for Hobby-Wohnwagenwerk Ing. Harald Striewski GmbH
Information about the collection of personal data and contact details of the controller
This Data Protection Policy explains the type, scope and purpose of processing personal data (hereinafter referred to as “data”) in the context of the provision of our services as well as within our online service and the associated websites, functions and content as well as external online presences, such as our Social Media Profile (hereinafter jointly referred to as “online service”). With regard to the terms used, such as “processing” or “controller”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
Ing. Harald Striewski GmbH
+49 (0)4331 - 6060
Data Protection Officer
Konzept 17 GmbH
Telefon: +49 4621 530 40 50
Data collected when visiting our website
If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we will only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website for you:
- Website visited
- Date and time of access
- Volume of data sent in bytes
- Source/link, from which website you accessed the page
- Browser used
- Operating system used
- IP address used (in anonymised form, where applicable)
The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
Upon contacting us (e.g. by means of contact form, e-mail, telephone or social media), the information provided by the user will be used in order to process the enquiry in accordance with Art. 6(1)(b) (in the context of contractual/pre-contractual relationships) and Art. 6(1)(f) (other enquiries) GDPR. The legitimate interest here is the complete processing and answering of the enquiry. The information provided by the user may be stored in a Customer Relationship Management system (“CRM system”) or in a comparable enquiry management system.
We delete enquiries insofar as these are no longer required. Furthermore, this policy is subject to statutory archiving obligations.
The data required for processing catalogue orders for the purpose of catalogue mailings in accordance with Art. 6(1)(b) GDPR will be stored, processed, analysed and forwarded to the catalogue service provider. After successful delivery, your data will be deleted unless you have consented to its further use.
In addition to the above, in accordance with Art. 6(1)(a) GDPR, if you have given your consent, you also consent to being contacted in person by one of our authorised dealers in your vicinity. For this purpose, your data will be stored and forwarded to authorised dealers in your vicinity. You also consent to receiving further information by post or newsletters regarding new products, events, competitions, trade fairs and other topics. For this purpose, your data will be stored, processed, analysed and forwarded until further notice to allow delivery of the service in question.
You may withdraw your consent at any time and without reason with effect for the future using any of the available methods to contact us.
Hosting and e-mail dispatch
The hosting services we use allow us to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services as well as technical maintenance services, which we use for the purpose of operating this website.
In this respect, we or our hosting provider process the inventory data, contact data, content data, contractual data, usage data, the meta and communication data of customers, interested parties and visitors to this website on the basis of our legitimate interests in the efficient and secure provision of this website in accordance with Art. 6(1)(f) GDPR.
On our website, we use Google Maps (API) from Google Ltd., Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service that provides interactive maps to display geographic information visually. Using this service shows you our location and makes it easier for you to find us.
When accessing subpages of our website in which Google Maps is embedded, information about your use of our website (such as your IP address) will be transmitted to and stored by Google on a server in the USA. This occurs regardless of whether Google provides a user account that you are logged in to, or if there is no user account. If you are logged in to Google, your data will be directly linked to your account. If you do not want the data to be linked to your Google profile, you should log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates this. In particular, your data is evaluated in accordance with Art. 6(1)(f) GDPR based on the legitimate interest of Google in inserting customised advertising, market surveys and/or tailoring the design of its website to your needs. You have the right to object to the creation of these user profiles, but you must contact Google to exercise this right.
Google LLC is based in the USA and is certified under the EU-US “Privacy Shield” data protection agreement, which guarantees that the level of data protection complies with that in force in the EU.
You can view Google’s Terms of Service at https://www.google.de/intl/de/policies/terms/regional.html, and the additional Terms of Service for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html.
Embedding of OpenStreetMap
This website uses the OpenStreetMap API (programming interface) to display geographic information visually. OpenStreetMap is provided by the OpenStreetMap Foundation based on the Open Data Commons Open Database License (ODbL).
WEB ANALYTICS SERVICES
The data produced by etracker is processed and stored exclusively in Germany on behalf of the provider of this website by etracker and is therefore subject to the strict German and European data protection laws and standards. To this effect, etracker has been independently tested, certified and awarded the data protection privacy seal ePrivacyseal.
Data processing is performed on the legal basis of Art. 6(1)(f) (legitimate interest) of the EU General Data Protection Regulation (GDPR). Our legitimate interest consists of the optimisation of our online service and our web presence. Since the privacy of our visitors is extremely important to us, the IP address is anonymised at the earliest available opportunity by etracker and the login or device identification converted by etracker into a clear, but not personally attributed, code. etracker will not make any other use of the data, integrate it with other data or transfer it to third parties.
