DOG 2024 (English)

Privacy Policy

Data Protection Information

This document contains information about which item of personal data we process, its purpose, the basis on which we process it and for how long.

Overview / Contents

You will find the following information in our Data Protection Information

A.
Our contact data and general matters relating to our data processing

  • The name and contact data of the controller
  • Contact data of the controller’s Data Protection Officer
  • The legal basis for the processing of personal data.
  • Data deletion and duration of archiving
  • Our sources of personal data
  • Concrete categories, purposes and legal basis for processing personal data
  • Recipients and categories of recipients of the personal data

B.
The scope of the processing of personal data via our web-site

  • Provision of the web-site and creation of log files
  • Data processing related to the distribution of the Newsletter
  • Email contact
  • Contact forms and registrations
  • Use of cookies
  • Use of the analysis tool “Google Analytics”
  • Use of Google reCAPTCHA
  • Encryption of the web-site
  • Transmission of personal data to a third country (countries outside Germany but in the EU)

C.
Your rights as the data subject

  • The right to be informed
  • The right to rectification
  • The right to erasure
  • The right to object to processing because of a legitimate interest
  • The right to revoke consent
  • The right to restrict processing
  • The right to information
  • The right to data portability
  • The right to object to processing because of a legitimate interest
  • The right to revoke consent
  • Automatic decision-making including profiling
  • Voluntary provision of data
  • The right to complain to a supervisory authority

Name and contact data of the controller

Within the meaning of data protection legislation the controller for the collection and use of personal data for the area of scientific congresses (with the exception of the contents of industry exhibitions and the related programmes of the congresses for which a charge is made, see below for more information) is:

DOG Deutsche Ophthalmologische Gesellschaft e.V.

DOG Office:
Platenstrasse 1
80336 Munich
Phone: + 49 89 – 5505 7680
Fax: + 49 89 – 5505 76811

General Manager:
Dr. Philip Gass

Statutory registered office of the DOG in Heidelberg

Deutsche Ophthalmologische Gesellschaft e.V.
Klingenteich Strasse 2
D-69117 Heidelberg
Email: geschaeftsfuehrer@dog.org
Web-site: www.dog.org

Registration court: Mannheim District Court
Association registration number VR 33105
Value Added Tax registration number: DE143294894

Data Protection Officer of the DOG

Timo Schutt, MeinDatenschutzPartner.de GbR,
E-Mail: dsb@meindatenschutzpartner.de

Information Pursuant to Art. 13 and Art. 21 Basic Data Protection Ordinance (DSGVO) on Events can be found here.

The controller within the meaning of data protection legislation for the collection and use of personal data for the industry exhibition and the congresses and the related programmes of the congresses for which a charge is made is

INTERPLAN, Congress, Meeting & Event Management AG
Management Board: Mr Bruno Lichtinger, Dr. Markus Preußner, Mr Dan Rivlin
Hamburg Office
Kaiser-Wilhelm-Strasse 93, 20355 Hamburg
Phone: +49 40 32509259
Fax: +49 40 32509244
Email: info@interplan.de
Web-site: www.interplan.de
Registration court: Munich District Court
Registration number: HRB 134 892
Value Added Tax registration number: DE213274875

Contact data of the controller’s Data Protection Officer

The following person has been appointed to be the Data Protection Officer for INTERPLAN, Congress, Meeting & Event Management AG:

Mr. Jochen Karlstetter
INTERPLAN, Congress, Meeting & Event Management AG
Landsberger Straße 155
80687 München
Tel.: + 49 89 54 82 34 796
E-Mail: j.karlstetter@interplan.de

A.
General matters relating to our processing of personal data

The legal basis for the processing of personal data.

The following applies as a matter of principle to our processing of personal data:

  • In so far as we obtain the consent of the data subject for processing procedures of personal data, Article 6, Paragraph 1, Letter a) of the EU General Data Processing Regulation (GDPR) acts as the legal basis for the processing of personal data.
  • In the case of the processing of personal data which is needed for the performance of a contract to which the data subject is a party, Article 6, Paragraph 1, Letter b) of the GDPR acts as the legal basis. This also applies to processing procedures which are necessary for the performance of pre-contractual measures.
  • In so far as the processing of personal data is necessary for the performance of a legal obligation to which our Association is bound, Article 6, Paragraph 1, Letter c) of the GDPR acts as the legal basis.
  • In the event that the vital interests of the data subject or another natural person render the processing of personal data necessary, Article 6, Paragraph 1, Letter d) of the GDPR acts as the legal basis.
  • If the processing is necessary for the protection of a legitimate interest of our Association and the interests, fundamental rights and freedoms of the data subject do not override the legitimate interest of our Association, Article 6, Paragraph 1, Letter f) of the GDPR acts as the legal basis. 

