Image

Privacy notice

 

General Questions

  1. Your personal data within the meaning of Art. 4 No. 1 GDPR (e.g. IP address, name, email address) will only be processed by us in accordance with the provisions of German data protection law and taking into account the European General Data Protection Regulation (GDPR). The following regulations inform you about the type, scope and purpose of the collection, processing and use of personal data.
  2. The processing of personal data within the meaning of Art. 4 No. 2 GDPR is lawful in accordance with Art. 6 GDPR if one of the following conditions applies:
  3. a) the data subject has given his or her consent to the processing of personal data concerning him or her for one or more specific purposes;
  4. b) the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps prior to entering into a contract at the data subject's request;
  5. c) processing is necessary for compliance with a legal obligation to which the controller is subject;
  6. d) the processing is necessary to protect the vital interests of the data subject or another natural person;
  7. e) the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  8. f) the processing is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data outweigh them, in particular if the data subject is a child acts.
  9. The processing of special personal data (e.g. health data) within the meaning of Art. 9 Para. 1 GDPR is lawful, in particular according to Art. 9 Para. 2 GDPR, if one of the following conditions applies:

– there is an explicit consent from the person;

– processing is necessary for the establishment, exercise or defence of legal claims or for actions by courts in their judicial capacity.

  1. There is no automatic decision-making or profiling regarding personal data within the meaning of Art. 22 GDPR.
  2. The operator ensures the security of the data in accordance with Art. 32 GDPR, taking into account the principle of proportionality, through appropriate technical measures.
  3. If, contrary to expectations, a breach of data protection occurs, the responsible supervisory authority will be notified in accordance with Art. 33 GDPR, as well as the data subject in accordance with Art. 34 GDPR.

 

Scope

This privacy policy only applies to our websites. If you are redirected to other websites via links on our pages, please inform yourself there about how your data is handled.

 

Duration of data storage

The duration of storage of the data you transfer depends on the legal retention requirements. According to commercial and tax laws, invoices are required to be retained for a period of 10 years.

 

Disclosure of Data to Third Parties

Data transmitted as part of the contractual relationship will only be passed on to third parties (Art. 4 No. 10 GDPR) if you have expressly given your consent (Art. 4 No. 11 GDPR) or if the transfer is necessary to fulfill the contract. Consent can be revoked informally at any time. Data collected when you visit the website are only collected by third parties that are expressly named below.

 

Responsible in the sense of the GDPR

The person responsible within the meaning of the General Data Protection Regulation (GDPR), as well as other data protection laws applicable in the European Union and other provisions of a data protection nature is:

Elco Industrie Automation GmbH

Benzstrasse 7

71720 Oberstedfeld

Germany

Telephone: + 49 (0) 7062 6599-260

Fax: + 49 (0) 7062 6599-261

Email: info@elco-automation.de

 

Data protection officer

We have appointed an internal data protection officer for our company:

Elco Industrie Automation GmbH

Benzstrasse 7

71720 Oberstedfeld

Telefon: + 49 7062 6599-260

Email: datenschutz@elco-automation.de

 

Cookies

We use cookies on our site. These are small files that your browser creates automatically and that are stored on your device (PC, laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. The cookie stores information that arises in connection with the specific end device used. However, this does not mean that we receive direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our page.

In addition, to improve usability, we also use temporary cookies that are stored on your device for a specified period of time. If you visit our site again to use our services, it will automatically recognize that you have already been with us and what inputs and settings you have made, so you do not have to re-enter them.

These cookies enable us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined period of time. The data processed by cookies is necessary for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. Most browsers accept cookies automatically. However, you can configure your browser so that no

Cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all functions of our website.

Borlabs Cookie Consent

Our website uses the Borlabs Cookie plugin to manage your cookie consents. The plugin sets technically necessary cookies to save the consents you have chosen and to take your cookie settings into account on future visits to our website.

This data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time by changing the cookie settings on our website.

Further information on data processing by Borlabs can be found in Borlabs’ privacy policy: https://de.borlabs.io/datenschutz

 

Storage of access data in log files

You can visit our website without giving any personal information.

