Menü
We appreciate your visit to our website. Data protection is very important to us and we want you to feel safe while visiting our website.
You can therefore visit our website without providing your personal data. However, as soon as you use individual functions, services or offers on our website, personal data may be processed. We only collect, process and use personal data if you have consented to the collection, processing and use or if there is a corresponding legal basis.
We reserve the right to change the data protection declaration at any time with effect for the future. The current version of the data protection declaration can be accessed, saved and printed out on our website at any time.
Below we will inform you in detail about the type, scope and purpose of the personal data we collect, use and process and explain the rights to which you as the data subject are entitled.
1. Name and address of the person responsible
The person responsible within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:
Matchilla GmbH
Kölner Weg 4
50858 Köln, Germany
2. Access data in server log files
Every time our website is accessed, we automatically save access data in so-called server log files.
This includes [date and time of retrieval, amount of data transferred and, if applicable, name of the requested file, browser used and its version, operating system used, IP address, requested URL including sub-pages, referrer URL (URL that you visited immediately before) and the requesting provider].
The temporary storage of the IP address by the system is necessary to enable delivery of the website to your end device. To do this, your IP address must be saved for the duration of the session.
The legal basis for the temporary storage of your data and the log files is Article 6 (1) (f) GDPR.
This data is evaluated exclusively to ensure permanent and trouble-free operation of the website and to improve the content of our website as well as to transmit it to law enforcement authorities in the event of a cyber attack and to ensure the security of our information technology systems. An evaluation of your data for marketing purposes does not take place in this context.
Our legitimate interest in data processing in accordance with Article 6 (1) (f) GDPR also lies in these purposes.
The data of the server log files are stored separately from all other personal data provided by you.
The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of our website. There is therefore no possibility of objection.
3. Use of Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called “cookies” on our website. These are small text files that are stored and saved on your end device via a browser.
Many cookies contain a so-called cookie ID. It consists of a character string through which websites and servers can be assigned to a specific browser in which the respective cookie was stored. After the end of the browser session, most of the cookies we use are deleted again (“session cookies”). The permanent cookies (“persistent cookies”), on the other hand, remain on your end device.
The following data is stored and transmitted in the cookies: language settings, items in a shopping cart, log-in information, search terms entered, frequency of page views, use of website functions.
Your data collected on our website will be pseudonymized by technical precautions. It is therefore no longer possible to assign the data to you. The data will not be saved together with your other personal data.
The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f GDPR.
The purpose of using technically necessary cookies is to simplify the use of our website for you (e.g. we save your shopping cart). Some functions of our website cannot be offered without the use of cookies. For these it is necessary that your browser is recognized even after a page change. If cookies are not accepted or deactivated, the functionality of our website may be restricted.
Analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies, we learn how you use the website and can thus continuously optimize our offer.
Our legitimate interest in the processing of personal data in accordance with Article 6 (1) (f) GDPR also lies in these purposes.
Some of the third-party services we integrate may use cookies. Please refer to the websites of the relevant providers for information on the respective functionality and data processing. The services we use can be found in this data protection declaration.
Cookies are stored on your end device and transmitted to our website. You therefore have control over the use of cookies. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general or set them so that the setting of cookies is prevented and thus the setting of cookies object permanently. You can also delete cookies that have already been set at any time via your browser. The transmission of Flash cookies cannot be prevented via the settings of your browser, but can be prevented by changing the settings of the Flash Player. This also applies to all third-party cookies listed below by us.
4. Data collection and use upon registration
You have the option to register on our website. In this case, we collect the personal data that you voluntarily provide to us during your registration. Which data is collected can be seen from the respective input forms.
Accordingly, the legal basis for the processing of your data is Art. 6 (1) (b) GDPR.
We only use the data you provide to process the contract and provide our services to be provided under the contract. We can also pass on your data to one or more processors (e.g. payment service providers), who also use your data exclusively for internal use on our behalf.
We also store your IP address and the date and time of registration in order to prevent misuse of our website and the services offered on it and to investigate any criminal offenses that may have been committed. The storage of this data is therefore necessary for our own security. The legal basis for the processing of personal data is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest in data processing in accordance with Article 6 (1) (f) GDPR also lies in the aforementioned purposes.
