Privacy Statement

I. Controller’s name and address 

The Controller, as defined by the General Data Protection Regulation (GDPR), other national data protection laws of Member States and by other provisions of data protection legislation, is:

doctorsgate GmbH
Ostertorwall 12
31785 Hameln

represented by its Managing Director Christopher Musmann

Email: info@doctorsgate.com
Telefon: +49 (0) 5151 – 60969 – 1379
Fax: +49 (0) 5151 – 60969 – 1358

II. Name and Address of the Data Protection Officer 

The Controller’s data protection officer can be reached at privacy@doctorsgate.com.

III. General Information on Data Processing 

1. Scope of Personal Data Processing

We principally collect and use personal data of our users only insofar as is necessary for the provision of a functioning website as well as our content and services. Personal data of our users shall only be collected and used regularly with the user’s consent. An exception shall apply in such cases, in which actual reasons make it impossible to obtain prior consent and the data processing is permitted by legal regulations.

2. Legal Basis for Personal Data Processing

Art. 6 para. 1 (a) of the EU General Data Protection Regulation (GDPR) shall serve as legal basis whenever we obtain consent from the data subject to the methods used for personal data processing.

Art. 6 para. 1 (b) GDPR shall form the legal basis when the processing of personal data is necessary for the fulfillment of a contract to which the data subject is a party. This also applies to data processing operations necessary in order to take steps prior to entering into a contract.

Art. 6 para. 1 (c) GDPR shall form a legal basis whenever the processing of personal data is necessary to fulfill a legal obligation to which our company is subject.

Art. 6 para. 1 (f) GDPR shall form a legal basis for processing whenever the processing is necessary to safeguard a legitimate interest of our company or of a third party and the interests, fundamental rights and fundamental freedoms of the data subject do not override the formerly mentioned interest.

3.Data Erasure and Duration of Storage

Personal data of the affected person are erased or blocked as soon as the purpose of the data storage is obviated. Data can moreover be stored if this has been envisaged by European or national legislators in the EU regulations, laws or regulations governing the controller. Blocking or erasure of these data shall also take place when a storage period prescribed by the mentioned standards expires unless the necessity for further data storage exists in order to enter into or to ensure the fulfillment of a contract.

IV. Provision of the website and creation of log files 

1. Description and Scope of Data Processing, Disclosure to Third Parties

Every time our website is opened, our system gathers automated data and information from the computer system of the requesting device.

The following data shall hereby be collected:

• IP address
• Date and time of the query
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request
• Access status/HTTP status code
• Transferred amount of data
• The website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software

The data are likewise stored in the log files of our system.

The https-encrypted data will be passed on to the hosting operator Internex GmbH Lagerstrasse 15, 3950 Gmünd, Austria.

2. Legal Basis for Data Processing

Art. 6 para. 1 (f) GDPR shall form the legal basis for the temporary storage of data and log files.

3. Purpose of Data Processing

It is necessary that the IP address is temporarily stored by the system to enable the website to be delivered to User’s PC. For this purpose, the User’s IP address shall remain stored for the duration of the session.

Data are stored in log files to secure the website’s functionality. Moreover, we utilize the data to optimize the website and safeguard the security of our IT systems. No analysis of the data for marketing purposes takes place in this context.

For these purposes, our legitimate interest in the data processing is defined pursuant to Art. 6 para. 1 (f) GDPR.

4. Duration of Storage

The data are deleted as soon as they are no longer required to achieve the intended purpose of their collection. When the data are collected for the provision of the website, this is the case when the respective session has ended.

If the data are stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or altered beyond recognition so that any assignment to the accessing client is no longer possible.

5. Option for Appeal and Disposal

Data collection for the provision of the website and the storage of data in log files are absolutely imperative for the operation of the website. Consequently, there is no appeal option on the part of User.

V. Use of Cookies 

1. Description and Scope of Data Processing

Our website only uses analytical cookies. Personal data is not collected.

VI. Contact Form and Email Contact 

1. Description and Scope of Data Processing

On our website, there are contact forms which can be used. If a user makes use of this service, the data entered into the input masks will be transmitted to us and stored. These data are:

• Name,
• E-Mail address,
• Subject
• Company
• Phone number,
• Message

Your consent will be obtained for the processing of the data as part of the sending process and reference will be made to this data protection declaration.

