Data protection declaration
It is normally possible to use our website without providing any personal data. Insofar as personal data is collected when visiting our websites, we process it exclusively in accordance with the General Data Protection Regulation (Regulation (EU)
This data protection declaration applies to the use of the website at the address https://www.kreidler.com/en/. The data protection declaration provided at the linked website is decisive for linked contents of other providers.
We would like to point out that security loopholes may occur in the course of data transmission via the Internet, which cannot be prevented by the technical design of this website. Complete protection of personal data is not possible when using the Internet.
I. Name and address of the responsible party
The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
New Cycle GmbH
An der Schmiede 4
26135 Oldenburg
Deutschland
Telefon:
E-Mail: nc____________@new-cycle.net
Internet: www.new-cycle.net
II. Name and address of the data protection officer
The responsible party's data protection officer is:
Gerrit Schulte
audatis® Consulting GmbH
Datenschutz und Informationssicherheit
Luisenstraße 1
32052 Herford
E-Mail: datenschutz-prophete____________@audatis.de
Internet: www.audatis.de
III. Web hosting
1. Hosting of the website
Our website is operated on a web server of xdot GmbH (xdot GmbH, Feldstiege 78, 48161 Münster, Germany, www.x-serv.de).
2. Collected data
When accessing our websites, data is automatically collected and stored in log files on our hoster's server. This data may contain personal references. The collected data includes:
- Name of the accessed website
- Date and time of the access
- The amount of data transmitted
- Notification of successful access
- Internet browser type
- Internet browser version
- The operating system the browser is running on with patch level
- Previously visited page
- Accessed provider
- IP addresses
3. Purpose of collection by the hoster
The hoster uses the collected data to operate the website and to ensure IT security. In the event of specific indications, the log data will be analysed later if necessary.
4. Duration of storage by the hoster
Data stored by the hoster will be automatically deleted after four weeks.
IV. Maintenance of the website
Our website is maintained by bgp e.media (bgp e.media GmbH, Max-Planck-Ring 62a, 46049 Oberhausen, NRW, Germany, Phone:
Personal master data
- Personal master data
- Communications data
- Log data
The data can be accessed exclusively on behalf of new cycle GmbH within the framework of the technical support of the website. Your data will not be disclosed under any circumstances. With regard to secure order processing of your personal data in the newsletter tool, there is a legally binding agreement for order data processing with bgp e.media.
V. General information on data processing
This site uses SSL encryption for security reasons and for the protection of the transmission of confidential content, such as the enquiries you send to us as the site operator. You can recognise an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon in your browser line is visible. If SSL encryption is activated, the data which you transfer to us cannot be read by third parties.
1. Scope of the personal data processing
We collect and utilise our users' personal data only insofar as this is necessary for provision of an operational site and of our content and services. Collection and utilisation of our users' personal data is only undertaken periodically with the user's consent. An exception applies in those cases where prior consent cannot be obtained for legal or factual reasons and the processing of the data is permitted by law.
2. Legal basis for processing personal data
Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) applies as the legal basis for processing personal data.
In processing personal data necessary for performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR applies as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR applies as the legal basis.
In the event that vital interests of the data subject or another natural person require a processing of personal data, Art. 6 1 lit. d GDPR applies as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Para. 1 lit. f GDPR applies as the legal basis for processing.
3. Data deletion and storage duration
The data subject's personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the responsible party is subject. Blocking or deletion of data will be carried out even if a storage deadline prescribed by the above-mentioned standards expires, unless data storage is a necessity for concluding or performing a contract.
VI. Provision of the website and creation of log file
1. Description and scope of data processing
Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:
- Information regarding the used browser type and version
- The user’s operating system
- The user's IP address
- Date and time of access
- Websites from which the user's system accesses our website
- Websites accessed by the user's system via our website
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
2. Legal basis for data processing
The legal basis for temporary storage of data and log files is Art. 6 Para. 1 lit. f, GDPR).
3. Purpose of the data processing
Temporary storage of IP address by the system is necessary to enable delivery of the website to the user's computer. To this end, the user's IP address must remain stored for the duration of the session.