The Provider of these pages automatically collects and stores information in so-called Server-Log Files, which your browser automatically transmits to us. These are:

  • - Browser type/ Browser version
  • The used operating system
  • Referrer URL
  • The hostname of the accessing computer
  • The time of the server inquiry

These data cannot be attributed to specific persons and will not be combined with other data sources. We reserve the right to control these data subsequently, if there is concrete evidence for an unlawful use.

The purpose of processing arises from our legitimate interest within the meaning of Article 6 Paragraph 1 Sentence 1 Letter f) GDPR.

A contract for order processing has been concluded with our hoster.

  

Google Analytics (version 4)

On this website we use Google Analytics (version 4), a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland. Google Analytics enables us to analyze user behavior on our website and create statistical evaluations.

The processing of your data by Google Analytics is based on our legitimate interest in accordance with Article 6 (1) (f) GDPR to analyze and improve our website. Your data is anonymized and the storage period is a maximum of 14 months.

On this website we use Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics uses cookies, text files that are stored on your computer and enable analysis of the use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server and stored there.

However, by activating IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to fully use all of the functions of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by deactivating this in the cookie settings.

To protect your privacy, we have configured Google Analytics to anonymize your IP address. This means that your IP address is shortened and anonymized before it is transmitted to Google. The full IP address is not transmitted to Google. We have also set the data storage period to a maximum of 14 months.

For more information on data protection and data processing by Google Analytics, please see Google’s privacy policy: https://policies.google.com/privacy

 

YouTube

This website integrates videos from the YouTube website. The operator of the website is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

If you visit one of our websites on which YouTube is integrated, a connection to the YouTube servers will be established. The YouTube server is informed which of our pages you have visited.

Furthermore, YouTube can save various cookies on your end device. With the help of these cookies, YouTube can receive information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness and prevent fraud. The cookies remain on your device until you delete them.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If a corresponding consent has been requested (eg consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent is revocable at any time.

Further information on handling user data can be found in YouTube's data protection declaration at: https://policies.google.com/privacy?hl=de

 

Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google servers.

 

Google Maps (with consent)

This website uses the Google Maps map service via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To ensure data protection on this website, Google Maps is deactivated when you enter this website for the first time. A direct connection to Google's servers is only established when you independently activate Google Maps (consent in accordance with Art. 6 Para. 1 lit. a GDPR). This prevents your data from being transmitted to Google the first time you enter the site.

After activation, Google Maps will save your IP address. This is then usually transferred to a Google server in the US and stored there. The provider of this site has no influence on this data transfer after activating Google Maps.

For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://www.google.de/intl/de/policies/privacy/

 

Google reCAPTCHA

We use "Google reCAPTCHA" (hereafter "reCAPTCHA") on this website. Provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

With reCAPTCHA it should be checked whether the data entry on this website (eg in a contact form) is done by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (eg IP address, website visitor's time spent on the website or mouse movements made by the user). The data collected during the analysis will be forwarded to Google.

The reCAPTCHA analyzes are completely in the background. Site visitors are not advised that an analysis is taking place.

The data processing is based on Art. 6 para. 1 lit. f DSGVO. The Web site operator has a legitimate interest in protecting its web sites from abusive automated spying and SPAM.

For more information on Google reCAPTCHA, please see the Google Privacy Policy and the Google Terms of Service at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de

 

Wordfence

We use the WordPress security plugin Wordfence to increase the security of our website and protect it from possible threats and attacks. Wordfence is a product of Defiant, Inc.

Wordfence may collect certain information about visitors to our website in order to detect and block potentially harmful activities. This may include collecting IP addresses and other technical data.

Wordfence's processing of your data is based on our legitimate interest in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR), as we have a legitimate interest in ensuring the security of our website and protecting it from attacks. We have taken appropriate measures to protect your information.

