Pri­va­cy Policy

Name and cont­act details of the respon­si­ble par­ty in line with Artic­le 4 para­graph 7 of the GDPR:
BAS GmbH & Co. KG
Eglos­hei­mer Str. 101
D‑71679 Asperg, Ger­ma­ny
+49 (0) 7141 — 48 71 153
info@bas-gebaeudeautomation.de

Secu­ri­ty and pro­tec­tion of your per­so­nal data
We make it our top prio­ri­ty to main­tain the con­fi­den­tia­li­ty of the per­so­nal data that you pro­vi­de and pro­tect it against unaut­ho­ri­sed access. That is why we app­ly the utmost care and the latest secu­ri­ty stan­dards in order to gua­ran­tee maxi­mum pro­tec­tion of your per­so­nal data. We are sub­ject to the con­di­ti­ons of the Euro­pean Gene­ral Data Pro­tec­tion Regu­la­ti­on (GDPR) and the regu­la­ti­ons of the Fede­ral Data Pro­tec­tion Act (FDPA) and have taken tech­ni­cal and orga­ni­sa­tio­nal mea­su­res to ensu­re that the data pro­tec­tion regu­la­ti­ons are not only adhe­red to by us, but also by our third-par­ty ser­vice providers.

Defi­ni­ti­ons
The law­ma­ker demands that per­so­nal data is hand­led lawful­ly, in good faith, and in a man­ner that is com­pre­hen­si­ble to the affec­ted per­son (‘lawful, in good faith, trans­pa­rent’). In order to ensu­re the abo­ve, we her­eby inform you of the indi­vi­du­al defi­ni­ti­ons, which are also refer­red to in this pri­va­cy policy:

1.) Per­so­nal Data
‘Per­so­nal Data’ is any infor­ma­ti­on that refers to an iden­ti­fied or iden­ti­fia­ble natu­ral per­son (her­ein­af­ter ‘affec­ted per­son’); ‘iden­ti­fia­ble’ refers to any per­son who can be direct­ly or indi­rect­ly iden­ti­fied, par­ti­cu­lar­ly by means of asso­cia­ti­on, after being reco­g­nis­ed by their name, an ID num­ber, loca­ti­on infor­ma­ti­on, an online ID, or one or seve­ral par­ti­cu­lar cha­rac­te­ristics that express the phy­si­cal, phy­sio­lo­gi­cal, gene­tic, men­tal, finan­cial, cul­tu­ral, or social iden­ti­ty of this natu­ral person.

2.) Hand­ling
‘Hand­ling’ refers to any ope­ra­ti­on or set of ope­ra­ti­ons that is per­for­med upon per­so­nal data, whe­ther or not by auto­ma­ted means, exten­si­ve pro­ce­du­res, or any such set of ope­ra­ti­ons in rela­ti­on to per­so­nal data, such as the gathe­ring, cap­tu­re, orga­ni­sa­ti­on, arran­ging, sto­rage, modi­fi­ca­ti­on or altera­ti­on, rea­ding, inquiry, use, publi­ca­ti­on as a result of trans­fer, dis­tri­bu­ti­on, or any other form of sup­p­ly, matching or lin­king, rest­ric­tion, dele­ti­on or destruction.

3.) Rest­ric­tion of hand­ling
‘Rest­ric­tion of hand­ling’ means mar­king stored per­so­nal data with the aim of limi­ting how it is hand­led in the future.

4.) Pro­fil­ing
‘Pro­fil­ing’ is any kind of auto­ma­ted hand­ling of per­so­nal data that ent­ails the per­so­nal data being used to eva­lua­te cer­tain per­so­nal cha­rac­te­ristics refer­ring to a natu­ral per­son, espe­ci­al­ly ana­ly­sing or pre­dic­ting aspects rela­ted to the working capa­ci­ty, finan­cial situa­ti­on, health, per­so­nal pre­fe­ren­ces, inte­rests, relia­bi­li­ty, beha­viour, place of resi­dence, or chan­ge of loca­ti­on of this natu­ral person.

5.) Pseud­ony­mi­sa­ti­on
‘Pseud­ony­mi­sa­ti­on’ refers to the hand­ling of per­so­nal data in such a way that the per­so­nal data can no lon­ger be tra­ced back to a spe­ci­fic affec­ted per­son wit­hout con­sul­ting addi­tio­nal infor­ma­ti­on, pro­vi­ded this addi­tio­nal infor­ma­ti­on is stored sepa­ra­te­ly and is sub­ject to tech­ni­cal and orga­ni­sa­tio­nal mea­su­res that ensu­re that the per­so­nal data can­not be assi­gned to an iden­ti­fied or iden­ti­fia­ble natu­ral person.

