Information on data handling in accordance with Art. 13 or 14 GDPR

After the purpose of storage has ceased, the retention periods are generally at least six or ten years. As a rule, data is deleted immediately in accordance with our deletion concept, provided that this does not conflict with any retention obligation, necessity for contract fulfillment or a legitimate interest.

We secure our website and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. Despite regular checks, however, complete protection against all dangers is not possible.

The EU General Data Protection Regulation (GDPR) provides for extensive rights for data subjects in Chapter III, which we explain to you accordingly below with regard to the processing of your personal data:

1. Right to information

   This requirement concerns in particular information on the following details of data processing:

   • Processing purposes
   • Data categories
   • Recipients or categories of recipients, if applicable
   • If applicable, the planned storage duration or the criteria for determining this duration.
   • Note on the respective right of correction, deletion, restriction or objection
   • Existence of the right to complain to a supervisory authority
   • If applicable, origin of the data (if not collected from you)
   • If applicable, existence of automated decision-making including profiling, including meaningful information about the logic involved, the scope and the effects to be expected
   • If applicable, (planned) transfer to a third country or international organization
2. Right to rectification

   We will correct any erroneous data immediately, provided that you inform us of the circumstance accordingly.

3. Right to erasure (right to be forgotten)

   Provided that the processing is no longer necessary and one of the following conditions is met:

   • Discontinuation of the purpose of processing
   • Withdrawal of their consent and absence of any other legal basis for processing
   • Objection to processing without an important reason to the contrary
   • Unlawful processing
   • Required to fulfill a legal obligation
   • Data collection was carried out in accordance with Art. 8 (1) GDPR

   Within the scope of the deletion request, we will, if necessary, pass on your request to those third parties to whom a transfer of your data had previously taken place.

4. Right to restriction of processing

   Provided that one of the following conditions is met:

   • You dispute the accuracy of your data (restriction can be made for the duration of the review on our side)
   • In the event of unlawful processing and if the data is not to be deleted, restriction of processing shall take the place of deletion
   • If the processing purposes cease to apply, at the same time you need your data for the assertion, exercise or defense of legal claims
   • After you have lodged an objection pursuant to Art. 21 (1) GDPR and for the duration of the examination as to whether our legitimate reasons outweigh yours.
5. Right to data portability

   If it is technically possible and does not affect the rights and freedoms of other persons, we will - at your request - transfer your data to another recipient (responsible party).

6. Right to object

   If we collect or have collected and process personal data from you (on the basis of Art. 6 (1) e or f or Art. 9 (2) a GDPR), you have the right to object to the data processing (including profiling) at any time (with effect for the future). In exceptional cases, the objection may be ineffective, e.g. if we can demonstrate compelling interests worthy of protection for the processing that outweigh your interests or processing serves the assertion, exercise or defense of legal claims. If we process your personal data for the purpose of direct marketing, you have the right to object to such processing at any time. This also applies to profiling, insofar as it is related to such direct advertising. You also have the right to object to processing of your data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

7. Automated decisions in individual cases including profiling

   If we collect or have collected and process personal data from you, you have the right not to be subject to any decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. Exceptions to this requirement apply if the decision is necessary for the conclusion or performance of a contract between you and us or you have expressly consented to the processing. In any case, we will take reasonable steps to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person on our part, to express our own point of view and to contest the decision.

8. Right to revoke consent under data protection law

   You have the right to revoke consent to the processing of personal data at any time.

9. Right to complain to a supervisory authority

   A list of the supervisory authorities responsible in Germany can be found on the website of the Federal Commissioner for Data Protection or at the following link: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.

We process personal data in accordance with the requirements of the GDPR, depending on the type and purpose of the processing as follows:

Our legitimate interest, as defined in Article 6 (1) f GDPR, is based on the performance of our business activities in order to maintain our ability to operate and secure the employment of our employees.