For more information about how Wordfence processes your data, please see Defiant, Inc.'s privacy policy: https://www.wordfence.com/privacy-policy/

 

Visitor tracking using Zoho

We use Zoho, a visitor analytics tool, to gain insight into how visitors behave on our website. This includes information such as pages visited, length of stay and interactions. Zoho is provided by Zoho Corporation GmbH, Trinkausstr. 7, 40213 Düsseldorf.

Zoho's processing of your data is based on our legitimate interest in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR), as we have a legitimate interest in improving the performance of our website and optimizing the user experience. We have taken appropriate measures to protect your information.

For more information about how Zoho processes your data, please see Zoho's privacy policy: https://www.zoho.com/privacy.html

 

Order in the online shop

When you place an order in our online store, we process personal data such as name, address, email address, payment details and ordered products in order to process your order and deliver the requested products to you.

The processing of this data is based on the performance of the contract in accordance with Art. 6 (1) (b) GDPR, as the processing is necessary to fulfil the sales contract and deliver the ordered products or services.

Your data will be used exclusively to process the order and will only be passed on to third parties if this is necessary to fulfil the contract (e.g. to payment service providers or shipping companies). Your data will not be used for any other purpose without your express consent.

 

Login/Registration with user account

To log in and register in our online shop, we offer you the option of creating a user account. In doing so, we process personal data such as name, email address and a password of your choice.

The processing of this data is based on the fulfillment of the contract in accordance with Art. 6 Paragraph 1 Letter b of GDPR, as the processing is necessary to give you access to your user account and to manage your orders.

Your data will only be used to manage your account and orders. You have the option to delete your account at any time by contacting us directly.

 

Notes for online shop

Our online shop offers you the option of saving products on a wish list. If you use this function, we will save the corresponding data in order to show you these products again on a subsequent visit. This data is processed on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

You can revoke this consent at any time by removing the products from your wish list or deactivating the corresponding function.

 

Vimeo

We maintain a profile on Vimeo. Our website may also contain embedded videos via the Vimeo video service, which is provided by Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA. When you visit a page with an embedded Vimeo video, a connection is established to the Vimeo servers and information such as your IP address and the page visited is transmitted.

Your data will be processed based on your consent in accordance with Art. 6 (1) (a) GDPR, which you give by agreeing to our cookie settings. You can revoke your consent at any time by changing your cookie settings.

Further information on data processing by Vimeo can be found in the Vimeo privacy policy: https://vimeo.com/privacy

 

Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager enables us to manage tracking codes and scripts on our website without having to manually adjust the source code. Google Tag Manager itself does not set any cookies and does not store any personal data.

Your data is processed on the basis of our legitimate interest in accordance with Art. 6 (1) (f) GDPR, as the Google Tag Manager is necessary for the efficient management and implementation of tracking tags.

For more information about data processing by Google, please see Google’s privacy policy: https://policies.google.com/privacy

 

EventOn

We use the EventOn plugin, an event management tool that allows us to organize and manage events on our website. Personal data such as name and email address may be collected when you register for an event.

Your data will be processed on the basis of contract fulfillment in accordance with Art. 6 (1) (b) GDPR, as the data is necessary for organizing the event and managing your participation.

Your data will only be used for event organization purposes and will not be passed on to third parties without your consent.

 

Contact form

When you use the contact form offered on these pages, the information you enter will be transferred and stored for the purpose of answering your request. The data will not be passed on to third parties. The legality of using the form results from Article 6 Paragraph 1 Sentence 1 Letter f) GDPR.

 

Chat

When you use the chat offered on these pages, the information you enter is transmitted and stored for the purpose of answering your request. The data will not be passed on to third parties. The legality of using the chat results from your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) GDPR.

 

Jitsi meet

We use Jitsi Meet, an open source video conferencing platform, to host video conferences and virtual meetings. Jitsi Meet is developed and provided by 8×8, Inc. 8×8, Inc. is headquartered at 675 Creekside Way, Campbell, CA 95008, USA.

Jitsi Meet is used to provide video conferencing services and to communicate with our users and customers. Personal data such as your name and email address may be collected and processed while using Jitsi Meet.

