Data protection

We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of the Wietmarscher Ambulanz- und Sonderfahrzeuge GmbH. The use of the Internet pages of the Wietmarscher Ambulanz- und Sonderfahrzeuge GmbH is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as the name, address, email address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to Wietmarscher Ambulanz- und Sonderfahrzeuge GmbH. By means of this data protection declaration, our company seeks to inform the general public of the nature, scope and purpose of the personal data collected, used and processed by us. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.

As the controller, Wietmarscher Ambulanz- und Special Vehicles GmbH has implemented numerous technical and organisational measures to ensure the most complete protection possible for personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

2. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions related to data protection is:

Wietmarscher Ambulanz- und Sonderfahrzeug GmbH
Darwinstr. 11
48488 Emsbüren
Germany
Tel.: +49 5903 93201-100
E-Mail: info@was-vehicles.com
Website: www.was-vehicles.com

 

3. Name and address of the data protection officer

The data protection officer of the data controller is:
Erik Joel Hallmann, LL.M.
Biehn & Professionals GmbH
Wiesenstr. 32
33397 Rietberg-Mastholte
Germany
Tel.: +49 2944 9797121
E-Mail: datenschutz@was-vehicles.com
Website: www.biehn-und-professionals.de

Any data subject may, at any time, contact our Data Protection Officer directly with all questions and suggestions concerning data protection.

 

4. Hosting

We host the contents of our website with the following provider:
Mittwald

The provider is Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp (hereinafter Mittwald).

For details, please refer to Mittwald's privacy policy:
https://www.mittwald.de/datenschutz.

The use of Mittwald is based on Art. 6 Sect. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) point a GDPR and Section 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a contract prescribed by data protection law that ensures that the personal data of our website visitors is processed only in accordance with our instructions and in compliance with the GDPR.

 

5. SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that the browser's address line changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

 

6. Cookies

What are Cookies?

Cookies and similar technologies are very small text documents or pieces of code that often contain a unique identification code. When you visit a website or use a mobile application, a computer asks your computer or mobile device for permission to store this file on your computer or mobile device and to access information. Information collected through cookies and similar technologies may include the date and time of your visit and how you use a particular website or mobile application.

Why do we use cookies?

Cookies ensure that you remain logged in during your visit to our online store, that all items remain stored in your shopping cart, that you can shop safely and that the website continues to function smoothly. The cookies also ensure that we can see how our website is used and how we can improve it. In addition, depending on your preferences, our own cookies can be used to present you with targeted advertising that matches your personal interests. What type of cookies do we use?

Necessary cookies

These cookies are necessary for the website to function properly. Some of the following actions can be performed with these cookies.

  • Add items to a shopping cart for online purchases
  • Save your cookie settings for this website
  • Save language settings
  • Log in to our portal. We need to verify that you are logged in.

Performance cookies

These cookies are used to collect statistical information about our website usage, also known as analytics cookies. We use this data to improve performance and optimise our website.

Functional cookies

These cookies enable more functionality for our website visitors. These cookies may be set by our external service providers or our own website. The following functionalities may or may not be activated when you accept this category.

  • Live chat services
  • Watching online videos
  • Social media sharing buttons
  • Log in to our website using social media.

Advertising / Tracking Cookies

These cookies are set by third-party advertising partners and are used for profiling and tracking data across multiple websites. If you accept these cookies, we may display our advertising on other websites based on your user profile and preferences.

These cookies also store data on how many visitors have seen or clicked on our advertising in order to optimise advertising campaigns.

Not classified

These cookies are still in the classification process. They will appear in one of the following categories: necessary, performance, functionality or advertising.

How can I disable or remove cookies?

You can opt for all but the necessary cookies. In the browser settings, you can change the settings to block cookies. In most browsers, you will find an explanation of how to do this in the ‘Help’ function. However, if you block cookies, it is possible that you will not be able to use all the technical features of our website and that this may have a negative impact on your user experience.

Cookies that are required for the performance of the electronic communications transaction, to provide certain functions you want to use (e.g. the shopping cart function) or to optimise the website (e.g. cookies that provide measurable insights into the web audience) (necessary cookies) shall be stored on the basis of Art. 6 Sect. 1 lit. f GDPR, unless a different legal basis is cited. The website operator has a legitimate interest in the storage of cookies necessary for the technically error-free and optimised provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 Para. 1 lit. a DS-GVO and § 25 Para. 1 TDDDG); the consent can be revoked at any time.

