Data Protection

Sect. 1 Gene­ral

We will pro­cess your per­so­nal data (e.g. tit­le, name, address, e-mail address, pho­ne num­ber) sole­ly in accord­ance with the pro­vi­si­ons of the Ger­man data pro­tec­tion law and the data pro­tec­tion law of the Euro­pean Uni­on (EU). The fol­lo­wing pro­vi­si­ons will inform you, bes­i­des the infor­ma­ti­on about the pro­ces­sing pur­po­ses, reci­pi­ents, legal bases and sto­ra­ge peri­ods, also about your rights and the con­trol­ler for your data pro­ces­sing. This pri­va­cy poli­cy app­lies only to our web­sites. If you are direc­ted to other sites via links on our pages, plea­se fami­lia­ri­se yours­elf with the respec­tive use of your data the­re.

Sect. 2 Con­tact us

(1) Pur­po­se of data pro­ces­sing
Your per­so­nal data you pro­vi­de us by e-mail, con­tact form etc., will be pro­ces­sed to ans­wer your inqui­ries. You are not obli­ged to pro­vi­de us with your per­so­nal data but we would not be able to ans­wer your inqui­ries sent by e-mail without your e-mail address.
(2) Legal basis
a) If your expli­cit con­sent is given for the pro­ces­sing of your data, the legal ground for this pro­ces­sing is set out in Art. 6 (1) (a) of the GDPR.
b) If your per­so­nal data is pro­ces­sed for the pur­po­se of con­tract per­for­mance, the legal ground for this pro­ces­sing is set out in Art. 6 (1) (b) of the GDPR.
c) The legal ground for all other cases (espe­ci­al­ly when using a con­tact form) is set out in Art. 6 (1) (f) of the GDPR.
You have the right to object at any time to the pro­ces­sing of data which was per­for­med accord­ing to Arti­cle 6 (1)(f) of GDPR and which does not ser­ve direct mar­ke­ting for rea­sons ari­sing from your par­ti­cu­lar situa­ti­on.
In the case of direct mar­ke­ting, howe­ver, you may object to the pro­ces­sing at any time without sta­ting any rea­sons.
(3) Reci­pi­ent cate­go­ries
Our legi­ti­ma­te inte­rest in data pro­ces­sing is to com­mu­ni­ca­te with you in a time­ly man­ner and to ans­wer your que­ries cost-effec­tively. If you pro­vi­de us with your address, we reser­ve the right to use it for direct pos­tal mar­ke­ting. You can pro­tect your inte­rest in data pro­tec­tion by trans­fer­ring of data effi­ci­ent­ly (e.g. using a pseud­onym).
(4) Reci­pi­ent cate­go­ries
Pro­vi­der of hos­ting, ser­vice pro­vi­der for direct mar­ke­ting
(5) Dura­ti­on of Sto­ra­ge
Your data will be dele­ted if it can be infer­red from the cir­cum­s­tan­ces that your que­ries or ques­ti­ons have been com­ple­te­ly cla­ri­fied.
Howe­ver, if a con­tract is con­clu­ded, the data requi­red by com­mer­ci­al and tax law will be retai­ned by us for the peri­ods as requi­red by law, i.g. gene­ral­ly for ten years (cf. § 257 HGB, § 147 AO).
(6) Right of revo­ca­ti­on
You have the right to revo­ke your con­sent for pro­ces­sing at any time in com­pli­an­ce with your con­sent.

Sect. 3 Infor­ma­ti­on about coo­kies

(1) Pur­po­se of data pro­ces­sing
This web­site uses tech­ni­cal­ly necessa­ry coo­kies. The­se are small text files that are stored in or by your Inter­net brow­ser on your com­pu­ter sys­tem.
(2) Legal basis
The legal basis for such pro­ces­sing is set out in Arti­cle 6 (1) (f) of the GDPR.
(3) Legi­ti­ma­te inte­rest
Our legi­ti­ma­te inte­rest is the func­tio­na­li­ty of our web­site. The user data collec­ted by tech­ni­cal­ly necessa­ry coo­kies are not used to crea­te user pro­files. This pre­ser­ves your inte­rest in data pro­tec­tion.
(4) Dura­ti­on of Sto­ra­ge
The tech­ni­cal­ly necessa­ry coo­kies are usual­ly dele­ted when the brow­ser is clo­sed. Per­sis­tent coo­kies have dif­fe­rent vali­di­ty peri­od from a few minu­tes to several years.
(5) Right of objec­tion
If you do not wish the­se coo­kies to be stored, plea­se deac­tiva­te the use of coo­kies in your Inter­net brow­ser. Howe­ver, this may cau­se a func­tio­nal limi­ta­ti­on of our web­site. You can also dele­te per­sis­tent coo­kies at any time by chan­ging your brow­ser set­tings.