Note on a particular right to object

In so far as we process personal data on the basis of Article 6, Paragraph 1, Letter f) of the GDPR for reason of a legitimate interest, we expressly draw your attention to the fact that you can, for reasons arising from your particular situation, object at any time to our processing of the personal data relating to you. We will cease processing your data if we can demonstrate no compelling reasons worthy of protection for the further processing which override your interests, rights and freedoms or if we are processing your data for the purposes of direct advertising (cf. Article 21 of the GDPR).

A technical process which you use, for example an unambiguous statement sent by technical means by your browser (a “do not track” message) is also deemed to be an objection in this sense.

Data deletion and duration of archiving

The personal data is deleted or blocked as soon as the purpose of the archiving no longer applies. Data can also be archived if this was stipulated by the European or national legislative body in EU regulations, laws or other provisions to which we, as the controller, are subject. Data is also blocked or deleted if a retention period required by the above-mentioned regulations etc. expires unless it is necessary that the data continues to be archived for the conclusion or performance of a contract

In specific terms this means:

If we are processing the personal data on the basis of consent for data processing (Article 6, Paragraph 1, Letter a) of the General Data Protection Regulation (GDPR), the processing is ended when you revoke your consent unless a further legal basis for processing the data exists. This is the case if, at the time of the revocation, we are still entitled to process your data for the purpose of the performance of a contract, or if the data processing is necessary to protect our legitimate interests (on this point see also below).

If, by way of exception, we are processing the data by reason of our legitimate interests (Article 6, Paragraph 1, Letter f) of the GDPR as part of a previous assessment, we will save this data until the legitimate interest no longer exists, the assessment comes to a different conclusion, or you have lodged a valid objection pursuant to Article 21 of the GDPR (on this point see the highlighted “Note on a particular right to object”).

If we are processing the data for the purpose of the administration of a contract we will save the data until the contract has been finally performed and brought to a conclusion and no further claims can asserted under the contract, in other words until the matter becomes time-barred. The general period of prescription according to § 195 of the German Civil Code is three (3) years. However, certain claims, for example claims for compensation, only become time barred after 30 years. If there is a legitimate reason for assuming that this is relevant in a particular case, we will save the personal data during this period of time. The above-mentioned periods of prescription commence at the end of the year (therefore on December 31) in which the claim arose and the obligee becomes aware or should have become aware of the circumstances giving rise to the claim and the person of the liable party becomes or should have become aware of the foregoing without gross negligence. 

We wish to point out that we are also subject to statutory retention obligations for reasons associated with taxation and book-keeping. These oblige us to archive certain data as evidence for our book-keeping which can include personal data for a period which can range from six (6) to ten (10) years. These retention periods take precedence over the above-mentioned deletion obligations. The retention periods also commence at the end of the year in question, and therefore December 31.

Sources of personal data

The personal data we process originates primarily from the data subject himself or herself, for example by these persons

  • as users of our web-site via their browser and terminal (e.g. a PC, smartphone, tablet or notebook) transmitting information such as their IP address to our web-server,
  • as participants visiting one of our congresses and events and registering for these in advance,
  • as interested parties requesting information material
  • as members of our Association informing us about their contact data or other items,
  • as representatives of the press asking for press releases, a statement or similar,
  • as suppliers delivering goods to us which we have ordered or performing services or similar for us,

As a rare exception, the personal data we process may also come from third parties, for example if a person is acting on behalf of another person.

Concrete categories, purposes and legal basis for processing personal data

We process the following categories of personal data: 

  • users of our web-site,
  • participants,
  • interested parties,
  • representatives of the press
  • members, and
  • suppliers.

