Privacy

---

I. Name and address of the person responsible

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Winery Mathy-Schanz GbR

Moselstr. 52

54518 Osann-Monzel

Tel: +49 6535 7140

E-Mail: info@weine-mosel.de

II. Name and address of the data protection officer

The data protection officer of the responsible persons is:

We do not need a data protection officer.

III. General information about data processing

1. Scope of processing of personal data

In principle, we process personal data only to the extent necessary to provide a functioning website and our content and services. The processing of personal data takes place only with the consent of the user or in those cases in which a prior consent for real reasons is not possible and the processing of the data by law is permitted.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (DSGVO) as legal basis.

In the processing of personal data necessary for the performance of a contract of which the data subject is a party, Art. 6 para. 1 lit. b DSGVO as legal basis. This also applies to processing operations required to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfill a legal obligation that our company is subject to, Art. 6 para. 1 lit. c DSGVO as legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f DSGVO as legal basis for processing.

3. Data deletion and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, it may be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. A blocking or deletion of the data takes place even if a storage period prescribed by the mentioned standards expires, unless there is a need for further storage of the data for a contract conclusion or a contract fulfillment.

IV Provision of the website and creation of logfiles

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected here:

Browser type and version

the operating system used

Internet service provider of the user

the IP address

Date and time of access

Websites from which the user's system reaches the bottom of the website

Websites accessed by the user's system through our website

The data is also stored in log files of our system. Not affected by this are the IP addresses of the user or other data that allow the assignment of the data to a user. A storage of this data together with other data of the user does not take place.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO.

3. Purpose of the data processing

The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session.

Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f DSGVO.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed.

In the case of storing the data in log files, this is the case after no more than seven days. An additional storage is possible. In this case who deleted or alienated the IP addresses of the users, so that an assignment of the called client is no longer possible.

5. Opposition and removal possibility

The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.

V Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser be identified even after a page break. These are, for example, the access data for closed areas of our website that require log-in.

We also use cookies on our site that allow an analysis of users' browsing habits. The data of the users collected in this way are pseudonymised by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data will not be stored together with other personal data of the users.

2. Legal basis for data processing

The legal basis for the processing of personal data using cookies is Article 6 (1) (f). DSGVO.

3. Purpose of the data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Without the use of cookies, not all functions can be offered.

The data collected by technically unnecessary cookies are not used to create user profiles. The use of this type of cookies is also for the purpose of improving the quality of our website and content. This way, we learn how the website is used and so we can constantly optimize our offer.

For these purposes, our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f DSGVO.

4. Duration of storage, objection and disposal options

Cookies are stored on the computer of the user and transmitted by this on our side. Therefore, users also have full control over the use of cookies. By changing the settings in the Internet browser, users can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.

The transmission of Flash cookies can not be prevented by the settings of the browser, but by changing the setting of the Flash player.

VI Newsletter

1. Description and scope of data processing

On our website you can subscribe to a free newsletter. The data from the input mask will be sent to us during registration, at least the following information:

Surname

E-mail address

first given name

phone

Fax:

company

address

country

password

At the time of sending the message, the following data is also stored:

IP address of the user

Date and time of registration

For the processing, the consent of the user is obtained as part of the registration process and reference is made to this privacy policy, which also includes the concrete consent text below.

In connection with the processing of data for the sending of newsletters, there is no disclosure of the data to third parties. The data will be used exclusively for sending the newsletter.

2. Legal basis for data processing

The legal basis for the processing of personal data after subscribing to the newsletter is Art. 6 para. 1 a. DSGVO.

3. Purpose of the data processing

The collection of the user's data serves to deliver the newsletter. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. The user's e-mail address will be saved as long as the subscription to the newsletter is active.

5. Opposition and removal possibility

Subscription to the newsletter may be terminated at any time by the user concerned. For this purpose, there is a corresponding link in each newsletter.

This also allows a revocation of the consent of the storage of the personal data collected during the registration process.

VII contact form and e-mail contact

1. Description and scope of data processing

If there are contact forms on our website that can be used for electronic contact and a user takes advantage of this option, the data entered in the input mask will be transmitted to us and saved. Depending on the selected form, these data are usually:

1.1. Surname

1.2. E-mail address

At the time of sending the message, the following data is also stored:

IP address of the user

Date and time of registration

For the processing, the consent of the user is obtained as part of the registration process and reference is made to this privacy policy, which also includes the concrete consent text below.

Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.

There is no disclosure of data to third parties in this context. The data is used exclusively for processing the conversation.

2. Legal basis for data processing

Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.

The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f DSGVO. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

3. Purpose of the data processing

The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the matter in question has been finally clarified.

The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

5. Opposition and removal possibility

The user has the opportunity to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue.

The revocation of consent and the objection of storage is possible verbally, in writing or by e-mail.

All personal data stored in the course of contacting will be deleted in this case.

VIII Web Analytics by Google Analytics

1. Scope of processing of personal data

We use Google Analytics on our website to analyze the surfing behavior of our users. The software sets a cookie on the computer of the users (for cookies see above). If individual pages of our website are called, the following data is stored:

1.1. Two bytes of the IP address of the user's calling system

1.2. The website called

1.3. The website from which the user came to the accessed website (referrer)

1.4. The subpages that are called from the called web page

1.5. The length of stay on the website

1.6. The frequency of calling the webpage

Google uses cookies. The information generated by the cookie about the use of the online offer by the users are usually transmitted to a Google server in the USA and stored there. Google is certified under the Privacy Shield Agreement, providing a guarantee to comply with European privacy legislation. We only use Google Analytics with activated IP anonymization. This means that the IP address of the users is granted by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. 

The IP address submitted by the user's browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by setting their browser software accordingly; Users may also prevent the collection by Google of the data generated by the cookie and related to its use of the online offer, as well as the processing of such data by Google by downloading and installing the browser plug-in available under the following link. For more information about Google's data usage, hiring and opt-out options, please visit Google's "Use Google by Your Use of Our Partner Sites or Apps", "Use Your Data for Advertising," "Use information that Google uses to promote you display ". Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offering and to provide us with further services related to the use of this online offer and the internet usage. In this case, pseudonymous user profiles of the processed data can be created.

2. Legal basis for the processing of personal data

The legal basis for the processing of the users' personal data is Article 6 (1) lit. f DSGVO.

3. Purpose of the data processing

The processing of users' personal data enables us to analyze the surfing behavior of our users. By analyzing the obtained data, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness.

For these purposes, our legitimate interest lies in the processing of data according to Art. 6 para. 1 lit. f DSGVO. The anonymisation of the IP address sufficiently takes into account the interest of the users in their protection of personal data.

4. Duration of storage

Sessions and campaigns stop after a certain amount of time. By default, sessions will end after 30 minutes of no activity and campaigns after six months. Campaign timeout can be a maximum of two years. For more information about Terms of Use and Privacy, please visit https://www.google.com/analytics/terms/en.html or https://policies.google.com/

5. Opposition and removal possibility

Cookies are stored on the computer of the user and transmitted by this on our side. Therefore, users also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.

Users may also prevent the collection of the cookie-generated and website-related data (including IP address) to Google and the processing of such data by Google by downloading and installing this browser add-on.

Opt-out cookies prevent the future collection of user data when visiting this website. To prevent Universal Analytics capturing across devices, users must opt ​​out on all systems in use.