In principle, this data will not be passed on to third parties unless there is a legal obligation to pass it on or the passing on is for criminal prosecution.
After the contract has been completed or your account has been deleted, your data will initially be blocked for further use and then deleted after the statutory retention periods have expired, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you below.
5. Use of Facebook Remarketing
We use a remarketing function from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”) on our “Custom Audience” website.
The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f GDPR.
To carry out the “Costume Audience” functions, we have implemented the Facebook remarketing pixel on our website. This pixel establishes a direct connection to the Facebook servers when you visit our website. This transmits to the Facebook server which subpage of our website you have visited. Facebook assigns this information to your personal Facebook user account.
This function enables us to target you with advertising by placing personalized, interest-based Facebook ads for you when you visit the social network Facebook (accessible at www.facebook.com). The purpose of remarketing is to be able to show you products that are of interest to you in advertising.
Our legitimate interest in data processing in accordance with Article 6 (1) (f) GDPR also lies in these purposes.
You can find more information about the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook’s data protection information at https://www.facebook.com/about/privacy/. If you do not want Facebook to directly assign the information collected to your Facebook user account, you can deactivate the “Custom Audience” remarketing function here https://www.facebook.com/settings/?tab=ads#_=_. To do this, you must be logged in to Facebook.
6. Google Remarketing/ AdWords
We use marketing and remarketing services (e.g. Google AdWords) on our website operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Personal data is transmitted to Google in the USA via the marketing and remarketing services. The USA is an unsafe third country. However, Google has voluntarily certified itself under the US-EU data protection agreement “Privacy Shield” and has thus committed itself to complying with EU data protection regulations.
The legal basis for the processing of personal data is Art. 6 Para. 1 lit. f GDPR.
The Google marketing and remarketing services allow us to display advertisements in a targeted manner in order to only present you with advertisements that potentially match your interests. Our legitimate interest in the processing of personal data in accordance with Article 6 (1) (f) GDPR also lies in these purposes.
For these purposes, a web beacon is integrated and executed when all websites on which Google marketing and remarketing services are used are accessed. Using the web beacon, an individual cookie is created on your end device. The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. The cookies contain information about which websites you have visited, what content you are interested in and which offers you have clicked on. In addition, the cookies contain technical information about the browser and operating system you are using, referring (so-called referrer) websites, visit time and other information on the use of our online offer. Google can also link the named data to information from other sources. Your data will be processed pseudonymously as part of the Google marketing and remarketing services. This means that Google stores and processes your data within pseudonymous user profiles.
As part of Google AdWords, we receive data on the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any data with which we can identify you as a user.
If you wish to object to interest-based advertising by Google, you can click on the following link to use your opt-out options http://www.google.com/ads/preferences.
You can find Google’s terms of use and privacy policy at https://www.google.de/intl/de/policies/privacy/
7.Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google Analytics”). The information generated about your use of this website is usually transmitted to a Google server in the USA and stored there. The USA is an unsafe third country. However, Google Inc. has voluntarily certified itself under the US-EU data protection agreement “Privacy Shield” and has thus committed itself to complying with EU data protection regulations.
The legal basis for the processing of personal data is Art. 6 Para. 1 lit. f GDPR.
Google Analytics uses methods that enable an analysis of your use of the website, in particular from which website you came to our website (so-called referrer), which subpage you access or how often and for how long you view a subpage. Google Analytics uses cookies for this purpose. Each time you visit a page on our website on which Google Analytics has been integrated, your browser on your device is automatically prompted to transmit data to Google Analytics for analysis purposes.
By activating IP anonymization on our website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Google will use this information on our behalf to evaluate the use of our website by users, to compile reports on the activities within this website and to provide us with other services related to the use of this website and the internet.
Our legitimate interest in data processing in accordance with Article 6 (1) (f) GDPR also lies in these purposes.
Google may also transfer this information to third parties if required to do so by law or if third parties process this data on Google’s behalf. Pseudonymous user profiles can be created from the processed data.
