DATA PROTECTION

Data Privacy Policy of Tischer GmbH Freizeitfahrzeuge, Kreuzwertheim

Last update: October 2020

Preliminary remark on data protection

We welcome you to our website and are very happy to see that you are interested in our company. We take the protection of your personal data very seriously and we undertake to protect your privacy and to keep your data confidential.

With this Data Privacy Policy, our company wants to inform the public about the type, scope and purpose of the personal data collected, used and processed by us. In addition, this Data Privacy Policy is also intended to inform data subjects on their rights.

We do not make use of any statistical programs for analysing user behaviour.

As the controller, our company has implemented numerous technical and organisational measures to ensure as complete a protection as possible of the personal data processed via this website.

However, Internet-based data transmissions can generally have security gaps (e.g. in e-mail communication) so that absolute protection cannot be guaranteed. Therefore, every data subject is free to use other means, e.g. a phone, to provide us with personal data.

Controller’s name and address

The controller in terms of Art. 4 no. 7 of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection provisions is:

Tischer GmbH Freizeitfahrzeuge

Frankenstraße 3

97892 Kreuzwertheim

Germany

E-mail: info@tischer-pickup.com

Online: www.tischer-pickup.com

You can find further information in our legal notice.

Data Protection Officer’s name and address

The controller’s Data Protection Officer is:

Thomas Hoffmann

Frankenstraße 3

97892 Kreuzwertheim

Germany

Phone no.: (09342) 91 86-22

E-mail: t.hoffmann@tischer-freizeitfahrzeuge.de

Online: www.tischer-pickup.com

Scope of personal data processing

Our web pages can generally be used without entering any personal data. However, if a data subject wants to use special services offered by our company via our website, the processing of personal data may become necessary.

If the processing of personal data is necessary and if there is no legal basis for such processing, we shall always obtain the data subject’s consent.

We also process personal data in the course of our day-to-day business activities. Such data are provided to us through enquiries and orders by phone, e-mail or at our trade fairs and stored for the purpose of (pre-)contractual tasks until the tasks as well as the statutory provisions are fulfilled.

Personal data such as name, address, e-mail address or phone number of a data subject are always processed in compliance with the General Data Protection Regulation (GDPR) and other data protection provisions as well as the country-specific data protection regulations that apply to our company.

Legal basis for the processing of personal data

If we obtain the consent of a data subject for the processing of personal data, point (a) of Art. 6(1) of the GDPR serves as the legal basis.

Point (b) of Art. 6(1) of the GDPR is the legal basis for processing personal data to fulfil a contract to which the data subject is a party. This also applies to processing operations required to implement pre-contractual measures.

Where personal data need to be processed to fulfil a legal obligation which we need to fulfil, point (c) of Art. 6(1) of the GDPR serves as the legal basis.

If vital interests of the data subject or of another natural person require the processing of personal data, point (d) of Art. 6(1) of the GDPR serves as the legal basis.

If the processing is required to protect a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not override such legitimate interest, point (f) of Art. 6(1) of the GDPR serves as legal basis for the processing.

Erasure of data and storage period

The data subject’s personal data are erased and blocked as soon as the purpose of storage no longer applies. Personal data may also be stored if this is stipulated by the European or national legislator in legal regulations, laws or other provisions adopted by the Union to which the controller is subject. The data are also blocked and erased when a storage period stipulated by the stated standards expires, unless the further storage of the data is required for the conclusion or execution of a contract.

Provision of the website and creation of log files

Each time our website is accessed, our website provider automatically collects and saves a number of general data and information your browser automatically transmits in log files. The collection of the following data is technically necessary in order to be able to display our website to you and to guarantee its stability and security.

The server automatically records:

information about the browser used, language and version
the user’s operating system and interface
the user’s IP address
date and time of access
time zone difference to Greenwich Mean Time (GMT)
content of the request (specific page)
access status/HTTP status code
respectively transmitted data volume
website from which the request comes

The legal basis for the processing is point (f) of Art. 6(1) of the GDPR.

These data are not stored in our system, but on our provider’s server. We do not have access to the stored log files and cannot evaluate them. These data are neither evaluated by our provider nor passed on to third parties. They are erased on a regular basis, and after their use for the aforementioned purposes (system security and administration) at the latest, unless this is opposed by statutory retention obligations.