IX Google Marketing and Remarketing

1. Scope of processing of personal data

We use the Google Inc. Marketing and Remarketing Services ("Google Marketing Services"), 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, ("Google"). Google is certified under the Privacy Shield Agreement, providing a guarantee to comply with European privacy legislation. The Google Marketing Services allow us to better target advertisements for and on our website so that we only present ads to users that potentially match their interests. If a user e.g. Showing ads for products he's been interested in on other websites is called remarketing. For these purposes, when Google and our other websites access Google Marketing Services, Google immediately codes Google and becomes so-called (re) marketing tags (invisible graphics or code, also known as Web Beacons ") incorporated into the website. With their help, the user is provided with an individual cookie on the device. a small file is saved (instead of cookies, comparable technologies can be used). The cookies can be set from different domains such as google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. In this file is noted which websites the user visited, for what content he is interested and what offers he has clicked, as well as technical information about the browser and operating system, referring websites, visit time and other information on the use of the online offer. The IP address of the users is also recorded, whereby in the context of Google Analytics we announce that the IP address is shortened within member states of the European Union or other parties to the Agreement on the European Economic Area and only in exceptional cases to one Google server in the United States transferred and shortened there. The IP address will not be merged with data of the user within other offers from Google. The above information may also be linked by Google with such information from other sources. If the user subsequently visits other websites, they may be shown according to his interests, the ads tailored to him. The data of the users are pseudonym processed in the context of the Google marketing services. That Google stores and processes e.g. not the name or e-mail address of the users, but processes the relevant data cookie-related within pseudonymous user profiles. That from the perspective of Google, the ads are not managed and displayed to a specifically identified person, but to the cookie owner, regardless of who that cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected about users through Google Marketing Services is transmitted to Google and stored on Google's servers in the United States. Among the Google marketing services we use is u.a. the online advertising program "Google AdWords". In the case of Google AdWords, each advertiser receives a different "conversion cookie". Cookies can not be tracked through the websites of advertisers. The information gathered through the cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Advertisers will see the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive any information that personally identifies users. We can embed third-party ads based on Google's DoubleClick marketing service. DoubleClick uses cookies that enable Google and its affiliate websites to serve ads based on users' visits to this site or other sites on the Internet. We can incorporate third-party ads based on the Google AdSense marketing service. AdSense uses cookies that enable Google and its affiliate websites to serve ads based on users' visits to this site or other sites on the Internet. Also we can use the service "Google Optimizer". Google Optimizer allows us to understand how various changes to a website (such as changes to the input fields, the design, etc.) can take place in so-called "A / B testings". Cookies are stored on users' devices for these purposes. We only use the "Google Tag Manager" to integrate and manage the Google Analytics and Marketing services into our website. For more information about Google's data usage for marketing purposes, please visit the overview page, Google's privacy policy is available here.

2. Legal basis for the processing of personal data

The legal basis for the processing of the users' personal data is Article 6 (1) lit. f DSGVO.

3. Purpose of the data processing

Google Marketing Services gives us the ability to more accurately display advertisements for us and on our website so that we only present ads to users that potentially represent their interests.

For these purposes, our legitimate interest lies in the processing of data according to Art. 6 para. 1 lit. f DSGVO.

4. Duration of storage

According to own data, the log data collected by Google is anonymized by deleting a part of the IP address and the cookie information after 9 or 18 months respectively. Further information can be found here.

5. Opposition and removal possibility

Cookies are stored on the computer of the user and transmitted by this on our side. Therefore, users also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.

If you want to opt out of interest-based advertising through Google Marketing Services, you can take advantage of Google's recruitment and opt-out options.

X Facebook social plugins

1. Scope of processing of personal data

We use social plugins ("plugins") from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook"). The plugins can represent interaction elements or content (eg videos, graphics or text contributions) and can be recognized by one of the Facebook logos (white "f" on blue tile, the terms "Like", "Like" or a "thumbs up" sign ) or are marked with the addition "Facebook Social Plugin". The list and appearance of Facebook social plugins can be viewed here. The plugins will not be activated until you click on the corresponding button. If these are greyed out, the plugins are inactive. You have the option to activate the plugins once or permanently. Facebook is certified under the Privacy Shield Agreement, providing a guarantee to comply with European privacy legislation. When a user invokes a feature of this online offering that includes such a plugin, their device establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to the device of the user and included by this in the online offer. In the process, user profiles of the processed data can be created. We therefore have no influence on the extent of the data that Facebook collects with the help of this plugin and therefore informs users according to our level of knowledge. By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. If users interact with the plugins, for example, press the Like button or leave a comment, the information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and save their IP address. According to Facebook, only an anonymous IP address is stored in Germany. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and setting options for protecting the privacy of users, can be found in Facebook's privacy policy.

2. Legal basis for the processing of personal data

The legal basis for the processing of the users' personal data is Article 6 (1) lit. f DSGVO.

3. Purpose of the data processing

The Facebook Social Plugins show us the interests of the visitors in order to display these more targeted on our website, in order to present to users only contributions that potentially correspond to their interests.

