Pri­va­cy Po­li­cy

The web­sites of Mu­Vi­si­on UG (li­mi­t­ed lia­bi­li­ty) can ge­ne­ral­ly be used wi­t­hout pro­vi­ding any per­so­nal da­ta. Ho­we­ver, if a da­ta sub­ject wis­hes to use spe­cial ser­vices of­fe­red by our com­pa­ny via our web­site, it may be ne­ces­sa­ry to pro­cess per­so­nal da­ta. If the pro­ces­sing of per­so­nal da­ta is ne­ces­sa­ry and the­re is no le­gal ba­sis for such pro­ces­sing, we ge­ne­ral­ly ob­tain the con­sent of the da­ta sub­ject.

The pro­ces­sing of per­so­nal da­ta, such as the na­me, ad­dress, email ad­dress or te­le­pho­ne num­ber of a da­ta sub­ject, is al­ways car­ri­ed out in ac­cordance wi­th the Ge­ne­ral Da­ta Pro­tec­tion Re­gu­la­ti­on (GD­PR) and in com­pli­ance wi­th the coun­try-spe­ci­fic da­ta pro­tec­tion re­gu­la­ti­ons ap­pli­ca­ble to us. Wi­th this pri­va­cy po­li­cy, we would li­ke to in­form the pu­blic about the na­tu­re, scope and pur­po­se of the per­so­nal da­ta we coll­ect, use and pro­cess. Fur­ther­mo­re, this pri­va­cy po­li­cy in­forms da­ta sub­jects about their rights.

As the con­trol­ler, Mu­Vi­si­on UG (li­mi­t­ed lia­bi­li­ty) has im­ple­men­ted num­e­rous tech­ni­cal and or­ga­ni­sa­tio­nal me­a­su­res to en­su­re the most com­ple­te pro­tec­tion pos­si­ble of the per­so­nal da­ta pro­ces­sed via this web­site. Nevert­hel­ess, in­ter­net-ba­sed da­ta trans­mis­si­ons can ge­ne­ral­ly have se­cu­ri­ty gaps, so that ab­so­lu­te pro­tec­tion can­not be gua­ran­teed. For this re­ason, every da­ta sub­ject is free to trans­mit per­so­nal da­ta to us by al­ter­na­ti­ve me­ans, for ex­am­p­le by te­le­pho­ne.

1. De­fi­ni­ti­ons

The pri­va­cy po­li­cy is ba­sed on the ter­mi­no­lo­gy used by the Eu­ro­pean le­gis­la­tors and re­gu­la­tors when en­ac­ting the Ge­ne­ral Da­ta Pro­tec­tion Re­gu­la­ti­on (GD­PR). Our pri­va­cy po­li­cy is in­ten­ded to be ea­sy to read and un­der­stand for the ge­ne­ral pu­blic as well as for our cus­to­mers and busi­ness part­ners. To en­su­re this, we would li­ke to ex­plain the ter­mi­no­lo­gy used in ad­van­ce.

In this pri­va­cy po­li­cy, we use the fol­lo­wing terms, among others:

a) Per­so­nal da­ta

Per­so­nal da­ta is any in­for­ma­ti­on re­la­ting to an iden­ti­fied or iden­ti­fia­ble na­tu­ral per­son (her­ein­af­ter re­fer­red to as “da­ta sub­ject”). A na­tu­ral per­son is con­side­red iden­ti­fia­ble if they can be iden­ti­fied di­rect­ly or in­di­rect­ly, in par­ti­cu­lar by as­so­cia­ti­on wi­th an iden­ti­fier such as a na­me, an iden­ti­fi­ca­ti­on num­ber, lo­ca­ti­on da­ta, an on­line iden­ti­fier or one or mo­re spe­cial cha­rac­te­ristics that ex­press the phy­si­cal, phy­sio­lo­gi­cal, ge­ne­tic, psy­cho­lo­gi­cal, eco­no­mic, cul­tu­ral or so­cial iden­ti­ty of that na­tu­ral per­son.

b) Da­ta sub­ject

A da­ta sub­ject is any iden­ti­fied or iden­ti­fia­ble na­tu­ral per­son who­se per­so­nal da­ta is pro­ces­sed by the con­trol­ler.

c) Pro­ces­sing

Pro­ces­sing me­ans any ope­ra­ti­on or set of ope­ra­ti­ons which is per­for­med on per­so­nal da­ta, whe­ther or not by au­to­ma­ted me­ans, such as coll­ec­tion, re­cor­ding, or­ga­ni­sa­ti­on, struc­tu­ring, sto­rage, ad­apt­a­ti­on or al­tera­ti­on, re­trie­val, con­sul­ta­ti­on, use, dis­clo­sure by trans­mis­si­on, dis­tri­bu­ti­on or any other form of pro­vi­si­on, ali­gnment or com­bi­na­ti­on, rest­ric­tion, era­su­re or de­s­truc­tion.

d) Rest­ric­tion of pro­ces­sing

Rest­ric­tion of pro­ces­sing is the mar­king of stored per­so­nal da­ta wi­th the aim of li­mi­ting their pro­ces­sing in the fu­ture.

