data protection

privacy statement

 

Welcome on our homepage www.porta-cosmetics.com, an offer of Porta-Kosmetik GmbH, represented by the managing director Mrs. Sabine Löchel, Sonnenbrink 46 - 48, 32584 Löhne (Germany)

Data protection is a very special concern for us. Please take note of the following information so that you know when we collect and use which personal data. Here you will also find information about your rights.

1. responsible person

Responsible for the data processing according to the data protection regulations isPorta-Kosmetik GmbH, represented by the Managing Director Ms. Sabine Löchel, Sonnenbrink 46 - 48, 32584 Löhne (Germany) Fax05732 6882266 E-Mail info@porta-kosmetik.deWeb www.porta-cosmetics.com

2. definitions of terms

 

Our data protection declaration is based on the relevant regulations of the European Data Protection Basic Regulation (DS-GVO). In order to make the data protection declaration comprehensible to everyone, we would like to explain the essential terms of the DS-GVO in advance (not exhaustively):

Personal data is all information relating to an identified or identifiable natural person ("data subject"), whereby a natural person is considered identifiable if it can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features which express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person, Art. 4 No. 1 DS-GVO;

Processing means any operation or set of operations carried out with or without the aid of automated processes relating to personal data, such as collection, recording, organisation, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or association, limitation, erasure or destruction, such as collection, recording, alteration, alteration, use, disclosure by transmission, dissemination or otherwise making available, Art. 4 No. 2 DS-GVO;

Limitation of processing is the marking of stored personal data with the aim of limiting their future processing, Art. 4 No. 3 DS-GVO;

Profiling is any automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, behaviour, whereabouts or movement of that natural person, Art. 4 No. 4 DS Block Exemption Regulation;

Pseudonymisation means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the involvement of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person, Art. 4 No. 5 DS-GVO;

The controller shall be the natural or legal person, public authority, agency or other body which alone or jointly with others decides on the purposes and means of the processing of personal data; where the purposes and means of such processing are laid down by Union law or the law of the Member States, the controller or the specific criteria of his designation may be laid down in accordance with Union law or the law of the Member States, Art. 4 No. 7 DS Block Exemption Regulation;

Processor is a natural or legal person, public authority, agency or other body processing personal data on behalf of the controller, Art. 4 No. 8 DS-GVO;

Recipient is a natural or legal person, authority, body or other entity to whom personal data are disclosed, whether or not it is a third party. However, authorities which may receive personal data in the course of a specific investigation task under Union law or the law of the Member States shall not be considered as recipients; the processing of such data by the said authorities shall be carried out in accordance with the applicable data protection rules and in accordance with the purposes of the processing, Art. 4 No. 9 DS-GVO;

A third party is a natural or legal person, authority, body or other entity, other than the data subject, the controller, the processor and the persons who, under the direct responsibility of the controller or processor, are authorised to process the personal data, Art. 4 No. 10 DS-GVO;

The data subject's consent is any voluntary, informed and unequivocal statement of intention in the form of a statement or any other unequivocal confirmatory act by which the data subject indicates his or her consent to the processing of personal data relating to him or her, in the specified case, Art. 4 No. 11 DS-GVO;

Infringement of the protection of personal data is a breach of security leading to the destruction, loss or alteration, whether unintentional or unlawful, or to the unauthorised disclosure of or access to personal data transmitted, stored or otherwise processed, Art. 4 No. 12 DS-GVO;

Health data are personal data that relate to the physical or mental health of a natural person, including the provision of health services, and from which information about their state of health can be derived, Art. 4 No. 15 DS-GVO;

3. data processing

We always process personal data in compliance with the relevant data protection regulations (DS-GVO, BDSG, Landesdatenschutzgesetz etc.). In principle, you can visit our homepage without having to provide any personal information. However, if and to the extent that a person concerned wishes to claim certain offers via our homepage, it may be necessary to process personal data.

Personal data will only be processed if a legal legitimation exists for the data processing and/or if the person concerned has consented to the data processing.