 

7. Collection of general data and information

The Wietmarscher Ambulanz- und Special Vehicles GmbH website collects a range of general data and information each time the website is accessed by a data subject or an automated system. This general data and information is stored in the server log files. The following can be recorded: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites, which are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

When using these general data and information, Wietmarscher Ambulanz- und Special Vehicles GmbH does not draw any conclusions about the data subject. Rather, this information is required to (1) deliver the content of our website correctly, (2) optimise the content of our website and the advertising for it, (3) ensure the long-term functionality of our information technology systems and the technology of our website, and (4) provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. These anonymously collected data and information are therefore statistically evaluated by Wietmarscher Ambulanz- und Special Vehicles GmbH on the one hand and also with the aim of increasing data protection and data security in our company, in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring that the website is displayed correctly and is optimised.

 

8. Contact options via the website

Due to legal requirements, the Wietmarscher Ambulanz- und Special Vehicles GmbH website contains information that enables quick electronic contact with our company and direct communication with us, which also includes a general e-mail address. If a data subject contacts the controller by email or through a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted voluntarily by a data subject to the controller will be stored for the purposes of processing or contacting the data subject. This personal data will not be passed on to third parties.

The processing of these data is based on Art. 6 para. 1 lit. b DS-GMO, provided that your request is related to the execution of a contract or is required for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 para. 1 lit. f DS-GVO) or on your consent (Art. 6 para. 1 lit. a DS-GVO), provided that this has been requested; the consent is revocable at any time.

 

9. Use and application of social media sites

Data protection information on our social media sites can be found here.

 

10. Data protection provisions about the application and use of CookieFirst

The data controller uses CookieFirst on the website to obtain your consent to the storage of certain cookies on your device or the use of certain technologies and to document these in a data protection compliant manner. The provider of this technology is Digital Data Solutions B.V. (CookieFirst), Plantage Middenlaan 42A, 1018 DH Amsterdam, Netherlands (hereinafter referred to as ‘CookieFirst’).

When you visit the website, a connection is established to CookieFirst's servers to obtain your consent and other declarations regarding the use of cookies. CookieFirst then stores a cookie in your browser in order to be able to assign the consent you have given or any revocations of consent. In this process, the IP address (anonymised), the user agent of the browser and operating system, and the URL from which consent was granted are processed and integrated into CookieFirst. The data collected in this way is stored until you request us to delete it, delete the CookieFirst cookie itself or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected.

CookieFirst transmits personal data to third-party providers. These include CDN from Slovenia, IP geolocalisation from Romania and hosting at OHV in Germany and France. CookieFirst is based in Amsterdam, the Netherlands.

CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.

Contract data processing

We have concluded a contract for contract data processing for the use of the above-mentioned service. This is a contract prescribed by data protection law that ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.

 

11. Data protection provisions about the application and use of Matomo (formerly Piwik)

On this website, the controller has integrated the Matomo component (formerly Piwik). Matomo is an open-source software tool for web analysis. Web analysis is the collection, gathering and evaluation of data on the behaviour of visitors to websites. Among other things, a web analysis tool collects data about the website from which a data subject came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used to optimise a website and for a cost-benefit analysis of internet advertising.

The software is operated on the server of the controller, and the log files, which are sensitive under data protection law, are stored exclusively on this server.

The purpose of the Matomo component is to analyse visitor flows on our website. The controller uses the data and information obtained, among other things, to evaluate the use of this website in order to compile online reports showing the activities on our website.

Matomo sets a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, an analysis of the use of our website is enabled. With each call-up to one of the individual pages of this Internet site, the Internet browser on the information technology system of the data subject is automatically through the Matomo component prompted to submit data for the purpose of online analysis to our server. As part of this technical process, we obtain knowledge of personal data, such as the IP address of the data subject, which, among other things, helps us to track the origin of visitors and clicks.

The cookie is used to store personal information, such as the access time, the location from which access was made and the frequency of visits to our website. Each time you visit our website, this personal data, including the IP address of the internet connection used by the data subject, is transmitted to our server. This personal data is stored by us. We do not pass this personal data on to third parties.