e) Pro­fil­ing

Pro­fil­ing is any form of au­to­ma­ted pro­ces­sing of per­so­nal da­ta con­sis­ting of the use of such per­so­nal da­ta to eva­lua­te cer­tain per­so­nal aspects re­la­ting to a na­tu­ral per­son, in par­ti­cu­lar to ana­ly­se or pre­dict aspects con­cer­ning that na­tu­ral per­son’s per­for­mance at work, eco­no­mic si­tua­ti­on, he­alth, per­so­nal pre­fe­ren­ces, in­te­rests, re­lia­bi­li­ty, be­ha­viour, lo­ca­ti­on or mo­ve­ments.

f) Pseud­ony­mi­sa­ti­on

Pseud­ony­mi­sa­ti­on is the pro­ces­sing of per­so­nal da­ta in such a man­ner that the per­so­nal da­ta can no lon­ger be at­tri­bu­ted to a spe­ci­fic da­ta sub­ject wi­t­hout the use of ad­di­tio­nal in­for­ma­ti­on, pro­vi­ded that such ad­di­tio­nal in­for­ma­ti­on is kept se­pa­ra­te­ly and is sub­ject to tech­ni­cal and or­ga­ni­sa­tio­nal me­a­su­res to en­su­re that the per­so­nal da­ta is not at­tri­bu­ted to an iden­ti­fied or iden­ti­fia­ble na­tu­ral per­son.

g) Con­trol­ler or pro­ces­sor

The con­trol­ler or pro­ces­sor is the na­tu­ral or le­gal per­son, pu­blic aut­ho­ri­ty, agen­cy or other bo­dy which, alo­ne or joint­ly wi­th others, de­ter­mi­nes the pur­po­ses and me­ans of the pro­ces­sing of per­so­nal da­ta. Whe­re the pur­po­ses and me­ans of such pro­ces­sing are de­ter­mi­ned by Uni­on or Mem­ber Sta­te law, the con­trol­ler or the spe­ci­fic cri­te­ria for its no­mi­na­ti­on may be pro­vi­ded for by Uni­on or Mem­ber Sta­te law.

h) Pro­ces­sor

A pro­ces­sor is a na­tu­ral or le­gal per­son, pu­blic aut­ho­ri­ty, agen­cy or other bo­dy which pro­ces­ses per­so­nal da­ta on be­half of the con­trol­ler.

i) Re­ci­pi­ent

A re­ci­pi­ent is a na­tu­ral or le­gal per­son, pu­blic aut­ho­ri­ty, agen­cy or an­o­ther bo­dy to which per­so­nal da­ta are dis­c­lo­sed, whe­ther a third par­ty or not. Ho­we­ver, pu­blic aut­ho­ri­ties which may re­cei­ve per­so­nal da­ta in the frame­work of a par­ti­cu­lar in­quiry in ac­cordance wi­th Uni­on or Mem­ber Sta­te law shall not be re­gard­ed as re­ci­pi­ents.

j) Third par­ty

A third par­ty is a na­tu­ral or le­gal per­son, pu­blic aut­ho­ri­ty, agen­cy or bo­dy other than the da­ta sub­ject, con­trol­ler, pro­ces­sor and per­sons who, un­der the di­rect aut­ho­ri­ty of the con­trol­ler or pro­ces­sor, are aut­ho­ri­sed to pro­cess per­so­nal da­ta.

k) Con­sent

Con­sent is any free­ly gi­ven, spe­ci­fic, in­for­med and un­am­bi­guous in­di­ca­ti­on of the da­ta sub­jec­t’s wis­hes by which he or she, by a state­ment or by a clear af­fir­ma­ti­ve ac­tion, si­gni­fies agree­ment to the pro­ces­sing of per­so­nal da­ta re­la­ting to him or her.

2. Na­me and ad­dress of the con­trol­ler

The con­trol­ler wi­thin the mea­ning of the Ge­ne­ral Da­ta Pro­tec­tion Re­gu­la­ti­on (GD­PR), other da­ta pro­tec­tion laws ap­pli­ca­ble in the Mem­ber Sta­tes of the Eu­ro­pean Uni­on and other pro­vi­si­ons of a da­ta pro­tec­tion na­tu­re is:

Mu­Vi­si­on UG (li­mi­t­ed lia­bi­li­ty)
Gas­stra­ße 21
67655 Kai­sers­lau­tern
Ger­ma­ny
Email: in­fo (at) mu­vi­si­on (dot) com
Web­site: www.muvision.com

3. Coo­kies

The web­sites of Mu­Vi­si­on UG (li­mi­t­ed lia­bi­li­ty) use coo­kies. Coo­kies are text files that are stored on a com­pu­ter sys­tem via an in­ter­net brow­ser.

Num­e­rous web­sites and ser­vers use coo­kies. Ma­ny coo­kies con­tain a so-cal­led coo­kie ID. A coo­kie ID is a uni­que iden­ti­fier for the coo­kie. It con­sists of a string of cha­rac­ters that can be used to as­sign web­sites and ser­vers to the spe­ci­fic web brow­ser in which the coo­kie was stored. This en­ables the web­sites and ser­vers vi­si­ted to di­stin­gu­ish the in­di­vi­du­al brow­ser of the per­son con­cer­ned from other web brow­sers that con­tain other coo­kies. A spe­ci­fic web brow­ser can be re­co­g­nis­ed and iden­ti­fied via the uni­que coo­kie ID.