The legal basis for processing your data is based on our legitimate interest in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR), as video conferencing is an important part of our communication. We take our users' privacy seriously and take appropriate measures to protect your information. Please note that Jitsi Meet has its own privacy policy, which you can view here:

https://jitsi.org/meet-jit-si-privacy/

 

Google Translate

We use Google Translate, a translation service provided by Google, to translate content on our website into different languages. Google Translate is provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Using Google Translate allows our visitors to read our website in their preferred language. When using this service, texts from our website may be transmitted to Google and translated by Google. Please note that this translation process may collect personal data.

The processing of your data by Google Translate is based on your consent in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR), as you consciously decide to use this translation service. For more information on how Google processes your data, please see their privacy policy: https://policies.google.com/privacy

 

Content Delivery Network (CDN)

We use a content delivery network (CDN) to deliver content on our website more efficiently and to optimize loading times. A CDN helps deliver files such as images, style sheets, and scripts from servers in geographically dispersed data centers to improve website performance. Using a CDN may result in your IP address and information about your browsing activity being shared with the CDN.

The processing of your data by the CDN is based on our legitimate interest in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR) to increase the performance and reliability of our website. We have implemented appropriate security measures to protect your information while it is transmitted over the CDN.

 

Newsletter

If you would like to receive the newsletter offered on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter . Further data is not collected or only collected on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1) (a) DSGVO. You can revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, e.g. through the "unsubscribe" link in the newsletter. The data processed before we receive your request may still be legally processed.

The data deposited with us for the purpose of obtaining the newsletter will be stored by us or the newsletter service provider until the time of your removal from the newsletter and deleted from the newsletter distribution list after the newsletter has been canceled. Data stored for other purposes with us remain unaffected.

After you have been removed from the newsletter distribution list, your e-mail address may be stored in a blacklist by us or the newsletter service provider in order to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interests.

Shipping via Brevo

This website uses Brevo to send newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Brevo is a service that, among other things, can be used to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter will be stored on Brevo’s servers in Germany.

If you do not wish to be analyzed by Brevo, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.

With the help of Brevo we are able to analyze our newsletter campaigns. So we can e.g. For example, you can see whether a newsletter message has been opened and which links, if any, have been clicked. In this way, we can determine, among other things, which links were clicked on particularly often.

Brevo also allows us to divide (“cluster”) newsletter recipients based on different categories. The newsletter recipients can be divided according to the selection of the desired newsletter. In this way, the newsletters can be better adapted to the respective target groups.

After you have been unsubscribed from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider in order to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Section 6 Para. 1 lit. g KDG). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interests.

We have entered into a contract with Brevo in which we require Brevo to protect our customers' data and not to pass it on to third parties.

For more information, see Brevo's privacy policy at: https://de.Brevo.com/datenschutz-uebersicht/?rtype=n2go

 

PitchView Collect

We use the PitchView Collect software to record our customer contacts. In this context, we collect customer data from business cards handed over. You must agree by signing on a tablet on site that we may process your data and that you may receive information from us via post, email, etc. For this you have to tick a box.

The data will be passed on to the following company:

achelos GmbH, Vattmannstrasse 1, 33100 Paderborn

The processing of the data is justified based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) GDPR.

 

applications

We offer you the opportunity to apply to us (eg by e-mail, by post or via the online application form). In the following, we will inform you about the scope, purpose and use of your personal data collected during the application process. We assure that the collection, processing and use of your data will be in accordance with applicable data protection law and all other legal provisions and that your data will be kept strictly confidential.

If you send us an application, we will process your related personal data (eg contact and communication data, application documents, notes in the context of job interviews, etc.), as far as this is necessary for a decision on the establishment of employment. The legal basis for this is § 26 BDSG-new under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and - if you have given your consent - Art. 6 para. 1 lit. a GDPR. The consent is revocable at any time. Your personal data will only be passed on within our company to persons who are involved in the processing of your application.

If the application is successful, the data submitted by you will be published on the basis of § 26 BDSG-new and Art. 6 para. 1 lit. b DSGVO for the purpose of carrying out the employment relationship in our data processing systems.

