1. Name and address of the data controller
The data controller as set out in the General Data Protection Regulation and other national data protection laws of the European Member States as well as any other data protection regulations is the European Science Club with address and contact details mentioned in the impressum.
2. General information on data processing
2.1. Scope of the processing of personal data
As a general principle, we only collect and use personal data from our users insofar as this is necessary for the provision of a well-functioning website and of our contents and services.
2.2. Legal basis for the processing of personal data
Insofar as we obtain consent from the data subject for the processing of personal data, Art. 6 Para. 1 Item a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For the processing of personal data necessary for the fulfilment of a contract to which the data subject is party, Art. 6 Para. 1 Item b GDPR serves as the legal basis. This also applies to processing necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which the European Science Club is subject, Art. 6 Para. 1 Item c GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6 Para. 1 Item d GDPR serves as the legal basis.
If the processing is necessary for the safeguarding of a legitimate interest of the European Science Club or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the aforementioned interest, Art. 6 Para. 1 Item f GDPR serves as the legal basis for the processing.
2.3. Erasure of data and storage period
The personal data of the data subject is erased or anonymised as soon as the purpose of the storage no longer applies. Storage beyond this period may occur if stipulated by the European or national legislators in regulations, laws or other provisions of Union law to which the data controller is subject. The anonymisation or erasure of the data also takes place when a storage term stipulated by the aforementioned norms expires, unless there is a necessity for the continued storage of the data for the conclusion or fulfilment of a contract.
3. Provision of the website
3.1. Description and scope of the data processing
Each time our website is called up, our system automatically collects data and information from the computer system of the querying computer.
The following data is collected in doing so:
(1) Information on the browser type and the version used
(2) The user’s operating system
(3) The user’s internet service provider
(4) The user’s IP address
(5) Date and time of access
(6) Websites from which the user’s system accesses our website
(7) Subpages and functions that the user calls up
(8) Websites that are called up by the user’s system from our website
This data is also stored in our system’s log files. Storage of this data together with other personal data of the user does not take place.
3.2. Legal basis for the data processing
The legal basis for the temporary storage of the data and log files is Art. 6 Para. 1 Item f GDPR.
3.3. Purpose of the data processing
The temporary storage of the IP address by the system is necessary in order to enable the provision of the website to the user’s computer. To this end, the IP address of the user must be stored for the duration of the session.
The storage and analysis in log files takes place so as to ensure the functionality of the website. In addition, this data helps us to optimise the website and ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes also form the basis of our legitimate interest in the data processing according to Art. 6 Para. 1 Item f GDPR.
3.4. Duration of the storage
The data is deleted as soon as it is no longer required for the achievement of the purpose for which it was collected. In the event that the data is recorded for the provision of the website, this is the case once the respective session is ended. In the event that the data is stored in log files, this is the case at the latest after fourteen days. Storage beyond this point is not possible. In this case, the IP addresses of the users are deleted or distorted such that association with the inquiring client is no longer possible.
3.5. Option to object or request elimination
The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. Consequently, the user has no option to object.
There is an option to object with regard to the evaluation of the subpages and functions that the user calls up in the customer area, webmail or PHPMyAdmin tool, for the purpose of optimising the website (improvement of usability). A settings option in the customer area enables you to declare your objection in this respect.
4. Use of cookies
4.1. Description and scope of the data processing
Our website uses cookies. Cookies are text files that are stored on the user’s computer system in the internet browser and by the internet browser. When a user calls up a website, a cookie may be stored on the user’s computer system. This cookie contains a distinctive string of characters that enables the unambiguous identification of the browser if the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our website require the inquiring browser to be identifiable even after changing pages.
The following data is stored and transmitted in the cookies:
(1) Session ID
(2) Viewport information
(3) Search function ID
4.2. Legal basis for the data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 Para. 1 Item f GDPR.
The legal basis for the processing of personal data using all other cookies is the consent of the person concerned in accordance with Art. 6 Para. 1 Item a GDPR.
4.3. Purpose of the technically necessary cookies
The purpose of using technically necessary cookies is to make the use of websites easier for the user. Some functions of our website cannot be offered without the use of cookies. These functions require the recognition of the browser even after changing pages.