Depending of the category of the data involved we process personal data for the following purposes on the legal basis specified in the General Data Protection Regulation (GDPR)

User data: We do not collect and process data about users of our web-site in personal form. We cannot attribute this data to a particular persons The IP address is only processed in an anonymised form. On the other hand in so far as personal data is involved in exceptional cases, we process this data for the protection of our legitimate interests on the basis of Article 6, Paragraph 1, Letter f) of the GDPR. Our legitimate interests in this sense are our interest in the security and integrity of our web-site and the data on our web-servers (particularly the detection of disturbances and malfunctions as well as the tracking of unauthorised access) plus marketing interests and interests in statistical surveys for the improvement of our web-site, our services and what we have to offer). After giving the matter our due consideration we came to the conclusion that the processing of data to protect the above legitimate interests is necessary and overrides your fundamental rights and freedoms requiring the protection of personal data.

Participants’ data: We process the data of the participants of our congresses and events for the purpose of the performance of a contract as set out in Article 6, paragraph 1, Letter b) of the GDPR and/or on the basis of consent which is granted pursuant to Article 6, Paragraph 1, Letter a) of the GDPR.

Data of interested parties/data of representatives of the press: In so far as we process the data of parties interested in our services or of the representatives of the press, this is only done if they enter this data in an input field and send it to us or enter this data in an email for the purpose of a query which is then sent to us. These entries are voluntary. We then only process this data in order to deal with their enquiry. This data which is voluntarily sent to us for the purpose of the supply of information about our services is processed as pre-contractual processing in accordance with Article 6, Paragraph 1, Letter b) of the GDPR and/or on the basis of the consent you grant by sending the consent you give in accordance with Article 6, Paragraph 1, Letter a) of the GDPR.

Members’ data: We process our members’ data for the purposes of the management of the Association, support for members and the fulfilment of objectives as set out in the statutes of our Association in accordance with Article 6, Paragraph 1, Letter b) of the GDPR (this also applies to processing procedures which are necessary before the member is admitted to the Association, for example as part of an enquiry about new membership or processing an application for membership) and/or on the basis of a legitimate interest of the Association pursuant to Article 6, Paragraph 1, Letter f) of the GDPR if the Association has a legitimate interest in a particular item of data processing which overrides the fundamental rights and freedoms of the member.

Suppliers’ and business partners’ data: We process the data of the our suppliers and business partners for the purpose of the performance of a contract as set out in Article 6, Paragraph 1, Letter b) of the GDPR and/or on the basis of consent which is granted pursuant to Article 6, Paragraph 1, Letter a) of the GDPR. This also applies to processing procedures which are necessary for pre-contractual activities (for example as part of the preparation and negotiation of offers).

Recipients and categories of recipients of the personal data

Your personal data is only passed to third parties or others if this is necessary for the purpose of the performance of a contract (the administration of and support for your membership, or for the execution of an order) or for invoicing purposes (for example for executing a payment process during the purchase of goods or services) and if there is a legitimate interest in the transmission of the data which overrides your fundamental rights and freedoms, or you have previously and validly granted your consent.

The categories of recipients can be:

  • service-providers (publishing houses, print works, congress organisers and similar)
  • delivery service-providers, suppliers
  • payment service-providers, banks

B.
The scope of the processing of personal data via our web-site

As a matter of principle we only collect and use the personal data of users during the use of our web-site in so far as this is necessary for the provision of a functioning web-site, its content and our services. Normally the personal data of our users is collected and used only after the user has granted his/her consent. The exception is such cases in which it is not factually possible to obtain consent in advance and/or the processing is permitted by the provisions of law.

Provision of the web-site and creation of log files

Every time the web-site is accessed our system automatically collects data and information for technical reasons. This is saved in the server’s log files. This information is:

  • the data and time of access,
  • the URL of the web-site from which access was made (the referrer),
  • the web-sites which were accessed by the user’s system via our web-site,
  • the user’s screen resolution,
  • the file(s) accessed and a report of the success of the access,
  • the amount of data sent,
  • the user’s Internet service-provider,
  • the browser, browser type and version, the browser engine and engine version,
  • the operating system, operating system version and type, and
  • the user’s anonymised IP address and Internet service-provider.

This data is processed separately from other data. This data is not processed in combination with the user’s other personal data. We cannot attribute this data to a particular person.

The purposes of data processing: The temporary processing of the data by the system is necessary so that it is possible to send the contents of our web-site to the user’s computer. The user’s IP address must be saved for the duration of the session to achieve this.

