Event agency for Europe-wide corporate events and incentives - Eckhardt Events | Realization of Company Events

E-mail: info@eckhardt-events.de

Website: www.eckhardt-events.de

Further information about our company can be found in the imprint of our homepage at http://www.eckhardt-events.de/impressum-datenschutz.html (see above on this page).

A.2 Contact details of the data protection officer

A data protection officer has not been appointed. There is no obligation to do so.

You can reach us using the contact details given in A.1.

B. Details on processing

B.1 Contact via contact form, e-mail contact, telephone call

B.1.a.) General information when using the contact form or e-mail contact or sending a fax or making a telephone call:

If you fill out the contact form, we collect the data requested in the input mask.

For all submissions, you must provide us with the data marked with an asterisk (*).

Alternatively, you can contact us via the e-mail address or telephone number provided. In this case, your personal data transmitted by e-mail or telephone will be stored.

B.1.b.) Purposes of data processing when using the contact form or e-mail contact or fax transmission or telephone call:

The processing of the personal data from the input mask serves us solely to process your contact and to deal with your request, likewise in the case of transmission by e-mail or telephone.

B.1.c.) Legal basis for data processing when using the contact form or e-mail contact or fax transmission or telephone call:

In the case of enquiries via the contact form, email or telephone, the legal basis for processing the data is our legitimate interest in data processing in accordance with Art. 6(1)(f) GDPR in order to be able to process and respond to your enquiry at all.

B.1.d.) Forwarding of data when using the contact form or e-mail contact or telephone call:

Entered form data will be sent to us by e-mail when you click on the send button and will only be stored on our e-mail server at our provider 1und1 in Germany.  Otherwise, no data will be passed on to third parties. An exception exists if there is a legal obligation to pass on the data.

B.1.e.) Duration of storage when using the contact form or e-mail contact or telephone call:

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected.

If your contact with us has only resulted in a non-contractual conversation, the purpose is achieved when the conversation has ended and it can be ruled out that the conversation may not provide us with any indications of an imminent conclusion of a contract or any contractual warranty or liability claims. We then delete the data at the end of the conversation.

Fax data is stored separately from print data in the device's memory. After the fax has been printed, the occupied memory space is released again so that the next fax can be received and stored there. Parts of the fax can remain temporarily in the device memory after printing until they are overwritten by the next fax received. As a rule, this leads to automatic deletion of the data after 1 week. If we have activated "Transmission report with printout of first page", the report including the printout of the first page sent remains temporarily in the memory of the device until it is overwritten/deleted by the next transmission report or by disconnecting the device from the power supply or resetting it for several days.

When you make an incoming telephone call or an outgoing call to us, your telephone number or your name/company name stored with your telephone provider as well as the date and time of the call are stored in our telephone system in a so-called ring buffer, which overwrites the oldest data with new data. As a rule, this leads to automatic deletion of the data in the telephone system after one month at the latest.

B.1.f.) Objection and removal option when using the contact form or e-mail contact or telephone call:

Insofar as we rely on legitimate interest (processing for advertising purposes), you have the right to object to the processing of your personal data by us at any time on grounds relating to your particular situation.  If we cannot demonstrate compelling legitimate grounds for further processing that outweigh your interests, rights and freedoms, we will then no longer process your data (see Art. 21 GDPR). You can contact us by post or email (see A.1.). With the objection, however, our conversation also ends.

All personal data stored in the course of making contact will be deleted in this case, provided that there is no evidence from the conversation that we have any warranty or liability claims under contractual law or that we have no claims against you. In all other cases, the data will be blocked so that only our management has access to this data and only for the purpose of the statutory retention reasons or for the purpose of defence or assertion of actual or potential claims until the expiry of the limitation period (see above our information on the duration of storage).

B.2 Newsletter (if applicable)

You will only receive a newsletter if you order it yourself or allow us to add you to the order form. In both cases, you will receive a confirmation e-mail in which you must click on the confirmation link in order to be added to the mailing list.

B.2.a.) General information when ordering the newsletter:

You can subscribe to our free newsletter on our website.  When you register for the newsletter, your e-mail address(*) from the input mask will be transmitted to us.

The e-mail address is mandatory. If you do not do this, you will not be able to receive the newsletter.