You can prevent the data generated by the cookie and related to your use of our website (including your IP address) being sent to Google and the processing of this data by Google by clicking on this link http://tools.google.com. Download and install the available browser add-on from com/dlpage/gaoptout?hl=de. The installation of the browser add-on is evaluated by Google as a contradiction.
The terms of use and data protection declaration of Google and Google Analytics can be found here https://www.google.de/intl/de/policies/privacy/ or here http://www.google.com/analytics/terms/de.html.
8. Social Plugins
We use various social plugins on our website. We do not collect any personal data ourselves by means of the social plugins or through their use. By clicking on the respective plugin, you agree to the data transfer to the respective service provider.
The legal basis for the processing of your data based on your consent is Art. 6 (1) (a) GDPR.
a. Use of Facebook plugins
On our website we use the social plugin of the social network facebook.com, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). If you live outside the USA or Canada, the person responsible for processing personal data is Facebook Ireland Ltd., 4 Grands Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If you use the plugin, a direct connection to the Facebook servers will be established via your browser. As part of this technical process, Facebook is informed which specific subpage of our website you are visiting. In addition, the corresponding information – e.g. the activation of the Like button – is transmitted from your browser to Facebook, linked to your user account and stored.
If you are logged in to your personal Facebook account while visiting our website, Facebook can assign the visit and the specific sub-pages of our website you have visited to your account.
If you are not a member of Facebook, there is still the possibility that Facebook will save your IP address.
If you do not want such processing, you must log out of your Facebook account and delete your cookies before visiting our website. You can also object to the use of your data for advertising purposes in the Facebook profile settings https://www.facebook.com/settings?tab=ads.
For more information on the purpose and scope of data collection and the further processing and use of your data, please refer to Facebook’s data policy at http://www.facebook.com/policy.php.
b. Use of the Instagram plugin
We use the Instagram social network plugin on our website, which is operated by Instagram LLC., 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA (“Instagram”).
If you use the plugin, a direct connection to the Instagram servers will be established via your browser. As part of this technical process, Instagram is informed which specific subpage of our website you are visiting. In addition, the corresponding information – e.g. pressing the Insta button – is transmitted from your browser to Instagram, linked to your user account and stored.
If you are logged in to your personal Instagram account while visiting our website, Instagram can assign the visit and the specific sub-pages of our website you have visited to your account.
If you are not a member of Instagram, there is still the possibility that Instagram will store your IP address.
If you do not want such an assignment, you must log out of your Instagram account and delete your cookies before visiting our website.
For more information on data protection, please refer to Instagram’s data policy https://www.instagram.com/about/legal/privacy/.
c. Use of the Pinterest plugin
We use the Pinterest social network plugin on our website, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA (“Pinterest”).
If you use the plugin, a direct connection to the Pinterest servers will be established via your browser. As part of this technical process, Pinterest is informed which specific subpage of our website you are visiting. In addition, the corresponding information – e.g. pressing the Pinterest button – is transmitted from your browser to Pinterest, linked to your user account and stored.
If you are logged in to your personal Pinterest account while visiting our website, Pinterest can assign the visit and the specific sub-pages of our website you have visited to your account.
If you are not a member of Pinterest, it is still possible for Pinterest to store your IP address.
If you do not want such an assignment, you must log out of your Pinterest account before visiting our website and delete your cookies.
For more information on privacy, please see Pinterest’s privacy policy https://about.pinterest.com/privacy-policy.
i.e. Use of the Twitter plugin
We use the twitter.com service plugin on our website, which is operated by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (“Twitter”).
If you use the plugin, a direct connection to the Twitter servers will be established via your browser. As part of this technical process, Twitter is informed which specific subpage of our website you are visiting. In addition, the corresponding information – e.g. the activation of the Twitter button – is transmitted from your browser to Twitter, linked to your user account and stored.
If you are logged in to your personal Twitter account while visiting our website, Twitter can assign the visit and the specific sub-pages of our website you have visited to your account.
If you are not a member of Twitter, there is still the possibility that Twitter will store your IP address.
If you do not want such processing, you must log out of your Twitter account and delete your cookies before visiting our website.
