Structured Privacy Policy of PCC SE for Various Areas

The protection of personal data is important to us. PCC SE therefore processes personal data in accordance with the applicable legal provisions covering the privacy and protection of personal data. So that you can be sure of your rights, we have compiled all the relevant information for you here.

This data protection declaration (“Privacy Policy”) will be further adapted as we continue to develop our website and/or our portfolio. In order to keep up to date with the current status of these data usage regulations, we therefore urge you to consult this page on a regular basis.

Status as of May 2022

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

PCC SE
Moerser Str. 149
47198 Duisburg
Germany
Phone: +49 (0)2066 2019-0
Fax: +49 (0)2066 54682
Email: info@pcc.eu

The controller responsible for the processing of personal data is the natural person or legal person (entity) who alone or together with others decides on the purposes for and means of processing personal data.

The controller has appointed a data protection officer who can be contacted as follows:

PCC SE
PCC SE Data Protection Officer
Moerser Str. 149
47198 Duisburg
+49 (0)2066 20 2019-0
dataprotection@pcc.eu

Welcome to our website and thank you for your interest. In the following we inform you about how your personal data is handled when you visit our website.
For security reasons and to protect the transmission of personal data and other confidential information (e.g. orders or enquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the padlock symbol in your browser line.

2.1) Data collection when visiting our website

When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

Our website visited
Date and time of access
Quantity of data sent in bytes
Source/reference/link from which you accessed the page
Browser used
Operating system used
IP address used (possibly anonymized)

Legal basis
Processing is carried out in accordance with point f of Art. 6 (1) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not and will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are any tangible indications of illegal use.

2.2) Making contact

Personal data is collected in the event that you make contact with us (e.g. via email). These data are stored and used exclusively for the purpose of responding to your request or for establishing contact with you, and for the associated technical administration of the contact

Legal basis
The legal basis for processing the data is our legitimate interest in responding to your request in accordance with point f of Art. 6 (1) GDPR. If the purpose of your contact is to conclude a contract, the additional legal basis for the processing of such data is provided by point b of Art. 6 (1) GDPR.

Storage period
Your data will be erased after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the matter in question has been finally settled, subject to the overriding provision that there are no legal data retention obligations to the contrary.

2.3) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use so-called “cookies” on various pages. These are small text files that are transferred to and stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set (installed), they collect and process specific user information on an individual basis, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with point f) of Art. 6 (1) GDPR either for the performance of the contract or in accordance with point f) of Art. 6 (1) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and an enjoyable and effective design-based website user experience.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard disk (third-party cookies ) when you visit our website. Where we work with the aforementioned advertising partners, you are informed individually and separately within the paragraphs below about the use of such cookies and the extent of the information collected in each case.

Please note that you can set your browser in such a way that you are informed about the installation of cookies. You can decide individually on their acceptance and/or exclude the acceptance of cookies for certain cases or as a general rule. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which will also explain how you can change your cookie settings. You will find these for the respective browsers under the following links:

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/en-US/kb/enable-or-disable-cookies-firefox-android
Chrome: https://support.google.com/chrome/answer/114662?hl=en-GB&ref_topic=7439724
Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that the functionality of our website may be limited if cookies are not accepted.

2.4) Use of social media: Vimeo videos

Our website includes plug-ins of the video portal Vimeo operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. When you access a page of our website that contains such a plug-in, your browser establishes a direct connection to Vimeo’s servers. The content of the plug-in is transmitted by Vimeo directly to your browser and integrated into the page you are viewing. Even if you do not have a Vimeo account or are not currently logged into Vimeo, through this integration Vimeo receives the information that your browser has called up the corresponding page of our website. This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the USA and stored there.

If you are logged into Vimeo, Vimeo can directly associate (link) your visit to our website with your Vimeo account. If you interact with the plug-ins (such as pressing the start button of a video), this information is also transmitted directly to a Vimeo server and stored there.

The described data processing operations are performed according to point f of Art. 6 (1) GDPR on the basis of Vimeo’s justified interest in market research and in ensuring the needs-based user friendliness of the service.
If you do not want Vimeo to link the information collected through our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.