The following data is also collected when you register for the newsletter:

The IP address of the user, as well as

the date and time of registration.

The letter is used to prevent misuse of the services or the data subject's e-mail address.

Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registering you will receive an e-mail asking you to confirm your registration.  This confirmation is necessary to ensure that no-one can register using other people's e-mail addresses. When you click on the link to confirm your registration, your IP address and the exact time (date and time) of the click will be collected. This data processing serves to fulfil our legal obligation to prove that an opt-in, i.e. express consent to receive the newsletter, has actually been given by the email address.

Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy.

B.2.b.) Purpose of data processing when subscribing to the newsletter:

The purpose of collecting and processing the user's e-mail address is to deliver the newsletter. We therefore use your e-mail address for the newsletter.

The collection of the IP address and time when clicking on the confirmation link in the double opt-in email serves to fulfil our legal obligation to obtain explicit consent.

The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.

Possible storage beyond the cancellation of the newsletter for up to 3 years serves the purpose of proving a previously given consent and a possible defence against claims

B.2.c.) Legal basis for data processing when subscribing to the newsletter:

The legal basis for processing your data after subscribing to the newsletter is Art. 6(1)(a) GDPR (consent).

The legal basis for storing the IP address and time when you click on the confirmation link in the double opt-in email and for possible further storage for up to three years after you unsubscribe from the newsletter is our legitimate interest in accordance with Art. 6(1)(f) GDPR. In this case, our legitimate interest is to be able to prove that you have previously given your consent and to defend against claims derived from this.

B.2.d.) Forwarding of data when you subscribe to the newsletter:

The data will not be passed on to third parties, e.g. to an external dispatch service provider.

An exception exists if there is a legal obligation to pass on the data. The data is used exclusively for sending the newsletter.

B.2.e.) Duration of storage when ordering the newsletter:

After registration, the applicant will receive an e-mail from us at the e-mail address provided with a confirmation link. If this link is not clicked, we will delete the data by the 7th working day (Monday-Friday) after registration.

Your data will also be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The user's email address will therefore be stored for as long as the subscription to the newsletter is active and the three-year period for storage for evidence purposes (see letter f. below) has expired.

The other personal data collected during the registration process will generally be deleted after a period of seven days.

B.2.f.) Objection and cancellation option when subscribing to the newsletter:

You can cancel your subscription to the newsletter at any time, free of charge and in any form. For this purpose, each newsletter contains a corresponding link labelled "Unsubscribe from the newsletter? Click here!". You can also contact us in another way (see A.1.).

This also enables you to withdraw your consent to the storage of the personal data collected during the registration process.

However, we will store your data for a period of up to 3 years from 31 December of the year in which you gave your consent, based on our legitimate interests, before we delete it permanently, provided that we can prove that you have given (and now withdrawn) your consent. This data will not be processed in any other way.

B.3 Processing when you visit our website

When you visit our website, various data processing operations take place, about which we inform you here. This applies regardless of whether you fill out a contact form, order our newsletter or make a purchase in the shop.

B.3.a.) General information when you visit our website:

When you visit our website, even without entering data in a web form or in the shop, we collect the following data for technical reasons:

Date and time of access,

URL (address) of the referring website (referrer),

Websites that you access via our website,

your screen resolution,

retrieved file(s) and notification of the success of the retrieval,

the amount of data sent,

your internet service provider,

Your browser, browser type and browser version, browser engine and engine version,

Your operating system, operating system version, operating system type,

your anonymised IP address and the internet service provider.

This data is processed separately from other data. This data is not processed together with your other personal data. It is not possible for us to assign this data to a specific person.

B.3.b.) Purpose of data processing when visiting our website:

The temporary processing of data by the system is necessary to enable the content of our website to be delivered to your computer. For this purpose, your IP address must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. We also use the data to optimise our offer and the website and to ensure the security of our information technology systems.  The data is not analysed for marketing purposes in this context.

B.3.c.) Legal basis for data processing when visiting our website:

The temporary storage of the data and the log files takes place on the legal basis of Art. 6(1)(f) GDPR. Our overriding legitimate interest in this data processing lies in the aforementioned purposes. We have concluded an order processing contract with our provider (1und1) (see Art. 28 GDPR).

