Privacy Statement

A. Name and address of the person responsible

The person responsible within the meaning of the Basic Data Protection Regulation and other national data protection laws of the member states as well as other provisions of data protection law is the Data Protection Officer:
Digades GmbH Digital and analog circuit design
Äußere Weberstraße 20
02763 Zittau
represented by its managing directors:
Mr. Dr.-Ing. Sascha Berger
Mr. Dipl.- Ing. Tim Berger
Phone: +49 (0) 3583 5775 0
Email: digades [at] digades.de (digades[at]digades[dot]de)
Website: www.digades.de

B. Name and address of the Data Protection Officer

The external data protection officer of the person responsible is:
Johanna Thoelke
DAPROSEC GbR
Tieckstraße 17
D-01099 Dresden, Germany
Email: info [at] daprosec.de (info[at]daprosec[dot]de)
Phone: +49 (0) 351 31905088

C. General information on data processing

1. scope of processing of personal data
We process your personal data only to the extent necessary to provide a functional and user-friendly website and to provide our content and services. Personal data is all information relating to an identified or identifiable natural person. We adhere to the principle of data avoidance. As far as possible, we do not collect personal data.

2. legal basis for the processing of personal data
Insofar as we obtain your consent for the processing of personal data, this serves as the legal basis pursuant to Art. 6 para. 1 lit. a EU Data Protection Basic Regulation (DSGVO). Art. 6 para. 1 lit. b DSGVO serves as the legal basis for the processing of personal data required to fulfil a contract with you. This also applies to processing operations which are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis. Art. 6 para. 1 lit. d DSGVO serves as a legal basis in the event that vital interests of the data subject or another natural person necessitate the processing of personal data. If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for the processing.

3. data deletion and storage period
We will delete or block your personal data as soon as the purpose of storage no longer applies. In addition, your personal data may be stored if the European or national legislator has provided for this in EU ordinances, laws or other regulations to which the person responsible is subject. The data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless it is necessary for further storage of the data for the conclusion or performance of a contract.

4. data security
All data on our website is protected by technical and organisational measures against loss, destruction, access, alteration and distribution.

D. Cookies and cookie settings

We use so-called cookies on this website. Cookies are small text files that are stored on the terminal device used to access this website.

This site uses different types of cookies. Temporary cookies (also called session cookies) are deleted after the end of the browser session (visit to our website) when the browser is closed. Temporary cookies are used, for example, to store certain user entries.

We also use so-called "permanent" or "persistent" cookies. These remain stored even after closing the browser and enable us or our partner companies to recognize your browser on your next visit. Cookies that are set by our partner companies (third parties) are called third-party cookies. Cookies set by us as the person responsible for this website are referred to as first-party-cookies.

We use cookies to make the user experience more efficient, e.g. to personalize content and advertisements, to offer social media functions and to analyze access to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other information that you have provided to them or that they have collected as part of your use of the services. We will inform you about the exact purpose and scope of the processing as well as about this in the following sections of our privacy policy. Please refer to the overview of the cookie settings for the duration of the respective cookie storage.

According to Art. 5 para. 3 sentence 1 of the E-Privacy Directive, we may store cookies on your device if they are absolutely necessary for the operation of this website. For all other cookie types we need your consent. You can change or revoke your consent at any time within the framework of the cookie declaration on our website. We would like to point out that if you do not accept cookies, this may result in limited functionality of our website.

Your consent applies to the following domains: www.dfreeeze.de

Your current status: Use only necessary cookies.

In addition, you can configure your browser so that you are informed about the setting of cookies, can decide on acceptances or generally exclude cookies.

E. Provision of the website and creation of log files

Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer. This includes information about the browser type and browser version, the operating system of the visitors terminal device, the name of the access provider used by the visitor, the IP address of the user, the date, time and duration of the access as well as the website from which the visitor accessed to our website (so-called referrer URL). This data is stored in the log files of our system and can be used an stored for the purpose of statistical evaluation of this website. The legal basis for the processing of data is Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the processing for the following purposes:

• to quickly establish a connection to our website,
• to enable a user-friendly application of our website,
• to recognise and ensure the security and stability of the systems and
• to facilitate and improve the administration of our website.

The data are deleted as soon as they are no longer required for the purpose of their collection. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

F. Technically necessary cookies

Our website uses technically necessary cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the users computer system. If a user calls up a website, a cookie can be stored on the users operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is calling up again. Some functions of our website require that the calling browser can be identified even after a page change. In addition, we collect data on language settings; data to identify whether a user has agreed to the cookie message and whether the user has activated Java Script.

The purpose of using technically necessary cookies is to enable the use of our internet pages.