 

As the person responsible for processing personal data, we have taken a number of technical and organisational measures to ensure comprehensive protection for the personal data processed via our website. Nevertheless, we cannot rule out the possibility that security gaps may exist in the transmission of personal data via the Internet, so that we cannot guarantee absolute protection. Each person concerned is therefore free to transmit their personal data to us in other ways (telephone, mail, fax, etc.).

4. General data

Each time our homepage is visited by the person concerned or by an automated system, general data and information are collected and stored in the log file of the server. These may include, but are not limited to:

Browser type and version

used operating system

Website from which you visit us (Referrer URL)

Website you visit

Date and time of your access

Your Internet Protocol (IP) address

other data and information which serve to ward off dangers in the event of attacks on our IT systems

 

We cannot draw any conclusions about the data subject from this general data and information. The general data and information will be stored separately from any personal data you may provide and will not allow any conclusions to be drawn about a specific person. They are only evaluated for statistical purposes in order to be able to optimise our Internet presence and our offers, to present our content correctly, to ensure the permanent functioning of our IT systems and technology or to be able to transmit the information required for criminal prosecution to law enforcement authorities in the event of a system attack.

We hereby want to ensure that we receive statistical data through the evaluation and that we can also increase data protection and data security in order to ultimately achieve a high level of protection for the personal data processed by us.

Our Shop uses cookies. They do not damage your computer and do not contain viruses. Cookies are small files that are stored on your access device (computer, smartphone, tablet, etc.) and saved by your browser. They serve to increase the user-friendliness, effectiveness and security of the homepage. In addition, cookies can be used to collect statistical data on the use of the website and analyse it to improve our services. Cookies are possible as so-called "session cookies", which are automatically deleted at the end of your visit. Other cookies remain stored on your terminal until you delete them. These cookies enable your browser to be recognised the next time you visit. As the person concerned, you can adjust your browser settings so that you are informed when cookies are set and reserve the right to allow cookies only in individual cases. You can exclude the acceptance of cookies in certain cases or generally, prevent or restrict the storage of cookies and activate the automatic deletion of cookies when closing the browser. However, the functionality of our homepage may be restricted in this case.

6. contact possibility

For legal reasons, we provide information (e.g. e-mail, fax, telephone) on our homepage which enables you to contact us quickly and electronically and to communicate directly with us. If and to the extent that the person concerned contacts us in this way, the information you provide will be stored for the purpose of processing the contact. The data will not be passed on to third parties. A comparison of the data collected in this way with data that may be collected by other components of the homepage also does not take place.

 

7. Newsletter

We, as the data controllers, give users the opportunity to subscribe to our newsletter. The personal data to be provided by the person concerned for this purpose are derived from the input mask to be filled in for the newsletter dispatch. The newsletter serves the purpose of regularly informing our customers and business partners about us and our offers.

The receipt of our newsletter is only possible if the person concerned has registered with us with a valid e-mail address. For legal reasons, we send a confirmation e-mail to the e-mail address provided by the person concerned the first time. This confirmation e-mail contains a link which is used in the double opt-in procedure and is intended to ensure that the registration was actually carried out by the owner of the e-mail address. The owner of the specified e-mail address must therefore actively authorize receipt of the newsletter.

We, as the data controllers, store in connection with the registration the IP address of the person concerned, which was assigned at the time of registration, as well as the date and time of registration. This data is stored for the purpose of preventing misuse of our service. If necessary, the data can also be used for the purpose of uncovering criminal offences that have been committed. The data processing is necessary to protect us as the data controllers. The data processed in this way will not be passed on to third parties unless this is prescribed by law and/or the passing on serves criminal prosecution.

We, as the persons responsible for the processing, use the personal data given for the registration to the newsletter exclusively in order to send our newsletter. In addition, we may contact subscribers to our newsletter by e-mail if and to the extent necessary to ensure that the newsletter is sent, if and to the extent necessary to notify changes to the newsletter and/or if and to the extent necessary to notify changes to the technical specifications.

Affected parties can unsubscribe from our newsletter at any time and revoke their consent to the processing of personal data at any time. We delete the data after revocation, as far as no legal retention periods exist. In the latter case, we block the data of the person concerned. Each of our newsletters contains a corresponding link to the revocation. In addition, each person concerned can also contact us directly (e-mail, telephone, fax, post etc.) to inform us that he wants to unsubscribe from the newsletter.