If we are unable to make you a job offer, reject a job offer or withdraw your application, we reserve the right to uphold the data transmitted by you based on our legitimate interests (Art. 6 Para. 1 lit. f GDPR) for up to 6 months to be kept with us from the end of the application process (rejection or withdrawal of the application). The data is then deleted and the physical application documents are destroyed. The storage serves in particular for verification purposes in the event of a legal dispute. If it can be seen that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), deletion will only take place if the purpose for further storage no longer applies.

Longer storage can also take place if you have given the appropriate consent (Art. 6 Para. 1 lit. a GDPR) or if there are legal retention obligations to prevent deletion.

 

Inquiries by email, telephone or fax

If you contact us by email, fax or telephone, your request, including all resulting personal data (name, request), will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b DSGVO, if your request is related to the fulfillment of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (article 6 para. 1 lit. a DSGVO) and / or on our legitimate interests (article 6 para. 1 lit. f DSGVO), as we have a legitimate interest in the effective Processing of requests addressed to us.

The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

 

Social media links

We have our own social media pages for third-party providers that can be reached via links from this website. By using the links, you will reach the respective third-party websites and can also share our content. There is no data transfer when you access our website. As soon as you have accessed the third-party website, you are responsible for the respective third-party provider, so that their data protection declaration and their statements on data use also apply. We have no influence on this, but in order to avoid unnecessary data transfer, we recommend that you log out of the respective third-party provider before using a corresponding link so that usage profiles cannot be created by the third-party provider simply by using the link.

 

Social media profiles on Facebook, Instagram and LinkedIn

We operate profiles on the social networks Facebook, Instagram and LinkedIn to communicate with our customers and interested parties. These platforms are operated by:

Facebook: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Data protection statement: https://www.facebook.com/about/privacy

Instagram: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Data protection statement: https://help.instagram.com/519522125107875

LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Data protection statement: https://www.linkedin.com/legal/privacy-policy

The processing of your data on these platforms is based on your consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR, which you give through interactions with our profiles. You can revoke your consent at any time by changing the settings in your respective social media profile.

 

Security of your data / SSL encryption

In accordance with legal regulations, this site uses SSL encryption, which can be recognized by a lock symbol in the address bar of your browser. Transmitted data cannot be read by third parties if SSL encryption is activated.

This is usually 256 bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the bottom status bar of your browser.

We also use appropriate technical and organizational security measures (TOM) to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

 

User rights

You can request information about the personal data stored about you at any time and free of charge. Your rights also include confirmation, correction, restriction, blocking and deletion of such data and the provision of a copy of the data in a form suitable for transmission, as well as the revocation of consent given and objection. Statutory retention obligations remain unaffected.

Your rights arise in particular from the following standards of the GDPR:

  • Article 7 Paragraph 3 – Right to revoke data protection consent
  • Article 12 – Transparent information, communication and modalities for exercising the rights of the data subject
  • Article 13 – Obligation to provide information when collecting personal data from the data subject
  • Article 14 – Obligation to provide information if the personal data have not been collected from the data subject
  • Article 15 – Right of access of the data subject, right to confirmation and provision of a copy of personal data
  • Article 16 – Right to rectification
  • Article 17 – Right to erasure (“right to be forgotten”)
  • Article 18 – Right to restriction of processing
  • Article 19 – Obligation to notify in connection with the rectification or deletion of personal data or the restriction of processing
  • Article 20 – Right to data portability
  • Article 21 – Right to object
  • Article 22 – Right not to be subject to a decision based solely on automated processing, including profiling
  • Article 77 – Right to lodge a complaint with a supervisory authority

To exercise your rights (with the exception of Art. 77 GDPR), please contact the office named under “Responsible person within the meaning of the GDPR” (e.g. by email).

 

Responsible supervisory authority:

The state commissioner for data protection and freedom of information in Baden-Württemberg

Lautenschlagerstrasse 20

70173 Stuttgart

Phone: 0711 / 615541-0

Fax: 0711 / 615541-15

Email: poststelle@lfdi.bwl.de

Home Page: https://www.baden-wuerttemberg.datenschutz.de/