Internet. A complete protection against access by third parties is not feasible.

I. Name and address of the competent entity

The competent entity within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws of the Member States, as well as other data protection regulations is:

Günther Spelsberg GmbH + Co. KG
personally liable partner: Spelsberg Verwaltungs GmbH
Managing Directors: Till Fastabend and Holger Spelsberg
Im Gewerbepark 1
58579 Schalksmühle
Germany

Phone: 02355/892-0
E-mail: infonospam-spelsberg.de
Website: www.spelsberg.de

II. Name and address of the Data Protection Officer

The Data Protection Officer of the competent entity is:

Markus Kowall
IT Südwestfalen AG
Kalver Straße 23
58515 Lüdenscheid
Germany

+49(0)2351 / 672573-00
kowallnospam-it-swf.de
www.it-swf.de

III. General notes regarding data processing

1. Scope of processing of personal data

We only process personal data of our users, basically if this is necessary for the deployment of an operational website as well as our contents and services. The personal data of our users are processed regularly only after the consent of the user. An exemption is applicable to such cases where obtaining a prior consent is not possible for actual reasons and the processing of data is permitted by legal regulations.

2. Legal basis for the processing of personal data

If we obtain consent of the respective person for the operations of processing personal data, Article 6 para. 1(a) of GDPR serves as the legal basis. When processing personal data, which is necessary for the execution of a contract, whose contract party is the person concerned, Article 6 para. 1(b) of GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. If a processing of personal data is necessary for complying with a legal obligation, to which our company is liable, then Article 6 para. 1(c) of GDPR serves as the legal basis. For the case that vital interests of the respective person or another natural person require a processing of personal data, Art. 6 para. 1(d) of GDPR serves as the legal basis. If the processing is necessary to maintain a legitimate interest of our company or a third party and the interests, basic rights and fundamental freedoms of the person concerned do not outweigh the above-mentioned interest, then Article 6 para. 1(f) of GDPR serves as the legal basis for the processing.

3. Data deletion and duration of storage

The personal data of the person concerned are deleted or blocked, if the purpose of storage no longer exists. Data can be stored additionally, if this has been permitted by the European or national legislation in the Union's legal directives, laws or other regulations, which the competent entity is subject to. Data are blocked or deleted, when the storage deadline prescribed by the above-mentioned standards expires, unless there is a necessity for further storage of data for the sake of conclusion of a contract or execution of a contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Each time our website is called, our system automatically captures data and information from the computer system of the calling computer. The following data are collected here:

  • Browser type/browser version
  • The operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

The collected data cannot be mapped to a natural person and serve only for statistical evaluations and for improving the website. This data will not be merged with other data. We, however, reserve the right to review this data, if specific indications of an unlawful or improper use come to be known.

2. Legal basis for the data processing

The legal basis for temporary storage of the data and the log files is Art. 6 para. 1(f) of GDPR.

3. Purpose of data processing

The temporary storage of the IP address of the system is necessary to allow provision of the website to the user's computer. For this purpose, the IP address of the user must be stored for the duration of the session. Log files are used for storing, in order to ensure the functionality of the website. In addition, the data are used by us to optimise the website and to ensure the security of our information technology systems. In this context, the data are not analysed for marketing purposes.

Further, our legitimate data processing interest lies in these purposes in accordance with Art. 6 para. 1(f) of GDPR.

4. Duration of storage

The data will be deleted, when they are no longer necessary for achieving the purpose of their collection. This is the case when the given session is finished, in case the data were collected for making the website available. In the case of storage of the data in log files, this is the case latest after seven days. An additional storage is possible. In this case, the IP addresses of users will be deleted or modified so that a mapping of the calling client is no longer possible.

5. Possibility of objection and removal

For the operation of the internet page, it is mandatory to collect the data for making the website available and to store the data in log files. Thus, there is no possibility of objection on the part of the user.

V. Use of cookies

a) Description and scope of data processing

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user calls a site, then a cookie can be saved on the user's operating system. This cookie contains a characteristic string that allows a clear identification of the browser when the website is called again. We use cookies to make our website user friendly and secure. Some elements of our website require identification of the calling browser even after move from one page to another.

