IT IS AG takes the protection of your personal data very seriously and we strictly adhere to the rules of data protection laws. Personal data will only be stored on this website in the technical required scope. In no case will the data collected be sold or passed on to third parties for other reasons.
The following explanation gives you an overview on how we guarantee this protection and what kind of data to what purpose is raised.
Data processing on this internetThe IT IS AG automatically collects and stores log files in your server Information that your browser transmits to us. This are:
Browser Type/Version Utilization Referrer URL (the previously visited page) Host name of the accessing machine (IP) Address) Time of server request.
This data is not specific for (provider) People zuordenbar. Merging this data with others Data sources are not made, the data is also statistical evaluation deleted.
Right to information You have the right to Information about the data stored concerning you, the Origin and recipients as well as the purpose of data processing.
We are very pleased about your interest in our Undertake. Data protection is particularly important for the Management of IT IS AG. Use of the Internet pages of IT IS AG is basically possible without any indication of personal data. If a data subject has special services of our company would like to make use of our website, but a Processing of personal data is required. If it is Processing of personal data required and exists for a such processing no legal basis, we generally Consent of the data subject.
IT IS AG has Responsible for numerous technical and organizational measures implemented in order to ensure the most complete protection of the Ensure website processed personal data. Nevertheless, Internet-based data transmissions can basically vulnerabilities so that absolute protection is not can be guaranteed. For this reason, it is up to all concerned Person free, personal data also by alternative means, For example, by telephone, to transmit to us.
• a) Personal Data
Personal data is all information that to an identified or identifiable natural person (in the following "data subject"). Identifiable is a natural person directly or indirectly, in particular: by assignment to an identifier such as a name, to an identifier number, about location data, an online identifier, or one or more special characteristics, the expression of physical, physiological, genetic, psychological, economic, cultural or social Identity of this natural person can be identified.
• b) Affected Person
Data subject is any identified or identifiable natural person whose personal data is are processed for the controller.
• c) Processing
Processing is anyone with or without help automated process or any such Series of operations related to personal data such as the collecting, capturing, organizing, ordering, storing, the adaptation or change, the readout, the query, the Use, disclosure by transmission, dissemination or other forms of provision, reconciliation or linking which: Restriction, deletion, or destruction.
• d) Restriction of the processing
Restriction of processing is the selection stored personal data with the aim of To limit processing.
• e) Profiling
Profiling is any type of automated processing personal data consisting of: personal data are used to identify specific personal evaluate aspects relating to a natural person; in particular with regard to work performance, economic location, health, personal preferences, interests, reliability, Behaviour, location or change of location of this natural person analyze or predict.
• f) Pseudonymization
Pseudonymization is processing personal data in a manner in which the personal data Data without the use of additional information no longer one may be assigned to specific data subjects provided that: additional information is kept separately and technical and organisational measures to ensure that: personal data not of an identified or identifiable natural person.
• g) Controller or controller
Controller or for processing The responsible person is the natural or legal person, authority, Institution or other body which alone or jointly with others on the purposes and means of processing personal data decides. Are the purposes and means of this processing by the EU law or the law of the Member States may: Persons responsible or may be the specific criteria of his/her Designation under Union or Member State law are intended.
• h) Order manufacturer
Processor is a natural or legal person, authority, body or other body which: processes personal data on behalf of the controller.
• i) Receiver
the recipient is a natural or legal person; Authority, body or other body providing personal data be disclosed regardless of whether it is a Third parties act or not. Authorities which, within the framework of a specific Mandate for investigation under Union law or the law of the Member States may receive personal data but not as a recipient.
• j) The Third
Third person is a natural or legal person, the authority, body or other body other than the person concerned; the controller, the processor and the persons who: under the direct responsibility of the controller or Processors are authorized to use the personal data process.
• k) Approval
Consent is any of the data subject voluntarily for the particular case in an informed manner; and unequivocal statement of will in the form of a statement or any other unequivocal affirmative act by which the data subject indicates that he/she is involved in the processing of the consents to personal data concerning you.
