PRIVACY POLICY - AUTOSOL

PRIVACY STATEMENT

NOTES ON DATA PROTECTION

Thank you for visiting our homepage autosol.de and thank you for your interest in our company. Data protection has a particularly high priority for the management of Dursol-Fabrik Otto Durst GmbH & Co. KG (hereinafter referred to as "Dursol"). A use of our internet pages is basically possible without any indication of personal data. However, if a data subject wishes to make use of special services provided by our company via our website, it may be necessary to process personal data. If it is necessary to process personal data and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the basic data protection regulation and in compliance with the country-specific data protection regulations applicable to Dursol. By means of this data protection notice we would like to inform you about the type, scope and purpose of the personal data collected, used and processed by us. Furthermore, the data protection notice informs data subjects of their rights.

As the data controller, Dursol has implemented numerous technical and organizational measures to ensure the most complete possible protection of the personal data processed via this website. Nevertheless, Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us by alternative means, for example by telephone.

1 // DEFINITIONS OF TERMS

Dursol's data protection information is based on the terminology used by the European legislator for directives and regulations when the Basic Data Protection Regulation (DSGVO) was issued. Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance. We use the following terms, among others, in this privacy notice:

1.1 // PERSONAL DATA

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, on-line identification, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

1.2 // PERSON CONCERNED

Data subject means any identified or identifiable natural person whose personal data are processed by the controller.

1.3 // PROCESSING

Processing is any operation or set of operations, performed with or without the aid of automated means, which is performed upon personal data, such as collection, recording, organisation, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1.4 // LIMITATION OF PROCESSING

Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.

1.5 // PROFILING

Profiling is any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, conduct, location or change of location of that natural person.

1.6 // PSEUDONYMISATION

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the need for additional information, provided that this additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data is not attributed to an identified or identifiable natural person.

1.7 // PERSON RESPONSIBLE OR IN CHARGE OF THE PROCESSING

Controller or data controller is the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or national law, the controller or the specific criteria for his designation may be provided for by Union or national law.

1.8 // PROCESSORS

Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

1.9 // RECEIVER

The recipient is any natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that person is a third party. However, authorities which may receive personal data in the context of a specific investigation mandate under Union or national law shall not be considered as recipients.

1.10 // THIRD

Third party means any natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorized to process the personal data.

1.11 // CONSENT

Consent shall mean any freely given and informed unequivocal expression of the data subject's wishes in the specific case, in the form of a statement or any other unequivocal affirmative act by which the data subject signifies his or her consent to the processing of personal data relating to him or her.

2 // NAME AND ADDRESS OF THE CONTROLLER AND CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The person responsible within the meaning of the basic data protection regulation, other data protection laws applicable in the member states of the European Union and other regulations of a data protection nature is the:

Dursol Factory Otto Durst GmbH & Co. KG
Martinstrasse 22
42655 Solingen

Phone: +49 (0) 212 2718-0
Fax: +49 (0) 212 20 87 95
Internet: www.autosol.de
E-mail: info@autosol.de

The controller has appointed a data protection officer, who can be contacted as follows:

Dursol Factory Otto Durst GmbH & Co. KG
Data Protection Officer
Stephan Viehoff
Martinstrasse 22
42655 Solingen

Phone: +49 (0) 212 2718-0
Fax: +49 (0) 212 20 87 95
E-Mail: datenschutz@autosol.de

Every person concerned can contact our data protection officer directly at any time with all questions and suggestions regarding data protection.

3 // COLLECTION OF GENERAL DATA AND INFORMATION WHEN VISITING OUR WEBSITE

Our website collects a number of general data and information with every visit by a data subject or automated system. This general data and information is stored in the log files of the server. The following can be recorded

the operating system used by the accessing system and its interface,
the browser types used, including language and version of the browser software,
the website from which an accessing system accesses our website (so-called referrer),
the sub-websites, which are accessed via an accessing system on our website,
the date and time of access to the website (including time zone difference to Universal Time Coordinated (UTC),
the amount of data transmitted in each case,
an Internet Protocol (IP) address,
the Internet service provider of the accessing system
other similar data and information which serve to avert danger in the event of attacks on our information technology systems.

When using this general data and information, Dursol does not draw any conclusions about the person concerned. This information is rather needed to

to deliver the contents of our website correctly,
to optimize the contents of our website and the advertising for it,
to guarantee the permanent functionality of our information technology systems and the technology of our website,
Provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

This anonymously collected data and information is therefore evaluated statistically on the one hand and also with the aim of increasing data protection and data security in our company, in order to ultimately ensure an optimum level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a person concerned.

