DATA PROTECTION INFORMATION
Privacy policy in accordance with the EU General Data Protection Regulation (GDPR)
The Bundesverband der Maschinenringe e.V. (BMR) takes the protection of your personal data very seriously and processes it in accordance with the applicable statutory data protection requirements. Personal data within the meaning of this information is all information that can be related to your person.
This website is for employees, members and customers of the Maschinenring organization. As part of this organization, we understand our mission to offer solutions to our customers.
The Bundesverband der Maschinenringe e.V. (BMR) also acts as a processor for the machinery rings (clients) in accordance with Art. 28 GDPR. In these cases, the Executive Board of the respective machinery ring is responsible for the lawfulness of the processing of personal data in accordance with Art. 6 GDPR.
1. name and address of the controller responsible for processing
The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is the
Bundesverband der Maschinenringe e.V.
Am Maschinenring 1
86633 Neuburg an der Donau
Neuburg an der Donau, Germany
08431 6499-0
www.maschinenring.de
Mail: portal@maschinenring.de
2. name and address of the data protection officer
The data protection officer of the controller is
Andrea Augustin
Am Maschinenring 1
86633 Neuburg-Donau
Phone: 08431/6499-1453
Fax: 08431/6499-1454
datenschutz@maschinenringe.com
3. sources of the personal data
We process personal data that we receive from you in the course of your visit to our website, when you contact us by e-mail or via a contact form, by telephone or in writing.
Furthermore, we process personal data that we legitimately receive from other members of the Maschinenring organization or from publicly accessible sources or that we legitimately receive from other third parties (e.g. partners, credit agencies).
4 Processing purposes and legal bases
4.1 Visiting the website for information purposes
If you visit or use our website purely for information purposes, i.e. if you do not register or otherwise provide us with information, we only temporarily collect and store the personal data that your browser transmits to our server and that is technically necessary for us to display our website to you and to ensure stability and security; the legal basis is Art. 6 para. 1 lit. f GDPR. The data is automatically deleted after 400 days. See details under point 5.9 "Portal log files"
4.2 Contact form
On our website, we offer you the opportunity to ask us questions of any kind at any time and to contact us. The legal basis is Art. 6 para. 1 lit. f GDPR, as we have a legitimate interest in processing your inquiries. The data, including identity and contact details (surname/first name, email, zip code) and question, will be deleted after your request has been dealt with. See details under "Making contact"
4.3 Mediation, conclusion and processing of contracts
Your data will be used for the purpose of order processing and to fulfill contractual and pre-contractual obligations as well as for the processing of orders, the delivery of goods and the provision of services and for the processing of payment (in the case of purchase on account also for necessary checks). We use various form tools for this purpose, such as Jotform.
4.4 Credit check
In individual cases, we use your data to assess your creditworthiness and to provide information to determine your creditworthiness, e.g. through the credit agency Creditreform. The legal basis is Art. 6 para. 1 lit. f GDPR. Processing on this basis may only take place insofar as this is necessary to protect us or third parties and does not outweigh the interests or fundamental rights of the data subject that require the protection of personal data.
4.4 Credit assessment
In individual cases, we use your data to assess your creditworthiness and to provide information to determine your creditworthiness, e.g. through the credit agency Creditreform.The legal basis is Art. 6 para. 1 lit. f GDPR.Processing on this basis may only take place insofar as this is necessary to protect us or third parties and does not outweigh the interests or fundamental rights of the data subject that require the protection of personal data.
4.5 Marketing and direct advertising
We also use your information to communicate with you about offers, products, services and marketing offers, i.e. on the basis of your voluntary consent, we will occasionally contact you in writing, by telephone, fax or e-mail.
We use this to update our records and to manage and maintain your customer accounts with us and also to recommend products or services that may be of interest to you. We link the data from the website with other information that you have provided to us and that you have yet to provide in order to improve our solutions.
If you have given us your consent to store your personal data for marketing purposes, your data will be stored for the duration for which MRD takes marketing and advertising measures or until you withdraw your consent.You can revoke your consent to receive advertising at any time with effect for the future. The legal basis is Art. 6 para. 1 lit. a GDPR. Please send your revocation in writing or by e-mail to the addresses listed in point 1.