Please refer to Vimeo’s privacy policy for the purpose and scope of data collection, the further processing and use of the data by Vimeo and your rights and setting options for protecting your privacy: http://vimeo.com/privacy

The tracking tool Google Analytics is automatically integrated in Vimeo videos incorporated in our site. This is Vimeo’s own tracking system, to which we have no access and which cannot be influenced by our site. Google Analytics uses cookies (text files installed on your computer or other device), to help the website analyze how users use the site. The information generated by the cookie regarding your use of this website is usually transferred to a Google server in the USA and stored there.

This processing is performed in accordance with point f of Art. 6 (1) GDPR on the basis of Vimeo’s legitimate interest in statistical analysis of user behavior for optimization and marketing purposes.

2.5) Use of YouTube videos

This website uses the YouTube embedding function to display and play videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. If the playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behavior. According to information from “YouTube”, these are used, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive behavior. If you are logged in to Google, your data is directly assigned to your account when you click on a video. If you do not want the assignment to your YouTube profile, you must log out before activating the button. You have the right to object to the creation of these user profiles, for which purpose you must contact YouTube. The use of YouTube may also result in the transmission of personal data to the servers of Google LLC. in the USA.

Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations that we have no influence over. All processing described above, in particular the reading of information on the terminal device used via the tracking pixel, will only be carried out if you have given us your express consent to do so in accordance with point a) of Art. 6 (1) GDPR. Without this consent, YouTube videos will not be used during your visit to the site.

You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “Cookie Consent Tool” provided on the website via alternative options communicated to you on the website.

Further information on data protection at “YouTube” can be found in the YouTube terms of use at https://www.youtube.com/static?template=terms
as well as in Google’s privacy policy at
https://policies.google.com/privacy?

2.6) Online marketing

Use of Google AdWords conversion tracking

This website uses the online advertising program “Google Ads” and, within the scope of Google Ads, the conversion tracking function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use the offer of Google Ads to draw attention to our attractive offers with the help of advertising media (so-called Google AdWords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the respective advertising campaigns. In this way, we pursue the aim of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.

The cookie for the conversion tracking function is set when a user clicks on an ad placed by Google Ads. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across Google Ads customers’ websites. The information obtained through the conversion cookie is used to create conversion statistics for Google Ads customers who have opted into conversion tracking. The clients learn the total number of users who clicked on their advertisement and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. In the course of using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA. Details on the processing triggered by Google Ads Conversion Tracking and on Google’s handling of data from websites can be found here:
https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies for reading out information on the terminal device used, will only be carried out if you have given us your express consent to do so in accordance with point a) of Art. 6 (1) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in from Google available at the following link:

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

Google’s privacy policy can be viewed here:
https://policies.google.com/privacy?

2.7) Web analytics Services

Google (Universal) Analytics without cookies

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

This website uses Google (Universal) Analytics exclusively without the use of cookies, which means that the service does not set cookies on your terminal device at any time.

Instead, the local memory of your browser is used to store an individual ID assigned by Google (Universal) Analytics, which enables an analysis of your use of the website. For this purpose, certain user information is processed via the ID.

The information generated by the ID about your use of this website (including the shortened IP address) is usually transmitted to a Google server and stored there; this may also involve transmission to the servers of Google LLC. in the USA.

This website uses Google (Universal) Analytics exclusively with the extension “_anonymizeIp()”, which ensures an anonymization of the IP address by abbreviation and excludes any direct personal reference. Through the extension, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states that have signed up to the European Economic Area (EAA) Agreement. Only in exceptional cases will the full IP address be transferred to a Google LLC. server in the USA and shortened there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. In the process, the IP address transmitted by your browser as part of Google (Universal) Analytics will be merged with other data from Google.

With a special function called “demographic characteristics”, Google Analytics also enables the creation of statistics providing information on the age, gender and interests of the site visitors on the basis of an evaluation of interest-related advertising and with the help of third-party information. This allows the definition and differentiation of user groups accessing the website for the purpose of targeting marketing measures. However, data records collected via the “demographic characteristics” cannot be assigned to a specific person.

All processing described above will only be carried out if you have given us your express consent in accordance with point a) of Art. 6 (1) GDPR. Without this consent, Google Analytics will not be used during your website visit.

You can revoke your given consent at any time with effect for the future by downloading and installing the browser plugin available at the following link:

https://tools.google.com/dlpage/gaoptout?

As an alternative to the browser plug-in or within browsers on mobile devices, you can revoke your given consent by clicking on the following link to set an opt-out cookie that will prevent future collection by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain.  If you delete your cookies in this browser, you will have to click this link again):

Disable Google Analytics

We have entered into an order processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our website visitors and not to pass them on to third parties.