Data is saved in log files to ensure the functionality of the web-site. The data also enables us to optimise our offering and the web-site, and to protect the security of our computer system. The data is not evaluated for marketing purposes in this connection.

The legal basis for the data processing: The data and the log files are temporarily saved on the legal basis of Article 6, Paragraph 1, Letter f) of the GDPR Our overriding legitimate interest in this data processing is to be found in the purposes stated above.

Duration of the archiving The data is deleted as soon as it is no longer needed to achieve the purpose for which it was collected. In the case of data capture for the provision of the web-site, the data is deleted when the session is terminated. The data saved in the log files is deleted after no more than seven days. It is not possible to save the data for longer. In this case the users’ IP addresses are deleted or distorted so that it is no longer possible to attribute them to the client accessing the web-site.

The right to object and the right to erasure: The capture of data is essential for the provision of the web-site, and the saving of data in log files is necessary for the operation of the web-site. As a consequence the user has no right to object to this practice. However, the user may terminate the use of the web-site at any time and therefore prevent the continued collection of the data specified above.

Data processing related to the distribution of the Newsletter

It is possible to subscribe to a free Newsletter in our web-site or while making an enquiry. When subscribing for the Newsletter the data in the input mask is sent to us. This information is:

  • your email address

When subscribing to the Newsletter the following data is also collected:

  • your IP address, and
  • the data and time of the subscription.

The purpose of this is to prevent the misuse of the services or the email address of the person concerned.

Subscribing to our Newsletter uses what is called a “double opt-in process”. This means that after subscribing you receive an email which asks you to confirm your subscription. This confirmation is necessary so that no-one can subscribe using another person’s email address.

In order to process the data your consent is obtained as part of the registration process and your attention drawn to this data security statement.

Use of the delivery service-provider “The Newsletter Plugin”

The Newsletter is delivered by “The Newsletter Plugin,” a plugin for WordPress, our management system which we use to process the content of the web-site. The plugin only saves subscribers’ data in our data-base on our web-server. No data is transferred to the plugin provider or third parties. Newsletter data is only on our web-server. 

Statistical analysis

Our Newsletters contain what are known as “web beacons” or “tracking pixels” which are 1×1 image files which are saved on our web-site. This enables us to identify whether a Newsletter item has been opened and the links which were clicked on. Technical information is also collected (e.g. the time of access, the IP address, the browser type and operating system). The data is only collected in pseudonymised form and is not linked to other data; direct allocation to persons is impossible. This data is only used for the statistical analysis of Newsletter campaigns. The findings of these analyses can be used to adapt future Newsletter more closely to recipients’ interests.

The data is not passed to third parties. The exception is if there is a legal obligation to disclose the data. The data is only used for the distribution of the Newsletter.

The purposes of data processing: The purpose of collecting and processing the user’s email address is to send the Newsletter. We use the email address for promotional purposes.

The purpose of collecting further personal data as part of the subscription process is to prevent the misuse of the services or the email address used.

The statistical analysis in undertaken so that we can improve the alignment of the Newsletter to recipients’ interests and make the information and offerings more relevant and interesting.

The legal basis for the data processing: The legal basis for processing the data after the user subscribes to the Newsletter and grants his consent is Article 6, Paragraph 1, Letter a) of the GDPR.

The other personal data collected during the subscription process is processed by reason of the legitimate interests pursuant to Article 6, Paragraph 1, Letter f) of the GDPR. In this case our legitimate interest is the prevention of the misuse of our services, webserver or mailserver or email address, or to improve our offerings by analysing the statistical information and to make the offerings more interesting for the user.

Duration of the archiving: The data is deleted as soon as it is no longer needed to achieve the purpose for which it was collected. Thus the user’s email address is saved all the while the subscription to the Newsletter is active.

The other personal data collected during the subscription process and the data gained from the statistical analysis (in respect of a potential reference to a person) is normally deleted at the end of seven days.

The right to object and the right to erasure: The user can unsubscribe from the Newsletter in any form, at any time and free of charge. There is a link for this purpose in every Newsletter.

This makes it possible to revoke the consent given to saving the personal data collected during the subscription process.

If you wish to object to the analysis of data for statistical purposes, you must unsubscribe from the Newsletter.