For these purposes, our legitimate interest lies in the processing of data according to Art. 6 para. 1 lit. f DSGVO.

4. Duration of storage

According to its own information Facebook stores for a period of 90 days the date and time of the visit, the specific Internet address where the social plugin is located, and other technical data such as the IP address, the browser type, the operating system to the services of Facebook continues to optimize. At the end of the 90 days, the data will be anonymised so that they can no longer be associated with users.

5. Opposition and removal possibility

If a user is a Facebook member and does not want Facebook to collect data about him through this online offering and link it to his member data stored on Facebook, he must log out of Facebook and delete his cookies before using our online offering. Other settings and disagreements on the use of data for promotional purposes are possible within the Facebook profile settings or via the US side or the EU side. The settings are platform independent, i. they are adopted for all devices, such as desktop computers or mobile devices.

XI Google Maps

1. Description and scope of data processing

On our website we use Google Maps (API) from Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Maps is a web service for displaying interactive (land) maps to visually represent geographic information. By using this service, users, for example, will see our location or that of our affiliates and facilitate their arrival.

Already when you visit the subpages in which the map of Google Maps is integrated, information about the use of our website (such as the IP address) is transmitted to Google servers in the United States and stored there. This is done regardless of whether Google provides a user account through which users are logged in or if there is no user account. When users log in to Google, their data is assigned directly to their account. If users do not want to associate with their profile on Google, they must log out before activating the button. Google stores the data (even for non-logged in users) as usage profiles and evaluates them.

2. Legal basis for the processing of personal data

The legal basis for the processing of the users' personal data is Article 6 (1) lit. f DSGVO.

3. Purpose of the data processing

Our purpose is to integrate a dynamic map into our website. For these purposes, our legitimate interest lies in the processing of data according to Art. 6 para. 1 lit. f DSGVO.

4. Duration of storage

According to its own information Facebook stores for a period of 90 days the date and time of the visit, the specific Internet address where the social plugin is located, and other technical data such as the IP address, the browser type, the operating system to the services of Facebook continues to optimize. At the end of the 90 days, the data will be anonymised so that they can no longer be associated with users.

5. Opposition and removal possibility

If users disagree with their data to Google when they use Google Maps, they may opt out of completely disabling the Google Maps web service by turning off JavaScript in the browser. Google Maps and thus the map display on this website can not be used.

XII Facebook, Custom Audiences and Facebook Marketing Services

1. Scope of data processing

We use the "Facebook Pixel" of the social network Facebook, which is owned by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland is operated ("Facebook"). Facebook is certified under the Privacy Shield Agreement, providing a guarantee to comply with European privacy legislation. With the help of the Facebook pixel, it is on the one hand possible for Facebook to determine the visitors to our online offer as a target group for the presentation of advertisements (so-called "Facebook ads"). The Facebook pixel is directly linked to Facebook when it is accessed via our website and a so-called cookie, i.e. a cookie, can be placed on the user's device. save a small file. If users subsequently log in to Facebook or visit Facebook in the logged-in state, the visit to our online offer is recorded in the profile. The data collected about users is anonymous to us, so we do not provide any information about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and can be used by Facebook as well as for its own market research and advertising purposes. If we should send data to Facebook for comparison purposes, they will be encrypted locally in the browser and then sent to Facebook via a secure https connection. This is done solely with the purpose of establishing a comparison with the equally encrypted by Facebook data. The processing of the data by Facebook is part of Facebook's data usage policy. Accordingly, general notes on the presentation of Facebook Ads, in the data usage policy of Facebook. Special information and details about the Facebook pixel and how it works can be found in the Help section of Facebook.

2. Legal basis of data processing

The legal basis for the processing of the users' personal data is Article 6 (1) lit. f DSGVO.

3. Purpose of the data processing

We use the Facebook pixel to display the Facebook ads we have been sent only to those Facebook users who have also shown an interest in our online offer or certain features (eg interests in certain topics or products based on the websites visited determined), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to make sure that our Facebook ads are in line with the potential interest of users and are not annoying. With the help of the Facebook pixel, we can also understand the effectiveness of the Facebook ads for statistical and market research purposes, in which we see if users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

4. Duration of storage

According to its own data Facebook stores for a period of 90 days the date and time of your visit, the specific Internet address where the social plugin is located, and other technical data such as the IP address, the browser type, the operating system, the services of Facebook continues to optimize. At the end of the 90 days, the data will be anonymised so that they can not be further associated with you.