Sect. 4 Rights of the data sub­ject

If your per­so­nal data is being pro­ces­sed, you are the ‘data sub­ject’ in terms of GDPR and you have the fol­lo­wing rights towards the con­trol­ler:

1. Right of access by the data sub­ject

You may ask the con­trol­ler to con­firm whe­ther your per­so­nal data is pro­ces­sed.
In the case of such pro­ces­sing, you may request the fol­lo­wing infor­ma­ti­on from the con­trol­ler:
(1) the pur­po­ses of the pro­ces­sing of the per­so­nal data;
(2) the cate­go­ries of per­so­nal data con­cer­ned;
(3) the reci­pi­ents or cate­go­ries of reci­pi­ent to whom the per­so­nal data have been or will be dis­c­lo­sed;
(4) the esti­ma­ted peri­od of time for which the per­so­nal data will be stored, or, if not pos­si­ble, the cri­te­ria used to deter­mi­ne that peri­od;
(5) the right to request from the con­trol­ler to rec­tify or era­se the per­so­nal data or the right to restrict the pro­ces­sing of per­so­nal data con­cer­ning the data sub­ject or to object to such pro­ces­sing;
(6) the right to lodge a com­p­laint with a super­vi­so­ry aut­ho­ri­ty;
(7) the right to all avail­ab­le infor­ma­ti­on on the source of the data if the per­so­nal data are not collec­ted from the data sub­ject;
(8) the exis­tence of auto­ma­ted deci­si­on-making, inclu­ding pro­filing in accord­ance with Arti­cle 22 (1) and (4) of the GDPR and — at least in the­se cases — mea­ning­ful infor­ma­ti­on for your about the logic invol­ved, as well as the con­se­quen­ces and inten­ded effects of such pro­ces­sing.
As a data sub­ject, you have the right to be infor­med whe­ther the per­so­nal data con­cer­ning you are trans­fer­red to a third coun­try or to an inter­na­tio­nal orga­ni­sa­ti­on. In this regard, you may request to be infor­med of the appro­pria­te safe­guards pur­suant to Arti­cle 46 GDPR rela­ting to the trans­fer.

2. Right to rec­tifi­ca­ti­on

You have the right to have cor­rec­ted and/or com­ple­ted your per­so­nal data from the con­trol­ler if your per­so­nal data pro­ces­sed is incor­rect or incom­ple­te. The con­trol­ler has to make the cor­rec­tion without delay.

3. Right to restric­tion of pro­ces­sing

You have the right to obtain from the con­trol­ler restric­tion of pro­ces­sing whe­re one of the fol­lo­wing app­lies:
(1) if you con­test the accu­ra­cy of the per­so­nal data rela­ting to you for a peri­od of time that enab­les the con­trol­ler to veri­fy the accu­ra­cy of the per­so­nal data;
(2) the pro­ces­sing is unla­w­ful and you refu­se to era­se the per­so­nal data and request the restric­tion of the use of the per­so­nal data ins­te­ad;
(3) the con­trol­ler no lon­ger needs the per­so­nal data for the pur­po­ses of pro­ces­sing, but you need them to esta­blish, exer­cise or defend legal claims; or
(4) if you have lod­ged an objec­tion against the pro­ces­sing in accord­ance with Art. 21 (1) GDPR and it has not yet been deter­mi­ned whe­ther the legi­ti­ma­te rea­sons of the con­trol­ler out­weigh your grounds.
Whe­re pro­ces­sing of per­so­nal data rela­ting to you has been restric­ted, such data may, with the excep­ti­on of sto­ra­ge, only be pro­ces­sed with your con­sent or for the pur­po­se of esta­bli­shing, exer­cising or defen­ding legal claims or for the pro­tec­ting of the rights of ano­t­her natu­ral or legal per­son or for rea­sons of an important public inte­rest of the Uni­on or of a Mem­ber Sta­te.
If the restric­tion of pro­ces­sing has been restric­ted in accord­ance with the con­di­ti­ons men­tio­ned above, you will be infor­med by the con­trol­ler befo­re the restric­tion of pro­ces­sing is lifted.