Google (Universal) Analytics
This website uses Google Analytics, a web analytics service provided by Google Ltd., Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics uses so-called “cookies”, which are text files that are placed on your computer to help website operators analyse how a website is used. The information generated by the cookie about your use of this website (including your shortened IP address) will usually be transmitted to and stored by Google on a server in the USA.
This website only uses Google Analytics with the extension “_anonymizeIp()”, which ensures that your IP address will be shortened and prevents it from being directly linked to you personally. This extension means that your IP address will be shortened by Google in advance within the member states of the European Union or in other contracting member states of the treaty outside of the European Economic Area. The full IP address will only be transferred to a Google server in the USA and shortened there in exceptional cases. In these exceptional cases, such processing takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and Internet usage. The IP address communicated by your browser within the framework of the use of Google Analytics will not be linked together with other data from Google.
You can prevent cookies from being stored on your computer using the appropriate setting on your browser software; however, please note that you may not be able to use all the functions of this website to their full extent if you do so. You can also prevent Google from collecting the data generated by the cookie and linked to how you use the website (including your IP address), and accordingly prevent Google from processing this data, by downloading and installing the browser plug-in available by clicking on the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Another option to prevent Google Analytics from collecting data is to place an opt-out cookie on your device.
Google LLC is based in the USA and is certified under the EU-US “Privacy Shield” data protection agreement, which guarantees that the level of data protection complies with that in force in the EU.
OTHER GOOGLE SERVICES
We use fonts (“Google Fonts”) provided by Google. These web fonts are integrated by accessing a server, which is usually a Google server in the USA. As a result, the server receives information about which pages of our website you have visited. Furthermore, Google also saves the IP address of the device that visited the website.
Data processing when opening a customer account and for contract processing purposes
In accordance with Art. 6(1)(b) GDPR, personal data will be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. It is possible to delete your customer account at any time and this can be done by sending a message to the above-mentioned address of the controller. We store and use the data provided by you for contract processing purposes. After completion of the contract or deletion of your customer account, your data will be blocked in consideration of tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of the data has been reserved by our site. Please see below for further information in this regard.
Data collection during the ordering process
If you would like to order something from our online shop, you have the choice of either providing the data that is required for the order only once (guest) or creating a customer account where your data will be saved for future purchases. When you register or make a purchase as a guest, and enter any other data in our online shop, you do so on a voluntary basis. Furthermore, all of the data that we require to fulfil and process your orders will be requested when you register or make a purchase as a guest. To register, you will also need to select a user name and password. Both will make it easier for you to log in without having to re-enter all of your data. We will only save your data to create your customer account, which we will use to record, fulfil and process your orders. We will store your data for future orders, but you have the option to withdraw your consent. You can delete your customer account at any time. If you do not create a customer account, we will save your data for the purpose of contract performance and will delete it as soon as we are no longer obliged to retain it by law.
We have appointed the company Steckhan & Peters GmbH, Am Oxer 37–41, 24955 Harrislee as the processor to handle our orders and logistics. To ensure that your personal data is handled in a way that complies with data protection guidelines, we have entered into a processing contract in accordance with Article 28 GDPR.
Transfer of personal data to shipping service providers
If the goods are delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we shall forward your e-mail address to DHL prior to delivery of the goods in accordance with Art. 6(1)(a) GDPR for the purpose of agreeing a delivery date or for notification of delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only forward the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6(1)(b) GDPR. The transfer shall only take place to the extent necessary for the delivery of the goods. In this case, it will not be possible to agree the delivery date with DHL in advance or provide notification of delivery. Consent can be withdrawn at any time with effect for the future vis-à-vis the above-mentioned controller or vis-à-vis the transport service provider DHL.
If the goods are delivered by the transport service provider TNT (TNT Express GmbH, Haberstraße 2, 53842 Troisdorf), we shall forward your e-mail address to TNT prior to delivery of the goods in accordance with Art. 6(1)(a) GDPR for the purpose of agreeing a delivery date or for notification of delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only forward the name of the recipient and the delivery address to TNT for the purpose of delivery in accordance with Art. 6(1)(b) GDPR. The transfer shall only take place to the extent necessary for the delivery of the goods. In this case, it will not be possible to agree the delivery date with TNT in advance or provide notification of delivery. Consent can be withdrawn at any time with effect for the future vis-à-vis the above-mentioned controller or vis-à-vis the transport service provider TNT.
External payment service providers
We use the external payment service providers below, whose platforms enable users and us to conduct payment transactions.
