Privacy notice

The protection of your personal data is very important to us.

In the following we would like to inform you that we will ask for personal data from you and that these will be stored electronically. Your data will be stored and processed by us in compliance with the relevant provisions of the national data protection laws and the General Data Protection Regulation (GDPR).

The person responsible within the meaning of the aforementioned regulations is:

APM Telescopes, Markus Ludes
Quierschieder Weg 38
66280 Sulzbach
GERMANY
Phone: +49 (0)6897 - 924929-0
Fax: +49 (0)6897 - 924929-9
Email: info@apm-telescopes.de

I. General

1. Terms

In order to ensure the readability and comprehensibility of our data protection declaration, we will inform you in advance about the basic terms used in the GDPR.

Personal data: Personal data is all information that relates to an identified or identifiable natural person (hereinafter „data subject“); An identifiable natural person is one who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special features that express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

Affected person: The data subject is any identified or identifiable natural person whose personal data is processed by the person responsible for processing.

Processing: Processing is any process carried out with or without the help of automated procedures or any such series of processes in connection with personal data such as the collection, recording, organization, ordering, storage, adaptation or change, reading, querying, use, Disclosure through transmission, distribution or any other form of provision, comparison or linking, restriction, deletion or destruction.

Restriction of processing: Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.

Profiling: Profiling is any type of automated processing of personal data that consists of using this personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, personal to analyze or predict the preferences, interests, reliability, behavior, whereabouts or relocation of this natural person.

Pseudonymization: Pseudonymization is the processing of personal data in a way in which the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is stored separately and is subject to technical and organizational measures that ensure that the personal data cannot be assigned to an identified or identifiable natural person.

Responsible person or person responsible for processing: The person responsible or responsible for the processing is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data. If the purposes and means of this processing are specified by Union law or the law of the member states, the person responsible or the specific criteria for his appointment can be provided for in accordance with Union law or the law of the member states.

Processor: Processor is a natural or juristic person, authority, institution or other body that processes personal data on behalf of the person responsible.

Recipient: Recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, authorities that may receive personal data as part of a specific investigation under Union law or the law of the member states are not considered recipients.

Third party: A third party is a natural or juristic person, authority, institution or other body apart from the concerned person, the person responsible, the processor and the persons who are authorized to process the personal data under the direct responsibility of the person responsible or the processor.

Consent: Consent is any declaration of intent voluntarily given by the data subject in an informed manner and unequivocally in the form of a declaration or other unequivocal affirmative action with which the data subject indicates that they consent to the processing of their personal data is.

Payment service providers: Payment service providers are used to process payments within the framework of contracts that a person concerned concludes with the person responsible.

2. Type and scope of data collection

When you access our website or access a file stored on our website, data is collected and processed. In principle, this only happens if this is necessary to provide a functional website and its content and services. Furthermore, a collection and use of personal data takes place regularly only with the appropriate consent. An exception applies in those cases in which prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

a. Legal basis for the processing of personal data

If the processing of personal data takes place in order to fulfill the contracts concluded with us, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

If we obtain the consent of the data subject for the processing of personal data, Article 6 (1) (a) GDPR serves as the legal basis.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 (1) (c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 (1) (f) GDPR serves as the legal basis for processing.

b. Data deletion and storage duration

The personal data collected by us will be deleted as soon as the purpose of storage no longer applies.

A storage takes place if this is provided for by a law, an EU regulation or other regulations.

Furthermore, deletion takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

II. Provision of the website

1. Logfiles

a. Description and scope of data processing

When you access our website

Browser type / version
Operating system used
Referrer URL (previously visited website), as well as pages accessed on our website
IP address
Date and time of the server request
Internet service provider

will be logged.

b. Legal basis for data processing

The legal basis for the storage of the data and the log files is Art. 6 Para. 1 lit.f GDPR.

c. Purpose of data processing

The storage in log files ensures the proper functioning of our website. It also serves to optimize and ensure the security of our systems. An evaluation of the data for marketing purposes does not take place in this context.

d. Duration of storage

The data stored by us will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case after maximum seven days. Storage beyond this is possible. In this case, the users' IP addresses are deleted or alienated so that they can no longer be assigned to the accessing client.

e. Objection and removal option

The collection of the data mentioned is absolutely necessary for the operation of the website. There is consequently no possibility of objection on the part of the user.