For the transfer of data from the EU to the USA, Google refers to so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.

Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?

2.8) Tools and miscellany

Borlabs

This website uses the cookie consent tool Borlabs of the provider Mr. Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (“Borlabs”), which sets two technically necessary cookies (“borlabsCookie” and “borlabsCookieUnblockContent”) to store your cookie preference. The aforementioned processing is carried out pursuant to point f) of Art. 6 (1) GDPR on the basis of our legitimate interest in providing cookie preference management for website visitors.

The “borlabs cookie” does not process any personal data. The “borlabsCookie” cookie stores your chosen preference, which you selected when entering the website. The “borlabsCookieUnblockContent” cookie stores which (external) media/content you always want to have automatically unblocked. If you want to revoke these settings, simply delete the cookies in your browser. When you re-enter / reload the website, you will be asked again for your cookie preference.

Google reCAPTCHA

On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is primarily used to distinguish whether an input is made by a natural person or abusively by machine and automated processing. The service includes the sending of the IP address and, if applicable, further data required by Google for the reCAPTCHA service to Google and is carried out in accordance with point f) of Art. 6 (1) GDPR on the basis of our legitimate interest in determining individual personal responsibility for activity on the internet and the prevention of abuse and spam. The use of Google reCAPTCHA may also involve the transmission of personal data to the servers of Google LLC. in the USA. Further information on Google reCAPTCHA as well as Google’s privacy policy can be found at: https://policies.google.com/privacy?.To the extent legally required, we have obtained your consent pursuant to point a) of Art. 6 (1)GDPR for the processing of your data as described above. You can revoke your given consent at any time with effect for the future. To exercise your right of revocation, please follow the procedure described above for submitting an objection.

Google Maps

On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive (country) maps to visually display geographic information. Using this service will show you our location and make it easier for you to find us.
When you call up sub-pages that integrate Google Maps, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there, this may also result in transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with point f) of Art. 6 (1) GDPR on the basis of Google’s legitimate interest in the display of personalized advertising, market research and / or in ensuring the needs-based user-friendliness of Google websites.. You have the right to object to the creation of these user profiles. You must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by turning off the JavaScript application in your browser. If you do this, however, you will not be able to use Google Maps and therefore the map display on this website.

You can view Google’s Terms of Use at https://policies.google.com/privacy?

The additional Terms of Use for Google Maps can be found at https://www.google.com/intl/US/help/terms_maps/.

Detailed information on data protection in connection with the use of Google Maps can be found on Google’s website (“Google Privacy Policy”):
https://policies.google.com/privacy?

Insofar as legally required, we have obtained your consent to the processing of your data as described above in accordance with point a) of Art. 6 (1) GDPR.  You can revoke your given  consent at any time with effect for the future. To exercise your right of revocation, please follow the procedure described above for submitting an objection.

Google Web Fonts

This website uses “web fonts“ provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google’s servers. This may also result in the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google obtains knowledge that our website was accessed via your IP address. The processing of personal data in the course of establishing a connection with the provider of the fonts is only carried out if you have given us your express consent for this in accordance with point a) of Art. 6 (1) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a default font will be used by your computer.

For more information on Google Web Fonts, please visit

https://developers.google.com/fonts/faq

and in Google’s privacy policy:

https://policies.google.com/privacy?

On our website, we advertise currently vacant positions in a separate section, for which interested parties can apply by e-mail to the contact address provided.

Inclusion in the application process requires that, together with the application form, applicants provide us by e-mail with all personal data required for a well-founded and informed assessment and selection.

Data type and purpose

The categories of personal data processed include in particular your primary details (e.g. first name, surname, additional names, nationality and date of birth), contact data (such as private address, [mobile] telephone number, e-mail address) as well as the data relating to the full application procedure (cover letter, certificates, interviews, qualifications and previous activities). If you have also voluntarily provided special categories of personal data (such as health data, religious affiliation, degree of disability) in the letter of application or during the application procedure, processing will only take place if you have consented to this or there is a legal justification for such action. The processing of the applicant data collected by us or transmitted to us facilitates the application procedure and an assessment as to what extent each candidate is suitable for the position in question.

