Name and contact details for the responsible body in accordance with Article 4 (7) GDPR (DSGVO in German)
Company: Technoplan system technik GmbH
Name: Frank Schüler
Address: Schadewalde 11, 06917 Jessen (Elster)
Telephone: +4935387 71161
Fax: +4935387 71289
E- mail: firstname.lastname@example.org
Security and protection of your personal data
We see it as our primary task to ensure the confidentiality of personal data provided by you and to protect it from unauthorised access. Therefore, we apply the utmost care and state-of-the-art security standards in order to guarantee maximum protection of your personal data.
As a company under private law, we are subject to the provisions of the European Data Protection Regulation (GDPR) and the regulations of the Federal Data Protection Act (BDSG). We have taken technical and organisational measures to ensure that the rules on data protection are observed both by us and by our external service providers.
The legislation requires that personal data is processed in a legitimate manner, in good faith and in a comprehensible manner for the person concerned ("legality, processing in good faith, transparency"). In order to ensure this, we will inform you about the various individual legal definitions, which are also used in this data protection declaration:
“Personal data" is all information relating to an identified or identifiable natural person (hereinafter referred to as the "person affected” or “affected person"); a natural person is considered to be identifiable, where such can be identified, directly or indirectly, in particular by means of the assignment to an identifier such as a name, an identification number, location data, or to an online ID or to one or more specific characteristics, which are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
“Processing" means any procedure, with or without the help of automated processes, or operation sequence in connection with personal data, such as collection, capture, organisation, filing, storage, adaptation or alteration, reading, querying, usage, disclosure by transmission, dissemination or any other form of provision, comparison or linking, limitation, deletion or destruction.
Limitation of the processing
“Limitation of the processing" is the marking of stored personal data with the aim of limiting the future processing of such.
“Profiling" is any kind of automated processing of personal data, whereby this personal data is used with a view to assessing certain personal aspects that relate to a natural person; in particular to analyse or predict aspects related to job performance, economic situation, health, personal preferences, interests, reliability, behaviour, residence or change of location of this natural person.
“Pseudonymisation" is the processing of personal data in a manner whereby the personal data can no longer can be assigned to a specific affected person without the involvement of additional information, provided that such additional information should be kept separately and be subject to technical and organisational measures to ensure that personal information cannot be assigned to an identified or identifiable natural person.
“File system" means any structured set of personal data, which is accessible in accordance with specific criteria, regardless of whether this set is organised on a centralised or decentralised basis or dispersed according to functional or geographical points of view.
“Responsible body " is a natural or legal person, public authority, agency or other body, which, either alone or jointly with others, decides on the purposes and means of the processing of personal data; where the purposes and means of processing are prescribed by Union law or the law of the Member States; the responsible body, or the specific criteria of the designation of such, can be prescribed in accordance with Union law or the law of the Member States.
“Order processor" means any natural or legal person, public authority, agency or other body which processes personal data on behalf of the responsible body.
“Recipient" means any natural or legal person, public authority, agency or other body to which personal data may be disclosed, regardless of whether such is a third party or not. Authorities, which may obtain personal data within the context of a specific investigation order in accordance with Union law or the law of the Member States, shall however not be considered as recipients; the processing of this data by the authorities referred to shall be carried out in accordance with the applicable data protection regulations in accordance with the purposes of the processing.
“Third party" means any natural or legal person, public authority, agency or other body, with the exception of the person affected, the responsible body, the order processor and persons who are authorised to process the personal data under the direct responsibility of the responsible body or the order processor.
"Consent" of the affected person is any unequivocal expression of consent, voluntarily offered in an informed manner in the form of a declaration or any other clear affirmative action, by which means the affected person gives to understand that s/he is in agreement with the processing of personal data.