The use of coo­kies en­ables us to pro­vi­de users of this web­site wi­th mo­re user-fri­end­ly ser­vices that would not be pos­si­ble wi­t­hout coo­kies.

Coo­kies al­low us to op­ti­mi­se the in­for­ma­ti­on and of­fers on our web­site for the be­ne­fit of the user. As al­re­a­dy men­tio­ned, coo­kies enable us to re­co­g­ni­se users of our web­site. The pur­po­se of this re­co­gni­ti­on is to make it ea­sier for users to use our web­site. For ex­am­p­le, users of a web­site that uses coo­kies do not have to re-en­ter their ac­cess da­ta each time they vi­sit the web­site, as this is do­ne by the web­site and the coo­kie stored on the user’s com­pu­ter sys­tem. An­o­ther ex­am­p­le is the coo­kie used for a shop­ping bas­ket in an on­line shop. The on­line shop uses a coo­kie to re­mem­ber the items that a cus­to­mer has pla­ced in their vir­tu­al shop­ping bas­ket.

The da­ta sub­ject can pre­vent the set­ting of coo­kies by our web­site at any time by me­ans of a cor­re­spon­ding set­ting in the In­ter­net brow­ser used and thus per­ma­nent­ly ob­ject to the set­ting of coo­kies. Fur­ther­mo­re, coo­kies that have al­re­a­dy be­en set can be de­le­ted at any time via an In­ter­net brow­ser or other soft­ware pro­gram­mes. This is pos­si­ble in all com­mon In­ter­net brow­sers. If the da­ta sub­ject de­ac­ti­va­tes the set­ting of coo­kies in the In­ter­net brow­ser used, not all func­tions of our web­site may be ful­ly usable.

4. Coll­ec­tion of ge­ne­ral da­ta and in­for­ma­ti­on

Our web­site coll­ects a ran­ge of ge­ne­ral da­ta and in­for­ma­ti­on each time a da­ta sub­ject or au­to­ma­ted sys­tem ac­ces­ses the web­site. This ge­ne­ral da­ta and in­for­ma­ti­on is stored in the ser­ver log files. The fol­lo­wing may be re­cor­ded: (1) the brow­ser ty­pes and ver­si­ons used, (2) the ope­ra­ting sys­tem used by the ac­ces­sing sys­tem, (3) the web­site from which an ac­ces­sing sys­tem re­a­ches our web­site (so-cal­led re­fer­rer), (4) the sub-web­sites that are ac­ces­sed via an ac­ces­sing sys­tem on our web­site, (5) the date and time of ac­cess to the web­site, (6) an In­ter­net Pro­to­col ad­dress (IP ad­dress), (7) the In­ter­net ser­vice pro­vi­der of the ac­ces­sing sys­tem, and (8) other si­mi­lar da­ta and in­for­ma­ti­on that ser­ves to avert dan­ger in the event of at­tacks on our in­for­ma­ti­on tech­no­lo­gy sys­tems.

When using this ge­ne­ral da­ta and in­for­ma­ti­on, we do not draw any con­clu­si­ons about the da­ta sub­ject. Ra­ther, this in­for­ma­ti­on is re­qui­red in or­der to (1) de­li­ver the con­tent of our web­site cor­rect­ly, (2) op­ti­mi­se the con­tent of our web­site and the ad­ver­ti­sing for it, (3) en­su­re the long-term func­tion­a­li­ty of our in­for­ma­ti­on tech­no­lo­gy sys­tems and the tech­no­lo­gy of our web­site, and (4) pro­vi­de law en­force­ment aut­ho­ri­ties wi­th the in­for­ma­ti­on ne­ces­sa­ry for pro­se­cu­ti­on in the event of a cy­ber at­tack. This an­ony­mously coll­ec­ted da­ta and in­for­ma­ti­on is the­r­e­fo­re eva­lua­ted by us sta­tis­ti­cal­ly and al­so wi­th the aim of in­cre­asing da­ta pro­tec­tion and da­ta se­cu­ri­ty in our com­pa­ny in or­der to ul­ti­m­ate­ly en­su­re an op­ti­mal le­vel of pro­tec­tion for the per­so­nal da­ta we pro­cess. The an­ony­mous da­ta in the ser­ver log files is stored se­pa­ra­te­ly from all per­so­nal da­ta pro­vi­ded by a da­ta sub­ject.

5. SSL en­cryp­ti­on

Our web­site uses SSL en­cryp­ti­on when trans­mit­ting con­fi­den­ti­al or per­so­nal con­tent from our users. This en­cryp­ti­on is ac­ti­va­ted, for ex­am­p­le, when pro­ces­sing pay­ments and when users sub­mit en­qui­ries to us via our web­site. Plea­se en­su­re that SSL en­cryp­ti­on is ac­ti­va­ted on your end when per­forming such ac­ti­vi­ties. The use of en­cryp­ti­on is ea­sy to re­co­g­ni­se: the dis­play in your brow­ser li­ne ch­an­ges from “http://” to “https://”. Da­ta en­crypt­ed via SSL can­not be read by third par­ties. On­ly trans­mit your con­fi­den­ti­al in­for­ma­ti­on wi­th SSL en­cryp­ti­on ac­ti­va­ted and cont­act us if in doubt.