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
Commercial register number: R.C.S. Luxembourg B 118 349
Privacy Statement available at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Visa Europe Services Inc.
Zweigniederlassung London 1 Sheldon Square
London W2 6TT
Phone: +44 (0)20 7795 5777
Privacy Statement available at https://www.visa.de/legal/global-privacy-notice.html
Mastercard Europe SA
Chaussée de Tervuren 198A B-1410 Waterloo
Phone: +32 2 352 51 11
Telefax: +32 2 352 58 07
MasterCard Privacy Notice available at https://www.mastercard.de/de-de/datenschutz.html
Purpose of processing
In accordance with Art. 6(1)(a) GDPR – Consent of the data subject
In accordance with Art. 6(1)(b) GDPR – Performance of contracts, taking steps prior to entering into a contract
In accordance with Art. 6(1)(f) GDPR – Legitimate interest (effective and secure payment method)
Type of data processed by payment service providers
- Inventory data, e.g. name and address
- Bank details, e.g. account number, credit card numbers, passwords, TANs and checksums, information related to the recipient
This information is required to enable the transaction to be conducted, and will only be collected and stored by the payment service providers.
We do not receive any information regarding your account or your credit card. We only receive a confirmation as to whether the payment has been processed or rejected.
In certain circumstances, the payment service providers will pass on the data to credit agencies for the purpose of identity and credit checks. The general terms and conditions and privacy policies of the payment service providers apply in these cases.
For the payment transactions, the general terms and conditions and privacy policies of the payment service providers apply. These also contain further information regarding the assertion of withdrawal, access and other data subject rights.
SOCIAL NETWORKS / SOCIAL MEDIA
On the basis of our legitimate interests in the analysis, optimisation and commercial operation of our online service as laid down in Art. 6(1)(f) GDPR, we use social plug-ins (“plug-ins”) provided by the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). This may include content, such as images, videos or texts and buttons that enable users to share content from this online service within Facebook. The list and appearance of Facebook plugins can be viewed here: https://developers.facebook.com/docs/plugins.
Facebook is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
When a user invokes a feature of this online service that contains such a plugin, their device establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted by Facebook directly to the user’s device and integrated into the online service from there. During this process, user profiles can be created from the processed data. We have no influence on the amount of data that Facebook collects with the help of this plugin and we are therefore informing users accordingly.
By incorporating the plugin, Facebook is able to receive information that a user has accessed the corresponding page of the online service. If the user is logged in to Facebook, Facebook can link the visit to his or her Facebook account. If users interact with the plugins, for example, by clicking the Like button or writing a comment, the corresponding information is directly transmitted from your device to Facebook and stored there. If a user is not a member of Facebook, there is still a possibility that Facebook will find out his or her IP address and store it. According to Facebook, only anonymised IP addresses are stored in Germany.
The purpose and scope of the data collection and additional processing and use of the data by Facebook as well as the corresponding rights and configuration options for protecting the privacy of users can be found in Facebook’s Data Policy: https://www.facebook.com/about/privacy
If a user is a Facebook member and does not want Facebook to collect data about him or her via this online service and link it to his or her membership data stored on Facebook, he or she must log out of Facebook and delete his or her cookies before using our online service. More settings and ways to withdraw your consent to the use of your data for advertising purposes are available within Facebook profile settings:
https://www.facebook.com/settings?tab=ads or via the US page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. The settings apply across all platforms, i.e. they are applied to all devices, such as desktop computers or mobile devices.
This website uses the YouTube embedding function to display and play videos from the “YouTube” platform provided by Google Ltd., Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The extended data protection mode is used, which, according to the provider, does not initiate the storage of user information until the video(s) is/are played. If the playback of embedded YouTube videos is started, the provider uses “YouTube” cookies to collect information about user behaviour. According to “YouTube”, these serve, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive practices. If you are logged in to Google, your data will be directly linked to your account when you click on a video. If you do not want the data to be linked to your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates this. In particular, your data is evaluated in accordance with Art. 6(1)(f) GDPR based on the legitimate interest of Google in inserting customised advertising, market surveys and/or tailoring the design of its website to your needs. You have the right to object to the creation of these user profiles, but you must contact YouTube to exercise this right.
Regardless of the playback of the embedded videos, every time this website is accessed, a connection to the Google network “DoubleClick” is established, which can trigger further data processing operations without our influence.
Facebook and Instagram fan page
For the information services offered on Facebook and Instagram, Hobby-Wohnwagenwerk Ing. Harald Striewski GmbH relies on the technical platform and services provided by Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland.
