Sauer Compressors Group

Privacy

Data protection declaration in accordance with Art. 13 of the General Data Protection Regulation (GDPR)

  -> Datenschutzerklärung in deutscher Sprache

1 Objective and scope

This data protection notice describes the processing of personal data in connection with the website www.sauercompressors.com

1.1 Further information on data protection

Further data protection information for specific business transactions can be found under the following links:


2 Who is responsible for data processing and whom can I contact?

The person responsible within the meaning of the Basic Data Protection Regulation (GDPR) and other national data protection laws of the member states and other data protection regulations is the:

J.P. Sauer & Sohn Maschinenbau Beteiligungsgesellschaft mbh
Brauner Berg 15
24159 Kiel, Germany

Telephone: +49 (0) 431/39 40-0
Telefax: +49 (0) 431/39 40-24

Internet: www.sauercompressors.com
E-Mail: info@sauercompressors.de

2.1 Data protection officer

Our data protection officer can be contacted at the above postal address with the words "To the data protection officer or at the e-mail address datenschutz@sauercompressors.de.


3 Security and protection of your personal data

We take the protection of your personal data very seriously and consider it our primary responsibility to maintain the confidentiality of the personal data you provide and to protect it from unauthorized access. Therefore, we apply the utmost care and state-of-the-art security standards to ensure maximum protection of your personal data.

As a company under private law, we are subject to the provisions of the European Data Protection Basic Regulation (GDPR) and the regulations of the Federal Data Protection Act (German BDSG). We have taken technical and organisational measures to ensure that the regulations on data protection are observed both by us and by our external service providers.

Our website contains links to other websites which are not covered by this data protection notice. When we provide links to other websites, we try to ensure that they comply with our standards. However, we have no control over the content or compliance with data protection regulations by the respective providers. If you visit other websites, please inform yourself about the regulations that apply to them.


4 Definitions

The legislator requires that personal data are processed lawfully, fairly and in a way that is comprehensible to the data subject ("lawfulness, fairness, transparency"). In order to ensure this, we inform the users of our website (hereinafter referred to as "users" or "you") about the individual legal definitions that are also used in this privacy policy:

4.1 Personal data

"Personal data" shall mean any information relating to an identified or identifiable natural person (hereinafter referred to as 'data subject'); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, a location data, an on-line identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person

4.2 Processing

"Processing" means any operation or set of operations, performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

4.3 Restriction of processing

"Restriction of processing" means the marking of stored personal data with a view to limiting their processing in the future.

4.4 Profiling

"Profiling" means any automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular with a view to analysing or predicting aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, conduct, location or movement of that natural person

4.5 Pseudonymisation

"Pseudonymisation" means the processing of personal data in such a way that the personal data cannot be traced back to a specific data subject without the inclusion of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data cannot be traced back to an identified or identifiable natural person

4.6 File system

"'Filing system" means any structured collection of personal data accessible according to specific criteria, whether centralised, decentralised or organised according to functional or geographical criteria

4.7 Responsible party

"Responsible party" shall mean a natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or national law, provision may be made for the controller or for the specific criteria for his or her designation in accordance with Union or national law

4.8 Processor

"Processor" means any natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller

4.9 Recipient

"Recipient" means any natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that person is a third party However, authorities which may receive personal data in the course of a specific investigation carried out pursuant to Union law or the law of the Member States shall not be considered as recipients; the processing of such data by those authorities shall be carried out in accordance with the applicable data protection rules and in compliance with the purposes of the processing.

4.10 Third party

"Third party" means any natural or legal person, public authority, agency or any other body, other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorized to process the personal data

4.11 Consent

The data subject's "consent" shall mean any freely given specific, informed and unequivocal expression of his or her wishes in the form of a declaration or other unequivocal affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.


