1. DATA PROTECTION
We, Weischer and all our subsidiary companies in Germany and Switzerland want you to feel at ease when visiting our website. Protecting your personal data is an important matter for us and therefore in the following we wish to inform you of how we handle your data in compliance with Article 13 of the General Data Protection Regulation (GDPR).
Responsibility for the data collection and processing described in the following lies with the person whose details are stated in the Imprint.
When you visit our web pages, so-called usage data is temporarily evaluated on our web server for statistical purposes as a protocol in order to improve the quality of our web pages. This data record consists of
– the name and address of the requested content,
– the date and time of the request,
– the amount of data transferred,
– the access status (content transferred, content not found),
– the description of the web browser and operating system used,
– the referral link, which indicates the page from which you came to ours,
– the IP address of the requesting computer, which is shortened so that a personal reference can no longer be established.
The aforementioned protocol data is only evaluated anonymously.
Storage of the IP address for security purposes
In addition, we store the complete IP address transmitted by your web browser for a strictly limited period of seven days in the interest of being able to recognise, limit and eliminate attacks on our web pages. After this period, we delete or anonymise the IP address. The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO.
2. DATA SECURITY
Weischer collects, processes, stores and protects the data of people who access our website. We take technical and organizational measures to protect your data from unwanted access as comprehensively as possible. We use an encryption method on our website. Your information is transferred over the Internet from your computer to our server and vice versa using TLS. You will recognize this by the fact that the lock symbol on the status bar of your browser is locked and the address bar starts with https://.
3. DATA TRANSFER
DATA TRANSFER TO THIRD PARTIES
We pass on your data to service providers who support us in the operation of our websites and the associated processes as part of commissioned processing pursuant to Art. 28 DSGVO. These are, for example, hosting service providers. Our service providers are strictly bound by instructions and are contractually obligated to us accordingly.
In the following, we will name the order processors with whom we work, if we have not already done so in the preceding text of the data protection declaration. If data is transferred outside the EU or EEA in this context, we provide information on the appropriate level of data protection.
Processor: Microsoft Azure Cloud
Purpose: Webhosting and Support
Adequate level of data protection: Processing only within EU/EEA
4. COLLECTION, PROCESSING, STORAGE AND USE OF PERSONAL DATA
We process the personal data of our customers insofar and as long as this is required for the implementation of pre-contractual measures or for the performance of an agreement pursuant to Article 6(1)(1)(b) GDPR, or insofar as this is in our legitimate interest as per Article 6(1)(1)(f) GDPR. A legitimate interest includes information about events or news from Weischer.Media and its subsidiaries.
Data will only be processed for its intended purpose within the area of application of the GDPR and in Switzerland and will not be passed on to third parties, unless appropriate data protection agreements are in place with those cooperation partners. Data will only be deleted if the purpose no longer exists and if this does not conflict with statutory retention requirements. The rights of the individual concerned remain unaffected.
4.1. PERSONAL DATA
Personal data is information about factual or personal circumstances relating to an identified or identifiable natural person. This includes your name and e-mail address, for example.
4.2. PURPOSE OF PROCESSING
We process your personal data for
- voluntary communication with you when you contact us.
- the fulfilment of the contract.
- marketing and promotional purposes.
4.3. CATEGORIES OF PERSONAL DATA THAT WE PROCESS FOR THE PURPOSES SPECIFIED UNDER POINT 7
- Your usage data
- Your payment data
- Your voluntary mobile data.
4.4 ERASURE AND BLOCKING OF PERSONAL DATA
Weischer processes and stores personal data for the persons concerned solely for the period for which it is required to achieve the storage purpose, or if this is stipulated by legal regulations to which the controller is subjected. If there is no storage purpose or if a legal storage deadline expires, the personal data is routinely blocked or erased and in accordance with the legal provisions.
5. LEGAL BASIS OF DATA PROCESSING
No data shall be processed without a legal basis. Such as:
- Conclusion of a contract
- Legal obligations
- The pursuing of a legitimate interest of Weischer and the affiliated subsidiaries in Germany and Switzerland
6. RIGHTS OF THE PERSONS CONCERNED
When processing your personal data, the GDPR grants you certain rights as a data subject:
Right of access (Art. 15 GDPR).
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to access this personal data and the information listed in detail in Art. 15 DSGVO.
Right to rectification (Art. 16 GDPR)
You have the right to request without undue delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete data.
Right to erasure (Art. 17 DSGVO)
You have the right to request that personal data concerning you be erased without delay, provided that one of the reasons listed in detail in Art. 17 DSGVO applies.
Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 DSGVO applies, e.g. if you have objected to the processing, for the duration of the review by the controller.
Right to data portability (Art. 20 DSGVO).
In certain cases, which are listed in detail in Art. 20 DSGVO, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.
Right of withdrawal (Art. 7 DSGVO)
If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 (3) DSGVO. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected by this.
Right of objection (Art. 21 DSGVO)
If data is collected on the basis of Art. 6 para. 1 sentence 1 lit. f DSGVO (data processing to safeguard legitimate interests) or on the basis of Art. 6 para. 1 sentence 1 lit. e DSGVO (data processing to safeguard public interest or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Right of complaint to a supervisory authority (Art. 77 DSGVO)
Pursuant to Art. 77 DSGVO, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection provisions. In particular, the right of complaint may be asserted before a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement.