6.) File sys­tem
‘File sys­tem’ refers to any struc­tu­red coll­ec­tion of per­so­nal data acces­si­ble accor­ding to cer­tain cri­te­ria, regard­less of whe­ther this coll­ec­tion is mana­ged in a way that is orde­red in a cen­tra­li­sed or decen­tra­li­sed man­ner accor­ding to func­tion­al or geo­gra­phi­cal aspects.

7.) Respon­si­ble par­ty
‘Respon­si­ble par­ty’ refers to any natu­ral or juristic per­son, offi­ci­al aut­ho­ri­ty, faci­li­ty, or any other cent­re that, whe­ther alo­ne or tog­e­ther with others, deci­des upon the pur­po­ses and means of pro­ces­sing per­so­nal data; if the pur­po­ses and means for this pro­ces­sing ari­se through a decis­i­on made by Euro­pean Uni­on law or the law of a Mem­ber Sta­te, the respon­si­ble par­ty and/or cer­tain cri­te­ria that they have named can be ear­mark­ed in line with Euro­pean Uni­on law or the law of that Mem­ber Sta­te..

8.) Data pro­ces­sing com­pa­ny
‘Data pro­ces­sing com­pa­ny’ refers to any natu­ral or juristic per­son, offi­ci­al aut­ho­ri­ty, faci­li­ty, or any other cent­re that pro­ces­ses per­so­nal data at the behest of the respon­si­ble party.

9.) Reci­pi­ent
‘Reci­pi­ent’ refers to any natu­ral or juristic per­son, offi­ci­al aut­ho­ri­ty, faci­li­ty, or any other cent­re that recei­ves per­so­nal data, regard­less whe­ther it is then for­ward­ed to a third par­ty or not. Howe­ver, any offi­ci­al aut­ho­ri­ties who may recei­ve per­so­nal data within the frame­work of a cer­tain inquiry in accordance with Euro­pean law or the law of a Mem­ber Sta­te are not clas­sed as reci­pi­ents; data hand­led by the­se aut­ho­ri­ties is done so in accordance with the appli­ca­ble data pro­tec­tion gui­de­lines accor­ding to the pur­po­ses of processing.

10.) Third par­ty
‘Third par­ty’ refers to any natu­ral or juristic per­son, offi­ci­al aut­ho­ri­ty, faci­li­ty, or any other cent­re, except for the affec­ted per­son, the respon­si­ble par­ty, the data pro­ces­sing com­pa­ny, and the per­son who hand­les per­so­nal data under the direct aut­ho­ri­ty of the respon­si­ble par­ty or the data pro­ces­sing company.

11.) Con­sent
The ‘con­sent’ of the affec­ted per­son is any vol­un­t­a­ry expres­si­on of inten­ti­on for the spe­ci­fied case, pro­vi­ded in an infor­med and unam­bi­guous man­ner, in the form of a decla­ra­ti­on or any other clear, affir­ma­ti­ve action, with which the affec­ted per­son indi­ca­tes that they con­sent to the pro­ces­sing of their per­so­nal data.

Lawful­ness of the pro­ces­sing
The pro­ces­sing of per­so­nal data is only dee­med lawful if the­re is a legal basis for pro­ces­sing to take place. A legal basis for pro­ces­sing could spe­ci­fi­cal­ly refer to the fol­lo­wing, in line with Artic­le 6(1)
lit. (a) through (f) of the GDPR:

• the affec­ted per­son has pro­vi­ded their con­sent for their per­so­nal data to be pro­ces­sed for one or more spe­ci­fied purposes;
• pro­ces­sing is neces­sa­ry for the ful­film­ent of a con­tract, in which the affec­ted per­son is a con­tract par­ty, or for the imple­men­ta­ti­on of pre-con­trac­tu­al mea­su­res, which are per­for­med at the request of the affec­ted person;
• pro­ces­sing is neces­sa­ry for the ful­film­ent of a legal obli­ga­ti­on to which the respon­si­ble par­ty is subject;
• pro­ces­sing is neces­sa­ry to pro­tect the vital inte­rests of the affec­ted per­son or ano­ther natu­ral person;
• pro­ces­sing is neces­sa­ry for per­forming a task that was trans­fer­red to the respon­si­ble par­ty and is in the public inte­rest, or is per­for­med in the exer­cise of offi­ci­al authority;
• pro­ces­sing is neces­sa­ry for safe­guar­ding the legi­ti­ma­te inte­rests of the respon­si­ble par­ty or a third par­ty, inso­far as this does not out­weigh the inte­rests or basic rights and basic free­doms of the affec­ted per­son who is deman­ding the pro­tec­tion of per­so­nal data, espe­ci­al­ly if the affec­ted per­son is a child.
  