Alternatively, you can contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored. Press contacts can also be established via e-mail communication.

The data will not be passed on to third parties in this context. The data will be used exclusively for the processing of the conversation.

2. Legal Basis for Data Processing

Art. 6 para. 1 (a) of the EU General Data Protection Regulation (GDPR) shall serve as legal basis whenever we obtain consent from the data subject to the methods used for personal data processing.

Art. 6 para. 1 (f) GDPR shall form the legal basis for the processing of data transmitted in the course of sending emails. If the intent of the email contact is to enter into a contract, Art. 6 para. 1 (b) GDPR shall form the additional legal basis for processing.

3. Purpose of Data Processing

The processing of the personal data from the input mask serves us exclusively for the processing of the establishment of contact. If you contact us by e-mail, this is also the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of Storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be concluded from the circumstances that the relevant facts have been conclusively clarified.

The additional personal data collected during the sending process will be processed at the latest after a period of seven days.

5. Option for Appeal and Disposal

The user has the option at any time to revoke his consent to the processing of his personal data. If User contacts us by e-mail, he can object to the storage his personal data at any time. In such a case, the conversation cannot be continued.

We shall then delete from our mail software all of the emails and other files sent by you. Data stored on servers shall be deleted at regular intervals (every 3 months).

All personal data stored in the course of establishing contact shall be deleted in such a case.

VII. Web Analysis with Hotjar 

1. Description and Scope of Data Processing

Among others, we use Hotjar to better understand the wishes of our users and to optimize the services offered on this website. Hotjar utilizes cookies and other technologies to collect information about the behavior of our users and their devices.

The following personal data is processed:

• The IP address of the device (collected and stored only in anonymous form)
• Screen size
• Device type (Unique Device Identifiers)
• Information about the browser used, location (country only),
• The preferred language to view our website).

Hotjar stores this information in a pseudonymous user profile.  The information will not be used by Hotjar or by us to identify individual users or merged with other information about individual users. Further information can be found in Hotjars Privacy Policy.

2. Legal Basis for Data Processing

Art. 6 para. 1 (f) GDPR shall form the legal basis for the processing of personal data using cookies. We employ these tracking measures to ensure a needs-based design and continuous optimization of our website. Another reason we employ the tracking measures is to gather statistics on the use of our website and for the purposes of analyzing how to optimize our service offering for you. These interests are deemed legitimate as defined in the aforementioned regulation.

3. Purpose of Data Processing

The purpose of the use is the continuous optimization and needs-based design of the website.

4. Duration of Storage, Options for Appeal and Disposal

You may refuse the storage of a user profile and information about your visit to our website by Hotjar and the setting of Hotjar tracking cookies, by clicking on this opt-out link.

VIII. Web Analysis by Google Analytics

1. Description and Scope of Data Processing

This website uses Google Analytics, a web analytics service provided by Google, Inc. (https://www.google.de/intl/de/about) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter: “Google”). In this regard, pseudonymized user profiles are generated and cookies used. The cookie-generated information about your use of this website like

• Browser type and version
• Operating system used
• Referrer URL (the previously visited web page)
• Hostname of the accessing computer (IP address)
• Time of the server query

are transferred and stored on a server owned by Google in the USA.

This information is used to evaluate the use of the website with the aim of compiling reports on website activities and of rendering further services associated with the website’s use and website use-related services for the purposes of market research and needs-based design of this website. Even when this information may be forwarded to third parties as far as legally prescribed or third parties are contracted to process these data, under no circumstances shall your IP address be combined with other data from Google. The IP addresses shall be anonymized to make any assignment impossible (IP masking).

2. Legal Basis for Data Processing

Art. 6 para. 1 (f) GDPR shall form the legal basis for the processing of personal data using cookies. We employ these tracking measures to ensure a needs-based design and continuous optimization of our website. Another reason we employ the tracking measures is to gather statistics on the use of our website and for the purposes of analyzing how to optimize our service offering for you. These interests are deemed legitimate as defined in the aforementioned regulation.

3. Purpose of Data Processing

The purpose of the use is the continuous optimization and needs-based design of the website.

4. Duration of Storage, Option for Appeal and Disposal

The personal data is stored for 24 months.

