With these instructions, we inform visitors and users of the website about the nature, extent and purpose of the processing of personal data when visiting the website or using the services provided thereon. We also provide information about the rights that data subjects have to their rights. Visiting our website is possible without personal data being collected. However, the use of some services offered on the website may require the processing of personal data. The processing is carried out either on the basis of a statutory permission standard, or, in the case that a legal permission standard does not exist, on the basis of a consent that has been previously obtained by the person concerned.
Technical and organizational measures have been implemented to protect the personal data of visitors and users of the website. Nevertheless, security vulnerabilities can not be completely ruled out when using the internet.
The present information and explanations are based on the terms of the General Data Protection Regulation (DS-GVO):
2.1 personal data
Personal data is any information relating to an identified or identifiable natural person (hereinafter the “data subject”). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.
2.2 person concerned
Affected person is any identified or identifiable natural person whose personal data is processed by the controller.
Processing means any process or series of operations related to personal data, such as collecting, collecting, organizing, organizing, storing, adapting or modifying, reading, querying, using, with or without the aid of automated procedures; disclosure by submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.
2.4 Restriction of processing
Restriction of the processing is the marking of stored personal data with the aim to limit their future processing.
Profiling is any kind of automated processing of personal data that consists in using that personal information to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal To analyze or predict preferences, interests, reliability, behavior, whereabouts or relocation of that natural person.
Pseudonymisation is the processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without the need for additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data not assigned to an identified or identifiable natural person.
2.7 Responsible or the controller
The controller or controller is the natural or legal person, public authority, body or body that, alone or in concert with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union or national law.
The processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
Recipient is a natural or legal person, agency, agency or other entity to whom Personal Data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered as beneficiaries.
Third is a natural or legal person, public authority, body or body other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the controller or the processor to process the personal data.
Consent is any voluntarily given and unambiguously expressed in the form of a statement or other unambiguous confirmatory act by the data subject for the particular case, by which the data subject indicates that they consent to the processing of the personal data concerning him / her is.
3 For the data protection person
Dobner GmbH & Co. KG
Registered office: München
Register court: Amtsgericht München
Register number: HRA 109776
Dobner Management & Treuhand GmbH
Registered office: München
Register court: Amtsgericht München
Register number: HRB 244561
Christian Dobner, LL.M. (Com.)
phone: +49 (0)89 2153737 – 0
fax: +49 (0)89 2153737 – 37
Third party cookies are not used.
5 Collection of data and information
When accessing the website, general data and information are collected, which are stored in log files on the server. The data on the type of browser used and the version of the browser, the operating system used to access the website, the website from which the visitor accesses the website, the pages to which the visitor calls, the date and time of the visitor Access, to the IP address, to the Internet Service Provider and other similar data and information that serve to provide security in the event of attacks on the IT systems. In no case conclusions are drawn on the person of the visitor. Rather, the information is needed so that the contents of the website can be displayed correctly. The collection of data is also done in order to have available in the event of a cyber attack, the information needed for law enforcement by the relevant law enforcement agencies.
6 Contact via the website
Due to legal regulations, the website contains information that enables fast electronic contact or direct communication with the operator of the website. In case of contact z. For example, by email or via a contact form, the transmitted personal data is automatically stored. In any case, the data will only be processed for the purpose resulting from the contact and, in principle, will not be disclosed to third parties, unless the disclosure is required to process the contact.
7 Routine deletion and blocking of personal data
Personal data is only stored for the period as long as this is necessary for the respective purpose of the processing or due to legal requirements. After the purpose of the provision or expiry of the statutory retention period, the personal data will be routinely and in accordance with the statutory provisions deleted. Insofar as the intended purpose of processing has been achieved, but the data may not yet be deleted due to legal requirements, the data will be blocked.
8 Legal basis of processing
8.1 The data processing is based on Art. 6 para. 1 DS-GVO. Thereafter, the data processing is allowed if this with the consent of the person concerned:
- necessary for the performance of any contract to which the data subject is a party or for the performance of any precontractual action taken at the request of the data subject;
- required to fulfill a legal obligation;
- necessary to protect the vital interests of the data subject or another natural person;
- is necessary to safeguard the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject requiring personal data protection prevail, in particular where the data subject is a child.
Insofar as the data processing can not be based on any other legal basis, the data processing is in principle only with the consent of the data subject, which is obtained and documented by him before the start of processing.