8. external links

If and insofar as users of our homepage use external links which we make available on our homepage, our data protection declaration does not include these external links. We make every effort to ensure that the links provided by us also meet our data protection and security requirements. However, we have no influence on compliance with data protection and security regulations by the respective providers behind the external links. Users should therefore inform themselves on the websites of other providers about their data protection regulations.

9. Google Analytics with anonymization function

We, as the data controller, use Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics enables you to analyse the use of this website by using text files stored on your computer, so-called "cookies". The information generated in this way is usually transferred to a server operated by Google in the USA and stored there.

However, this homepage uses the IP mask method, which causes your IP address to be shortened by Google within member states of the EU or in other contracting states of the Agreement on the European Economic Area prior to transmission to the USA and thus made anonymous. A shortening of the IP only in the USA only occurs in exceptional cases. Google uses this information for the purpose of evaluating website usage on behalf of the website operator, compiling reports on website activity and providing other services to website operators in connection with website usage.

You can prevent the storage of cookies by setting your browser accordingly. In this case, however, you may no longer be able to use all the functions of this homepage to their full extent. You can also use the browser plug-in to prevent Google from collecting and processing the data collected by the cookie. In addition, you can prevent Google from collecting data relating to your use of the homepage and Google from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout/.

10. privacy policy for the use of YouTube

We, as the data controller, use the YouTube service component on our website. YouTube is an offer of YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. YouTube enables publishers to post videos free of charge on the Internet-based video portal. In addition, YouTube enables other users to view, rate and comment on videos free of charge. Since YouTube enables users to publish all types of videos, users can access complete film and television programmes, trailers, music videos or videos they have created themselves.

If users call up a single page of our homepage on which a component of YouTube has been embedded, the YouTube component automatically prompts the browser of the person concerned to download a display of the respective YouTube component from YouTube. Detailed information about YouTube can be viewed by users at https://www.youtube.com/yt/about/de/ .

Through this automated technical process, YouTube and Google gain knowledge of which individual subpage of our Internet presence is visited by the user/person concerned. If the user is also logged in to YouTube when visiting our homepage, YouTube will be able to see which specific subpage is being visited by accessing our subpage containing the YouTube component. YouTube and Google collect this information and assign it to the user's YouTube account accordingly.

YouTube as well as Google get via the YouTube component information that the user has visited our homepage, if the user is logged into YouTube at the same time. This occurs regardless of whether the user actually clicks on a video or not. If users want to prevent such a transmission to YouTube and Google, they must log out of their YouTube account before accessing our homepage. YouTube's privacy policy is available at https://www.google.de/intl/de/policies/privacy/ These provide information about the collection, processing and use of personal data by YouTube and Google.11. -- -

registration/orders

We, as the persons responsible for the processing, make it possible for affected persons to order goods for a fee via our online shop and by providing personal data. The personal data to be provided to us in this context is derived from the input mask on our homepage. We process the data entered by the person concerned for the purpose of initiating and executing the contract. In the course of the ordering process, data on the payment method selected by the person concerned is also processed. If a payment method of a payment service provider has been selected by the person concerned, it is forwarded directly to the selected payment service provider within the order and payment process. We neither take note of nor process in any other way the data provided by those concerned on the respective payment service provider's website. In this respect, the data protection declarations of the respective payment service provider apply exclusively.

If the person concerned has opted for the payment service provider paydirekt, payment will be made via paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main. In this context, the payment data of the person concerned (e.g. payment amount, payee etc.) as well as the confirmation of the correctness of the payment data will be processed by paydirekt GmbH for the execution of the paydirekt payment and transmitted to the respective bank of the person concerned. The payment is authenticated using the authentication procedure provided by the respective bank of the person concerned. Further information regarding the forwarding and processing of personal data can be found in the data protection declaration of paydirekt GmbH. This can be viewed at the following link: https://www.paydirekt.de/agb/index.html

