Data protection

Company’s name and address
The party responsible under the meaning of the General Data Protection Regulation (hereinafter "GDPR") and other national data protection laws of the Member States as well as other data protection regulations:

unit III Consulting GmbH
Silke Stratmann
Reinhardtstraße 33
10117 Berlin

Tel +49 30 24 08 81 50
Fax +49 30 24 08 81 510

contact@unit3-consulting.de
www.unit3-consulting.de

General data processing

Scope and permission for processing personal data
We only collect and use the personal data of our users (data subjects) insofar as this is necessary to guarantee the functionality of our website, our content and our services. The collection and processing of our users’ personal data normally takes place only with the user's consent.

An exception applies in those cases where prior consent cannot be obtained for actual reasons and the processing of the data is permitted by law.

The legal basis for the processing of personal data with the prior consent of the data subject is Article 6 (1) a) of the GDPR. The legal basis for the processing of personal data required for the fulfilment of a contract or for the implementation of pre-contractual measures is Article 6 (1) b) of the GDPR. For the processing of personal data for the fulfilment of a legal obligation, the legal basis is Article 6 (1) c) of the GDPR. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) d) of the GDPR serves as the legal basis. If processing is necessary to protect a legitimate interest of our company or a third party, and if these interests outweigh the interests of the data subject, taking into account the fundamental rights and freedoms of the data subject, Article 6 (1) f) of the GDPR is the legal basis for processing the data.

Data erasure and storage duration
The personal data of the data subject will be erased or restricted as soon as the reason for the storage ceases to apply. Furthermore, data may be stored insofar as the processing of the data is stipulated by law. In this case, the data will be restricted or erased as soon as the legally prescribed storage period expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

Data processing through use of our website

Visiting our website
When you visit our website, your browser automatically sends information to the server on our website. This information is temporarily stored in a server log file. The following information is automatically recorded and stored until it is automatically deleted: IP address of the requesting computer, date and time of access, name and URL of the accessed file, website from which access is made (referrer URL), browser used and, if applicable, your computer’s operating system and the name of your access provider.

We process the aforementioned data for the purposes of ensuring a smooth connection to the website, ensuring comfortable use of our website, evaluation of system security and stability, and for other administrative purposes.

The legal basis for data processing is Article 6 (1) f) of the GDPR. Our legitimate interest arises from the purposes specified above for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.

Use of our online contact forms
You can contact us via the email address provided. In this case, the personal data you transmit by email will be stored. In this context, the data will not be passed on to third parties. The legal basis for the processing of this data is Article 6 (1) f) of the GDPR. If your email is intended to conclude a contract, the additional legal basis for processing is Article 6 (1) b) of the GDPR.

The data will be processed for the purpose of contacting us in accordance with Article 6 (1) a) of the GDPR on the basis of your voluntary consent. The personal data collected by us via the contact form will be automatically erased after your request has been processed.

Newsletter
Via our website, we offer you the opportunity to subscribe to our newsletter. This newsletter informs you about our current offers at regular intervals. To receive our newsletter, you need a valid email address. We will check the email address you have entered to make sure that you are actually the owner of the email address provided or that the owner is authorised to receive the newsletter.

When you subscribe to our newsletter, we will save your IP address and the date and time of your subscription. In the event that a third party misuses your email address and subscribes to our newsletter without your knowledge, this serves as a safeguard on our part. We do not collect any further data. The data collected in this way will only be used to subscribe to our newsletter. The data will not be passed on to third parties. We do not conduct any comparison of the data collected in this way with data that may be collected by other plug-ins of our site. You can cancel your subscription to this newsletter at any time. Details can be found in the confirmation email and in each individual newsletter.

Newsletter-tracking
Our newsletters contain tracking pixels. A tracking pixel is a miniature graphic embedded in emails sent in HTML format to enable log file recording and analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. On the basis of the embedded tracking pixel we can recognise whether and when an email was opened by an identified person and which links in the email were opened by the identified person.

