2.
Legal basis
We gather and process personal data based on the most up-to-date European law. You will find the entire legal
basis specified below in the General Data Protection Regulation (GDPR). Depending upon the purpose for
gathering the data, one or more of the legal bases below will apply:
•
Consent pursuant to Art. 6(1)(a) General Data Protection Regulation (GDPR).
Consent is a declaration of intent. This can be given in writing in the form of a statement, or also
by way of any other clearly affirmative action. In whatever way the consent is given, it needs to
be given voluntarily, apply to a specific case, and unmistakably express that the data subject is in
agreement with the processing of the personal data concerned. For that purpose, the data
subject needs to be adequately informed and understand the consent.
•
The necessity of fulfilling the contract or taking preparatory measures pursuant to Art. 6(1)(b)
GDPR
This means: The data is necessary so that we can fulfil the contractual obligations towards you or
we need the data to prepare for concluding an agreement with you.
•
•
Processing to fulfil legal obligations pursuant to Art. 6(1)(c) GDPR
This means: The processing of the data is, for example, mandatory for us based on a law or other
regulation.
Processing in order to preserve legitimate interests pursuant to Art. 6(1)(f) GDPR
This means: The processing of the data is necessary in order to, on the one hand, preserve
legitimate interests on our part or on the part of a third party, as long as your interests or basic
rights and basic freedoms, which make the protection of personal data necessary, do not
outweigh the latter.
3.
Rights of data subjects
As far as your personal data is concerned, you are the data subject. You have the following rights in regard to
the processing of data by us in the scope in accordance with the respective article of the General Data
Protection Regulation cited:
•
•
•
•
•
•
The right to information pursuant to Art. 15 GDPR
The right to correction pursuant to Art. 16 GDPR
The right to deletion (“Right to be forgotten”) pursuant to Art. 17 GDPR
The right to limit the processing pursuant to Art. 18 GDPR
The right to data portability pursuant to Art. 20 GDPR
The right of opposition pursuant to Art. 21 GDPR
Notwithstanding any other legal remedy under administrative or judicial law, you are entitled to file an appeal
with a supervisory authority, in particular in the EU Member State that is your place of residence, your place of
work or the place of the presumed infringement if you are of the opinion that the processing of the personal
data concerned infringes the GDPR.
4.
Deletion of data and duration of storage
The personal data of the data subject is deleted or blocked once the purpose of the storage lapses. It may,
moreover, be stored beyond that time if this has been stipulated by the European or national legislative authority