B.3.d.) Transfer of data when visiting our website:

Our IT service provider has admin access to our website as a processor in accordance with Art. 28 GDPR. We have concluded an order processing contract with them.

The data that we collect when you visit our website is collected and stored by our provider 1und1 as part of order processing (see Art. 28 GDPR).

Otherwise, we do not pass on your data unless we have expressly mentioned this in this data protection notice: Disclosure to the tax consultant for accounting purposes; disclosure to external specialist consultants with your prior express consent.

Otherwise, this data will not be passed on. An exception exists if there is a legal obligation to pass on the data.

B.3.e.) Duration of storage when visiting our website:

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after 7 days at the latest. Storage beyond this period is possible. In this case, however, your IP address will be deleted or anonymised so that it is no longer possible to identify the accessing client.

B.3.f.) Objection and removal option when visiting our website:

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for you to object here. However, you can stop using our website at any time and thus prevent the further processing of the aforementioned data.

B.4 Use of Google Maps (if applicable)

B.4.a.) General:

This website uses Google Maps, a map service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), to display an interactive map. By using Google Maps, information about your use of this website (including your IP address) may be transmitted to a Google server in the USA and stored there.

Google may transfer the information obtained through Maps to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. Nevertheless, it would be technically possible for Google to identify at least individual users on the basis of the data received. It would be possible that personal data and personality profiles of users of the website could be processed by Google for other purposes over which we have and can have no influence.

B.4.b.) Purpose of data processing with Google Maps

Google Maps is used for the purpose of improving the quality of our website and its content and to provide you with a simple, useful and well-known map service for orientation, to display our company headquarters, to plan your journey, etc.

B.4.c.) Legal basis for data processing with Google Maps:

The legal basis for the processing of personal data using Google Maps is Art. 6(1)(f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes. Google Inc. has acceded to the "EU-U.S. Privacy Shield", so that data transfer to the USA is permitted.

B.4.d.) Duration of storage by Google Maps:

As a user, you can decide for yourself about the execution of the JavaScript code required for the tool via your browser settings. You can deactivate or restrict the execution of JavaScript by changing the settings in your Internet browser. Note: If the execution of JavaScript is deactivated, it may no longer be possible to use all the functions of the website to their full extent.

Otherwise, we store the data collected on the basis of a legitimate interest until the legitimate interest no longer exists, the assessment comes to a different conclusion or you have effectively lodged an objection in accordance with Art. 21 GDPR (see the visually emphasised "Note on special right of objection" under C.). It is reviewed regularly, at least annually, whether the legitimate interest still exists. In particular, our interest no longer exists if the data is no longer sufficiently relevant to us with regard to the analysis and statistics of website use due to the passage of time, which can be assumed after three years at the latest.

B.5 Use of Google reCAPTCHA

B.5.a.) General information:

In selected cases, we use the reCAPTCHA service provided by Google, Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to protect the transmission of forms (e.g. contact form, registration for the internal member area).

The service includes sending your IP address and any other data required by Google for the reCAPTCHA service to Google. The deviating data protection provisions of Google apply to this data.

By using Google reCAPTCHA, information about your use of this website (including your IP address) may be transmitted to a Google server in the USA and stored there. Google may transfer the information obtained through reCAPTCHA to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. Nevertheless, it would be technically possible for Google to identify at least individual users on the basis of the data received. It is possible that personal data and personality profiles of users of the website could be processed by Google for other purposes over which we have and can have no influence.

B.5.b.) Purpose of data processing with regard to reCAPTCHA:

Google reCAPTCHA is used for the purpose of preventing so-called bots, i.e. small malware programmes, from compromising the security and integrity of our website and the web server. In this way, we want to ensure the functionality of the website. In addition, we use the data to ensure the security of our information technology systems.

B.5.c.) Legal basis for data processing with regard to reCAPTCHA:

The legal basis for the processing of personal data using Google reCAPTCHA is Art. 6(1)(f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes. Google Inc. has acceded to the "EU-U.S. Privacy Shield", so that the transfer of data to the USA is permitted.