We store and evaluate such personal data collected via the tracking pixels contained in the newsletters in order to optimise newsletter delivery and adapt the content of future newsletters to better suit the interests of the person concerned. This personal data will not be passed on to third parties. Persons concerned are entitled at any time to revoke the respective separate declaration of consent given via the double opt-in procedure. After revocation, this personal data will be erased by the data controller. We always interpret a cancellation of our newsletter as a revocation of consent.

Information disclosure
Your personal data will not be passed on to third parties for purposes other than those listed below. We will only disclose your personal data to third parties if you have given your express consent pursuant to Article 6 (1) a) of the GDPR; the disclosure pursuant to Article 6 (1) f) of the GDPR is necessary to assert, exercise or defend legal claims; and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data; and, in the event that the disclosure pursuant to Article 6 (1) c) of the GDPR is legally permissible and required by Article 6 (1) b) of the GDPR for the processing of contractual relationships with you.

Use of cookies
We use cookies in order to make our website more user-friendly. Some elements of our website require that your browser can be identified even after a page change.

Cookies are small text files that are stored on your device (PC, smartphone, etc.) and contain specific information relating to your device. On the one hand, cookies serve to improve the user-friendliness of websites and thus enhance your browsing experience (e.g. by storing login data). On the other hand, they are used to collect statistical data on the use of the website and to analyse it for the purpose of improving the service. Users can manage the way cookies are used. Most browsers have an option to restrict or completely refuse the storage of cookies. However, please note, without cookies, your use of our website, and in particular your user experience, will be limited.

The user data collected in this way is pseudonymised by technical means. This means that it is no longer possible to assign the data to a specific user. This data will not be stored together with users’ other personal data.

The legal basis for the processing of personal data using cookies is Article 6 (1) f) of the GDPR. The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) f) of the GDPR. The legal basis for the processing of personal data using cookies for analytical purposes is Article 6 (1) a) of the GDPR.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that our website can recognise your browser even after a page change.

Cookies for analytical purposes are used to improve the quality of our website and its content. Through these cookies, we learn how the website is used and can thus continuously optimise our offer.

For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Article 6 (1) f) of the GDPR.

Third-party services
The data controller has integrated content and services from other providers into our website. These include maps provided by Google Maps, videos from YouTube and graphics and images from other websites. In order for this data to be retrieved and displayed in your browser, it is absolutely necessary to transmit the IP address. The providers (hereinafter referred to as “third-party providers”) thus register the IP addresses of respective users.

Although we make every effort to use only third-party providers who need the IP address solely for the purpose of delivering content, we have no influence on whether the IP address is stored. In this case, this process is used for statistical purposes, among other things. If we have knowledge that IP addresses will be stored, we point this out to our users.

Use of Facebook plug-ins
The data controller has integrated Facebook plug-ins into this website. Facebook is a social network.

A social network is an Internet-based social meeting place, an online community that usually enables users to communicate with each other and interact in a virtual environment. A social network can serve as a platform for the exchange of opinions and experiences or enable the Internet community to provide personal or company-related information. Facebook enables social network users to create private profiles, upload photos and network via friendship requests, among other things.

Facebook is operated by Facebook, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. The person responsible for the processing of personal data if a data subject lives outside the USA or Canada is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Each time a visitor accesses one of the individual pages of this website, which is operated by the data controller and on which a Facebook plug-in has been integrated, the Internet browser on the user’s device is automatically prompted by the respective Facebook plug-in to download a representation of the corresponding Facebook plug-in from Facebook. An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=en_EN. During this technical process, Facebook is informed about which specific subpage of our website is being visited by the person concerned.

If the person concerned is logged into their Facebook account at the time, Facebook recognises every specific subpage of our website that they visit for the entire duration of their visit to our website. This information is collected by the Facebook plug-in and assigned by Facebook to the respective Facebook account of the person concerned. If the person concerned interacts with one of the Facebook plug-ins integrated into our website, for example the “Like” button, or the person concerned makes a comment, Facebook assigns this information to the personal Facebook user account of the person concerned and stores this personal data.