6. Sub­scrip­ti­on to our news­let­ter

Users of our web­site are gi­ven the op­por­tu­ni­ty to sub­scri­be to our news­let­ter. The per­so­nal da­ta trans­mit­ted to the con­trol­ler when or­de­ring the news­let­ter is de­ter­mi­ned by the in­put mask used for this pur­po­se.

We in­form our cus­to­mers and busi­ness part­ners at re­gu­lar in­ter­vals about cur­rent in­for­ma­ti­on about us and our of­fers by me­ans of a news­let­ter. The news­let­ter can on­ly be re­cei­ved by the da­ta sub­ject if (1) the da­ta sub­ject has a va­lid email ad­dress and (2) the da­ta sub­ject re­gis­ters for the news­let­ter. For le­gal re­asons, a con­fir­ma­ti­on email is sent to the email ad­dress en­te­red by a da­ta sub­ject for the first time for the news­let­ter dis­patch using the dou­ble opt-in pro­ce­du­re. This con­fir­ma­ti­on email ser­ves to ve­ri­fy that the ow­ner of the email ad­dress has aut­ho­ri­sed the re­ceipt of the news­let­ter as the da­ta sub­ject.

When re­gis­tering for the news­let­ter, we al­so store the IP ad­dress as­si­gned by the In­ter­net ser­vice pro­vi­der (ISP) to the com­pu­ter sys­tem used by the da­ta sub­ject at the time of re­gis­tra­ti­on, as well as the date and time of re­gis­tra­ti­on. The coll­ec­tion of this da­ta is ne­ces­sa­ry in or­der to be ab­le to trace any (pos­si­ble) mi­su­se of the da­ta sub­jec­t’s email ad­dress at a la­ter date and the­r­e­fo­re ser­ves to pro­vi­de le­gal pro­tec­tion for the con­trol­ler.

The per­so­nal da­ta coll­ec­ted when re­gis­tering for the news­let­ter will be used ex­clu­si­ve­ly for sen­ding our news­let­ter. Fur­ther­mo­re, sub­scri­bers to the news­let­ter may be in­for­med by email if this is ne­ces­sa­ry for the ope­ra­ti­on of the news­let­ter ser­vice or for re­gis­tra­ti­on, as may be the ca­se in the event of ch­an­ges to the news­let­ter of­fer or ch­an­ges to the tech­ni­cal con­di­ti­ons. The per­so­nal da­ta coll­ec­ted as part of the news­let­ter ser­vice will not be pas­sed on to third par­ties. The da­ta sub­ject can can­cel their sub­scrip­ti­on to our news­let­ter at any time. The con­sent to the sto­rage of per­so­nal da­ta that the da­ta sub­ject has gi­ven us for the pur­po­se of sen­ding the news­let­ter can be re­vo­ked at any time. For the pur­po­se of re­vo­king con­sent, a cor­re­spon­ding link is pro­vi­ded in each news­let­ter. Fur­ther­mo­re, it is al­so pos­si­ble to un­sub­scri­be from the news­let­ter at any time di­rect­ly on the web­site of the con­trol­ler or to in­form the con­trol­ler in an­o­ther way.

7. Cont­act op­ti­on via the web­site

Due to le­gal re­qui­re­ments, our web­site con­ta­ins in­for­ma­ti­on that en­ables quick elec­tro­nic cont­act wi­th us and di­rect com­mu­ni­ca­ti­on wi­th us, which al­so in­cludes a ge­ne­ral ad­dress for so-cal­led elec­tro­nic mail (e‑mail ad­dress). If a da­ta sub­ject cont­acts the con­trol­ler by e‑mail or via a cont­act form, the per­so­nal da­ta trans­mit­ted by the da­ta sub­ject is au­to­ma­ti­cal­ly stored. Such per­so­nal da­ta trans­mit­ted vol­un­t­a­ri­ly by a da­ta sub­ject to the con­trol­ler is stored for the pur­po­se of pro­ces­sing or cont­ac­ting the da­ta sub­ject. This per­so­nal da­ta is not pas­sed on to third par­ties.

8. Rou­ti­ne de­le­ti­on and blo­cking of per­so­nal da­ta

The con­trol­ler pro­ces­ses and stores per­so­nal da­ta of the da­ta sub­ject on­ly for the pe­ri­od ne­ces­sa­ry to achie­ve the sto­rage pur­po­se or as pro­vi­ded for by the Eu­ro­pean le­gis­la­tor or other le­gis­la­tors in laws or re­gu­la­ti­ons to which the con­trol­ler is sub­ject.

If the pur­po­se of sto­rage no lon­ger ap­pli­es or if a sto­rage pe­ri­od pre­scri­bed by Eu­ro­pean di­rec­ti­ves and re­gu­la­ti­ons or other com­pe­tent le­gis­la­tors ex­pi­res, per­so­nal da­ta is rou­ti­ne­ly blo­cked or de­le­ted in ac­cordance wi­th le­gal re­qui­re­ments.