B.5.d.) Objection and removal option regarding reCAPTCHA:

You have the option of not using the Google reCAPTCHA service by not clicking on the service button. You can then contact us by other means, for example by e-mail or telephone.

You can also deactivate Java Script in your browser and thus prevent the transfer of data to Google.  To prevent the execution of JavaScript code altogether, you can also install a JavaScript blocker, such as the browser plug-in NoScript (e.g. www.noscript.net or www.ghostery.com).

Note: If the execution of JavaScript is deactivated, you will not be able to use the reCAPTCHA service or our contact and web forms equipped with reCAPTCHA.

You can find Google's privacy policy at https://policies.google.com/privacy?hl=de

This forwards the information that you have visited our website to Facebook. If you are logged in to Facebook via your personal user account while visiting our website, Facebook can assign the website visit to this account. By interacting with plugins, e.g. by clicking the "Like" button, this information is transmitted directly to Facebook and stored there.

If you wish to prevent such data transmission, you must log out of your Facebook account before visiting our website. However, certain data, such as your IP address, the time of the click, the browser you are using, etc. will then still be transmitted to Facebook. Logging out only prevents the data from being assigned to a specific Facebook account.

For the purpose and scope of data collection by Facebook, the further processing and use of your data there, as well as your rights in this regard and setting options in your Facebook account to protect your privacy, please refer directly to Facebook's data protection information (http://de-de.facebook.com/privacy/explanation.php).

B.6.b.) Use of the Google+ button "G+"

Our website may use the "+" button of the social network Google Plus, which is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). The button can be recognised by the "G+" symbol in a red circle.

When you visit our website that contains such a button, your browser establishes a direct connection with Google's servers if you have previously authorised the data transfer by clicking the button once.

The content of the "+″ button is then transmitted by Google directly to your browser and integrated into the website. We therefore have no influence on the scope of the data that Google collects with the button. According to Google, no personal data is collected without a click on the button.  Such data, including the IP address, is only collected and processed for logged-in members. The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google's data protection information on the "+1" button: https://www.google.com/policies/privacy/partners/?hl=de

If you are a Google Plus member and do not want Google to collect data about you via our website and link it to your membership data stored by Google, you must log out of Google+ before visiting our website.

B.6.c.) Use of the Instagram social plugin

Functions and content of the Instagram service may be integrated on our website. This is a service provided by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA.

If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram.

This may include, for example, content such as images, videos or texts and buttons with which users can express their liking of the content, subscribe to the authors of the content or subscribe to our posts. If the users are members of the Instagram platform, Instagram can assign the access to the above-mentioned content and functions to the users' profiles there.

Purpose of data processing: The Instagram plugin is used for the purpose of enabling direct feedback or the direct sharing of our posts and information via the Instagram network and thus for our advertising and marketing interests.

Details on data collection (purpose, scope, further processing, use) as well as your rights and setting options can be found in Instagram's privacy policy. Instagram provides this information at http://instagram.com/about/legal/privacy/

Legal basis for data processing: The legal basis for the processing of personal data is Article 6(1)(f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.

Duration of storage: As a user, you can decide for yourself about the execution of the Java Script code required for the tool via your browser settings. By changing the settings in your Internet browser, you can deactivate or restrict the execution of JavaScript and thus also prevent it from being saved. Note: If the execution of JavaScript is deactivated, it may no longer be possible to use all the functions of the website to their full extent.

Objection and removal option: If you are an Instagram customer and do not want Instagram to collect data about you via our website and link it to your data stored by Instagram, you must log out of Instagram before visiting our website. You can prevent the execution of the JavaScript code required for the tool by setting your browser software accordingly.  To prevent the execution of JavaScript code altogether, you can also install a JavaScript blocker, such as the browser plugin NoScript (e.g. www.noscript.net or www.ghostery.com).

B.6.d.) Use of the LinkedIn button

Plugins of the social network LinkedIn of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn"), may be integrated on our pages. You can recognise the LinkedIn plugins by the white "in" in the dark green circle.

When you visit our website that contains such a button, a direct connection is established between your browser and the LinkedIn server via the plugin if you have previously authorised the data transfer by clicking the button once. LinkedIn then receives the information that you have visited our site with your IP address. If you click on the LinkedIn "Recommend button" while you are logged into your LinkedIn account, you can link the content of our pages to your LinkedIn profile. This allows LinkedIn to associate your visit to our pages with your user account.