Facebook receives information via the Facebook plug-in that the user has visited our website whenever the user is logged into their Facebook account at the time they access our website; this happens regardless of whether the person concerned interacts on the Facebook plug-in or not. If the user does not want this information to be transmitted to Facebook, they can prevent it from being transmitted by logging out of their Facebook account before accessing our website.

The data policy published by Facebook, which is available at https://www.facebook.com/about/privacy/ provides information about the collection, processing and use of personal data by Facebook. It also explains what account settings Facebook offers to protect the privacy of users. In addition, various applications are available to restrict the transmission of data to Facebook, for example the Facebook blocker from Webgraph, which is available at http://webgraph.com/resources/facebookblocker/, Such applications can be used to restrict the transmission of data to Facebook.

Use of Twitter plug-ins
The data controller has integrated Twitter plug-ins into this website. Twitter is a multilingual, public, microblogging service on which users can publish and distribute tweets, i.e. short messages limited to 140 characters. These short messages are available to everyone, including people who are not registered users of Twitter. Tweets are also displayed to each users’ followers. Followers are other Twitter users who follow a user’s tweets. Furthermore, Twitter makes it possible to address a broad audience via hashtags, links or retweets.

Twitter is operated by Twitter, Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

Each time a visitor accesses one of the individual pages of this website, which is operated by the data controller and on which a Twitter plug-in (Twitter button) has been integrated, the Internet browser on the user’s device is automatically prompted by the respective Twitter plug-in to download a representation of the corresponding Twitter plug-in from Twitter. Further information on the Twitter buttons can be found at https://about.twitter.com/de/resources/buttons. As part of this technical process, Twitter is informed about which specific subpage of our website a user has visited. The purpose of integrating the Twitter plug-in is to enable our users to disseminate the content of this website, to make this website known in the digital world and to increase our visitor numbers.

If the person concerned is logged into Twitter at the time, Twitter recognises which specific subpages of our website they have visited for the entire duration of the respective stay on our website. This information is collected by the Twitter plug-in and assigned to the user’s specific Twitter account by Twitter. If the person concerned interacts with one of the Twitter buttons integrated into our website, the data and information thus transmitted will be assigned to the user’s personal Twitter account and stored and processed by Twitter.

Twitter receives information via the Twitter plug-in that the user has visited our website whenever the user is logged into their Twitter account at the time they access our website; this happens regardless of whether the person concerned interacts with the Twitter plug-in or not. If the user wishes to block the transmission of this information to Twitter, he or she can prevent its transmission by logging out of his or her Twitter account before accessing our website.

Twitter’s current data protection policy is available at https://twitter.com/privacy?lang=den.

Use of Google+ plug-ins
The data controller has integrated the Google+ button as a plug-in on this website. Google+ is a social network. A social network is an Internet-based social meeting place, an online community that usually enables users to communicate with each other and interact in a virtual environment. A social network can serve as a platform for the exchange of opinions and experiences and enable the Internet community to provide personal or company-related information. Google+ enables users of the social network to create private profiles, upload photos and network via friendship requests, among other things.

Google+ is operated by Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time a visitor accesses one of the individual pages of this website, which is operated by the data controller and on which a Google+ button has been integrated, the Internet browser on the user’s device is automatically prompted by the respective Google+ plug-in to download a representation of the corresponding Google+ plug-in from Google. During this technical procedure, Google is informed about which specific subpage of our website a user has visited. More detailed information about Google+ is available athttps://developers.google.com/+/.

If the person concerned is logged into Google+ at the time, Google recognises which specific subpages of our website they have visited for the entire duration of the respective stay on our website. This information is collected by the Google+ plug-in and assigned to the user’s specific Google+ account by Google.

