Data Privacy Policy

Sect. 1 Gen­er­al

 

We will process your per­son­al data (e.g. title, name, address, e-mail address, phone num­ber) sole­ly in accor­dance with the pro­vi­sions of the Ger­man data pro­tec­tion law and the data pro­tec­tion law of the Euro­pean Union (EU). The fol­low­ing pro­vi­sions will inform you, besides the infor­ma­tion about the pro­cess­ing pur­pos­es, recip­i­ents, legal bases and stor­age peri­ods, also about your rights and the con­troller for your data pro­cess­ing. This pri­va­cy pol­i­cy applies only to our web­sites. If you are direct­ed to oth­er sites via links on our pages, please famil­iarise your­self with the respec­tive use of your data there.

 

 

Sect. 2 Rights of the data sub­ject

 

If your per­son­al data is being processed, you are the ‘data sub­ject’ in terms of GDPR and you have the fol­low­ing rights towards the con­troller:

 

 

1. Right of access by the data sub­ject

 

You may ask the con­troller to con­firm whether your per­son­al data is processed.

In the case of such pro­cess­ing, you may request the fol­low­ing infor­ma­tion from the con­troller:

(1) the pur­pos­es of the pro­cess­ing of the per­son­al data;

(2) the cat­e­gories of per­son­al data con­cerned;

(3) the recip­i­ents or cat­e­gories of recip­i­ent to whom the per­son­al data have been or will be dis­closed;

(4) the esti­mat­ed peri­od of time for which the per­son­al data will be stored, or, if not pos­si­ble, the cri­te­ria used to deter­mine that peri­od;

(5) the right to request from the con­troller to rec­ti­fy or erase the per­son­al data or the right to restrict the pro­cess­ing of per­son­al data con­cern­ing the data sub­ject or to object to such pro­cess­ing;

(6) the right to lodge a com­plaint with a super­vi­so­ry author­i­ty;

(7) the right to all avail­able infor­ma­tion on the source of the data if the per­son­al data are not col­lect­ed from the data sub­ject;

(8) the exis­tence of auto­mat­ed deci­sion-mak­ing, includ­ing pro­fil­ing in accor­dance with Arti­cle 22 (1) and (4) of the GDPR and — at least in these cas­es — mean­ing­ful infor­ma­tion for your about the log­ic involved, as well as the con­se­quences and intend­ed effects of such pro­cess­ing.

As a data sub­ject, you have the right to be informed whether the per­son­al data con­cern­ing you are trans­ferred to a third coun­try or to an inter­na­tion­al organ­i­sa­tion. In this regard, you may request to be informed of the appro­pri­ate safe­guards pur­suant to Arti­cle 46 GDPR relat­ing to the trans­fer.

 

 

2. Right to rec­ti­fi­ca­tion

 

You have the right to have cor­rect­ed and/or com­plet­ed your per­son­al data from the con­troller if your per­son­al data processed is incor­rect or incom­plete. The con­troller has to make the cor­rec­tion with­out delay.

 

 

3. Right to restric­tion of pro­cess­ing

 

You have the right to obtain from the con­troller restric­tion of pro­cess­ing where one of the fol­low­ing applies:

(1) if you con­test the accu­ra­cy of the per­son­al data relat­ing to you for a peri­od of time that enables the con­troller to ver­i­fy the accu­ra­cy of the per­son­al data;

(2) the pro­cess­ing is unlaw­ful and you refuse to erase the per­son­al data and request the restric­tion of the use of the per­son­al data instead;

(3) the con­troller no longer needs the per­son­al data for the pur­pos­es of pro­cess­ing, but you need them to estab­lish, exer­cise or defend legal claims; or

(4) if you have lodged an objec­tion against the pro­cess­ing in accor­dance with Art. 21 (1) GDPR and it has not yet been deter­mined whether the legit­i­mate rea­sons of the con­troller out­weigh your grounds.