Email contact

The contact data of the controller and, if appropriate his staff, is stated in the web-site. If you want to take advantage of this facility and send us an email, we save the personal data sent with the email. In this case the data is not passed to third parties. Please do never send unencrypted emails containing sensitive data.

The purposes of data processing: The only purpose of processing the personal data in the email is to be able to contact you and deal with your suggestion. Contacting you also constitutes the legitimate interest in processing the data.

The legal basis for data processing: With the grant of consent which can be seen in the fact you contacted us, the legal basis for processing the data is Article 6, Paragraph 1, Letter a) of the GDPR and also our legitimate interest in the data processing as set out in Article 6, Paragraph 1, Letter f) of the GDPR

If the purpose of the contact or your request is the conclusion of a contract, the additional legal basis for the processing is Article 6, Paragraph 1, Letter b) of the GDPR (execution of pre-contractual measures).

Duration of the archiving: The data is deleted as soon as it is no longer needed to achieve the purpose for which it was collected.

As regards the personal data sent by email, this is the case if the conversation in question with you is at an end and the waiting period of a maximum of 4 weeks has been observed. The conversation is at an end if it can be gathered from the circumstances that the matter in question has been definitely settled. 

The right to object and the right to erasure: You may at any time revoke consent given for the processing of the personal data and revoke further data processing because of a legitimate interest (cf. advice on a particular right to object below in Section C). In such a case the conversation cannot be continued. 

You can revoke the consent and object to further data processing without any need for a specific form (e.g. you can use email).

In this case all personal data which was saved in the course of the contact with you is deleted.

Contact forms and registrations

If you want to register for one of our congresses you can access the registration page http://dog2018.dog-kongress.de/teilnahme/registrierung/ by clicking on the registration mask which is suitable for you. This registration mask can then be found on the web-site of INTERPLAN, Congress, Meeting & Event Management AG and is no longer on www.dog-kongress.de. If you wish for information on the data collection and processing undertaken via this registration mask, please click on the link (Datenschutz/Data Protection) before completing the registration mask where you can learn more about data processing related on the on-line registration.

Use of cookies

When accessing individual web pages of this third party service-provider so-called cookies are used for analysis purposes. Cookies are small text files which are installed on the terminal (PC, smartphone or tablet etc.). If a user accesses a web page a cookie may be saved in the user’s operating system. This cookie includes a characteristic sequence of characters which enable the browser to be unmistakeably identified if the page is accessed again. We inform you once again about this in this Data Protection Information where it deals separately with third party providers (e.g. analysis tools, plug-ins etc.)

When you access our web-site you are informed about the use of cookies for analytical purposes and your consent is obtained for the processing of the personal data used in this connection. A reference is also made to this Data Protection Statement in this connection.

The purposes of data processing: Analytical cookies are used so we can use the facilities of the Google service reCaptcha and Google Analytics.

The first one of these assists us in preventing the transmission of automated enquiries (spam) and attacks on our web-site. Their use therefore serves the purpose of guaranteeing the functionality and security of the web-site.

Google Analytics helps us to improve our understanding of user behaviour and to gain feedback from this about our web-site and services.

The legal basis for the data processing: The legal basis for the processing of personal data by means of cookies is Article 6, Paragraph 1, Letter f) of the GDPR, and is therefore a legitimate interest on our part. Our legitimate interest is to be found in the purposes stated above.

Duration of the archiving: Some of the cookies we use are deleted again at the end of the browser session, in other words when you close your browser (these are called “session cookies”). Other cookies remain on your terminal and enable us to recognise your browser on your next visit (“permanent cookies”).

The right to object and right of erasure Cookies are saved on your computer and transmitted from there to our site. You therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies which have already been saved can be deleted at any time. This can also be done automatically. We understand a “Do not track” setting of your browser of this nature to be an objection to the further collection and use of your personal data. Note: If cookies for our web-site are deactivated, it is possible that all functions of the web-site can no longer be used to their full extent.

Use of the analysis tool “Google Analytics”

This web-site uses Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses what are called “cookies”; these are text files which are saved on your computer and which make it possible to analyse your use of the web-site.