The legal basis for the processing of personal data using cookies ist Art. 6 para. 1 lit. f. DSGVO. The user data collected by technically necessary cookies are not used to create user profiles.

As the cookies are stored on your computer, only you yourself can deactivate or restrict the transmission of cookies by changing the settings in the internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that all functions of the website can no longer be used to their full extent.

G. Contact form

A contact form is available on our website, which can be used for electronic contact. If you make use of these possibilities, the data entered in the input mask will be transmitted to us and stored. These data are name and first name, e-mail address, the message as such as well as your telephone number. At the time the message is sent, the IP address of the user and the date and time of contact are also stored. The data will not be passed on to third parties in this context. The data will be used exclusively for the processing of the conversation. The legal basis for the processing of this personal data is Art. 6 para. 1 lit. f DSGVO.

The processing of the personal data from the input mask serves us exclusively for the processing of the establishment of contact. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. This is also our legitimate interest pursuant to Art. 6 para. 1 lit. f DSGVO.

The data from the contact form are deleted as soon as they are no longer required for the purpose of their collection, i.e. the respective conversation with you has ended. The conversation is terminated when it can be inferred from the circumstances that the relevant facts have been conclusively clarified.

You can object to the processing of your personal data at any time. To exercise your right to object, please send an e-mail to the following address: digades [at] digades.de (digades[at]digades[dot]de).

H. Newsletter

You can subscribe to a free newsletter on our website. To send the newsletter, we use the newsletter mailing service of The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA (Mail Chimp) whose server is located in the USA. The Rocket Science Group is a privacy certified company. The privacy statement can be found at https://mailchimp.com/legal/privacy/.

For the processing of the data, the following consent is obtained during the registration process and reference is made to this privacy statement:
"Yes, I would like to receive the newsletter & have read the information in the privacy statement. I can unsubscribe from the newsletter at any time".

When registering for the newsletter, the e-mail address from the input mask will be sent to us. In addition, the IP address of the calling computer as well as the date and time of registration are collected. Furthermore, a range measurement is carried out. For this purpose the newsletter contains a so-called "web-beacon". This is a file the size of a pixel, which is retrieved from the server of the dispatch service provider when the newsletter is opened. During this retrieval, information about the browser you are using, your IP address and the time of retrieval is collected. This data is evaluated statistically for the purpose of improving our offer (opening rate and click rate).

The legal basis for sending the newsletter is your consent pursuant to Art. 6 para. 1 lit. a DSGVO. According to Art. 6 para. 1 lit. f DSGVO, the legal basis for the statistical evaluation and the logging of the registration procedure is our legitimate interest in improving our services.

The collection of the user's e-mail address serves to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used. The data are deleted as soon as they are no longer required for the purpose of their collection. The user's e-mail address will therefore be stored as long as the newsletter subscription is active or other legal bases continue to exist. The other personal data collected during the registration process will generally be deleted after a period of seven days.

The subscription to the newsletter can be terminated by the user concerned at any time. For this purpose there is a corresponding link in every newsletter. This also enables the revocation of the consent to the storage of personal data collected during the registration process.

I. Contact

On our website you will find an e-mail address by which you can contact us. In this case, the personal data transmitted with the e-mail will be stored. The data will not be passed on to third parties in this context. The legal basis for the processing is Art. 6 para. 1 lit. f DSGVO.

If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. The processing of personal data serves us solely to process the establishment of contact. This is also the necessary legitimate interest in the processing of the data.

The data will be deleted as soon as they are no longer required for the purpose of their collection, i.e. the respective conversation has ended. The conversation is terminated when it can be inferred from the circumstances that the relevant facts have been conclusively clarified.

J. Digades - Links

On our website you will find various links leading to other websites provided by us. The links do not process any personal data. With the opening of the new internet pages, the data protection regulations for the processing of personal data there apply. 

K. Hosting

For the purpose of operating this website we use the following services from a hosting service provider located in Germany: infrastructure and platform, computing capacity, storage space and database services, IT security, and technical maintenance.

The legal basis for the processing of data for this purpose is Art. 6 para. 1 lit. f in conjunction whit Art. 28 DSGVO. Our legitimate interest lies in the provision of this website.

L. Social media presences

On our website we provide you with various links to social media sites (Facebook, Instagram, Twitter, Youtube). We have our own social media pages with the third-party providers that can be reached via the links. By using the links, you can access the respective third-party websites and also share our content. As soon as you have called up the third-party provider's website, you are in the area of responsibility of the respective third-party provider, so that their data protection declaration or their declarations on data use also apply. We have no influence on this, but we recommend that you log out of the respective third-party provider yourself to avoid unnecessary data transfer before using a corresponding link, so that usage profiles cannot be created by the third-party provider through the use of the link.