5 Lawfulness of the processing

The processing of personal data is lawful only if there is a legal basis for the processing. Pursuant to Article 6 (1) lit. a - f GDPR, the legal basis for processing may be, in particular

  • The data subject has given his consent to the processing of personal data relating to him for one or more specific purposes;
  • the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
  • the processing is necessary for compliance with a legal obligation to which the controller is subject
  • the processing is necessary in order to protect the vital interests of the data subject or of another natural person
  • the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • the processing is necessary in order to protect the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child


6 General information on the collection of personal data on our website

Whenever you visit our website, we automatically collect personal data that your browser transmits to our Internet server. When using some of the functions of our website (e.g. contact form, newsletter registration), we also save the data you provide us with.


7 Creation of log files when visiting our website

In the case of purely informational use of the website, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser sends to our Internet server. The following data is automatically stored in the log files of our system:

  • IP address of your system
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (concrete URL of the requested page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Internet page from which the request comes (referrer)
  • Used operating system and its interface
  • Language and version of the browser software.

The above-mentioned data is technically necessary for us to display our website, to ensure the functionality of the website and to guarantee the stability and security of our IT systems. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 Para. 1 letter f GDPR. A consolidation of this data with other personal data of a user and an evaluation of the data for marketing purposes does not take place in this context.

The collection of data is necessary to provide the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

7.1 Deletion of the log files

The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected.

  • Data collected for the provision of the website will be deleted at the end of the session.
  • Data recorded in the log files are generally deleted after 7 days, unless in individual cases longer storage is necessary for reasons of data and system security or for error identification and correction. In these individual cases, the data will be anonymised so that it is no longer possible to assign the calling user.


8 Use of cookies and HTML 5 storage objects

8.1 Cookies

Cookies are small text files that are stored in the Internet browser or by the Internet browser on the computer system of the user. They cannot execute programs or transfer viruses to your computer, but serve to make the internet offer as a whole more user-friendly and effective.

Our website uses the following types of cookies, the scope and function of which are explained below:

8.1.1 Transient cookies

Transient cookies are automatically deleted when you close the browser. This includes in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. This enables your computer to be recognised when you return to our website.

8.1.2 Persistent cookies

Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. 

8.2 Use of cookies on our website

When you access our website, we inform you about the use of so-called cookies and refer you to this data protection information. We use cookies in order to be able to recognise you on a repeated visit to our website, to save you the trouble of logging in again if necessary and to be able to adapt our offer to your personal preferences.

You can deactivate cookies in the settings of your browser and use our website even without the use of cookies, which means that some displays and functions of our offer may only work to a limited extent.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR. The purpose of using technically necessary cookies is to simplify the use of our website for users and make it more user-friendly. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change. These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR. The user data collected through technically necessary cookies will not be used to create user profiles.

Cookies are stored on the user's system and transmitted to us by the user. Therefore you as a user have full control over the use of cookies:

  • You can delete the cookies in the security settings of your browser at any time.
  • You can configure your browser settings to your liking and, for example,  B. refuse to accept third-party cookies or all cookies. So-called "third party cookies" are cookies that are set by a third party and therefore not by the actual website on which you are currently visiting. We would like to point out that by deactivating cookies you may not be able to use all functions of this website.

8.3 Use of HTML5 storage objects

Furthermore we use HTML5 storage objects, which are stored on your device.

These objects store the required data regardless of the browser you use and do not have an automatic expiration date.

You can prevent the use of HTML5 storage objects by setting your browser to private mode.

8.4 Browser History

We also recommend that you regularly delete your cookies and browser history manually.


9 Analysis of the surfing behaviour

9.1 Matomo Analysis

We use the open source software tool Matomo on our website to analyse the surfing behaviour of our users. The software sets cookies on the user's computer.

If individual pages of our Internet site are called up, the following data is stored:

  • two bytes of the IP address of the calling system of the user,
  • the Internet page called up,
  • the website from which the user has reached the called up website (referrer),
  • the sub-pages that are called up from the called up Internet page,
  • the time spent on the website,
  • the frequency of access to the Internet site.