Therefore, the cookies store and transmit the following data:

  • Details about the computer
  • Details about the browser
  • The search engine used
  • The operating system
  • The link used
  • The search term used

We also use cookies on our site, which enable an analysis of the surfing behaviour of users. The following data can be transmitted in this way:

  • Anonymously secured time spent on the website
  • Anonymously secured called web pages
  • Date of the first visit
  • Time of calling and exiting the web page

The data of the user collected in this way will be pseudonymised through technical measures. Therefore, it is no longer possible to map the data to the calling user. The data are not stored together with other personal data of the users.

When our website is called, the user is informed about the use of cookies for analytical purposes and his consent is obtained for the processing of personal data that is used in this context. In this context, a note is also made on this privacy policy.

Specifically, the following cookies are used:

Cookie name

Provider

Purpose

Type

Validity

fe_typo_user

spelsberg.de

Makes sure that the user status is maintained.

HTTP

Session

__utm.gif

google-analytics.com

Google Analytics Tracking Code, which tracks the details about the browser and the user's computer.

Pixel

Session

__utma

spelsberg.de

Collects data about how often a user visits the website, as well as the date of the first and most recent visit. Is used by Google Analytics.

HTTP

2 years

__utmb

spelsberg.de

Stores the time at which a user calls the page. Is used by Google Analytics to calculate the duration of stay.

HTTP

Session

__utmc

spelsberg.de

Stores the time at which a user leaves the page. Is used by Google Analytics to calculate the duration of stay.

HTTP

Session

__utmt

spelsberg.de

Accelerates the request to the server.

HTTP

Session

__utmz

spelsberg.de

Collects data about from where the user came to the page, which search engine was used, which link was clicked on and what search term was used. Is used by Google Analytics.

HTTP

6 months

_pk_id#

spelsberg.de

Collects anonymised statistics about the visits of users to the page, such as number of visits, the average length of time of stay, and the pages visited.

HTTP

1 year

_pk_ses#

spelsberg.de

Used by Piwik to track page calls during a session.

HTTP

Session

IDE

doubleclick.net

Is used by Google DoubleClick to evaluate the effectiveness of advertisements, through which the page is accessed.

HTTP

2 years

r/collect

doubleclick.net

Is used by Google DoubleClick to evaluate the effectiveness of advertisements, through which the page is accessed.

Pixel

Session

test_cookie

doubleclick.net

Is used to test whether the user's browser supports cookies.

HTTP

Session

spamshield

spelsberg.de

Is used to identify spambots

HTTP

Session

stg_externalReferrer

spelsberg.de

Is used by Piwik to track events.

HTTP

Session

stg_last_interaction

spelsberg.de

Is used by Piwik to identify the last interaction of the visitor

HTTP

99 years

stg_returning_visitor

spelsberg.de

Is used by Piwik to identify a returning visitor

HTTP

99 years

stg_traffic_source_priority

spelsberg.de

Is used by Piwik to capture the user

HTTP

Session

Cookie_accept

Spelsberg.de

Stores the confirmation of cookies for other visits

HTTP

-

els_activate_all_videos

Spelsberg.de

Allows the use of videos on the web page

HTTP

Session

b) Legal basis for the data processing

The legal basis for the processing of personal data by using technically required cookies is Art. 6 para. 1(f) of GDPR. The legal basis for the processing of personal data by using cookies for analytical purposes is Art. 6 para. 1(a) of GDPR, if the user has given consent for it.

c) Purpose of the data processing

The purpose of using technically required cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this, it is necessary that the browser is recognised again even after changing the page. We require cookies for the following applications:

  • Protection against Spambots = Spamshield
  • Receipt of user data = fe_typo_user
  • Activation of videos = els_activate_all_videos

The user data collected through technically required cookies are not used to create user profiles.

The analysis cookies are used for the purpose of improving the quality of our website and its contents. Through the analysis cookies, we will learn how to use the website and can thus constantly optimise our offer. Further, our legitimate interest lies in the processing of personal data in accordance with Art. 6 para. 1(f) of GDPR.

e) Duration of storage, possibility of objection and removal

Cookies are stored in the user's computer and transmitted from it to our page. Therefore, you, as a user, will have full control of the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to fully use all functions of the website.

