TISCHER leisure vehicles

Data Protection

Privacy policy of the Tischer GmbH Freizeitfahrzeuge, Kreuzwertheim

Status as of 28.10.2020

Preliminary remark on data protection

Thank you for visiting our website and for your interest in our company. We take the protection of your personal data very seriously and are committed to protecting your privacy and treating your data confidentially.

By means of this data protection declaration, our company would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed of their rights by means of this privacy policy.

We do not use statistical programs to analyze user behavior.

As the controller, our company has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website.

Nevertheless, Internet-based data transmissions can generally have security gaps (e.g. when communicating by e-mail), so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

1. name and address of the person responsible

The controller within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is the:

Tischer GmbH recreational vehicles
Frankenstrasse 3
97892 Kreuzwertheim
Germany

E-mail:info@tischer-pickup.com
Website: www.tischer-pickup.com

Further information can be found in our imprint.

2. name and address of the data protection officer

The data protection officer of the controller is

Thomas Hoffmann
Frankenstrasse 3
97892 Kreuzwertheim
Germany

Phone: (09342) 91 86-22
E-mail: t.hoffmann@tischer-freizeitfahrzeuge.de
Website: www.tischer-pickup.com

3. scope of the processing of personal data

It is generally possible to use our website without providing any personal data. However, if a data subject wishes to make use of special services of our company via our website, it may be necessary to process personal data.

If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

We also process personal data in the course of our daily business activities. These are communicated to us through inquiries and orders by telephone, e-mail and at our trade fairs and stored for the purpose of (pre-)contractual tasks for as long as is necessary to fulfill the tasks and legal requirements.

The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation (GDPR) and other data protection regulations and the country-specific data protection regulations applicable to our company.

4. legal basis for the processing of personal data

Insofar as we obtain the consent of the data subjects for the processing of personal data, Art. 6 para. 1 lit. a GDPR as the legal basis.

In the processing of personal data necessary for the performance of a contract to which the data subject is party, Art. 6 para. 1 lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation that we have to fulfill, Art. 6 para. 1 lit. c GDPR as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR as the legal basis for processing.

5 Data erasure and storage duration

The personal data of the data subject will be deleted and blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked and deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

6. provision of the website and creation of log files

Each time you visit our website, the provider of our website automatically collects and stores a series of general data and information that your browser automatically transmits in so-called log files. The collection of the following data is technically necessary for us to display our website to you and to ensure stability and security.

The server logs automatically:

  • Information about the browser and version used
  • the user’s operating system and its interface
  • the IP address of the user
  • Date and time of the call
  • Time zone differentiation to Greenwich Mean Time (GMZ)
  • Content of the request (specific page)
  • Access status / HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes

This data is not stored in our system but on the server of our provider. We do not have access to the stored log files and cannot analyze them. This data is also neither evaluated by our provider nor passed on to third parties and is deleted at regular intervals, at the latest after use for the above-mentioned purposes (system security and administration), provided this is not prevented by statutory retention obligations.

This information is required to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

7. Registration

If you wish to use the media library on our website to download image material, the contact details you provide there will only be stored in the event of follow-up questions. The data is entered into an input mask and transmitted to us and stored. It will not be passed on to third parties. The following data is collected as part of the registration process:

  • Company name
  • Name
  • Street Postcode and town
  • Phone number
  • E-mail address

User registration is required to use our media library, as we only pass on the image usage rights to our company’s customers.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is the case for the data collected during the registration process if the registration on our website is canceled or modified.

As a user, you have the option of canceling your registration at any time. You can change or delete the data stored about you at any time.

8. contact possibility via the website

On our website you have the option of contacting us directly by e-mail. If you contact us by e-mail, the data (in particular your e-mail address) will only be stored or used by us for the purpose of communication in the context of your contact. This is done for reasons of abuse prevention. This personal data will not be passed on to third parties.

