I. Name and address of the person responsible

The person responsible within the meaning of the basic data protection regulation and other national data protection laws of the member states as well as other data protection regulations is the:

General German Bicycle Club,
Baden-Württemberg State Association
Reinsburgstr. 97
70197 Stuttgart

Telephone: 0711 /5047 9410
Email: info [at] adfc-bw.de

Website: https://bw.adfc.de

II. Name and address of the data protection officer

Information about the responsible party (referred to as the “controller” in the GDPR)

III. General information about data processing

1. Extent of processing of personal data

In principle, we process personal data of our users only insofar as this is necessary to provide a functioning website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent can not be obtained for reasons of fact and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as legal basis.

In the processing of personal data necessary for the performance of a contract of which the data subject is a party, Art. 6 para. 1 lit. b DSGVO as legal basis. This also applies to processing operations required to carry out pre-contractual actions.

If processing of personal data is required to fulfill a legal obligation that our company is subject to, Art. 6 para. 1 lit. c DSGVO as legal basis.

If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f DSGVO as legal basis for processing.

3. Data erasure and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected here:

(a) Information about the browser type and version used
(b) The user's operating system
(c) The user's Internet service provider
(d) The user's IP address
(e) Date and time of access
(f) Websites from which the user's system accesses our website
(g) Websites accessed by the user's system via our website

The data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.

2. Hosting

The hosting services we use are for the purpose of providing the following services: infrastructure and platform services, computing capacity, storage and database services, security and technical maintenance services we use to operate this online service.

In doing so, we or our hosting provider process inventory data, contact details, content data, contract data, usage data, meta and communication data of customers, interested parties, and visitors to this online offering based on our legitimate interests in an efficient and secure provision of this online service pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).

3. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO.

4. Purpose of data processing

The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session.

Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

For these purposes our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f DSGVO.

5. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed.

In the case of storing the data in log files, this is the case after no more than seven days. An additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

6. Opposition and removal possibility

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.

V. Use of cookies

a) Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser be identified even after a page break.

The following data is stored and transmitted in the cookies:

(a) Language Settings

In addition, we use cookies on our website that allow an analysis of users' browsing behavior.

In this way, the following data can be transmitted:

(1) Entered search terms
(2) Frequency of page views
(3) Use of Website Features
(4) Visitor ID
(5) Date, time and duration of the visit
(6) Number of visits and page views
(7) Origin (country and city)
(8) Operating system
(9) Device (PC, tablet PC or smartphone)
(10) Web Browser and all add-ons used
(11) Computer resolution
(12) Traffic sources (Facebook, search engine or referring website)
(13) Which files were downloaded?
(14) Which videos watched?
(15) Were advertising banners clicked on?
(16) Where did the visitor go? Did he click on other pages of the portal or did he leave them completely?
(17) How long did the visitor stay?

When accessing our website, the user is informed about the use of cookies for analysis purposes and his consent to the processing of the personal data used in this context is obtained. In this context, there is also a reference to this privacy policy.

b) Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f DSGVO.

The legal basis for the processing of personal data using cookies for analysis purposes is in the presence of a respective consent of the user Art. 6 para. 1 lit. a GDPR.

c) Purpose of the data processing

The purpose of using technically necessary cookies is to facilitate the use of websites for users. Some features of our website can not be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break.

We require cookies for the following applications:

(a) Adopting language settings

The user data collected through technically necessary cookies will not be used to create user profiles.

The use of the analysis cookies is for the purpose of improving the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and so we can constantly optimize our offer.

In these purposes, our legitimate interest lies in the processing of personal data according to Art. 6 para. 1 lit. f DSGVO.

d) Duration of storage, objection and disposal options

Cookies are stored on the computer of the user and transmitted by this on our side. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.