  

Infor­ma­ti­on about gathe­ring per­so­nal data
(1) Her­ein­af­ter we will pro­vi­de infor­ma­ti­on about the gathe­ring of per­so­nal data through the use of our web­site. Per­so­nal data are data such as name, address, email addres­ses, and user beha­viour.
(2) In the event that you cont­act us via email or using a cont­act form, the data that you sup­p­ly (your email address, pos­si­bly your name and tele­pho­ne num­ber) will be saved by us in order to ans­wer your ques­ti­ons. We dele­te any data that is accrued in this con­text once sto­rage is no lon­ger neces­sa­ry, or pro­ces­sing is limi­t­ed in the event that sta­tu­to­ry sto­rage obli­ga­ti­ons are in place.

Gathe­ring per­so­nal data by visi­ting our web­site
If you sim­ply visit our web­site for infor­ma­tio­nal pur­po­ses, i.e. you do not regis­ter or send us infor­ma­ti­on in any other man­ner, we will only gather the per­so­nal data that your brow­ser sends to our ser­ver. If you would like to look at our web­site, we will gather the fol­lo­wing data that we requi­re on a tech­ni­cal level in order to show you our web­site and to ensu­re sta­bi­li­ty and secu­ri­ty (the legal basis is Artic­le 6(1)(1)(f) of the GDPR):

• IP-adress
• Date and time of the request
• Con­tents of the request (bas-gebaeudeautomation.de)
• Access status/HTTP sta­tus code
• Quan­ti­ty of data trans­mit­ted in each case
• Web­site issuing the request
• Brow­ser
• Ope­ra­ting sys­tem and interface
• Brow­ser lan­guage and version.
  
  

Use of coo­kies
(1) In addi­ti­on to the abo­ve-men­tio­ned data, coo­kies will also be saved on your com­pu­ter through the use of our web­site. Coo­kies are small text files that are saved on your hard dri­ve and that are assi­gned by the brow­ser to pro­vi­de cer­tain infor­ma­ti­on to the site that sets the coo­kie. Coo­kies can­not run pro­gram­mes or trans­fer viru­s­es to your com­pu­ter. They ser­ve to make the over­all web­site easier to use and more effective.

(2) This web­site uses the fol­lo­wing kinds of coo­kies, the scope and func­tion­a­li­ty of which are explai­ned below:

• Tran­si­ent coo­kies (as well as a.)
• Per­sis­tent coo­kies (as well as b.).
  
  

a) Tran­si­ent coo­kies are auto­ma­ti­cal­ly dele­ted when­ever you clo­se the brow­ser. This refers in par­ti­cu­lar to ses­si­on coo­kies. The­se save a so-cal­led ses­si­on ID, with which various requests from your brow­ser can be assi­gned to the com­mon ses­si­on. This makes it pos­si­ble to reco­g­ni­se your com­pu­ter when you return to our web­site. The ses­si­on coo­kies are dele­ted when you log out or clo­se the browser.

b) Per­sis­tent coo­kies are auto­ma­ti­cal­ly saved after a cer­tain peri­od, which can dif­fer from one coo­kie to the next. You can dele­te coo­kies at any time using the secu­ri­ty set­tings of your browser.

You can con­fi­gu­re your brow­ser set­tings in line with your wis­hes and reject the accep­tance of cer­tain types of coo­kies e.g. third-par­ty coo­kies or all types of coo­kies. So-cal­led ‘third-par­ty coo­kies’ are coo­kies that have been set by a third-par­ty, which means they were not set by the web­site whe­re you curr­ent­ly find yours­elf. We point out that by deac­ti­vat­ing coo­kies, you may not be able to use all func­tions of this website.

We imple­ment coo­kies in order to iden­ti­fy you on future visits, in the event that you have an account with us. If not, you will have to log in again with each visit.

