Privacy Policy

The Data Protection Officer of the controller, according to Article 37 GDPR:
Herr Rechtsanwalt Frank Eckerkunst
c/o ITWerk Giessen GmbH*
Siemensstrasse 7
35394 Giessen
Germany
Tel.: +49 641 96993-0
E-Mail: eckerkunst@itwerk-giessen.de
Website: www.itwerk-giessen.de

* Insurance information:
Information on professional liability insurance:
There is a financial loss liability insurance insured at:

Hiscox Insurance Company Ltd.
Zweigniederlassung für die Bundesrepublik Deutschland
Arnulfstraße 31
80636 München
Räumlicher Geltungsbereich der Versicherung: Europa
Spatial scope of insurance: Europe
Sum insured for Property damage liability: 1 Mio €

In our privacy policy, we use various terms that are based on the law and are explained below to make our privacy policy simple and easy to understand. For the purposes of this Privacy Policy, the term:

‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

‘restriction of processing’ means the marking of stored personal data with the aim of limiting their processing in the future;

‘profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;

‘pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;

‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

‘recipient’ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;

‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her; of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

Description and scope of data processing, legal basis, purpose, duration of storage, possibility of revocation and disposal
Our website uses cookies. Cookies are text files that are stored in the Internet browser or the Internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.

a) We use technically cookies. They are necessary to make our website more user-friendly. Some elements of our website require that the calling browser be identified even after a page break. The following data are usually stored and transmitted in the cookies:
– language settings
– Log-In-Information
– session-ID

b) If we also use other cookies on our website (technically not necessary), which allow an analysis of the surfing behavior of the users, the following data can usually be transmitted in this way:
– Entered search terms
– Frequency of page views
– Use of website features
– IP Address
– Browser data

When accessing our website, the user is informed about the use of cookies for analysis purposes and his consent to the processing of the personal data used in this context is obtained. In this context, there is also a reference to this privacy policy. The legal basis for the processing of personal data using technically necessary cookies is Art.6 Abs.1 lit.f GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is in the presence of a corresponding consent of the user Art.6 Abs.1 lit.a GDPR.
The purpose of using technically necessary cookies is to facilitate the use of websites for users. Some features of our website can`t be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break. We require cookies for the following applications:
– Transfer of language settings
– Remember keywords
– Remember general settings for cookies
The user data collected through technically necessary cookies will not be used to create user profiles. The use of the analysis cookies is for the purpose of improving the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and so we can constantly optimize our offer. For these purposes, our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR. Cookies are stored on the computer of the user and transmitted by this on our side. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full. The transmission of Flash cookies can´t be prevented by the settings of the browser, but by changing the settings of the Flash Player.

If we use plug-ins of the social networks Facebook, Google+, Instagram, LinkedIn, Pinterest, Twitter, Xing, Youtube on our website, you will recognize the respective plug-ins by the respective company logo. With the inclusion of texts, pictures and videos buttons you can use buttons to show their favor on the respective page.
By accessing our website, a direct connection is established between your server and the social media server via the respective components of the social media service. For example, Facebook receives the information that you have visited our website with your IP address. If you click on the respective “Like Button” while you are logged into the desired social media account, you can link the offers and contents of our website to your network profile. In addition, if you are logged in to a particular social media page while the link is activated, the social networking provider may be able to identify your username and real name from the data, content and features you have transferred Assign information to your personal social network user account.

The social networking servers are located in both the United States and other European Union countries. You should be aware that the respective companies are subject to their own data protection and in general personal data may not be protected to the full extent as is the case in the Member States of the European Union.

To use Google+, you need a public Google Account that is visible worldwide. In addition, as a rule, the following data can be transmitted to the provider of the social network:
• IP Address
• the date and time of using our website
• the address of the website containing the attached link
• information about the operating system and the browser

In addition, you should know that we have no influence on the range of data processing by the providers of social networks. For example, the Xing Share Button does not store any personal information. Xing does not evaluate your IP address or user behavior. However, if you are logged in to Xing at the time of your visit, you may be able to use your account information to relate to the visit to our site.

Further information about the several social media services can be found here:

Für nähere Informationen über die Datenschutzrichtlinien besuchen Sie bitte die jeweiligen Seiten der oben genannten sozialen Netzwerke.

Weitere Informationen zu den einzelnen Social Media Diensten finden Sie hier:

Facebook
facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
https://de-de.facebook.com/about/privacy/
https://developers.facebook.com/docs/plugins

Google+
Alphabet Inc. / Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
https://developers.google.com/+/web/buttons-policy

Instagram
Instagram LLC 1601 Willow Rd Menlo Park CA 94025 USA
https://help.instagram.com/155833707900388

LinkedIn
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland
https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Pinterest
Pinterest, Inc., 808 Brannan St, San Francisco, CA 94103, USA
https://pinterest.com/about/privacy/

Twitter
Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA
https://twitter.com/privacy

XING
XING SE, Dammtorstraße 30, 20354 Hamburg
https://privacy.xing.com/de/datenschutzerklaerung

Youtube
YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
https://policies.google.com/privacy?hl=de&gl=de

You shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, in that case, access to the personal data and the following information:
(1) the purposes of the processing;
(2) the categories of personal data concerned;
(3) the recipients or categories of recipient to whom the personal data have been or will be disclosed;
(4) the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(5) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
(6) the right to lodge a complaint with a supervisory authority;
(7) where the personal data are not collected from the data subject, any available information as to their source;
(8) the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;

Where personal data are transferred to a third country or to an international organisation, You shall have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.

You shall have the right to obtain from the controller restriction of processing where one of the following applies:
1. The accuracy of the personal data is contested by them, for a period enabling the controller to verify the accuracy of the personal data;
2. the processing is unlawful and you are opposes the erasure of the personal data and requests the restriction of their use instead;
3. the controller no longer needs the personal data for the purposes of the processing, but you are required for the establishment, exercise or defence of legal claims;
4. you has objected to processing pursuant to Art. 21 GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

a) You shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
(1) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
(2) They withdraws consent on which the processing is based according to point (a) of Ar. 6 (1), or point (a) of Art. 9 (2) GDPR, and where there is no other legal ground for the processing;
(3) you object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) GDPR;
(4) the personal data have been unlawfully processed
(5) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
(6) the personal data have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.
Information an Dritte
Where the controller has made the personal data public and is obliged to erase the personal data according to Art. 17 (1) GDPR, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

Ausnahmen
The right to erasure shall not apply to the extent that processing is necessary:
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Art. 9 (2) GDPR as well as Art. 9 (3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(5) for the establishment, exercise or defence of legal claims.