4. Right to era­su­re

a) Obli­ga­ti­on regar­ding era­su­re
You have the right to obtain from the con­trol­ler the era­su­re of your per­so­nal data imme­dia­te­ly and the con­trol­ler is obli­ged to era­se this data without delay whe­re one of the fol­lo­wing rea­sons app­lies:
(1) the per­so­nal data are no lon­ger necessa­ry for the pur­po­ses for which they were collec­ted or other­wi­se pro­ces­sed;
(2) you with­draw your con­sent on which the pro­ces­sing is based accord­ance to point (a) of Arti­cle 6 (1), or point (a) of Arti­cle 9 (2) GDPR and whe­re the­re is no other legal ground for the pro­ces­sing;
(3) you sub­mit an objec­tion to the pro­ces­sing accord­ance to Arti­cle 21 (1) of the GDPR, and the­re are no legi­ti­ma­te rea­sons for the pro­ces­sing, or you lodge an objec­tion against the pro­ces­sing accord­ance to Arti­cle 21 (2) of the GDPR;
(4) your per­so­nal data have been unla­w­ful­ly pro­ces­sed;
(5) your per­so­nal data need to be era­sed for com­pli­an­ce with a legal obli­ga­ti­on in Uni­on or Mem­ber Sta­te law to which the con­trol­ler is sub­ject;
(6) your per­so­nal data have been collec­ted in rela­ti­on to the offer infor­ma­ti­on socie­ty ser­vices refer­red to Arti­cle 8 (1);

b) Obli­ga­ti­on to inform other con­trol­lers (third par­ties)
If the con­trol­ler has made your per­so­nal data public and is obli­ged to era­se them accord­ance to Arti­cle 17 (1) of the GDPR, he has to take rea­son­ab­le steps, taking into account the avail­ab­le tech­no­lo­gy and the cost of imple­men­ta­ti­on, inclu­ding tech­ni­cal mea­su­res, to inform the con­trol­lers who pro­cess the per­so­nal data that you, as the per­son con­cer­ned, have requested the era­su­re of any links to, or copy or repli­ca­ti­on of tho­se per­so­nal data.

c) Excep­ti­ons
The right to era­su­re does not app­ly to the extent that pro­ces­sing is necessa­ry:
(1) for exer­cising the right of free­dom of expres­si­on and infor­ma­ti­on;
(2) for ful­fil­ment of a legal obli­ga­ti­on which requi­res pro­ces­sing by the law of the Uni­on or of the Mem­ber Sta­tes to which the con­trol­ler is sub­ject, or for the per­for­mance of a task car­ri­ed out in the public inte­rest or the exer­cise of offi­ci­al aut­ho­ri­ty trans­fer­red to the con­trol­ler;
(3) for rea­sons of public inte­rest in the area of public health in accord­ance with points (h) and (i) of Arti­cle 9 (2) as well as Arti­cle 9 (3) of the GDPR;
(4) for archi­ving pur­po­ses in the public inte­rest, sci­en­ti­fic or his­to­ri­cal rese­arch or for sta­tis­ti­cal pur­po­ses in accord­ance with Arti­cle 89 (1), inso­far as the right refer­red to in para­graph 1 is likely to make it impos­si­ble or serious­ly impair the achie­ve­ment of the objec­tives of such pro­ces­sing; or
(5) for the esta­bli­shing, exer­cising or defen­ding legal claims.

5. Noti­fi­ca­ti­on obli­ga­ti­on

If you have made use of your right to cor­rect, era­se or restrict the pro­ces­sing of your per­so­nal data, the con­trol­ler is obli­ged to inform all reci­pi­ents to whom the per­so­nal data have been dis­c­lo­sed of this cor­rec­tion or era­su­re of the data or limi­ta­ti­on of the pro­ces­sing, unless this pro­ves to be impos­si­ble or invol­ves a dis­pro­por­tio­na­te effort.
You have the right to be infor­med of the­se reci­pi­ents by the con­trol­ler.

6. Right to data por­ta­bi­li­ty

You have the right to recei­ve the per­so­nal data rela­ting to you which you have pro­vi­ded to the data con­trol­ler, in a struc­tu­red, com­mon­ly used and machi­ne-read­a­ble for­mat. In addi­ti­on, you have the right to trans­mit this data to ano­t­her con­trol­ler without hin­dran­ce by the con­trol­ler, who has been pro­vi­ded with the per­so­nal data, whe­re:
(1) the pro­ces­sing is based on a con­sent in accord­ance with the point (a) of Arti­cle 6 (1) or point (a) of Arti­cle 9 (2) or on a con­tract in accord­ance with the point (b) of Arti­cle 6 (1); and
(2) the pro­ces­sing is car­ri­ed out using auto­ma­ted means.
In exer­cising this right, you also have the right to have your per­so­nal data are trans­mit­ted direct­ly from one con­trol­ler to ano­t­her, as far as this is tech­ni­cal­ly fea­si­ble. Free­doms and rights of other per­sons may not be affec­ted ther­e­by.
The right to data por­ta­bi­li­ty is not app­li­ca­ble to the pro­ces­sing of per­so­nal data necessa­ry for the per­for­mance of a task car­ri­ed out in the public inte­rest or in the exer­cise of offi­ci­al aut­ho­ri­ty given to the data con­trol­ler.