Flash coo­kies used will not be gathe­red by your brow­ser, but rather by your Flash plug-in. We also use HTML5 sto­rage objects, which are stored on your end device. The­se objects store the neces­sa­ry data, regard­less of which brow­ser you use, and do not have an auto­ma­tic expiry date. If you do not want Flash coo­kies to be pro­ces­sed, it is neces­sa­ry to install a rele­vant add-on, e.g. ‘Bet­ter Pri­va­cy’ for Mozil­la Fire­fox www.addons.mozilla.org/de/firefox/addon/betterprivacy/ or the ‘Flash Coo­kie Kil­ler’ for Goog­le Chro­me. You can block the use of HTML5 sto­rage objects by swit­ching your brow­ser to pri­va­te mode. We also recom­mend manu­al­ly dele­ting your coo­kies and your brow­ser histo­ry on a regu­lar basis.

Child­ren
Our offer is strict­ly aimed at adults. Per­sons under the age of 18 should not send us any per­so­nal data wit­hout the per­mis­si­on of a parent or guardian.

Rights of the affec­ted person

(1) Revo­ca­ti­on of con­sent
If the pro­ces­sing of per­so­nal data is based upon declared con­sent, you have the right to revo­ke this con­sent at any time. The lawful­ness of the pro­ces­sing that has alre­a­dy taken place bet­ween the decla­ra­ti­on being made and the revo­ca­ti­on will remain unaf­fec­ted if con­sent is revo­ked. You can cont­act us at any time with regards exer­cis­ing your right to revocation.

(2)Right to con­fir­ma­ti­on
You have the right to demand con­fir­ma­ti­on from the respon­si­ble par­ty as to whe­ther we are pro­ces­sing your per­so­nal data. You can demand con­fir­ma­ti­on at any time using the cont­act details pro­vi­ded above.

(3) Right to infor­ma­ti­on
Inso­far as the per­so­nal data being pro­ces­sed, you can demand details about the­se per­so­nal data at any time, and about the fol­lo­wing information:

1. pur­po­ses of processing;
2. cate­go­ries of per­so­nal data that are being processed;
3. reci­pi­ents or cate­go­ries of reci­pi­ents with whom the per­so­nal data were shared or are still being shared, par­ti­cu­lar­ly in the case of reci­pi­ents loca­ted in third count­ries or in inter­na­tio­nal organisations;
4. if pos­si­ble, the plan­ned peri­od for which the per­so­nal data shall be stored, or if this is not pos­si­ble, the cri­te­ria used to deter­mi­ne the length of this period;
5. if a right to the cor­rec­tion or dele­ti­on of your per­so­nal data or to the rest­ric­tion of hand­ling by the respon­si­ble par­ty or a right to object to pro­ces­sing is in place;
6. if a right to com­plain to a regu­la­to­ry aut­ho­ri­ty is in place;
7. if the per­so­nal data are not gathe­red whe­re the affec­ted per­son is loca­ted, all available infor­ma­ti­on about the ori­gin of the data;
8. if an auto­ma­ted decis­i­on-making pro­cess is in place, inclu­ding pro­fil­ing in line with Artic­le 22(1) and (4) of the GDPR and – at least in the­se cases – meaningful infor­ma­ti­on about the invol­ved logic as well as the con­se­quen­ces and the desi­red effects of this kind of pro­ces­sing for the affec­ted person.
   
   

If per­so­nal data are trans­fer­red to a third coun­try or an inter­na­tio­nal orga­ni­sa­ti­on, you have the right to learn about the appro­pria­te gua­ran­tees in line with Artic­le 46 of the GDPR in rela­ti­on to the trans­fer. We pro­vi­de a copy of the per­so­nal data that are the sub­ject to data hand­ling. We are able to cla­im reasonable com­pen­sa­ti­on for all other copies reques­ted by you, due to the admi­nis­tra­ti­on cos­ts. If you make the request elec­tro­ni­cal­ly, the infor­ma­ti­on will be pro­vi­ded in a com­mon elec­tro­nic for­mat, inso­far as not­hing else is available. The right to recei­ving a copy in line with para­graph 3 of the abo­ve-men­tio­ned artic­le shall not affect the rights and free­doms of other persons.

(4) Right to cor­rec­tion
You have the right to demand the imme­dia­te cor­rec­tion of per­so­nal data rela­ted to you that is incor­rect. You have the right to demand the com­ple­ti­on of any incom­ple­te data rela­ting to yours­elf, taking the pur­po­ses of pro­ces­sing into con­side­ra­ti­on – even if this is by means of a com­ple­men­ta­ry declaration.