Legality of the processing
The processing of personal data is only legitimate if a legal basis exists for the processing. In accordance with Article 6 (1) lit. a - f) GDPR, the legal basis may be in particular:
- the person affected has given his/her consent to the processing of personal data for one or several specific purposes;
- the processing is necessary for the fulfilment of a contract to which the person affected is a contractual party or for the implementation of pre-contractual measures carried out at the request of the person affected;
- the processing is necessary for compliance with a legal obligation to which the responsible body is subject;
- the processing is necessary in order to protect the vital interests of the person affected or of another natural person;
- the processing is necessary for the performance of a task lying in the public interest or carried out in the exercise of public authority, which has been transferred to the responsible body;
- the processing is necessary to safeguard the legitimate interests of the responsible body or of a third party, unless the interests or fundamental rights and freedoms of the affected person requiring the protection of personal data outweigh such, especially if the affected person is a child.
Information on the collection of personal data
In the following, we will seek to offer you information concerning the collection of personal information when using our website. Personal data is, for example, a name, address, e-mail addresses or user behaviour.
Contact form and e-mail contact
When contacting us by e-mail or via a contact form, the data provided by you (your e-mail address, and possibly your name and telephone number) is stored by us in order to be able to respond to your queries.
The data collected via the contact form includes:
- E-mail address
- Telephone number (optional)
- Subject of the message
- Message text
Alternatively, contact may be made via the provided e-mail address. In this case, the user's personal data transmitted with the e-mail is stored. In this context, no data is disclosed to third parties. The data is used exclusively for the processing of the conversation. We delete such data arising in this context once the storage is no longer required or the processing is restricted if statutory retention obligations exist.
Collection of personal data when visiting our website
Where the website is made use of for informational purposes only, that is if you choose not to register or otherwise provide us with information, we only collect the personal data that your browser transfers to our server. If you want to view our website, we collect the following data which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 (1) Clause 1 lit. GDPR):
- IP address
- Date and time of the query
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code.
- Each quantity of data transferred
- The website from which the request has come
- Operating system and its interface
- Language and version of the browser software.
(1) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on the hard drive assigned to the browser you are using and via which certain information flows to the point set by the cookie. Cookies cannot run programs or deliver viruses to your computer. They serve to make our internet service more user-friendly and effective.
(2) This website uses the following types of cookies, whose scope and operation will be explained in the following:
- Transient cookies (a).
We make use of a SESSION cookie, in order to implement the functionality of the contact form and to make it possible to log on to the administrative system used in this website.
- Persistent cookies (b)
We make use of a cookie to save whether you have confirmed the displayed cookie notice. If you confirm the cookie notice, the cookie is created and the notice will no longer be displayed. The storage duration for this cookie is one year.
Further cookies, in particular cookies allowing the tracking and analysis of your activities, are not made use of. The user data collected by cookies is not used to create user profiles.
(a) Transient cookies are deleted automatically when you close your browser. In particular, these include the session cookies. These store a so-called session ID, by which means the various requests from your browser can be assigned to a common session. This allows your computer to be recognised again when you return to our website. Session cookies are deleted when you log out or close your browser.
(b) Persistent cookies are automatically deleted after a specified duration, which can differ according to the cookie. You can delete cookies at any time in your browser’s security settings.
(c) You can configure your browser settings according to your wishes and, for example, reject the acceptance of "Third Party Cookies" or all cookies. So-called “Third Party Cookies" are cookies that have been set by a third party, and therefore not by the actual website you are currently on. We would point out that where cookies are de-activated, you may not be able to make full use of all the functions of our website.
Our offer is fundamentally directed towards adults. Persons under 18 years of age should not provide us with personal data without the consent of a parent or guardian.
Rights of the person affected
(1) Withdrawal of consent
Insofar as the processing of personal data is based on granted consent, you have the right to revoke the consent at any time. By revoking the consent, the legality of processing carried out on the basis of the consent until the time of the revocation is not affected.
You can contact us at any time to exercise of the right of revocation.
(2) Right to confirmation
You have the right to request confirmation by the responsible body as to whether we process personal data affecting you. You may request the confirmation at any time via the aforementioned contact details.