Responsible person in the sense of the General Data Protection Regulation, others in the Member States of the European Union applicable data protection laws and other provisions with data protection legal character is the:
IT IS AG
84051 Old home
Tel.: +49 8703 9069 0
4. Collection of general data and information
The website of IT IS AG records with each call of the website by a data subject or an automated System a set of general data and information. This general data and information are stored in the log files of the server stored. The browser types (1) used can be recorded and versions, (2) the operating system used by the accessing system, (3) the website from which an accessing system to our Internet site arrives (so-called referrer), (4) the underwear pages, which via an accessing system on our website (5) the date and time of access to the website, (6) an internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information related to security in the case of: Attacks on our information technology systems serve.
When using these general data and IT IS AG does not draw any conclusions about the affected Person. Rather, this information is needed to (1) the content to deliver correctly to our website (2) the contents of our to optimize the website as well as the advertising for it, (3) the permanent functioning of our information technology Systems and technology of our website as well as (4) in the event of a cyber attack, the provide law enforcement with necessary information. This anonymously Therefore, IT IS AG collects data and information on the one hand statistically and further with the aim of evaluating the To increase data protection and data security in our company, ultimately an optimal level of protection for the processed ensure personal data. The anonymous data of the Server log files are separated from all by a data subject personal data provided.
5. Registration on our website
The data subject has the possibility to contact the Website of the controller under indication to register personal data. Which personal ones Data transmitted to the controller are derived from the respective input mask used for the Registration is used. The data subject shall: personal data entered will be used exclusively for the internal use by the controller and for: own purposes collected and stored. The one for processing The person responsible may pass on to one or more processors, such as a parcel service provider, which also exclusively for internal use for processing Responsible person is included, used.
By registering on the website of the the controller shall also be the Internet service provider (ISP) of the data subject IP address, date and time of registration. The storage of this data takes place against the background that only the misuse of our services can be prevented, and this data enable offences committed, if necessary, to be investigated. In this respect is the storage of this data to safeguard the Processing controller required. A transfer of this data to third parties, unless required by law to pass on or to pass on the prosecution.
Registration of the data subject at voluntary disclosure of personal data is used for the Data controller for this purpose, the data subject content or to offer services which, by reason of the nature of the matter, only: registered users. To registered people shall be free to: modify personal data at any time or completely from the Delete the data stock of the controller. let.
The controller shall grant each data subject at any time upon request information about which personal data about the data subject are stored. Furthermore, the controller corrects or deletes personal data at the request or notice of the data subject; in so far as there are no legal retention obligations. the All employees of the controller in this context, the data subject is the contact person at the possession.
6. Subscription to our newsletter
On the website of IT IS AG, the users the opportunity to receive our company's newsletter subscribe. What personal data is used when ordering the Newsletters sent to the controller is derived from the input mask used for this purpose.
IT IS AG informs its customers and Business partners at regular intervals by means of a newsletter about offers of the company. The newsletter of our company can received by the data subject only in principle; if (1) the data subject has a valid e-mail address and (2) the data subject agrees to receive the newsletter registers. To the person concerned for the first time for the Newsletter dispatch registered e-mail address is obtained from legal Reasons for sending a confirmation e-mail in the double opt-in procedure. This confirmation email is used to check whether the holder of the E-mail address as data subject receiving the newsletter has authorised.
When registering for the newsletter, we also save the IP address of the Internet service provider (ISP) assigned by the data subject used at the time of notification Computer systems as well as the date and time of registration. the Collection of this data is necessary to prevent (possible) misuse of the E-mail address of a data subject at a later date to be able to understand and therefore serves for legal protection of the controller.