(5) Right to dele­ti­on (‘Right to be for­got­ten’)
You have the right to ask the respon­si­ble par­ty to dele­te your per­so­nal data imme­dia­te­ly, and we are obli­ged to dele­te that per­so­nal data imme­dia­te­ly, so long as one of the fol­lo­wing reasons applies:

1. The per­so­nal data are no lon­ger nee­ded for the pur­po­ses that they were gathe­red for or for pro­ces­sing in any other manner.
2. The affec­ted per­son revo­kes their con­sent, which for­med the basis of pro­ces­sing in line with Artic­le 6(1)(a) or Artic­le 9(2)(a) of the GDPR, and the­re is no other legal basis for processing.
3. The affec­ted per­son lodges the objec­tion against pro­ces­sing in line with Artic­le 21(1) of the GDPR and no over­ri­ding legi­ti­ma­te reasons for pro­ces­sing exist, or the affec­ted per­son lodges an objec­tion in line with Artic­le 21(2) of the GDPR.
4. The per­so­nal data have been pro­ces­sed unlawfully.
5. Dele­ti­on of per­so­nal data is requi­red for the ful­film­ent of a legal obli­ga­ti­on in line with Euro­pean Uni­on law or the law of a Mem­ber Sta­te, to which the respon­si­ble par­ty is subject.
6. The per­so­nal data were gathe­red in rela­ti­on to ser­vices offe­red by the infor­ma­ti­on socie­ty in line with Artic­le 8(1) of the GDPR.
   
   

If the respon­si­ble par­ty has published the per­so­nal data and is obli­ged to dele­ti­on in line with para­graph 1, then they must take appro­pria­te mea­su­res, which might also be of a tech­ni­cal natu­re, in order to inform the par­ty respon­si­ble for data pro­ces­sing who is pro­ces­sing the per­so­nal data that an affec­ted per­son has deman­ded the dele­ti­on of all links to this per­so­nal data or of copies or repli­ca­ti­ons of this per­so­nal data, while taking the tech­no­lo­gy available and the imple­men­ta­ti­on cos­ts into consideration.

The­re is no right to dele­ti­on (‘Right to be for­got­ten’) if pro­ces­sing is necessary:

• for exer­cis­ing the right to free­dom of expres­si­on and information;
• for the ful­film­ent of a legal obli­ga­ti­on, which makes pro­ces­sing neces­sa­ry in line with Euro­pean Uni­on law or the law of a Mem­ber Sta­te, to which the respon­si­ble par­ty is sub­ject, or for per­forming a task that is in the public inte­rest or in the exer­cise of offi­ci­al aut­ho­ri­ty which has been trans­fer­red to the respon­si­ble party;
• for reasons of public inte­rest in the field of public health in line with Artic­le 9(2)(h) and (i) as well as Artic­le 9(3) of the GDPR;
• for archi­ving pur­po­ses in the public inte­rest, sci­en­ti­fic or his­to­ri­cal rese­arch pur­po­ses, or for sta­tis­ti­cal pur­po­ses in line with Artic­le 89(1) of the GDPR, inso­far as the right named in para­graph 1 pre­su­ma­b­ly rules out or serious­ly affects the rea­li­sa­ti­on of the pro­ces­sing objec­ti­ves; or
• for the enforce­ment, exer­cise, or defence of legal claims.
  
  

(6) Right to the rest­ric­tion of hand­ling
You have to the right to demand that we rest­rict the hand­ling of your per­so­nal data, if one of the fol­lo­wing requi­re­ments are in place:

1. the accu­ra­cy of the per­so­nal data rela­ting to the affec­ted per­son is dis­pu­ted, and, for a length of time that allows the respon­si­ble par­ty to exami­ne the accu­ra­cy of the per­so­nal data,
2. hand­ling is being per­for­med unlawful­ly and the affec­ted per­son decli­nes the dele­ti­on of per­so­nal data and ins­tead demands that the use of their per­so­nal data is restricted;
3. the respon­si­ble par­ty no lon­ger requi­res the per­so­nal data for the pur­po­ses of pro­ces­sing, but the affec­ted per­son requi­res them for the enforce­ment, exer­cise, or defence of legal claims; or
4. the affec­ted per­son has lodged an objec­tion against pro­ces­sing in line with Artic­le 21(1) of the GDPR, as long as it is not yet cer­tain whe­ther the legi­ti­ma­te reasons of the respon­si­ble par­ty take pre­ce­dent over tho­se of the affec­ted person.
   