The data is stored in log files to ensure the website's functionality. The data is also used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context.
These purposes also encompass our legitimate interest in data processing in accordance with Ar. 6 Para. 1 lit. f, GDPR).
4. Duration of storage
Collected customer data shall be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected. In the case of data collection for provision of the website, this will be undertaken once the respective session has ended.
5. Objection and removal option
Collection of data for provision of the website and storage of data in log files is absolutely necessary for operation of the website. Consequently, there is no option to object on the part of the user.
VII. Use of cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a distinctive character string that enables unique identification of the browser when the website is accessed again.
We use cookies to optimise our websites. So-called session cookies are also used, which enable recognition during a visit of our sites. Session cookies are automatically deleted from your browser after your visit.
The user's session ID is stored in the cookies.
We also use cookies to recognise your device across sessions. Cookies stored on your device for this purpose are not deleted after each session. These are cookies that enable analysis of surfing behaviour and targeted advertising of the users.
The following data can be transmitted in this way:
(1) Origin (country and city)
(2) Language
(3) Operating system of the accessing computer
(4) Device (PC, Tablet or Smartphone)
(5) Browser and used add-ons
(6) Computer resolution
(7) Visitor source (e.g. Facebook, search engine or referring site)
(8) Entered search terms
(9 Frequency of page views
(10) Use of website functions
(11) Total visit time and length of stay on the individual pages
(12) The original source of the visitor
(13) Other websites visited
The user data collected in this way is pseudonymised via technical precautions. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with users' other personal data.
When accessing our website, the user is informed via an information banner regarding the use of cookies for analytical purposes and his or her consent to the processing of personal data used in this context is obtained. Reference is also made to this data protection declaration in this context. You find further relevant information and options for stopping website tracking in this data protection declaration.
When accessing our website, the user is informed regarding the use of cookies for analytical purposes and his or her consent to the processing of personal data used in this context is obtained. Reference is also made to this data protection declaration in this context.
b) Legal basis for the data processing
The legal basis for processing personal data using technically necessary cookies is Art. 6 Para. 1 lit. f, GDPR).
The legal basis for processing personal data by using cookies for analytical purposes, if the user's consent to this has been obtained, is Art. 6 Para. 1 lit. a GDPR.
c) Purpose of the data processing
The purpose of using technically necessary cookies is to simplify use of websites for users. Some features of our website are not offered without the use of cookies. In this case, it is necessary that the browser be recognised even after changing the page.
The user data collected by technically necessary cookies is not used to create user profiles.
For the analysis of our website we use cookies from Google Analytics.
The analysis cookies are used to improve the quality of our website and its content. Using analysis cookies, we learn how the site is used and can constantly optimise our service.
For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 Para. 1 lit. f, GDPR).
d) Duration of storage, objection and removal option
Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user you have full control of the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's features in full.
VIII. Contact form and email contact
1. Description and scope of data processing
There is a contact form on our website that can be used for electronic contact. If a user accepts this option, the data entered in the input screen will be transmitted to us and stored. This data may include:
1. Title
2. First name
3. Last name
4. Company name
5. Street address
6. Postal code
7. Town/city
8. Country
9. Phone number
10. Mobile number
11. Email address
12. Product
13. Product purchase date
14. Dealer
15. Subject of the request
16. Content of the request
17. Reference number
18. Attached files/documents
The following data is also stored at the time the message is sent:
- The user's IP address (anonymous)
- Date and time of registration
During the sending process, your consent is obtained for processing data and reference is made to this data protection declaration.
In order to ensure sufficient data security when submitting forms, we use Google Inc.'s reCAPTCHA service. This is mainly used to distinguish whether the entry has been made by a natural person or abusively by a machine and via automated processing.
For more information, please see the Google Services section of this data protection declaration.
Alternatively, you can contact us via the provided email address. In this case, the user's personal data that is transmitted along with the email will be stored.