The data collected as part of a subscription to the newsletter personal data is exclusively used to send our Of newsletter uses. Furthermore, subscribers to the newsletter could E-mail will be informed if this is necessary for the operation of the Newsletter service or registration required is, as in the case of changes to the newsletter offer or the Change in technical circumstances could be the case. It does not pass on the data collected in the context of the newsletter service personal data to third parties. Subscription to our newsletter may be terminated at any time by the data subject. the consent to the storage of personal data which data subject has given us for the newsletter dispatch, may be revoked at any time. For the purpose of revoking consent a corresponding link can be found in each newsletter. Further exists the possibility to register at any time directly on the website of the to unsubscribe from newsletter shipping for the controller or otherwise to the controller to inform.
The newsletters of IT IS AG contain so-called Countable pixel. A tracking pixel is a thumbnail graphic used in such emails is embedded, which are sent in HTML format to Log file recording and log file analysis. Thereby a statistical evaluation of the success or failure of Online marketing campaigns are conducted. Based on the embedded IT IS AG can detect tracking pixels if and when an e-mail from was opened to a data subject and which in the e-mail the links present were called up by the data subject.
Such information about those contained in the newsletters Tracking pixels collected by the Data controller stored and evaluated in order to To optimize newsletter dispatch and the content of future newsletters better adapt to the interests of the person concerned. This Personal data will not be passed on to third parties. Affected person Persons are entitled at any time, the separate, about the declaration of consent provided by the double opt-in procedure recant. After a revocation, these personal data are the controller is deleted. Unsubscribe from the IT IS AG automatically regards the receipt of the newsletter as a revocation.
8. Contact possibility via the website
The website of IT IS AG contains statutory regulations indicating a fast electronic Contact our company as well as an immediate Enable communication with us, which is also a general address the so-called electronic mail (e-mail address). Provided that a data subject by e-mail or via a contact form Contact with the controller shall: the personal data transmitted by the data subject automatically stored. Such on a voluntary basis by a data subject to the controller transmitted personal data will be processed for or the contact to the data subject. It occurs no disclosure of this personal data to third parties.
9. Routine deletion and blocking of personal data
The controller processes and stores personal data of the data subject only for the Period required to achieve the purpose of storage or provided that this is done by the European Directive and regulator or other legislator in laws or Rules which the controller is subject, has been provided.
If the storage purpose is omitted or if one of the European Directives and Regulations or any other competent legislator prescribed storage period, the personal data routinely and in accordance with the legal Rules locked or deleted.
10. Rights of the data subject
• a) Right to confirmation
Each data subject has the The right granted to legislators and legislators, of which: Data controller to request confirmation as to whether personal data concerning them are processed. If one wanted the data subject may avail himself of this right of confirmation: for this purpose, at any time to an employee of the Persons responsible turn.
• b) Right to information
Any processing of personal data the data subject shall have the data subject covered by the European Directive and Legislator granted right, at any time by the for processing Responsible person free of charge information about his/her person stored personal data and a copy of this information to receive. Furthermore, the European legislator for directives and regulations: provide the data subject with the following information:
o the processing purposes
o the categories of personal data processed
o The recipients or categories of recipients, to whom the personal data has been disclosed; or still to be disclosed, in particular for recipients in third countries or international organisations
o if possible, the planned duration for which the personal data is stored or, if not the criteria for determining this duration may be:
o the existence of a right to rectification, or deletion of personal data concerning them or on Restriction of processing by the controller or a Right to object to this processing
o the existence of a right of appeal to a supervisory authority
o if the personal data is not data subject: All available information on: the origin of the data
o the existence of an automated decision making, including profiling, in accordance with Article 22 (1); and 4 GDPR and - at least in these cases - meaningful Information about the logic involved as well as the scope and the intended effects of such processing on the data subject Furthermore, the data subject has a right of access whether personal data is sent to a third country or to a international organisation. Where this is the case: otherwise, the data subject shall have the right to provide information: on the appropriate guarantees relating to the transmission receive.
If a data subject wishes to access this right of information in For this purpose, it may at any time contact an employee of the for the processing controller.
