Data pro­tec­tion

Data pro­tec­tion information

(for web­site ope­ra­tors in accordance with the requi­re­ments of the GDPR)

Name and address of the per­son responsible

The con­trol­ler within the mea­ning of the Gene­ral Data Pro­tec­tion Regu­la­ti­on and other natio­nal data pro­tec­tion laws of the mem­ber sta­tes as well as other data pro­tec­tion regu­la­ti­ons is the:

PAM events GmbH
Flot­ten­stra­ße 21–22
13407 Ber­lin Germany

Pho­ne: +49 (0)30 45 50 93 0
E‑mail: info@pamevents.de
Web­site: www.pamevents.de

Name and address of the data pro­tec­tion officer

The con­trol­ler within the mea­ning of the Gene­ral Data Pro­tec­tion Regu­la­ti­on and other natio­nal data pro­tec­tion laws of the mem­ber sta­tes as well as other data pro­tec­tion regu­la­ti­ons is the:

Höb­bel Enter­pri­ses GmbH
Andre­as Höb­bel
Nach­ti­gal­platz 6
13351 Ber­lin
info@ahdatentechnik.de
www.ahdatentechnik.de

Gene­ral infor­ma­ti­on on data processing

1. scope of the pro­ces­sing of per­so­nal data

We only pro­cess our users’ per­so­nal data inso­far as this is neces­sa­ry to pro­vi­de a func­tion­al web­site and our con­tent and ser­vices. The pro­ces­sing of our users’ per­so­nal data only takes place regu­lar­ly with the user’s con­sent. An excep­ti­on appli­es in cases whe­re pri­or con­sent can­not be obtai­ned for fac­tu­al reasons and the pro­ces­sing of the data is per­mit­ted by law.

2. legal basis for the pro­ces­sing of per­so­nal data

Inso­far as we obtain the con­sent of the data sub­ject for the pro­ces­sing of per­so­nal data, Art. 6 para. 1 lit. a EU Gene­ral Data Pro­tec­tion Regu­la­ti­on (GDPR) ser­ves as the legal basis.

When pro­ces­sing per­so­nal data that is neces­sa­ry for the per­for­mance of a con­tract to which the data sub­ject is a par­ty, Art. 6 para. 1 lit. b GDPR ser­ves as the legal basis. This also appli­es to pro­ces­sing ope­ra­ti­ons that are neces­sa­ry to car­ry out pre-con­trac­tu­al measures.

Inso­far as the pro­ces­sing of per­so­nal data is neces­sa­ry to ful­fill a legal obli­ga­ti­on to which our com­pa­ny is sub­ject, Art. 6 para. 1 lit. c GDPR ser­ves as the legal basis.

In the event that vital inte­rests of the data sub­ject or ano­ther natu­ral per­son requi­re the pro­ces­sing of per­so­nal data, Art. 6 para. 1 lit. d GDPR ser­ves as the legal basis.

If the pro­ces­sing is neces­sa­ry to safe­guard a legi­ti­ma­te inte­rest of our com­pa­ny or a third par­ty and if the inte­rests, fun­da­men­tal rights and free­doms of the data sub­ject do not out­weigh the for­mer inte­rest, Art. 6 para. 1 lit. f GDPR ser­ves as the legal basis for the processing.

3. data dele­ti­on and sto­rage duration

The per­so­nal data of the data sub­ject will be dele­ted or blo­cked as soon as the pur­po­se of sto­rage no lon­ger appli­es. Data may also be stored if this has been pro­vi­ded for by the Euro­pean or natio­nal legis­la­tor in EU regu­la­ti­ons, laws or other pro­vi­si­ons to which the con­trol­ler is sub­ject. The data will also be blo­cked or era­sed if a sto­rage peri­od pre­scri­bed by the afo­re­men­tio­ned stan­dards expi­res, unless the­re is a need for fur­ther sto­rage of the data for the con­clu­si­on or ful­fill­ment of a contract.