You can prevent the storage of cookies by making the corresponding setting in your browser software; however, we must point out that in such a case you may not be able to use the full functionality offered by this website.

You can moreover prevent the logging of the data generated via the cookie and relating to your usage of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser add-on provided via the following link:

https://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser add-on, particularly with browsers on mobile terminal devices, you can moreover prevent data gathering by Google Analytics by clicking on this link. An opt-out cookie is set that prevents the future recording of your data when you visit this website’s website. The opt-out cookie only applies in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must re-set the opt-out cookie.

More information on data protection in connection with Google Analytics can be found in Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).

IX. Google Adwords Conversion Tracking

1. Description and Scope of Data Processing

In order to statistically record the use of our website and to analyze our website for you for the purpose of optimization, we also use Google Conversion Tracking. Google AdWords places a cookie on your computer if you have reached our website via a Google advertisement.

These cookies lose their validity after 30 days and are not used for personal identification. If the user searches certain pages on the AdWords customer’s website and the cookie has not yet expired, Google and the customer will be able to tell that the user clicked on the ad and was directed to that page.

Each AdWords customer receives a different cookie. This means that cookies cannot be tracked through AdWords customer websites. The information collected from the Conversion cookie is used to generate conversion statistics for AdWords customers who have selected Conversion Tracking. AdWords customers learn the total number of users who clicked on their ad and were directed to a page tagged with a conversion tracking tag. However, you will not receive any information that personally identifies users.

2. Legal Basis for Data Processing

Art. 6 para. 1 (a) GDPR shall form the legal basis for the data processing after registration for the newsletter by User where User has granted his consent.

Art. 6 para. 1 (f) GDPR shall form the legal basis for the processing of data transmitted in the course of sending emails. If the intent of the email contact is to enter into a contract, Art. 6 para. 1 (b) GDPR shall form the additional legal basis for processing.

3. Purpose of Data Processing

The purpose of the use is the continuous optimization and customized design of the website.

4. Duration of Storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be concluded from the circumstances that the relevant facts have been conclusively clarified.

Other personal data gathered within the scope of the registration process are normally deleted after seven days‘notice.

5. Option for Appeal and Removal

If you do not wish to participate in the tracking procedure, you can refuse to set a cookie as required for this, for example by setting your browser to generally deactivate the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”. Google’s Privacy Policy for Conversion Tracking can be found at https://services.google.com/sitestats/de.html.

X. Newsletter

1. Description and scope of data processing, Disclosure to Third Parties

There is the option to subscribe to a newsletter free of charge. Registration to subscribe to the newsletter entails transmitting to us the name and email address from the input screen.

Moreover, the following data will be gathered with the registration:

• The IP address of the calling computer
• Date and time of registration

For the data processing within the scope of the registration process, your consent shall be obtained and this data protection policy referenced.

Data processing connected with the dissemination of newsletter involves forwarding of data to third parties. Newsletters are disseminated by Activecampaign in the USA (www.activecampaign.com). The data will exclusively be used for the dissemination of the newsletter.

2. Legal Basis for Data Processing

Art. 6 para. 1 (a) GDPR shall form the legal basis for the data processing after registration for the newsletter by User where User has granted his consent.

3. Purpose of Data Processing

User’s email address is captured to distribute the newsletter.

The other personal data captured within the scope of the registration process are used for the purpose of preventing the abuse of services or of the email address used.

4. Duration of Storage

The data are deleted as soon as they are no longer required to achieve the intended purpose of their collection. Accordingly, the User’s email address is stored as long as the subscription to the newsletter is active.

Other personal data gathered within the scope of the registration process are normally deleted after seven days‘ notice.

5. Option for Appeal and Disposal

The user can cancel his subscription to the newsletter at any time. Each newsletter contains a corresponding link for this purpose.

This similarly enables the subscriber to withdraw his consent to the storage of the personal data collected during the registration process.

XI. Job Application

1. Description and scope of data processing, Disclosure to Third Parties

Personal data are processed whenever you send us a job application. The categories of personal data processed specifically include your master data (such as first name, last name, name suffix and nationality, contact details (e.g. private address, (mobile) phone number, email address) as well as the data relating to the entire application process (cover letter, certificates, questionnaires, interviews, qualifications and previous employment). Insofar as you have also voluntarily disclosed special categories of personal data (such as health data, religious affiliation, degree of disability) in your letter of application or during the course of the application process, processing shall not take place unless you have consented thereto, or a de facto grant of legal permission justifies this.