If the person concerned interacts with one of the Google+ buttons integrated into our website and thereby makes a Google+1 recommendation, Google assigns this information to the personal Google+ user account of the person concerned and stores this personal data. Google stores the user’s Google+1 recommendation and makes it publicly available in accordance with the conditions accepted by the user. A Google+1 recommendation made by the user on this website will subsequently be stored and processed together with other personal data, such as the name of the Google+ account used by the person concerned, and used together with the photo stored in their account in other Google services, such as the search engine results of the Google search engine, the Google account of the person concerned or in other places, such as on websites or in connection with advertisements. Furthermore, Google is able to link the visit to this website with other personal data stored by Google. Google also records this personal information for the purpose of improving or optimising the various services provided by Google.

The Google+ button will always inform Google that the person concerned has visited our website if the person concerned is logged into Google+ at the time they access our website; this happens regardless of whether the person concerned interacts with the Google+ button or not.

If the person concerned does not want his or her personal data to be transmitted to Google, he or she can prevent such transmission by logging out of his or her Google+ account before accessing our website.

Further information and Google’s current privacy policy can be found at https://policies.google.com/privacy. urther information from Google about the Google+1 button can be found at https://developers.google.com/+/web/buttons-policy.

Use of Pinterest plug-ins
The data controller has integrated plug-ins from Pinterest Inc. into this website. Pinterest is a social network. A social network is an Internet-based social meeting place, an online community that usually enables users to communicate with each other and interact in a virtual environment. A social network can serve as a platform for the exchange of opinions and experiences and enable the Internet community to provide personal or company-related information. Pinterest enables users of the social network to publish (pin) image collections and single images as well as descriptions on virtual pinboards, which in turn can be shared (repin) or commented on by other users.

Pinterest Inc. 808 Brannan Street, San Francisco, CA 94103, USA is the operating company of Pinterest.

Each time a visitor accesses one of the individual pages of this website, which is operated by the data controller and on which a Pinterest plug-in has been integrated, the Internet browser on the user’s device is automatically prompted by the respective Pinterest plug-in to download a representation of the corresponding Pinterest plug-in from Pinterest. More information about Pinterest is available at https://pinterest.com/ During this technical procedure, Pinterest is informed about which specific subpage of our website is being visited by the person concerned.

If the person concerned is logged into their Pinterest at the time, Pinterest recognises which specific subpages of our website the person concerned has visited for the entire duration of the respective stay on our website. This information is collected by the Pinterest plug-in and assigned by Pinterest to the user’s Pinterest account. If the user interacts with a Pinterest plug-in on our website, Pinterest assigns this information to the user’s Pinterest account and stores this personal data.

Pinterest receives information via the Pinterest plug-in that the person concerned has visited our website whenever the person concerned is logged into their Pinterest account at the time they access our website, regardless of whether or not the person concerned interacts with the Pinterest plug-in. If the user does not wish to transmit this information to Pinterest, he or she can prevent the transmission by logging out of his or her Pinterest account before accessing our website.

The Pinterest Privacy Policy is available at https://about.pinterest.com/privacy-policy and provides information about Pinterest’s collection, processing and use of personal data.

Google Analytics (with anonymisation function)
The data controller has integrated Google Analytics (with anonymisation function) into this website. Google Analytics is a web analytics service. Web analysis is the collection, compilation and evaluation of data on the behaviour of visitors to Internet sites. A web analytics service collects, among other things, data on the website (the referrer) a user accessed immediately before visiting our website, which subpages of our website the user has accessed and how often and for how long a subpage has been viewed. Web analytics is mainly used to optimise a website and for cost-benefit analysis of Internet advertising.

Google Analytics is operated by Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The data controller uses the suffix “_gat._anonymizeIp” for web analysis via Google Analytics. By means of this addition, Google shortens and anonymises the user’s IP address when he or she accesses our website from a member state of the European Union or other parties to the Agreement on the European Economic Area.

Google Analytics will use this data to analyse the flow of visitors to our website. Google uses the data and information collected to evaluate the use of our website, among other things, to compile online reports for us that show the activities on our website and to provide other services in connection with the use of our website.