We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn. Details on data collection (purpose, scope, further processing, use) as well as your rights and setting options can be found in LinkedIn's privacy policy. LinkedIn provides this information at http://www.linkedin.com/static?key=privacy_policy&trk=hb_ft_priv.

B.6.e.) Use of the Pinterest share button

On our website, you have the option of sharing posts and content with your contacts on the social network of the provider Pinterest.  Pinterest is operated by the company Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

This may include, for example, content such as images, videos or texts and buttons with which users can express their liking of the content, subscribe to the authors of the content or subscribe to our posts.  If the users are members of the Pinterest platform, Pinterest can assign the access to the above-mentioned content and functions to the users' profiles there.

Details on data collection (purpose, scope, further processing, use) as well as your rights and setting options can be found in Pinterest's privacy policy. You can access Pinterest's privacy policy here: https://about.pinterest.com/de/privacy-policy.

Purpose of data processing: The Pinterest plugin is used for the purpose of enabling direct feedback or the direct sharing of our posts and information via the Pinterest network and thus our advertising and marketing interests.

Legal basis for data processing: The legal basis for the processing of personal data is Article 6(1)(f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.

Duration of storage: As a user, you can decide for yourself about the execution of the Java Script code required for the tool via your browser settings. By changing the settings in your Internet browser, you can deactivate or restrict the execution of JavaScript and thus also prevent it from being saved. Note: If the execution of JavaScript is deactivated, it may no longer be possible to use all the functions of the website to their full extent.

Objection and removal option: If you are an Instagram customer and do not want Pinterest to collect data about you via our website and link it to your data stored on Pinterest, you must log out of Pinterest before visiting our website.

You can prevent the execution of the JavaScript code required for the tool by setting your browser software accordingly.

To prevent the execution of JavaScript code altogether, you can also install a JavaScript blocker, such as the browser plug-in NoScript (e.g. www.noscript.netoder www.ghostery.com).

B.6.f.) Use of the Twitter tweet button

Our website may use the "Tweet" button of the social network Twitter, which is operated by Twitter Inc, 750 Folsom Street, Suite 600, San Francisco, CA 94107, USA ("Twitter"). The "Tweet" button can be recognised by the white bird in the light blue circle.

When you visit our website that contains such a button, your browser establishes a direct connection with the Twitter servers if you have previously authorised the data transfer by clicking the button once.

The content of the "Tweet" button is then transmitted by Twitter directly to your browser, which integrates it into your Twitter message. We therefore have no influence on the scope of the data that Twitter collects with the button. However, we assume that your IP address is also recorded. The purpose and scope of the data collection and the further processing and use of the data by Twitter as well as your rights in this regard and setting options to protect your privacy can be found in Twitter's data protection information: http://twitter.com/privacy.

If you are a Twitter member and do not want Twitter to collect data about you via our website and link it to your member data stored on Twitter, you must log out of Twitter before visiting our website.

B.6.g.) Use of the XING button

This website may also use the "XING button" of the social network XING, which is operated by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany ("XING"). The "XING" button can be recognised by the "half" white X in the green circle.

When you access a website that contains the XING share button, your browser establishes a short-term connection to XING servers if you have authorised this in advance by clicking the button once.

This data connection is required in order to be able to provide the "XING Share Button" functions (in particular the calculation/display of the counter value). XING does not store any personal data about you when you access this website. In particular, XING does not store any IP addresses. There is also no evaluation of your usage behaviour via the use of cookies in connection with the "XING Share Button".

You can access the latest data protection information on the "XING share button" and additional information on this website: https://www.xing.com/app/share?op=data_protection

B.7 Cookies

B.7.a.) General information on cookies

When individual pages are accessed, we use so-called cookies.  These are small text files that are stored on the user's end device (PC, smartphone, tablet, etc.). When you visit our website, a cookie may be stored on your operating system.  This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We only use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. The following data is stored and transmitted in the cookies

Language settings,

Items in a shopping basket,

log-in information.

Cookies may be used to enable an analysis of the user's surfing behaviour.