VI. Newsletter

1. Description and scope of data processing

It is possible to subscribe to a free newsletter on our website. In such a case, the data are transmitted to us from the input mask during registration for the newsletter. Additionally, the following data will be collected during the registration:

  • Title
  • First name
  • Surname
  • E-mail
  • Newsletter need
  • Date of creation

For processing the data, your consent is obtained during the registration process, and you are referred to this privacy policy. In connection with data processing for sending newsletters, there is no transfer of data to third parties. The data are used only for sending the newsletter.

2. Legal basis for the data processing

The legal basis for processing the data after registration to the newsletter by the user is Art. 6 para. 1(a) of GDPR, if the user has given consent for it.

3. Purpose of data processing

The collection of the user's email address is used to deliver the newsletter. The collection of other personal data during the registration process is used to prevent misuse of services or the used email address.

4. Duration of storage

The data will be deleted, when they are no longer necessary for achieving the purpose of their collection. The email address of the user is therefore stored, as long as the subscription to the newsletter is active. Other personal data collected during the registration process are usually deleted after a period of seven days.

5. Possibility of objection and removal

The subscription to the newsletter can be cancelled at any time by the user concerned. For this purpose, a link can be found in every newsletter. This also allows to revoke the consent for the storage of personal data collected during the registration process.

VII.  Registration

1. Description and scope of data processing

On our website, we offer users the option to register by providing personal data. The data are then entered in an input mask and transmitted to us and stored. A transfer of data to third parties does not take place. The following data are collected in the registration process:

  • Gender
  • Name
  • Company
  • Address
  • E-mail address
  • Phone number
  • Fax number

At the time of registration, following data are additionally stored:

  • Last log-on of user [date]

The user's consent for the processing of these data is obtained during the registration process.

2. Legal basis for the data processing

The legal basis for processing the data is Art. 6 para. 1(a) of GDPR, if the user has given consent for it. If the registration is intended for the execution of a contract, whose contract party is the user or for the implementation of pre-contractual measures, then the additional legal basis for the processing of data is Art. 6 para. 1(b) of GDPR.

3. Purpose of data processing

A registration of the user is necessary for keeping certain content and services ready on our website.

4. Duration of storage

The data will be deleted, when they are no longer necessary for achieving the purpose of their collection. This is the case for the data collected during the registration process, if the registration on our website is cancelled or modified.

5. Possibility of objection and removal

As a user, you have the ability to cancel the registration at any time. You can at any time modify or permanently delete the data about you stored on the website under your profile settings "My Profile". In order to permanently delete your account, you can also open the following link and follow the instructions:

https://www.spelsberg.de/service/meinspelsberg/account-loeschen/

VIII. Contact form and email contact

1. Description and scope of data processing

A contact form is available on our website, which can be used when you contact us electronically. If a user uses this option, then the data entered in the input mask are transmitted to us and stored. These data are:

  • Name
  • Company
  • Address
  • E-mail address
  • Phone number
  • Appointment requests
  • Specific product requirements

At the time of sending the message, the following data are stored additionally:

  • Date of query

For processing the data, your consent is obtained during the sending process, and you are referred to this privacy policy. Alternatively, it is possible to contact via the email address provided. In this case, the personal data of the user transmitted with the email are stored.

In this connection, there is no transfer of data to third parties. The data are used only for processing the conversation.

2. Legal basis for the data processing

The legal basis for processing the data is Art. 6 para. 1(a) of GDPR, if the user has given consent for it. The legal basis for the processing of the data transferred in the course of sending an email is Art. 6 para. 1(f) of GDPR. If the email contact is aimed at the conclusion of a contract, then the additional legal basis for the processing is Art. 6 para. 1(b) of GDPR.

3. Purpose of data processing

The processing of personal data available in the input mask is used only for processing the contact. In case of an email contact, the required legitimate interest in processing the data also exists. The other personal data processed during the sending process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted, when they are no longer necessary for achieving the purpose of their collection. For the personal data available in the input mask of the contact form and those which were sent by email, this is the case when the actual conversation with the user is ended. The conversation is ended when it can be understood from the circumstances, that the issue concerned has been finally resolved. The personal data collected additionally during the sending process are deleted at the latest after a period of seven days.