As a general rule, your personal data will be collected from you directly within the scope of the hiring process. In addition, we may have received data from third parties (e.g. job recruitment) who you provided with your data for further disclosure.

Within our company, only those persons and centers (e.g. relevant departments, representatives for severely handicapped persons) required for hiring decisions and to fulfill our pre-contractual and statutory obligations shall receive your personal data. None of your personal data shall be disclosed to a third party.

2. Legal Basis for Data Processing

Art. 6 para. 1 (b) GDPR shall form the legal basis for processing and Art. 6 para. 1 (a) GDPR that for consent.

3. Purpose of Data Processing

First and foremost, the data processing is aimed at carrying out and transacting the application process and at assessing the extent to which the applicant is qualified for the position in question. The processing of your application details is necessary to be able to decide whether to enter into an employment relationship.

4. Duration of Storage

We shall delete your personal data 6 months after completion of the application process unless an employment relationship is entered into. This shall apply unless legal reasons stand in the way of erasure or further storage is necessary for evidentiary purposes or you have consented to a longer storage period.

5. Option for Appeal and Disposal

When we process your data to safeguard our legitimate interest, you can object to this processing on grounds relating to your particular situation. We shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or the processing serves in the establishment, exercise or defense of legal claims.

XII. Instagram

1. Description and scope of data processing

We have an online appearance on Instagram to engage and communicate with active customers, prospects, and users through these social media. On Instagram, we also inform about our services.

On our website, a link to Instagram is offered. It can be used to process data of users outside the European Union.

If you open Instagram’s website, the responsibility for the processing of personal data lies with Instagram alone. Insofar as US providers are certified under the Privacy Shield, providers are obliged to follow EU data protection standards. Instagram may process users’ data for market research and promotional purposes, as provided in Instagram’s Privacy Policy.

2. Legal Basis for Data Processing

The processing of personal data of users in the context of forwarding to Instagram is based on our legitimate interest acc. Art. 6 para. 1 lit. f DSGVO. We have an interest in providing effective and comprehensive information to users of our website and also a legitimate interest in communicating with users through social media.

Possibly the respective providers in social media obtain their own consent for the processing of data. Then the legal basis of the processing is Art. 6 para. 1 lit. (a) and Art. 7 GDPR.

3. Purpose of Data Processing

With the data processing and forwarding on the website of Instagram we want to facilitate and promote the information and communication with our users.

4. Duration of Storage, Option for Appeal and Disposal

Regarding the storage period, the revocation and disposal options of the personal data stored by Instagram, reference is made to the further statements made by Instagram on the following website:

https://help.instagram.com/519522125107875

XIII. Twitter

1. Description and scope of data processing

We have an online appearance on Twitter to engage and communicate with active customers, prospects, and users through these social media. On Twitter, we also inform about our services.

On our website, a link to Twitter is offered. It can be used to process data of users outside the European Union.

After opening the website of Twitter, the data protection responsibility for the processing of personal data lies solely with Twitter. Insofar as US providers are certified under the Privacy Shield, providers are obliged to follow EU data protection standards. Twitter may process users’ data for market research and promotional purposes, to the extent that this is agreed in Twitter’s Privacy Policy.

2. Legal Basis for Data Processing

The processing of personal data of users in the context of forwarding to Twitter is based on our legitimate interest acc. Art. 6 para. 1 lit. f DSGVO. We have an interest in providing effective and comprehensive information to users of our website and also a legitimate interest in communicating with users through social media.

Possibly the respective providers in social media obtain their own consent for the processing of data. Then the legal basis of the processing is Art. 6 para. 1 lit. (a) and Art. 7 GDPR.

3. Purpose of Data Processing

With the data processing and forwarding on the website of  Twitter we want to facilitate and promote the information and communication with our users.

4. Duration of Storage, Option for Appeal and Disposal

Regarding the storage period, the revocation and disposal options of the personal data stored by Twitter, reference is made to the further statements made by Twitter on the following website:

https://twitter.com/privacy

XIV. Facebook

1. Description and scope of data processing

We have an online appearance on Facebook to engage and communicate with active customers, prospects, and users through these social media. On Facebook, we also inform about our services.