Google Analytics places a cookie on the user’s device. Cookies have already been explained above. By creating the cookie, Google is able to analyse your use of our website. Each time a visitor accesses one of the individual pages of this website, which is operated by the data controller and on which a Google Analytics plug-in has been integrated, the user’s browser is automatically prompted by the respective Google Analytics plug-in to transmit data to Google for the purposes of online analysis. During this technical process, personal data, such as the user’s IP address, is transmitted to Google. Google uses this data, among other things, to trace the origin of visitors and clicks and subsequently uses this data to invoice for online advertising.
Cookies are used to store personal information, such as the time our website was accessed, the location from which it was accessed and the frequency of visits to our website by the specific user. Whenever you visit our website, this personal data, including your IP address, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may disclose personal data collected through this technical process to third parties.

You may refuse the use of cookies by our website at any time, as already described above, by using the appropriate settings on your browser and thus permanently refuse the use of cookies. This prevents Google from placing a cookie on your device. In addition, a cookie already set by Google Analytics can be deleted at any time via your Internet browser or other software programs.

Furthermore, you can object to and prevent the collection and processing of data generated by Google Analytics relating to the use of this website by Google by downloading and installing a browser add-on from the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data or information on visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered a withdrawal of consent by Google. If the user deletes, reformats or reinstalls their device’s operating system/browser at a later date, the user must reinstall the browser add-on to disable Google Analytics again. If the browser add-on is uninstalled or deactivated by the user or another person with authorised access to the device, it is possible to reinstall or reactivate the browser add-on.

Further information and Google’s current privacy policy can be found at https://policies.google.com/privacy?hl=en and https://www.google.com/analytics/terms/gb.html. Google Analytics is explained in more detail under this link https://www.google.com/intl/en_en/analytics/.

Deactivating Google Analytics

Using Webfonts
This website uses Google Fonts, a service of Google Inc. (“Google”). Your browser loads these web fonts, usually from a Google server in the USA. Google thus becomes aware of which page of our website you have visited. Google also stores your device’s IP address. Further information can be found in Google’s privacy policy, which you can access here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/

Using Google Maps
This site uses the Google Maps plug-in from Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”.

Each time you access a page with the Google Maps plug-in, Google creates a cookie to process user settings and data. As a rule, this cookie is not deleted when you close your browser, but expires after a certain time, unless you delete it manually before it expires.

If you do not agree to this processing of your data, it is possible to deactivate the Google Maps plug-in and thus prevent the transmission of data to Google. To do this, you must deactivate the JavaScript function in your browser. However, please note that if you do so, your use of Google Maps will be limited or completely blocked.

The use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Use http://www.google.de/intl/de/policies/terms/regional.html and the additional terms and conditions for Google Maps https://www.google.com/intl/en_en/help/terms_maps.html.

Newsletter via MailChimp
In relation to the use of your personal data to receive our newsletter, you will be asked for your consent as follows:

“I have read the privacy policy and agree that my data may be processed by a service provider in the USA.”

This newsletter provides information about our offers at regular intervals. To receive our newsletter, you need a valid email address. We will check the email address you have entered to make sure that you are actually the owner of the email address provided or that the owner is authorised to receive the newsletter. When you subscribe to our newsletter, we will save your IP address and the date and time of your subscription. In the event that a third party misuses your email address and subscribes to our newsletter without your knowledge, this double opt-in serves as a safeguard on our part.

We do not associate the data collected in this way with data that may be collected by other plug-ins integrated into our site.

We use the MailChimp plug-in to send our newsletters. MailChimp is a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA. Your data stored during the newsletter subscription (email address, possibly name, IP address, date and the time of your subscription) will be transmitted to a server of The Rocket Science Group in the United State of America and stored there in compliance with the EU-US Privacy Shield. Further information on data protection at MailChimp can be found at: http://mailchimp.com/legal/privacy/

Further information on the EU-US Privacy Shield can be found at:
https://www.bfdi.bund.de/DE/Europa_International/International/Artikel/EU-US_PrivacyShield_Daten%C3%BCbermittlungenUSA.html?nn=5217040

http://ec.europa.eu/justice/data-protection/international-transfers/eu-us-privacy-shield/index_en.htm

You can cancel or revoke your subscription to this newsletter and your consent to the storage of your data at any time in the future. Details can be found in the confirmation email and in each individual newsletter.