   

If pro­ces­sing has been rest­ric­ted in line with the abo­ve-men­tio­ned requi­re­ments, the­se per­so­nal data shall only be pro­ces­sed – not inclu­ding sto­rage, and only with the con­sent of the affec­ted per­son – for the enforce­ment, exer­cise or defence of legal claims, or for the pro­tec­tion of the rights of ano­ther natu­ral or juristic per­son or for reasons of important public inte­rests of the Euro­pean Uni­on or one of the Mem­ber States.

In order to cla­im the right to the rest­ric­tion of hand­ling, the affec­ted per­son can get in touch with us at any time using the cont­act details pro­vi­ded above.

(7) Right to data trans­fera­bi­li­ty
You have the right to recei­ve the per­so­nal data that you sup­pli­ed us with in a struc­tu­red, com­mon, and machi­ne-rea­da­ble for­mat, and you have the right to trans­fer the­se data to ano­ther respon­si­ble par­ty wit­hout objec­tion from the respon­si­ble par­ty to whom the data have been trans­fer­red, so long as:

1. pro­ces­sing is based on con­sent in line with Artic­le 6(1)(a) or Artic­le 9(2)(a), or on a con­tract in line with Artic­le 6(1)(b) of the GDPR and
2. pro­ces­sing is per­for­med by means of auto­ma­ted procedures.

In exer­cis­ing the right to data trans­fera­bi­li­ty in line with para­graph 1, you have the right to effect the direct trans­fer of per­so­nal data from one respon­si­ble par­ty to ano­ther inso­far as this is tech­ni­cal­ly pos­si­ble. Exer­cis­ing the right to data trans­fera­bi­li­ty does not affect the right to dele­ti­on (‘Right to be for­got­ten’). This right does not app­ly if pro­ces­sing is neces­sa­ry in order to per­form a task that was trans­fer­red to the respon­si­ble par­ty and is in the public inte­rest, or is per­for­med in the exer­cise of offi­ci­al authority;

(8) Right of objec­tion
You have the tight to lodge an objec­tion against the pro­ces­sing of your per­so­nal data rela­ted at any time for reasons that emer­ge as a result of Artic­le 6(1)(e) or (f) of the GDPR; this also appli­es for pro­fil­ing pro­tec­ted by the­se con­di­ti­ons. The respon­si­ble par­ty shall no lon­ger pro­cess the per­so­nal data unless they can pro­ve com­pel­ling legi­ti­ma­te grounds for pro­ces­sing, which take pre­ce­dence over the inte­rests, rights, and free­doms of the affec­ted per­son, or pro­ces­sing is for the enforce­ment, exer­cise, or defence of legal claims.

If per­so­nal data are being pro­ces­sed in order to pur­sue direct adver­ti­sing, you have to right to lodge an objec­tion at any time against the pro­ces­sing of your per­so­nal data for the pur­po­se of this kind of adver­ti­sing; this also appli­es to pro­fil­ing if it is in con­nec­tion with this kind of direct adver­ti­se­ment. If you object to pro­ces­sing for the pur­po­ses of direct adver­ti­sing, your per­so­nal data will no lon­ger used for the­se purposes.

In the con­text of the use of ser­vices of the infor­ma­ti­on socie­ty, you can exer­cise your right to objec­tion, regard­less of Direc­ti­ve 2002/58/EC, by means of an auto­ma­ted pro­ce­du­re in which tech­ni­cal spe­ci­fi­ca­ti­ons are employed.

You have the right, for reasons that emer­ge from your par­ti­cu­lar situa­ti­on, to lodge an objec­tion against the pro­ces­sing of your per­so­nal data which are being pro­ces­sed for sci­en­ti­fic or his­to­ri­cal rese­arch pur­po­ses or sta­tis­ti­cal pur­po­ses in line with Artic­le 89(1), unless they are being pro­ces­sed for the ful­film­ent of a task that is in the public interest.

You can exer­cise the right to objec­tion at any time by cont­ac­ting the rele­vant respon­si­ble party.

