PRIVACY

I. Information on the Processing of Your Data Pursuant to Art. 13 of the General Data Protection Regulation (GDPR)

1. Data Controller and Data Protection Officer

The data controller responsible for this website is [name, postal address, email address of the data controller]. The Data Protection Officer can be contacted by email at [email address of the Data Protection Officer] or at [postal address of the Data Protection Officer, if applicable].

2. Data Processed for the Provision of the Website and the Creation of Log Files

3. What Data Is Processed and for What Purpose?

Whenever content on the website is accessed, data that may potentially allow identification is temporarily stored. The following data is collected:

Date and time of access
IP address
Hostname of the accessing computer
Website from which the website was accessed
Websites accessed through our website
Page visited on our website
Notification indicating whether the request was successful
Amount of data transferred
Information about the browser type and version used
Operating system

The temporary storage of this data is necessary to enable the website to be delivered during a website visit. Further storage in log files is carried out to ensure the functionality of the website and the security of the information technology systems. These purposes also constitute our legitimate interest in processing the data.

1. Legal Basis for Processing

The data is processed on the basis of Art. 6(1)(f) GDPR.

2. Are There Any Other Recipients of the Personal Data Besides the Data Controller?

The website is hosted by [name, postal address, email address of the hosting provider]. The hosting provider receives the aforementioned data as a data processor.

3. How Long Is the Data Stored?

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of website provision, this is when the respective session has ended.

The log files are stored [..., for a maximum of 24 hours] and are directly and exclusively accessible to administrators. After this period, they are only indirectly available through the reconstruction of backup tapes and are permanently deleted after [..., a maximum of four weeks].

3. Rights of Data Subjects

1. Right of Access

You have the right, pursuant to Art. 15 GDPR, to request information about the personal data concerning you that we process.

2. Right to Object

You have the right to object on grounds relating to your particular situation (see Section II).

3. Right to Rectification

If the information concerning you is no longer accurate, you may request rectification pursuant to Art. 16 GDPR. If your data is incomplete, you may request that it be completed.

4. Right to Erasure

You may request the deletion of your personal data pursuant to Art. 17 GDPR.

5. Right to Restriction of Processing

Pursuant to Art. 18 GDPR, you have the right to request restriction of the processing of your personal data.

6. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right under Art. 77(1) GDPR to lodge a complaint with a data protection supervisory authority of your choice. This also includes the supervisory authority responsible for the data controller:

Land Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
https://www.ldi.nrw.de/kontakt/ihre-beschwerde

7. Right to Data Portability

If the requirements of Art. 20(1) GDPR are met, you have the right to receive the data that we process automatically on the basis of your consent or in performance of a contract, and to have it transferred to you or to a third party.

The collection of data required to provide the website and the storage of log files are essential for the operation of the website. They are therefore not based on consent pursuant to Art. 6(1)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, but are justified under Art. 6(1)(f) GDPR. Accordingly, the requirements of Art. 20(1) GDPR are not met in this respect.

II. Right to Object Pursuant to Art. 21(1) GDPR

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR.

The data controller will then no longer process the personal data unless they can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or if the processing serves the establishment, exercise or defense of legal claims.

The collection of data required to provide the website and the storage of log files are essential for the operation of the website.

Privacy