 

Using Social Media Buttons with Shariff
We use the c't project “Shariff” on our website. Shariff replaces the usual share buttons of social networks and thus protects user’s surfing privacy.

Shariff simply integrates all of the share buttons used by the social networks on our website as a graphic containing a link to the corresponding social network. When you interact with the corresponding graphic, you are forwarded to the services of the respective network. The Shariff button establishes a direct link between the social network and visitors to our website only when the visitor actively clicks on the Share button. Only then is your data transmitted to the relevant social network. If you do not interact with the Shariff button, there is no exchange of data between you and the social networks. Further information about the c't project Shariff can be found at http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

Data protection for job applications
We collect and process the personal data of applicants for the purpose of processing their job applications. This processing may also be carried out electronically. This is particularly the case if an applicant submits their application documents to us by electronic means, for example by email or via a web form on our website. If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests on our part override the process of deletion. Other legitimate interests in this sense could be, for example, a burden of proof in proceedings under the General Act on Equal Treatment (AGG).

Rights of the data subject
You have the right:
(1) to obtain information about your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you may obtain information about the purposes of processing; the categories of personal data concerned; the categories of recipients to whom your personal data have been or will be disclosed; the planned retention period; the existence of a right to rectification, erasure, restriction of processing or objection; the existence of a right to lodge a complaint; the origin of your data, where these have not been collected by us; and the existence of automated decision-making including profiling and, if applicable, meaningful information about how these decisions are made;
(2) to immediately obtain the rectification of inaccurate or incomplete personal data stored by us in accordance with Article 16 of the GDPR;
(3) to request the erasure of your personal data stored by us in accordance with Article 17 of the GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
(4) pursuant to Article 18 of the GDPR, to restrict the processing of your personal data if you dispute the accuracy of the data; if the processing is unlawful but you have objected to the erasure of the data; we no longer need the data, but you need it to assert, exercise or defend legal claims; or you have filed an objection to the processing pursuant to Article 21 of the GDPR;
(5) to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format in accordance with Article 20 of the GDPR or to request the transmission to another data controller;
(6) to revoke your consent to us at any time pursuant to Article 7 (3) of the GDPR. As a result, we will no longer be allowed to continue processing data based on this consent in the future and;
(7) to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR. As a rule, you can contact the supervisory authority of your habitual place of residence or work, or our office.

Right to Object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data based on point (e) or (f) of Article 6 (1) of the GDPR, including profiling based on these provisions. The data controller shall no longer processes your personal data, unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such marketing, which includes profiling to the extent that it is related to such direct marketing.

Where you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.

You can exercise your right of objection in connection with the use of information society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.

Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:

(1) is necessary for entering into, or performance of, a contract between you and the data controller,
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights, freedoms and legitimate interests; or
(3) is based on your explicit consent.
However, these decisions may not be based on special categories of personal data referred to in Article 9 (1) of the GDPR, unless Article 9 (2) a) or g) applies and suitable measures to safeguard your rights and freedoms and your legitimate interests are in place.

In the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard your rights, freedoms and legitimate interests, at least the right to obtain human intervention on the part of the data controller, to express his or her point of view and to contest the decision.

As a responsible company, we do not use automatic decision-making or profiling.

Data security
We use the most common SSL (Secure Socket Layer) technology in connection with the highest level of encryption supported by your browser. Usually this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can see whether a page of our website is transmitted in encrypted form from the image of a closed padlock displayed in your browser’s status bar.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Validity and changes to our data protection statement
This data protection statement is currently valid and was last revised in May 2018.

Due to updates to our website and services, or due to changes in legal or official requirements, it may be necessary to amend this data protection statement. You can access and print out the currently valid data protection statement at any time from this page.