The software is set up in such a way that the IP addresses are not stored completely, but 2 bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way it is no longer possible to assign the shortened IP address to the calling computer.

The processing of the above mentioned data enables us to analyse the surfing behaviour of our users in an anonymous way. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. Through the analysis cookies we learn how the website is used and can thus constantly optimise our offer. These purposes also include our legitimate interest in processing personal data. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. f GDPR. The user data collected by analysis cookies is not used to create user profiles.

The data is deleted as soon as it is no longer required for our recording purposes. In our case this is after 730 days.

The software runs exclusively on our servers or servers of our contractually bound service providers. A storage of the personal data of the users only takes place there. The data will not be transferred to third parties.

We offer our users on our website the possibility of an opt-out from the analysis procedure. To do so, you must follow the corresponding link. In this way, another cookie is set on your system, which signals our system not to store the user's data. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. If the user deletes the corresponding cookie from his own system in the meantime, he must set the opt-out cookie again.

9.2 Opt-Out of the Matomo data acquisition

You can decide here whether a unique web analysis cookie may be stored in your browser to enable the website operator to collect and analyse various statistical data. If you want to decide against it, you have to follow the corresponding opt-out link to store the Matomo deactivation cookie in your browser. If the user deletes the corresponding cookie from his own system in the meantime, he must set the opt-out cookie again.

For more information about the privacy settings of the Matomo software, please follow this link:
https://matomo.org/docs/privacy/.


10 Further functions and offers of our website

In addition to the purely informative use of our website, we offer various services which you can use if you are interested. For this purpose, you will generally have to provide additional personal data which we use to provide the respective service and to which the aforementioned data processing principles apply.

10.1 Other contact via e-mail or telephone

It is possible to contact us via the provided e-mail address or telephone number. In this case, the user's personal data transmitted with the e-mail or provided on the phone will be stored.

The processing of personal data serves us solely to process the contact. This also includes the necessary legitimate interest in processing the data. The legal basis for the processing of the data is Art. 6 para. 1 letter f GDPR. If the purpose of the contact is the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR or Art. 26 para. 1 BDSG.

The data will be used exclusively for processing the conversation.

Inquiries are screened by our trained sales staff and are only forwarded to one of our subsidiaries or to one of our sales partners for processing if the contact concerns a specific order or a specific contract for which this subsidiary or sales partner is responsible. A transmission to recipients outside the EEA will only take place if the requirements of Art. 44 et seq. GDPR are fulfilled.

The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. This is the case when the respective conversation with the user has ended. The conversation is terminated when it can be concluded from the circumstances that the matter in question has been finally clarified.

The user can object to the storage of his personal data at any time. In such a case the conversation cannot be continued. For this purpose, an informal notification by e-mail or post is sufficient. In this case, all personal data stored in the course of the contact will be deleted, unless there are compelling reasons for processing worthy of protection that outweigh the interests, rights and freedoms of the person concerned, or the processing serves the assertion, exercise or defence of legal claims.

10.2 Contact form

Our website provides contact forms which can be used for electronic contact, requests for information or offers.

If a user takes advantage of this option, the data entered by you in the input mask will be transmitted to us and stored. This data is the data marked as mandatory (first and last name, company, country, e-mail address), or the data you have voluntarily provided (telephone, specification data, compressor data) or message text. The processing of the personal data from the input mask serves us solely to process the contact.

At the time the message is sent, the following data is also automatically saved: (i) consent to data processing (check box), (ii) date and time of dispatch, (iii) status on delivery, (iv) IP address. This data serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for the processing of the data is Art. 6 para. 1 letter f GDPR. Our legitimate interest is to offer users a simple means of contact and to process contacts, or - in the case of automatically stored data - to prevent misuse of the contact form and to ensure the security of our information technology systems. If the purpose of the contact is the conclusion of a contract, an additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

The data will be used exclusively for the processing of the contact.