We wish to point out that in this web-site the code “anonymizeIp“ was added to Google Analytics in order to ensure that IP addresses are anonymised when captured (this is called “IP masking”). By activating the anonymisation on this web-site your IP address will first be abbreviated by Google within the member states of the European Union or in other signatory states of the Agreement on the European Economic Area. The complete IP address will only be transferred to a Google server in the USA in exceptional cases. Google will use this information on behalf of the operator of this web-site to evaluate your use of the web-site, to compile reports about web-site activities and to perform further services relating to website and Internet usage for the web-site operator. The IP address gathered from your browser by Google Analytics will not be combined with other data by Google.

You will find more details on terms and conditions of use and data protection at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/.

The purposes of data processing: Analysis tools and analysis cookies are used for the purpose of improving the quality of our web-site and its contents. In this way we learn how the web-site is used and can therefore continuously optimise our offering. The information about your use of this web-site generated by the cookies is normally forwarded to a Google server in the USA and where it is saved.

The legal basis for the data processing: The legal basis for the processing of personal data by means of cookies is Article 6, Paragraph 1, Letter f) of the GDPR, and is therefore a legitimate interest on our part. Our legitimate interest is to be found in the purposes stated above. Google Inc. has joined the “EU-US-Privacy Shield“ so that data transmission to the USA is permitted.

Duration of the archiving: The cookies are saved on the user’s computer from where they are transmitted to our site. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies which have already been saved can be deleted at any time. This can also be done automatically. If cookies for our web-site are deactivated, it is possible that all functions of the web-site can no longer be used to their full extent.

In all other respects we save the data collected on the basis of a legitimate interest until the legitimate interest no longer exists, the assessment comes to a different conclusion, or you have lodged a valid objection pursuant to Article 21 of the GDPR (on this point see the highlighted “Note on a particular right to object” in Section C). Whether or not the legitimate interest still exists is checked regularly, at least once per year. In particular, our interest no longer exists if, due to the lapse of time, the data is no longer sufficiently relevant for us with regard to the evaluation and statistics of the use of the web-site; we assume this to be no longer than three years

The right to object and the right to erasure: You can prevent the installation of cookies by making a corresponding setting in your browser software. If you do this we must point out that in this case you will not be able to use all functions of this web-site to their full extent. You can also prevent the capture of the data created by the cookie relating to your use of the web-site (including your IP address) by Google and the data being processed by Google by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

You can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie is placed which prevents the future collection of your data when visiting this web-site.

Deactivate Google Analytics</>

Use of Google reCAPTCHA

For protection during the transmission of forms (e.g. contact forms, registration for the internal members’ area) we use the services of reCAPTCHA of Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA in selected cases.

This service includes sending your IP address and, if appropriate, additional information needed by Google for the reCAPTCHA service. The data protection provisions of Google, which are different from our own, apply to this data.

By the use of Google reCAPTCHA information about your use of this web-site (including your IP address) can be sent to a Google server in the USA and saved there. Google may pass the information obtained by reCAPTCHA to third parties in so far as this is required by law or in so far as third parties process this data on behalf of Google. In no case will Google combine your IP address with other Google data. Nevertheless, it would be technically feasible that, based on the data it has received, Google could identify at least individual users. It would be possible that personal data and personality profiles of users of Google’s web-site could be processed for other purposes over which we neither have nor can have any influence. 

The purposes of data processing: Google reCAPTCHA is also used for the purpose of excluding what are called bots which are small malware programs which compromise the security and integrity of our web-site and web servers. We wish to ensure the functionality of the web-site. The data also serves to underpin the security of our IT systems.

The legal basis for the data processing: The legal basis for the processing of personal data by means of reCAPTCHA is Article 6, Paragraph 1, Letter f) of the GDPR, and is therefore a legitimate interest on our part. Our legitimate interest is to be found in the purposes stated above. Google Inc. has joined the “EU-US-Privacy Shield“ so that data transmission to the USA is permitted.

The right to object and the right to erasure: You have the possibility of not using the services of Google reCAPTCHA by not clicking on the service’s button. You can then contact us by other means, for example by email or phone.

You can also deactivate Java Script and thus prevent the transfer of data to Google. In order to prevent the execution of Java Script code totally, you can also install a Java Script-blocker, for example the browser plugin NoScript (e.g. www.noscript.net or www.ghostery.com).

Note: If Java Script is deactivated, you cannot use the reCAPTCHA service, you are also unable to use our contact and web forms which use reCAPTCHA.

You will find Google’s data protection policy at https://policies.google.com/privacy?hl=de 

Encryption of the web-site

All the protected areas and forms on the web-site and therefore the data transmissions using these forms are encrypted to the SSL standard.