We require cookies for the following applications:
(1) Language settings
(2) Shopping basket information
(3) Form validation
(4) One-page checkout
(5) Affiliate functions
(6) Login information
(7) Responsive behaviour
These purposes also form the basis of our legitimate interest in the processing of personal data according to Art. 6 Para. 1 Item f GDPR.
The user data collected using technically necessary cookies is not used for the creation of user profiles.
You can find more information on all other cookies and their purposes below in the sections "Protection against cyber attacks using Wordfence", "Web analysis by Google Analytics" and "Remarketing".
4.4. Duration of the storage, option to object or request elimination
Cookies are stored on the user’s computer and transmitted to us from there. Hence you as the user have complete control over the use of cookies. By changing the settings in your internet browser, you can deactivate or limit the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be carried out automatically. If cookies are deactivated for our website, it is possible that you may no longer be able to use all the functions of the website to their full extent.
If you do not change any settings or delete anything in your internet browser, the necessary technical cookies will remain valid for one month.
5. Newsletter
5.1. Description and scope of the data processing
Should you give your express consent to receive newsletters, we may periodically send you electronic newsletters with the content of a commercial nature for promotional purposes. For the purpose of sending the newsletter, the following personal data provided when registering for the newsletter will be used:
First name, last name
email address
Date of birth
Language
Country
The distribution of the newsletter will be carried out by CleverReach GmbH & Co KG. They ensure the security of your data through appropriate technical and organizational measures that are state of the art. As a processor, CleverReach GmbH & Co KG is not permitted to use the personal data provided for purposes other than sending the newsletter. For this purpose, the following data is transmitted to CleverReach GmbH & Co KG: first name, last name, language, subscription option (scientist or magician). Your personal data will be transmitted to CleverReach server locations within the EU.dataprotection@world4you.com
5.2. Legal basis for the data processing
The provision of data for the newsletter receipt is neither legally nor contractually required and is also not necessary for the conclusion of a contract. Therefore, there is no obligation to provide this data or to give consent to receive a newsletter.
The legal basis for receiving the newsletter is only the consent given for this purpose (Art 6 para 1 lit a DSGVO). If consent is not granted, the newsletter will not be sent.
5.3. Purpose of the data processing
The processing of the data entered by the user serves to create and deliver the newsletter.
5.4. Duration of the storage
The data collected from you for this purpose will be stored by us only for the period in which you receive a newsletter and have not revoked your consent to receive newsletters.
5.5. Option to object or request elimination
You can revoke the consent you have given us to receive newsletters at any time without giving reasons. To do so, you can send us an e-mail to dataprotection[at]europeanscienceclub.com. However, we would like to point out that all processing/transfers carried out until the revocation remain lawful.
6. Conclusion of contract
6.1. Description and scope of the data processing
On our website, we offer users the option of purchasing products and services. This involves entering data into an input screen; this data is then transmitted to us and stored by us.
Obligatory:
customer type (private/company)
salutation
name (frist name, last name)
address (street, house number, zip code, city, country)
e-mail-address
phone number
data for payment depending on the payment method
depending on top level domain, additional information may be required after purchase
Optional:
title
date of birth
UID (only for corporate customers)
commercial register number (only for corporate customers)
At the time of registering, furthermore, the following data is also stored:
(1) Information on the browser type and the version used
(2) The user’s operating system
(3) The user’s IP address
(4) Date and time
(5) Referrer
Furthermore, we collect, process and store the data that you store yourself when you use our services. This includes the creation of dynamic backup copies in our backup system.
Disclosure of the data to third parties: in the event of a domain registration, the domain registration data is passed on to a domain name registrar and/or a registration authority.
In the case of payment via my.world4you.com (e.g. by credit card), your email address will be passed on to our payment platform provider VIVEUM Payment Systems GmbH, Riemergasse 14/30, 1010 Vienna. When paying by credit card, World4You can request the term or the last four digits of the creditcard from PAYONE for organizational reasons.
In the event of a substantial default in payment, the data may be passed on to a communications service provider, a collection agency, to legal representatives and to the competent court if necessary.