VI. Disclosure of personal data to third parties

1. Extent of processing of personal data

On our website we offer users the opportunity to order brochures by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data will be passed on for processing purposes to:

(a) Deutsche Donau Tourismus eV, Neue Straße 45, 89073 Ulm

(b) Elbe Cycle Path North Coordination Office, c/o Herzogtum Lauenburg, Marketing und Service GmbH, Elbstraße 59, 21481 Lauenburg/Elbe

(c) Elberadweg Mitte Coordination Office, c/o Magdeburger Tourismusverband Elbe-Börde-Heide eV, Domplatz 1b, 39104 Magdeburg

(d) Elbe Cycle Path South Coordination Office, c/o Tourismusverband Sächsische Schweiz eV, Bahnhofstraße 21, 01796 Pirna

(e) Interest Group EmsRadweg, Schloßstr. 11, 33161 Hövelhof

(f) Lahntal Tourism Association e. V., Brückenstraße 2, 35576 Wetzlar

(g) Mosellandtouristik GmbH, Kordelweg 1, 54470 Bernkastel-Kues

(h) Neckartal-Radweg office, Reinsburgstr. 97, 70197 Stuttgart

(i) Romantische Rhein Tourismus GmbH, An der Königsbach 8, 56075 Koblenz

(j) Ruhr Tourismus GmbH, Centroallee 261, 46047 Oberhausen

(k) Weserbergland Tourismus eV, Deisterallee 1, 31785 Hameln

These data are:

- Title
- Name
- First Name
- Street and house number
- Postal code and city
- Country

2. SSL encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content for brochure orders that you send to us. You can recognize an encrypted connection by the browser address line changing from “http://” to “https://” and by the lock symbol in your browser line.

If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

3. Legal basis for the processing of personal data

The data collected is used to fulfill a contract to which the user is a party or to carry out pre-contractual measures. The additional legal basis for the processing of the data is Art. 6 Para. 1 lit. b GDPR.

4. Purpose of data processing

The collection of the user's personal data serves to deliver the desired brochure material.

5. Duration of storage

The data you enter in the input form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

6. Opposition and removal possibility

The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time.

For this purpose, the user declares his revocation in writing by e-mail in a clear manner.

All personal data stored in the course of ordering the brochure will be deleted in this case.

VII. Website analysis services

1. Description and scope of data processing

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

2. Legal basis for the processing of personal data

Google Analytics cookies are stored on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

3. Purpose of data processing

The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de .

4. Opposition and removal possibility

You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de .

5. Objecting to Data Collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to this website: disable Google Analytics.

For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at:

https://support.google.com/analytics/answer/6004245?hl=de .

VIII. Google Adwords

1. Data protection provisions on the application and use of Google AdWords

The person responsible for processing has integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place advertisements in Google's search engine results as well as in the Google advertising network. Google AdWords enables an advertiser to define certain keywords in advance by means of which an advertisement is only displayed in Google's search engine results if the user calls up a keyword-relevant search result with the search engine. In the Google advertising network, the ads are distributed to topic-related websites using an automatic algorithm and taking into account the previously defined keywords.
The operator of the Google AdWords services is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertising on our website.

If a person concerned reaches our website via a Google ad, a so-called conversion cookie is stored on the information technology system of the person concerned by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the person concerned. If the cookie has not yet expired, the conversion cookie is used to determine whether certain sub-pages, such as the shopping cart from an online shop system, were accessed on our website. The conversion cookie enables both us and Google to understand whether a person who came to our website via an AdWords ad generated revenue, i.e. completed or canceled a purchase. The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. In turn, we use these visit statistics to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future . Neither our company nor other Google AdWords advertisers receive information from Google that could be used to identify the person concerned.

The conversion cookie is used to store personal information, such as the websites visited by the person concerned. Each time you visit our website, personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass this personal data collected through the technical process on to third parties.

The person concerned can prevent the setting of cookies by our website, as already shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the opportunity to object to Google's interest-based advertising. To do this, the person concerned must access the link www.google.com/settings/ads from each of the Internet browsers they use and make the desired settings there.

Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/ be accessed.

2. Privacy Policy on Use and Use of Google Remarketing

The controller has integrated Google Remarketing services on this website. Google Remarketing is a feature of Google AdWords that allows a business to show advertisements to such internet users that have previously been on the company's website. The integration of Google Remarketing therefore allows a company to create user-friendly advertising and thus allow Internet users to display interest-based ads.

The operator of the Google Remarketing services is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The purpose of Google Remarketing is to show interest-based advertising. Google Remarketing allows us to display ads through the Google Network or view them on other websites tailored to the individual needs and interests of Internet users.