5. Possibility of objection and removal

The user has at any time the option to withdraw his consent for the processing of personal data. If the user contacts us by email, then he can object at any time to the storage of his personal data. In such a case, the conversation cannot be continued. Please apply in writing with the above contact data, if you want to cancel the processing of your data. All personal data stored in the course of contacting will be deleted in this case.

IX. Web analysis through Google Analytics

1. Scope of processing of personal data

We use the functions of the web analysis service Google Analytics on our website. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and allow an analysis of your use of the website (see above). The information generated by the cookie about your use of this web page is generally sent to a Google server in the USA and stored there. Further information about handling user data in Google Analytics can be found in the Google's privacy policy:
 
https://support.google.com/analytics/answer/6004245?hl=de
 
We use the function "Activation of IP anonymisation" on this web page. However, this will cause Google to shorten your IP address beforehand within Member States of the European Union or in other signatory states to the European Economic Area Agreement. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with services associated with the use of the website and internet use. The IP address transmitted by your browser in connection with Google Analytics will not be merged with other Google data.
 
We use an SSL encryption on this page for safety reasons and to protect the transfer of sensitive content, such as for example the requests you send to us as the website operator. You can recognise an encrypted connection from the address bar of the browser changing from "http://" to "https://" and from the lock icon in your browser bar. When the SSL encryption is enabled, the data that you transmit to us cannot be read by others.

2. Legal basis for the processing of personal data

The legal basis for the processing of personal data of users is Art. 6 para. 1(f) of GDPR.

3. Purpose of data processing

The processing of personal data of users enables us to perform an analysis of the surfing behaviour of our users. With the analysis of the data obtained, we will be in a position to compile information on the use of the individual components of our website. This will help us continually improve our web page and its user-friendliness. In these purposes, even our legitimate interest lies in the processing of data in accordance with Art. 6 para. 1(f) of GDPR. Through the anonymisation of IP address, the interests of users in the protection of personal data have been duly taken into account.

4. Duration of storage

The data will be deleted, as soon as they are no longer needed for the purposes of our recording. In our case, this will be done after 26 months (standard specification of Google Inc.).

5. Possibility of objection and removal

Cookies are stored in the user's computer and transmitted from it to our page. Therefore, you, as a user, will have full control of the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to fully use all functions of the website.
 
You can prevent the acquisition of your data by Google Analytics, by clicking on the following link. An opt-out cookie is set so as to prevent your data from being collected when you visit this website in the future:

Deactivate Google Analytics for this web site

X. Web analysis using Piwik

1. Scope of processing of personal data

Our website uses Piwik. It is a so-called Web analysis service. Piwik uses cookies, which are text files that are stored in your computer and enable us to analyse the website use by you (see above). For this purpose, the usage data generated by the cookie (including your abbreviated IP address) are transferred to our server and stored for the purposes of a usage analysis, which is used for the web page optimisation by us. Your IP address is anonymised immediately in this process, so that you, as a user, remain anonymous for us. The information generated by the cookie about your use of this web page will not be disclosed to third parties. You can prevent the use of cookies by means of a suitable setting in your browser software; however, it may happen, that in this case you may not be able to use all functions of this web page to their full extent as required.

2. Legal basis for the processing of personal data

The legal basis for the processing of personal data of users is Art. 6 para. 1(f) of GDPR.

3. Purpose of data processing

The processing of personal data of users enables us to perform an analysis of the surfing behaviour of our users. With the analysis of the data obtained, we will be in a position to compile information on the use of the individual components of our website. This will help us continually improve our web page and its user-friendliness. In these purposes, even our legitimate interest lies in the processing of data in accordance with Art. 6 para. 1(f) of GDPR. Through the anonymisation of IP address, the interests of users in the protection of personal data have been duly taken into account.

4. Duration of storage

The data will be deleted, as soon as they are no longer needed for the purposes of our recording.

5. Possibility of objection and removal

Cookies are stored in the user's computer and transmitted from it to our page. Therefore, you, as a user, will have full control of the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to fully use all functions of the website.

If you do not agree to the storage and analysis of the data from your visit, then you may object later at any time to the storage and use by a simple mouse click. In this case, a so-called opt-out cookie is placed in your browser, which will ensure, that Piwik will collect no session data. If you delete your cookies, this will have the consequence that the opt-out cookie will also be deleted and, if necessary, it must be reactivated by you.

