2. General for data processing a) Legal basis for the processing of personal data Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serve as legal basis. In the processing of personal data that are necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serve as legal basis. This also applies to processing operations required to carry out pre-contractual actions. Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c GDPR serve as legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serve as legal basis for processing.
b) Data deletion and storage duration The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
4. Disclosure of data A transfer of your personal data to third parties for purposes other than those listed below does not take place. We only share your personal information with third parties if: – you have according to Art. 6 para. 1 p. 1 lit. a GDPR given yours express consent to this – the transfer according to Art. 6 (1) S.1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data, – in the event that disclosure pursuant to Art. 6 (1) S.1 lit. c GDPR is a legal obligation, as well – this is legally permissible and according to Art. 6 (1) S.1 lit. b GDPR is required for the settlement of contractual relationships with you.
6. Affected rights You have the right: – in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can provide information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right of rectification, deletion, limitation of processing or opposition, the existence of a right to complain, the source of their data, if not collected from us, and the existence of automated decision-making, including profiling, and if necessary, meaningful information about their details; – in accordance with Art. 16 GDPR, immediately demand the correction of incorrect or complete personal data stored with us; – in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims is required; – to demand the restriction of the processing of your personal data according to Art. 18 GDPR, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you assert this, Exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR; – to receive, in accordance with Art. 20 GDPR, your personal data provided to us in a structured, standard and machine-readable format or to request transmission to another person in charge; – according to Art. 7 para. 3 GDPR, to revoke your once given consent to us at any time. As a result, we are not allowed to continue the data processing based on this consent for the future. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. – in accordance with Art. 77 GDPR, to complain to a supervisory authority, in particular in the Member State of its place of residence, place of work or place of alleged infringement, if you believe that the processing of your personal data infringes the GDPR.
7. Right to object If the processing of your personal data are based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct mail. In the latter case, you have a general right of objection, which is implemented by us without specifying any particular situation. If you would like to exercise your right of objection, please send an e-mail to firstname.lastname@example.org