DECLARATION OF DATA PROTECTION
The protection of your privacy when processing personal data is important to us. When you visit our website, our web servers save the IP of your Internet service provider, the website from which you visit us, the websites you visit and the date and duration of the visit. This information is essential for the technical transmission of the website and secure server operation. There is no personalized evaluation of this data.
Your data will be treated confidentially. It will not be passed on to third parties.
"Personal" data contain individual information about the personal or factual circumstances of a specific or identifiable person, including name and address or IP address. The "collection" of data means the acquisition of data. "Processing" means storing, changing, transmitting, locking and deleting data. The term “use” means any other use that is not included in the processing.
You do not have to disclose any personal data in order to visit our website. In some cases we need your name and address as well as further information in order to be able to offer you the desired service. The same applies in the event that we supply you with information material on request or when we answer your inquiries. In these cases we will always point this out to you. In addition, we only save the data that you have automatically or voluntarily submitted to us.
DATA PROTECTION FOR APPLICATIONS AND APPLICATION PROCESS
We collect and process applicants' personal data for the purpose of handling the application process. Processing can also be done electronically. This is particularly relevant if an applicant submits corresponding application documents electronically, for example by email. If the person responsible for data processing concludes an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the person responsible does not conclude an employment contract with the applicant, the application documents will be automatically deleted six months after the decision to reject the application, provided that the applicant has not consented to long-term storage or no other legitimate interests of the responsible data processor preclude deletion. Other legitimate interest in this sense is, for example, an obligation to provide evidence in a procedure under the General Equal Treatment Act (AGG).
AUTOMATICALLY SAVED NON-PERSONAL DATA
Each time a user accesses and each time a file is accessed, data is saved in a log file. The storage is only used for internal system-related and statistical purposes.
The following data record is saved for each call:
- Name of the file retrieved
- Date and time of access
- Amount of data transferred
- Report whether the retrieval was successful
- Description of the type of web browser used
- Requesting domain
This data is anonymized and used only for statistical purposes or to improve our internet and online services.
This anonymized data is stored separately from personal data on secure systems and cannot be assigned to any individual. This means that your personal data remains protected at all times.
When you visit our website, we may store information on your computer in the form of cookies. Cookies are small text files that are transferred from an internet server to your browser and stored on its hard drive. This information allows you to be automatically recognized the next time you visit our website, which makes it easier for you to use it.
USE OF GOOGLE MAPS
This website uses Google Maps API, a map service of Google Inc. ("Google"), to display an interactive map and to create directions. Google Maps is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. By using Google Maps, information about your use of this website (including your IP address) can be transmitted to a Google server in the USA and stored there. Google may transfer the information obtained through Maps to third parties if this is required by law or if third parties process this data on behalf of Google. Under no circumstances will Google link your IP address with other Google data.
Nevertheless, it would be technically possible that Google could identify at least individual users based on the data received. It would be possible that personal data and personality profiles of users of the Google website could be processed for other purposes over which we have no influence and cannot have any influence.
A web service from Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, 01801 Woburn, USA (hereinafter: MyFonts Counter) is downloaded from our website. Based on the license terms, page view tracking is carried out by counting the number of visits to the website for statistical purposes and transmitting it to MyFonts.
We have taken technical and administrative security measures to protect your personal data against loss, destruction, manipulation and unauthorized access. All our employees and service providers working for us are obliged to comply with the applicable data protection laws.
Whenever we collect and process personal data, it is encrypted before it is transmitted. This means that your data cannot be misused by third parties. Our security measures are subject to a constant improvement process and our data protection declarations are constantly revised. Please make sure that you have the latest version.
The personal data will only be passed on to third parties or otherwise transmitted if this is necessary for the purpose of contract execution / billing purposes or if the person concerned has given prior consent.
The data is only passed on under the statutory provisions of data protection or upon request by authorities, courts and the tax office or if a claim is made by a third party due to a possible violation of property rights (copyright, trademark and other ancillary rights) a property right holder.
Personal data is not passed on to or to third countries.
a) Right to information:
Everyone concerned has the right to receive free information about the personal data stored about them. In detail:
- the processing purposes
- the categories of personal data that are processed
- the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular for recipients in third countries
- or with international organizations
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
- the existence of a right to correction or deletion of the personal data concerning them or to restriction of processing by the person responsible or a right
- to object to this processing
- the right to lodge a complaint with a supervisory authority
- if the personal data is not collected from the data subject: all available information about the origin of the data
- the existence of automated decision-making, including profiling, in accordance with Article 22 Paragraph 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject
b) Right to rectification:
Everyone concerned has the right to request that their data be corrected. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - also by means of a supplementary statement.
c) Right to cancellation:
Everyone concerned has the right to request that the person responsible delete their personal data immediately. Archiving or blocking takes the place of deletion, insofar as statutory retention periods prevent deletion.
d) Right to restriction of processing:
Everyone concerned has the right to request that the controller restrict processing if one of the following conditions is met:
- The data subject disputes the accuracy of the personal data for a period of time that enables the person responsible to check the accuracy of the personal data.
- The processing is unlawful, the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted.
- The controller no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims.
- The data subject has objected to processing in accordance with Art. 21 para. 1 GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh those of the data subject.
e) Right to data portability:
Every data subject has the right to receive the personal data concerning them, which the data subject has made available to a person responsible, in a structured, common and machine-readable format. Included is the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent in accordance with Art. 6 Para. 1 Letter a GDPR or Art. 9 Para. 2 letter a GDPR or on a contract in accordance with Art. 6 Para. 1 letter b GDPR and the processing is carried out using automated processes, unless the processing is necessary for the performance of a task that is in the public interest or in Public authority is exercised, which has been transferred to the person responsible.
Furthermore, when exercising their right to data portability in accordance with Art. 20 Para. 1 GDPR, the data subject has the right to have the personal data transferred directly from one responsible person to another, if this is technically feasible and if so this does not affect the rights and freedoms of other people.
f) Right to object:
Every person concerned has the right to object to the processing of their personal data at any time for reasons arising from their particular situation, which is based on Article 6 (1) (e) or (f) GDPR. This also applies to profiling based on these provisions.
Right to non-automated processing, including profiling:
Everyone concerned has the right not to be subjected to a decision based solely on automated processing (including profiling), which has a legal effect on them or similarly significantly affects them, provided that the decision:
- is not necessary for the conclusion or performance of a contract between the data subject and the person responsible, is permitted by Union or Member
- State law to which the controller is subject and which law contains appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject,
- or with the express consent of the data subject.
h) Right of withdrawal:
Everyone concerned has the right to withdraw consent to the processing of personal data at any time. The revocation is possible at any time without giving reasons and is effective for the future.
i) Right to lodge a complaint:
Everyone concerned has the right to complain to the supervisory authority responsible for them if they believe that their personal data are not being processed in accordance with data protection regulations. The contact details of the supervisory authority responsible for us are:
Bavarian State Office for Data Protection Supervision
Promenade 27 (castle)
Telephone: +49 981 53 1300
Email: poststelle [at] lda.bayern.de
If you would like to exercise your rights as a data subject, please contact:
Königbacher Strasse 17
Telephone: +49 8542 165-39
Email: datenschutz [at] inacore.de
CHANGE OF PRIVACY STATEMENT
ORDERED DATA PROTECTION OFFICER
CB ADDATA GmbH
94099 Ruhstorf an der Rott
Tel .: 0049 8531 978 447 0
Email: info [at] cb-addata.de
Status of data protection declaration: November 2019