2. Cookies

a. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored on the visitor's computer system when you visit our website. Cookies contain a string of characters that enables the visitor's browser to be identified when they visit our website again. We use technically necessary cookies, which serve to make our offer more user-friendly, more effective and safer.

For example, the following data is stored in the cookies and transmitted:

Articles in shopping cart
Login data
language settings

The data obtained from this are pseudonymised by us. It is therefore not possible to assign the data to the visitor. Furthermore, this data is not stored with other personal data.

You can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted.

In addition, we use cookies that allow an analysis of the surfing behavior of our website visitors (so-called analysis cookies).

For example, the following data is stored and transmitted in the analysis cookies:

Pageviews
Use of the website functions
language settings

When you visit our website, the user is informed about the use of cookies and his consent to the processing of the personal data used is obtained.

b. Legal basis for data processing

The legal basis for the processing of personal data using cookies is Article 6 (1) (f) GDPR. The legal basis for the processing of personal data using cookies for analysis purposes, provided the user has given their consent, continues to be Article 6 (1) (a) GDPR.

c. Purpose of data processing

Technically necessary cookies are used to simplify the use of websites. Some functions of the website or the online shop cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after changing pages.

The user data collected by technically necessary cookies are not used to create user profiles.

The analysis cookies are used to improve the quality of our websites and their content. The analysis cookies tell us how the website is used and so we can continuously optimize our offer.

d. Duration of storage, possibility of objection and removal

Cookies are stored on the user's computer and transmitted from it. Therefore, users also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.

3. Newsletter

a. Description and scope of data processing

Users can subscribe to our newsletter on our website. When registering for the newsletter, the data requested from the input mask are transmitted to us.

In addition, the following data is collected when you register:

IP address of the computer of the user
Date and time of registration

As part of the registration process, consent is obtained through a so-called double opt-in procedure.

If customers have purchased goods or services from us and have stored their e-mail address, this can then also be used to send a newsletter. In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter.

In connection with the data processing for the dispatch of newsletters, the data is not passed on to third parties. The data will only be used to send the newsletter.

b. Legal basis for data processing

The legal basis for processing the data after the user has registered for the newsletter is Article 6 (1) (a) GDPR if the user has given their consent.

The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG.

c. Purpose of data processing

The collection of the user's email address is used to deliver the newsletter.

The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.

d. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The user's email address is therefore stored for as long as the subscription to the newsletter is active.

The other personal data collected during the registration process will be deleted after a period of seven days at the latest.

e. Objection and removal option

The user concerned can cancel the subscription to the newsletter at any time. There is a corresponding link in every newsletter for this purpose.

4. Newsletter tracking

a. Description and scope of data processing

The newsletters we send contain so-called tracking pixels. Tracking pixels are miniature graphics that are embedded in e-mails that are sent in HTML format to enable log file recording and log file analysis. The personal data collected in this way will not be passed on to third parties. As part of the registration process, your consent is obtained through a so-called double opt-in procedure.

b. Legal basis for data processing

The legal basis for processing the data after registering for the newsletter is Article 6 (1) (a) GDPR, otherwise Article 6 (1) (f) GDPR, provided the user has given his / her consent.

c. Purpose of data processing

The newsletter tracking is used for the statistical evaluation of the success or failure of online marketing campaigns. This enables us to understand whether and when an e-mail is opened and which links in the e-mail are clicked on. The newsletter tracking also serves to improve and optimize the newsletter.

d. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case after a period of maximum seven days.

e. Objection and removal option

The consent of the user concerned can be canceled at any time by unsubscribing from the newsletter. For this purpose, there is a corresponding link in every newsletter, for example.

5. Registration during the ordering process

a. Description and scope of data processing

Users have the option to register on our website.

When registering, the data requested from the input mask will be transmitted to us and saved.

The personal data can be transferred to third parties, for example parcel service providers, if this is necessary to fulfill the contract. They use the data passed on in this way exclusively for internal purposes that are attributable to us.

b. Legal basis for data processing

If the registration serves to fulfill a contract to which the user is a party or to carry out pre-contractual measures, the legal basis for the processing of the data is Article 6 (1) (b) GDPR.