6.2. Legal basis for the data processing
Insofar as the processing serves for the fulfilment of a contract to which the user is party or for the performance of pre-contractual measures, the legal basis for the processing of the data is Art. 6 Para. 1 Item b GDPR.
The legal basis for the disclosure of personal data to communications service providers, to a collection agency, to legal representatives or to the competent court is Art. 6 Para. 1 Item f GDPR.
Insofar as the retention of data is necessary in connection with the conclusion of contract for the fulfilment of a legal obligation, in particular obligations to provide evidence under corporate and tax law, to which our company is subject, Art. 6 Para. 1 Item c GDPR serves as the legal basis.
6.3. Purpose of the data processing
The data processing is necessary for the fulfilment of a contract with the user or for the performance of pre-contractual measures.
6.4. Duration of the storage
The data is deleted or anonymised as soon as it is no longer required for the achievement of the purpose for which it was collected. For example, the data provided during registration will be automatically deleted 14 days after registration if the user does not subsequently purchase any products or services. Any inquiries about terms or the last four digits of the credit card will not be saved but discarded immediately after retrieval.
This is the case for data that has been collected for the purpose of fulfilling a contract or for carrying out a pre-contractual measure once the data is no longer necessary for the performance or the documentation of the contract.
This is the case for data that has been collected for the fulfilment of a contract or for the performance of a pre-contractual measure once the data is no longer necessary for the performance or the documentation of the contract. There may still be a need to store personal data even after the end of the contractual relationship in order to comply with contractual or statutory obligations. The data that is required for the fulfilment of obligations to provide evidence under corporate and tax law in connection with the contract is deleted or anonymised upon the expiry of the seventh calendar year after the end of the contractual relationship, unless there are further statutory obligations that require longer storage.
Backup copies in our backup systems are automatically deleted with a time delay.
6.5. Option to object or request elimination
As a user, you have the option to terminate concluded contracts within the scope of the conditions agreed upon therein. If necessary, you may have the data stored on you rectified at any time.
If the data is necessary for the fulfilment of a contract or for the performance of pre-contractual measures, earlier erasure of the data is not possible.
7. Contact and feedback forms
7.1. Description and scope of the data processing
Our website contains contact forms that can be used to establish contact electronically. If a user makes use of this option, the data entered into the input screen is transmitted to us and stored by us.
For the processing of the data, your consent is obtained during the sending of the contact form, and reference is made to this data privacy statement.
No data is disclosed to third parties in this context. The data is used exclusively for the processing of the conversation.
7.2. Legal basis for the data processing
If consent has been obtained from the user, the legal basis for the processing of the data is Art. 6 Para. 1 Item a GDPR.
If the establishment of contact is undertaken with the aim of concluding a contract, Art. 6 Para. 1 Item b GDPR serves as an additional legal basis for the processing.
7.3. Purpose of the data processing
The processing of the personal data from the input screen serves exclusively to help us process the contact inquiry.
The other personal data processed during the sending of the contact form serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
7.4. Duration of the storage
The data is deleted as soon as it is no longer required for the achievement of the purpose for which it was collected. For the personal data from the input screen of the contact form, this is the case once the communication is no longer expected to be continued on the part of the user. It is assumed that this is the case after three years.
For the personal data additionally collected during the sending of the contact form, the same applies as for the log files above under III.
7.5. Option to object or request elimination
The user has the option to revoke his or her consent to the processing of the personal data at any time via email.
In this case, all personal data that has been stored in the scope of the contact inquiry will be deleted, unless this data is necessary for the fulfilment of a contract or for the performance of pre-contractual measures.
8. Applications
8.1. Description and scope of the data processing
For the purpose of advertising job vacancies and receiving applications, we operate an application platform on our website.
We process the data submitted to us by applicants in the course of the application.
8.2. Legal basis for the data processing
The legal bases for the processing are Art. 6 Para. 1 Item b GDPR (pre-contractual measures) and Art. 6 Para. 1 Item f GDPR as well as, in the event that the applicant consents to the keeping on file of an application, Art. 6 Para. 1 Item a GDPR.
8.3. Purpose of the data processing
The purposes of the data processing are the realisation of the application procedure and the correspondence with the applicant as well as the keeping on file of applications and the establishment, exercise or defence of legal claims.