Inquiries are screened by our trained sales staff and are only forwarded to one of our subsidiaries or to one of our sales partners for processing if the contact concerns a specific order or a specific contract for which this subsidiary or sales partner is responsible. A transmission to recipients outside the EEA will only take place if the requirements of Art. 44 et seq. GDPR are fulfilled.

The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. For the personal data from the input mask of the contact form, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be concluded from the circumstances that the matter in question has been finally clarified. The additional personal data collected during the sending process will be deleted after a period of 7 days at the latest.

The user has the possibility to object to the storage of his personal data at any time. For this purpose, it is sufficient to send us an informal message by e-mail or post. In such a case the conversation cannot be continued. The legality of the data processing operations carried out up to the objection remains unaffected by the objection. All personal data stored in the course of the contact will be deleted in this case, unless there are compelling reasons for processing worthy of protection that outweigh the interests, rights and freedoms of the person concerned, or the processing serves the assertion, exercise or defence of legal claims.

10.3 Newsletter

On our website there is the possibility to subscribe to a free e-mail newsletter. When registering for the newsletter, the data from the input mask (i.e. your email address (mandatory field), and your first and last name) are stored. The collection of this data serves to deliver the newsletter.

In addition, the following data is collected during registration: (i) date and time of registration, (ii) browser with version and language, (iii) operating system used, (iv) double opt-in confirmation (v) IP address. The collection of this data during the registration process serves to prevent misuse of the services or the e-mail address used.

For the processing of the data, your consent will be obtained during the registration process and reference will be made to this data protection information. The legal basis for the processing of personal data is Art. 6 para. 1 lit. a GDPR.

In connection with the data processing for the dispatch of newsletters, the data will not be passed on to third parties. The data will be used exclusively for sending the newsletter.

The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. The data from the input mask will therefore be stored for as long as the subscription to the newsletter is active. The other personal data collected during the registration process is usually deleted after a period of 7 days.

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose there is a corresponding link in every newsletter. This also enables the user to revoke his or her consent to the storage of personal data collected during the registration process.

10.4 Applicant portal

You can apply for an open position on our online applicant portal. We inform you about our data processing in connection with the use of the applicant portal in our data protection information on the applicant portal.


11 Linking to social media networks

We do not use so-called social plug-ins in our online offer, but provide you with links prepared for direct access to our social media pages. The links to the social networks are described individually in this section.

By providing you with a prepared link, we protect you from the fact that your visit to our websites is recorded and evaluated by providers of social networks by default, i.e. without conscious action. If you call up a page on our website that contains such links, they are initially deactivated.

If you do not want the social network providers to receive data via this website and, if necessary, save or re-use it, you should not click on the respective links.

Only when you click on the links will you be redirected to the linked page and your browser will transmit user data, including the IP address, directly to the server of the respective provider and, if necessary, save it there. We have no influence on this data transfer. The linked service receives the information that you have accessed the corresponding subpage of our website (referrer). The service also receives certain access data. This happens regardless of whether you are logged into a user account at the linked service or whether no user account exists. The provider or its server may be located outside the EU or EEA (e.g. in the USA).

We have no influence on the scope of the data collected and stored by the social network providers about the collected and stored data as well as the purpose and scope of the collection, further processing and use of the data by the social network. Please refer to the data protection information of the respective social network for your rights and setting options for protecting your privacy.

11.1 Facebook

Our website uses a prepared link to our page of the social network Facebook, which is operated at www.facebook.com by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, and at www.facebook.de by Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland ("Facebook"). The link is marked with a Facebook logo.