Google Remarketing places a cookie on the information technology system of the data subject. What cookies are, has already been explained above. By setting the cookie, Google will be able to recognize the visitor to our website, if he subsequently calls websites that are also members of the Google ad network. With each visit to a website on which Google Remarketing's service has been integrated, the person's Internet browser automatically identifies with Google. As part of this technical process, Google receives knowledge about personal data, such as the IP address or the surfing behavior of the user, which Google uses among other things to display interest-relevant advertising.

Personal information, such as the Internet pages visited by the person concerned, is stored by means of the cookie. Accordingly, each time you visit our website, personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties. The person concerned can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the opportunity to object to Google's interest-based advertising. To do this, the person concerned must access the link www.google.com/settings/ads from each of the Internet browsers they use and make the desired settings there.

Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/ be accessed.

IX.

XII. Social media integrations

1.Privacy Policy on Use and Use of Facebook
The person responsible for processing has integrated components of the company Facebook on this website. Facebook is a social network. A social network is a social meeting place operated on the Internet, an online community that usually enables users to communicate with one another and to interact in virtual space. A social network can serve as a platform for exchanging opinions and experiences, or it allows the Internet community to provide personal or company-related information. Among other things, Facebook enables users of the social network to create private profiles, upload photos and network via friend requests.
Facebook's operating company is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. Persons responsible for the processing of personal data, if an affected person lives outside the US or Canada, are Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.
Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective Facebook Component causes a representation of the corresponding Facebook component to be downloaded from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE be retrieved. As part of this technical process, Facebook is informed which specific subpage of our website is visited by the person concerned. If the person concerned is logged on to Facebook at the same time, Facebook recognizes which specific subpage of our website the person concerned is visiting each time the person concerned calls up our website and for the entire duration of their stay on our website. This information is collected by the Facebook component and assigned to the respective Facebook account of the person concerned by Facebook. If the person concerned clicks on one of the Facebook buttons integrated on our website, for example the “Like” button, or if the person concerned makes a comment, Facebook assigns this information to the personal Facebook user account of the person concerned and stores this personal data .
Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged in to Facebook at the same time as accessing our website; this happens regardless of whether the person clicks on the Facebook component or not. If such a transfer of this information to Facebook is not wanted by the data subject, it can prevent the transfer by logging out of their Facebook account before calling our website.
The data policy published by Facebook, which can be found under https://de-de.facebook.com/about/privacy/ is available, provides information about the collection, processing and use of personal data by Facebook. It also explains which setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

2. Data protection provisions on the application and use of Instagram
The controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform, allowing users to share photos and videos, and also disseminate such data to other social networks.
The operating company of the Instagram services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which an Instagram component (Insta button) has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective Instagram component causes a representation of the corresponding component to be downloaded from Instagram. As part of this technical process, Instagram is informed which specific subpage of our website is visited by the person concerned. If the person concerned is logged in to Instagram at the same time, Instagram recognizes which specific subpage the person concerned is visiting each time the person concerned calls up our website and for the entire duration of their stay on our website. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the person concerned. If the person concerned clicks on one of the Instagram buttons integrated on our website, the data and information thus transmitted are assigned to the personal Instagram user account of the person concerned and stored and processed by Instagram.
Through the Instagram component, Instagram always receives information that the person concerned has visited our website if the person concerned is simultaneously logged into Instagram at the time of accessing our website; this happens regardless of whether the person clicks on the Instagram component or not. If the affected person does not want to transmit this information to Instagram, the latter can prevent the transmission from logging out of their Instagram account before calling our website.
Further information and the applicable data protection provisions of Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/ be accessed.

3. Data protection provisions on the application and use of YouTube
The person responsible for processing has integrated components from YouTube on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why both complete film and television programs as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal. The service on de.youtube.com is provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Authorized to accept service for Google Ireland Limited within the meaning of Section 5 (1) NetzDG is: Google Germany GmbH, Legal Department, ABC-Strasse 19, 20354 Hamburg, Germany. Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective YouTube component caused to download a representation of the relevant YouTube component from YouTube. More information about YouTube can be found at https://www.youtube.com/yt/about/de/ be retrieved. As part of this technical process, YouTube and Google are informed which specific subpage of our website is visited by the person concerned. If the person concerned is logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website the person concerned is visiting by calling up a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google always receive information via the YouTube component that the person concerned has visited our website if the person concerned is logged in to YouTube at the same time as accessing our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before accessing our website. The data protection regulations published by YouTube, which can be found at https://www.google.de/intl/de/policies/privacy/ are available, provide information about the collection, processing and use of personal data by YouTube and Google.