8.4. Duration of the storage
If you apply for a job vacancy and are not hired, we store the personal data for seven months from the end of the application procedure (a period of six months for the establishment of claims pursuant to §§ 15 Para. 1 and 29 GlBG (Equal Treatment Act) plus one month to allow for potential legal action) on the basis of Art. 6 Para. 1 Item f GDPR.
If the applicant provides his/her consent in the respective individual case, we keep the specific application documents on file for the respective period agreed upon during the granting of consent, for a maximum, however, of 5 years.
If the application is unsolicited, we process the application documents for a maximum of two years on the basis of Art. 6 Para. 1 Item f GPDR so as to be able to contact the applicant if a suitable job vacancy becomes available, whereby an objection to the processing may be filed at any time.
In the event that an employment relationship is established, the application documents are further used for the purpose of personnel administration.
8.5. Option to object or request elimination
The applicant has the option to revoke his/her consent to the keeping on file of an application at any time via email or letter.
An objection may be filed to the processing of the data from an unsolicited application at any time via email or letter.
9. Protection against cyber attacks using Wordfence
We have integrated Wordfence into this website. The provider is Defiant Inc, Defiant, Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter referred to as Wordfence).
Wordfence protects our website from unwanted access or malicious cyberattacks. To do this, our website establishes a permanent connection to Wordfence’s servers so that Wordfence can check its databases against the accesses made to our website and block them if necessary. The use of Wordfence is based on Article 6 Para. 1 (f) of the GDPR. The website operator has a legitimate interest in protecting its website against cyberattacks as effectively as possible. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.wordfence.com/help/general-data-protection-regulation/
We have concluded an order processing contract with Wordfence. This is a contract required by data protection law and ensures that Wordfence processes the personal data of our website visitors strictly in accordance with our instructions and in compliance with the GDPR.
In exceptional cases, from which website users are usually not affected, Wordfence uses cookies. Below, we explain what each cookie does, which users the cookie is set for and how the cookie helps protect the site.
(1) wfwaf-authcookie- (Hash): This cookie is used by the Wordfence firewall to carry out a capability check on the current user before WordPress loads. It’s only set for users who can log into WordPress. The Wordfence firewall uses this cookie to recognise logged-in users and allow them increased access. Wordfence can also detect users who are not logged in and restrict their access to secure areas. The cookie informs the firewall what level of access a visitor has, so that the firewall can make informed decisions about who should be allowed and who should be blocked.
(2) wf_loginalerted_ (Hash): This cookie is used to notify the Wordfence administrator when an administrator logs in from a new device or location. This cookie is set for administrators only and is used to help site operators know if an admin has logged in from a new device or location.
(3) wfCBLBypass: Wordfence offers a site visitor the option of bypassing country blocking by accessing a hidden URL. This cookie can be used to track who can bypass country blocking. When a hidden URL defined by the site administrator is accessed, this cookie is used to check whether the user can access the site from a country restricted by country blocking. This is set for anyone who knows the URL that enables the default country blocking to be bypassed. This cookie is not set for anyone who does not know the hidden URL to bypass country blocking. This cookie gives site owners the ability to allow certain users of blocked countries even though their country has been blocked.
10. Web analysis by Google Analytics (Analysis cookies)
10.1. Scope of the processing of personal data
Our website uses Google Analytics, a web analytics service by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable the analysis of your use of the website. The information generated by the cookie regarding your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to assess your use of the website, to compile reports on the website activities for the website operators and to provide further services connected to the use of the website and the use of the internet. Google may potentially also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Under no circumstances will Google link your IP address to other data.
You can prevent the storage of the cookies by selecting the appropriate settings in your browser software; furthermore, you can prevent the recording of the data generated by the cookie as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link:: http://tools.google.com/dlpage/gaoptout?hl=en. However, we must point out that in this case, you may not be able to use all the functions of this website to their full extent.