Facebook grants us access to statistical analyses that provide information about the use of our Facebook page ("Insights data"). The analyses visible to us do not allow us to analyse the usage behaviour of individual persons. We can only view aggregated data (e.g. number of hits, likes, followers, region of origin, age group, gender) that provide information about our audience and the use of our Facebook Page. We process this data to make the content on our Facebook Page known to specific target groups and to better understand and optimise the use of our Facebook Page. Further information on the statistics provided by Facebook can be found at https://de-de.facebook.com/business/a/page/page-insights

Furthermore, we cannot influence the data processing of Facebook. With regard to the processing of Insights data, Facebook Ireland Limited and we are jointly responsible. Facebook fulfils all obligations under the GDPR with regard to the processing of Insights data. Data subject rights (see point 13 of this privacy policy) in connection with Insights data can be asserted with Facebook Ireland as well as with us.

Facebook is solely responsible for the further processing of the data. For the purpose and scope of data collection, further processing and use of data by Facebook, as well as your rights and setting options for protecting your privacy, please refer to Facebook's data protection information: http://www.facebook.com/policy

If you do not want Facebook to collect data about you via our website, you must log out of Facebook before you visit our website.

11.2 Twitter

This website uses a formatted link to our Twitter social networking site, which is operated by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA ("Twitter"). The links are marked with a Twitter logo.

For the purpose and scope of data collection, further processing and use of data by Twitter, as well as your rights and settings options to protect your privacy, please refer to the Twitter data protection information: https://twitter.com/de/privacy.
Twitter has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).

11.3 LinkedIn

Our website uses a prepared link to our site of the social network LinkedIn, which is operated by LinkedIn Corporation (2029 Stierlin Court, Mountain View, California 94043, USA, "LinkedIn"). The link is marked with a LinkedIn logo.

The purpose and scope of data collection and the further processing and use of data by the provider as well as your rights and setting options for the protection of your privacy can be found in the provider's data protection information https://www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy Shield.

11.4 YouTube

We have integrated YouTube videos into our online offering, which are stored on the video platform http://www.YouTube.com (operated by YouTube LLC, headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA; "YouTube") and can be played directly from our website after clicking on a prepared link.

Only when you click on the corresponding link will you be redirected to the linked page and your browser will transfer data. We have no influence on this data transfer. The linked service receives the information that you have called up the corresponding subpage on our website (referrer). The service also receives certain access data. This happens regardless of whether you are logged into a user account at the linked service or whether no user account exists.

If you are logged in to Google, your information is directly associated with your account. If you don't want the assignment with your profile on YouTube, you must log out before activating the button. YouTube stores your data as user profiles and processes them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing need-based advertising and to inform other users of the social network about your activities on our website. Further information on the purpose and scope of processing by YouTube can be found in the data protection information at https://www.google.de/intl/de/policies/privacy. YouTube also processes your personal data in the USA and has submitted to the EU-US Privacy Shield.

11.5 OpenStreetMap

On this website, we use the services of OpenStreetMap (OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, UK, "OSMF") for the geographical representation of our locations. This allows us to display the map directly on the website. By clicking on the map or interacting with the map, certain data is shared with the OpenStreetMap Foundation (OSMF). If you do not wish this to happen, you should not click on the map or interact with the map.

When you visit an OSMF Web site or use an OSMF service through a browser, OSMF keeps the following records of that use:

  • Your browser or the calling application and the interaction(s) with the OSMF Web site, including

(a) IP address,

(b) Browser and device type,

(c) Operating system,

(d) referring website,

(e) the date and time of visits to the site; and

(f) the pages accessed on our websites.

For more information about the purpose and scope of processing by OSMF, please refer to the privacy policy at https://wiki.osmfoundation.org/wiki/Privacy_Policy. We have no influence on the scope of the data that OSMF collects and stores about you or the purpose and scope of the collection.

11.6 Google Maps

By clicking on an external link you can view places on Google Maps. If you do not click on the link, no data is transmitted to Google.

If you click on the link, please inform yourself about the privacy policy applicable to Google Maps (https://policies.google.com/privacy). Google also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield (Art. 45 DS-GVO).