On our website, a link to Facebook is offered. It can be used to process data of users outside the European Union.

After opening the website of Facebook, the data protection responsibility for the processing of personal data lies solely with Facebook. Insofar as US providers are certified under the Privacy Shield, providers are obliged to follow EU data protection standards. Facebook may process users’ data for market research and promotional purposes, to the extent that this is agreed in Facebook’s Privacy Policy.

2. Legal Basis for Data Processing

The processing of personal data of users in the context of forwarding to Facebook is based on our legitimate interest acc. Art. 6 para. 1 lit. f DSGVO. We have an interest in providing effective and comprehensive information to users of our website and also a legitimate interest in communicating with users through social media.

Possibly the respective providers in social media obtain their own consent for the processing of data. Then the legal basis of the processing is Art. 6 para. 1 lit. (a) and Art. 7 GDPR.

3. Purpose of Data Processing

With the data processing and forwarding on the website of  Facebook we want to facilitate and promote the information and communication with our users.

4. Duration of Storage, Option for Appeal and Disposal

Regarding the storage period, the revocation and disposal options of the personal data stored by Facebook, reference is made to the further statements made by Facebook on the following website:

https://www.facebook.com/about/privacy/

XV. LinkedIn

1. Description and scope of data processing

We have an online appearance on LinkedIn to engage and communicate with active customers, prospects, and users through these social media. On LinkedIn, we also inform about our services.

On our website, a link to LinkedIn is offered. It can be used to process data of users outside the European Union.

After opening the website of LinkedIn, the data protection responsibility for the processing of personal data lies solely with LinkedIn. Insofar as US providers are certified under the Privacy Shield, providers are obliged to follow EU data protection standards. LinkedIn may process users’ data for market research and promotional purposes, to the extent that this is agreed in LinkedIn’s Privacy Policy.

2. Legal Basis for Data Processing

The processing of personal data of users in the context of forwarding to LinkedIn is based on our legitimate interest acc. Art. 6 para. 1 lit. f DSGVO. We have an interest in providing effective and comprehensive information to users of our website and also a legitimate interest in communicating with users through social media.

Possibly the respective providers in social media obtain their own consent for the processing of data. Then the legal basis of the processing is Art. 6 para. 1 lit. (a) and Art. 7 GDPR.

3. Purpose of Data Processing

With the data processing and forwarding on the website of  LinkedIn we want to facilitate and promote the information and communication with our users.

4. Duration of Storage, Option for Appeal and Disposal

Regarding the storage period, the revocation and disposal options of the personal data stored by LinkedIn, reference is made to the further statements made by LinkedIn on the following website:

https://www.linkedin.com/legal/privacy-policy

XVI. Youtube

1. Description and scope of data processing

Our website uses plugins from Google Ireland Limited’s YouTube website (www.youtube.com). The website operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you visit any of our YouTube plug-in-enabled sites, you will be connected to the servers of YouTube. This process enables YouTube to recognize which of our pages you’ve visited. When you’re logged in to your Google Account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Google Account.

2. Legal Basis for Data Processing

The processing of personal data of users in the context of forwarding to Youtube is based on our legitimate interest acc. Art. 6 para. 1 lit. f DSGVO. We have an interest in providing effective and comprehensive information to users of our website, as well as a legitimate interest in communicating with users through social media and video sharing platforms.

Possibly. A separate consent for the processing of data is requested from the respective providers in social media and on video platforms. Then the legal basis of the processing is Art. 6 para. 1 lit. (a) and Art. 7 GDPR.

3. Purpose of Data Processing

With the data processing and forwarding on the Youtube website we want to facilitate and promote the information and communication with the users.

4. Duration of Storage, Option for Appeal and Disposal

Regarding the storage period, the revocation and disposal options of the personal data stored on Youtube by Google Ireland Limited, reference is made to the comments made by Youtube on the following website:

https://policies.google.com/privacy

XVII. Google Webfonts

1. Description and scope of data processing

This site uses web fonts provided by Google Ireland Limited (hereinafter “Google”) for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to correctly display texts and fonts. For this Google uses an interface to other Google services. Google may collect personal information such as device type, display size, and IP address. When you’re logged in to your Google Account, you allow Google Ireland Limited to associate your browsing experience directly with your personal profile. You can prevent this by logging out of your Google Account.