XI. Services and content of third parties

On our website, it may happen that contents of third parties are included, for example videos from YouTube, maps from Google Maps or images from other web pages. This means that third party providers have the option to record your IP address. The third-party provider uses the IP address, in order to send the respective images or videos to your browser. We have no influence over whether or not third-party providers store your IP address for statistical purposes.

XII. Rights of the person concerned

If your personal data are processed, then you are the person concerned in the sense of GDPR and you are entitled to the following rights against the person responsible:

1. Right to information

You can demand a confirmation from the person responsible about whether personal data concerning you will be processed by us.

If such processing is done, then you can demand the following information from the persons responsible:

(1) The purposes for which the personal data are processed;

(2) the categories of personal data processed;

(3) the recipients or categories of recipients, to whom your personal data have been disclosed or will be disclosed;

(4) the planned duration of storage of your personal data or, if specific details are not possible for it, criteria for determining the duration of storage;

(5) the existence of a right to correction or deletion of your personal data, a right to restriction of processing by the person responsible or a right to objection against this processing;

(6) the existence of a right of complain to a supervisory authority;

(7) any available information about the source of the data, if the personal data have not been collected from the person concerned.

(8) the existence of an automated decision-making including profiling in accordance with Art. 22 paras. 1 and 4 of GDPR and, at least in these cases, meaningful information about the rationale involved, as well as the scope and the desired impact of such a processing for the person concerned.

You have the right to ask, whether your personal data are transmitted to a third country or to an international organisation. In this connection, you may demand information about appropriate safeguards in accordance with Art. 46 of GDPR in connection with the transmission.

2. Right to correction

You have a right to correction and/or completion against the person responsible, if your processed personal data are incorrect or incomplete. The person responsible has to make the correction immediately.

3. Right to restrict the processing

You can ask for a restricted processing of your personal data under the following conditions:

(1) If you dispute the accuracy of your personal data for a period, which allows the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you refuse the deletion of the personal data and instead demand a restricted use of the personal data;

(3) the person responsible no longer requires the personal data for the purposes of processing, but you need them for the assertion, exercise or defence of legal claims, or

(4) if you have filed objections to the processing in accordance with Art. 21 para. 1 of GDPR and it has not yet been determined, whether the legitimate reasons of the person responsible outweigh your reasons.

If processing of your personal data has been restricted, then these data, apart from their storage, can be processed only with your consent, or for the assertion, exercise or defence of legal claims, for the protection of rights of another natural or legal person, or for reasons of substantial public interest of the European Union or a Member State.

If the processing is restricted due to the above requirements, then you will be informed by the person responsible before the restriction is lifted.

4. Right to deletion

a) Deletion obligation

You can demand from the person responsible, that your personal data are deleted immediately, and the person responsible is obliged to immediately delete these data, if one of the following reasons applies:

(1) Your personal data are no longer necessary for the purposes for which they were collected or processed in any other way.

(2) You withdraw your consent for the processing in accordance with Art. 6 para. 1(a) or Art. 9 para. 2(a) of GDPR, and there is no other legal basis for the processing.

(3) You file an objection to the processing in accordance with Art. 21 para. 1 GDPR and there are no priority legitimate grounds for the processing, or you file an objection to the processing in accordance with Art. 21 para. 2 of GDPR.

(4) Your personal data have been unlawfully processed.

(5) The deletion of your personal data is necessary for fulfilling a legal obligation according to the law of the Union or the law of the Member States, which the person responsible is subject to.

(6) Your personal data have been collected in connection with the service provision of an information technology company in accordance with Art. 8 para. 1 of GDPR.

b) Information to third parties

If the person responsible has made public your personal data and he is committed to their deletion in accordance with Art. 17 para. 1 of GDPR, he shall take appropriate actions, considering the available technology and the cost of implementation, even of technical nature, to inform persons responsible for processing of personal data, that you, as a person concerned, have demanded from them the deletion of all links to these personal data or copies or replications of these personal data.

c) Exceptions

The right to delete does not exist, if the processing is required

(1) to exercise the right to freedom of expression and information;

(2) for fulfilling a legal obligation that requires the processing according to the law of the Union or the Member States, which the person responsible is subject to, or to perform a task, which is in the public interest or arises from the exercise of official authority, which has been transferred to the person responsible;

(3) for reasons of public interest in the field of public health in accordance with Art. 9 paras. 2 (h) and (i) and Art. 9 para. 3 of GDPR;.