Legal basis

The processing of your applicant data is necessary in order to be able to decide on the establishment of an employment relationship. The primary legal basis for this is provided by point b) of Art. 6 (1) GDPR in conjunction with Article 26, Section 1 BDSG ( German Federal Data Protection Act).

Recipients

We will only pass on your personal data to those persons and departments within our company (e.g. personnel/HR department and the specialist unit/department concerned) and to selected contract data processors (e.g. personnel service providers) that need them for the above-mentioned purposes and/or to fulfill our pre-contractual/contractual and statutory obligations.

Storage period

We erase your personal data three months following the issue of a rejection or a rejection or withdrawal by you. This does not apply if legal provisions oppose such erasure, if further storage is necessary for the purpose of providing evidence or if you have consented to longer storage. If you are hired, we will store your data as part of the subsequent employment relationship.

Making contact

Personal data is collected in the event that you make contact with us (e.g. via a contact form, e-mail, telephone or reply card). The specific data collected in the case of a contact form is apparent from the respective contact form. These data are stored and used exclusively for the purpose of responding to your request – e.g. to send you information – or for establishing contact with you, and for the associated technical administration of the contact. In compliance with the General Data Protection Regulation (GDPR), we do not pass your data on to third parties.

Your personal data provided in the subscription form will be stored and processed by PCC SE for the purpose of managing the subscription pursuant to sentence 1 of point b) of Art. 6 (1) GDPR.

Use of your data for direct advertising

Based on our legitimate interest in personalized direct mail, we reserve the right to store your first and last name, your postal address and – if we have received this additional information from you within the framework of our contractual relationship – your title, academic degree, year of birth and your professional, industry or business name in accordance with point f) of Art. 6 (1) GDPR, and to use such data for sending information on our corporate bonds by letter post.

External service providers (contract processors)

Your data will be passed on to service partners, provided that they work on our behalf and support PCC SE in the provision of services. For example, if you subscribe to our quarterly report, we commission a service provider to send the item by mail.

Processing of your personal data by contracted service providers takes place within the scope of contract processing in accordance with Art. 28 GDPR.

You can object to the storage, retention and use of your data for this purpose at any time by sending appropriate notification to us as the data controller.

Newsletter dispatch

 If you subscribe to our e-mail newsletter, we will send you information about our offers on a regular basis. The only mandatory information for sending the newsletter is your e-mail address. Any further data is voluntary and will be used to address you personally. For sending the newsletter we use the double opt-in procedure. This means that we will only send you an e-mail newsletter after you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in the future by clicking on an appropriate link. By activating the confirmation link, you give us your consent for the use of your personal data in accordance with point a) of Art. 6 (1) GDPR. When you register for the newsletter, we store your IP address entered by your internet service provider (ISP), as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter will be used exclusively for the purpose of addressing you in an advertising manner by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the aforementioned Data Controller. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to the further use of your data or we reserve the right to use your data in excess thereof, which is permitted by law and about which we inform you in this declaration.

Making contact by e-mail

If you contact us by e-mail, the data you provide will be used to process your request. Providing the data is necessary for processing and answering your inquiry – if such data is not provided, we would be unable to properly respond to your request. The legal basis for such processing is provided by point b) of Art. 6 (1) GDPR.

Your data will be erased if your inquiry has been finally answered and there is no legal obligation to retain your data, such as would be the case e.g. where a contract had to be subsequently concluded.

Data processing at trade fairs and exhibitions

If you provide us with your contact details at a trade fair or exhibition, e.g. by giving us your business card, we record this data in our CRM system. We use your data to contact you as requested, to establish a business relationship and to send you information material.

Data processing after telephone contact

If you contact us by telephone, we will record your name, your company, your inquiry and, if necessary, your contact details for a callback. Providing the data is necessary for processing and answering your inquiry – if such data is not provided, we would be unable to properly respond to your request. Your data will be used to respond to your inquiry. The legal basis for such processing is provided by points b) and f) of Art. 6 (1) GDPR.

Data processing and usage by Microsoft Teams

We use the service “Microsoft Teams ” of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA (hereinafter “Microsoft Teams”) to conduct online meetings, video conferences and/or webinars.
The use of Microsoft Teams results in the processing of various data. The scope of the processed data depends on the data you provide before or during participation in an online meeting or video conference or webinar. When using Microsoft Teams, data of the communication participants are processed and stored on Microsoft Teams servers.  These data may include, in particular, your login data (name, e-mail address, phone (optional) and password) and meeting data (topic, participant IP address, device information, description (optional)). In addition, visual and auditory contributions of the participants, as well as voice input in chats may be processed.

