Privacy policy

Any data subject may contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

1. Facebook-Plugins (Like & Share-Button)
   

   Plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our website ("Facebook"). You can recognize the Facebook plugins by the Facebook logo or the "Like" button ("Like") on our website. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

   To protect your data when visiting our website, the Facebook plugins are not integrated into the page without restriction, but only using an HTML link (so-called "Shariff" solution from it). This integration ensures that when you call up a page of our website that contains such plugins, no connection is yet established with Facebook's servers. Only when you click on the Facebook button does a new browser window open and call up the Facebook page where you can click the Like or Share button.

   Information about the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights in this regard and settings options for protecting your privacy, can be found in the Facebook privacy policy at: https://de-de.facebook.com/privacy/explanation.

2. Instagram Plugin
   

   Functions of the Instagram service are integrated on our pages. Instagram Inc. offers these functions, 1601 Willow Road, Menlo Park, CA 94025, USA, ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera". An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges

   To protect your data when visiting our website, the Instagram plugins are not integrated into the page without restriction, but only using an HTML link (so-called "Shariff" solution from it). This integration ensures that when you call up a page of our website that contains such plugins, no connection is yet established with the servers of Instagram. Only when you click the Instagram button a new browser window open and call up the Instagram page.

   Information about the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your rights in this regard and settings options for protecting your privacy, can be found in the Instagram privacy policy at: https://instagram.com/about/legal/privacy/.

3. LinkedIn Plugin
   

   Our website uses the functions of the LinkedIn network. LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn") is the provider.

   To protect your data when visiting our website, the LinkedIn plugins are not integrated into the page without restriction, only using an HTML link (so-called "Shariff" solution from c't). This integration ensures that when you call up a page of our website that contains such plugins, no connection is yet established with the servers of LinkedIn. Only when you click the LinkedIn button, a new browser window opens and calls up the LinkedIn page.

   Information about the purpose and scope of data collection and the further processing and use of data by LinkedIn, as well as your rights in this regard and settings options for protecting your privacy, can be found in the LinkedIn privacy policy at: https://www.linkedin.com/legal/privacy-policy.

4. Twitter Plugin
   

   Our website uses the functions of the Twitter service. Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA ("Twitter") is the provider.

   To increase your data protection when visiting our website, the Twitter plugins are not integrated into the page without restriction, but only using an HTML link (so-called "Shariff" solution from c't). This integration ensures that when you call up a page of our website that contains such plugins, no connection is yet established with the servers of Twitter. Only when you click on the Twitter button does a new window open in your browser and call up the Twitter page.

   When using Twitter and the "Re-Tweet" function, websites you visit are linked to your Twitter account and published in your Twitter feed. This involves the transmission of data to Twitter. We do not know the content of the transmitted data or the use of this data by Twitter. Details can be found in the privacy policy of Twitter: https://twitter.com/privacy.

   You can change your privacy settings on Twitter: https://twitter.com/account/settings

   For more information about the purpose and scope of data collection and the further processing and use of data by Twitter, as well as your rights in this regard and settings options for protecting your privacy, please refer to Twitter's privacy policy at: https://twitter.com/privacy.

5. XING Plugin
   

   Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany ("XING").

   To protect your data when visiting our website, the XING plugins are not integrated into the page without restriction, but only using an HTML link (so-called "Shariff" solution from it). This integration ensures that when you call up a page of our website that contains such plugins, no connection is yet established with the XING servers. Only when you click on the XING button does a new window open in your browser and call up the XING page where you can click the share button.

   For further information on data protection and the XING Share button, please refer to the XING privacy policy at: https://www.xing.com/app/share?op=data_protection

6. YouTube Plugin
   

   Our website uses plugins from YouTube to integrate and display video content. The video portal provider is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA ("YouTube").

   To protect your data when visiting our website, the YouTube plugins are not integrated into the page without restriction, but only using an HTML link (so-called "Shariff" solution from it). This integration ensures that when you call up a page of our website that contains such plugins, no connection is yet established with YouTube's servers; only when you click on the YouTube button does a new window of your browser open and call up the YouTube page where you can press the Like button.

   Information on the purpose and scope of data collection and the further processing and use of data by YouTube, as well as your rights in this regard and settings options for protecting your privacy, can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

The use of data that is automatically collected during your visit to our website is only for the purposes stated above. The data will not be used for any other purpose.

We assure you that we will not pass on your personal data to third parties unless we are legally obliged to do so, or you have given us your prior consent.

With regard to the personal data concerning you, as a data subject, you have the following rights vis-à-vis the data controller in accordance with the statutory provisions:

1. Right of withdrawal
   

   Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to revoke your consent to the processing of data at any time with effect for the future following Art. 7 (3) DSGVO. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation. Storage of data for billing and accounting purposes remains unaffected by a revocation.

2. Right to information
   

   You have the right to request confirmation from us, under Article 15 of the GDPR, as to whether we are processing personal data concerning you. If such processing is taking place, you have the right to obtain information about your data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the intended storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, a complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed about which guarantees exist following Art. 46 DSGVO when your data is transferred to third countries.