9. SSL encryption

Our website uses SSL encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from http:// to https:// and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties. The data will only be stored and used by us for the purpose of communicating with you when you contact us.

10. use of cookies

10.1. General information

In addition to the aforementioned data that your server transmits to us, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case us). Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters through which websites and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID. Cookies cannot run programs or transfer viruses to your computer. They serve to make the website more user-friendly and effective overall.

So-called “session cookies” are predominantly used on our website. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them.

We use so-called technically necessary cookies on our website. Technically necessary cookies are cookies that are required for our website to function properly. They help to make our website usable by enabling basic functions such as page navigation and access to secure areas of the website.

If you consent, technically unnecessary cookies are also used in connection with the use of Google Analytics, Google Maps, Facebook, YouTube and Instragram. Further information on this can be found in sections 11, 12, 13, 14 and 15.

By changing the settings in your Internet browser, you can be informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate the setting of cookies in the Internet browser you are using, you may not be able to use all the functions of our website to their full extent.

10.2. More information about the cookies used on this website

The following cookies are used on this website:

10.3. Legal basis

The legal basis for the use of technically necessary cookies is Art. 6 para. 1 p. 1 lit. f GDPR.
The legal basis for the use of technically unnecessary cookies, if any, is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke this at any time with effect for the future.

10.4. Services of the third-party provider Google

If we use the services of the third-party provider Google, the legal basis for the use of these services is your consent in accordance with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 S.1 lit. a, 49 para. 1 p. 1 lit. a GDPR. You will find more detailed information on this in the following paragraphs.

Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

The terms of use are available at: http://www.google.com/analytics/terms/de.html, the overview of data protection at: https://policies.google.com/?hl=de&gl=de, and the privacy policy at: http://www.google.de/intl/de/policies/privacy. There you will also receive further information on your rights in this regard and setting options to protect your privacy.

Reference to the processing of your data collected on this website in the USA by Google:
By consenting to the use of the respective Google services, you also consent in accordance with Art. 6 para. 1 lit. f GDPR. Art. 49 para. 1 p. 1 lit. a GDPR that your data is processed in the USA The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you have not consented to the use of these Google services, the transmission described above will not take place.

12. google analytics

If you have given your consent, we use Google Analytics to regularly analyze and improve our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

Google Analytics is a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. a, Art 49 para. 1 p. 1 lit. a GDPR.

You can revoke your consent at any time with effect for the future by preventing the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout. This procedure must be carried out separately for each browser used. As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent Google Analytics from collecting data by clicking here: Opt-out cookie. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. To prevent Google Analytics from collecting data across different devices, you must opt out on all devices.

This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are further processed in abbreviated form, so that they cannot be traced back to individuals. Insofar as the data collected about you has a personal reference, this is therefore immediately excluded and the personal data is therefore immediately deleted.

You can find more information about Google Analytics at www.google.com/analytics/terms/de.html, overview of data protection: www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.

13. google maps

We use Google Maps on this website. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.

By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. To the best of our knowledge, the following data is collected and transmitted:

– Date and time of the visit to the website in question,
– Internet address or URL of the website accessed,
– IP address,
– Start address entered during route planning.

This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out of your Google account before accessing the Google Maps map. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

The legal basis for the use of Google Maps, provided you have given your prior consent, is Art. 6 para. 1 S.1 lit. a, Art 49 para. 1 S.1 lit. a GDPR. You can revoke your consent at any time with effect for the future. In this case, however, you cannot use the map display. You also have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

You can find the terms of use for Google Maps at: https://www.google.com/intl/de/help/terms_maps/

14 Data protection provisions about the application and use of Facebook

Plug-ins from the social network Facebook are integrated on our website. A social network is a social meeting place operated on the Internet, an online community that generally enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enable the Internet community to provide personal or company-related information.

Among other things, Facebook allows users of the social network to create private profiles, upload photos and network via friend requests.