For more information on data protection, please refer to Twitter’s data policy https://twitter.com/privacy?lang=de.
e. Use of the LinkedIn plugin
On our website we use the plugin of the professional network linkedin.com, which is operated by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”). If you live outside the USA, the person responsible for processing personal data is LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
If you use the plugin, a direct connection to the LinkedIn servers will be established via your browser. As part of this technical process, LinkedIn is informed which specific sub-pages of our website you are visiting. In addition, the corresponding information – e.g. the activation of the Like button – is transmitted from your browser to LinkedIn, linked to your user account and stored.
If you are logged in to your personal LinkedIn account while visiting our website, LinkedIn can assign the visit and the specific sub-pages of our website you have visited to your account. If you are not a member of LinkedIn, it is still possible for LinkedIn to save your IP address.
If you do not want such processing, you must log out of your LinkedIn account and delete your cookies before visiting our website. At https://www.linkedin.com/psettings/guest-controls LinkedIn offers the possibility to unsubscribe from e-mail messages, SMS messages and targeted ads as well as to manage ad settings. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame who may set cookies.
For more information on data protection, please refer to LinkedIn’s data policy https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.
f. Use of the Xing plugin
On our website we use the plugin of the professional network xing.de, which is operated by XING AG, Dammtorstraße 30, 20354 Hamburg, Germany (“Xing”).
If you use the plugin, a direct connection to the Xing servers will be established via your browser. As part of this technical process, Xing is informed which specific subpage of our website you are visiting. In addition, the corresponding information – e.g. the activation of the share button – is transmitted from your browser to Xing, linked to your user account and stored.
If you are logged in to your personal Xing account while visiting our website, Xing can assign the visit and the specific sub-pages of our website you have visited to your account.
If you are not a member of Xing, there is still the possibility that Xing will save your IP address.
If you do not want such processing, you must log out of your Xing account and delete your cookies before visiting our website.
For more information on data protection, please refer to Xing’s data protection provisions https://www.xing.com/privacy.
9. Integration of Youtube
We embed videos from the social network youtube.com, which is operated by YouTube, LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (“YouTube”), on our website. YouTube LLC is a subsidiary of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043-1351, USA.
When you visit our website, a direct connection to the YouTube servers is established via your browser. Your browser is automatically prompted by the respective video embedded on our website to download a representation of the corresponding component from YouTube. As part of this technical process, YouTube is informed which specific subpage of our website you are visiting.
If you use the videos, the corresponding information – e.g. pressing the play button – is transmitted from your browser to YouTube, possibly linked to your user account and saved.
The legal basis for the use of your data is Article 6 (1) (f) GDPR.
Our legitimate interest in data processing according to Art. 6 Paragraph 1 lit. f GDPR lies in the optimization and economic operation of our website.
If you are logged in to your personal Google account while visiting our website, YouTube can assign the visit and the specific sub-pages of our website you have visited to your account.
If you do not have a Google account, there is still the possibility that YouTube will store your IP address.
If you do not want such processing, you must log out of your Google account and delete your cookies before visiting our website.
You can object to the use of your data by Google at any time by clicking on the following link: https://adssettings.google.com/authenticated
For more information on data protection, please refer to the data protection regulations of YouTube https://www.google.de/intl/de/policies/privacy/.
10. Integration of cookie banner tool
In order to fulfill our data protection obligations, we use a cookie banner called Cookie Notice by Humanityco integrated on our website. When you visit our website, your cookie preferences will be queried via a website banner. A cookie is set in which data on your given or revoked consent is stored.
The data processing takes place on the basis of the overriding legitimate interest in data protection-compliant data processing on our website in accordance with Art. 6 Para. 1 f) DSGVO.
11. Newsletter and newsletter analysis by Mailchimp
You can register to receive our newsletter. To send our newsletter, we use the MailChimp newsletter service operated by Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA (“Mailchimp”). We transmit data to MailChimp in the USA as described below. The USA is an unsafe third country. However, MailChimp has voluntarily certified itself under the US-EU data protection agreement “Privacy Shield” and has thus committed itself to complying with EU data protection regulations.
Our newsletter is published regularly and contains information about content marketing and marketing technologies.