9. Rights of the da­ta sub­ject

a) Right to con­fir­ma­ti­on

Every da­ta sub­ject has the right, gran­ted by Eu­ro­pean di­rec­ti­ves and re­gu­la­ti­ons, to re­quest con­fir­ma­ti­on from the con­trol­ler as to whe­ther per­so­nal da­ta con­cer­ning them is be­ing pro­ces­sed. If a da­ta sub­ject wis­hes to exer­cise this right of con­fir­ma­ti­on, they may cont­act an em­ployee of the con­trol­ler at any time.

b) Right to in­for­ma­ti­on

Every per­son af­fec­ted by the pro­ces­sing of per­so­nal da­ta has the right, gran­ted by Eu­ro­pean di­rec­ti­ves and re­gu­la­ti­ons, to ob­tain from the con­trol­ler, at any time and free of char­ge, in­for­ma­ti­on about the per­so­nal da­ta stored about them and a co­py of this in­for­ma­ti­on. Fur­ther­mo­re, Eu­ro­pean di­rec­ti­ves and re­gu­la­ti­ons grant the da­ta sub­ject the right to ob­tain the fol­lo­wing in­for­ma­ti­on:

• the pur­po­ses of the pro­ces­sing

• the ca­te­go­ries of per­so­nal da­ta be­ing pro­ces­sed

• the re­ci­pi­ents or ca­te­go­ries of re­ci­pi­ents to whom the per­so­nal da­ta have be­en or will be dis­c­lo­sed, in par­ti­cu­lar re­ci­pi­ents in third count­ries or in­ter­na­tio­nal or­ga­ni­sa­ti­ons

• whe­re pos­si­ble, the en­vi­sa­ged pe­ri­od for which the per­so­nal da­ta will be stored, or, if not pos­si­ble, the cri­te­ria used to de­ter­mi­ne that pe­ri­od

• the exis­tence of the right to re­quest from the con­trol­ler rec­ti­fi­ca­ti­on or era­su­re of per­so­nal da­ta con­cer­ning the da­ta sub­ject or rest­ric­tion of pro­ces­sing or to ob­ject to such pro­ces­sing

• the exis­tence of the right to lodge a com­plaint wi­th a su­per­vi­so­ry aut­ho­ri­ty

• if the per­so­nal da­ta is not coll­ec­ted from the da­ta sub­ject: all available in­for­ma­ti­on about the ori­gin of the da­ta

• the exis­tence of au­to­ma­ted de­cis­i­on-ma­king, in­clu­ding pro­fil­ing, in ac­cordance wi­th Ar­tic­le 22(1) and (4) of the GD­PR and, at least in the­se ca­ses, meaningful in­for­ma­ti­on about the lo­gic in­vol­ved, as well as the si­gni­fi­can­ce and the en­vi­sa­ged con­se­quen­ces of such pro­ces­sing for the da­ta sub­ject

Fur­ther­mo­re, the da­ta sub­ject has the right to ob­tain in­for­ma­ti­on about whe­ther per­so­nal da­ta has be­en trans­fer­red to a third coun­try or to an in­ter­na­tio­nal or­ga­ni­sa­ti­on. If this is the ca­se, the da­ta sub­ject al­so has the right to ob­tain in­for­ma­ti­on about the ap­pro­pria­te safe­guards in con­nec­tion wi­th the trans­fer.

If a da­ta sub­ject wis­hes to exer­cise this right to in­for­ma­ti­on, they may cont­act an em­ployee of the con­trol­ler at any time.

c) Right to rec­ti­fi­ca­ti­on

Any per­son af­fec­ted by the pro­ces­sing of per­so­nal da­ta has the right, gran­ted by Eu­ro­pean di­rec­ti­ves and re­gu­la­ti­ons, to re­quest the im­me­dia­te rec­ti­fi­ca­ti­on of in­ac­cu­ra­te per­so­nal da­ta con­cer­ning them. Fur­ther­mo­re, the da­ta sub­ject has the right to re­quest the com­ple­ti­on of in­com­ple­te per­so­nal da­ta, ta­king in­to ac­count the pur­po­ses of the pro­ces­sing, in­clu­ding by me­ans of a sup­ple­men­ta­ry state­ment.

If a da­ta sub­ject wis­hes to exer­cise this right of rec­ti­fi­ca­ti­on, they may cont­act an em­ployee of the con­trol­ler at any time.

d) Right to era­su­re (right to be for­got­ten)

Any per­son af­fec­ted by the pro­ces­sing of per­so­nal da­ta has the right, gran­ted by Eu­ro­pean di­rec­ti­ves and re­gu­la­ti­ons, to re­quest that the con­trol­ler era­se per­so­nal da­ta con­cer­ning them wi­t­hout de­lay, pro­vi­ded that one of the fol­lo­wing re­asons ap­pli­es and in­so­far as the pro­ces­sing is not ne­ces­sa­ry:

• The per­so­nal da­ta has be­en coll­ec­ted or other­wi­se pro­ces­sed for pur­po­ses for which it is no lon­ger ne­ces­sa­ry.

• The da­ta sub­ject re­vo­kes their con­sent on which the pro­ces­sing was ba­sed in ac­cordance wi­th Art. 6(1)(a) GD­PR or Art. 9(2)(a) GD­PR, and the­re is no other le­gal ba­sis for the pro­ces­sing.

• The da­ta sub­ject ob­jects to the pro­ces­sing pur­su­ant to Ar­tic­le 21(1) of the GD­PR and the­re are no over­ri­ding le­gi­ti­ma­te grounds for the pro­ces­sing, or the da­ta sub­ject ob­jects to the pro­ces­sing pur­su­ant to Ar­tic­le 21(2) of the GD­PR.

• The per­so­nal da­ta has be­en pro­ces­sed un­lawful­ly.