The operating company of Facebook is Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. If a user lives outside the USA or Canada, Facebook Ireland Ltd, 4 Grand Square, Grand Canal Harbour, Dublin2, Ireland, is responsible for the processing of personal data.

You can recognize the Facebook plug-ins by the Facebook logo or the “Like” button on our site. Each time one of the individual pages of our website is accessed, the Internet browser on the user’s information technology system is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.con/docs/plugins/?locale=deDE.

As part of this technical process, Facebook receives information about which specific subpage of our website is visited by the user.

If the user is logged in to Facebook at the same time, Facebook recognizes which specific subpage of our website is visited each time our website is accessed and for the entire duration of the respective stay on our website.

This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the user. If the user confirms a Facebook button integrated on our website, the user of the pages can link the content of our pages to their Facebook profile. This allows Facebook to associate your visit to our pages with your user account and store this personal data.

We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook.

If you do not want Facebook to be able to associate your visit to our website with your Facebook user account, you can prevent this transmission by logging out of your Facebook account before accessing our website.

The data policy published by Facebook, which is available at https://de-de.facebook.com/about/privacy/ , provides information about the collection, processing and use of personal data by Facebook. It also explains what settings options Facebook offers to protect the user’s privacy. Various applications are also available that make it possible to suppress data transmission to Facebook. You can also use such applications to suppress data transmission to Facebook.

Clicking on the Facebook plug-in on our website is only possible if you expressly confirm this.

The legal basis for the use of the Facebook plug-in is your consent in accordance with Art. Art. 6 para. 1 p. 1 lit. a, Art. 49 para. 1 p. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future.

Information on the processing of your data collected on this website in the USA by Facebook:
By consenting to the use of the Facebook plug-in, you also consent in accordance with Art. Art. 49 para. 1 p. 1 lit. a GDPR that your data is processed in the USA The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you have not consented to the use of the Facebook plug-in, the transmission described above will not take place.

15. application and use of YouTube

If you have given your consent, our website uses plug-ins from YouTube, which is operated by Google. The operating company of YouTube is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC. is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

YouTube is an Internet video portal that enables video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programs as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

We have integrated YouTube videos into our website, which are stored on http://www.YouTube.com and can be played directly from our website. The embedding of YouTube videos serves to give you an impression of our company in moving images or to present products, which is only possible to a limited extent with photographs.

No data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in section 6 be transmitted. By calling up one of the individual pages of our website on which a YouTube component has been integrated (YouTube video), the Internet browser on the user’s information technology system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. YouTube thereby receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in section 6 of this declaration will be transmitted. This takes place regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google (YouTube belongs to Google Inc.), your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising/market research and / or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Clicking on the YouTube plug-in on our website is only possible if you expressly confirm this.

The legal basis for the processing of the data is your consent in accordance with. Art. 6 para. 1 p. 1 lit. a, 49 para. 1 p. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. You also have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the YouTube (Google) privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://google.de/intl/de/policies/privacy. Further information on YouTube can also be found at https://www.youtube.com/yt/about/de/.

Note on the processing of your data collected on this website in the USA by YouTube:
By consenting to the use of the YouTube plug-in, you also consent in accordance with Art. Art. 49 para. 1 p. 1 lit. a GDPR that your data is processed in the USA The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you have not consented to the use of the YouTube plug-in, the transmission described above will not take place.

16. application and use of Instagram

We have integrated the Instagram plug-in on our website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also to redistribute such data on other social networks.

The operating company of Instagram is Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. If a user lives outside the USA or Canada, Facebook Ireland Ltd, 4 Grand Square, Grand Canal Harbour, Dublin2, Ireland, is responsible for the processing of personal data.

Each time you access one of the individual pages of this website, which is operated by us and on which an Instagram component (Insta button) has been integrated, the Internet browser on your information technology system is automatically prompted by the respective Instagram component to download a representation of the corresponding Instagram component. As part of this technical process, Instagram receives information about which specific subpage of our website is visited by the person concerned.