Where pro­cess­ing of per­son­al data relat­ing to you has been restrict­ed, such data may, with the excep­tion of stor­age, only be processed with your con­sent or for the pur­pose of estab­lish­ing, exer­cis­ing or defend­ing legal claims or for the pro­tect­ing of the rights of anoth­er nat­ur­al or legal per­son or for rea­sons of an impor­tant pub­lic inter­est of the Union or of a Mem­ber State.

If the restric­tion of pro­cess­ing has been restrict­ed in accor­dance with the con­di­tions men­tioned above, you will be informed by the con­troller before the restric­tion of pro­cess­ing is lift­ed.

 

 

4. Right to era­sure

 

a) Oblig­a­tion regard­ing era­sure

You have the right to obtain from the con­troller the era­sure of your per­son­al data imme­di­ate­ly and the con­troller is oblig­ed to erase this data with­out delay where one of the fol­low­ing rea­sons applies:

(1) the per­son­al data are no longer nec­es­sary for the pur­pos­es for which they were col­lect­ed or oth­er­wise processed;

(2) you with­draw your con­sent on which the pro­cess­ing is based accor­dance to point (a) of Arti­cle 6 (1), or point (a) of Arti­cle 9 (2) GDPR and where there is no oth­er legal ground for the pro­cess­ing;

(3) you sub­mit an objec­tion to the pro­cess­ing accor­dance to Arti­cle 21 (1) of the GDPR, and there are no legit­i­mate rea­sons for the pro­cess­ing, or you lodge an objec­tion against the pro­cess­ing accor­dance to Arti­cle 21 (2) of the GDPR;

(4) your per­son­al data have been unlaw­ful­ly processed;

(5) your per­son­al data need to be erased for com­pli­ance with a legal oblig­a­tion in Union or Mem­ber State law to which the con­troller is sub­ject;

(6) your per­son­al data have been col­lect­ed in rela­tion to the offer infor­ma­tion soci­ety ser­vices referred to Arti­cle 8 (1);

 

b) Oblig­a­tion to inform oth­er con­trollers (third par­ties)

If the con­troller has made your per­son­al data pub­lic and is oblig­ed to erase them accor­dance to Arti­cle 17 (1) of the GDPR, he has to take rea­son­able steps, tak­ing into account the avail­able tech­nol­o­gy and the cost of imple­men­ta­tion, includ­ing tech­ni­cal mea­sures, to inform the con­trollers who process the per­son­al data that you, as the per­son con­cerned, have request­ed the era­sure of any links to, or copy or repli­ca­tion of those per­son­al data.

 

c) Excep­tions

The right to era­sure does not apply to the extent that pro­cess­ing is nec­es­sary:

(1) for exer­cis­ing the right of free­dom of expres­sion and infor­ma­tion;

(2) for ful­fil­ment of a legal oblig­a­tion which requires pro­cess­ing by the law of the Union or of the Mem­ber States to which the con­troller is sub­ject, or for the per­for­mance of a task car­ried out in the pub­lic inter­est or the exer­cise of offi­cial author­i­ty trans­ferred to the con­troller;

(3) for rea­sons of pub­lic inter­est in the area of pub­lic health in accor­dance with points (h) and (i) of Arti­cle 9 (2) as well as Arti­cle 9 (3) of the GDPR;

(4) for archiv­ing pur­pos­es in the pub­lic inter­est, sci­en­tif­ic or his­tor­i­cal research or for sta­tis­ti­cal pur­pos­es in accor­dance with Arti­cle 89 (1), inso­far as the right referred to in para­graph 1 is like­ly to make it impos­si­ble or seri­ous­ly impair the achieve­ment of the objec­tives of such pro­cess­ing; or

(5) for the estab­lish­ing, exer­cis­ing or defend­ing legal claims.

 

 

5. Noti­fi­ca­tion oblig­a­tion

 

If you have made use of your right to cor­rect, erase or restrict the pro­cess­ing of your per­son­al data, the con­troller is oblig­ed to inform all recip­i­ents to whom the per­son­al data have been dis­closed of this cor­rec­tion or era­sure of the data or lim­i­ta­tion of the pro­cess­ing, unless this proves to be impos­si­ble or involves a dis­pro­por­tion­ate effort.