• c) Right to Rectification
Any processing of personal data the data subject shall have the data subject covered by the European Directive and Legislator granted right to immediately rectify it request inaccurate personal data. Further the data subject shall have the right to: Purposes of processing, the completion of incomplete personal data - also by means of a supplementary declaration - ask.
Would a data subject like this right of correction? To this end, it can contact an employee at any time of the controller.
• d) Right to erasure (right to be forgotten)
Any processing of personal data the data subject shall have the data subject covered by the European Directive and the right granted by the legislator to require the person responsible to: that the personal data concerning them is deleted immediately where one of the following reasons applies and in so far as the Processing is not required:
o Personal data have been collected for such purposes collected or otherwise processed for which they no longer: are necessary.
o The data subject revokes his or her consent, the processing referred to in Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, and there is no other legal basis for processing.
o In accordance with Article 21 (1), the data subject shall: GDPR objection to the processing and there is no preferential legitimate grounds for processing, or in accordance with Art. 21 para. 2 GDPR, the data subject objects to the Processing one.
o The personal data has been unlawfully processes. o The deletion of personal data is for fulfilment of a legal obligation under Union law or The law of the Member States to which the person responsible is defeated.
o The personal data have been information society services provided pursuant to Article 8 (1) DS-GVO raised. If any of the above applies, and data subject the erasure of personal data collected from the IT IS AG, wishes to arrange, can arrange for it to do so at any time to an employee of the controller turn. The employee of IT IS AG will arrange for the erasure request is complied with immediately.
Were the personal data of IT IS AG made public and is our company as responsible according to Art. 17 para. 1 GDPR for the deletion of personal data , IT IS AG shall take account of the available technology and implementation costs reasonable Measures, also of a technical nature, for other purposes of data processing Persons responsible for the published personal data process, inform that the data subject: of these other data processors Deletion of all links to this personal data or from has requested copies or replications of this personal data; insofar as processing is not necessary. The employee of IT IS AG will arrange the necessary measures in individual cases.
• e) Right to restriction of processing
Any processing of personal data the data subject shall have the data subject covered by the European Directive and The right granted by the controller to Restriction of processing if one of the following Prerequisites are:
o The accuracy of the personal data is the person concerned, for a period of time which it Controller enables the accuracy of personal data to check.
o The processing is unlawful, the affected Person rejects the deletion of personal data and requests instead, restricting the use of personal data.
o The person responsible needs the personal Data for the purpose of processing no longer, the affected However, person needs it for assertion, exercise or Defence of legal claims.
o The data subject has objected to the Processing according to Art. 21 para. 1 GDPR inserted and it still stands does not determine whether the legitimate grounds of the person responsible for: outweigh those of the person concerned. If any of the above prerequisites are met and a data subject is restricted personal data stored at IT IS AG; to request, she can contact an employee at any time of the controller. The employee of IT IS AG will arrange the restriction of the processing.
• f) Right to Data Portability
Any processing of personal data the data subject shall have the data subject covered by the European Directive and The legislator granted the right to Data which is provided by the data subject to a controller in a structured, common and machine readable format. It also has the right to Data to another controller without obstruction by the the controller to whom the personal data has been provided; if the processing is based on the consent in accordance with Art. 6 (1) (a) GDPR or Article 9 (2) (a) GDPR; or is based on a contract pursuant to Article 6 (1) (b) GDPR and Processing is carried out by means of automated procedures, provided that the processing is not necessary for the performance of a task, which is in the public interest or in the exercise of official authority which has been transferred to the person responsible.
In addition, the data subject shall: Right to data portability pursuant to Art. 20 para. 1 GDPR the right to to obtain the personal data directly from a persons responsible are transmitted to another person responsible, insofar as this is technically feasible and insofar as the rights of and the freedoms of other persons.
The assertion of the right to data portability the data subject may at any time contact any employee of the IT IS AG turn.