Use of Goog­le Analytics

This web­site uses Goog­le Ana­ly­tics, a web ana­ly­tics ser­vice pro­vi­ded by Goog­le Inc (her­ein­af­ter: Goog­le). Goog­le Ana­ly­tics uses “coo­kies”, which are text files pla­ced on your com­pu­ter, to help the web­site ana­ly­ze how users use the site. The infor­ma­ti­on gene­ra­ted by the coo­kie about your use of this web­site is usual­ly trans­mit­ted to a Goog­le ser­ver in the USA and stored the­re. Howe­ver, due to the acti­va­ti­on of IP anony­miza­ti­on on the­se web­sites, your IP address will be shor­ten­ed by Goog­le before­hand within mem­ber sta­tes of the Euro­pean Uni­on or in other con­trac­ting sta­tes of the Agree­ment on the Euro­pean Eco­no­mic Area. Only in excep­tio­nal cases will the full IP address be trans­mit­ted to a Goog­le ser­ver in the USA and trun­ca­ted the­re. Goog­le will use this infor­ma­ti­on on behalf of the ope­ra­tor of this web­site for the pur­po­se of eva­lua­ting your use of the web­site, com­pi­ling reports on web­site acti­vi­ty and pro­vi­ding other ser­vices rela­ting to web­site acti­vi­ty and inter­net usa­ge to the web­site ope­ra­tor. The IP address trans­mit­ted by your brow­ser as part of Goog­le Ana­ly­tics will not be mer­ged with other Goog­le data.

You may refu­se the use of coo­kies by sel­ec­ting the appro­pria­te set­tings on your brow­ser, howe­ver plea­se note that if you do this you may not be able to use the full func­tion­a­li­ty of this web­site. You can also pre­vent Goog­le from coll­ec­ting the data gene­ra­ted by the coo­kie and rela­ting to your use of the web­site (inclu­ding your IP address) and from pro­ces­sing this data by Goog­le by down­loa­ding and instal­ling the brow­ser plug-in available under the fol­lo­wing link: Brow­ser add-on to deac­ti­va­te Goog­le Analytics.

In addi­ti­on or as an alter­na­ti­ve to the brow­ser add-on, you can pre­vent track­ing by Goog­le Ana­ly­tics on our pages by cli­cking on this link. This will install an opt-out coo­kie on your device. This will pre­vent the coll­ec­tion by Goog­le Ana­ly­tics for this web­site and for this brow­ser in the future as long as the coo­kie remains instal­led in your browser.

If you use a mobi­le device, plea­se use this link to [google_analytics_optout]deactivate Goog­le Analytics.[/google_analytics_optout]

Pro­ven Expert

We also use the Pro­ven­Ex­pert review plat­form for our web­site. The ser­vice pro­vi­der is the Ger­man com­pa­ny Expert Sys­tems AG, Qued­lin­bur­ger Stra­ße 1, 10589 Ber­lin, Germany.

You can find out more about the data that is pro­ces­sed through the use of Pro­ven­Ex­pert in the pri­va­cy poli­cy at https://www.provenexpert.com/de-de/datenschutzbestimmungen/.

Sales­View­er® technology:

This web­site uses Sales­View­er® tech­no­lo­gy from Sales­View­er® GmbH on the basis of the web­site operator’s legi­ti­ma­te inte­rests (Sec­tion 6 para­graph 1 lit.f GDPR) in order to coll­ect and save data on mar­ke­ting, mar­ket rese­arch and opti­mi­sa­ti­on purposes.

In order to do this, a java­script based code, which ser­ves to cap­tu­re com­pa­ny-rela­ted data and accor­ding web­site usa­ge. The data cap­tu­red using this tech­no­lo­gy are encrypt­ed in a non-retrie­va­ble one-way func­tion (so-cal­led hash­ing). The data is imme­dia­te­ly pseud­ony­mi­sed and is not used to iden­ti­fy web­site visi­tors personally

The data stored by Sales­View­er® will be dele­ted as soon as they are no lon­ger requi­red for their inten­ded pur­po­se and the­re are no legal obli­ga­ti­ons to retain them.

The data recor­ding and sto­rage can be repea­led at any time with imme­dia­te effect for the future, by cli­cking on https://www.salesviewer.com/opt-out in order to pre­vent Sales­View­er® from recor­ding your data. In this case, an opt-out coo­kie for this web­site is saved on your device. If you dele­te the coo­kies in the brow­ser, you will need to click on this link again. 