2. Legal basis for data processing
The legal basis for processing the data, if the user's consent to this has been obtained, is Art. 6 para. 1 lit. a GDPR. The legal basis for processing the data transferred in the course of sending an email is Art. 6 Para. 1 lit. f, GDPR). If the email contact aims at the conclusion of a contract, then an additional legal basis for the processing is Art. 6 Abs. 1 lit. b, GDPR).
3. Purpose of the data processing
The processing of personal data in the input screen is used by us only for processing the contact. In the event of contact by email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process is for preventing misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the contact form input screen and the data that was sent by email, this is the case when the respective conversation with the user has been completed. The conversation will have ended when it is evident from the circumstances that the matter at hand has been conclusively resolved. Personal data that was additionally collected during the sending procedure will be deleted at the latest after a period of seven days.
5. Objection and removal option
The user has the option of revoking his or her consent to the processing of personal data at any time. A user who has contacted us by email can object at any time to the storage of his or her personal data. It will not be possible to continue the conversation in this case.
If you would like to revoke your consent to the storage of your data, please contact us using the following contact details:
New Cycle GmbH
An der Schmiede 4
26135 Oldenburg
Deutschland
Telefon:
Internet: www.new-cycle.net
All personal data stored in the course of contacting us will be deleted as a result.
IX. Use of Google services
Our website uses the services of the company Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google). Google has become subject to the Privacy Shield agreement, thereby offering a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active)
See below for more information with respect to new cycle GmbH's use of Google services and the scope of personal data processing
1. Google Services
a.) Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files that are stored on your computer and which help analyse your use of the website. This is to allow cookies from Google itself (Google Analytics cookies) and so-called third-party cookies (double click cookies). The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We wish to point out that on this website Google Analytics has been extended with the code "gat._anonymizeIp();" in order to ensure the anonymous collection of IP addresses (IP masking). With anonymisation active, Google IP addresses are shortened within Member States of the European Union or in other States party to the European Economic Area, which is why no conclusions as to your identity are possible. The full IP address will only be transferred to a Google server in the USA and shortened in exceptional cases.
In the context of our use of Google Analytics, we have concluded a legally valid agreement with Google for order processing.
1. Legal basis for processing personal data
The legal basis for the use of Google Analytics is § 15 Para. 3 TMG (Telemedia Act) and Art. 6 Para. 1 li. F GDPR.
2. Purpose of the data processing
On behalf of the operator of this website, Google will use the collected information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services associated with website and Internet use, in particular also functions for display advertising, such as Google Analytics reports on performance according to demographic characteristics and interests. Google may also transfer this information to third parties as required by law or if said third parties process this data on behalf of Google. Google's analytics reports on performance in accordance with demographic characteristics and interests use information and visitor data from third parties (such as age, gender and interests) obtained through interest-based advertising from Google. Google will not under any circumstances associate your IP address with any other data held by Google.
3. Duration of storage
Sessions and campaigns will end after a certain period of time. By default, sessions end after 30 minutes without activity and campaigns after six months. The time limit for campaigns can be up to a maximum of two years. For more information on terms of use and data protection, visit https://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de
4. Objection and removal option
You can prevent these cookies from being stored by selecting the appropriate settings in your browser; however, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent cookie-generated data about your use of the website (including your IP address) being passed on to Google, and prevent this data from being processed by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Opt-out cookies prevent future acquisition of your data when you visit this website. In order to prevent data acquisition by Universal Analytics across multiple devices, you need to perform the opt-out on all systems you are using. Click here to set the opt-out cookie:
b.) Google Maps
This website uses a service to display an interactive map with the product Google Maps from Google Inc.. By using this website, you consent to the collection, processing, and use of data collected automatically by Google Inc., its representatives, and third parties.
Google will not under any circumstances associate your IP address with any other data held by Google. However, it would be technically possible for Google to identify at least individual users based on the data collected. For example, it would be possible that personal data and personality profiles of users of the Google website could be processed for other purposes. We have no influence over this.
If you do not want your information stored by Google Maps, you can disable Google Maps by deactivating your browser's JavaScript. However, we would like to point out that in this case you will not be able to display the map.
By using this website and by not deactivating the JavaScript function, you expressly declare that you agree to the processing of data collected about you by Google in the manner described above and for the aforementioned purpose.