You have the right to be informed of these recip­i­ents by the con­troller.

 

 

6. Right to data porta­bil­i­ty

 

You have the right to receive the per­son­al data relat­ing to you which you have pro­vid­ed to the data con­troller, in a struc­tured, com­mon­ly used and machine-read­able for­mat. In addi­tion, you have the right to trans­mit this data to anoth­er con­troller with­out hin­drance by the con­troller, who has been pro­vid­ed with the per­son­al data, where:

(1) the pro­cess­ing is based on a con­sent in accor­dance with the point (a) of Arti­cle 6 (1) or point (a) of Arti­cle 9 (2) or on a con­tract in accor­dance with the point (b) of Arti­cle 6 (1); and

(2) the pro­cess­ing is car­ried out using auto­mat­ed means.

In exer­cis­ing this right, you also have the right to have your per­son­al data are trans­mit­ted direct­ly from one con­troller to anoth­er, as far as this is tech­ni­cal­ly fea­si­ble. Free­doms and rights of oth­er per­sons may not be affect­ed there­by.

The right to data porta­bil­i­ty is not applic­a­ble to the pro­cess­ing of per­son­al data nec­es­sary for the per­for­mance of a task car­ried out in the pub­lic inter­est or in the exer­cise of offi­cial author­i­ty giv­en to the data con­troller.

 

 

7. Right to object

 

For rea­sons aris­ing from your par­tic­u­lar sit­u­a­tion, you have the right to object at any time to pro­cess­ing of per­son­al data con­cern­ing you, which is car­ried out based on point (e) or (f) of Arti­cle 6 (1); this also applies to pro­fil­ing based on these pro­vi­sions.

The con­troller will no longer process the per­son­al data con­cern­ing you, unless the con­troller can prove that there are com­pelling legit­i­mate grounds for the pro­cess­ing that out­weigh your inter­ests, rights and free­doms or the pro­cess­ing serves to estab­lish, exer­cise or defend legal claims.

Where the per­son­al data con­cern­ing you are processed for direct mar­ket­ing pur­pos­es, you have the right to object at any time to pro­cess­ing of per­son­al data con­cern­ing you for such mar­ket­ing; this also applies to pro­fil­ing, inso­far as it is relat­ed to such direct mar­ket­ing.

Where you object to the pro­cess­ing for the pur­pos­es of direct mar­ket­ing, the per­son­al data con­cern­ing you will no longer be processed for these pur­pos­es.

In the con­text of the use of infor­ma­tion soci­ety ser­vices, and notwith­stand­ing Direc­tive 2002/58/EC, you have the pos­si­bil­i­ty of exer­cis­ing your right to object by auto­mat­ed means using tech­ni­cal spec­i­fi­ca­tions.

 

 

8. Right to with­draw the dec­la­ra­tion of con­sent under Data Pro­tec­tion Act

 

You have the right to with­draw your dec­la­ra­tion of con­sent under Data Pro­tec­tion Act at any time. The with­draw­al of the con­sent does not affect the legal­i­ty of the pro­cess­ing car­ried out on the basis of the con­sent until the with­draw­al.

 

 

9. Auto­mat­ed indi­vid­ual deci­sion-mak­ing, includ­ing pro­fil­ing

 

You have the right not to be sub­ject to a deci­sion based sole­ly on auto­mat­ed pro­cess­ing, includ­ing pro­fil­ing, which has legal effect on you or which sig­nif­i­cant­ly impairs you in a sim­i­lar man­ner.

This does not apply if the deci­sion:

(1) is nec­es­sary for enter­ing into, or per­for­mance of, a con­tract between you and a data con­troller;

(2) is autho­rised by Union or Mem­ber State law to which the con­troller is sub­ject and which also lays down suit­able mea­sures to safe­guard your rights and free­doms and legit­i­mate inter­ests; or

(3) is based on your explic­it con­sent.