If the person concerned has opted for the online payment service provider PayPal, payments are processed via corresponding PayPal accounts. If the user does not have a PayPal account, payments can also be made digitally using credit cards. In Europe, the responsible PayPal operating company is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. If the payment option "PayPal" is selected for the payment, the data of the person concerned is automatically transmitted to PayPal. By selecting this payment method, the data subject consents to the transfer of personal data necessary for the processing of the payment. The personal data transmitted to PayPal is generally first name, surname, address, email address, IP address, (mobile) phone number or other data required for payment processing. The purpose of data transmission is to process payment and prevent criminal offences. We will transmit personal data to PayPal in particular if a justified interest for the transmission is given. The personal data exchanged between us and PayPal will be transmitted by PayPal if necessary to credit agencies. The purpose of this transmission is to check identity and creditworthiness. PayPal may also transfer personal data to affiliated companies and service providers or subcontractors if and to the extent necessary to fulfill contractual obligations or to process the data on behalf. The person concerned may revoke his or her consent to PayPal handling personal data at any time. The revocation has no effect on personal data that must be processed for (contractual) payment processing. The valid data protection regulations of PayPal can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

 

We, as the persons responsible for the processing, make it possible for those concerned to create a customer account with us. For this purpose, we store the data until revoked for later purchases.

In order to prevent unauthorised access to personal data, in particular with regard to bank and payment data, the entire order process is encrypted using SSL technology. Access to the customer account is protected by the password chosen by the person concerned.

The processing of personal data within the framework of the order and registration process serves the purpose of identifying the customer, contract execution, making contact with any queries and general customer data management. We store personal data as long as it is necessary to fulfil the purpose or as long as there are legal storage obligations. We pass on the personal data provided within the framework of the ordering process to third parties if and to the extent absolutely necessary for the execution of the contract, such as to payment service providers, parcel delivery companies and suppliers. The data will not be passed on to third parties unless the parties concerned have given their effective consent, the data is required for the assertion of or defence against legal claims, there is a legal obligation to pass on, the data serves to fulfil contractual and pre-contractual obligations or is in our legitimate interest.

12. deletion and blocking

Personal data shall only be processed for the period of time necessary to achieve the storage purpose or as long as the relevant statutory provisions provide for this. After the storage purpose has ceased to apply or after a statutory storage period has expired, we delete or block the personal data in accordance with the statutory provisions.

13. rights concerned

The data subjects shall in particular have the following rights:

confirmation

Data subjects may ask us, as the data controller, to confirm whether we process personal data. To exercise this right, the data subject may contact one of our employees at any time.

Information

Each data subject may at any time and free of charge request from us, as the data controller, information as to whether and if so which personal data we have stored about him or her. A copy of this must be made to the data controller. In addition, the data subject may request information on (a) the purposes of the processing, (b) the categories of personal data processed, (c) the recipients or categories of recipients to whom personal data have been or will be disclosed, (d) the intended duration for which the personal data will be stored or, if that is not possible, the criteria for determining that duration, (e) the existence of a right of rectification or erasure or of the right of the controller to limit or object to the processing; (f) the existence of a right of appeal to a supervisory authority; and (g) the existence of automated decision-making, including profiling and meaningful information on the logic involved and the scope and intended impact of such processing on the data subject. Where personal data are not collected directly from the data subject, the data subject shall be provided with all available information on the origin of the data. In addition, the data subject has the right to know whether personal data have been transferred to a third country or to an international organisation. In the affirmative, the data subject shall be informed of the appropriate safeguards in connection with the transfer. To exercise this right, the data subject may contact one of our employees at any time.

Correction

any data subject may at any time ask us, as the controller, to rectify without delay any inaccurate personal data concerning him or her. In addition, the data subject is entitled to request the completion of incomplete personal data, taking into account the purposes of the processing. To exercise this right, the data subject may contact one of our employees at any time.

Deletion / right to be forgotten

Any data subject may request from us, as the data controller, that the personal data relating to him or her be deleted immediately if one of the following reasons applies and if processing is not necessary:

any data subject may at any time ask us, as the controller, to rectify without delay any inaccurate personal data concerning him or her. In addition, the data subject is entitled to request the completion of incomplete personal data, taking into account the purposes of the processing. To exercise this right, the data subject may contact one of our employees at any time.