Transmission of personal data to a third country (countries outside Germany but in the EU)

We intend to send personal data to the United States of America. There is an adequacy decision of the EU Commission which states that personal data may be sent to the USA if the recipient has joined the EU-US Privacy Shield. Therefore personal data is only sent to recipients in the USA which demonstrate that they have joined the EU-US Privacy Shield.

The specific intention relates to a transmission of data to the following company:

  • – Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google“) as provider of the analysis tool Google Analytics and the reCAPTCHA anti-spam service.

Google has joined the EU-US Privacy Shield and has submitted to a regulatory framework comparable to the EU data protection standard. The transmission of data is therefore unquestionably permitted. In addition, in the case of data processing appropriate data processing contracts were concluded with the company to protect the data and our rights to issue instructions.

C.
Rights of data subjects

If your personal data is processed you are a “data subject” and you are entitled to the following rights in respect of us as the controller.

The right to be informed

You have the right to receive a confirmation from us free of charge whether we are processing personal data relating to you. In this case you have the right to information about this personal data and other information which you can see in Article 14 of the GDPR. You can contact us for this purpose by post or email.

The right to rectification

You have the right to require that we immediately correct inaccurate personal data relating to you. You also have the right, for the purposes set out above, to require additions to incomplete personal data, including by means of a supplementary declaration. You can contact us for this purpose by post or email.

The right to erasure

You have the right to require the immediate deletion of personal data relating to you if one of the conditions of Article 17 of the GDPR is met. You can contact us for this purpose by post or email.

The right to restrict processing

You have the right to require the restriction of processing if one of the conditions of Article 18 of the GDPR is met. You can contact us for this purpose by post or email.

The right to information

If you have asserted the right to the correction, deletion or restriction of the processing to the controller, the latter is obliged to inform all recipients to which the personal data relating to you was disclosed about the correction or deletion of the data or about the restriction of the processing unless this proves to be impossible or is associated with disproportionate effort.

You have the right to be informed by the Controller about these recipients.

The right to data portability

You have the right to receive the personal data you sent to us relating to you in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller without hindrance from us if the conditions of Article 20 of the GDPR are met. You can contact us for this purpose by post or email.

The right to restrict processing because of our legitimate interest

In so far as we process personal data on the basis of Article 6, Paragraph 1, Letter f) of the GDPR (therefore for reason of a legitimate interest,) you have the right, for reasons arising from your particular situation, to object at any time to our processing of the personal data relating to you. We will cease processing your data if we can demonstrate no compelling reasons worthy of protection for the further processing which override your interests, rights and freedoms or if we are processing your data for the purposes of direct advertising (cf. Article 21 of the GDPR). You can contact us for this purpose by post or email. A technical process which you use, for example an unambiguous statement sent by technical means by your browser (a “do not track” message) is also deemed to be objections in within these meanings.

The right to revoke consent

You have the right at any time to revoke an agreement you have given for the collection and use of personal data with effect for the future. You can contact us for this purpose by post or email. The lawfulness of the processing undertaken by reason of the consent you gave up to the time of its revocation is not affected.

Automatic decision-making including profiling

You have the right not to be subject to a decision based exclusively on automated processing (including profiling) which has a legal effect on you or which is significantly to your detriment in a similar manner unless the decision is necessary for the conclusion of an agreement between you and us, is admissible by reasons of provisions of law of the European Union or member states to which we are subject and these provisions of law contain reasonable measures to protect your rights, freedoms and legitimate interests, or the decision is taken with your express consent.

We do not take automated decisions of this nature.

Voluntary provision of data

If the provision of the personal data is stipulated by law or a contract, we will always point this out when the data is collected. The data we collect is sometimes necessary for the conclusion of a contract, to be specific, if we are unable to meet our contractual obligation to you or cannot adequately meet them in any other way. You are under no obligation to provide personal data. However, the failure to provide such information can mean that we are unable to perform or offer the service, action, measure or similar you require, or that it is impossible to conclude a contract with you.

The right to complain to a supervisory authority

Notwithstanding other rights, if you are of the opinion that the processing of personal data relating to you infringes data protection law, you have the right at all times to complain to a supervisory authority for data protection, particularly in the member state where you reside, where you work or the place of the alleged infringement.