If the user has given his / her consent, the legal basis for processing the data is also Article 6 (1) (a) GDPR.

c. Purpose of data processing

The registration of the user is necessary to fulfill contracts with users or to carry out pre-contractual measures.

Furthermore, the registration of the user is necessary for the provision of certain content and services on our website.

d. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

This is the case for the data collected during the registration process if the registration on our website is canceled or changed.

This is the case during the registration process to fulfill a contract or to carry out pre-contractual measures when the data is no longer required for the execution of the contract. Even after the conclusion of the contract, it may be necessary to save personal data of the contractual partner in order to meet contractual or legal obligations.

e. Objection and removal option

Users can cancel their registration at any time. Users can change the stored data themselves or have them changed at any time.

You can find out how the registration can be deleted from the person responsible.

If the data is required to fulfill a contract or to carry out pre-contractual measures, premature deletion of the data is only possible if there are no contractual or legal obligations to prevent deletion.

6. Payment service provider: PayPal

a. Description and scope of data processing

If a user selects the payment service provider PayPal during the ordering process, the user's data is automatically transmitted to the payment service provider. By choosing PayPal as a payment option, the user consents to the transfer of personal data required for payment processing. The provider is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. Data is transmitted that is required for payment processing. These are, for example, first name, last name, address, email address, IP address, telephone number, mobile phone number and order details. PayPal's data protection provisions are available at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

b. Legal basis for data processing

If the payment service provider is used to fulfill a contract to which the user is a party, the legal basis for processing the data is Article 6 (1) (b) GDPR.

If the user has given his / her consent, the legal basis for processing the data is also Article 6 (1) (a) GDPR.

c. Purpose of data processing

The transmission takes place for payment processing, for the prevention of abuse, as well as for identity and credit checks.

d. Duration of storage

Information on the duration of storage can be obtained from the operator or at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

e. Objection and removal option

The user has the option at any time to revoke the consent given to PayPal. A revocation of data that is absolutely necessary for payment processing is not possible.

7. Payment service provider: Sofortüberweisung

a. Description and scope of data processing

If a user selects the payment service provider Sofortüberweisung during the ordering process, the user's data is automatically transmitted to the payment service provider. By choosing Sofortüberweisung as a payment option, the user consents to the transfer of personal data required for payment processing. The provider is SOFORT GmbH, Fußbergstrasse 1, 82131 Gauting, Germany. Data is transmitted that is required for payment processing. These are, for example, first name, last name, address, email address, IP address, telephone number, mobile phone number, PIN and TAN, as well as order details. The data protection provisions of Sofortüberweisung are available at https://www.sofort.com/ger-DE/datenschutzerklaerung-sofort-gmbh/.

b. Legal basis for data processing

If the payment service provider is used to fulfill a contract to which the user is a party, the legal basis for processing the data is Article 6 (1) (b) GDPR.

If the user has given his / her consent, the legal basis for processing the data is also Article 6 (1) (a) GDPR.

c. Purpose of data processing

The transmission takes place for payment processing, for the prevention of abuse, as well as for identity and creditworthiness checks.

d. Duration of storage

Information on the duration of storage can be obtained from the provider or at https://www.sofort.com/ger-DE/datenschutzerklaerung-sofort-gmbh/.

e. Objection and removal option

The user has the option at any time to revoke the consent given for immediate transfer. A revocation of data that is absolutely necessary for payment processing is not possible.

8. Payment service provider: Klarna

a. Description and scope of data processing

If a user selects the Klarna payment service provider during the ordering process, the user's data is automatically transmitted to the payment service provider. By choosing Klarna as a payment option, the user consents to the transfer of personal data required for payment processing. The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden. Data is transmitted that is required for payment processing. These are, for example, first name, last name, address, email address, IP address, telephone number, mobile phone number, bank details, CVC code, expiry date, card number and order details. Klarna's data protection provisions are available at https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf.

b. Legal basis for data processing

If the payment service provider is used to fulfill a contract to which the user is a party, the legal basis for processing the data is Article 6 (1) (b) GDPR.

If the user has given his / her consent, the legal basis for processing the data is also Article 6 (1) (a) GDPR.

c. Purpose of data processing

The transmission takes place for payment processing, for the prevention of abuse, as well as for identity and credit checks.

d. Duration of storage

Information on the duration of storage can be obtained from the provider or at https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf.

e. Objection and removal option

The user has the option to revoke the consent given to Klarna at any time. A revocation of data that is absolutely necessary for payment processing is not possible.