For more information about the terms of use, legal notices regarding Google maps and the Google Privacy policy, visit http://www.google.com/intl/de_de/help/terms_maps.html and https://www.google.com/intl/de/policies/privacy/index.html
c.) Google WebFonts
This website uses external fonts, Google Fonts. Google Fonts is a service of Google, Inc. ("Google"). Integration of these web fonts is implemented via a server access, typically a Google server in the United States. This transmits information to the server as to which of our website pages you have visited. The IP address of the browser on the visitor's terminal device is also stored by Google. Further information can be found in Google's privacy policy, which you can access here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/
d.) Google reCAPTCHA
In order to ensure sufficient data security when submitting forms, we use Google Inc.'s reCAPTCHA service in certain cases. This is mainly used to distinguish whether the entry has been made by a natural person or abusively by a machine and via automated processing. This service includes sending to Google the IP address and any other data required by Google for the reCAPTCHA service. The deviating data protection regulations of Google Inc. apply to this. For more information about Google Inc.'s privacy policy, visit http://www.google.de/intl/de/privacy or https://www.google.com/intl/de/policies/privacy/
e.) Google Tag Manager
Google Tag Manager is a marketing tool from Google Inc. ("Google"), which enables a website's marketers to manage website tags via an interface. Tags are small code elements, which among other things are for measuring traffic and visitor behaviour on a website to determine the impact of online advertising and social channels, remarketing, to introduce orientation toward target groups, and for testing and optimising the website. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personal data.
The tool triggers other tags, which in turn may collect data under certain circumstances. The Google Tag Manager does not access this data. If deactivation occurs at domain or cookie level, it remains in use for all tracking tags, insofar as they are implemented with Google Tag Manager. For more information about Tag Manager data collection, please visit: http://www.google.com/policies/privacy/
Click here to be excluded from Google Tag Manager data collection.
2. Deactivating Google cookies
You can permanently disable Google's use of cookies by changing the following link and cookie management settings: http://www.google.com/policies/technologies/managing/
http://www.google.com/policies/technologies/ads/
Changes to the advert settings can be made at https://www.google.de/settings/ads.
Alternatively, you can disable the use of cookies by third parties by visiting the deactivation website of the Network Advertising Initiative at http://www.networkadvertising.org/choices/ and implementing the additional opt-out information described there.
X. Other Websiteanalytics
Facebook Pixel
We use the “visitor action pixels” from Facebook Inc (1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”)) on our website.
This allows user behavior to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which is why we are informing you, based on our knowledge of the situation. Facebook may link this information to your Facebook account and also use it for its own promotional purposes, in accordance with Facebook’s Data Usage Policy https://www.facebook.com/about/privacy/. You can allow Facebook and its partners to place ads on and off Facebook. A cookie may also be stored on your computer for these purposes.
The legal basis for the use of this service is Art. 6 paragraph 1 sentence 1 letter f GDPR. You can object to the collection of your data by Facebook pixel, or to the use of your data for the purpose of displaying Facebook ads by contacting the following address: https://www.facebook.com/settings?tab=ads.
Facebook is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
XI. Application
1. Description and scope of data processing
As part of their application, we offer users the opportunity to apply on our website by providing personal data. The data is entered into an input screen, transmitted to us, and stored. The following data may be collected during the registration process:
adapt this accordingly
- Personal data (first and last name, date of birth, address, graduation credential)
- Communication data (telephone number, mobile phone number, fax number, email address)
- Report data (from third parties such as credit bureaus, or from public directories)
- Data on assessment and evaluation in the application procedure
- Data on education (school, vocational training, civil/military service, studies, degree)
- Data on previous professional career, training and job references
- Information on other qualifications (e.g., language skills, PC skills, volunteer activities)
- Application photos
- Information on the salary expectation and earliest employment start
- Application history
- Photo
2. Legal basis for data processing
The legal basis for processing data after the user registers for the newsletter is, if the user's consent to this has been obtained, Art. 6, Para. 1 lit. a) GDPR.