To register, you must provide us with your email address. You can voluntarily provide us with additional information, such as your name. The registration takes place in a so-called double opt-in procedure. After registering on our website, you will receive a confirmation email from us in which you must confirm your registration again. This entire process is documented and saved. This includes storing the time of registration and confirmation as well as your IP address. The collection of this data is necessary so that we can understand the processes in the event of misuse of the e-mail address and therefore serves our legal protection. By subscribing to our newsletter, you agree to receive it.
The legal basis for processing your data after registering for the newsletter is Article 6(1)(a) GDPR if you have given your consent.
Your data will be stored on MailChimp servers in the USA. MailChimp uses this information to send and evaluate the newsletter. The evaluation takes place on our behalf, but MailChimp can also use the data for quality assurance and to improve the quality of its own service.
The “web beacon” contained in the newsletter is retrieved from the MailChimp server when the newsletter is opened. As part of this retrieval, information about the browser, your system, your IP address and the time of retrieval is collected. In addition, information is collected as to whether the newsletter is opened, when it is opened and which links are clicked. These statistical surveys are used for the technical improvement of the services described above.
You can revoke your consent to the storage and use of your personal data to receive the newsletter and the statistical survey described above at any time with effect for the future. For the purpose of revoking your consent, you can use the link provided for this purpose in the newsletter.
Your data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Your e-mail address will therefore be stored as long as the subscription to the newsletter is active.
For more information on data protection, please see MailChimp’s privacy policy https://mailchimp.com/legal/privacy/.
12. Email and contact form
Due to legal regulations, we provide information on our website that enables us to be contacted quickly electronically and to communicate with us directly. This includes both our email address and our contact form. If you contact us by email or via our contact form, the personal data you provide will be saved automatically. The other personal data processed while contacting us serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
The legal basis for the processing of data transmitted in the course of sending an email is Article 6 Paragraph 1 Letter f GDPR. If contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
We only use the personal data you provide to process your specific request. The data provided will always be treated confidentially.
Your information can be stored in a customer relationship management system (so-called CRM system) or another organizational tool for customer data.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is over when it can be inferred from the circumstances that the facts in question have been finally clarified.
You have the option to revoke your consent to the processing of your personal data at any time. If you contact us, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.
13. Use of SalesViewer® technology:
This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.
In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally.
The data stored by Salesviewer® will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.
The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.
14. Data Security
We secure our website and other systems through numerous technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. Despite regular checks, however, complete protection against all risks is not possible and cannot be guaranteed by us. For this reason, you are always free to transmit your personal data to us in other ways, for example by telephone or post.
15. Legal basis for processing personal data
Insofar as we obtain your consent for the processing of personal data, Article 6 (1) (a) GDPR serves as the legal basis for the processing of personal data.
Article 6 (1) (b) GDPR serves as the legal basis for the processing of personal data required to fulfill a contract to which you are a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 (1) (c) GDPR serves as the legal basis.
In the event that your vital interests or the vital interests of another natural person require the processing of personal data, Article 6 Paragraph 1 Letter d GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, Art. 6 Paragraph 1 lit. f GDPR serves as the legal basis for the processing.
16. Legitimate Interests in Processing
If the processing of your personal data is based on Article 6 I lit. f GDPR, our legitimate interest is the performance of our business activities, unless otherwise stated. In addition, we have indicated our purposes and interests within the scope of the above list of processing.
17. Data Deletion and Retention Period
Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies or you withdraw your consent. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. If the purpose of storage no longer applies, if you revoke your consent or if a storage period prescribed by the European directive and regulation authority or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
18. Right of Access
You also have the right to receive information from us free of charge about the personal data stored about you and a copy of this information at any time. You also have a right to information regarding the following information:
• the processing purposes,
• the categories of personal data being processed,
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations,
• if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration,
• the existence of a right to correction or deletion of the personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing,
• the existence of a right of appeal to a supervisory authority,
• if the personal data are not collected from the data subject: all available information about the origin of the data and,
• the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You also have a right to information as to whether personal data has been transmitted to a third country or to an international organization. If this is the case, you also have the right to receive information about the appropriate guarantees in connection with the transmission.