We are represented in the following social networks with our own social media presence and can be reached by you:

• Facebook/ Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Facebook pages on the basis of an agreement on joint processing of personal data - Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=…
• Instagram/ Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA - Privacy Statement / Opt-Out: http://instagram.com/about/legal/privacy/.
• Twitter/ Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA - Privacy Statement: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=….
• YouTube/ Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) - Privacy Statement: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=….
• Whats App /WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland;  Privacy Statement: https://www.whatsapp.com/legal/#privacy-policy; Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TSnwAAG&status=….

We would like to point out that personal data collected when you visit our social media sites is also processed outside the European Union. In these so-called third countries there may be a lower level of data protection than in the European Union (e.g. USA). As a rule, the data collected there using cookies is also used for market research and advertising purposes (personalised advertising) and user profiles are created.

The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) DSGVO. Our legitimate interest lies in informing users about our products and our company as well as in simple and quick communication with interested parties. If the users have consented to the processing of the data by the platform provider, Art. 6 para. 1 lit. a. is applicable. DSGVO is the legal basis for the processing. Please also note that the most effective way to assert your rights is to assert them directly against the platform provider. Should you require any assistance, please do not hesitate to contact us.

M. Google Analytics (Third-party Cookie)

This website uses Google Analytics (with anonymization function). Google Analytics is a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Among other things, a web analysis service collects data about the website from wich a person concerned has accessed a website (so-called referrer URL), which subpages of the website have been accessed or how often and for how long a subpage was viewed. Google Analytics sets a cookie for this purpose on the end device used by you. By setting the cookie, Google is able to analyse the use of our website. Each time one of the individual pages of this website is accessed, the Internet browser on the end device of the person concerned is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. The cookie is used to store personal information, such as the time of access, the location from which an access originated and the frequency of visits to our website by the person concerned. Whenever a person visits our website, this personal data, including the (anonymized) IP address of the Internet connection used by the person concerned, is transmitted to Google stored there. Google may pass this data on to third parties. Personal data may be transmitted to the servers of Google LLC. in the USA. Google LLC. with headquaters in the USA, ist certified an accordance with the "Privacy Shield" data protection agreement (https://www.privacyshield.gov/list).

The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 S. 1 lit. DSGVO.

We use the addition "_gat._anonymizeIp" for the web analysis via Google Analytics. By means of this addition, the IP address of the Internet connection of the user of Google is shortened and made anonymous if the access to our Internet pages is from a member state of the European Union or from another state that is a party to the Agreement on the European Economic Area.

You can prevent the setting of cookies at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the user's terminal device. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs. 

In addition, you have the possibility to object to and prevent the collection of data generated by Google Analytics and relating to the use of this website, as well as to the processing of this data by Google, and to prevent such processing. For this purpose you must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout . This browser add-on informs Google Analytics via JavaScript that no data and information on visits to Internet pages may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as a contradiction.

Further information and and Google's applicable data protection regulations can be found at www.google.de/intl/de/policies/privacy/ and www.google.com/analytics/terms/de.html.

N. Google Fonts (Third-party Cookie)

We integrate Google Fonts as external fonts on our website. Google Fonts is a service of Google  Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The integration of the external Google Fonts is done by a server call. In the course of transmission Google stores the IP address of the browser of the respective terminal device. Personal data may be transmitted to the servers of Google LLC. in the USA. Google LLC. with headquarters in the USA, is certified according to the "Privacy Shield" data protection agreement (https://www.privacyshield. gov/list).

The legal basis for the processing of your data is Art. 6 para. 1 s. 1 lit. f DS-GVO. The legitimate overriding interest is the user-friendly design of our website.

You will find more detailed information in Google's data protection information, which you can access here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/

O. Google-ReCaptcha

We use the Goolge-ReCaptcha function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The reCaptcha feature allows us to identify bots and spam to ensure that entries are only made by natural persons. Using the reCaptcha function, bots and spam can be identified. We use this service if you want to use our contact form. reCaptcha also sets an additional cookie. When using the reCaptcha function, the following data can be transmitted to Google using a cookie set by Google: Referrer URL, IP address, information about the operating system, user behaviour, date and language settings, screen resolution.

In the context of the use of Google reCaptcha it can come to a transmittion of personal data to the servers of Google LLC. in the USA. Google LLC. with headquaters in the USA, is certified according to the "Privacy Shield" data protection agreement (https://www. privacyshield.gov/list).

The legal basis of the processing is your consent in accordance with Art. 6 para. 1 lit a DSGVO.