This information is required to provide law enforcement agencies with necessary information for prosecution in case of a cyber-attack.

Registration

If you wish to use our website’s media library in order to download visual material, the contact details you enter will only be saved and stored in case follow-up questions arise. The data are entered in an input screen, transmitted to us and saved. They are not passed on to third parties. The following data are collected during the registration process:

Company name

Name

Street address, postcode and city/town

Phone number

E-mail address

The user is required to register for the use of our media library, as we pass on the right to use our images only to customers of our company.

The data are erased as soon as they are no longer required to meet the purpose of their collection. This is the case for the data collected during the registration process if the registration on our website is cancelled or changed.

As a user, you can cancel the registration at any time. You can have the data stored about you changed or erased at any time.

Contact via the website

You can contact directly us by e-mail on our website. If you contact us by e-mail, we merely store or use the data (particularly your e-mail address) for the purpose of communicating with you after you contacted us. This is supposed to prevent abuse. These personal data are not passed on to third parties.

If you contact us with the intention of concluding a contract with us, the legal basis is point (f) of Art. 6(1) of the GDPR and, in addition, point (b) of Art. 6(1) of the GDPR.

SSL encryption

For reasons of security and for protecting the transmission of confidential contents, our website uses SSL encryption. You can identify an encrypted connection by the change of the browser’s address line from http:// to https:// and by the lock symbol in your browser line. If SSL encryption is enabled, third parties cannot read the data you transmit to us. We only store and use such data for the purpose of communicating with you after you have contacted us.

Use of cookies
1. General information

In addition to the aforementioned data your server transmits to us, cookies are stored on your computer when you use our website. Cookies are small text files that are saved and stored on your hard drive and allocated to the browser you use. They provide the body placing the cookie (in this case, us) with certain information. Cookies are used by numerous websites and servers. Many cookies include a cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which websites and servers can be allocated to the specific Internet browser in which the cookie was saved. This allows visited websites and servers to differentiate the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognised and identified using the unique cookie ID. Cookies are not able to execute programs or introduce viruses to your computer. They serve to make the Internet service more user-friendly and effective overall.

Our website mainly uses “session cookies”. These are automatically deleted after you leave the website. Other cookies remain stored on your device until you delete them.

We use technically necessary cookies on our website. Technically necessary cookies are cookies that are required for our website to function correctly. They help to make our website usable by enabling basic functions such as page navigation and access to secure areas of the website.

If you consent to this, cookies that are not technically necessary may be used in connection with the use of Google Analytics, Google Maps, Facebook, YouTube and Instagram. You can find more information in items 11, 12, 13, 14 and 15.

By changing the settings in your Internet browser, you can be informed about the use of cookies and only allow them in individual cases, exclude their acceptance generally or only in specific cases and activate their automatic deletion when you close the browser. If you deactivate cookies in the Internet browser you use, not all functions of our website may be fully usable under certain circumstances.

More information on the cookies used on this website

The following cookies are used on this website:

Name	Function	Expiry	Type	Recipient

Legal basis

The legal basis for the use of technically necessary cookies is point (f) of Art. 6(1) of the GDPR.

The legal basis for the use of cookies not technically required is, where given, your consent according to point (a) of Art. 6(1) of the GDPR. You can revoke your consent at any time with effect for the future.

Services of the third-party provider Google

If we use services of the third-party provider Google, the legal basis for the use of such services is your consent according to point (a) of Art. 6(1), point (a) of Art. 49(1) sentence 1 of the GDPR. You can find more information below.

Information of the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

The terms of use can be accessed at: http://www.google.com/analytics/terms/de.html, the data protection overview can be accessed at: https://policies.google.com/?hl=de&gl=de, and the privacy policy can be accessed at: http://www.google.de/intl/de/policies/privacy. There you can also find further information about your related rights and setting options to protect your privacy.