Tawk.to

For the live chat on our site, we use the live chat Tawk.to of Tawk.to Inc, 187 East Warm Springs Road, SB119, Las Vegas, NV, 89119, USA, as part of our legi­ti­ma­te inte­rest in a tech­ni­cal­ly flaw­less online offer and its eco­no­mic­al­ly effi­ci­ent design and opti­miza­ti­on in accordance with Art. 6 Para. 1 lit. f GDPR.

When Tawk.to is cal­led up, Tawk.to tem­po­r­a­ri­ly coll­ects the IP address at the begin­ning in order to deter­mi­ne the coun­try from which the live chat was star­ted. This makes it pos­si­ble to offer visi­tors cus­to­mer ser­vice tail­o­red to their needs. The coll­ec­tion of the IP address is sole­ly for this pur­po­se and is not per­ma­nent­ly stored by Tawk.to.

In addi­ti­on, Tawk.to saves the com­mu­ni­ca­ti­on in the live chats. This can save you exten­si­ve expl­ana­ti­ons of your request. If you do not wish this to hap­pen, you are wel­co­me to inform us using the cont­act details lis­ted in the legal noti­ce. Saved chats will then be dele­ted by us imme­dia­te­ly. They will also be dele­ted by us after your request has been dealt with, unless they are requi­red for legal defen­se and no con­tract has been initia­ted or con­cluded as part of the chat and we (must) retain this data as con­tract data.

As a result, your data will be trans­mit­ted to the USA.

You can find more infor­ma­ti­on about Tawk.to’s pri­va­cy poli­cy at https://www.tawk.to/privacy-policy/. We have also con­cluded an order pro­ces­sing con­tract with Tawk.to, accor­ding to which Tawk.to has under­ta­ken to pro­cess data only in accordance with our ins­truc­tions. You can view this con­tract here: https://www.tawk.to/data-protection/dpa-data-processing-addendum/.

If you do not wish data to be trans­mit­ted to Tawk.to, you can pre­vent Tawk.to from set­ting coo­kies by sel­ec­ting the appro­pria­te set­tings in your brow­ser. Howe­ver, blo­cking coo­kies may rest­rict the func­tion of our web­site and other web­sites you visit. You can find fur­ther infor­ma­ti­on on the hand­ling of coo­kies in the Coo­kies sec­tion of this pri­va­cy policy.

Pro­vi­si­on of the web­site and crea­ti­on of log files

1. descrip­ti­on and scope of data processing

Each time our web­site is acces­sed, our sys­tem auto­ma­ti­cal­ly coll­ects data and infor­ma­ti­on from the com­pu­ter sys­tem of the acces­sing computer.

The fol­lo­wing data is collected:

(1) Infor­ma­ti­on about the brow­ser type and ver­si­on used

(2) The user’s ope­ra­ting system

(3) The user’s inter­net ser­vice provider

(4) The IP address of the user

(5) Date and time of access

(6) Web­sites that are acces­sed by the user’s sys­tem via our website

The data is also stored in the log files of our sys­tem. This data is not stored tog­e­ther with other per­so­nal data of the user.

We also use extern­al­ly inte­gra­ted fonts.
For this we work tog­e­ther with the pro­vi­der Web­ty­pe LLC, 373 Broad­way, F15 New York, NY 10013. Pri­va­cy poli­cy: https://www.webtype.com/info/privacy- policy/

2. legal basis for data processing

The legal basis for the tem­po­ra­ry sto­rage of data and log files is Art. 6 para. 1 lit. f GDPR.

3. pur­po­se of data processing

Tem­po­ra­ry sto­rage of the IP address by the sys­tem is neces­sa­ry to enable deli­very of the web­site to the user’s com­pu­ter. For this pur­po­se, the user’s IP address must remain stored for the dura­ti­on of the session.

Data is stored in log files to ensu­re the func­tion­a­li­ty of the web­site. We also use the data to opti­mi­ze the web­site and to ensu­re the secu­ri­ty of our infor­ma­ti­on tech­no­lo­gy sys­tems. A

The data is not ana­ly­zed for mar­ke­ting pur­po­ses in this context.

The­se pur­po­ses also con­sti­tu­te our legi­ti­ma­te inte­rest in data pro­ces­sing in accordance with Art. 6 para. 1 lit. f GDPR.