Please note that you alone are responsible for your use of these fan pages and their features. This applies in particular to the use of interactive features (e.g. comment, share, rate). Alternatively, you can also access the information and content offered on these pages on our own website at www.hobby-caravan.de.
When you visit our fan pages, Facebook records your IP address and other information, which is stored on your PC in the form of cookies. This information is used to provide us, as operators of the Facebook pages, with statistical information about how the pages are used. Facebook provides more information about this at the following link: http://de-de.facebook.com/help/pages/insights
The data collected about you in connection with this is processed by Facebook Ltd. and may be transmitted to countries outside the European Union in the process. Facebook’s data policy describes in general terms the information that it obtains and how it is used. Here you will also find information about options for contacting Facebook as well as options for advertising settings. The data policy is available at the following link: http://de-de.facebook.com/about/privacy
Facebook’s full data use policy can be found here:
Instagram’s full data use policy can be found here:
Facebook does not conclusively and clearly state and we do not know how Facebook uses the data from visits to Facebook and Instagram pages for its own purposes, to what extent activities on the pages are linked to individual users, how long Facebook stores this data and whether data from a visit to the page will be passed on to third parties.
When you access a Facebook or Instagram page, the IP address assigned to your device is transmitted to Facebook. According to information from Facebook, this IP address is anonymized (applies to “German” IP addresses) and is deleted after 90 days. Facebook also stores information about the devices of its users (e.g. in the context of the “Login notification” feature); Facebook may be able to use this to assign IP addresses to individual users.
If you are currently logged into Facebook as a user, there is a cookie with your ID on your device. This enables Facebook to tell that you have searched for this page and how you used it. This applies to all other Facebook and Instagram pages as well. Like buttons embedded in websites allow Facebook to record your visits to these websites and link them to your profile. Based on this data, content or advertising can be tailored to you.
If you want to avoid this, you should log out of Facebook or Instagram, deactivate the “Keep me logged in” feature, delete the existing cookies on your device and close and relaunch your browser. This is how Facebook information that enables you to be directly identified is deleted. This enables you to use our page without your ID being revealed. When you access interactive page features (like, comment, share, message, etc.) a Facebook login screen will appear. After logging in, Facebook will be able to recognise you as a specific user again.
Information about how you can manage or delete existing information about you can be found on the following Facebook Support pages: https://de-de.facebook.com/about/privacy. As an information service provider, we do not collect or process any data from your use of our service.
If you have any questions about the information we provide, you can contact us at info[at]hobby-caravan.de.
You can also find more information about Facebook and other social networks, as well as how to protect your data at www.youngdata.de
USE OF YOUR DATA FOR DIRECT MARKETING
Subscribing to our e-mail newsletter
If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The disclosure of any other data is voluntary and will be used to enable us to address you personally. We use the so-called double opt-in process for sending the newsletter. This means that we will only ever send you an e-mail newsletter if you have expressly confirmed to us that you agree to the sending of newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters by clicking on an appropriate link.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6(1)(a) GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your e-mail address at a later time. The data collected by us when you register for the newsletter will be used exclusively for the purpose of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter. You also have the option to directly edit your settings in our members’ area or to unsubscribe from the newsletter using the form that can be found there. Once you have unsubscribed, your e-mail address will immediately be deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data in excess thereof, which is permitted by law and about which we inform you in this policy.
Use of the e-mail marketing service “CleverReach”
This website uses CleverReach to send newsletters. The supplier is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that enables us to organise and analyse the distribution of newsletters. The data you provide (e.g. email address) for the purpose of subscribing to our newsletter will be stored on CleverReach servers in Germany or Ireland.
Sending our newsletters with CleverReach enables us to analyse the behaviour of newsletter recipients. Among other things, we can analyse how many recipients have opened the newsletter message and how often various links contained in the newsletter have been clicked. With the help of so-called conversion tracking, we can also analyse whether a predefined action (such as the purchase of a product on our website) takes place after clicking on the link in the newsletter. For more information on how data is analysed by CleverReach, please visit:https://www.cleverreach.com/de/funktionen/reporting-und-tracking
The data is processed on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time by unsubscribing from the newsletter. Withdrawing your consent does not affect the legality of the data processing that has already taken place beforehand.
If you do not want CleverReach to analyse your behaviour, please unsubscribe from the newsletter. To do this, we provide a corresponding link in every newsletter message. You can also unsubscribe as a recipient directly on our website.