You have the right not to be sub­jec­ted to a decis­i­on based sole­ly on auto­ma­ted pro­ces­sing – inclu­ding pro­fil­ing – that will take legal effect on you, or signi­fi­cant­ly affect you in a simi­lar man­ner. This does not app­ly if the decision:

1. is requi­red for the com­ple­ti­on or ful­film­ent of a con­tract bet­ween the affec­ted per­son and the respon­si­ble party,

2. is per­mis­si­ble on the basis of the legal gui­de­lines of the Euro­pean Uni­on or a Mem­ber Sta­te, to which the respon­si­ble par­ty is sub­ject, and the­se legal gui­de­lines fea­ture appro­pria­te mea­su­res for pro­tec­ting the rights and free­doms as well as the legi­ti­ma­te inte­rests of the affec­ted per­son or
3. takes place with the express con­sent of the affec­ted person.
   
   

The respon­si­ble per­son takes appro­pria­te mea­su­res to pro­tect the rights and free­doms as well as the legi­ti­ma­te inte­rests of the affec­ted per­son, which incor­po­ra­tes at the least the right to effect the inter­ven­ti­on of a per­son on the part of the respon­si­ble par­ty, expl­ana­ti­on of their own stand­point, and appeal against the decision.

The affec­ted per­son can exer­cise this right at any time by cont­ac­ting the rele­vant respon­si­ble party.

(9) Right to com­plain to a regu­la­to­ry aut­ho­ri­ty
You also have the right to com­plain to a regu­la­to­ry aut­ho­ri­ty, irre­spec­ti­ve of any other admi­nis­tra­ti­ve or judi­cial legal reme­dy, par­ti­cu­lar­ly in the Mem­ber Sta­te of your cur­rent place of resi­dence, your work­place, or the place of suspec­ted inf­rin­ge­ment if the affec­ted per­son is of the opi­ni­on that the pro­ces­sing of their per­so­nal data inf­rin­ges upon this regulation.

(10) Right to an effec­ti­ve legal reme­dy
You have the right to an effec­ti­ve legal reme­dy, irre­spec­ti­ve of any admi­nis­tra­ti­ve or judi­cial legal reme­dy in place, inclu­ding the right to com­plain to a regu­la­to­ry aut­ho­ri­ty in line with Artic­le 77 of the GDPR, if you are of the opi­ni­on that the rights available to you as a result of this regu­la­ti­on shall be inf­rin­ged upon due to your per­so­nal data being pro­ces­sed against the pro­vi­si­ons of this regulation.

Use of Goog­le Ana­ly­tics
(1) This web­site uses Goog­le Ana­ly­tics, a web ana­ly­sis ser­vice from Goog­le LLC („Goog­le“). Goog­le Ana­ly­tics uses so-cal­led ‘coo­kies’, text files that are saved on your com­pu­ter and enable the ana­ly­sis of use of the web­site. The infor­ma­ti­on gene­ra­ted by the coo­kie about your use of this web­site is usual­ly trans­fer­red to a Goog­le ser­ver in the United Sta­tes whe­re it is saved. Howe­ver, if IP anony­mi­sa­ti­on has been acti­va­ted on this web­site, your IP address will be shor­ten­ed in advan­ce by Goog­le insi­de the Mem­ber Sta­tes of the Euro­pean Uni­on or in other con­tract Sta­tes par­ty to the Agree­ment on the Euro­pean Eco­no­mic Area. The full IP address will only be trans­fer­red to a Goog­le ser­ver in the United Sta­tes, whe­re it will then be shor­ten­ed, in excep­tio­nal cases. At the behest of the ope­ra­tor of this web­site, Goog­le will use this infor­ma­ti­on to eva­lua­te your use of the web­site in order to gene­ra­te reports about web­site acti­vi­ties and to con­ti­nue pro­vi­de the web­site ope­ra­tor with ser­vices asso­cia­ted with the use of this web­site and the Internet.

(2) The IP address trans­fer­red by your brow­ser within the frame­work of Goog­le Ana­ly­tics will not be com­bi­ned with other data from Google.

(3) You can pre­vent the use of coo­kies with the rele­vant set­ting in your brow­ser soft­ware; but we would like to point out that if you deac­ti­va­te coo­kies, it is pos­si­ble that you will not be able to use all func­tions of this web­site to their full ext­ent. You can also pre­vent the cap­tu­re and pro­ces­sing by Goog­le of data rela­ting to your use of the web­site (inclu­ding your IP address) gene­ra­ted by the­se coo­kies by down­loa­ding and instal­ling the fol­lo­wing brow­ser plug-in, available at the fol­lo­wing link: https://tools.google.com/dlpage/gaoptout?hl=en.