4.6 Application
If you are interested in working for the Maschinenring organization or send us your data as part of an application process, we will store your data until your request has been clarified or until the application process has been completed. The legal bases are Art. 6 para. 1 lit. f or lit. b GDPR. Further information on the application procedures for the Bundesverband der Maschinenringe e.V. and Maschinenringe Deutschland GmbH can be found at LINK
4.7 Newsletter
You can subscribe to our newsletter. Your data will be stored until you unsubscribe from the newsletter. The legal basis is your voluntarily given consent in accordance with Art. 6 para. 1 lit. a GDPR.See details on newsletter subscription and newsletter tracking.
5. web analysis Google Analytics
Cookies and Google Analytics are used on this website for the user-friendly design of the website and optimal adaptation to your needs, to carry out reach measurements, to evaluate website visits for marketing and optimization purposes and to display suitable content and advertising.
Yes, our website uses Google Analytics, a web analytics service provided by Google Inc ("Google"). "Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de). You can find more information on this at tools.google.com/dlpage/gaoptout or at http://www.google.com/intl/de/analytics/privacyoverview.html(general information on Google Analytics and data protection). We would like to point out that on this website Google Analytics has been extended by the code "gat._anonymizeIp();" in order to ensure an anonymized collection of IP addresses (so-called IP masking)."
The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. a GDPR.
5.1 Google Tag Manager
This website uses Google Tag Manager. This service allows website tags to be managed via an interface. The Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it will remain in place for all tracking tags if they are implemented with Google Tag Manager.
Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.
5.2 Google Recaptcha
We integrate the function for recognizing bots, e.g. for entries in online forms ("ReCaptcha") of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This is primarily used to distinguish whether the input is made by a natural person or abusively by machine and automated processing. The service includes sending the IP address and any other data required by Google for the ReCaptcha service to Google. The deviating data protection provisions of Google Inc. apply here. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR.
5.3 Google Ads
5.3.1 Google Ads ConversionWe use the Google Ads Conversion service to draw attention to our attractive offers with the help of advertising material (so-called Google Ads) on external websites. We can determine how successful the individual advertising measures are in relation to the advertising campaign data. We are interested in showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs. These advertising materials are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your device. These cookies generally lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie. These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked via the websites of Ads customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of Ads Conversion, Google receives the information that you have accessed the If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out your IP address and store it. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR.
5.3.2 Google Ads Remarketing
We use the remarketing function within the Google Ads service. With the remarketing function, we can present users of our website with advertisements based on their interests on other websites within the Google advertising network (in Google Search or on YouTube, so-called "Google Ads" or on other websites). For this purpose, the interaction of users on our website is analyzed, e.g. which offers the user was interested in, in order to be able to display targeted advertising to users on other sites even after they have visited our website. For this purpose, Google stores cookies on the end devices of users who visit certain Google services or websites in the Google Display Network. These cookies are used to record the visits of these users. The cookies are used to uniquely identify a web browser on a specific end device and not to identify a person.
Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html.
Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Transfers to third countries are possible. So-called standard contractual clauses pursuant to Art. 46 GDPR have been concluded as suitable guarantees. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de.
Deletion/revocation:
You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive any ads from third-party providers; b) by installing the plug-in provided by Google under the following
link: https://www.google.com/settings/ads/plugin; c) by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin, e) by means of the corresponding cookie setting. We would like to point out that in this case you may not be able to use all functions of this website to their full extent.
Legal basis:
Art. 6 (1) a GDPR (consent)
5.3.3 Google Analytics advertising functions
In addition to the standard functions, we also use the extended functions of Google Analytics on this website. The Google Analytics advertising functions implemented on this website include
Reports on impressions on the Google Display Network;
Google Analytics reports on performance by demographics and interests
Integrated services for which data is collected in Google Analytics for advertising purposes, including the collection of data via cookies for ad preferences and anonymous identifiers
For this purpose, in addition to the data collected by the Google Analytics analysis tool, further data is collected via Google cookies for advertising preferences and anonymous identifiers for accesses. We use this information to improve our website. You can prevent the use of Google Analytics advertising functions in various ways: a) by setting your browser software accordingly; b) via the Google ad settings at https://www.google.com/ads/preferences/?hl=de c) by means of a corresponding cookie setting, or d) by deactivating it on the Network Advertising Initiative (NAI) website at hhttp://www.networkadvertising.org. We would like to point out that in this case you may not be able to use all functions of this website to their full extent.