As described above, the data subject can prevent our website from setting cookies at any time by adjusting the settings in their web browser and thus permanently object to the setting of cookies. Adjusting the web browser in this way would also prevent Matomo from setting a cookie on the data subject's IT system. Furthermore, cookies already set by Matomo can be deleted at any time via a web browser or other software programmes.

Furthermore, the data subject has the option to object to and prevent the collection of data generated by Matomo relating to the use of this website. To do this, the data subject must set an opt-out cookie. If the data subject's information technology system is deleted, formatted or reinstalled at a later date, the data subject must set an opt-out cookie again.

However, if the opt-out cookie is set, the data subject may no longer be able to use the controller's websites to their full extent.

This analysis tool is used on the basis of Art. 6 Sect. 1 lit. f GDPR. The controller has a legitimate interest in the analysis of user patterns to optimise both, the services offered online and the controller's advertising activities. If the appropriate consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) point a GDPR and Section 25 (1) TDDDG, insofar as the consent covers the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.

Further information and Matomo's applicable privacy policy can be found at matomo.org/privacy/.

Matomo OptOut

 

12. Data protection provisions about the application and use of Google Analytics

On this website, the controller has integrated the component of Google Analytics. Google Analytics is a web analytics service.

The operating company of Google Analytics is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

Google Analytics uses cookies, which are stored on the data subject's computer and enable an analysis of the use of our website. The cookie generates, among other things, the following information about the use of the website: browser type/version, operating system used, referrer URL, host name of the accessing computer, time of server request. This information is transferred to a Google server in the USA and stored there.

The data transmitted by Google Analytics will not be merged with other Google data. The data controller has also added the code anonymizeIP to Google Analytics on our website. This masks the IP address, so that all data is collected and transmitted anonymously.

The purpose of the Google Analytics component is to analyse visitor flows on our website. The data obtained by Google Analytics is used by Google to evaluate the use of our website and to create reports showing the activities on our website.

The data subject can prevent the setting of cookies by our website at any time by means of a corresponding setting in the internet browser. In addition, it is possible to delete cookies that have already been set at any time via the internet browser or other software programs.

Furthermore, the data subject has the option to object to and prevent the collection of data generated by Google Analytics and related to the use of this website and the processing of this data by Google. To do this, the data subject must download and install a browser add-on from tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google. Data transmission to the US is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The company is certified according to the ‘EU-US Data Privacy Framework’ (DPF). The DPF is an agreement between the European Union and the United States to ensure compliance with European data protection standards for data processing in the United States. Every DPF-certified company is committed to complying with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

This service is used on the basis of your consent in accordance with Art. 6 (1) point a GDPR and § 25 (1) TDDDG. This consent may be revoked at any time.

Further information and Google's applicable data protection provisions may be retrieved under www.google.de/intl/de/policies/privacy/ and under www.google.com/analytics/terms/de.html. Google Analytics is further explained under the following Link www.google.com/intl/de_de/analytics/ genauer erläutert.

 

13. Data protection provisions about the application and use of YouTube

The data controller has integrated YouTube components into this website. YouTube is an online video portal that allows video publishers to upload video clips free of charge and other users to view, rate and comment on these video clips, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and TV programmes, music videos, trailers or videos made by users themselves can be accessed via the online portal. YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be found at www.youtube.com/yt/about/de/ . As part of this technical process, YouTube and Google receive information about which specific subpage of our website is visited by the data subject.

If the data subject is logged in to YouTube at the same time, YouTube recognises which specific subpage of our website the data subject is visiting when a subpage containing a YouTube video is accessed. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google will receive information through the YouTube component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on YouTube; this occurs regardless of whether the person clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before accessing our website.

YouTube is used in the interest of presenting our online offers in an appealing way. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DS-GVO and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. The consent can be revoked at any time.

Further information about data protection at YouTube can be found in the company's data privacy policy at: https://policies.google.com/privacy?hl=de.

The company is certified according to the ‘EU-US Data Privacy Framework’ (DPF). The DPF is an agreement between the European Union and the United States to ensure compliance with European data protection standards for data processing in the United States. Every DPF-certified company is committed to complying with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

YouTube's published privacy policy, available at www.google.de/intl/de/policies/privacy/ , provides information about the collection, processing and use of personal data by YouTube and Google.

 

14. Data protection provisions about the application and use of Microsoft Teams

We use online conferencing tools, among other things, to communicate with our customers. The tools we use in detail are listed below. When you communicate with us via video or audio conference over the internet, your personal data is collected and processed by us and the provider of the respective conferencing tool.