(4) This web­site uses Goog­le Ana­ly­tics with the ‘_anonymizeIp()’ add-on. This means that IP addres­ses are pro­ces­sed in an abbre­via­ted for­mat, which makes it impos­si­ble to trace them back to a spe­ci­fic indi­vi­du­al. As such, if the gathe­red data can be tra­ced back to a spe­ci­fic per­son, this will be rule out imme­dia­te­ly, and the per­so­nal data will be dele­ted straight away.

(5) We use Goog­le Ana­ly­tics to ana­ly­se and impro­ve the use of our web­site on a regu­lar basis. We can use the sta­tis­tics gai­ned to impro­ve our offer and make it more inte­res­t­ing for you the user. In the excep­tio­nal case that per­so­nal data are trans­fer­red to the United Sta­tes, Goog­le is sub­ject to the EU–US Pri­va­cy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Goog­le Ana­ly­tics is Artic­le 6 (1) (f) of the GDPR.

(6) Infor­ma­ti­on about the third-par­ty sup­pli­er: Goog­le Dub­lin, Goog­le Ire­land Ltd, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land, Fax: +353 (1) 4361001. User con­di­ti­ons:
www.google.com/analytics/terms/de.html, Over­view of data pro­tec­tion: www.google.com/intl/de/analytics/learn/privacy.html, as well as the pri­va­cy poli­cy: www.google.de/intl/de/policies/privacy

(7) This web­site also uses Goog­le Ana­ly­tics to gain cross-device ana­ly­ses of user streams, which are car­ri­ed out by means of a user ID. You can deac­ti­va­te cross-device ana­ly­sis of your use under ‘My Data’ > ‘Per­so­nal Data’.

Inte­gra­ti­on of Goog­le Maps
(1) We also use the appli­ca­ti­on Goog­le Maps on this web­site. This enables us to pro­vi­de you with inter­ac­ti­ve maps within the web­site its­elf and gives you con­ve­ni­ent use of the maps feature.

(2) Through the use of this web­site, Goog­le recei­ves the infor­ma­ti­on that you have cal­led up on the rele­vant sub-page of our web­site. . The data lis­ted under Sec­tion 3 of this decla­ra­ti­on are also trans­fer­red. This takes place regard­less of whe­ther Goog­le sup­pli­es a user account, which you use to log­in, or if the­re is no user account. If you are log­ged in to Goog­le, your data will be auto­ma­ti­cal­ly assi­gned to your account. If you do not want the­re to be a con­nec­tion to your pro­fi­le via Goog­le, you must log out befo­re acti­vat­ing the but­ton. Goog­le saves your data in the form of a user pro­fi­le and uses it for the pur­po­se of adver­ti­sing, mar­ket rese­arch, and/or the needs-based design of its web­site. This kind of eva­lua­ti­on takes places espe­ci­al­ly (even for users who are not log­ged in) for the pur­po­se of needs-based adver­ti­sing and in order to inform other users of the social net­work about your acti­vi­ties on our web­site. You have the right to object to the crea­ti­on of this user pro­fi­le. To do so, you must address Goog­le directly.

(3) You can find fur­ther infor­ma­ti­on about the pur­po­se and scope of data coll­ec­tion and data pro­ces­sing by the plug-in pro­vi­der in the provider’s pri­va­cy poli­cy. The­re, you can also find fur­ther infor­ma­ti­on about your rights in this regard, and about the con­fi­gu­ra­ti­on opti­ons for the pro­tec­tion of your pri­va­te sphe­re: www.google.de/intl/de/policies/privac. Goog­le also pro­ces­ses your per­so­nal data in the USA and is sub­ject to the EU–US Pri­va­cy Shield, www.privacyshield.gov/EU-US-Framework.

Data pro­ces­sing com­pa­ny
We use third-par­ty ser­vice pro­vi­ders (data pro­ces­sing com­pa­nies) for the hos­ting, design, main­ten­an­ce, and manage­ment of our web­site. A sepa­ra­te order data pro­ces­sing has been con­cluded as a way of ensu­ring the pro­tec­tion of your per­so­nal data.

We work with the fol­lo­wing ser­vice providers:

Hos­ting:
STRA­TO AG
Pas­cal­stra­ße 10
D‑10587 Ber­lin, Ger­ma­ny
Tel.: +49 30–300 146 0
Fax: +49 30–886 15 111

Web design and pro­gramming:
Imma­gi­ne GmbH (Wer­be­agen­tur und Web­agen­tur)
Rosen­hei­mer Stra­ße 12, D‑81669 Munich, Ger­ma­ny
Tel.: +49 89 330 351 10
www.immagine.de