If you are logged in to Instagram at the same time, Instagram recognizes which specific subpage you are visiting each time you access our website and for the entire duration of your visit to our website. This information is collected by the Instagram component and assigned to your respective Instagram account by Instagram. If you click on one of the Instagram buttons integrated on our website, the data and information transmitted with it will be assigned to your personal Instagram user account and stored and processed by Instagram.

Instagram always receives information via the Instagram component that you have visited our website if you are logged in to Instagram at the same time as accessing our website; this occurs regardless of whether you click on the Instagram component or not. If you do not want this information to be transmitted to Instagram, you can prevent it from being transmitted by logging out of your Instagram account before accessing our website.

The legal basis for the processing of the data is your consent in accordance with. Art. 6 para. 1 p. 1 lit. a, 49 para. 1 p. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future.
Further information and the applicable data protection provisions of Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy.

Information on the processing of your data collected on this website in the USA by Instagram
By consenting to the use of the Instagram plug-in, you also consent in accordance with Art. Art. 49 para. 1 p. 1 lit. a GDPR that your data is processed in the USA The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you have not consented to the use of the Instagram plug-in, the transmission described above will not take place.

17. use of Borlabs

Our website uses Borlabs cookie consent technology. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter: Borlabs).

The Borlabs cookie is a technically necessary cookie that we use within the scope of our legal obligations and thus also our legitimate interests in order to obtain your consent to the storage of certain cookies in your browser or on your end device and to document this in accordance with data protection regulations. In particular, the Borlabs cookie stores your consent that you gave when you entered the website for the setting of certain cookies.

The Borlabs cookie only sets technically necessary cookies (borlabs-cookie). When our website is accessed, the following data is transmitted to the Borlabs cookie: Your consent or the revocation of your consent to the setting of cookies, a cookie set by Borlabs Cookie in your browser, the cookie runtime and version, domain and path of the WordPress website and the UID, whereby the UID is a randomly generated ID and not personal information. The Borlabs cookie does not process any personal data.

The legal basis for the use of the Borlabs cookie is Art. 6 para. 1 sentence 1 lit. c, f GDPR.

If you wish to revoke your consent to the setting of certain cookies, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked for your cookie consent again. You can find detailed information on the Borlabs cookie privacy policy at: https://de.borlabs.io/datenschutz/

18 We in the social media

In addition to our website, we are also present on various social media. We are currently represented on Facebook and Instagram.

Please refer to the privacy policy of the respective platform operator for the purpose and scope of data collection and the provisions on the use of your data by the respective platform.

Facebook: https://www.facebook.com/privacy/explanation
Instagram: https://help.instagram.com/155833707900388

19. links to other websites

This website may also contain links to other third-party websites.

We endeavor to only provide links to websites that meet our high standards and share our respect for your privacy, but we do not monitor or control any of the information that is collected when you access a third party link. The operators of third-party websites may handle personal data differently than we do. Accordingly, we accept no responsibility for the content or privacy practices of other websites.

20 Rights of the data subject

In accordance with the GDPR, we hereby inform you of your rights. You have the following rights:

a) Right to confirmation
Each data subject shall have the right granted by the European legislator to obtain from the controller the confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself of this right of confirmation, he or she may, at any time, contact any employee of the controller.

b) Right to information of the data subject (Art. 15 GDPR)

The data subject has the right to obtain from the controller of our company free information about the personal data stored about him/her and a copy of this information. You are also entitled to the following information:

  • the purposes of processing
  • the categories of personal data that are processed
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • if the personal data is not collected from a data subject: All available information about the origin of the data
  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Furthermore, the data subject has a right to information as to whether personal data has been transferred to a third country or an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer.