9. Contact form and email

a. Description and scope of data processing

We provide visitors to our website with a contact form for quick, electronic contact. The data entered in the input mask will be transmitted to us and saved.

In addition, the user's IP address and the date and time of transmission are saved at the time of sending.

Alternatively, you can contact us using the email address provided. In this case, the user's personal data transmitted with the email will be saved.

There is no transfer of the data to third parties. The data will only be used to process the request.

b. Legal basis for data processing

If the user has given his / her consent, the legal basis for processing the data is Article 6 (1) (a) GDPR.

The legal basis for processing the data that is transmitted in the course of sending an email is Article 6 (1) lit.f GDPR. If the aim of the email contact is to conclude a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR.

c. Purpose of data processing

The processing of personal data is only used to process the contact. If you contact us by e-mail, there is also the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

d. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified.

The additional personal data collected during the sending process will be deleted after a period of maximum seven days.

e. Objection and removal option

The user has the option to revoke his consent to the processing of personal data at any time. For this purpose, the user can contact the person responsible via the contact options provided on the website. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

10. Google Analytics

a. Description and scope of data processing

This website uses the web analysis service Google Analytics, the provider is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

Google Analytics uses analysis cookies. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. We are expanding the Google Analytics code by the code „gat._anonymizeIp ();“. This code causes the logged IP address to be accessed by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to transmission The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. Google will use this information on behalf of the operator of this website to evaluate your use of the website and to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage. The IP address transmitted by your browser when using Google Analytics will not be merged with other Google data.

b. Legal basis for data processing

The legal basis for processing users' personal data is Article 6 (1) (f) GDPR.

c. Purpose of data processing

The processing of the personal data of the users enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to improve our website and its user-friendliness. This is also where our legitimate interest lies in the processing of the data in accordance with Art. 6 Para. 1 lit. GDPR. By anonymizing the IP address, the interests of users in protecting their personal data are adequately taken into account.

d. Duration of storage

You can find information on the duration of storage at https://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=de.

e. Objection and removal option

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by using, Downloading and installing the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de.

To opt out when using mobile devices, the following link Deactivate Google Analytics must be clicked on from every mobile device.

11. Google Maps

a. Description and scope of data processing

This website uses the map service Google Maps. The provider is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

Google Maps is a web service for displaying interactive (land) maps to visually display geographic information. Using this service will show you our location and make it easier to get there. As soon as you call up those sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google's servers and stored there. This can also result in transmission to the servers of Google LLC. come in the US. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of Google's legitimate interest in the display of personalized advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.

b. Legal basis for data processing

The legal basis for processing users' personal data is Article 6 (1) (f) GDPR.

c. Purpose of data processing

The processing of the users' personal data enables us to analyze the surfing behavior of our users with regard to the integration and placement of advertisements on our website. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website, including the advertisements placed there. This helps us to continuously improve our website and its user-friendliness. Our legitimate interest in processing the data in accordance with Art. 6 Para. 1 lit.f GDPR lies in these purposes. By anonymizing the IP address, the interests of users in protecting their personal data are adequately taken into account.

d. Duration of storage

You can obtain information on the duration of storage from the provider or at https://policies.google.com/technologies/ads?hl=de.

e. Objection and removal option

You can also deactivate the display of personalized advertising under the following link https://support.google.com/ads/answer/2662922?hl=de.

12. reCAPTCHA

a. Description and scope of data processing

We also use the reCAPTCHA function on this website. The provider is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA

This function is primarily used to distinguish whether an entry is made by a natural person or whether it is misused by machine and automated processing. The service includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in determining individual personal responsibility on the Internet and avoiding abuse and spam. When using Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. come in the US.

b. Legal basis for data processing

The legal basis for the processing of personal data using cookies is Article 6 (1) (f) GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is Article 6 (1) (a) GDPR if the user has given his / her consent.

c. Purpose of data processing

It is used to distinguish whether an entry was made by a natural person or a bot.

d. Duration of storage

You can obtain information on the duration of storage from the provider or at https://www.google.de/intl/de/policies/privacy/.

e. Opposition and removal option

The concerned person also has the option of objecting to interest-based advertising by Google. To do this, the person concerned must call up the link https://www.google.de/settings/ads/ from each of the Internet browsers they use and make the desired settings there.