Assertion of your rights
Unless otherwise described above, please contact the office named in the imprint to assert your data subject rights.
7. ADDITIONAL CONTENT ON THE PRIVACY STATEMENT
SOCIAL MEDIA PLUGINS
For data protection reasons, we do not integrate social plugins directly into our website. When you access our pages, no data is therefore transmitted to social media services such as Facebook, Instagram, Twitter or XING. Profiling by third parties is therefore excluded.
NEWSLETTER + EVENT INVITATIONS + REGISTRATION
As part of our contractual cooperation, we offer you the receipt of news and event invitations, among other things. For this digital dispatch we use the so-called double opt-in procedure, i.e. we will only send you a newsletter or an invitation if you have previously expressly confirmed that we should activate these services for you. In this regard, a corresponding processing takes place on the basis of Art. 6 para. 1 lit. a DSGVO.
Your consent can be revoked at any time without affecting the lawfulness of the processing carried out so far. If consent is revoked, we will cease the corresponding data processing.
If you wish to revoke your consent, you can do so here: Revocation data use
8. CONTACT DETAILS OF OUR DATA PROTECTION OFFICER (DPO)
Our external data protection officer will be happy to provide you with information on the subject of data protection under the following contact details:
If you contact our data protection officer, please also state the responsible office named in the imprint.
In the following, we would like to inform you about the handling of your data in accordance with Art. 13 of the General Data Protection Regulation (DSGVO).
We, Weischer, operate the following social media pages:
– Facebook: https://www.facebook.com/weischermedia/
– YouTube: https://www.youtube.com/user/WeischerMediengruppe
– Instagram: https://www.instagram.com/weischer.media/
– XING: https://www.xing.com/companies/weischer.media
– LinkedIn: https://www.linkedin.com/company/7221475/admin/
You can find our contact details in our imprint.
In addition to us, there is also the operator of the social media platform itself. In this respect, this operator is also another controller who carries out data processing over which, however, we have only limited influence. At the points where we can exert influence and parameterise data processing, we work towards data protection-compliant handling by the operator of the social media platform within the scope of the possibilities available to us. At many points, however, we cannot influence the data processing by the operator of the social media platform and also do not know exactly what data the operator processes.
Data processing by us
The data you enter on our social media pages, such as comments, videos, pictures, likes, public messages, etc., are published by the social media platform and are not used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. Where applicable, we share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO. The data processing is carried out in the interest of our public relations and communication.
If you wish to object to certain data processing over which we have influence, please contact us using the contact details provided in the imprint. We will then examine your objection.
If you send us a request on the social media platform, we may also refer you to other secure communication channels that guarantee confidentiality, depending on the response required. You always have the option of sending us confidential enquiries to our address stated in the imprint.
As already stated, where the social media platform provider gives us the opportunity, we take care to design our social media pages to be as data protection compliant as possible. In particular, we therefore do not use the demographic, interest-based, behaviour-based or location-based target group definitions for advertising that the social media platform provider may make available to us. Overall, we do not use the data provided by the respective platforms for advertising purposes. With regard to statistics provided to us by the provider of the social media platform, we can only influence these to a limited extent and cannot switch them off. However, we make sure that no additional optional statistics are made available to us.
Data processing by the operator of the social media platform
The operator of the social media platform uses web tracking methods. The web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we can unfortunately hardly influence the web tracking methods of the social media platform. For example, we cannot switch this off.
Please be aware that it cannot be ruled out that the provider of the social media platform uses your profile and behavioural data, for example to evaluate your habits, personal relationships, preferences, etc. We have no influence on this. In this respect, we have no influence on the processing of your data by the provider of the social media platform.
– Facebook: https://www.facebook.com/privacy/explanation
– YouTube: https://policies.google.com/privacy?hl=de&gl=de
– Instagram: https://help.instagram.com/519522125107875
– XING: https://privacy.xing.com/de/datenschutzerklaerung
– LinkedIn: https://de.linkedin.com/legal/privacy-policyv
Your rights as a user
When processing your personal data, the GDPR grants you certain rights as a website user:
1.) RIGHT OF ACCESS (ART. 15 DSGVO):
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to be informed about this personal data and to receive the information listed in detail in Art. 15 DSGVO.
2.) RIGHT TO RECTIFICATION AND ERASURE (ART. 16 AND 17 DSGVO):
You have the right to request without undue delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data.
You also have the right to request that personal data concerning you be deleted without delay if one of the reasons listed in detail in Art. 17 of the GDPR applies, e.g. if the data is no longer required for the purposes pursued.
3.) RIGHT TO RESTRICTION OF PROCESSING (ART. 18 DSGVO):
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to the processing, for the duration of any review.
4.) RIGHT TO DATA PORTABILITY (ART. 20 DSGVO):
In certain cases, which are detailed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transfer of such data to a third party.
5.) RIGHT OF OBJECTION (ART. 21 DSGVO):
If data is collected on the basis of Art. 6 (1) (f) (data processing for the protection of legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
Right of appeal to a supervisory authority
Pursuant to Art. 77 DSGVO, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection provisions. The right of complaint may in particular be asserted before a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement.
Contact details of the data protection officer
Our data protection officer will be happy to provide you with information or suggestions on the subject of data protection:
Dr. Uwe Schläger
datenschutz nord GmbH
Phone: 0421 69 66 32 0
Version 1.0 from 01.09.2018 (Changes and adaptations expressly reserved