How­ev­er, these deci­sions may not be based on spe­cial cat­e­gories of per­son­al data in accor­dance with Arti­cle 9 (1), unless point (a) or (g) of Arti­cle 9 (2) applies and appro­pri­ate mea­sures to safe­guard the rights and free­doms and your legit­i­mate inter­ests are in place.

Regard­ing the cas­es referred to in (1) and (3), the data con­troller has to take appro­pri­ate mea­sures to safe­guard the rights and free­doms and your legit­i­mate inter­ests, at least the right to obtain human inter­ven­tion on the part of the data con­troller, to state his or her own posi­tion and to con­test the deci­sion.

 

 

10. Right to lodge a com­plaint with a super­vi­so­ry author­i­ty

 

With­out prej­u­dice to any oth­er admin­is­tra­tive or judi­cial rem­e­dy, you have the right to lodge a com­plaint with a super­vi­so­ry author­i­ty, in par­tic­u­lar in the Mem­ber State of your habit­u­al res­i­dence, place of work or place of the alleged infringe­ment if you con­sid­er that the pro­cess­ing of your per­son­al data infringes this Reg­u­la­tion.

The super­vi­so­ry author­i­ty with which the com­plaint has been lodged is to inform the com­plainant on the progress and the out­come of the com­plaint includ­ing the pos­si­bil­i­ty of judi­cial rem­e­dy accor­dance to Arti­cle 78.

 

 

Respon­si­ble for data pro­cess­ing:
Pfen­ing GmbH
Her­bert-Kühn-Str. 18
55481 Kirch­berg
Phone: +49 (0)6763 — 30 32 640
info@pfening-gmbh.com

 

 

Doc­u­ment pro­duced and updat­ed by janolaw AG.

Datenschutzerklärung für die Nutzung von Google Analytics

Diese Website nutzt Funktionen des Webanalysedienstes Google Analytics.
Anbieter ist die Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Google Ana­lyt­ics ver­wen­det sog. “Cook­ies”. Das sind Text­dateien, die auf Ihrem Com­put­er gespe­ichert wer­den und die eine Analyse der Benutzung der Web­site durch Sie ermöglichen. Die durch den Cook­ie erzeugten Infor­ma­tio­nen über Ihre Benutzung dieser Web­site wer­den in der Regel an einen Serv­er von Google in den USA über­tra­gen und dort gespe­ichert.

 

Mehr Infor­ma­tio­nen zum Umgang mit Nutzer­dat­en bei Google Ana­lyt­ics find­en Sie in der Daten­schutzerk­lärung von Google: https://support.google.com/analytics/answer/6004245?hl=de

Browser Plugin

Sie kön­nen die Spe­icherung der Cook­ies durch eine entsprechende Ein­stel­lung Ihrer Brows­er-Soft­ware ver­hin­dern; wir weisen Sie jedoch darauf hin, dass Sie in diesem Fall gegebe­nen­falls nicht sämtliche Funk­tio­nen dieser Web­site vol­lum­fänglich wer­den nutzen kön­nen. Sie kön­nen darüber hin­aus die Erfas­sung der durch das Cook­ie erzeugten und auf Ihre Nutzung der Web­site bezo­ge­nen Dat­en (inkl. Ihrer IP-Adresse) an Google sowie die Ver­ar­beitung dieser Dat­en durch Google ver­hin­dern, indem sie das unter dem fol­gen­den Link ver­füg­bare Brows­er-Plu­g­in herun­ter­laden und instal­lieren: https://tools.google.com/dlpage/gaoptout?hl=de

Widerspruch gegen Datenerfassung

Sie kön­nen die Erfas­sung Ihrer Dat­en durch Google Ana­lyt­ics ver­hin­dern, indem Sie auf fol­gen­den Link klick­en. Es wird ein Opt-Out-Cook­ie geset­zt, dass das Erfas­sung Ihrer Dat­en bei zukün­fti­gen Besuchen dieser Web­site ver­hin­dert: Google Ana­lyt­ics deak­tivieren