Further information and the applicable data protection regulations from Google can be found at https://www.google.de/intl/de/policies/privacy/.

13. Two-click solution for integrating social media plugins

The website does not integrate any social media plugins directly into the website. A profile creation by third parties is therefore excluded.

In order to still share our offers via Pinterest, Instagram, Facebook, Twitter, XING or Google+, we use the so-called two-click solution.

Only when you decide to share a post using the corresponding button and click on it will data be transferred to the operator of the respective social media service.

We recommend reading the data protection regulations of the respective social media service that you want to use beforehand so that you are informed about the purpose and scope of the data collection and the further processing and use of the data as well as your rights and setting options to protect your privacy.

You can find them here:

Facebook: https://www.facebook.com/about/privacy
twitter: https://twitter.com/privacy
Google+: https://www.google.com/intl/de/policies
Xing: https://www.xing.com/privacy
Instagram: https://www.instagram.com/about/legal/privacy
Pinterest: https://about.pinterest.com/privacy-policy

14. Two-click solution for integrating YouTube

We have integrated components from YouTube on our website. YouTube is an Internet video portal that enables video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programs, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The provider is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

The website does not embed YouTube videos directly in the website. A profile creation by third parties is therefore excluded.

In order to still be able to view our videos, users must first click on the preview image. The video can only be viewed after clicking away the message or logging in. Only at this point will data be transferred.

You can find more information on this at https://www.youtube.com/yt/about/d and under the data protection provisions published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/. These provide information about the collection, processing and use of personal data by YouTube and Google.

III. Rights of concerned person

1. Right to information

Any person affected by the processing of personal data can request confirmation from the person responsible as to whether personal data of the person concerned is being processed.

If this is the case, you can request the following information from the person responsible:

Processing purposes
Categories of personal data that are processed
Recipients or the categories of recipients to whom the relevant personal data have been disclosed or are still being disclosed
Planned duration of storage of your personal data or, if specific information is not available, criteria for determining the duration of storage
Existence of a right to correction or deletion of your personal data, a right to restriction of processing by the person responsible or a right to object to this processing
Existence of a right of appeal to a supervisory authority
all available information about the origin of the data if the personal data are not collected from the concerned person
Existence of automated decision-making including profiling in accordance with Art. 22 Para. 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject
The data subject also has the right to request information as to whether the personal data concerning them are being transmitted to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees according to Art. 46 GDPR in connection with the transmission.
In the case of data processing for scientific, historical or statistical research purposes: This right to information can be restricted insofar as it is likely to make the realization of the research or statistical purposes impossible or seriously impaired and the restriction is necessary for the fulfillment of the research or statistical purposes.

2. Right to rectification

Affected persons have a right to correction and / or completion towards the person responsible if the processed personal data concerning them is incorrect or incomplete. The person responsible must make the correction immediately.

In the case of data processing for scientific, historical or statistical research purposes: Your right to correction can be limited to the extent that it is likely to make the realization of the research or statistical purposes impossible or seriously impaired and the restriction is necessary for the fulfillment of the research or statistical purposes.

3. Right to restriction of processing

Subject to the following conditions, concerned persons can request the restriction of the processing of their personal data:

if the correctness of the personal data concerned is disputed for a period that enables the person responsible to check the correctness of the personal data
the processing is unlawful, and the person concerned refuses to delete the personal data and instead requests that the use of the personal data be restricted
the person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims, or
if the person concerned has lodged an objection to the processing in accordance with Art. 21 Paragraph 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh the reasons of the person concerned.

If the processing of the relevant personal data has been restricted, this data - apart from its storage - may only be used with the consent of the data subject or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public Processed in the interest of the Union or a member state.

If the processing restriction has been restricted according to the above conditions, the person concerned will be informed by the person responsible before the restriction is abolished.

When processing data for scientific, historical or statistical research purposes:

The right of the concerned person to restrict processing can be restricted to the extent that it is likely to make the implementation of the research or statistical purposes impossible or seriously impaired and the restriction is necessary for the fulfillment of the research or statistical purposes.