2. Legal Basis for Data Processing

The processing of the personal data of users as part of the forwarding to Google Web Fonts is based on our legitimate interest in accordance with. Art. 6 para. 1 lit. f DSGVO. We are interested in a consistent and attractive presentation of our online offers on our website. Google, in turn, has a legitimate interest in the personal data collected in order to offer and improve its own services offered.

3. Purpose of Data Processing

With the data processing, we want to present the information on our website in a consistent and appealing way.

4. Duration of Storage, Option for Appeal and Disposal

Regarding the storage period, the revocation and elimination of the personal data stored by Google, reference is made to the further statements made by Google on the following website:

https://developers.google.com/fonts/faq

https://www.google.com/policies/privacy/

XVIII. Font Awesome

1. Description and scope of data processing

This website uses web fonts provided by Fonticons, Inc. for consistent font representation. When you call up a webpage, your browser loads the required web fonts into your browser cache to correctly display texts and fonts.

To do this, the browser you use must connect to the Fonticons, Inc. servers. This will give Fonticons, Inc. notice that your website has been accessed through your IP address. It is also possible that your device type and certain browser settings are collected by Fonticons, Inc. as a personal date.

2. Legal Basis for Data Processing

The processing of the personal data of users as part of the forwarding to Fonticons, Inc. is based on our legitimate interest in accordance with. Art. 6 para. 1 lit. f DSGVO. We are interested in a consistent and attractive presentation of our online offers on our website. Fonticons, Inc., in turn, has a legitimate interest in offering and improving its services.

3. Purpose of Data Processing

With the data processing, we want to present the information on our website in a consistent and appealing way.

4. Duration of Storage, Option for Appeal and Disposal

Regarding the retention period, the revocation and disposal options of the personal data held by Fonticons, Inc., reference is made to the comments made by Fonticons, Inc. on the following website:

https://fontawesome.com/help

https://fontawesome.com/privacy

XIX. Google Maps

1. Description and scope of data processing

This site uses the map service Google Maps via an API (interface). Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereafter “Google”). To use the features of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored by Google on servers in the United States. The provider of this page has no influence on this data transfer.

2. Legal Basis for Data Processing

The use of Google Maps is for the sake of an appealing presentation of our online offers and an easy findability of the places we specify on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. Google in turn has a legitimate interest in providing and improving its own services.

3. Purpose of Data Processing

With the data processing, we want to present the information of our website in an appealing way and make it easy to find the locations we have indicated on the website as well as to provide the evaluation function of Google Maps for our customers and interested third parties.

4. Duration of Storage, Option for Appeal and Disposal

Regarding the storage period, the revocation and elimination of the personal data stored by Google, reference is made to the further statements made by Google on the following website:

https://www.google.de/intl/de/policies/privacy/

XX. Bootstrap CDN

1. Description and scope of data processing

Our website uses JavaScript code from the company LLC. NetDNA, 3575, Cahuenga Blvd Suite 630, Los Angeles, CA 90068, USA (hereinafter Bootstrap CDN). If you have enabled JavaScript in your browser and have not installed a JavaScript Blocker, your browser may transfer personal information, e.g. submit your IP address to Bootstrap CDN.

2. Legal Basis for Data Processing

The processing of personal data of users in the context of forwarding to Bootstrap CDN is based on our legitimate interest acc. Art. 6 para. 1 lit. f GDPR. We are interested in a consistent and attractive presentation of our online offers on our website. The Bootstrap CDN in turn has a legitimate interest in offering and improving its services.

3. Purpose of Data Processing

With the data processing, we want to present the information on our website in a consistent and appealing way.

4. Duration of Storage, Option for Appeal and Disposal

With regard to the storage period, the revocation and disposal options of the personal data stored by Bootstrap CDN, reference is made to the further details of Bootstrap CDN on the following website:

https://www.maxcdn.com/legal/
https://www.bootstrapcdn.com/privacy-policy/

XXI. Rights of the Data Subject

If your personal data is processed by us, acc. to the EU GDPR you have the following rights towards the responsible party:

1. Richt to Information

You may obtain a confirmation from the controller as to whether or not your personal data are being processed by us.