The conference tools collect all the data that you provide/use to use the tools (email address and/or your telephone number). Furthermore, the conference tools process the duration of the conference, the start and end (time) of participation in the conference, the number of participants and other ‘context information’ related to the communication process (metadata).

Furthermore, the tool provider processes all technical data required to handle the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker, and the type of connection.

If content is exchanged, uploaded or otherwise provided within the tool, this is also stored on the servers of the tool providers. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information shared while using the service.

Please note that we do not have full influence on the data processing operations of the tools used. Our options are largely determined by the corporate policy of the respective provider. For more information on data processing by the conference tools, please refer to the data protection declarations of the tools used, which we have listed below this text.

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 lit. b GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). If consent has been requested, the tools in question are used on the basis of this consent; consent can be revoked at any time with effect for the future.

The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence over the storage duration of your data stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

Microsoft Teams

is provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. For details of data processing, please refer to the Microsoft Teams privacy policy: https://privacy.microsoft.com/de-de/privacystatement.

The company is certified according to the ‘EU-US Data Privacy Framework’ (DPF). The DPF is an agreement between the European Union and the United States to ensure compliance with European data protection standards for data processing in the United States. Each DPF-certified company is committed to complying with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/6474.

We have concluded a contract for the use of the above-mentioned service. This is a contract prescribed by data protection law that ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.

 

15. Data protection for applications and in the application process

The data controller collects and processes the personal data of applicants for the purpose of processing the application. The processing can also be carried out electronically. This is particularly the case if an applicant submits the relevant application documents to the data controller by electronic means, for example by email. If the controller enters into an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If the controller does not enter into an employment contract with the applicant, the application documents will be automatically deleted three months after notification of the rejection decision, provided that no other legitimate interests of the controller are opposed to the deletion. Another legitimate interest in this sense, for example, is a duty of proof in proceedings under the General Equal Treatment Act (AGG).

 

16. Legal bases of processing

Art. 6 I lit. a DS-GVO serves our company as a legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations that are necessary to carry out pre-contractual measures, for example in the case of inquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 I lit. c DS-GVO. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were to be injured and his or her name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d DS-GVO. Ultimately, processing operations could be based on Article 6(1)(f) of the GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, sentence 2, GDPR).

 

17. Legitimate interests in the processing being pursued by the controller or a third party

Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favour of the well-being of all our employees and the shareholders.

 

18. Routine erasure and blocking of personal data

The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as far as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject to.

If the purpose of the storage no longer applies or if a storage period prescribed by the European directive and regulation giver or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

 

19. Duration for which personal data is stored

The criterion for the duration of the storage of personal data is the respective statutory retention period. After the deadline, the corresponding data will be routinely deleted if they are no longer required to fulfil the contract or to initiate a contract.

 

20. Legal or contractual requirements to provide personal data; necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of not providing it

We would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary for the conclusion of a contract that a data subject provides us with personal data that we must subsequently process. For example, the data subject is obliged to provide us with personal data when our company concludes a contract with him or her. Failure to provide personal data would mean that the contract with the data subject could not be concluded. Before the data subject provides personal data, the data subject must contact one of our employees. Our employee will explain to the data subject on a case-by-case basis whether the provision of personal data is required by law or contract or is necessary for the conclusion of a contract, whether there is an obligation to provide the personal data and what the consequences of not providing the personal data would be.

 

21. Existence of automated decision-making

As a responsible company, we do not use automatic decision-making or profiling.

 

22. Rights of the data subject

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent that you have already given at any time. The legality of the data processing carried out up to the point of revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS FOR PROCESSING IS PROVIDED IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN PROVE THAT THERE ARE COMPELLING REASONS FOR PROCESSING WHICH ARE WORTHY OF PROTECTION AND WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 SECT. 1 GDPR). IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 SEC. 2 GDPR). Right of appeal to the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged violation. The right to lodge a complaint exists regardless of any other administrative or judicial remedies.

Right to data portability

You have the right to have data which we process based on your consent or in fulfilment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.

Information, correction and deletion

You have the right to request the restriction of the processing of your personal data. You can contact us at any time regarding this. The right to restriction of processing applies in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
  • If you have objected to processing pursuant to Article 21(1) of the GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – apart from their storage – may be processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.