• g) Right to object
Any processing of personal data the data subject shall have the data subject covered by the European Directive and Legislator granted right, for reasons arising from its special situation, at any time against the processing personal data relating to which, pursuant to Article 6 (1), Letters e or f of the GDPR are made to object. This is valid also for profiling based on these provisions.
IT IS AG processes the personal data in the Case of opposition no longer, unless we can imperative legitimate grounds for processing which demonstrate that: outweigh the interests, rights and freedoms of the data subject; or the processing serves to assert, exercise or Defence of legal claims.
IT IS AG processes personal data in order to: direct marketing, the data subject shall have the right to: objection to the processing of personal data at any time for the purpose of such advertising. This also applies to the profiling, insofar as it is related to such direct advertising. If the data subject objects to IT IS AG to the Processing for direct marketing purposes, IT IS AG shall: no longer process personal data for these purposes.
In addition, the data subject has the right to: which arise from their particular situation against which they: processing of personal data relating to IT IS AG for scientific or historical research purposes or statistical purposes according to Art. 89 para. 1 GDPR take place, opposition unless such processing is to be carried out in order to: a task in the public interest.
In order to exercise the right to object, the data subject directly to any employee of IT IS AG or other employees. The data subject shall also be free to: related to the use of services of the Information society, notwithstanding Directive 2002/58/EG, Exercise the right to object by means of automated procedures where: technical specifications are used.
• h) Automated decisions in individual cases including profiling
Any processing of personal data the data subject shall have the data subject covered by the European Directive and The right granted to the legislator, not one exclusively on a automated processing - including profiling - based to be subject to a decision having legal effect on it; deployed or similarly significantly impaired, provided that: the decision (1) not for the conclusion or fulfilment of a Contract between the data subject and the controller required, or (2) by Union legislation or of the Member States to which the controller is subject, permissible and this legislation is adequate measures to safeguard Rights and freedoms as well as the legitimate interests of the affected parties person or (3) with explicit consent of the data subject.
Is the decision (1) for the financial statements or Performance of a contract between the data subject and the The person responsible is required or (2) it is done with explicit If the data subject agrees, IT IS AG Measures to protect the rights and freedoms as well as the legitimate safeguarding the interests of the data subject, for which at least the right to the effect of the intervention of a person on the part of the person responsible; to explain its own position and to challenge the Decision belongs.
If the data subject wishes to have rights relating to: automated decisions can be invoked for this purpose at any time to an employee of the controller turn.
• i) Right to revoke a consent under data protection law
Any processing of personal data the data subject shall have the data subject covered by the European Directive and Legislator granted right to consent to processing to revoke personal data at any time.
Does the data subject want his right to revoke can claim consent at any time to: an employee of the controller.
11. Data protection for applications and in the application process
The controller shall collect and: processes the personal data of applicants for the purpose of: Implementation of the application procedure. Processing can also be done on by electronic means. This is particularly the case when: an applicant's application documents on the electronic Ways, for example by e-mail or via an on the website available web form, to the controller transmits. If the controller closes a Contract of employment with a candidate, the data transmitted for the purpose of carrying out the employment relationship under: Compliance with the statutory provisions stored. Will be of the for the controller does not have an employment contract with the The application documents shall be closed for two months: automatically deleted after notification of the cancellation decision, if no other legitimate interests of the Processing contradict controllers. Other the entitled Interest in this sense is, for example, an obligation to prove in a Procedure under the General Equal Treatment Act (AGG).
The controller has Website Components of the company Facebook integrated. Facebook is a social network.
A social network is an Internet-operated social meeting place, an online community that allows users in the Rule allows to communicate with each other and in virtual space to interoperate. A social network can act as a platform for exchange of opinions and experiences serve or enables the Internet community, personal or business To provide information. Facebook allows users of the social networking, including the creation of private profiles, the upload of photos and networking via friendship requests.
Operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. For processing personal data is responsible if a data subject Person living outside the United States or Canada, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
By each invocation of one of the individual pages of this Website provided by the controller and on which a Facebook component (Facebook plug-in), the Internet browser is installed on the information technology system of the data subject automatically caused by the respective Facebook component, a representation of the to download the corresponding Facebook component from Facebook. One Total overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/? locale=de_DE called away become. As part of this technical procedure, Facebook becomes aware of: about which specific subpage of our website is the data subject is visited.
If the data subject simultaneously at Facebook is logged in, Facebook recognizes with every call to our website by the data subject and throughout the duration of the respective stays on our website, which concrete The underside of our website visits the data subject. This Information is collected by the Facebook component and Facebook the respective Facebook account of the data subject assigned. If the data subject operates one of the Website integrated Facebook buttons, for example the "Like "-Button, or the data subject submits a comment, arranges Facebook provides this information to the personal Facebook user account of the data subject and stores this personal data.
Facebook always receives via the Facebook component information that the data subject has if the data subject has visited the website at the time of the Access to our website is logged in to Facebook at the same time; this takes place regardless of whether the data subject Facebook component clicks or not. Is such a transmission this information to Facebook by the data subject does not intentionally, the latter may prevent transmission by: before calling up our website from your Facebook account logs off.
The data policy published by Facebook, which is available under https://de-de.facebook.com/about/privacy/, there Information on the collection, processing and use of personal data Data through Facebook. It also explains which Settings Facebook to protect the privacy of the affected person offers. In addition, different applications which make it possible to transmit data to Facebook suppress. Such applications may be to suppress data transmission to Facebook.
The controller has Website the component Google Analytics (with Anonymisierungsfunktion) integrates. Google Analytics is a Web analysis service. Web analysis is the survey, collection and Analysis of data on the behaviour of visitors to Internet sites. A web analysis service collects data, among other things about from which website a data subject on a Website has come (so-called referrer), to which subpages accessed from the website or how often and for what duration an underside was considered. A web analysis becomes predominantly the Optimization of a website and cost-benefit analysis of Internet advertisement used.
Operating company of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, THE USA.
The controller uses for the web analysis via Google Analytics the addition "_gat._anonymizeIp". The IP address of the Internet connection of the data subject shortened and anonymized by Google when access on our websites from a Member State of the European Union Union or from another State Party to the Agreement on: European Economic Area.
The purpose of the Google Analytics component is to Analysis of visitor flows on our website. Google uses the data and information obtained, inter alia, in order to: to evaluate our website in order to provide us with online reports, which Show, compile, and organize activities on our websites. and further related to the use of our website provide standing services.
Google Analytics sets a cookie on the information technology system of the data subject. What Cookies , has already been explained above. By setting the cookie, Google an analysis of the use of our website. By everybody Access one of the individual pages of this website, which the controller is operated and on which a Google Analytics component has been integrated, the Internet browser on the data subject's information technology system automatically initiated by the respective Google Analytics component, to transmit data to Google for the purpose of online analysis. Within the scope of Google is informed of this technical procedure personal data, such as the IP address of the data subject, which Google, among other things, serve the origin of visitors and clicks and subsequently enable commission billing.
By means of the cookie, personal Information, such as the access time, the location from which a Access went out and the frequency of visits to our website stored by the data subject. Every time we visit our This personal data, including the the IP address of the Internet connection used by the data subject, to Google in the United States of America. This Personal data is provided by Google in the United States of America. Google gives these via the technical procedure personal data collected may be forwarded to third parties.
The controller has Website Google AdWords integrated. Google AdWords is a service for internet advertising allowing advertisers both ads in the search engine results of Google as well as in the Google advertising network. Google AdWords allows you to Advertisers to set predetermined keywords by means of of which an ad in the search engine results of Google is displayed only when the user uses the search engine retrieves a keyword-relevant search result. In Google advertising network will use an automatic Algorithm and in accordance with the previously specified keywords distributed on thematic websites.
Operating company of the services of Google AdWords is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, THE USA.