X. Rights of the data subject

If personal data is processed by you, you are the person concerned within the meaning of the DSGVO and you have the following rights towards the responsible person:

1. right

You may ask the person in charge to confirm if personal data concerning you is processed by us.

If such processing is available, you can request information from the person responsible about the following information:

(1) the purposes for which the personal information is processed;

(2) the categories of personal data that are processed;

(3) the recipients or categories of recipients to whom the personal data relating to you have been or will be disclosed;

(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for the determination of the retention period;

(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

(6) the existence of a right of appeal to a supervisory authority;

(7) all available information on the source of the data if the personal data is not collected from the data subject;

(8) the existence of an automated decision-making process including profiling according to Art. 22 para. 1 and 4 DSGVO and - at least in these cases - meaningful information about the logic involved as well as the implications and intended effects of such processing on the data subject.

You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 DSGVO to be informed in connection with the transmission.

2. Right to rectification

You have a right to rectification and / or completion to the controller, provided the personal data you process is incorrect or incomplete. The responsible person must make the correction without delay.

3. Right to restriction of processing

You may request the restriction of the processing of your personal data under the following conditions:

(1) if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;

(2) the processing is unlawful and you refuse the deletion of the personal data and instead demand the restriction of the use of the personal data;

(3) the controller no longer needs personal information for the purposes of processing, but you need it to assert, exercise or defend legal claims; or

(4) if you have filed an objection to the processing in accordance with Art. 21 para. 1 DSGVO and it is not yet certain that the responsible reasons of the person responsible prevail over your reasons.

If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.

If the restriction on processing has been restricted in accordance with the above conditions, the person responsible will inform you before the restriction is lifted.

4. Right to delete

a) Obligation to delete

You may require the controller to delete your personal information without delay, and the controller is required to delete that information immediately if one of the following is true:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent to the processing in accordance with. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. DSGVO and there is no other legal basis for processing.

(3) You place acc. Art. 21 para. 1 DSGVO objection to the processing and there are no prior justifiable reasons for the processing, or you lay gem. Art. 21 para. 2 DSGVO objection to the processing.

(4) Your personal data has been processed unlawfully.

(5) The deletion of personal data concerning you is required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.

(6) The personal data relating to you were collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO.

b) information to third parties

If the person in charge has made the personal data concerning you public and is acc. Art. 17 para. 1 DSGVO, it shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected by the technology and the implementation costs Persons requesting deletion of all links to such personal data or of copies or replications of such personal data.

c) Exceptions

The right to erasure does not exist if the processing is necessary

(1) on the exercise of the right to freedom of expression and information;

(2) to fulfill a legal obligation which requires processing under Union or Member State law to which the controller is subject or for the performance of a task of public interest or in the exercise of official authority conferring on the controller has been;

(3) to assert, exercise or defend legal claims.

5. Right to information

If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.

You have a right to the person responsible to be informed about these recipients.

6. Right to data portability

You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that

(1) the processing on a consent acc. Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract acc. Art. 6 para. 1 lit. b DSGVO is based and

(2) processing is done using automated methods.

In exercising this right, you also have the right to obtain that your personal data relating to you are transmitted directly from one person to another, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.

7. Right of objection

You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f DSGVO takes an objection; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.

If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the option, in the context of the use of information society services - regardless of the 2002 / 58 / EC directive - of exercising your right of opposition through automated procedures using technical specifications.

8. Right to revoke the data protection consent declaration

You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

9. Automated decision on an individual basis including profiling

You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision

(1) is required for the conclusion or performance of a contract between you and the controller,

(2) is authorized by Union or Member State legislation to which the controller is subject and where such legislation contains reasonable safeguards to safeguard your rights and freedoms and your legitimate interests, or

(3) with your express consent.

However, these decisions may not be based on special categories of personal data under Art. 9 para. 1 DSGVO, unless Art. 9 para. 2 lit. a or g DSGVO applies and reasonable measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With respect to the cases referred to in (1) and (3), the controller shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and heard on challenge of the decision.

10. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the DSGVO violates.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.