Information on the processing of your data collected on this website in the USA by Google:

By consenting to the use of the relevant Google services, you consent at the same time to the processing of your data in the USA point (a) of Art. 49(1) sentence 1 of the GDPR. The European Court of Justice regards the USA as a country with insufficient data protection according to EU standards. There is the particular risk that your data may be processed by US authorities for control and monitoring purposes, possibly even without any means of redress. If you have not consented to the use of such Google services, the transmission described above does not take place.

Google Analytics

If you have given your consent to this, we use Google Analytics to regularly analyse and improve our website. We can use the statistics obtained to improve our service and make it more interesting for you as a user.

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help Google analyse how you use the website. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on the website, your IP address will first be shortened by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing the website operator with other services related to website activity and Internet usage.

The IP address conveyed by your browser within the scope of Google Analytics will not be combined with any other data held by Google.

The legal basis for the use of Google Analytics is point (a) of Art. 6(1), point (a) of Art. 49(1) sentence 1 of the GDPR.

You may revoke your consent at any time with effect for the future by changing the settings in your browser software to prevent the placing of cookie; however, please note that if you do so, you may not be able to use the full functionality of this website.

Furthermore, you can prevent Google’s collection and processing of the data created by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available at tools.google.com/dlpage/gaoptout. This procedure must be carried out separately for each browser used. As an alternative to the browser add-on, particularly with browsers on mobile devices, you can prevent Google Analytics from collecting data by clicking here: Opt-out cookie. The opt-out cookie only works for this browser and only for our website and is stored on your device. In order to prevent Google Analytics from collecting data across different devices, you must opt-out on all devices.

This website uses Google Analytics with the extension “anonymizeIp()”. This allows IP addresses to be processed in a shortened form, thus ruling out the possibility of tracing the addresses to a specific person. If the data collected about you contain a clear reference to you as a person, this will be eliminated immediately and the personal data will thus be immediately erased.

You can find more information on Google Analytics at www.google.com/analytics/terms/de.html, data protection overview: www.google.com/intl/de/analytics/learn/privacy.html, and privacy policy: http://www.google.de/intl/de/policies/privacy.

Google Maps

This website uses the services provided by Google Maps. By using these services, we can display to you interactive maps directly on the website and enable you to easily use the map function.

When you visit the website, Google is notified that you have accessed the corresponding sub-page of our website. As far as we are aware, the following data are collected and transmitted:

date and time of access to the relevant website;
Internet address or URL of the accessed website;
IP address;
start address entered for route planning.

This happens irrespective of whether Google provides a user account to which you are logged in or not. If you have logged into Google, your data will be directly associated with your account. If you prefer these data not to be associated with your Google profile, you need to log out of your Google account before accessing the Google Maps function. Google stores your data as user profiles and uses them for the purpose of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for non-logged-in users) for the provision of targeted advertising and to provide other users of the social network with information on your activities on our website. You are entitled to object to the creation of these user profiles; to exercise this right, you need to contact Google.

The legal basis for the use of Google Maps is, if you have given your prior consent, point (a) of Art. 6(1), point (a) of Art. 49(1) sentence 1 of the GDPR. You can revoke your consent at any time with effect for the future. If you do so, however, you will no longer be able to use the maps. In addition, you are entitled to object to the creation of these user profiles; to exercise this right, you need to contact Google.

The terms of use for Google Maps can be found at https://www.google.com/intl/de/help/terms_maps/.

Use of Facebook

Plug-ins of the social network Facebook are integrated on our website. A social network is an Internet-based social meeting place, an online community that usually enables the users to communicate and interact in the virtual space. A social network can serve as a platform for exchanging opinions and experiences, or it enables the Internet community to provide personal or company-related information.

Facebook enables the users of the social network e.g. to create private profiles, upload photos and network via friend requests.

Facebook is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a user lives outside the USA or Canada, Facebook Ireland Ltd., 4 Grand Square, Grand Canal Harbour, Dublin2, Ireland, is responsible for the processing of personal data.

You can identify the Facebook plug-ins by the Facebook logo or the “Like” button on our page. Each time a user accesses one of the sub-pages of our website, the Internet browser on the user’s information technology system is automatically prompted by the respective Facebook component to download a display of the relevant Facebook component from Facebook. A comprehensive overview of all Facebook plug-ins can be found at https://developers.facebook.con/docs/plugins/?locale=deDE.