The purpose of Google AdWords is to apply to our Website by inserting relevant advertising on the websites of third parties and in the Search engine results of Google search engine and a pop-up of third-party advertising on our website.
If a data subject arrives via a Google ad on our website, is published on the information technology System of the data subject by Google a so-called Conversion-Cookie stored. What cookies are, has already been explains. A conversion cookie loses its Validity and is not used to identify the data subject. The conversion cookie is used if the cookie has not yet expired , whether certain subpages, such as the Shopping cart from an online shop system, on our website were called. Through the conversion cookie, both we and Google also understands whether a data subject who has AdWords ad has reached our website, a turnover generated, i.e. completed or cancelled a purchase of goods.
The data collected by the use of the conversion cookie Data and information are used by Google to Create visitor statistics for our website. This Visitor statistics are used by us in turn to Total number of users to determine which is displayed via AdWords ads were conveyed to us, in other words, to the success or failure of the respective AdWords ad and to detect our AdWords ads for the To optimize the future. Neither our company nor other advertisers Google-AdWords receives information from Google, by means of which the the data subject could be identified.
By means of the conversion cookie, personal Information, such as those visited by the data subject Internet sites, stored. Every time you visit our website personal data, including the IP address of the Internet connection used by the data subject, to Google in to the United States of America. These personal ones Data is provided by Google in the United States of America stored. Google gives them via the technical procedure personal data may be forwarded to third parties.
Furthermore, the data subject shall: Possibility of Google's interest-based advertising contradict. For this purpose, the data subject must: Internet browsers used from the link www.google.de/settings/ads and make the desired settings there.
The controller has Website Components of YouTube integrated. YouTube is a Internet video portal that video publishers set up free of charge of video clips and other users who are also free Consideration, evaluation and commentary of this made possible. YouTube allows the publication of all kinds of videos, which is why both complete film and television programmes, but also music videos, trailers or user-made videos via the internet portal are retrievable.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The YouTube, LLC is one Subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
By each invocation of one of the individual pages of this Website provided by the controller and on which a YouTube component (YouTube video) the internet browser is integrated on the information technology system of the data subject automatically caused by the respective YouTube component to display the download corresponding YouTube component from YouTube. Oher one Information about YouTube can be found at Https://www.youtube.com/yt/about/de/ be retrieved. Within the framework of this technical procedure get YouTube and Google knowledge about it, which specific subpage of our website is Person is visited. If the data subject simultaneously YouTube is logged in, YouTube recognizes by calling up a subpage, which contains a YouTube video, which concrete subpage of our Website visited the data subject. This information will: collected by YouTube and Google and the respective YouTube account assigned to the data subject.
YouTube and Google receive via the YouTube component whenever an information is provided that the person concerned if the data subject has visited the website at the time of the Access to our website is logged in to YouTube at the same time; this takes place regardless of whether the data subject has YouTube video clicks or not. Is such a transmission this information to YouTube and Google from the data subject inadvisable, the latter may prevent transmission by: before calling up our website from your YouTube account logs off.
The controller has Website Components of PayPal integrated. PayPal is a On-line payment service provider. Payments are made via so-called PayPal Accounts That Process Virtual Premier or Business Accounts explain. PayPal also has the ability to Make payments via credit cards if a user does not PayPal account maintains. A PayPal account is sent via an e-mail address , which is why there is no classical account number. PayPal allows to trigger online payments to third parties or to make payments conceive. PayPal also takes on fiduciary functions and offers Buyer's protection services in.
The European operating company of PayPal is PayPal (Europe) S.à.r.l. & amp; amp; Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
Selects the data subject during the ordering process in our online shop as payment option "PayPal," automatically transfers data of the data subject to PayPal. With the data subject agrees to select this payment option in the transfer of personal data necessary for payment processing Data one.
Personal data transmitted to PayPal is usually a first name, last name, address, Email address, IP address, telephone number, mobile phone number or other Data required for payment processing. To process the Purchase contracts are also necessary for such personal data, which Related to the respective order.