3. Purpose of the data processing
We use the information you submit solely to process your application for the position, unless you have actively agreed to a longer term of storage in the application process.
Only persons who are involved in the application process are informed of your personal data. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. We do not share your personal information with third parties, unless you have consented to the transfer of data or we are obliged by law and/or official or judicial orders to a data transfer. With an application an account is created in our career portal, where you can view and manage your application.
4. Duration of storage
Within TIME PERIOD after completion of the specific application process, your data will be automatically deleted. This does not apply if statutory provisions preclude deletion, continued storage for the purpose of evidence is required, or you have expressly agreed to a longer storage duration.
5. Security
We take all necessary technical and organisational security measures to protect your personal data from loss or misuse. All data is transmitted in encrypted form and protected by appropriate technology.
6. Objection and removal option
In accordance with Article 15 of the GDPR, you have the right to request information from us at any time about the data we stored about you, its origin, recipients and categories of recipients to whom this data has been disclosed. Furthermore, you have the right to request information about the purpose of storage.
You can object to the use of your data for the above-mentioned purposes at any time with effect for the future.
All information requests, requests for information or objections to data processing should be directed to us by email:
New Cycle GmbH
An der Schmiede 4
26135 Oldenburg
Deutschland
Telefon:
Email: nc____________@new-cycle.net
Internet: www.new-cycle.net
XII. Raffles
1. Description and scope of data processing
From time to time we offer participation in competitions on our website. Registration is required to participate, with entry of the following data:
DATA HERE
1. Email address
2. First and last name
3. Postal address
The following data is also stored at the time the message is sent:
1. The user's anonymised IP address
2. Date and time of registration
We use this information to notify you of winning. You can find detailed information in our terms of participation for each competition.
If you participate in a competition on our website and enter your email address, we may subsequently use it for sending you a newsletter if you have given your consent. In such a case, only direct marketing of our own similar products or services will be sent via the newsletter.
2. Legal basis for data processing
The legal basis for processing data after the user registers for the competition is, if the user's consent to this has been obtained, Art. 6 Para. 1 lit. a) GDPR.
3. Purpose of the data processing
The data you have transmitted will be used exclusively for participation in the competition, unless you have actively consented to its being stored for a longer period.
Only persons who are involved in the competition process are informed of your personal data. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. Your data will be used strictly for the intended purpose, and in this context may be passed on to third parties (for example, for the purpose of sending winnings).
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for achieving the purpose of its collection, unless you have consented to its being stored for a longer period. For the personal data entered in the competition input screen, the achievement of the purpose is the end of the respective competition.
Personal data that was additionally collected during the sending procedure will be deleted at the latest after a period of seven days.
5. Objection and removal option
The user has the option of revoking his or her consent to the processing of personal data at any time. A user who has contacted us by email can object at any time to the storage of his or her personal data. It will not be possible to continue the conversation in this case.
If you would like to revoke your consent to the storage of your data, please contact us using the following contact details:
New Cycle GmbH
An der Schmiede 4
26135 Oldenburg
Deutschland
Telephone:
Internet: www.new-cycle.net
All personal data stored in the course of the competition will be deleted as a result.
XIII. facebook raffle
We organize on our website facebook competitions.
The respective competitions are not affiliated with Facebook and are in no way sponsored, supported or organized by Facebook.
Participation in the raffle is only possible at the respective terms and conditions. By participating in the competition, the participant expressly acknowledges these terms and conditions. The organizer reserves the right to change, adapt or terminate the raffle at any time without prior notice and without giving reasons.
Insofar as personal data of participants are collected within the framework of a raffle, these are collected, processed and used by the organizer solely for the purpose of carrying out the action and can be published on our websites or on our facebook page. As part of the competition participation, a consent to the processing of the entered personal data is obtained.
If you participate in the raffle, data entered in this framework may also be transmitted to facebook. We point out that we as the provider of the pages are not aware of the content of the data transmitted and their use by Facebook. For more information, please refer to the Facebook Privacy Policy at https://de-de.facebook.com/policy.php.