You can find out more about reCAPTCHA and the corresponding data protection declaration at https://policies.google.com/privacy?hl=de.

P. Use of Social Plug-ins/ Use of Shariff Buttons

We have integrated social media plugins on our website. Social media services operate platforms on the Internet that enable users to present themselves on the platform and to contact and communicate with other users in various ways.

We have implemented so-called Shariff Buttons, which link to the respective social media service. If the user clicks on the Shariff button and is logged in to his profile, data such as IP address and referrer URL will be transmitted to the social media provider and the user is taken directly to his profile at the respective social media provider via a window and can share the link to the post there. In contrast to the Share Buttons, which are provided directly by the social media providers, there is no data transfer between social media service and visitor before clicking the Shariff Button on our website. More information about Shariff Buttons can be found under this link: //www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-24….

According to Art. 6 para. 1 sentence 1 lit. a DSGVO, the legal basis is the consent given by clicking the Shariff button. The purpose of using the Shariff Buttons is to make our products, campains and our company known to the public. The duration of storage, possibilities of revocation, further information and the applicable data protection regulations can be found in the data protection regulations linked in the descriptions of the social media servics.

Facebook

Facebook enables users of the social network to create private profiles, upload photos and network via friend requests, among other things. The operating company of Facebook is Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, is responsible for the processing of personal data of those affected outside the USA and Canada. Facebook's privacy policy, which can be accessed at //en.facebook.com/about/privacy/, provides information about data processing by Facebook and the settings that can be made to protect privacy.
 

Instagram

Instagram is a service that allows users to share photos and videos on its platform and also share such data on other social networks. The operating company is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. For more information and to review Instagram's current privacy policies, please visit //help.instagram.com/155833707900388 and //www.instagram.com/about/legal/privacy/
 

Twitter

Twitter is a publicly accessible platform on which users can publish and distribute messages with a maximum of 280 characters, so-called tweets. The tweets are displayed to the so-called followers of the respective user (followers are other Twitter users to whom the tweets of a user are automatically displayed after pressing the Follow button), but are also visible to persons not logged on to Twitter. The operating company of Twitter is Twitter, Inc. 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The current Twitter data protection regulations can be found at //twitter.com/privacy?lang=en.

Q. Adaptive Image (Third-Party Cookie)

On our website we use "Adaptive Image" by Matt Wilcox (http://adaptive-images.com/). This software is used to adapt the size of the images provided on our website to the end device used by the user. For this purpose, a cookie is placed on your terminal device, which transmits information about the device used. Depending on the device used, the images are displayed in the optimal size.

The purpose of the processing is the user-friendly design of our website, which is also in our legitimate interest pursuant to Art. 6 para. 1 lit. f DSGVO.

R. Google AdWords Remarketing

We use on our website the Google AdWords Remarketing function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

This enables us to create user-related advertisements an to display interest-related advertisements on other internet pages of the Google advertising network. For this purpose, user behaviour and interests are analysed. In order to carry out the analysis, Google sets a cookie in the browser of your end device. This cookie records visits to our website as well as anonymous data on the website. The personal information collected by means of the cookie during each visit to our website, including the IP address of the terminal device used by the person concerned, is transferred to Google in the United States of America, stored there and possibly passed on to third parties. If you subsequently visit another website in the Google Display network, you will be shown advertisements that most probably take into account previously called up product and information areas. In doing so, Google obtains knowledge of personal data such as the IP address or the surfing behaviour of the user, which Google uses to display interest-relevant advertising. In the context of the use of Google AdWords, personal data may be transmitted to the servers of Google LLC. in the USA. Google LLC., based in the USA, is certified according to the "Privacy Shield" data protection agreement (https://www.privacyshield.gov/list).

The processing is based on their consent in accordance with Art. 6 (1) lit. a DSGVO. You can withdraw your consent at any time by permanently deactivating the use of cookes by Google by following the link below and downloading and installing the plug-in provided there: https://support.google.com/ads/answer/7395996?hl=de.

Alternatively, you can deactivate the use of cookies by third-party providers by going to the deactivation page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and implementing the additional information on opting out mentioned there.

For more information about Google Remarketing and its privacy policy, please visit: https://www.google.com/privacy/ads/.

S. Changes to our privacy policy

We reserve the right to amend this data protection declaration if this becomes necessary due to changed processing procedures, legal changes or current jurisdiction.