8.2 As far as the data processing is based on a legitimate interest, before the start of the processing additionally a weighing with the interests of the data subject is necessary, which nevertheless can exclude a data processing, even if the data processing seems to be appropriate for entrepreneurial purposes. Expediency is not enough in this case regularly. Rather, it is necessary that significant interests of the company, its employees or shareholders or holders of data processing are directly affected.
9 Right to information, rectification and cancellation
Persons whose data are processed by us are legally entitled to information, correction and deletion of their data. The rights can be claimed at any time by the person concerned making a corresponding request to the person responsible for data protection or the management. In the case of a request for information, the following information must be provided:
- processing purposes;
- Categories of personal data being processed;
- recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations;
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration;
- existence of a right to rectification or erasure of personal data concerning them, or of processing by the person responsible or a right to object to such processing;
- existence of a right of appeal to a supervisory authority;
- if the personal data are not collected from the data subject: all available information about the origin of the data;
- existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) of the GDPR and – at least in these cases – meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject; Transfer of data to a third country or an international organization, as well as the appropriate guarantees related to the transfer.
In the case of a request for correction, incorrect data must be corrected or completed. In the case of a request for cancellation, the relevant personal data must be deleted immediately,
- if personal information has been collected or otherwise processed for purposes for which it is no longer needed;
- the data were collected solely on the basis of the consent of the person concerned, which the person concerned revoked;
- the person concerned files an objection against the processing in accordance with Art. 21 DS-GVO and, in the case of a revocation pursuant to Art. 21 (1) DS-GVO, no legitimate reasons for the processing exist;
- the personal data have been processed unlawfully;
- the deletion is required by law.
In the event that the data to be deleted has been made public, in accordance with Art. 17 (1) DS-BER, taking into account the available technology and the implementation costs, appropriate measures will be provided to third parties processing the published personal data about the request for cancellation to put.
10 Right to restriction of processing
Affected parties have a legal claim to demand the restriction of the processing of their data, if he denies the accuracy of the personal data or has filed an objection under Art. 21 para. 1 DS-GVO. In this case, processing must be restricted for a period of time necessary to verify the accuracy of the personal data or to determine whether there are grounds for processing that outweigh the interests of the person concerned. If the processing is subsequently unlawful and the person concerned refuses to delete his data, he may instead demand the restriction of the processing of his data. The processing of the data must be restricted even if it has been omitted for the purpose for which the data was collected, but the data must still be available for asserting, exercising or defending legal claims. The above rights may be invoked at any time by the person concerned making a request to the person responsible for data protection or management.
11 Right to data portability
Persons whose data are processed by us have a legal claim against us that their data is transmitted in a structured, common and machine-readable format or transmitted to a third party without hindrance, if the processing is based on the consent pursuant to Art. 6 para. 1 letter a DS-GVO or Article 9 paragraph 2 letter a DS-GVO or based on a contract pursuant to Article 6 paragraph 1 letter b DS-GVO and the processing is carried out by automated means, unless the processing for the perception a task which is in the public interest or in the exercise of public authority, which has been entrusted to the controller. The rights can be claimed at any time by the person concerned making a corresponding request to the person responsible for data protection or the management.
12 Right to objection
Affected parties have a legal claim to contradict the data processing at any time. In the event of an objection, the data will no longer be processed unless there are evidently compelling legitimate reasons for continued data processing that outweigh the interests, rights and freedoms of the data subject, or the processing of the assertion, exercise or defense of legal claims. In the case of opposition to the processing for advertising purposes, the objection in principle has priority. The data will then no longer be used for advertising purposes. The rights can be claimed at any time by the person concerned making a corresponding request to the person responsible for data protection or the management.
13 Automated decisions in individual cases including profiling
Affected parties have a legal claim that a decision affecting them, which has legal effect, is not exclusively based on automated processing, or similarly significantly affected. This shall not apply to decisions required for the conclusion or performance of a contract with the person concerned, or as permitted by law, or as expressly provided for in order to safeguard the rights and freedoms and legitimate interests of the data subject Consent of the data subject takes place. If the decision to conclude or execute a contract is required or if the automated decision is made with the express consent of the person concerned, appropriate measures will be taken to safeguard the rights and freedoms and legitimate interests of the data subject, such as: B. Measures allowing the person concerned to act and intervene in the proceedings and to present his point of view. If the data subject wishes to enforce automated decision-making rights, they may contact our data protection officer or other data controller at any time. The rights can be claimed at any time by the person concerned making a corresponding request to the person responsible for data protection or the management.