(4) for archive purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 of GDPR, provided the right mentioned under section a) probably renders the achievement of the objectives of this processing impossible or seriously impaired, or

(5) for the assertion, exercise or defence of legal claims.

5. Right to information

If you have asserted the right to correction, deletion or restriction of the processing against the person responsible, then he is obliged to communicate this correction or deletion of the data or restriction of the processing to all recipients to whom your personal data have been disclosed, unless this proves to be impossible or involves a disproportionate expense.

You have the right against the person responsible, to be informed of these recipients.

6. Right to data portability

You have the right to receive your personal data, which you have provided to the person responsible, in a structured, latest and machine-readable format. Also, you have the right to transmit these data to another person responsible without the interference of the person responsible, to whom the personal data have been made available, provided

(1) the processing is based on a consent in accordance with Art. 6 para. 1(a) of GDPR or Art. 9 para. 2(a) of GDPR or on a contract in accordance with Art. 6 para. 1(b) of GDPR and

(2) the processing is done using automated procedures.

While exercising this right, you also have the right to ensure that your personal data are transmitted directly from one responsible person to another person responsible, provided this is technically feasible. Freedoms and rights of other persons must not be harmed thereby.

The law on data portability does not apply to processing of personal data, which is necessary for the performance of a task, which is in the public interest or arises from the exercise of official authority, which has been transferred to the person responsible.

7. Right to objection

You have the right to file an objection at any time to the processing of your personal data for reasons, which arise from their specific situation, on the basis of Art. 6 para. 1 (e) or (f) of GDPR. This also applies to a profiling based on these provisions.

The person responsible will no longer process your personal data, unless he can provide compelling protection-sensitive reasons for the processing, which outweigh your interests, rights and freedoms, or the data processing is used for the assertion, exercise or defence of legal claims.

If your personal data is processed for direct advertising, then you will have the right to file objection at any time to the processing of your personal data for the purpose of such advertising; this also applies to the profiling, provided it is related to such direct advertising.

If you object to the processing of your personal data for purposes of direct advertising, then your personal data will no longer be processed for these purposes.

You have the option to exercise your right to objection by means of automated procedures in connection with the use of services of the information technology company, regardless of the Directive 2002/58/EC, in which technical specifications are used.

8. Right to withdraw the privacy policy consent

You have the right at any time to withdraw your privacy policy consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the time of withdrawal.

9. Automated decision in individual case, including profiling

You have the right not to be subjected to a decision based only on an automated processing, including profiling, which leads to legal consequences for you or significantly affects in a similar way. This does not apply, if the decision

(1) is necessary for the conclusion or execution of a contract between you and the person responsible,

(2) is permitted on the basis of statutory requirements of the Union or the Member States, which the person responsible is subject to, and these statutory requirements contain adequate measures to safeguard your rights and freedoms, as well as your legitimate interests or

(3) is made with your explicit consent.

However, these decisions must not be based on special categories of personal data in accordance with Art. 9 para. 1 of GDPR, provided Art. 9 para. 2 (a) or (g) of GDPR does not apply, and appropriate measures have been taken for the protection of rights and freedoms, as well as your interests.

With regard to the cases referred to in (1) and (3), the person responsible will take appropriate actions, in order to maintain the rights and freedoms, as well as your legitimate interests, including at least the right to obtaining the intervention of a person on the part of the person responsible, presentation of your own view point and contestation over the decision.

10. Right to complain to a supervisory authority

Without prejudice to another administrative or judicial redress, you have the right to complain to a supervisory authority, in particular in the Member State of your domicile, your workplace, or the place of the alleged violation, if you believe that the processing of your personal data violates the GDPR.

The supervisory authority, with whom the complaint was filed, informs the complainant about the status and the results of the complaint, including the possibility of a judicial redress in accordance with Art. 78 of GDPR.

Kies een taal S'il vous plaît sélectionner une langue