4. dura­ti­on of storage

The data is dele­ted as soon as it is no lon­ger requi­red to achie­ve the pur­po­se for which it was coll­ec­ted. In the case of the coll­ec­tion of data for the pro­vi­si­on of the web­site, this is the case when the respec­ti­ve ses­si­on has ended.

If the data is stored in log files, this is the case after seven days at the latest. Sto­rage bey­ond this peri­od is pos­si­ble. In this case, the IP addres­ses of the users are dele­ted or anony­mi­zed so that it is no lon­ger pos­si­ble to iden­ti­fy the acces­sing client.

5. pos­si­bi­li­ty of objec­tion and removal

The coll­ec­tion of data for the pro­vi­si­on of the web­site and the sto­rage of data in log files is abso­lut­e­ly neces­sa­ry for the ope­ra­ti­on of the web­site. Con­se­quent­ly, the user has no opti­on to object.

Use of cookies

a) Descrip­ti­on and scope of data processing

Our web­site uses coo­kies. Coo­kies are text files that are stored in the Inter­net brow­ser or by the Inter­net brow­ser on the user’s com­pu­ter sys­tem. When a user acces­ses a web­site, a coo­kie may be stored on the user’s ope­ra­ting sys­tem. This coo­kie con­ta­ins a cha­rac­te­ristic string of cha­rac­ters that enables the brow­ser to be uni­que­ly iden­ti­fied when the web­site is cal­led up again.

We use coo­kies to make our web­site more user-fri­end­ly. Some ele­ments of our web­site requi­re that the acces­sing brow­ser can be iden­ti­fied even after a page change

The fol­lo­wing data is stored and trans­mit­ted in the coo­kies at pamevents.de:

(1) Log-in information

The fol­lo­wing data is stored and trans­mit­ted in the coo­kies at pam.pamevents.de (web store):

(1) Log-in information

(2) Items in the shop­ping cart of anony­mous users (4 hours)

(3) Artic­les in the shop­ping cart of regis­tered users (1 year)

(4) Host address

(5) Date, time of access

b) Legal basis for data processing

The legal basis for the pro­ces­sing of per­so­nal data using coo­kies is Art. 6 para. 1 lit. f GDPR.

c) Pur­po­se of the data processing

The pur­po­se of using tech­ni­cal­ly neces­sa­ry coo­kies is to sim­pli­fy the use of web­sites for users. Some func­tions of our web­site can­not be offe­red wit­hout the use of coo­kies. For the­se, it is neces­sa­ry for the brow­ser to be reco­gni­zed even after a page change.

We need coo­kies for the fol­lo­wing applications:

(1) Log in information

(2) Items in the shop­ping cart of anony­mous users (4 hours)

(3) Artic­les in the shop­ping cart of regis­tered users (1 year)

(4) Host address

(5) Date, time of access

The user data coll­ec­ted by tech­ni­cal­ly neces­sa­ry coo­kies is not used to crea­te user profiles.

The­se pur­po­ses also con­sti­tu­te our legi­ti­ma­te inte­rest in the pro­ces­sing of per­so­nal data in accordance with Art. 6 para. 1 lit. f GDPR.

e) Dura­ti­on of sto­rage, pos­si­bi­li­ty of objec­tion and removal

Coo­kies are stored on the user’s com­pu­ter and trans­mit­ted by it to our web­site. As a user, you the­r­e­fo­re have full con­trol over the use of coo­kies. You can deac­ti­va­te or rest­rict the trans­mis­si­on of coo­kies by chan­ging the set­tings in your Inter­net brow­ser. Coo­kies that have alre­a­dy been saved can be dele­ted at any time. This can also be done auto­ma­ti­cal­ly. If coo­kies are deac­ti­va­ted for our web­site, it may no lon­ger be pos­si­ble to use all func­tions of the web­site to their full extent.