IP anonymisation: We use the function “activation of the IP anonymisation” on this website. This means that your IP address is first shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA and thus anonymised. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
By consenting to the use of analysis cookies, at the same time you agree pursuant to Art. 49 Para. 1 Item a GDPR that your data may be processed in the USA. The ECJ does not confirm an appropriate data protection level for the USA that matches the EU standards (ECJ, C-311/18, Schrems II), especially since your data may be processed by the US authorities for monitoring purposes without any effective legal protection being available against such measures.
More information on how Google Analytics handles user data is available in Google’s data privacy statement: https://support.google.com/analytics/answer/6004245?hl=en
10.2. Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is the consent of the person concerned in accordance with Art. 6 Para. 1 Item f GDPR.
10.3. Purpose of the data processing
The processing of the personal data of the users enables us to analyse our users’ browsing habits. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness.
10.4. Duration of the storage
The data is deleted as soon as it is no longer required for our record-keeping purposes. The evaluations are performed using aggregated, and thus no longer personal, data.
10.5. Option to object or request elimination
Cookies are stored on the user’s computer and transmitted to us from there. Hence you as the user have complete control over the use of cookies. By changing the settings in your internet browser, you can deactivate or limit the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be carried out automatically. If cookies are deactivated for our website, it is possible that you may no longer be able to use all the functions of the website to their full extent.
11. Remarketing (Marketing Cookies)
This website uses Google’s remarketing function. The function serves to present advertisements of interest to the website visitors within the Google advertising network. This technology enables us to display automatically created, target group-oriented advertisements after your visit to our website. The displays are based on the products and services that you clicked on during your last visit to our website. To this end, a so-called “cookie” is stored in the browser of the website visitor, which makes it possible to recognise the visitor when he calls up websites that belong to the Google advertising network. Cookies are small text files that are stored in your browser when you visit our website. Normally, Google stores information such as your web request, the IP address, the browser type, the browser language, the date and the time of your request. This information serves to associate the web browser with a specific computer. On the web pages of the Google advertising network, advertisements can subsequently be presented to the visitor that are related to contents that the visitor previously called up on websites that use Google’s remarketing function.
You as the user have the option to deactivate the use of cookies by Google; you can do so by calling up the page to deactivate Google at http://www.google.com/ads/preferences . You can view more detailed information on Google remarketing as well as Google’s data privacy statement at: www.google.com/privacy/ads/.
By consenting to the use of marketing cookies, at the same time you agree pursuant to Art. 49 Para. 1 Item a GDPR that your data may be processed in the USA. The ECJ does not confirm an appropriate data protection level for the USA that matches the EU standards (ECJ, C-311/18, Schrems II), especially since your data may be processed by the US authorities for monitoring purposes without any effective legal protection being available against such measures.
We use "Facebook pixels" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or for residents of the European Union, the European Economic Area and Switzerland, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook"). When you visit our website, a direct connection between your browser and the Facebook server is established via the Facebook Pixel. As a result, Facebook receives the information that you have visited our site with your IP address. This enables Facebook to assign your visit to our website to your user account. We can use the information obtained in this way to display Facebook ads or for tracking functions. The data collected are anonymous for us as the operator.
You can find more information on this in Facebook's data protection declaration at https://www.facebook.com/about/privacy/. If you do not wish to collect data via Custom Audience, you can deactivate it here https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must first log into Facebook. If you do not have a Facebook account, you can suppress usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
On the website we use technologies from Bing Ads (bingads.microsoft.com), which are provided and operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). Microsoft places a cookie on your device if you have reached our website via a Microsoft Bing ad. In this way, Microsoft and we can recognize that someone has clicked on an ad, has been redirected to our website and has reached a previously determined target page ("conversion site"). We only find out the total number of users who clicked on a Bing ad and were then redirected to the conversion site. Microsoft collects, processes and uses information via the cookie, from which usage profiles are created using pseudonyms. These usage profiles are used to analyze visitor behavior and are used to display advertisements. No personal information about the identity of the user is processed. If you do not want information about your behavior from Microsoft to be used as explained above, you can refuse the setting of a cookie required for this - for example via a browser setting that generally deactivates the automatic setting of cookies.
You can also prevent the collection of the data generated by the cookie and related to your use of the website and the processing of this data by Microsoft by clicking on the following link https://choice.microsoft.com/de-DE/opt-out explain out your contradiction. Further information on data protection and the cookies used by Microsoft and Bing Ads can be found on the Microsoft website https://privacy.microsoft.com/de-de/privacystatement.