The data you provided for the purpose of subscribing to the newsletter will be stored by us until your removal from the newsletter mailing list and will be deleted both from our servers and the servers of CleverReach when you have unsubscribed from the newsletter. This will not affect any data we have stored for other purposes (e.g. e-mail addresses for the members’ area).
We have entered into an agreement with CleverReach for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using CleverReach.
Sending the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services from our range by e-mail. In accordance with Section 7(3) of the German Act against Unfair Competition, we do not need to obtain separate consent from you to do this. In this respect, data processing takes place solely on the basis of our legitimate interest in personalised direct marketing in accordance with Art. 6(1)(f) GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You are entitled to object to the use of your e-mail address for the advertising purpose described above at any time with effect for the future by sending a message to the controller named above. In this regard, the only costs you will incur will be the basic cost of transmission. Upon receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.
On the basis of our legitimate interest in personalised direct marketing, we reserve the right to store your first and last name, your postal address and – if we have received this additional information from you within the framework of the contractual relationship – your title, academic degree, job title, industry or business name in accordance with Art. 6(1)(f) GDPR and to use this information to send you interesting offers and information about our products by post.
You can object to the storage and use of your data for this purpose at any time by sending an appropriate message to the controller.
You have the option to register for our members’ area. For your registration, we process personal data (surname, first name, title, date of birth, e-mail address) on the basis of Article 6(1)(b) GDPR for the performance of the resulting contractual relationship and to clearly identify who you are.
In the members’ area, you have the option to subscribe to our magazine “Hobby Heute”, which is published regularly. To manage the subscription and to enable us to send you the magazine, we process your address data on the basis of Article 6(1)(b) GDPR and pass on this data to our service provider Möller Druck und Verlag GmbH.
If desired, you can verify who your local dealer is in the members’ area and provide them with your contact details in order to receive offers and information that is tailored to you. The data will only be passed on based on the consent you give here in accordance with Article 6(1)(a) GDPR. You may also withdraw your consent here at any time with effect for the future.
Rights of the data subject
The applicable data protection legislation grants you extensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, which we inform you of below:
- Right of access in accordance with Art. 15 GDPR: In particular, you have the right of access to the personal data concerning you that we are processing, the purposes of the processing, the categories of personal data being processed, the recipients or categories of recipient to whom your personal data has been or will be disclosed, the envisaged retention period or the criteria used to determine the retention period, the existence of the right to request rectification, erasure or restriction of processing, to object to processing, the right to lodge a complaint with a supervisory authority, the source of your data if we have not collected it from you, the existence of automated decision-making, including profiling and, where applicable, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing, as well as your right to be informed about the safeguards that exist pursuant to Art. 46 GDPR relating to the transfer of your data to third countries;
- Right to rectification in accordance with Art. 16 GDPR: You have the right for inaccurate data concerning you to be rectified without undue delay and/or for any incomplete data we store relating to you to be completed;
- Right to erasure in accordance with Art. 17 GDPR: You have the right to request the erasure of your personal data if the conditions in Art. 17(1) GDPR are met. However, this right shall not exist in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of processing of your personal data provided that the accuracy of the data you are contesting is being verified, if you oppose the erasure of your data as the data processing is unlawful and request the restriction of the processing of your data instead, if you require your data for the establishment, exercise or defence of legal claims once we no longer need this data after it has served its purpose, if you have objected to processing on grounds relating to your particular situation pending the verification whether our legitimate grounds override yours;
- Right to be informed in accordance with Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, they are obliged to communicate the rectification or erasure of data or restriction of processing to each recipient to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability in accordance with Art. 20 GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to request its transmission to another controller, where technically feasible;
- Right to withdraw your consent in accordance with Art. 7(3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event that you withdraw your consent, we will immediately delete the data concerned, unless further processing can be justified on a legal basis for processing without consent. Withdrawing your consent does not affect the legality of the processing that has taken place on the basis of the consent prior to its withdrawal;
- Right to object in accordance with Art. 21 GDPR: If, within the framework of a consideration of interests, we process your personal data on the basis of our overriding legitimate interest, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation. You can send us your objection using the contact methods detailed above.
If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to further processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves to establish, exercise or defend legal claims.
If we process your personal data for direct marketing purposes, you have the right to object to the processing of your personal data for such marketing purposes at any time. You may exercise your objection as described above.
If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.
- Right to lodge a complaint in accordance with Art. 77 GDPR: If you consider that the processing of your personal data infringes the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, for example:
Independent Centre for Privacy Protection Schleswig-Holstein
Holstenstraße 98, 24103 Kiel; 0431/988-1200; firstname.lastname@example.org
Last updated: 13/05/2020