Usage Data

To improve the quality and functionality of our websites and in the case of criminal prosecution, we store data about individual access to our pages for statistical purposes. This data record consists of:

  • the page from which the file was requested,

  • the name of the file,

  • the date and time of the request,

  • the amount of data transmitted,

  • the access status (file transferred, file not found),

  • a description of the type of web browser used,

  • the IP address of the requesting computer.

The legal basis for this data processing is Art. 6 para. 1 lit. f GDPR (legitimate interests of the data controller). The aforementioned reasons also represent the legitimate interest for data processing under Art. 6 para. 1 lit. f GDPR.

Your Rights as a User

a) Right to Confirmation

Every data subject has the right to request confirmation as to whether personal data concerning them is being processed.

b) Right to Access (Art. 15 GDPR)

Every data subject has the right to obtain free access to the personal data stored about them and a copy of this information.

c) Right to Rectification (Art. 16 GDPR)

The data subject has the right to request the immediate correction of incorrect personal data concerning them.

d) Right to Erasure (Right to be Forgotten) (Art. 17 GDPR)

Every data subject has the right to request that personal data concerning them be immediately deleted, provided that one of the legally specified reasons applies and the processing is not necessary.

e) Right to Restriction of Processing (Art. 18 GDPR)

Every data subject has the right to request the restriction of processing if one of the legally specified reasons applies.

f) Right to Data Portability (Art. 20 GDPR)

Every data subject has the right to receive the personal data concerning them, which they provided to a controller, in a structured, commonly used, and machine-readable format, and to transmit this data to another controller without hindrance, provided the processing is based on consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract according to Art. 6 para. 1 lit. b GDPR, and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, in exercising their right to data portability according to Art. 20 para. 1 GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

g) Right to Withdraw Consent (Art. 13 GDPR)

Every data subject has the right to withdraw their consent to the processing of personal data at any time if the processing is based on Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a, without affecting the lawfulness of the processing carried out based on the consent before its withdrawal.

h) Right to Object (Art. 21 GDPR)

Every data subject has the right, for reasons arising from their particular situation, to object at any time to the processing of personal data concerning them, which is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR. This also applies to profiling based on these provisions. If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing purposes, including profiling related to such direct marketing.

i) Automated Individual Decision-Making, Including Profiling (Art. 22 GDPR)

Every data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless the decision:

(1) is necessary for entering into or performing a contract between the data subject and the controller, or

(2) is authorized by Union or Member State law to which the controller is subject and such law contains suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject, or

(3) is based on the data subject's explicit consent.

In the cases referred to in (1) and (3), appropriate measures will be taken to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain human intervention from the controller, to express their point of view, and to contest the decision.

Duration for Which Personal Data Will Be Stored

The criterion for the duration of storage of personal data is the respective statutory retention period. After the period expires, the corresponding data will be routinely deleted, provided they are no longer necessary for fulfilling or initiating a contract.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. This is the state data protection officer of the federal state in which our company is based. A list of data protection officers can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.