The purpose of the transmission of data is to: Payment processing and fraud prevention. The one for processing PayPal becomes responsible for personal data in particular if a legitimate interest in the transmission is given. The one between PayPal and the one for processing Persons responsible for exchanging personal data are PayPal may be sent to business agencies. This Transmission is intended to verify identity and creditworthiness. PayPal gives the personal data, where appropriate, to related companies; and Service providers or subcontractors, insofar as fulfilment of the contractual obligations is necessary or the Data should be processed in the order.
The data subject shall have the opportunity to: Consent to the handling of personal data at any time Withdraw PayPal. Revocation does not affect personal Data that is mandatory for (contractual) payment processing must be processed, used or transmitted.
17. Legal basis of the processing
Art. 6 I lit. a GDPR serves our company as Legal basis for processing operations in which we have Obtain consent for a specific processing purpose. If it is processing of personal data for the performance of a contract, the Contracting Party to which the data subject is party shall: for example, for processing operations that are the supply of goods or the provision of other services; or Consideration is necessary, the processing is based on Art. 6 I lighted. B DS-GVO. The same applies to such processing operations which are Implementation of pre-contractual measures is necessary, for example in Inquiries regarding our products or services. Is defeated our company has a legal obligation through which Processing of personal data becomes necessary, such as: For example, in order to fulfil tax obligations, the Processing on Art. 6 I lit. C DS-GVO. In rare cases, the Processing of personal data is required to: vital interests of the data subject or any other to protect natural person. This would be the case, for example, if: a visitor to our plant would be injured and then be Name, age, health insurance data or other vital Information to a doctor, hospital or other third party would have to be passed on. Then the processing on Article 6 I lighted. d GDPR. Ultimately, processing operations on Article 6 could I lighted. f GDPR. Based on this legal basis: Processing operations not covered by any of the abovementioned legal bases if the processing in order to safeguard a legitimate interest of our company or a third party is required, insofar as the interests, fundamental rights and freedoms of the person concerned do not predominate. Such processing processes are particularly important to us. because it is particularly permitted by the European legislature to: were mentioned. In this respect, it considered that: legitimate interest could be assumed if the affected Person is a customer of the person responsible (recital 47, sentence 2) DS-GVO).
18. Legitimate interests in processing pursued by the controller or a third party
Is the processing of personal data based on Article 6 I lit. f GDPR is our legitimate interest Carrying out our business activities for the benefit of all our employees and our shareholders.
19. Duration for which the personal data is stored
The criterion for the duration of storage of personal data is the respective legal Period for safekeeping. After expiry of the deadline, the corresponding Data routinely deleted, if it is no longer for contract fulfilment or contract initiation is required.
20. Statutory or contractual provisions concerning provision of personal data; Necessity for the Completion of the contract; Obligation of the data subject to: provide personal data; possible consequences of the Non-supply
We will clarify that the deployment personal data is partly required by law (e.g. tax provisions) or also arise from contractual provisions (e.g. information on the contractual partner). Sometimes it can become a Conclusion of the contract may be necessary for a data subject to contact us provides personal data which is subsequently must be processed. The data subject is, for example, obliges us to provide personal data if our Company concludes a contract with her. A non-supply the personal data would have the effect that the contract with the Those affected could not be closed. Before a deployment the data subject must: to one of our employees. Our employee clarifies the Data subjects concerned on a case-by-case basis as to whether the provision of the personal data required by law or contract; or for the conclusion of the contract it is necessary whether an obligation exists to provide the personal data, and what consequences the non-provision of personal data.
21. Existence of automated decision-making
As a responsible company, we refrain from automatic decision-making or profiling.
This data protection declaration was Data protection declaration generator of the DGD Deutsche Gesellschaft für Datenschutz GmbH, which operates as External Data Protection Officer, in Cooperation with the lawyer for IT and data protection law Christian Solmecke provides..