1) ) Information on the collection of personal data and controller’s contact details
1.1 We are delighted to see you visit our website and thank you for your interest. Below we provide information on how your personal data are handled when you use our website. Personal data include all data with which you can be identified.
1.2 The controller of the data processing on this website as defined by the General Data Protection Regulation (GDPR) is Dr. Becher GmbH, Vor den Specken 3, 30926 Seelze, Germany, Tel.: +49 5137 9901 0, Fax: +49 5137 9901 66, Email: email@example.com. The controller responsible for processing personal data means the natural or legal person who, solely or jointly with others, determines the purposes for which and means by which the personal data are processed.
1.3 The controller has appointed an external Data Protection Officer for this website (ER Secure GmbH, In der Knackenau 4, 82031 Grünwald). He can be reached at the following email address:"firstname.lastname@example.org"
1.4 For security reasons and to protect the transmission of personal data and other confidential content, (e.g. orders or enquiries addressed to the controller) this site uses SSL or TLS encryption. You can recognise an encrypted connection by the sequence „https://“ and the lock icon in the address bar in your browser.
2) Collection of data when visiting our website
If you merely visit our website for information, i.e. if you do not register or otherwise communicate information to us, we will only collect the data which your browser sends to our server (so-called “server log files“). If you call up our website, we will collect the following data required for technical reasons to enable you to view the site:
- the site visited
- date and time of access
- volume of data sent in bytes
- source / reference from which you arrived on our site
- browser used
- operating system used
- IP address used (if applicable, in anonymised form)
• IP address used (if applicable, in anonymised form) Processing is based on Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our site. Your details will not be passed to third parties or used for any other purpose. However, we reserve the right to verify the server log files retrospectively if we have concrete indications of illegal use.
If cookies are installed, they will collect and process certain user information such as browser data, location details and IP address values on an individual basis. Persistent cookies are automatically deleted after a specified period which may vary depending on the cookie.If personal data are also processed by individual cookies implemented by us, such processing will be performed in accordance with Art. 6 (1) (f) GDPR to protect our legitimate interest in maintaining optimum functionality for our website as well as to ensure that visits to our website are structured in a customer-friendly, effective manner.
We may also collaborate with advertising partners who support us in making our internet offering more interesting for you. In this case, cookies from our partners will also be stored on your hard disk for this purpose (cookies from third-party suppliers). If we work with such advertising partners as specified above, we will inform you individually and separately of the deployment of such cookies and the extent of any information collected in the following paragraphs.
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Please take note that you may not be able to use all the functions of our website if you refuse to accept cookies..
Personal data will be collected as part of the process of contacting us (e.g. by means of a contact form or email). The data collected will be evident from the particular form. These data will be stored exclusively for the purpose of answering your concern or for making contact with you and the technical administration associated with doing so. The legal basis for processing data is given by our legitimate interest in answering your concern in accordance with Art. 6 (1)(f) GDPR. If the purpose of making contact is to conclude a contract, Art 6 (1)(b) constitutes a further legal basis for the processing. After your enquiry has been conclusively dealt with, your data will be deleted; this is the case if it can be assumed from the circumstances that the matter in hand has been conclusively clarified and no statutory retention periods conflict with such deletion.
5) Rights of data subject
5.1 Current data protection legislation gives you as the data subject extensive rights vis-à-vis the controller with regard to the processing of your personal data (rights of information and intervention), and we will inform you of these rights below.:
- Right of access under Art. 15 GDPR: In particular, you may demand information about the your personal data processed by us, the purposes for which they are processed, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or are being disclosed, the planned length of storage or the criteria for defining the length of storage, the existence of a right to rectification, erasure, restriction of processing, objection to the processing, complaint to a supervisory authority, about the origin of your data if they have not been collected by us from you, the existence of an automated decision-making process including profiling and any meaningful information about the logic involved as well as the implications concerning you and the intended effects of such processing and your right to be informed of what guarantees apply under Art. 46 GDPR if your data are passed to third countries;
- Right to rectification under Art. 16 GDPR: You have a right to the immediate rectification of incorrect data relating to yourself and/or the completion of incomplete data on file with us.
- Right to erasure under Art. 17 GDPR: You have the right to demand the deletion of your personal data if the conditions set out in Art. 17 (1) GDPR are met. However, this right does not apply if the processing is necessary for exercising the right of free expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
- Right to restriction of processing under Art. 18 GDPR: You have the right to demand that processing be restricted as long as the accuracy of your data which you dispute is under review, if the processing is unlawful but you refuse the deletion of your data and instead request that processing be restricted, if you need your data to assert, exercise or defend legal claims, if we have no further need of such data once they have fulfilled their purpose or if you have filed an objection to the processing based on your particular situation as long as it has not yet been established whether our legitimate reasons outweigh your concerns;
- Right of notification under Art. 19 GDPR: If you have asserted your right to rectification, erasure or restriction of processing against the controller, the latter will be obliged to notify all recipients to whom the personal data has been disclosed, of the rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate investment of time and effort. You have the right to be informed of these recipients.
- Right to data portability under Art. 20 GDPR: You have the right to receive your personal data which you have provided to us in a structured, conventional and machine-readable format or to request transmission to another controller if this is technically feasible;
- R• Right to revoke consent granted under Art. 7 (3) GDPR: You have the right to withdraw your consent once granted to the processing of your data at any time with future effect. In the event of a withdrawal of consent, we will immediately delete the data concerned unless there is another legal basis for further processing not requiring consent. The withdrawal of consent will not affect the lawfulness of processing based on consent prior to its revocation;
- • Right of complaint under Art. 77 GDPR: If you are of the view that the processing of your personal data breaches the GDPR, you have the right to complain to a regulatory authority, particularly in the member state of your place of residence, your place of work or the place where the suspected breach has been committed – notwithstanding any other administrative or judicial remedy.
5.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA AFTER WEIGHING UP THE RELEVANT INTERESTS DUE TO THE FACT THAT OUR LEGITIMATE INTEREST OUTWEIGH YOURS, YOU WILL HAVE THE RIGHT AT ALL TIMES TO LODGE AN OBJECTION TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU MAKE USE OF YOUR RIGHT OF OBJECTION, WE WILL TERMINATE THE PROCESSING OF THE RELEVANT DATA. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING THE DATA IF WE CAN DEMONSTRATE COMPELLING, SENSITIVE REASONS FOR THE PROCESSING WHICH OUTWEIGH YOUR INTERESTS, BASIC RIGHTS AND FREEDOMS OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT AT ALL TIMES TO OBJECT TO THE PROCESSING OF DATA RELATING TO YOURSELF FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR RIGHT OF OBJECTION AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT OF OBJECTION, WE WILL TERMINATE THE PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
6)Duration of personal data retention
The length of time for which your personal data are stored depends on the relevant statutory retention period (e.g. retention periods under commercial law and tax legislation). After this deadline expires, the corresponding data will be deleted as a matter of course provided they are no longer required to fulfil or initiate a contract and/or we have no legitimate interest in continuing to store them.