3. Right to rectification
   

   You have the right to follow Art. 16 DSGVO, to request at any time the immediate correction of inaccurate personal data concerning you and/or the completion of your incomplete data.

4. Right to deletion
   

   You have the right to request the deletion of your data following Art. 17 DSGVO, provided that one of the following reasons applies:

   1. Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;

   2. You revoke your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) DSGVO, and there is no other legal basis for the processing;

   3. You object to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR;

   4. The personal data have been processed unlawfully;

   5. The deletion of personal data is necessary for compliance with a legal obligation under Union law or the law of the Member State to which we are subject;

   6. The personal data was collected in relation to information society services offered pursuant to Art. 8 (1) DSGVO;

   However, this right does not exist insofar as the processing is necessary:

   1. to exercise the right to freedom of expression and information;

   2. for compliance with a legal obligation that requires processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;

   3. for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) DSGVO;

   4. for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes according to Article 89(1) of the GDPR, insofar as the right of the data subject is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or
      for the assertion, exercise, or defense of legal claims.

   If we have made your data public and we are obliged to erase it following the above, we shall take reasonable steps, including technical measures, to inform data controllers processing the personal data that you, as the data subject, have requested that they erase all links to your data or copies or replications of such personal data, taking into account the available technology and the cost of implementation.

5. Right to restriction of processing
   

   You have the right to request the restriction of processing (blocking) of your data following Art. 18 DSGVO. To do this, you can contact us any time at the address in the imprint. The right to restriction of processing exists in the following cases:
   

   1. If you dispute the accuracy of your data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your data.
      
   2. If the processing of your data happened/happens unlawfully, you might request the restriction of the data processing instead of the deletion.
      
   3. If we no longer need your data, but you need it to exercise, defend or enforce legal claims, you have the right to request the restriction of processing your data instead of deletion.
      
   4. If you have objected according to Art. 21 (1) DSGVO, balancing your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your data.
      

   If you have restricted the processing of your data, this data may - apart from being stored - only be processed with your consent or for the assertion, exercise, or defense of legal claims or the protection of the rights of another natural or legal person or for reasons of a significant public interest of the European Union or a Member State.

6. Right to information
   

   If you have asserted the right to rectification, erasure, or restriction of processing against us, we are obliged to notify all recipients to whom your data have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. Following Art. 19 DSGVO, you can be informed about these recipients upon request.

7. The right not to be subject to a decision based solely on automated processing, including profiling.
   

   You have the right, following Article 22 of the GDPR, not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you.

   This does not apply if the decision.

   1. is necessary for the conclusion or fulfillment of a contract between you and us,
      
   2. is permitted by the legislation of the Union or the Member States to which the controller is subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
      
   3. is done with your express consent.
      

   However, decisions in the cases mentioned in (a) to (c) may not be based on special categories of personal data according to Article 9(1) of the GDPR unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

   In the cases referred to in (a) and (c), we will take reasonable steps to safeguard your rights, freedoms, and legitimate interests, including at least the right to obtain the intervention of a person responsible for expressing your point of view and contest the decision.

8. Right to data portability
   

   If the processing is based on your consent, according to Art. 6(1)(a) DSGVO or Art. 9(2)(a) DSGVO or on a contract according to Art. 6(1)(b) DSGVO and is carried out with the help of automated processes, you have the right, according to Art. 20 DSGVO, to receive the data that you have provided to us in a structured, common and machine-readable format and to transfer it to another controller or to request that it be transferred to another controller, insofar as this is technically feasible.

9. Right of objection
   

   Insofar as we base the processing of your data on the balance of interests according to Art. 6 (1) lit. f DSGVO, you have the right to object to processing your data at any time for reasons arising from your particular situation; this also applies to profiling based on this provision. This privacy policy can find the legal basis on which processing is based. If you object, we will no longer process your data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or the processing serves the purpose of asserting, exercising, or defending legal claims (objection according to Art. 21(1) DSGVO).

   If your data is processed for direct marketing, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your data will no longer be used for direct marketing (objection according to Art. 21 (2) DSGVO).

   In connection with the use of information society services - notwithstanding Directive 2002/58/EC - you have the possibility to exercise your right to object through automated procedures using technical specifications.

10. Right of appeal to the competent supervisory authority according to Art. 77 DSGVO
    

    In the event of breaches of the GDPR, data subjects shall have a right of appeal to a supervisory authority, particularly in the Member State of their habitual residence, their place of work, or the place of the alleged breach. The right of appeal is without prejudice to other administrative or judicial remedies.

    The supervisory authority responsible for us is:
    

    Bavarian State Office for Data Protection Supervision
    
    Promenade 18
    91522 Ansbach
    
    Postal address:
    P.O. Box 1349, 91504 Ansbach
    
    Telephone: 0981/180093-0
    E-Mail: poststelle@lda.bayern.de
    Internet: https://www.lda.bayern.de