Legal basis:
Art. 6 (1) a GDPR (consent)
5.3.4 AdAlliance Remarketing
Information/Purpose:
The website uses the remarketing function of IP Deutschland GmbH ("IP") / AdAlliance GmbH ("ADA"), Picassoplatz 1, 50679 Cologne. This is a procedure with which we would like to address you again within 180 days. This application allows our advertisements to be displayed to you when you continue to use the Internet after visiting our website. This is done by means of cookies stored in your browser, which are used by IP/ADA to record and evaluate your usage behavior when you visit various websites. In this way, IP/ADA can determine your previous visit to our website. IP/ADA evaluates the information about you obtained via the cookies and uses it to create profiles or enrich them ("profiles"). This may also include data from third-party services (in particular from the service portfolio of Mediengruppe RTL Deutschland GmbH) and profiles may be used in downstream systems (e.g. for advertising playout). This data and similar data records from other users are used to analyze usage. IP and ADA can then assign you to age and interest groups based on probabilities. The results are used to optimize and analyze offers and to display
Furthermore, the profiles created in this way can also be transmitted to third parties or third parties can be granted access to them. Further information on marketing can also be found at datenschutz.ip.de/nutzungsbasierte_onlinewerbung/informationen_externe_vermarkt.cfm. Deletion/revocation: You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive any ads from third-party providers; b) by installing the opt-out provided by IP/ADA at the following link: datenschutz. ip.de/nutzungsbasierte_onlinewerbung/opt-out__opt-in.cfm; c) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link www.google.com/settings/ads/plugin, d) by means of a corresponding cookie setting. We would like to point out that in this case you may not be able to use all functions of this website to their full extent.
Legal basis:
Art. 6 (1) a GDPR (consent)
5.4 Jotform
On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR. GDPR), we use the functions of the external form generator JotForm from the provider JotForm Inc, 111 Pine St. Suite 1815, San Francisco, CA 94111. Data protection information at https://www.jotform.com/privacy/.
In general, the following applies to the integration of third-party services and content: We use content or service offerings within our online offering on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f. GDPR). GDPR) content or service offers from third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content"). This always presupposes that the third-party providers of this content are aware of the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Pixel tags can be used to analyze information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as being linked to such information from other sources.
5.5 Log files
Yes, every time the website is accessed, we use an automated system to collect data and information from the computer system of the accessing computer. This data is stored in the server log files. The following data may be collected:
(1) Information about the browser type and version used
(2) The operating system of the user's terminal device
(3) The user's internet service provider
(4) The IP address of the user
(5) Date and time of access
(6) Websites from which the user's system accesses our website (referrer)
(7) Websites that are accessed by the user's system via our website
The processing of the data serves to deliver the content of our website, to ensure the functionality of our information technology systems and to optimize our website.
The log file data is always stored separately from other personal user data.
The log file data is always stored separately from other personal user data.
The above-mentioned data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems, e.g. to detect attacks. The data is not analyzed for marketing purposes in this context. The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f GDPR.
The above-mentioned data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Data may be stored beyond this point. In this case, the user's IP address is deleted or anonymized by us so that it is no longer possible to identify the accessing client and the data contained can no longer be linked to a specific person.
5.10 YouTube
We use the YouTube.com platform to post our own videos and make them publicly accessible. YouTube is a service provided by a third party not affiliated with us, namely YouTube LLC.
Some of our website pages contain links or connections to the YouTube service. As a general rule, we are not responsible for the content of linked websites. In the event that you follow a link to YouTube, however, we would like to point out that YouTube stores the data of its users (e.g. personal information, IP address) in accordance with its own data usage guidelines and uses it for business purposes.
We also directly integrate videos stored on YouTube on some of our websites. During this integration, content from the YouTube website is displayed in parts of a browser window. However, the YouTube videos are only called up by clicking on them separately. This technique is also known as "framing". When you call up a (sub)page of our website on which YouTube videos are integrated in this form, a connection to the YouTube servers is established and the content is displayed on the website by notifying your browser.