• The era­su­re of the per­so­nal da­ta is ne­ces­sa­ry for com­pli­ance wi­th a le­gal ob­li­ga­ti­on un­der Uni­on or Mem­ber Sta­te law to which the con­trol­ler is sub­ject.

• The per­so­nal da­ta has be­en coll­ec­ted in re­la­ti­on to in­for­ma­ti­on so­cie­ty ser­vices of­fe­red in ac­cordance wi­th Ar­tic­le 8(1) of the GD­PR.

If one of the abo­ve re­asons ap­pli­es and a da­ta sub­ject wis­hes to have per­so­nal da­ta stored by us de­le­ted, they may cont­act an em­ployee of the con­trol­ler at any time. The em­ployee will en­su­re that the de­le­ti­on re­quest is com­pli­ed wi­th im­me­dia­te­ly.

If per­so­nal da­ta has be­en ma­de pu­blic by us and we are ob­li­ged as the con­trol­ler to de­le­te the per­so­nal da­ta in ac­cordance wi­th Art. 17 (1) GD­PR, we shall ta­ke ap­pro­pria­te me­a­su­res, in­clu­ding tech­ni­cal me­a­su­res, ta­king in­to ac­count the available tech­no­lo­gy and im­ple­men­ta­ti­on cos­ts, to in­form other con­trol­lers who pro­cess the pu­blished per­so­nal da­ta that the da­ta sub­ject has re­ques­ted the­se other da­ta con­trol­lers to de­le­te all links to this per­so­nal da­ta or co­pies or re­pli­ca­ti­ons of this per­so­nal da­ta, un­less pro­ces­sing is ne­ces­sa­ry. Our em­ployees will ta­ke the ne­ces­sa­ry steps in each in­di­vi­du­al ca­se.

e) Right to rest­ric­tion of pro­ces­sing

Any per­son af­fec­ted by the pro­ces­sing of per­so­nal da­ta has the right gran­ted by Eu­ro­pean di­rec­ti­ves and re­gu­la­ti­ons to re­quest the con­trol­ler to rest­rict pro­ces­sing if one of the fol­lo­wing con­di­ti­ons is met:

• The ac­cu­ra­cy of the per­so­nal da­ta is con­tes­ted by the da­ta sub­ject, for a pe­ri­od en­ab­ling the con­trol­ler to ve­ri­fy the ac­cu­ra­cy of the per­so­nal da­ta.

• The pro­ces­sing is un­lawful, the da­ta sub­ject op­po­ses the era­su­re of the per­so­nal da­ta and re­quests the rest­ric­tion of their use in­s­tead.

• The con­trol­ler no lon­ger needs the per­so­nal da­ta for the pur­po­ses of the pro­ces­sing, but the da­ta sub­ject needs it for the es­tab­lish­ment, exer­cise or de­fence of le­gal claims.

• The da­ta sub­ject has ob­jec­ted to the pro­ces­sing pur­su­ant to Ar­tic­le 21(1) of the GD­PR and it is not yet clear whe­ther the le­gi­ti­ma­te grounds of the con­trol­ler over­ri­de tho­se of the da­ta sub­ject.

If one of the abo­ve con­di­ti­ons is met and a da­ta sub­ject wis­hes to re­quest the rest­ric­tion of per­so­nal da­ta stored by us, they may cont­act an em­ployee of the con­trol­ler at any time. The em­ployee will ar­ran­ge for the pro­ces­sing to be rest­ric­ted.

f) Right to da­ta por­ta­bi­li­ty

Any per­son af­fec­ted by the pro­ces­sing of per­so­nal da­ta has the right, gran­ted by the Eu­ro­pean le­gis­la­tor, to re­cei­ve the per­so­nal da­ta con­cer­ning them, which they have pro­vi­ded to a con­trol­ler, in a struc­tu­red, com­mon­ly used and ma­chi­ne-re­a­da­ble for­mat. They al­so have the right to trans­mit this da­ta to an­o­ther con­trol­ler wi­t­hout hin­drance from the con­trol­ler to whom the per­so­nal da­ta was pro­vi­ded, pro­vi­ded that the pro­ces­sing is ba­sed on con­sent pur­su­ant to Art. 6(1)(a) GD­PR or Art. 9(2)(a) GD­PR or on a con­tract pur­su­ant to Art. 6(1)(b) GD­PR and the pro­ces­sing is car­ri­ed out using au­to­ma­ted pro­ce­du­res, un­less the pro­ces­sing is ne­ces­sa­ry for the per­for­mance of a task car­ri­ed out in the pu­blic in­te­rest or in the exer­cise of of­fi­ci­al aut­ho­ri­ty ves­ted in the con­trol­ler.

Fur­ther­mo­re, when exer­cis­ing their right to da­ta por­ta­bi­li­ty pur­su­ant to Art. 20(1) GD­PR, the da­ta sub­ject has the right to have the per­so­nal da­ta trans­mit­ted di­rect­ly from one con­trol­ler to an­o­ther, whe­re tech­ni­cal­ly fe­a­si­ble and pro­vi­ded that this does not ad­ver­se­ly af­fect the rights and free­doms of others.