If you are logged in to Google and click on the link, your information will be directly associated with your account. If you don't want the assignment with your profile on Google, you have to log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website.


12 Transmission of your personal data

We make use of external service providers (contract processors) for the maintenance of IT systems, server provision, web hosting services, for sending out information material and e-mail newsletters, conducting customer satisfaction surveys and analysing user behaviour. All service providers have been carefully selected and commissioned by us, are bound by our instructions and are regularly checked. A separate order processing agreement within the meaning of Art. 28 GDPR has been concluded with the service providers in order to guarantee the protection of your personal data.

Enquiries received via the contact form or by e-mail will be screened by our trained sales staff and, if necessary, forwarded to one of our subsidiaries or sales partners for processing, provided that the contact concerns a specific order or contract for which this subsidiary or sales partner is responsible.

A list of all relevant recipients can be provided on request.

Furthermore, we may pass on your personal data to third parties if we offer campaigns, competitions, contract conclusions or similar services together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer.

In addition, the transmission of your personal data is only carried out in legally determined cases. This applies in particular to cases where the transfer of data is necessary to fulfil a legal obligation to which we are subject, or if the transfer is legally permitted in individual cases.

Unless otherwise stated, we only transfer your data to recipients who are located in Germany or in the EU/EEA. Insofar as our service providers or partners are based in a state outside the European Economic Area (EEA), data will only be transmitted if the conditions of Art. 44 et seq. GDPR are fulfilled.


13 Children

Our offer is aimed at adults. Persons under 18 years of age should not transmit personal data to us without the consent of their parents or legal guardians.


14 Rights of the data subject

In order to assert your rights, you can contact us or our data protection officer at any time using the contact details given at the beginning of this data protection notice.

14.1 Revocation of consent (Art. 7 para. 3 GDPR)

If the processing of personal data is based on a granted consent, you have the right to revoke this consent at any time. Revocation of consent does not affect the lawfulness of the processing that has taken place on the basis of the consent until revocation.

14.2 Right to information (Art. 15 GDPR)

You have the right to request confirmation from the data controller as to whether we are processing personal data concerning you.

If personal data are processed, you have the right to be informed at any time about these personal data and to receive the information listed in Art. 15 Paragraph 1 letters a-h GDPR (such as the processing purposes; the recipients or categories of recipients of the data, etc.).

If personal data is transferred to a third country or to an international organisation, you have the right to be informed of the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.

We provide a copy of the personal data that is the subject of the processing. For any further copies you request, we may charge a reasonable fee based on the administrative costs.

14.3 Right of rectification (Art. 16 GDPR)

You have the right to ask us to correct incorrect personal data concerning you without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.

14.4 Right of cancellation (Art. 17 GDPR)

You have the right to demand that the person responsible for your personal data be deleted immediately, and we are obliged to delete personal data immediately if one of the reasons listed in Art. 17 Para. 1 letters a-f GDPR applies and we are not entitled to further data processing (within the meaning of Art. 17 Para. 3 GDPR).

14.5 Right to restrict processing (Art. 18 GDPR)

You have the right to ask us to limit the processing of your personal data if one of the conditions in Art. 18 para. 1 GDPR is fulfilled.

Where processing has been restricted in accordance with the above condition, such personal data, apart from being stored, shall only be processed with the consent of the data subject or for the purpose of pursuing, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.

14.6 Right to data transferability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided us in a structured, common and machine-readable format and you have the right to transfer this data to another responsible party without interference from the responsible party to whom the personal data was provided, provided that:

  • the processing is based on a consent pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
  • the processing is carried out by means of automated procedures.

14.7 Right of objection (Art. 21 GDPR)

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out pursuant to Art. 6, paragraph 1, letters e or f of the GDPR.

If personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing.

14.8  Right of appeal to a supervisory authority (Art. 77 GDPR)

You have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful, in particular if it infringes the GDPR.

 

Status of information: 11.5.2020