XIV. Newsletter
Newsletter data
If you would like to receive our newsletter, we require a valid email address as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive this newsletter. No additional data is collected or is only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.
We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1) (a) DSGVO. You can revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, e.g. through the "unsubscribe" link in the newsletter. The data processed before we receive your request may still be legally processed.
The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted. Data we have stored for other purposes (e.g. email addresses for the members area) remain unaffected.
Rapidmail
This website uses Rapidmail to send newsletters. This service is provided by rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg, Germany.
Rapidmail is a service which organizes and analyzes the distribution of newsletters. The data you provide to subscribe to our newsletter will be stored on Rapidmail servers in Germany.
If you do not want your usage of the newsletter to be analyzed by Rapidmail, you will have to unsubscribe from the newsletter. For this purpose, we provide a link in every newsletter we send. You can also unsubscribe from the newsletter directly on the website.
Data analysis by Rapidmail
For analysis purposes, emails sent with Rapidmail contain a tracking pixel which connects to Rapidmail servers when the email is opened. This allows us to determine if a newsletter message has been opened.
It also helps us determine which links have been clicked on. All links in the email are tracking links that allow us to count your clicks.
For more information about the analysis functions of Rapidmail, please refer to the following link: https://de.rapidmail.wiki/kategorien/statistiken/.
Legal basis
Data processing is based on Art. 6 (1) (a) DSGVO. You may revoke your consent at any time. The data processed before we receive your request may still be legally processed.
Storage duration
The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted from our servers and those of Rapidmail. Data we have stored for other purposes (e.g. email addresses for the members area) remains unaffected.
For more information, see the privacy policy of Rapidmail at https://www.rapidmail.de/datensicherheit.
Completion of an outsourced data processing contract
We have entered into a data processing agreement with Rapidmail, in which we require Rapidmail to protect the data of our customers and not to disclose said data to third parties. It can be downloaded here: https://de.rapidmail.wiki/files/adv/muster-auftragsdatenverarbeitung.pdf.
XV. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights with respect to the responsible party:
1. The right to information
You can request that the responsible party confirm whether we will process personal data that concerns you. If such processing is taking place, you can request to be informed by the responsible party regarding the following information:
(1) the purposes for processing the personal data;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
(4) the planned storage duration of personal data concerning you or, if specific information in this respect is not possible, criteria for determining the storage period;
(5) the existence of a right of rectification or deletion of personal data that concerns you or of a restriction on processing by the responsible party or of a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information on the origin of the data if the personal data has not been collected from the data subject;
(8) the existence of automated decision-making, including profiling in accordance with Art. 22 Par. 1 and 4, GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information regarding whether your personal information will be transmitted to a third-party country or an international organisation. In this respect, you can request the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transmission.
2. The right of rectification
You have a right of rectification and/or completion with respect to the responsible party if the personal data processed concerning you is incorrect or incomplete. The responsible party must make the correction immediately.
3. The right to restriction of processing
Under the following conditions, you may request that the processing of personal data concerning you be restricted if:
(1) you dispute the accuracy of the personal data concerning you for a period that enables the responsible party to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
(3) the responsible party does not need the personal data for longer than the processing's purposes, but you need it for the assertion, exercise or defence of legal claims, or
(4) you object to the processing in accordance with Art. 21, Para. 1, GDPR and it is not yet clear whether the legitimate reasons of the responsible party outweigh your reasons.
Where processing of the personal data that concerns you has been restricted, such data – apart from being stored – may be processed only with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on the grounds of an important public interest of the Union or of a Member State.
If the processing restriction has been restricted in accordance with the above conditions, you will be informed by the responsible party before the restriction has been lifted.