In the course of this technical procedure, Facebook is informed about the specific sub-page of our website that the user visits.

If the user is logged into Facebook at the same time, Facebook can see with each access to our website and during the entire duration of the relevant stay on our website what specific sub-page of our website is visited.

This information is collected by the Facebook component and allocated to the Facebook account of the user. If the user activates a Facebook button integrated on our website, the user of the pages can link the contents of our pages on his/her Facebook profile. This means that Facebook can allocate your visit to our pages to your user account and store these personal data.

Please note that we, as the provider of the pages, do not obtain any information on the content of the transmitted data or their use by Facebook.

If you do not wish Facebook to be able to allocate your visit to our pages to your Facebook user account, you can prevent the transmission by logging out of your Facebook account before you visit our website.

The privacy statement published by Facebook, which can be accessed at https://de-de.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. Furthermore, it explains what setting options Facebook provides to protect the user’s privacy. In addition, various applications are available that enable the suppression of data transmission to Facebook. You can use such applications to suppress data transmissions to Facebook as well.

It is only possible to click the Facebook plug-in on our website if you expressly confirm this.

The legal basis for the use of the Facebook plug-in is your consent according to point (a) of Art. 6(1), point (a) of Art. 49(1) sentence 1 of the GDPR. You can revoke your consent at any time with effect for the future.

Information on the processing of your data collected on this website in the USA by Facebook:

By consenting to the use of the Facebook plug-in, you consent at the same time to the processing of your data in the USA point (a) of Art. 49(1) sentence 1 of the GDPR. The European Court of Justice regards the USA as a country with insufficient data protection according to EU standards. There is the particular risk that your data may be processed by US authorities for control and monitoring purposes, possibly even without any means of redress. If you have not consented to the use of the Facebook plug-in, the transmission described above does not take place.

Use of YouTube

If you have given your consent to this, our website uses plug-ins of YouTube, a website operated by Google. YouTube is operated by YouTube LLC., 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC. is a subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

YouTube is an Internet video portal that allows video publishers to post video clips and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes as well as music videos, trailers or videos made by users themselves can be viewed via the Internet portal.

We have integrated YouTube videos on our website that are stored on http://www.YouTube.comand can be played directly from our website. The embedded YouTube videos allow you to get an impression of our company through moving images or be presented with products, which is only possible to a limited extent with photos.

If you do not play the videos, no data about you as a user are transmitted to YouTube. Only if you play the videos, the data stated in item 6 are transmitted. Upon accessing one of the sub-pages of our website where a YouTube component has been integrated (YouTube video), the Internet browser on the user’s information technology system is automatically prompted by the YouTube component in question to download a display of the corresponding YouTube component from YouTube. YouTube is thus informed that you have accessed the corresponding sub-page of our website. In addition, the data listed in item 6 of this policy are transmitted. This happens irrespective of whether YouTube provides a user account to which you are logged in or not. If you have logged into Google (YouTube is part of Google Inc.), your data will be directly associated with your account. If you prefer these data not to be associated with your YouTube profile, you need to log out before activating the button. YouTube stores your data as user profiles and uses them for the purpose of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for non-logged-in users) for the provision of targeted advertising and to provide other users of the social network with information on your activities on our website. You are entitled to object to the creation of these user profiles; to exercise this right, you need to contact YouTube.

It is only possible to click the YouTube plug-in on our website if you expressly confirm this.

The legal basis for the processing of the data is your consent according to point (a) of Art. 6(1), point (a) of Art. 49(1) sentence 1 of the GDPR. You can revoke your consent at any time with effect for the future. In addition, you are entitled to object to the creation of these user profiles; to exercise this right, you need to contact Google.

You can find further information on the purpose and extent of data collection and processing by YouTube in the YouTube (Google) privacy statement. There you can also find further information about your rights and setting options to protect your privacy: https://google.de/intl/de/policies/privacy. More information on YouTube can also be found at https://www.youtube.com/yt/about/de/.