4. Right to deletion

a. Deletion obligation

The concerned person can demand that the person responsible delete the personal data concerning them immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:

the personal data in question are no longer necessary for the purposes for which they were collected or otherwise processed;
the data subject has revoked your consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR, and there is no other legal basis for the processing;
The data subject objects to the processing in accordance with Art. 21 Paragraph 1 GDPR and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Art. 21 Paragraph 2 GDPR;
the personal data were processed unlawfully;
the deletion of the personal data concerned is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject;
The personal data concerned were collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR.

b. Information to third parties

If the person responsible has made the relevant personal data public and is obliged to delete it in accordance with Art. 17 Para. 1 GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, in order to who process the personal data, to inform them that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.

c. Exceptions

The right to deletion does not exist if processing is necessary.

to exercise the right to freedom of expression and information;
to fulfill a legal obligation that requires processing under the law of the Union or of the member states to which the person responsible is subject, or to perform a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible:
for reasons of public interest in the area of public health in accordance with Art. 9 Paragraph 2 lit. h and i as well as Art. 9 Paragraph 3 GDPR;
For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, insofar as the right mentioned under section a) is likely to make the realization of the objectives of this processing impossible or seriously impair it, or
to assert, exercise or defend legal claims.

5. Right to be informed

If the person concerned has asserted the right to correction, deletion or restriction of processing against the person responsible, the person responsible is obliged to notify all recipients to whom the personal data concerned has been disclosed of this correction or deletion of the data or restriction of processing, unless , this proves to be impossible or involves a disproportionate effort. The data subject has the right to be informed about these recipients by the person responsible.

6. Right to data portability

Affected persons have the right to receive the personal data concerning them, which have been provided to the person responsible, in a structured, common and machine-readable format. In addition, data subjects have the right to transfer this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, if

the processing is based on consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract in accordance with Article 6 (1) (b) GDPR and
the processing is carried out using automated procedures.

In exercising this right, data subjects also have the right to have their personal data transmitted directly from one controller to another, insofar as this is technically feasible. This must not impair the freedoms and rights of other people.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been transferred to the person responsible.

7. Right of opposition

Affected persons have the right, for reasons that arise from their particular situation, to object at any time to the processing of their personal data, which is based on Art. 6 Para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.

The person responsible no longer processes the personal data concerned, unless he can prove compelling legitimate reasons for the processing that outweigh the interests of the data subjects, their rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerned are processed in order to operate direct mail, the data subjects have the right to object at any time to the processing of the personal data concerning them for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

If concerned persons object to processing for direct marketing purposes, the personal data relating to them will no longer be processed for these purposes.

In connection with the use of information society services - irrespective of Directive 2002/58 / EG - data subjects have the option of exercising their right of objection by means of automated procedures in which technical specifications are used.

When processing data for scientific, historical or statistical research purposes:

Affected persons also have the right, for reasons that arise from their particular situation, to object to the processing of personal data concerning them for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR.

The right of objection can be limited to the extent that it is likely to make the realization of the research or statistical purposes impossible or seriously impair it and the restriction is necessary for the fulfillment of the research or statistical purposes.

8. Right to revoke the declaration of consent under data protection law

Affected persons have the right to revoke their data protection declaration of consent at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of revocation.

9. Automated decision in individual cases including profiling

Affected persons have the right not to be subjected to a decision based solely on automated processing - including profiling - that has legal effects on them or significantly affects them in a similar manner. This does not apply if the decision

is necessary for the conclusion or performance of a contract between the data subject and the person responsible.
is permissible on the basis of legal provisions of the Union or the member states to which the person responsible is subject and these legal provisions contain appropriate measures to safeguard the rights and freedoms of the data subjects as well as their legitimate interests or
are carried out with express consent.

However, these decisions may not be based on special categories of personal data according to Art. 9 Paragraph 1 GDPR, unless Art. 9 Paragraph 2 lit. a or g GDPR applies, and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With regard to the cases mentioned in points 1 and 3, the person responsible shall take appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of data subjects, including at least the right to obtain intervention by a person on the part of the person responsible, to express their own point of view and on Appeal of the decision.

10. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, concerned persons have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their place of residence, their place of work or the place of the alleged infringement, if they believe that the processing of the personal data concerning them violates the GDPR.

The supervisory authority to which the complaint was submitted informs the complainant about the status and the results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.