(3) Right to information
Insofar as personal data is processed, you may request information concerning this personal data and the following information at any time:
- the purposes of the processing;
- the categories of personal data which are processed;
- the recipients or categories of recipients to whom the personal data has been disclosed or is yet to be disclosed, particularly in the case of recipients in third countries or at international organisations;
- if possible, the planned duration for which the personal data is stored, or, if this is not possible, the criteria for the establishment of this duration;
- the existence of a right to correction or deletion of the personal data affecting you or to the restriction of processing by the responsible body or of a right to object to this processing;
- the existence of a right of appeal to a supervisory authority;
- if the personal data was not collected from the affected person, all available information about the origin of the data;
- the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information on the logic involved and the scope and desired effects of such processing for the affected person.
If personal data is transferred to a third country or an international organisation, you have the right to be informed about the appropriate guarantees in accordance with Article 46 GDPR in connection with the transmission. We will provide a copy of the personal data, which is the subject of the processing. On the basis of administrative costs, we may demand a reasonable fee for all further copies for which you apply. If you submit the application electronically, the information will be made available in a standard electronic format, unless you specify otherwise. The right to receive a copy as per Paragraph 3 may not affect the rights and freedoms of other persons.
(4) Right to rectification
You have the right to the immediate rectification by us of inaccurate personal data relating to you. Taking into account the purposes of the processing, you have the right to demand the completion of incomplete personal data - also by means of a supplementary declaration.
(5) Right to deletion ("right to be forgotten")
You have the right to demand that the responsible body deletes personal data without delay and we are obliged to delete personal data immediately, insofar as one of the following reasons applies:
- the personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
- the affected person revokes their consent, on which the processing was based in accordance with Article 6 (1) a) or Article 9 (2) a) GDPR, and there is thus a lack of any legal basis for the processing.
- the affected person submits an objection to the processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or the affected person submits an objection to the processing in accordance with Article 21 (2) GDPR.
- the personal data has been processed unlawfully.
- the deletion of the personal data is necessary to fulfil a legal obligation in accordance with Union law or the law of the Member States, to which the responsible body is subject.
- the personal data has been collected in relation to the services offered by the information society in accordance with Article 8 (1) GDPR.
If the responsible body has made the personal data public and is obliged to delete such in accordance with Paragraph 1, it shall, taking into account the available technology and the implementation costs, take appropriate measures, including of a technical manner, to inform the persons responsible for the processing, who are processing the personal data for which an affected person has requested the deletion of all links to this personal data or copies or replicas of this personal data.
The right to deletion ("right to be forgotten") does not apply if the processing is required:
- for the exercise of the right to freedom of expression and information;
- for the fulfilment a legal obligation required by the processing, in accordance with Union law or that of the Member States, to which the responsible body is subject, or the performance of a task carried out in the public interest or in the exercise of public authority which has been transferred to the responsible body;
- for reasons of public interest in the field of public health in accordance with Article 9 (2) h) and i) and Article 9 (3) GDPR;
- for archive purposes lying in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, to the extent that the right referred to in Paragraph 1 is expected to render the achievement of the objectives of this processing impossible or to seriously impair such, or
- for the establishment, exercise or defence of legal claims.
(6) Right to limitation of the processing
You have the right to demand that we restrict the processing of your personal data if one of the following conditions exists:
- the accuracy of the personal data of the affected person is disputed, and for a period of time allowing the responsible body to verify the accuracy of the personal data,
- the processing is unlawful and the affected person rejects the deletion of the personal data and demands instead the limitation of the use of personal data;
- the responsible body no longer requires the personal data for the purposes of the processing; however, the affected person requires such for the assertion, exercise or defence of legal claims, or
- the affected person has submitted an objection to the processing in accordance with Article 21 (1) DSGVO insofar as it is not yet certain whether the legitimate reasons of the responsible body override those of the affected person.
If the processing has been limited in accordance with the above conditions, this personal data - apart from the storage of such - will only be processed with the consent of the person affected or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State.