Cont­act form and e‑mail contact

1. descrip­ti­on and scope of data processing

The­re is a cont­act form on our web­site that can be used to cont­act us elec­tro­ni­cal­ly. If a user makes use of this opti­on, the data ente­red in the input mask will be trans­mit­ted to us and stored. At pamevents.de, this data is as follows:

Man­da­to­ry fields:

(1) Mail address

(2) Mes­sa­ge

Optio­nal fields:

(3) Com­pa­ny

(4) First name

(5) Sur­na­me

(6) Tele­pho­ne

The­se data are the fol­lo­wing for pam.pamevents.de (web­shop cont­act form for ren­tal mate­ri­al requests):

Man­da­to­ry fields:

(1) First name

(2) Sur­na­me

(3) Com­pa­ny

(4) E‑mail address

(5) Mate­ri­al requests

Optio­nal fields:

(6) Tele­pho­ne number

(7) Coll­ec­tion date

(8) Return date

(9) Com­ment field

Your con­sent is obtai­ned for the pro­ces­sing of the data as part of the sen­ding pro­cess and refe­rence is made to this pri­va­cy policy.

Alter­na­tively, it is pos­si­ble to cont­act us via the e‑mail address pro­vi­ded. In this case, the user’s per­so­nal data trans­mit­ted with the e‑mail will be stored. In addi­ti­on to this opti­on, you have the opti­on of cont­ac­ting us by tele­pho­ne via the hot­line pro­vi­ded in the pam.pamevents.de webshop.

No data will be pas­sed on to third par­ties in this con­text. The data is used exclu­si­ve­ly for pro­ces­sing the conversation.

2. legal basis for data processing

The legal basis for the pro­ces­sing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent.

The legal basis for the pro­ces­sing of data trans­mit­ted in the cour­se of sen­ding an email is Art. 6 para. 1 lit. f GDPR. If the e‑mail cont­act is aimed at the con­clu­si­on of a con­tract, the addi­tio­nal legal basis for the pro­ces­sing is Art. 6 para. 1 lit. b GDPR.

3. pur­po­se of data processing

The pro­ces­sing of the per­so­nal data from the input mask ser­ves us sole­ly to pro­cess the cont­act. If you cont­act us by email, this also con­sti­tu­tes the neces­sa­ry legi­ti­ma­te inte­rest in pro­ces­sing the data.

The other per­so­nal data pro­ces­sed during the sen­ding pro­cess is used to pre­vent misu­se of the cont­act form and to ensu­re the secu­ri­ty of our infor­ma­ti­on tech­no­lo­gy systems.

4. dura­ti­on of storage

The data is dele­ted as soon as it is no lon­ger requi­red to achie­ve the pur­po­se for which it was coll­ec­ted. For the per­so­nal data from the input screen of the cont­act form and tho­se sent by email, this is the case when the respec­ti­ve con­ver­sa­ti­on with the user has ended. The con­ver­sa­ti­on is ended when it can be infer­red from the cir­cum­s­tances that the mat­ter in ques­ti­on has been con­clu­si­ve­ly clarified.

The addi­tio­nal per­so­nal data coll­ec­ted during the sen­ding pro­cess will be dele­ted after a peri­od of seven days at the latest.

5. pos­si­bi­li­ty of objec­tion and removal

The user has the opti­on to revo­ke their con­sent to the pro­ces­sing of per­so­nal data at any time. If the user cont­acts us by email, they can object to the sto­rage of their per­so­nal data at any time. In such a case, the con­ver­sa­ti­on can­not be continued.

You can do this by cont­ac­ting us elec­tro­ni­cal­ly. You can use the e‑mail address info@pamevents.de to revo­ke your con­sent or request the dele­ti­on of your data.

All per­so­nal data stored in the cour­se of cont­ac­ting us will be dele­ted in this case.

Rights of the data subject

If your per­so­nal data is pro­ces­sed, you are a data sub­ject within the mea­ning of the GDPR and you have the fol­lo­wing rights vis-à-vis the controller:

1. right to information

You can request con­fir­ma­ti­on from the con­trol­ler as to whe­ther per­so­nal data con­cer­ning you is being pro­ces­sed by us.