To as­sert their right to da­ta por­ta­bi­li­ty, the da­ta sub­ject may cont­act one of our em­ployees at any time.

g) Right to ob­ject

Any per­son af­fec­ted by the pro­ces­sing of per­so­nal da­ta has the right gran­ted by the Eu­ro­pean le­gis­la­tor to ob­ject at any time, on grounds re­la­ting to their par­ti­cu­lar si­tua­ti­on, to the pro­ces­sing of per­so­nal da­ta con­cer­ning them which is ba­sed on Ar­tic­le 6(1)(e) or (f) of the GD­PR. This al­so ap­pli­es to pro­fil­ing ba­sed on the­se pro­vi­si­ons.

In the event of an ob­jec­tion, we will no lon­ger pro­cess the per­so­nal da­ta un­less we can de­mons­tra­te com­pel­ling le­gi­ti­ma­te grounds for the pro­ces­sing that over­ri­de the in­te­rests, rights and free­doms of the da­ta sub­ject, or the pro­ces­sing ser­ves to as­sert, exer­cise or de­fend le­gal claims.

If we pro­cess per­so­nal da­ta for di­rect mar­ke­ting pur­po­ses, the da­ta sub­ject has the right to ob­ject at any time to the pro­ces­sing of per­so­nal da­ta for such mar­ke­ting pur­po­ses. This al­so ap­pli­es to pro­fil­ing in­so­far as it is re­la­ted to such di­rect mar­ke­ting. If the da­ta sub­ject ob­jects to pro­ces­sing for di­rect mar­ke­ting pur­po­ses, we will no lon­ger pro­cess the per­so­nal da­ta for the­se pur­po­ses.

Zur Aus­übung des Rechts auf Wi­der­spruch kann sich die be­trof­fe­ne Per­son di­rekt an je­den un­se­rer Mit­ar­bei­ter wen­den. Der be­trof­fe­nen Per­son steht es fer­ner frei, im Zu­sam­men­hang mit der Nut­zung von Diens­ten der In­for­ma­ti­ons­ge­sell­schaft, un­ge­ach­tet der Richt­li­nie 2002/58/EG, ihr Wi­der­spruchs­recht mit­tels au­to­ma­ti­sier­ter Ver­fah­ren aus­zu­üben, bei de­nen tech­ni­sche Spe­zi­fi­ka­tio­nen ver­wen­det wer­den.

h) Au­to­ma­ted in­di­vi­du­al de­cis­i­on-ma­king, in­clu­ding pro­fil­ing

Any per­son af­fec­ted by the pro­ces­sing of per­so­nal da­ta has the right gran­ted by the Eu­ro­pean le­gis­la­tor not to be sub­ject to a de­cis­i­on ba­sed so­le­ly on au­to­ma­ted pro­ces­sing, in­clu­ding pro­fil­ing, which pro­du­ces le­gal ef­fects con­cer­ning them or si­mi­lar­ly si­gni­fi­cant­ly af­fects them, un­less the de­cis­i­on (1) is not ne­ces­sa­ry for en­te­ring in­to, or per­for­mance of, a con­tract bet­ween the da­ta sub­ject and the con­trol­ler, or (2) is aut­ho­ri­sed by Uni­on or Mem­ber Sta­te law to which the con­trol­ler is sub­ject and which al­so lays down ap­pro­pria­te me­a­su­res to safe­guard the da­ta sub­jec­t’s rights and free­doms and le­gi­ti­ma­te in­te­rests, or (3) is ba­sed on the da­ta sub­jec­t’s ex­pli­cit con­sent.

If the de­cis­i­on (1) is ne­ces­sa­ry for en­te­ring in­to, or per­for­mance of, a con­tract bet­ween the da­ta sub­ject and the con­trol­ler, or (2) is ma­de wi­th the ex­pli­cit con­sent of the da­ta sub­ject, we ta­ke ap­pro­pria­te me­a­su­res to safe­guard the rights and free­doms and le­gi­ti­ma­te in­te­rests of the da­ta sub­ject, in­clu­ding at least the right to ob­tain hu­man in­ter­ven­ti­on on the part of the con­trol­ler, to ex­press their point of view and to con­test the de­cis­i­on.

If the da­ta sub­ject wis­hes to as­sert rights re­la­ting to au­to­ma­ted de­cis­i­ons, they may cont­act an em­ployee of the con­trol­ler at any time.

i)      Right to wi­th­draw con­sent un­der da­ta pro­tec­tion law

Every per­son af­fec­ted by the pro­ces­sing of per­so­nal da­ta has the right, gran­ted by Eu­ro­pean di­rec­ti­ves and re­gu­la­ti­ons, to wi­th­draw their con­sent to the pro­ces­sing of per­so­nal da­ta at any time.

If the per­son con­cer­ned wis­hes to exer­cise their right to wi­th­draw con­sent, they may cont­act an em­ployee of the con­trol­ler at any time.