In order to assert the right to limitation of the processing, the affected person may contact us at any time using the contact details noted above.
(7) Right to data portability
You have the right to obtain the personal data affecting you, which you have provided to us, in a structured, common and machine-readable format and you have the right to transmit this data to another responsible body without interference from the responsible body to which the personal data was provided, insofar as:
- the processing is based on a consent in accordance with Article 6 (1) a) or Article 9 (2) a) or on a contract in accordance with Article 6 (1) b) GDPR and
- the processing is carried out using automated procedures.
In exercising the right to data portability in accordance with Paragraph 1, you have the right to ensure that the personal data is transmitted directly from a responsible body to another responsible body, insofar as this is technically feasible. The exercise of the right to data portability does not affect the right to deletion ("right to be forgotten"). This right does not apply for processing, which is necessary for the performance of a task lying in the public interest, or carried out in the exercise of public authority, which has been transferred to the responsible body.
(8) Right of objection
Based on reasons related to your specific situation, you have the right to submit an objection at any time to the processing of personal data affecting you, which takes place in accordance with Article 6 (1) e) or f) GDPR; this also applies for profiling based on one of these provisions. The responsible body will then no longer process the personal data unless it can unless prove compelling reasons for the processing, which override the interests, rights and freedoms of the person affected, or if the processing serves the assertion, exercise or defence of legal claims.
If personal data is processed in order to operate direct marketing, you have the right to submit an objection at any time to the processing of personal data affecting you for the purposes of such marketing; this also applies to profiling, insofar as it stands in connection with such direct marketing. If you object to the processing for purposes of direct marketing, the personal data will no longer be processed for these purposes.
In connection with the use of information society services, regardless of the Directive 2002/58/EC, you may exercise your right of objection by means of automated processes in which technical specifications can be used.
Based on reasons related to your specific situation, you have the right to submit an objection to the processing personal data affecting you, which is carried out for scientific and historical research purposes or for statistical purposes in accordance with Article 89 (1), unless the processing is necessary for the performance of a task in the public interest.
You can exercise the right of objection at any time by contacting the respective responsible body.
(9) Automated decisions in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing - including profiling - which will produce legal effects vis-à-vis you or have a significant impact on you in a similar manner. This does not apply if the decision:
- is required for the conclusion or fulfilment of a contract between the person affected and the responsible body,
- is permissible as per the legal provisions of the Union or the Member States to which the responsible body is subject, and these legal provisions contain appropriate measures for the safeguarding of the rights and freedoms and the legitimate interests of the person affected or
- if it is made with the express consent of the person affected.
The responsible body will take appropriate steps to protect the rights and freedoms and legitimate interests of the person affected, including at least the right to obtain the intervention of a person on the part of the responsible body, to the presentation of an own position and to challenge the decision.
The affected person may exercise this right of objection at any time by contacting the respective responsible body.
(10) Right to appeal to a supervisory authority
You also have the right, without prejudice to any other administrative or judicial redress, to appeal to a supervisory authority, in particular in the Member State where you reside, work or at the location of the alleged infringement, if you are of the opinion that the processing of personal data affecting you violates the provisions of this regulation.
(11) Right to effective judicial redress
Without prejudice to any administrative or out-of-court legal redress including the right to appeal to a supervisory authority in accordance with Article 77 GDPR, you also have the right to effective judicial redress, if you are of the opinion that your rights as per this regulation have been violated as a result of processing of your personal data that is not in accordance with this regulation.
Integration of OpenStreetMap
(1) On this website, we make use of the map service provided by “OpenStreetMap". This is a free project from the OpenStreetMap Foundation. This allows us to show you maps directly in the website and allows you to make comfortable use of the maps function.
(2) By visiting the website, data may be transmitted to the OpenStreetMap Foundation in accordance with the point, "Collection of personal data when visiting our web site”.
(3) Further information on the purpose and scope of the data collection and its processing by the provider can be found in the respective personal data protection declaration at https://wiki.osmfoundation.org/wiki/Privacy_Policy