T. Rights of the data subject

If personal data is processed by you, you are the data subject within the meaning of the DSGVO and you are entitled to the following rights vis-à-vis the person responsible:

1. Right to information

You can request confirmation from the person responsible as to whether personal data relating to you will be processed by us. In the event of such processing, you may request the following information from the data controller:

(1) the purposes for which the personal data will be processed;

(2) the categories of personal data processed;

(3) the recipients or categories of recipients to whom the personal data relating to you has been or will be disclosed;

(4) the planned duration of the retention of the personal data relating to you or, if it is not possible to provide specific information in this regard, criteria for determining the retention period;

(5) the existence of a right to rectify or delete personal data relating to you, a right to limit the processing by the controller or a right to object to such processing;

(6) the existence of a right of appeal to a supervisory authority;

(7) all available information on the origin of the data, if the personal data are not collected from the data subject;

(8) the existence of automated decision-making including profiling in accordance with Art. 22 (1) and (4) DSGVO and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing on the data subject.

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 DSGVO in connection with the transfer.

2. Right to rectification

You have the right to have your personal data corrected and/or completed by the data controller if the personal data processed concerning you is inaccurate or incomplete. The data controller must carry out the rectification immediately.

3. Right to limit the processing

Under the following conditions, you may request that the processing of your personal data be restricted:

(1) if you dispute the accuracy of the personal data concerning you for a period of time which allows the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you refuse to erase the personal data and instead request that the use of the personal data be restricted;

(3) the controller no longer needs the personal data for the purposes of the processing, but you need them for the assertion, exercise or defence of legal claims, or

(4) if you have objected to the processing pursuant to Art. 21 para. 1 DSGVO and it has not yet been established whether the legitimate reasons of the data controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data - apart from their storage - may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.

If the processing restriction has been limited in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

4. Right to cancellation

a) Duty to delete

You may request the data controller to delete the personal data concerning you immediately and the data controller is obliged to delete this data immediately if one of the following reasons applies:

(1) Personal data relating to you shall no longer be necessary for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent on which the processing pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO was based and there is no other legal basis for the processing.

(3) You object to the processing pursuant to Art. 21 para. 1 DSGVO and there are no overriding legitimate reasons for the processing or you object to the processing pursuant to Art. 21 para. 2 DSGVO.

(4) The personal data concerning you have been processed unlawfully.

(5) The deletion of your personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.

(6) The personal data relating to you have been collected in relation to information society services offered pursuant to Art. 8 (1) DSGVO.

b) Information to third parties

If the person responsible has made the personal data concerning you public and is obliged to delete them in accordance with Art. 17 (1) DSGVO, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform the persons responsible for data processing who process the personal data that you, as the person concerned, have requested them to delete all links to this personal data or copies or replications of this personal data.

c) Exceptions

The right to deletion does not exist if the processing is necessary.

(1) the exercise of freedom of expression and information;

(2) to fulfil a legal obligation which processing is subject to under the law of the Union or of the Member States to which the controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 DSGVO;

(4) for archival purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DSGVO, insofar as the law referred to under section a) presumably makes it impossible or seriously impairs the attainment of the objectives of such processing, or

(5) to assert, exercise or defend legal claims.

5. Right to information

If you have exercised your right to rectify, cancel or limit the processing of your personal data against the controller, the latter is obliged to notify all recipients to whom the personal data concerning you have been disclosed of such rectification, cancellation or limitation, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of such recipients by the data controller.

6. Right to data transfer

You have the right to receive the personal data concerning you that you have provided to the responsible person in a structured, common and machine-readable format. In addition, you have the right to communicate these data to another data controller without being hindered by the controller to whom the personal data was provided, provided that

(1) the processing is based on a consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to Art. 6 para. 1 lit. b DSGVO and

(2) the processing is carried out by automated means.

In exercising this right, you also have the right to request that the personal data concerning you be transmitted directly by one responsible person to another responsible person, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this. The right to data transfer does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right of objection

 

8. Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of your consent does not affect the legality of the processing carried out on the basis of your consent until you revoke it.

9. Automated decision in individual cases including profiling

You have the right not to be subject to any decision based solely on automated processing, including profiling, that has any legal effect on you or similarly significantly affects you. This does not apply if the decision

(1) is necessary for the conclusion or performance of a contract between you and the responsible party,

(2) is authorised by legislation of the Union or of the Member States to which the person responsible is subject and contains appropriate measures to safeguard your rights and freedoms and your legitimate interests; or

(3) with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 DSGVO unless Art. 9 para. 2 lit. a or g DSGVO applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests. With regard to the cases referred to in (1) and (3), the person responsible shall take appropriate measures to protect the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the person responsible, to state his own position and to challenge the decision.

10. Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of presumed infringement, if you consider that the processing of your personal data is in breach of the DSGVO. The supervisory authority with which the complaint was lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.