If such pro­ces­sing has taken place, you can request the fol­lo­wing infor­ma­ti­on from the controller:

(1) the pur­po­ses for which the per­so­nal data are processed;

(2) the cate­go­ries of per­so­nal data that are processed;

(3) the reci­pi­ents or cate­go­ries of reci­pi­ents to whom the per­so­nal data con­cer­ning you have been or will be disclosed;

(4) the plan­ned dura­ti­on of sto­rage of the per­so­nal data con­cer­ning you or, if spe­ci­fic infor­ma­ti­on on this is not pos­si­ble, cri­te­ria for deter­mi­ning the dura­ti­on of storage;

(5) the exis­tence of a right to rec­ti­fi­ca­ti­on or era­su­re of per­so­nal data con­cer­ning you, a right to rest­ric­tion of pro­ces­sing by the con­trol­ler or a right to object to such processing;

(6) the exis­tence of a right of appeal to a super­vi­so­ry authority;

(7) all available infor­ma­ti­on on the ori­gin of the data if the per­so­nal data are not coll­ec­ted from the data subject;

(8) the exis­tence of auto­ma­ted decis­i­on-making inclu­ding pro­fil­ing in accordance with Art. 22 (1) and (4) GDPR and — at least in the­se cases

- meaningful infor­ma­ti­on about the logic invol­ved, as well as the signi­fi­can­ce and the envi­sa­ged con­se­quen­ces of such pro­ces­sing for the data subject.

You have the right to request infor­ma­ti­on as to whe­ther the per­so­nal data con­cer­ning you is trans­fer­red to a third coun­try or to an inter­na­tio­nal orga­niza­ti­on. In this con­text, you may request to be infor­med of the appro­pria­te safe­guards pur­su­ant to Art. 46 GDPR in con­nec­tion with the transfer.

2. right to rectification

You have a right to rec­ti­fi­ca­ti­on and/or com­ple­ti­on vis-à-vis the con­trol­ler if the pro­ces­sed per­so­nal data con­cer­ning you is incor­rect or incom­ple­te. The con­trol­ler must make the cor­rec­tion wit­hout delay.

3. right to rest­ric­tion of processing

You may request the rest­ric­tion of the pro­ces­sing of your per­so­nal data under the fol­lo­wing conditions:

(1) if you con­test the accu­ra­cy of the per­so­nal data con­cer­ning you for a peri­od enab­ling the con­trol­ler to veri­fy the accu­ra­cy of the per­so­nal data;

(2) the pro­ces­sing is unlawful and you oppo­se the era­su­re of the per­so­nal data and request the rest­ric­tion of their use instead;

(3) the con­trol­ler no lon­ger needs the per­so­nal data for the pur­po­ses of the pro­ces­sing, but they are requi­red by you for the estab­lish­ment, exer­cise or defen­se of legal claims,

exer­cise or defen­se of legal claims, or

(4) if you have objec­ted to the pro­ces­sing pur­su­ant to Art. 21 (1) GDPR and it is not yet cer­tain whe­ther the legi­ti­ma­te reasons of the con­trol­ler out­weigh your reasons.

If the pro­ces­sing of per­so­nal data con­cer­ning you has been rest­ric­ted, such data may only be pro­ces­sed — apart from being stored — with your con­sent or for the estab­lish­ment, exer­cise or defen­se of legal claims or for the pro­tec­tion of the rights of ano­ther natu­ral or legal per­son or for reasons of important public inte­rest of the Uni­on or of a Mem­ber State.

If the rest­ric­tion of pro­ces­sing has been rest­ric­ted in accordance with the abo­ve con­di­ti­ons, you will be infor­med by the con­trol­ler befo­re the rest­ric­tion is lifted.

4. right to erasure

a) Obli­ga­ti­on to delete

You have the right to obtain from the con­trol­ler the era­su­re of per­so­nal data con­cer­ning you wit­hout undue delay and the con­trol­ler shall have the obli­ga­ti­on to era­se per­so­nal data wit­hout undue delay whe­re one of the fol­lo­wing grounds applies:

(1) The per­so­nal data con­cer­ning you are no lon­ger neces­sa­ry in rela­ti­on to the pur­po­ses for which they were coll­ec­ted or other­wi­se processed.

(2) You revo­ke your con­sent on which the pro­ces­sing was based pur­su­ant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and the­re is no other legal basis for the processing.

(3) You object to the pro­ces­sing pur­su­ant to Art. 21 (1) GDPR and the­re are no over­ri­ding legi­ti­ma­te grounds for the pro­ces­sing, or you object to the pro­ces­sing pur­su­ant to Art. 21 (2) GDPR.

(4) The per­so­nal data con­cer­ning you has been pro­ces­sed unlawfully.

