52068 Aachen, Germany
in its capacity as the controller as defined in the General Data Protection Regulation (GDPR).
2.) The website collects, processes and uses personal data in accordance with the requirements of the GDPR.
3.) When you visit the website, data will be collected, processed and used only insofar as is necessary to allow you to use the selected services. Personal data will be collected if you provide it via the contact/inquiry form, subscribe to our newsletter or e-mail us directly. It is possible to use the website anonymously or under a pseudonym, with some restrictions for technical reasons.
4.) No personal data will be transferred to third parties without the user having first been notified and asked to provide consent (see the section on social media below). Personal data will be transferred to third parties if the data subject has expressly granted consent in accordance with Article 6 (1) a) of the GDPR; forwarding is necessary to assert, exercise or defend legal claims in accordance with Article 6 (1) f) of the GDPR and there are no grounds for assuming that the data subject has an overriding interest requiring protection in his or her data not being forwarded; there is a legal obligation for data to be transferred in accordance with Article 6 (1) c) of the GDPR; this is required for the performance of a contract to which the data subject is party in accordance with Article 6 (1) b) of the GDPR.
5.) When you access the website, your browser will automatically send data to the server, where it will be stored in a log file. This takes place for the following purposes:
Monitoring for security purposes
Administration of the website, server and technologies used
Usability improvements (e.g., for optimizing navigation and user-friendliness)
These types of processing are warranted according to Article 6 (1) f) of the GDPR. Individual personal details are not analyzed.
The data involved includes the following:
a) IP address via which the site was accessed, including geolocation
b) Host name (name of the computer/hub accessing the site)
c) Name of the website accessed
d) Date and time of access
e) Amount of data transferred
f) Click paths (which pages are accessed)
g) Access status (file transferred, file not found etc.)
h) Page from which the file was requested
i) Browser type and version
j) Display resolution and browser window size
k) User’s operating system
m) Requesting provider
7.) Contact form: you can send messages to the relevant people via a contact form on the website. If you wish to receive a response, you will need to provide a valid e-mail address. All other information about the person making the inquiry is voluntary. When you send a message via the contact form, you grant your consent to the processing of the personal data transmitted. Data will be processed exclusively for the purpose of handling and responding to inquiries via the contact form. This will take place on the basis of the voluntary consent in accordance with Article 6 (1) a) of the GDPR. The personal data collected for the purpose of using the contact form will be automatically deleted as soon as the inquiry is complete and there is no reason to continue to store it (e.g., subsequent request for information or order placement).
9.) As “data subjects” as defined in the GDPR, users of our website are entitled to numerous rights. Specifically, these are the following rights stipulated by the GDPR. If you have any questions or concerns on this matter, please contact us via the contact details provided in the Legal Notice or via e-mail to firstname.lastname@example.org
a) Right of access: you can obtain information from us concerning
(1) the purposes for which your personal data is processed;
(2) the categories of personal data concerned;
(3) the recipients or categories of recipient to whom the personal data has been or will be disclosed;
(4) the envisaged period for which the personal data concerning you will be stored or, if it is not possible to provide specific information in this regard, the criteria used to determine that period;
(5) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
(6) the right to lodge a complaint with a supervisory authority;
(7) where the personal data is not collected from the data subject, any available information as to its source;
(8) the existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;
(9) If data is transferred to recipients in third countries, you shall have the right be informed of the appropriate safeguards pursuant to Article 46 of the GDPR for the transfer, to request information, provided that the European Commission has not decided on the adequacy of the level of protection according to Article 45 (3) of the GDPR;
b) Rectification and completion: you have a right to rectification and/or completion should the personal data that we have processed be incorrect or incomplete.
c) Erasure: you have a right to erasure (“right to be forgotten”) to the extent that processing is not necessary for exercising the right of freedom of expression and information, compliance with a legal obligation or performance of a task carried out in the public interest or for statistical purposes and that one of the following grounds applies:
- The personal data is no longer necessary in relation to the purposes for which it was processed.
- Your consent, which you have since withdrawn, constituted the sole grounds warranting processing.
- You have objected to the processing of your personal data that we have made public.
- You have objected to the processing of your personal data that we have not made public and there are no overriding legitimate grounds for processing.
- Your personal data has been unlawfully processed.
- The personal data has to be erased for compliance with a legal obligation to which we are subject.
There shall be no entitlement to erasure if erasure would not be possible or would involve disproportionate effort owing to the particular type of storage involved and you have little interest in erasure in the case of lawful, non-automated data processing. In this case, processing will be restricted instead of data being erased.
d) Restriction of processing: you may obtain restriction of processing from us
- if you contest the accuracy of your personal data for a period enabling the controller to verify the accuracy of the personal data;
- if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
- if the controller no longer needs the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defense of legal claims;
- if you have objected to processing pursuant to Article 21 (1) of the GDPR pending verification of whether the legitimate grounds of the controller override yours;
- Restriction of processing means that your personal data is processed only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. We are required to inform you before lifting the restriction.
e) Right to notification: if you have asserted your right to rectification, erasure or restriction of processing, the controller shall be obliged to communicate any such rectification or erasure of data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have a right to request that the controller inform you about those recipients.
f) Data portability: you have a right to data portability provided that the processing is based on your consent (Article 6 (1) a) or Article 9 (2) a) of the GDPR) or on a contract to which you are party and that the processing is carried out by automated means. In this case, the right to data portability includes the following rights, insofar as they do not adversely affect the rights and freedoms of others: you may receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You have the right to transmit this data to another controller without hindrance from us. Where technically feasible, you may request that we transmit personal data directly to another controller.
g) Right to object: if processing is based on Article 6 (1) e) of the GDPR (performance of a task carried out in the public interest or in the exercise of official authority) or Article 6 (1) f) of the GDPR (legitimate interests pursued by the controller or by a third party), you have the right to object at any time to processing of personal data concerning you on grounds relating to your particular situation. This includes profiling based on Article 6 (1) e) or f) of the GDPR. Once you have exercised your right to object, we will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. You may object at any time to processing of personal data concerning you for direct marketing. This includes profiling relating to such direct marketing. Once you have exercised your right to object, we will no longer process the personal data concerned for direct marketing purposes.
h) Withdrawing consent: you have the right to withdraw consent at any time after it has been granted. This withdrawal will remain applicable indefinitely. The withdrawal of consent shall not affect the lawfulness of data processing based on consent before receipt of the notification of its withdrawal. Once notification of withdrawal has been received, data processing based solely on your consent will cease.
i) Complaints: if you consider that the processing of the personal data concerning you is unlawful, you may submit complaints to a supervisory authority for data protection responsible for your habitual place of residence or place of work or place of the alleged infringement.