19. Right to Rectification
You have the right to request the immediate correction and/or completion of incorrect or incomplete personal data concerning you. We have to make the correction immediately.
20. Right to restriction of processing
You have the right to request us to restrict processing if one of the following conditions is met:
• The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
• The processing is unlawful, the data subject refuses to have the personal data deleted and instead requests that the use of the personal data be restricted.
• The person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims.
• The data subject has lodged an objection to the processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
If the processing of the personal data concerning you has been restricted, this data – apart from its storage – may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State are processed.
If the restriction of processing has been restricted according to the above conditions, you will be informed by us before the restriction is lifted.
21. Right to Erasure
You have the right to ask us to delete the personal data concerning you immediately if one of the following reasons applies and if the processing is not necessary:
• The personal data were collected for purposes or otherwise processed for which they are no longer necessary.
• The data subject revokes their consent on which the processing was based pursuant to Art. 6 Para. 1 Letter a DS-GVO or Art. 9 Para. 2 Letter a DS-GVO and there is no other legal basis for the processing.
• The data subject objects to the processing pursuant to Art. 21 Para. 1 DS-GVO and there are no overriding legitimate reasons for the processing or the data subject objects to the processing pursuant to Art. 21 Para. 2 DS-GVO processing on.
• The personal data have been processed unlawfully.
• The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
• The personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 DS-GVO.
If we have made the personal data public and if we, as the person responsible, are obliged to delete the personal data in accordance with Art. 17 Para. 1 DS-GVO, we shall take appropriate measures, including technical measures, to prevent others from to inform those responsible for data processing who process the published personal data that the data subject has requested the deletion of all links to this personal data or copies or replications of this personal data from these other persons responsible for data processing, insofar as the processing is not required.
The right to erasure does not exist if processing is necessary:
• to exercise the right to freedom of expression and information;
• to fulfill a legal obligation that requires processing under Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
• for reasons of public interest in the field of public health in accordance with Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
• for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the law mentioned under section a) is likely to make it impossible or seriously impair the achievement of the objectives of this processing, or
• to assert, exercise or defend legal claims.
22. Right to Information
If you have asserted the right to correction, deletion or restriction of processing against us, we are obliged to inform all recipients to whom your personal data has been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.
You have the right to be informed about these recipients.
23. Right to data portability
You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format. You also have the right to transmit this data to another person responsible without hindrance from us, provided that the processing is based on the consent in accordance with Art. 6 Para. 1 Letter a DS-GVO or Art. 9 Para. 2 Letter a DS-GVO or on a contract pursuant to Art. 6 Para. 1 Letter b DS-GVO and the processing is carried out using automated procedures, unless the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority, which is transferred to us became.
Furthermore, when exercising your right to data portability in accordance with Art. 20 Para Rights and freedoms of other people are impaired.
The right to data portability does not apply to processing of personal data that is required to perform a task that is in the public interest or in the exercise of official authority that has been assigned to the controller.
24. Right to Object
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 (1) (e) or (f) GDPR. This also applies to profiling based on these provisions.
In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process your personal data in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising. If you object to us processing for direct marketing purposes, we will no longer process your personal data for these purposes.
You also have the right, for reasons that arise from your particular situation, against the processing of your personal data, which is carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 DS-GVO, to object, unless such processing is necessary to fulfill a task in the public interest.
You can contact us at any time to exercise your right to object. You are also free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right of objection by means of automated procedures using technical specifications.
25. Right to revoke consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.
26. Right to automated individual decision-making including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you, provided that the decision
• is not necessary for the conclusion or performance of any contract between you and us; or
• is permitted by law of the Union or the Member States to which we are subject and this law contains appropriate measures to protect your rights and freedoms and your legitimate interests, or
• is made with your express consent.
Is the decision
• necessary for entering into, or the performance of, a contract between you and us; or
• it is done with your express consent,
we will take reasonable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view and to contest the decision.
27. Existence of automated decision-making
We do not perform automated decision making or profiling.
28. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data violates violates the GDPR.
The supervisory authority to which the complaint was lodged will inform the complainant about the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.
Match me if you can!