10. Le­gal ba­sis for pro­ces­sing

Art. 6 I lit. a GD­PR ser­ves as the le­gal ba­sis for our com­pa­ny for pro­ces­sing ope­ra­ti­ons in which we ob­tain con­sent for a spe­ci­fic pro­ces­sing pur­po­se. If the pro­ces­sing of per­so­nal da­ta is ne­ces­sa­ry for the per­for­mance of a con­tract to which the da­ta sub­ject is par­ty, as is the ca­se, for ex­am­p­le, wi­th pro­ces­sing ope­ra­ti­ons ne­ces­sa­ry for the de­li­very of goods or the pro­vi­si­on of other ser­vices or con­side­ra­ti­on, the pro­ces­sing is ba­sed on Art. 6 I lit. b GD­PR. The sa­me ap­pli­es to pro­ces­sing ope­ra­ti­ons that are ne­ces­sa­ry for the im­ple­men­ta­ti­on of pre-con­trac­tu­al me­a­su­res, for ex­am­p­le in ca­ses of en­qui­ries about our pro­ducts or ser­vices. If our com­pa­ny is sub­ject to a le­gal ob­li­ga­ti­on that re­qui­res the pro­ces­sing of per­so­nal da­ta, such as for the ful­film­ent of tax ob­li­ga­ti­ons, the pro­ces­sing is ba­sed on Art. 6 I lit. c GD­PR. In ra­re ca­ses, the pro­ces­sing of per­so­nal da­ta may be ne­ces­sa­ry to pro­tect the vi­tal in­te­rests of the da­ta sub­ject or an­o­ther na­tu­ral per­son. This would be the ca­se, for ex­am­p­le, if a vi­si­tor to our pre­mi­ses we­re to be in­ju­red and their na­me, age, he­alth insu­rance de­tails or other vi­tal in­for­ma­ti­on had to be pas­sed on to a doc­tor, hos­pi­tal or other third par­ty. In this ca­se, the pro­ces­sing would be ba­sed on Art. 6 I lit. d GD­PR. Fi­nal­ly, pro­ces­sing ope­ra­ti­ons could be ba­sed on Art. 6 I lit. f GD­PR. This le­gal ba­sis ap­pli­es to pro­ces­sing ope­ra­ti­ons that are not co­ver­ed by any of the abo­ve le­gal ba­ses if the pro­ces­sing is ne­ces­sa­ry to safe­guard a le­gi­ti­ma­te in­te­rest of our com­pa­ny or a third par­ty, pro­vi­ded that the in­te­rests, fun­da­men­tal rights and free­doms of the da­ta sub­ject do not over­ri­de the­se in­te­rests. Such pro­ces­sing ope­ra­ti­ons are per­mit­ted in par­ti­cu­lar be­cau­se they have be­en spe­ci­fi­cal­ly men­tio­ned by the Eu­ro­pean le­gis­la­tor. In this re­spect, the le­gis­la­tor took the view that a le­gi­ti­ma­te in­te­rest could be as­su­med if the da­ta sub­ject is a cus­to­mer of the con­trol­ler (Re­ci­tal 47, sen­tence 2 of the GD­PR).

11. Le­gi­ti­ma­te in­te­rests in pro­ces­sing pur­sued by the con­trol­ler or a third par­ty

If the pro­ces­sing of per­so­nal da­ta is ba­sed on Ar­tic­le 6(1)(f) of the GD­PR, our le­gi­ti­ma­te in­te­rest is the per­for­mance of our busi­ness ac­ti­vi­ties for the be­ne­fit of all our em­ployees and share­hol­ders.

12. Du­ra­ti­on for which per­so­nal da­ta is stored

The cri­ter­ion for the du­ra­ti­on of sto­rage of per­so­nal da­ta is the re­spec­ti­ve sta­tu­to­ry re­ten­ti­on pe­ri­od. Af­ter ex­piry of this pe­ri­od, the cor­re­spon­ding da­ta is rou­ti­ne­ly de­le­ted, pro­vi­ded that it is no lon­ger re­qui­red for the ful­film­ent or in­itia­ti­on of a con­tract.

13. Le­gal or con­trac­tu­al re­qui­re­ments for the pro­vi­si­on of per­so­nal da­ta; ne­ces­si­ty for the con­clu­si­on of the con­tract; ob­li­ga­ti­on of the da­ta sub­ject to pro­vi­de the per­so­nal da­ta; pos­si­ble con­se­quen­ces of non-pro­vi­si­on

We would li­ke to point out that the pro­vi­si­on of per­so­nal da­ta is in so­me ca­ses re­qui­red by law (e.g. tax re­gu­la­ti­ons) or may al­so re­sult from con­trac­tu­al pro­vi­si­ons (e.g. in­for­ma­ti­on on the con­trac­tu­al part­ner). In so­me ca­ses, it may be ne­ces­sa­ry for a da­ta sub­ject to pro­vi­de us wi­th per­so­nal da­ta in or­der to con­clude a con­tract, which we must then pro­cess. For ex­am­p­le, the da­ta sub­ject is ob­li­ged to pro­vi­de us wi­th per­so­nal da­ta when we con­clude a con­tract wi­th them. Fail­ure to pro­vi­de per­so­nal da­ta would me­an that the con­tract wi­th the da­ta sub­ject could not be con­cluded. Be­fo­re pro­vi­ding per­so­nal da­ta, the da­ta sub­ject must cont­act one of our em­ployees. Our em­ployee will ex­plain to the da­ta sub­ject on a ca­se-by-ca­se ba­sis whe­ther the pro­vi­si­on of per­so­nal da­ta is re­qui­red by law or con­tract or is ne­ces­sa­ry for the con­clu­si­on of the con­tract, whe­ther the­re is an ob­li­ga­ti­on to pro­vi­de the per­so­nal da­ta, and what the con­se­quen­ces of not pro­vi­ding the per­so­nal da­ta would be.