7. Right to object

For rea­sons ari­sing from your par­ti­cu­lar situa­ti­on, you have the right to object at any time to pro­ces­sing of per­so­nal data con­cer­ning you, which is car­ri­ed out based on point (e) or (f) of Arti­cle 6 (1); this also app­lies to pro­filing based on the­se pro­vi­si­ons.
The con­trol­ler will no lon­ger pro­cess the per­so­nal data con­cer­ning you, unless the con­trol­ler can pro­ve that the­re are com­pel­ling legi­ti­ma­te grounds for the pro­ces­sing that out­weigh your inte­rests, rights and free­doms or the pro­ces­sing ser­ves to esta­blish, exer­cise or defend legal claims.
Whe­re the per­so­nal data con­cer­ning you are pro­ces­sed for direct mar­ke­ting pur­po­ses, you have the right to object at any time to pro­ces­sing of per­so­nal data con­cer­ning you for such mar­ke­ting; this also app­lies to pro­filing, inso­far as it is rela­ted to such direct mar­ke­ting.
Whe­re you object to the pro­ces­sing for the pur­po­ses of direct mar­ke­ting, the per­so­nal data con­cer­ning you will no lon­ger be pro­ces­sed for the­se pur­po­ses.
In the con­text of the use of infor­ma­ti­on socie­ty ser­vices, and not­wi­th­stan­ding Direc­tive 2002/58/EC, you have the pos­si­bi­li­ty of exer­cising your right to object by auto­ma­ted means using tech­ni­cal spe­ci­fi­ca­ti­ons.

8. Right to with­draw the decla­ra­ti­on of con­sent under Data Pro­tec­tion Act

You have the right to with­draw your decla­ra­ti­on of con­sent under Data Pro­tec­tion Act at any time. The with­dra­wal of the con­sent does not affect the lega­li­ty of the pro­ces­sing car­ri­ed out on the basis of the con­sent until the with­dra­wal.

9. Auto­ma­ted indi­vi­du­al deci­si­on-making, inclu­ding pro­filing

You have the right not to be sub­ject to a deci­si­on based sole­ly on auto­ma­ted pro­ces­sing, inclu­ding pro­filing, which has legal effect on you or which signi­fi­cant­ly impairs you in a simi­lar man­ner.
This does not app­ly if the deci­si­on:
(1) is necessa­ry for ent­e­ring into, or per­for­mance of, a con­tract bet­ween you and a data con­trol­ler;
(2) is aut­ho­ri­sed by Uni­on or Mem­ber Sta­te law to which the con­trol­ler is sub­ject and which also lays down sui­ta­ble mea­su­res to safe­guard your rights and free­doms and legi­ti­ma­te inte­rests; or
(3) is based on your expli­cit con­sent.
Howe­ver, the­se deci­si­ons may not be based on spe­cial cate­go­ries of per­so­nal data in accord­ance with Arti­cle 9 (1), unless point (a) or (g) of Arti­cle 9 (2) app­lies and appro­pria­te mea­su­res to safe­guard the rights and free­doms and your legi­ti­ma­te inte­rests are in place.
Regar­ding the cases refer­red to in (1) and (3), the data con­trol­ler has to take appro­pria­te mea­su­res to safe­guard the rights and free­doms and your legi­ti­ma­te inte­rests, at least the right to obtain human inter­ven­ti­on on the part of the data con­trol­ler, to sta­te his or her own posi­ti­on and to con­test the deci­si­on.

10. Right to lodge a com­p­laint with a super­vi­so­ry aut­ho­ri­ty

Without pre­ju­di­ce to any other admi­nis­tra­ti­ve or judi­ci­al reme­dy, you have the right to lodge a com­p­laint with a super­vi­so­ry aut­ho­ri­ty, in par­ti­cu­lar in the Mem­ber Sta­te of your habi­tu­al resi­dence, place of work or place of the alle­ged infrin­ge­ment if you con­si­der that the pro­ces­sing of your per­so­nal data infrin­ges this Regu­la­ti­on.
The super­vi­so­ry aut­ho­ri­ty with which the com­p­laint has been lod­ged is to inform the com­p­lai­nant on the pro­gress and the out­co­me of the com­p­laint inclu­ding the pos­si­bi­li­ty of judi­ci­al reme­dy accord­ance to Arti­cle 78.

Respon­si­ble for data pro­ces­sing:
iHr Pro­duk­ti­ons und Ver­triebs GmbH & Co KG
Marie-Curie-Stras­se 5
64823 Gross-Umstadt
Pho­ne: +49 6078 3932399
kontakt@pur-hocl.eu

Docu­ment pro­du­ced and updated by janolaw AG.