(5) The dele­ti­on of per­so­nal data con­cer­ning you is neces­sa­ry to ful­fill a legal obli­ga­ti­on under Uni­on law or the law of the Mem­ber Sta­tes to which the con­trol­ler is subject.

(6) The per­so­nal data con­cer­ning you were coll­ec­ted in rela­ti­on to infor­ma­ti­on socie­ty ser­vices offe­red in accordance with Art. 8 para. 1 GDPR.

b) Infor­ma­ti­on to third parties

If the con­trol­ler has made the per­so­nal data con­cer­ning you public and is obli­ged to era­se it pur­su­ant to Artic­le 17(1) GDPR, it shall take reasonable steps, inclu­ding tech­ni­cal mea­su­res, taking into account the available tech­no­lo­gy and the cost of imple­men­ta­ti­on, to inform con­trol­lers which are pro­ces­sing the per­so­nal data that you as the data sub­ject have reques­ted the era­su­re by such con­trol­lers of any links to, or copy or repli­ca­ti­on of, tho­se per­so­nal data.

c) Excep­ti­ons

The right to era­su­re does not exist if the pro­ces­sing is necessary

(1) to exer­cise the right to free­dom of expres­si­on and information;

(2) for com­pli­ance with a legal obli­ga­ti­on which requi­res pro­ces­sing by Uni­on or Mem­ber Sta­te law to which the con­trol­ler is sub­ject or for the per­for­mance of a task car­ri­ed out in the public inte­rest or in the exer­cise of offi­ci­al aut­ho­ri­ty ves­ted in the controller;

(3) for reasons of public inte­rest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;

(4) for archi­ving pur­po­ses in the public inte­rest, sci­en­ti­fic or his­to­ri­cal rese­arch pur­po­ses or sta­tis­ti­cal pur­po­ses in accordance with Art. 89 para. 1 GDPR, inso­far as the right refer­red to in sec­tion a) is likely to ren­der impos­si­ble or serious­ly impair the achie­ve­ment of the objec­ti­ves of that pro­ces­sing, or

(5) for the asser­ti­on, exer­cise or defen­se of legal claims.

5. right to information

If you have asser­ted the right to rec­ti­fi­ca­ti­on, era­su­re or rest­ric­tion of pro­ces­sing against the con­trol­ler, the con­trol­ler is obli­ged to noti­fy all reci­pi­ents to whom the per­so­nal data con­cer­ning you have been dis­c­lo­sed of this rec­ti­fi­ca­ti­on or era­su­re of the data or rest­ric­tion of pro­ces­sing, unless this pro­ves impos­si­ble or invol­ves a dis­pro­por­tio­na­te effort.

You have the right to be infor­med about the­se reci­pi­ents by the controller.

6. right to data portability

You have the right to recei­ve the per­so­nal data con­cer­ning you, which you have pro­vi­ded to the con­trol­ler, in a struc­tu­red, com­mon­ly used and machi­ne-rea­da­ble for­mat. You also have the right to trans­mit this data to ano­ther con­trol­ler wit­hout hin­drance from the con­trol­ler to which the per­so­nal data has been pro­vi­ded, where

(1) the pro­ces­sing is based on con­sent pur­su­ant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a con­tract pur­su­ant to Art. 6 para. 1 lit. b GDPR and

(2) the pro­ces­sing is car­ri­ed out by auto­ma­ted means.

In exer­cis­ing this right, you also have the right to have the per­so­nal data con­cer­ning you trans­mit­ted direct­ly from one con­trol­ler to ano­ther, whe­re tech­ni­cal­ly fea­si­ble. The free­doms and rights of other per­sons may not be impai­red by this.

The right to data por­ta­bi­li­ty does not app­ly to the pro­ces­sing of per­so­nal data neces­sa­ry for the per­for­mance of a task car­ri­ed out in the public inte­rest or in the exer­cise of offi­ci­al aut­ho­ri­ty ves­ted in the controller.

7. right of objection

You have the right to object, on grounds rela­ting to your par­ti­cu­lar situa­ti­on, at any time to pro­ces­sing of per­so­nal data con­cer­ning you which is based on point (e) or (f) of Artic­le 6(1) GDPR, inclu­ding pro­fil­ing based on tho­se provisions.