Information on the processing of your data collected on this website in the USA by YouTube:

By consenting to the use of the YouTube plug-in, you consent at the same time to the processing of your data in the USA point (a) of Art. 49(1) sentence 1 of the GDPR. The European Court of Justice regards the USA as a country with insufficient data protection according to EU standards. There is the particular risk that your data may be processed by US authorities for control and monitoring purposes, possibly even without any means of redress. If you have not consented to the use of the YouTube plug-in, the transmission described above does not take place.

Use of Instagram

We have integrated the Instagram plug-in on your website. Instagram is a service to be qualified as an audio-visual platform, which allows users to share photos and videos, as well as disseminate such data in other social networks.

Instagram is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a user lives outside the USA or Canada, Facebook Ireland Ltd., 4 Grand Square, Grand Canal Harbour, Dublin2, Ireland, is responsible for the processing of personal data.

Each time you access one of the sub-pages of this website which is operated by us and on which an Instagram component (Insta button) has been integrated, the Internet browser on your information technology system is automatically prompted by the respective Instagram component to download a display of the relevant Instagram component. In the course of this technical procedure, Instagram is informed about the specific sub-page of our website that the data subject visits.

If you are logged into Instagram at the same time, Instagram can see with each access to our website by you and during the entire duration of the relevant stay on our website what specific sub-page you visit. This information is collected by the Instagram component and allocated by Instagram to your respective Instagram account. If you activate one of the Instagram buttons that are integrated on our website, the data and information so transmitted are allocated to your personal Instagram user account and stored and processed by Instagram.

Instagram is always informed via the Instagram component that you have visited our website if you are logged into Instagram at the time you access our website; this occurs regardless of whether you click on the Instagram component or not. Should you not wish that this information be transmitted to Instagram, you can prevent such transmission by logging out of your Instagram account before you visit our website.

You can find further information and the applicable Instagram privacy policy at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy.

Information on the processing of your data collected on this website in the USA by Instagram:

By consenting to the use of the Instagram plug-in, you consent at the same time to the processing of your data in the USA point (a) of Art. 49(1) sentence 1 of the GDPR. The European Court of Justice regards the USA as a country with insufficient data protection according to EU standards. There is the particular risk that your data may be processed by US authorities for control and monitoring purposes, possibly even without any means of redress. If you have not consented to the use of the Instagram plug-in, the transmission described above does not take place.

Use of Borlabs

Our website uses the Borlabs cookie consent technology. This technology is provided by Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter referred to as “Borlabs”).

The Borlabs cookie is a technically necessary cookie that we use to comply with our legal obligations and thus also within our legitimate interests in order to obtain your consent to the storage of certain cookies on your browser and/or on your device and to record such consent in compliance with the applicable data protection provisions. The cookie stores e.g. your consents given when accessing the website for the use of specific cookies.

Only technically necessary cookies (borlabs-cookie) are used by the Borlabs cookie. When our website is accessed, the following data are transmitted to the Borlabs cookie: Your consent and/or the revocation of your consent to the use of cookies, a cookie placed by the Borlabs cookie on your browser, the cookie lifetime and version, the domain and path of the WordPress website and the UID; the UID is a randomly generated ID and does not constitute a piece of personal information. The Borlabs cookie does not process any personal data.

The legal basis for the use of the Borlabs cookie is point (c) and point (f) of Art. 6(1) of the GDPR.

If you wish to revoke the consents to the use of specific cookies, please simply delete the relevant cookie in your browser. If you re-access/re-load the website, you will be asked for your consent to the placement of cookies again. You can find detailed information on the Borlabs cookie data protection provisions at https://de.borlabs.io/datenschutz/

Our company in social media

In addition to our website, we can be found in various social media. We can currently be found on Facebook and Instagram.

Please refer to the data privacy policy of the relevant operator for the purpose and scope of data collection and the provisions regarding the use of your data by the relevant platform.

Facebook: https://www.facebook.com/privacy/explanation

Instagram: https://help.instagram.com/155833707900388

Links to other websites

This website may include links to third-party websites.

We make every effort to only include links to such websites that meet our high standards and share our respect for your privacy; however, we do not monitor and/or control any information collected when you follow a link to third-party websites. Operators of third-party websites may handle personal data in a different way. Accordingly, we do not accept any responsibility for the content or data protection procedures of other websites.