The integration of YouTube content only takes place in "extended data protection mode". This is provided by YouTube itself and ensures that YouTube does not initially store any cookies on your device. However, when the relevant pages are accessed, the IP address and the other data mentioned in section 4 are transmitted and thus, in particular, which of our Internet pages you have visited. However, this information cannot be assigned to you unless you have logged in to YouTube or another Google service (e.g. Google+) before accessing the page or are permanently logged in.
As soon as you start playing an embedded video by clicking on it, YouTube only stores cookies on your device through the extended data protection mode, which do not contain any personally identifiable data, unless you are currently logged in to a Google service. These cookies can be prevented by making the appropriate browser settings and extensions.
Address and link to the privacy policy of the third-party provider:
Google/YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland - Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated,
The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR (legitimate interests) and Art. 6 para. 1 sentence 1 lit. a) GDPR (consent). transfer of data to third parties
When passing on your personal data, we always ensure the highest possible level of data security. Therefore, your data will only be passed on to carefully selected and contractually obligated service providers and partner companies.
Insofar as it is necessary for the processing of contracts and in order to process your inquiries and to be able to provide you with the offers of the Maschinenring organization or the offers of our partners, the data of the person concerned will be passed on within the Maschinenring organization as well as to partners and service companies, e.g. product partners for purchasing benefits and energy suppliers. These companies either use the data on their own responsibility for contract processing or they work for us by way of order processing in accordance with Art. 28 GDPR and may therefore only use the data provided in accordance with our instructions. In this case, we are legally responsible for appropriate data protection precautions at the companies commissioned by us. We therefore agree specific data security measures with these companies and monitor them regularly. The legal basis in all cases is Art. 6 para. 1 lit. b and Art. 6 para. 1 lit. f GDPR.
Within the framework of the existing data protection regulations, we will also pass on your data to third parties or government agencies if we are legally obliged to do so, e.g. due to an official or court order, or if we are entitled to do so, e.g. because this is necessary for the prosecution of criminal offenses or for the exercise and enforcement of our rights and claims. The legal basis in these cases is Art. 6 para. 1 lit. c and Art. 6 para. 1 lit. f GDPR.
7. Data transfer to third countries
An active transfer of personal data to a third country or to an international organization does not take place unless this has been expressly indicated in the context of the aforementioned services (see 6ff). Data is then transferred on the basis of the standard contractual clauses stipulated by the EU or there is an adequacy decision by the EU Commission regarding the level of data protection for the country in question.
8. rights of data subjects
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller.
8.1 Right to information
You can request confirmation from the controller as to whether personal data concerning you is being processed by us.
If such processing is taking place, you can request the following information from the controller
the purposes for which the personal data are processed
the categories of personal data that are processed
the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed
the envisaged period for which the personal data concerning you will be stored, or, if specific information on this is not possible, the criteria used to determine that period
the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing
the existence of a right to lodge a complaint with a supervisory authority
all available information about the origin of the data if the personal data is not collected from the data subject
the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
8.2 Right to rectification
You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must carry out the rectification without undue delay.
8.3 Right to restriction of processing
Under the following conditions, you may request the restriction of the processing of personal data concerning you:
if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead
the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; or
if you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds.
If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
8.4 Right to erasure
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or
You object to the processing pursuant to Art. 21 (2) GDPR.
The personal data concerning you has been processed unlawfully.
The personal data concerning you have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The personal data concerning you have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17 (1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
The right to erasure does not apply if the processing is necessary
for exercising the right of freedom of expression and information
for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
for the establishment, exercise or defense of legal claims.
8.5 Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients by the controller.
8.6 Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where
the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
the processing is carried out by automated means. In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be affected by this. The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
8.7 Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. You have the option, in connection with the use of information society services - notwithstanding Directive 2002/58/EC - to exercise your right to object by means of automated procedures that use technical specifications.
8.8 Right to withdraw data protection consent Consent
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
8.9 Automated decision in individual cases
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
is necessary for the conclusion or performance of a contract between you and the controller
is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
With regard to the cases referred to in a. and c., the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
8.10 Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
9. automated decisions in individual cases including profiling
In principle, we do not use fully automated decision-making in accordance with Article 22 GDPR to establish and conduct the business relationship. Should we use this procedure in individual cases, we will inform you of this separately.
10. updates to the data protection provisions
We reserve the right to update these data protection provisions in the event of a change in the legal situation or jurisdiction as well as due to the further development of our offer. We will inform you of any central adjustments.