5. Revocation and removal options

Users may object to the capture by the Facebook Pixel and use of the data to display Facebook Ads. To adjust the types of ads displayed within Facebook, users can go to the page set up by Facebook and follow the instructions on the usage-based advertising settings. The settings are platform independent, i. they are adopted for all devices, such as desktop computers or mobile devices. Users may also object to the use of cookies for metering and promotional purposes via the network advertising initiative's opt-out page and, in addition, the US website or the European website.

XIII order by a consumer

1. Description and scope of data processing

On our website we offer users the opportunity to order goods. The data is entered into an input mask and transmitted to us and stored.

The following data can be entered:

first given name

Surname

E-mail address

phone

Fax:

address

company

country

At the time of sending the message, the following data is also stored:

1.1. IP address of the user

1.2. Date and time of order:

For the processing, the consent of the user is obtained as part of the registration process and reference is made to this privacy policy, which also includes the concrete consent text below.

2. Legal basis for data processing

Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.

If the registration serves the fulfillment of a contract of which the user is a party or the implementation of pre-contractual measures, an additional legal basis for the processing of the data is Art. 6 para. 1 lit. b DSGVO.

3. Purpose of the data processing

The purpose is to carry out the order.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection.

This is the case during the ordering process for the performance of a contract or for the performance of pre-contractual measures if the data is no longer required for the performance of the contract. Even after the conclusion of the contract, the need to store personal data of the contracting party may exist in order to comply with contractual or legal obligations.

5. Opposition and removal possibility

As a user, you always have the option of canceling the order. The data stored about users can be changed at any time.

You can contact us by e-mail, telephone or in writing.

However, if the data is required to fulfill a contract or to carry out pre-contractual measures, premature deletion of the data is only possible, unless contractual or legal obligations preclude deletion.

XIV Rights of the person concerned

If personal data is processed by users, they are i.S.d. DSGVO and you have the following rights to the person responsible, the following listing includes all their rights, not just the rights arising from the use of our services:

1. Right to information

Users may ask the person in charge to confirm if personal data concerning you is processed by us.

If such processing is available, users may request information from the controller about the following information:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data being processed;

(3) the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;

(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the retention period;

(5) the right of rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

(6) the existence of a right of appeal to a supervisory authority;

(7) all available information on the source of the data if the personal data are not collected from the data subject;

(8) the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.

Users have the right to request information on whether personal data concerning them are transferred to a third country or to an international organization. In this regard, they may require to ask about the appropriate guarantees in accordance with. Art. 46 GDPR to be informed in connection with the transfer.

2. Right to rectification

Users have a right to rectification and / or completion to those responsible, if the processed personal data concerning them is incorrect or incomplete. The person in charge must make the correction without delay.

3. Right to restriction of processing

Users may request the restriction of the processing of personal data concerning them under the following conditions:

(1) if users deny the accuracy of their personal information for a period of time that enables the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and users refuse to delete the personal data and instead request the restriction of the use of the personal data;

(3) the controller no longer needs the personal data for the purposes of the processing, but requires users to assert, exercise or defend legal claims; or

(4) if users have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh their reasons.

If the processing of personal data concerning users has been restricted, such data may be stored, except for their storage, only with their consent or to assert, exercise or defend legal claims or protect the rights of another natural or legal person or for reasons of significant public interest Union or a Member State.

If the limitation of the processing according to the o.g. If conditions are restricted, users will be informed by the person in charge before the restriction is lifted.

4. Right to cancellation

4.1. deletion obligations

Users may require the controller to delete their personal data without delay, and the controller shall immediately erase that information provided that one of the following is true:

(1) Personal data concerning users are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) Users revoke their consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.

(3) Users acc. Art. 21 para. 1 DSGVO objection to the processing and there are no prior justifiable reasons for the processing, or they lay gem. Art. 21 para. 2 DSGVO objection to the processing.

(4) Personal data concerning users has been processed unlawfully.