If such processing carried out, you can request the following information from the person responsible for the following information:

(1) the purposes for which the personal data are being processed;

(2) The categories of personal data being processed;

(3) The recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

(4) The envisaged period for which the personal data concerning you will be stored, or if more concrete information on this cannot be given, the criteria used to determine that period;

(5) The existence of the right to rectification or erasure of the personal data concerning you, the right to obtain from the controller restriction of processing or the right to object to this processing;

(6) The right to lodge a complaint with a supervisory authority;

(7) All available information about the origin of the data, where personal data have not been obtained from the data subject;

(8) The existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to obtain information about whether or not personal data concerning you is being transferred to a third country or international organization. In this connection, you have the right to be informed about appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

2. Right to Rectification

You have a right to obtain from the controller the rectification and/or completion whenever the processed personal data concerning you are inaccurate or incomplete. The controller must undertake the rectification without undue delay.

3. Right to Restriction of Processing

Under the following conditions, you can obtain the restriction of processing of your personal data:

(1) If you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;

(2) if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

(3) if the controller no longer requires the personal data for the purposes of the processing, but you need them for the establishment, exercise or defense of legal claims or

(4) if you have objected to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether there are overriding legitimate grounds for the processing.

If the processing of personal data concerning you has been restricted, such personal data shall – with the exception of storage – only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal entity or for reasons of important public interest of the Union or of a Member State.

If the processing has been restricted by the aforementioned conditions, the controller shall inform you before the restriction is lifted

4. Right to Erasure

a) Obligation to delete

You can obtain from the controller erasure of personal data concerning you without undue delay, and the controller is obligated to erase these data without undue delay as long one of the following grounds applies:

(1) The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.

(2) You revoke your consent anchored in processing pursuant to Art. 6 para. 1 (a) or Art. 9 para. 2 (a) GDPR and no other legal basis for processing exists.

(3) You have objected to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you have objected to the processing pursuant to Art. 21 para. 2 GDPR.

(4) The personal data concerning you have been unlawfully processed.

(5) The personal data concerning you have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.

(6) The personal data concerning you were gathered in relation to the offer of information society services pursuant to Art. 8 para. 1 GDPR.

b) Information to Third Parties

Where the controller has made public the personal data concerning you and is obliged pursuant to Art. 17 para. 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of those personal data.

c) Exceptions

There is no right to erasure if this processing is necessary

(1) for exercising the right to freedom of expression and information;

(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) For reasons of public interest in the area of public health pursuant to Art. 9 para. 2 (h) and (I) as well as Art. 9 para. 3 GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

(5) for the establishment, exercise or defense of legal claims.

5. Right to Information

If you have asserted your right to obtain from the controller rectification, erasure or restriction of the processing, he is obliged to notify all recipients to whom the personal data concerning you were disclosed of such rectification or erasure of the data or of the restriction of processing, unless this proves impossible or involves a disproportionate effort

You have the right to obtain from the controller information about those recipients.

6. Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format. Moreover, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where

(1) The processing is based on consent pursuant to Art. 6 para. 1 (a) GDPR or Art. 9 para. 2 (a) GDPR or on a contract pursuant to Art. 6 para. 1 (b) GDPR and

(2) processing is performed using automated procedures.

In exercising your right to data portability pursuant to paragraph 1, you shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons may not be impaired thereby.

The right to data portability shall not apply to any processing of personal data necessary for carrying out a task that serves the public interest or the exercise of official authority that has been transferred to the controller.

7. Right to object

You have the right, at any time, to object on grounds relating to your particular situation to the processing of personal data concerning you which is based on Article 6 para. 1 (e) or (f) GDPR, including profiling based on those provisions.

The controller shall no longer process your affected personal data unless he can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise or defense of legal claims.

Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of the personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Where you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

8. Right to Lodge a Complaint with Supervisory Authority

Without prejudice to any available administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of your work or the place of the alleged infringement where you consider that your rights under the GDPR have been infringed as a result of the processing of your personal data.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.

The supervisory authority can be contacted at the following contact details:

State Representative for Data Protection of the Federal State of Lower Saxony

Barbara Thiel
Prinzenstraße 5
30159 Hannover