B.7.b.) Purpose of data processing by cookies:

The purpose of using technically necessary cookies is to simplify the use of websites for you. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.

The user data collected by technically necessary cookies is not used to create user profiles.

B.7.c.) Legal basis for data processing:

The legal basis for the processing of personal data using cookies is Art. 6(1)(f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.

B.7.d.) Duration of storage:

The cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies).

B.7.e.) Objection and removal options:

Cookies are stored on your computer and transmitted from it to our website. You therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser.  Cookies that have already been saved can be deleted at any time. This can also be done automatically.

Note: If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

B.8 Transfer of data to a third country (other EU countries)

Your personal data will be transferred to the United States of America (USA) if you click on a social media plugin logo.

There is an adequacy decision of the EU Commission, which states that personal data may be transferred to the USA if the recipient has acceded to the "EU-U.S. Privacy Shield". The personal data is therefore only transferred to recipients in the USA who have demonstrably acceded to the EU-U.S. Privacy Shield.

The intention relates specifically to data transfer to the following companies

Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, as provider of the social network Google+,

Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA, as the provider of the social network Facebook,

Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA, as provider of the social network Instagram,

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, as provider of the LinkedIn professional network,

Twitter Inc, 750 Folsom Street, Suite 600, San Francisco, CA 94107, USA, as provider of the short message service Twitter.

The aforementioned companies have joined the EU-U.S. Privacy Shield and have submitted to regulations comparable to the EU data protection level. The transfer of data to these companies is therefore generally permitted. Furthermore, in the case of order processing, corresponding order processing contracts have been concluded with these companies to secure the data and our rights to issue instructions.

C. Your rights as a data subject

If your personal data is processed, you are the "data subject" and you have the following rights towards us as the controller (you can find our contact details above under A.):

C.1 Right to information

You have the right to obtain confirmation from us free of charge as to whether we are processing personal data concerning you. If this is the case, you have a right to information about this personal data and to further information, which you can find in Art. 15 GDPR. You can contact us by post or email for this purpose (see A.1. above)

C.2 Right to rectification

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. You also have the right - taking into account the purposes of processing mentioned above - to request the completion of incomplete personal data, including by means of a supplementary declaration. You can contact us by post or email for this purpose (see A.1. above).

You have the right to demand the immediate erasure of personal data concerning you if one of the requirements of Art. 17 GDPR is met.  You can contact us by post or email (see A.1. above). We have described the legal consequences under B. for the respective processing operations.

C.4 Right to object to processing based on legitimate interest

If we process your data on the basis of Art. 6(1)(f) GDPR (i.e. due to our legitimate interest), you have the right to object to the processing of your personal data by us at any time on grounds relating to your particular situation. If we cannot demonstrate compelling legitimate grounds for further processing that override your interests, rights and freedoms, or if we process your data for the purpose of direct marketing, we will no longer process your data (see Art. 21 GDPR). You can contact us by post or email to object. A technical procedure that you use, e.g. clear technical information that your web browser sends us ("do-not-track" message), is also considered an objection in this sense.

C.5 Right to withdraw consent given

You have the right to withdraw your consent to the collection and use of personal data at any time with effect for the future. To do so, you can contact us by post or email (see A. above). This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

C.6 Right to restriction of processing

You have the right to demand that we restrict processing if one of the requirements of Art. 18 GDPR is met. You can contact us by post or email (see A.1. above).

C.7 Right to information

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right vis-à-vis us to be informed about these recipients.

C.8 Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit this data to another controller without hindrance from us if the requirements of Art. 20 GDPR are met. You can contact us by post or email for this purpose (see A.1. above).

C.9 Automated decision-making, including profiling

We do not use automated decision-making.

C.10. Voluntary nature of the provision of data

For our various offers, we have described in more detail which data is voluntary and which data is mandatory.

C.11. Right to lodge a complaint with a supervisory authority

Without prejudice to any other rights, you have the right to lodge a complaint with a data protection supervisory authority at any time, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes data protection law.

Status of this data protection notice: 30 October 2022

Security notice:

We endeavour to take all technical and organisational measures to store your personal data in such a way that it is not accessible to third parties. We cannot guarantee complete data security when communicating via the Internet, so we recommend that you send confidential information by post.