Deletion / right to be forgotten

Any data subject may request from us, as the data controller, that the personal data relating to him or her be deleted immediately if one of the following reasons applies and if processing is not necessary:

The processing of personal data is no longer necessary for the original purpose for which it was collected or processed in any other way, the consent to data processing has been revoked by the data subject and there is no legal basis for legitimation of the data processing.

The data subject has objected to the data processing pursuant to Art. 21 para. 1 DS-GVO and there are no overriding legitimate reasons for the data processing.

The data subject has objected to the data processing pursuant to Art. 21 para. 2 DS-GVO

The processing of personal data is carried out unlawfully

The deletion is necessary for legal reasons.

The data collection was carried out in connection with services offered by the information society within the meaning of Art. 8 para. 1 DS-GVO.

If one of the aforementioned reasons exists and the person concerned requests the deletion of the personal data stored by us, he can contact one of our employees at any time who will arrange for the deletion.

When the personal data is published and we are obliged as the person responsible to delete personal data pursuant to Art. 17 (1) DS-GVO, we will take appropriate (technical) measures to inform other persons responsible for data processing who process the published personal data of the person concerned of the request for deletion of the person concerned, taking into account the available technology and the costs of implementation. This includes, in particular, notifying the other persons responsible for data processing that the data subject has requested them to delete all links to personal data or to copy or reproduce such personal data, insofar as such processing is not necessary. Our employees will take all necessary steps in individual cases.

Limited processing

Any data subject may request from us, as the data controller, that we restrict the processing of personal data if and to the extent one of the following conditions applies:

The data subject disputes the accuracy of the personal data for the period of time during which it is possible for us, as the data controller, to verify the accuracy.

Data processing is unlawful and the data subject requests limited processing of personal data instead of deletion.

We, as the data controller, no longer need the personal data of the data subject; the data subject, on the other hand, needs the personal data for the assertion, execution and/or defence of his legal claims.

The data subject has objected to the data processing pursuant to Art. 21 para. 1 DS-GVO and it is still unclear whether any overriding legitimate reasons exist with us as the data controller for the data processing.

If one of the aforementioned conditions is met and the data subject wishes to restrict the processing of personal data held by us, he or she can contact one of our employees at any time to arrange for the processing to be restricted.

Right to data transfer

Any data subject may request that we, as the controller, transfer to him/her the personal data concerning him/her in a structured, common/known and machine-readable format. The data subject may also request that the personal data relating to him or her be transferred to another data controller without our impeding this, provided that the data processing is based on consent within the meaning of Art. 6 Para. 1 lit. a DS-GVO, Art. 9 Para. 2 lit. a DS-GVO or on a contract pursuant to Art. 6 Para. 1 lit. b DS-GVO and is carried out with the aid of an automated procedure, provided that the data processing is not carried out for the purposes of Art. 6 Para. 1 lit. a DS-GVO or on a contract pursuant to Art. 6 Para. 1 lit. b DS-GVO and is carried out with the aid of an automated procedure, provided that the data processing is not necessary for the performance of a task in the public interest or that it is carried out in the exercise of official authority assigned to us as the responsible party.

Within the scope of exercising the right to data transferability, the person concerned is entitled to demand that his/her personal data be transferred directly from one responsible person to another responsible person, provided that this transfer is technically feasible and that no rights and freedoms of other persons are impaired as a result. To exercise this right, the person concerned can contact one of our employees at any time.

Right of objection

any data subject may object to the processing of his/her personal data by us, as the data controller, at any time, provided that such processing is carried out in accordance with Art. 6 para. 1 lit. e or f DS-GVO. This also applies to profiling based on this regulation. We, as the data controller, will no longer process the personal data after the objection has been lodged, unless there are compelling reasons for data processing worthy of protection which outweigh the interests, rights and freedoms of the data subject. This also applies to cases in which the data processing serves to assert, exercise or defend claims.