Rights of data subjects

We hereby inform you about your rights in accordance with the GDPR. You have the following rights:

Right to confirmation

Each data subject has the right granted by the European regulator to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wants to exercise this right to confirmation, he or she can contact a staff member of the controller at any time.

Right of access by the data subject (Art. 15 of the GDPR)

The data subject has the right to request from the controller cost-free access to the personal data stored about him or her and a copy of such data. Furthermore, you are entitled to access the following information:

the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
the right to lodge a complaint with a supervisory authority;
where the personal data are not collected from the data subject, any available information as to their source;
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Furthermore, the data subject has the right to be informed about whether personal data have been transferred to a third country or to an international organisation. If this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer.

The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form. The right to obtain a copy shall not adversely affect the rights and freedoms of others.

Right to rectification (Art. 16 of the GDPR)

The data subject shall have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure (‘right to be forgotten’; Art. 17 of the GDPR)

The data subject shall have the right to obtain from us the erasure of personal data concerning him or her without undue delay. We shall furthermore be obliged to erase personal data without undue delay where one of the following grounds applies:

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
the data subject withdraws the consent on which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing;
the data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR
the personal data have been unlawfully processed;
the personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
the personal data have been collected in relation to the offer of

information society services referred to in Article 8(1) of the GDPR.

Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:

for exercising the right of freedom of expression and information;
for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) of the GDPR as well as Article 9(3) of the GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) of the GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
for the establishment, exercise or defence of legal claims.

Right to restriction of processing (Art. 18 of the GDPR)

The data subject shall have the right to obtain from us restriction of processing where one of the following applies:

the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
the data subject has objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted under paragraph 1, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

A data subject who has obtained restriction of processing shall be informed by the controller before the restriction of processing is lifted.

Right to data portability (Art. 20 of the GDPR)

The data subject has the right to receive the personal data concerning him or her, which he or she has provided to us, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

the processing is based on consent pursuant to point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2) of the GDPR or on a contract pursuant to point (b) of Article 6(1) of the GDPR; and
the processing is carried out by automated means.

In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17 of the GDPR. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

The right referred to in paragraph 2 shall not adversely affect the rights and freedoms of others.

Right to object (Art. 21 of the GDPR)

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on points (e) or (f) of Article 6(1) of the GDPR.

If an objection is raised, we shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Right to withdraw a consent given under data protection laws (Art. 7(3) of the GDPR)

Every data subject affected by the processing of personal data shall have the right granted by the European regulator to withdraw his or her consent to the processing of personal data at any time.

Right to lodge a complaint with a supervisory authority (Art. 77 of the GDPR)

You shall have the right to lodge a complaint with the competent data protection authority at any time. Should you wish to exercise this right, you can lodge your complaint with the following authority:

Der Bayerische Landesbeauftragte für den Datenschutz (BayLfD)

Prof. Dr. Thomas Petri

P.O. box 22 12 19, 80502 Munich, Germany

Wagmüllerstraße 18, 80538 Munich, Germany

Phone no.: 089 212672-0

Fax: 089 212672-50

poststelle@datenschutz-bayern.de

Data protection regarding applications during an application procedure

We collect and process the personal data of applicants in order to carry out the application procedure. The processing may also be carried out electronically. This applies in particular if an applicant submits his or her application documents electronically, e.g. by e-mail. If we conclude an employment contract with the applicant, the transmitted data are stored for the purpose of managing the employment in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents are erased immediately after the decision to reject the application was made, unless this is opposed by other legitimate interests. Another legitimate interest within this meaning would be, for example, a burden of proof in proceedings according to the German General Act on Equal Treatment (AGG).

Data security and modification of the Data Privacy Policy

The transmission of information via the Internet is not completely secure; we can therefore not guarantee that data transmitted via the Internet to our website are protected, even though we protect our website and our other facilities by means of which data are transmitted to us by corresponding technical and organisational measures against the loss of availability, confidentiality and integrity. Additional reference is made to item 9 of this Data Privacy Policy.

We reserve the right to modify this Data Privacy Policy, in whole or in part, at any time with effect for the future. The latest version of our Data Privacy Policy can be found on our website.