The controller shall provide a copy of the personal data undergoing processing. For all further copies requested by the data subject, the controller may charge a reasonable fee based on the administrative costs. If the data subject submits the request electronically, the information must be provided in a commonly used electronic format, unless the data subject indicates otherwise. The right to receive a copy must not impair the rights and freedoms of other persons.

c) Right to rectification (Art. 16 GDPR)

The data subject has the right to obtain from us without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

d) Right to erasure (“right to be forgotten”; Art. 17 GDPR)

The data subject shall have the right to obtain from us the erasure of personal data concerning him or her without undue delay. We are also obliged to delete personal data immediately if one of the following reasons applies:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
  • the data subject withdraws consent on which the processing is based according to Article 6(1), or 1 lit. a GDPR or Article 9 para. 2 lit. a GDPR, and there is no other legal basis for the processing
  • the data subject submits in accordance with Article 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 (1) GDPR. 2 GDPR to object to the processing
  • the personal data have been processed unlawfully
  • the deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject
  • the personal data have been collected in relation to services offered by the

Information society pursuant to Article 8 para. 1 GDPR is collected.

Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

Paragraphs 1 and 2 do not apply if the processing is necessary

  • to exercise the right to freedom of expression and information
  • for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • for reasons of public interest in the area of public health in accordance with Article 9 para. 2 lit. h and lit. i GDPR and Article 9 (3) GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 (1) GDPR. 1 GDPR to the extent that the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
  • for the assertion, exercise or defense of legal claims.

e) Right to restriction of processing (Art. 18 GDPR)

The data subject has the right to obtain from us restriction of processing where one of the following applies:

  • the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data
  • the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead
  • the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims, or
  • the data subject objects to the processing pursuant to Article 21 para. 1 GDPR until it has been established whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted pursuant to paragraph 1, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

A data subject who has obtained restriction of processing shall be informed by the controller before the restriction of processing is lifted.

f) Right to data portability (Art. 20 GDPR)

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where

  • the processing is based on consent pursuant to Article 6 para. 1 lit. a GDPR or Article 9 para. 2 lit. a GDPR or on a contract pursuant to Article 6 para. 1 lit. b GDPR is based and
  • the processing is carried out using automated procedures.

In exercising the right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17 GDPR. This right does not apply to processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

The right referred to in paragraph 2 shall not adversely affect the rights and freedoms of other persons.

g) Right to object (Art. 21 GDPR)

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Article 6(1) lit. e and lit. f GDPR takes place, to file an objection.

In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.

h) Right to withdraw consent under data protection law (Art. 7, para. 3 GDPR)

Any person affected by the processing of personal data has the right granted by the European legislator to withdraw consent to the processing of personal data at any time.

i) Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You have the right to lodge a complaint with the competent data protection authority at any time. If you wish to make use of your right of appeal, you can do so with the following authority:

The Bavarian State Commissioner for Data Protection (BayLfD)

Prof. Dr. Thomas Petri
P.O. Box 22 12 19, 80502 Munich
Wagmüllerstraße 18, 80538 Munich

Phone: 089 212672-0
Fax: 089 212672-50
poststelle@datenschutz-bayern.de

21 Data protection for applications in the application process

We collect and process the personal data of applicants for the purpose of handling the application process. Processing can also be carried out electronically. This is particularly the case if an applicant submits the relevant application documents electronically, for example by e-mail. If we conclude an employment contract with the applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be deleted immediately after the rejection decision, provided that no other legitimate interests stand in the way of deletion. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

22. data security and amendment of the privacy policy

The transmission of information via the Internet is not completely secure, therefore we cannot guarantee the security of the data transmitted to our website via the Internet despite the protection of our website and our other facilities with which data is transmitted to us through appropriate technical and organizational measures against loss of availability, confidentiality or integrity. In this respect, reference is also made to Section 9 of this Privacy Policy.

We reserve the right to amend this privacy policy in part or in full at any time with effect for the future. The current version of our privacy policy can be viewed on our website.