When processing personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the implementation of pre-contractual measures), point b) of Art. 6 (1) GDPR serves as the legal basis. If you have given us your consent for the processing of your data, the processing is based on point a) of Art. 6 (1) GDPR. Consent given can be revoked at any time with effect for the future. Otherwise, the legal basis for data processing when conducting online meetings, videoconferences or webinars is our legitimate interest pursuant to point f) of  Art. 6 (1) GDPR in the effective conduct of the online meeting, webinar or videoconference. For more information on data usage by Microsoft Teams, please see the Microsoft Teams privacy policy at:

https://privacy.microsoft.com/en-US/privacystatement

Recipients

In special cases it may be necessary for us to process your data throughout the PCC Group. However, data will only be processed within the PCC Group if we have legal permission to do so. This is e.g. the case if other companies of the PCC Group act for us in the context of order processing or if a legitimate interest exists pursuant to point f) of Art. 6 (1) GDPR.

Applicable data protection law grants you comprehensive rights of data subjects (rights of access and intervention) in respect of the data controller (us) for the processing of your personal data. These rights are summarized below:

Right of access:

Pursuant to Art. 15 GDPR, you have in particular a right of access to your personal data as processed by us and a right to the following information: the purposes of the processing; the categories of the personal data concerned; the recipients or categories of recipients to whom your data has been or will be disclosed; the planned storage period or the criteria for determining that period; the existence of the right to request from the data controller rectification or erasure of personal data or restriction of processing of personal data concerning you as the data subject, or to object to such processing; the right to lodge a complaint with a supervisory authority; the origin of your data, where such data were not collected by us from you; the existence of automated decision-making including profiling and, if applicable, any meaningful information on the logic involved, and the scope and intended effects of such processing; your right to be informed of the guarantees provided for in Art. 46 GDPR for the transfer of your data to third countries.

Right of rectification:

Pursuant to Art. 16 GDPR, you have the right to obtain from us without undue delay the rectification of inaccurate or incomplete personal data stored by us.

Right of erasure:

Pursuant to Art. 17 GDPR, you have the right to request the erasure of your personal data, provided the requirements of Art. 17 (1) GDPR are met. However, this right shall in particular not apply if processing is necessary to exercise the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims (the exercise of official authority vested in the data controller).

Right of objection:

IF, IN CONSIDERATION OF THE INTERESTS INVOLVED, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT, LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION AT ANY TIME WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING GROUNDS MERITING PROTECTION FOR SAID PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

Right of restriction of processing:

Pursuant to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data while the accuracy of your data, which you dispute, is being verified, if you refuse the erasure of your data due to unlawful data processing and instead request that the processing of your data be restricted, if you require your data for the assertion, exercise or defense of legal claims after we no longer need said data due to achievement of their purpose, or if you have lodged an objection on the grounds of your particular situation, provided it has not yet been determined whether our legitimate grounds prevail.

Right of notification:

Pursuant to Art. 18 GDPR, if you have exercised your right to have us as the data controller correct or erase your personal data or restrict its processing, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or erasure of the data or restriction on processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed of these recipients.

Right to data portability:

Pursuant to Art. 20 GDPR, you have the right to receive the personal data concerning you and provided by you to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller where this is technically feasible.

Right to withdraw consents granted:

Pursuant to Art. 7 (3) GDPR, you have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will erase the data concerned without delay, unless there is a lawful basis requiring further processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint:

Without prejudice to any other administrative or judicial remedy, you have the right, pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The data protection supervisory authority responsible for us is:

Landesbeauftragter für Datenschutz und Informationsfreiheit Nordrhein-Westfalen[State Officer for Data Protection and Freedom of Information, North Rhine-Westphalia] Postfach 20 04 44
40102 Düsseldorf
Phone: 0049 (0)211/38424-0
Fax: 0049 (0)211/38424-10
Email address: poststelle@ldi.nrw.de

Storage period duration

The duration of the storage of personal data is determined by the respective legal retention period (e.g. retention periods under commercial and tax law). After expiry of this period, the corresponding data will be routinely erased, provided that said data are no longer necessary for the performance or initiation of a contract and/or there is no longer any legitimate interest on our part in pursuing further storage.