4. The right to deletion
a) Deletion obligation
You may request that the responsible party delete the personal data that concerns you immediately, and the responsible party will be obliged to delete this data immediately if one of the following reasons applies:
(1) the personal data that concerns you is no longer necessary for the purposes for which it was collected or otherwise processed;
(2) you revoke your consent to the processing pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR and there is no other legal basis for processing;
(3) pursuant to Art. 21 Para. 1 GDPR, you object to the processing and there are no overriding justifiable reasons for the processing, or Art. 21 Para. to the processing pursuant to Art. 21 Para. 2 GDPR;
(4) the personal data that concerns you has been processed unlawfully;
(5) the deletion of personal data is required to comply with legal obligations according to Union law or the laws of the Member States to which the responsible party is subject;
(6) the personal data that concerns you has been collected in connection with offered information society services pursuant to Art. 8 Para. 1, GDPR.
b) Passing information to third parties
If the responsible party has made the personal data that concerns you public and if the responsible party is obliged for its deletion pursuant to Art. 17, Para. 1 of the GDPR, that responsible party shall take appropriate measures, including technical means, while taking into account available technology and implementation costs, to inform the parties responsible for data processing who process the personal data, that you as the person concerned have requested deletion of all links to such personal data or of copies or replications of such personal data.
c) Exceptions
The right to deletion does not exist insofar as the processing is necessary
(1) to exercise the right of freedom of expression and information;
(2) for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the responsible party is subject or for the performance of a task in the public interest or in the exercise of official authority conferred to the responsible party;
(3) for reasons of public interest in the field of public health in accordance with Art. 9 Para. 2 lit. h and i, as well as Art. 9 Para. 3, GDPR;
(4) for archiving purposes in the interest of public, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, to the extent that the law referred to in (a) is likely to render impossible or seriously prejudicial the attainment of the objectives of such processing; or
(5) to assert, exercise or defend legal claims.
5. Right to information
If you have exercised your right to have the responsible party correct, delete or limit the processing, this party is obliged to inform all recipients to whom the personal data that concerns you has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.
It is your right to have the responsible party inform you regarding such recipients.
6. The right of data portability
You have the right to obtain your personal data, which you have provided to the responsible party, in a structured, conventional and machine-readable format. In addition, you have the right to pass this data on to another responsible party without obstruction by the responsible party to whom the personal data was provided, insofar as
(1) the processing is based on consent pursuant to Art. 6 Para. 1 lit. a, GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b GDPR and
(2) the processing is undertaken using automated procedures.
In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one responsible party to another responsible party, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the responsible party.
7. The right of objection
You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning you at any time, which is carried out in accordance with Art. 6 Para. 1 lit. e or lit. f, GDPR; the same applies to profiling based on these provisions.
The responsible party will no longer process the personal data that concerns you, unless the party can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data that concerns you is being processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data that concerns you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.
If you object to processing that is for direct marketing purposes, the personal data that concerns you will no longer be processed for these purposes.
You have the option of exercising your right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.
8. The right to revoke the data protection declaration of consent
You have the right at any time to revoke your data protection declaration of consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its revocation.
9. Automated decision in individual cases, including profiling
You have the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against you or significantly impairs you in a similar manner. This does not apply if the decision
(1) is necessary for the conclusion or fulfilment of a contract between you and the responsible party;
(2) is permissible on the basis of legislation of the Union or the Member States, to which the responsible party is subject, and these laws contain adequate measures to safeguard your rights and freedoms, as well as your legitimate interests, or
(3) is undertaken with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9, Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.
In the cases referred to in (1) and (3), the responsible party shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person on the part of the responsible party, to state his or her own position and to challenge the decision.
10. The right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of GDPR. The supervisory authority with which the appeal has been lodged shall inform the appellant of the status and results of the appeal, including the possibility of a judicial remedy under Article 78 GDPR.
Please contact the competent supervisory authority:
Land Commissioner for Data Protection and Freedom of Information of Lower Saxony
Barbara Thiel
Prinzenstraße 5
30159 Hannover
Phone:
Fax:
Mail: poststelle@lfd.niedersachsen.de
Website: http://www.lfd.niedersachsen.de
XVI. Documents to fulfill our duty to provide information
We as a company process data not only on our website, but in many other processes. To give you all the information how this data is processed we supply you with the following documents:
- Information on the protection of data provided by applicants
- Information on the protection of data provided by contacts and communication partners
- Information on the protection of data provided by customers, potential clients, service providers and suppliers
If you need any further information, please contact our data protection officer.