The con­trol­ler will no lon­ger pro­cess the per­so­nal data con­cer­ning you unless the con­trol­ler demons­tra­tes com­pel­ling legi­ti­ma­te grounds for the pro­ces­sing which over­ri­de your inte­rests, rights and free­doms or for the estab­lish­ment, exer­cise or defen­se of legal claims.

If your per­so­nal data is pro­ces­sed for the pur­po­se of direct mar­ke­ting, you have the right to object at any time to the pro­ces­sing of your per­so­nal data for the pur­po­se of such marketing.

adver­ti­sing; this also appli­es to pro­fil­ing inso­far as it is asso­cia­ted with such direct advertising.

If you object to pro­ces­sing for direct mar­ke­ting pur­po­ses, your per­so­nal data will no lon­ger be pro­ces­sed for the­se purposes.

Not­wi­th­stan­ding Direc­ti­ve 2002/58/EC, you have the opti­on of exer­cis­ing your right to object in con­nec­tion with the use of infor­ma­ti­on socie­ty ser­vices by means of auto­ma­ted pro­ce­du­res using tech­ni­cal specifications.

8. right to revo­ke the decla­ra­ti­on of con­sent under data pro­tec­tion law

You have the right to with­draw your decla­ra­ti­on of con­sent under data pro­tec­tion law at any time. The with­dra­wal of con­sent shall not affect the lawful­ness of pro­ces­sing based on con­sent befo­re its withdrawal.

9. auto­ma­ted decis­i­on-making in indi­vi­du­al cases inclu­ding profiling

You have the right not to be sub­ject to a decis­i­on based sole­ly on auto­ma­ted processing.

- to be sub­ject to a decis­i­on based on auto­ma­ted pro­ces­sing, inclu­ding pro­fil­ing, which pro­du­ces legal effects con­cer­ning you or simi­lar­ly signi­fi­cant­ly affects you. This does not app­ly if the decision

(1) is neces­sa­ry for the con­clu­si­on or per­for­mance of a con­tract bet­ween you and the controller,

(2) is aut­ho­ri­zed by Uni­on or Mem­ber Sta­te law to which the con­trol­ler is sub­ject and which also lays down sui­ta­ble mea­su­res to safe­guard your rights and free­doms and legi­ti­ma­te inte­rests; or

(3) with your express consent.

Howe­ver, the­se decis­i­ons may not be based on spe­cial cate­go­ries of per­so­nal data pur­su­ant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR appli­es and appro­pria­te mea­su­res have been taken to pro­tect the rights and free­doms as well as your legi­ti­ma­te interests.

With regard to the cases refer­red to in (1) and (3), the data con­trol­ler shall imple­ment sui­ta­ble mea­su­res to safe­guard your rights and free­doms and legi­ti­ma­te inte­rests, at least the right to obtain human inter­ven­ti­on on the part of the con­trol­ler, to express your point of view and to con­test the decision.

on the part of the con­trol­ler, to express his or her point of view and to con­test the decision.

10. right to lodge a com­plaint with a super­vi­so­ry authority

Wit­hout pre­ju­di­ce to any other admi­nis­tra­ti­ve or judi­cial reme­dy, you have the right to lodge a com­plaint with a super­vi­so­ry aut­ho­ri­ty, in par­ti­cu­lar in the Mem­ber Sta­te of your habi­tu­al resi­dence, place of work or place of the alle­ged inf­rin­ge­ment if you con­sider that the pro­ces­sing of per­so­nal data rela­ting to you inf­rin­ges the GDPR.

The super­vi­so­ry aut­ho­ri­ty with which the com­plaint has been lodged shall inform the com­plainant of the sta­tus and out­co­me of the com­plaint, inclu­ding the pos­si­bi­li­ty of a judi­cial reme­dy pur­su­ant to Art. 78 GDPR.

Address of the com­pe­tent super­vi­so­ry authority:

Ber­lin Com­mis­sio­ner for Data Pro­tec­tion and Free­dom of Information

Fried­richstr. 219

10969 Ber­lin

Pho­ne: +49 (0)30 13889–0

Fax: +49 (0)30 2155050

E‑mail: mailbox@datenschutz-berlin.de

Sta­tus: July 2022