In the event that we process personal data for the purpose of direct marketing, the person concerned may object to this at any time. This applies accordingly to profiling if and to the extent that it is related to direct advertising. After objection against the data processing for direct marketing has been made, we will no longer process the personal data for these purposes.

The data subject also has the right to object to the processing of personal data relating to him or her which is carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 DS-GVO if there are reasons arising from the particular situation of the data subject, unless the data processing is necessary for the performance of a task in the public interest. To exercise this right, the data subject may contact one of our employees at any time. In addition, when using information society services, the data subject may exercise his or her right of objection through an automated procedure using technical specifications, irrespective of Directive 2002/58/EC.

Automated case-by-case decisions/profiling

Any data subject may request that we, as the controller, make decisions that have legal effects on or similarly significantly affect the data subject that are not based solely on automated processing, including profiling, provided that the decision is (a) not necessary for the purposes of concluding or performing a contract between the data subject and us or (b) permissible by applicable law and provided that such law contains reasonable measures to protect the rights, freedoms and legitimate interests of the data subject or (c) is made with the express consent of the data subject. If the decision to conclude or perform a contract between the data subject and us, as the controller, is necessary or if the data subject has expressly consented, we shall take reasonable measures to safeguard the rights and freedoms and the legitimate interests of the data subject. This includes, as a minimum, the right of the data subject to obtain the intervention of the data subject, to present his or her point of view and to challenge the decision.

To exercise this right, the person concerned may contact one of our employees at any time.

Revocation of consent

Any data subject may withdraw consent to the processing of personal data at any time. To exercise this right, the data subject may contact one of our employees at any time.

Right of appeal

Affected parties have the right to complain to the competent supervisory authority at any time.

14. legal basis for data processing

For us, the legal basis for data processing is Art. 6 para. 1 lit. a DS-GVO if we obtain the consent of the data subject for data processing for a specific purpose. In the case of data processing for the performance of a contract to which the data subject is a party, the legal basis for the processing is Art. 6 para. 1 lit. b DS-GVO. This also applies to processing operations that are necessary to carry out pre-contractual measures, such as inquiries about our products or services. If we are subject to a legal obligation to process personal data (e.g. tax obligations), the legal basis for data processing is Art. 6 para. 1 lit. c DS-GVO. In certain situations, data processing may be necessary in order to protect the vital interests of the person concerned or another natural person, for example if injuries are incurred while visiting our company. In this case we would have to transfer the name, age, health insurance data or other vital information to a doctor, hospital or other third party. The legal basis for data processing here is Art. 6 Para. 1 lit. d DS-GVO. Data processing may also be based on Art. 6 para. 1 lit. f DS-GVO if none of the aforementioned legal bases is relevant and data processing is necessary to safeguard the legitimate interests of us or a third party, provided that the interests, fundamental rights and fundamental freedoms of the data subject do not prevail. In the case of data processing based on Article 6 para. 1 lit. f DS-GVO, our legitimate interest is the performance and exercise of our business activities for the benefit of the welfare of all our employees.

15. duration of storage

The duration of the storage of personal data depends largely on the legally prescribed retention periods. After expiry of the respective period, the corresponding personal data is routinely deleted if and to the extent that it is no longer necessary for the fulfilment of the contract or the initiation of the contract.

16. provision of personal data

We would like to inform you that there are some legal regulations which prescribe the provision of personal data (e.g. tax law) or such an obligation to provide may also result from contractual provisions. It may happen that it is necessary for a contract to be concluded that the person concerned provides us with personal data, which we must process in the process, as is necessary, for example, for the conclusion of contracts. If the personal data is not provided in these cases, we would not be able to conclude the contract with the data subject. Before the data subject provides the personal data, the data subject must contact us, who will inform the data subject in each individual case whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what the consequences of not providing the personal data would be.

17. automated decision making / profiling

We do without automated decision making or profiling.

18. objection advertising mails

We hereby expressly object to the use of the contact data provided in the imprint and on the homepage for sending unsolicited advertising and information material. We reserve the right to take legal action against unsolicited sending of advertising and the like, e.g. spam e-mails.

Status May 2018

Source: Attorney Anna Rehfeldt, LL.M. and TÜV-certified data protection officer