If you do not change any settings or delete anything in your internet browser, the marketing cookies will remain valid for one month, with the exception of the following cookies, which remain valid for three months:
_gcl_au
_fbp
12. Analysis by Jentis GmbH
For the purpose of analysing the user behaviour of customers and for the purpose of website optimisation, we use services of JENTIS GmbH (Schönbrunner Strasse231, 1120 Vienna). This service provider therefore receives access to web analysis data, which are measured, stored and made available by the utilised analysis tools and JENTIS®.
On the one hand, data is transmitted to JENTIS GmbH for analysis purposes, on the other hand JENTIS® on our behalf independently collects data relating to the browser environment or the behaviour of the visitor. JENTIS GmbH only processes data that JENTIS GmbH cannot trace back to a person. IDs set by JENTIS® are merely random products and are used for anonymous recognition. Your IP address will be shortened before storage so that no personal reference is required.
13. LinkedIn Insight Conversion Tool
We use the LinkedIn Insight Conversion Tool of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, which allows us to obtain information about the use of our website and to provide you with advertising content on other websites that is tailored to your interests. For this purpose, a cookie with a validity of 120 days is set in your browser, which enables LinkedIn to recognize you when you visit a website. LinkedIn uses this data to create anonymous reports on ad activity and information about how you interact with our website.
You can disable the LinkedIn Insight Conversion Tool and interest-based advertising by opting out at the following link: https://www.linkedin.com/mypreferences/d/categories/ads.
By consenting to the use of marketing cookies, at the same time you agree pursuant to Art. 49 Para. 1 Item a GDPR that your data may be processed in the USA. The ECJ does not confirm an appropriate data protection level for the USA that matches the EU standards (ECJ, C-311/18, Schrems II), especially since your data may be processed by the US authorities for monitoring purposes without any effective legal protection being available against such measures.
Find more information on data protection at LinkedIn here: https://www.linkedin.com/legal/privacy-policy#choices-oblig.
14. Rights of the data subjects
If you wish to exercise any of your rights mentioned below (lit a to g), please contact us via dataprotection[at]europeanscienceclub.com and we will process your request.
a) Right of access (Art. 15 GDPR)
You have the right to receive information about the personal data saved about your person at any time and to receive a copy of this information.
b) Right to rectification (Art. 16 GDPR)
You have the right to demand the rectification and/or completion of incorrect and/or incomplete personal data about you.
c) Right to erasure (Art. 17 GDPR)
You have the right to trigger the deletion of your personal data held by us. The data will be deleted immediately, if you request this.
However, in certain cases, your data cannot be erased:
if these data are still needed for an active contract;
if this is contrary to statutory retention periods or the erasure is opposed by contrary interests. In this case, however, processing of the data for other purposes may be blocked.
d) Right to restriction of processing (Art. 18 GDPR)
You have the right to demand a restriction of processing if one of the following prerequisites applies:
You dispute the correctness of the personal data, for a duration which enables us to review the correctness of the personal data.
The processing is unlawful, you reject the erasure of the personal data and instead demand a restriction of the use of the personal data.
We no longer need the personal data for the purpose of processing, but you need this to assert, exercise or defend against legal claims.
You have raised an objection against the processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whether our legitimate grounds override yours.
e) Right to object (Art. 21 GDPR)
You have the right to object at any time to the processing of the personal data relating to you in accordance with Art. 6 para. 1 lit. e or f GDPR.
In case of an objection, we no longer process the personal data, except where we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.
You have the right to object at any time to processing of personal data for the purpose of direct advertising.
f) Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and transfer them to a third party.
You also have the right to transmit those data to another controller without hindrance from us where the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising your right to data portability pursuant to Art. 20 para. 1 GDPR, you shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible, and this does not adversely affect the rights and freedoms of others.
g) Right to withdraw consent under data protection law (Art. 7 para. 3 GDPR)
You have the right to withdraw the consent granted by you for the processing of your personal data at any time with effect for the future.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
You also have the right to lodge a complaint with the competent supervisory authority at any time.