(5) The erasure of personal data concerning the user is required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.

(6) Personal data concerning users was collected in relation to information society services offered under Article 8 (1) of the GDPR.

4.2. Information to third parties

If the person responsible has made the personal data concerning the user public and he is gem. Article 17 (1) of the GDPR, it shall take appropriate measures, including technical ones, to inform data controllers who process the personal data that you have been identified as being affected, taking into account available technology and implementation costs Person requested by them to delete all links to such personal data or to make copies or replicas of such personal data.

4.3. exceptions

The right to erasure does not exist if the processing is necessary

(1) to exercise the right to freedom of expression and information;

(2) to fulfill a legal obligation which requires processing under Union or Member State law to which the controller is subject or for the performance of a task of public interest or in the exercise of official authority conferring on the controller has been;

(3) for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;

(4) for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or

(5) to assert, exercise or defend legal claims.

5. Right to information

Where users have the right to rectify, erase or limit processing to the controller, the latter is required to notify all recipients to whom personal data concerning users have been corrected, deleted or restricted, except when: this proves to be impossible or involves a disproportionate effort.

Users have the right to be informed about these recipients vis-à-vis the controller.

6. Right to Data Portability

Users have the right to receive personally identifiable information they provide to the controller in a structured, common and machine-readable format. In addition, users have the right to submit this data to another person without hindrance by the controller to whom the personal data has been provided, provided that

(1) the processing on a consent acc. Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a DSGVO or on a contract acc. Art. 6 para. 1 lit. b DSGVO is based and

(2) the processing is done by automated means.

In exercising this right, users also have the right to obtain that personal data relating to them be transmitted directly from one controller to another, where technically feasible. Freedoms and rights of other persons may not be affected.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

7. Right to object

Users have the right, at any time for reasons arising from their particular situation, to object to the processing of personal data relating to you pursuant to Article 6 (1) (e) or (f) of the GDPR; this also applies to profiling based on these provisions.

The controller no longer processes personal data relating to users unless he can demonstrate compelling legitimate grounds for processing that outweigh their interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.

When the personal data relating to users is processed for direct marketing purposes, users have the right to object at any time to the processing of personal data concerning them for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

If users object to the processing for direct marketing purposes, the personal data concerned will no longer be processed for these purposes.

Users have the option, in the context of the use of information society services - regardless of Directive 2002/58 / EC - to exercise their right of opposition through automated procedures using technical specifications.

8. Right to revoke the data protection consent declaration

Users have the right to revoke their data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

9. Automated decision on a case-by-case basis, including profiling

Users have the right not to be subject to a decision based solely on automated processing - including profiling - that has a legal effect on them or, in a similar manner, significantly affects them. This does not apply if the decision

(1) necessary for the conclusion or performance of a contract between them and the controller,

(2) is permitted by Union or Member State legislation to which the controller is subject, and where such legislation contains appropriate measures to safeguard its rights and freedoms and legitimate interests, or

(3) with their express consent.

However, these decisions may not be based on special categories of personal data under Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g DSGVO applies and reasonable measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With regard to the cases referred to in (1) and (3), the person responsible shall take appropriate measures to uphold the rights and freedoms and their legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and heard on challenge of the decision.

10. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, users shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their residence, place of work or place of alleged infringement, if they consider that the processing of their personal data is against the DSGVO violates.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

XV Consents (consent texts)

1. Contact form

I agree that my data entered in the entry mask will be processed for the purpose of responding to my request for contact, whereby processing according to Art. 4 No. 2 GDPR any process or any process related to personal data performed with or without the help of automated procedures such as collecting, collecting, organizing, organizing, storing, adapting, or altering, reading out, querying, using, disclosing through transmission, dissemination, or any other form of providing, matching, or linking Restriction, deletion or annihilation.

2. Newsletter

I agree that my data entered in the entry mask will be processed for the purpose of sending a newsletter, and processing pursuant to Art. 4 No. 2 GDPR will include any process or series of operations related to personal data, either with or without the help of automated procedures such as collecting, collecting, organizing, organizing, storing, adapting, or altering, reading out, querying, using, disclosing through transmission, dissemination, or any other form of providing, matching, or linking Restriction, deletion or annihilation.