4 // COOKIES

We use cookies on our website. Cookies are small text files which are stored on your computer system via your Internet browser (e.g. Mozilla Firefox, Microsoft Explorer) when you visit our website and which may be stored there for one session only or for a longer period ("persistent").

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the Internet sites and servers visited to distinguish the individual Internet browser of the person concerned from other Internet browsers that contain other cookies. A particular Internet browser can be recognized and identified by its unique cookie ID.

Durch den Einsatz von Cookies können wir den Nutzern unserer Webseite nutzerfreundlichere Services bereitstellen, die ohne die Cookie-Setzung nicht möglich wären.

Mittels eines Cookies können die Informationen und Angebote auf unserer Webseite im Sinne des Benutzers optimiert werden. Cookies ermöglichen uns, wie bereits erwähnt, die Benutzer unserer Webseite wiederzuerkennen. Zweck dieser Wiedererkennung ist es, den Nutzern die Verwendung unserer Webseite zu erleichtern.

Einige Funktionen unserer Webseite können ohne den Einsatz technisch notwendiger Cookies nicht angeboten werden. Andere Cookies ermöglichen uns hingegen verschiedene Analysen. Mithilfe von Cookies können wir unter anderem unser Internetangebot für Sie nutzerfreundlicher und effektiver gestalten, indem wir etwa Ihre Nutzung unserer Webseite nachvollziehen und Ihre bevorzugten Einstellungen feststellen. Sofern Dritte über Cookies Informationen verarbeiten, erheben diese die Informationen direkt über Ihren Internetbrowser. Cookies richten auf Ihrem Endgerät keinen Schaden an. Sie können keine Programme ausführen und keine Viren enthalten.

Auf unserer Webseite werden verschiedene Cookies verwendet, deren Art und Funktion im Folgenden näher erläutert wird.

Arten eingesetzter Cookies:
Art 1: Session- bzw. Sitzungs-Cookies
Auf unserer Webseite werden Session-Cookies verwendet, die automatisch gelöscht werden, sobald Sie Ihren Internetbrowser schließen. Cookies dieser Art sind technisch notwendig, um Ihnen die Nutzung unserer Webseite zu ermöglichen.

Art 2: Persistent-Cookies bzw. dauerhafte Cookies
Auf unserer Webseite werden zudem Persistent-Cookies eingesetzt. Persistent-Cookies sind Cookies, die, selbst wenn Sie Ihren Internetbrowser schließen, darüber hinaus für einen längeren Zeitraum in Ihrem Internetbrowser bzw. auf Ihrem Computersystem gespeichert werden. Sie werden jedes Mal aktiviert, wenn Sie die Webseite, die den Cookie gesetzt hat, wieder besuchen oder diese in anderer Weise, z.B. von einem Werbenetzwerk, wiedererkannt wird. Die in dem Persistenten-Cookie abgelegten Informationen werden dann an die Webseite oder das Werbenetzwerk übermitteln. Die jeweilige Speicherdauer unterscheidet sich je nach Cookie. Sie können Persistent-Cookies eigenständig über Ihre Browsereinstellungen löschen.

Herkunft Cookies:
Erstanbieter- oder First-Party-Cookies
Erstanbieter-Cookies werden von dem Betreiber der besuchten Webseite selbst gesetzt und können nicht webseitenübergreifend ausgelesen werden.
Drittanbieter- oder Third-Party-Cookies
Ein Drittanbieter-Cookie wird nicht durch den Betreiber der besuchten Webseite gesetzt, sondern durch einen Dritten, der seinen eigenen Cookie über die Webseite des Betreibers setzt. Wir weisen Sie in diesen Datenschutzhinweisen darauf hin, wenn ein Drittanbieter über unsere Webseite ein Cookie setzt.

Funktionen eingesetzter Cookies:
Funktion 1: Erforderliche Cookies
Diese Cookies werden aus technischen Gründen benötigt, damit Sie unsere Webseite besuchen und von uns angebotene Funktionen nutzen können. Dies bezieht sich beispielsweise auf solche Cookies, die sicherstellen, dass eine von Ihnen selbst eingerichtete nutzerbezogene Konfiguration von Funktionalitäten auf unserer Webseite sitzungsübergreifend erhalten bleibt. Außerdem tragen diese Cookies zu einer sicheren und vorschriftsgemäßen Nutzung der Webseite bei.

Funktion 2: Leistungsbezogene Cookies
Mit Hilfe dieser Cookies ist es uns möglich, eine Analyse der Webseitennutzung durchzuführen und die Leistung und Funktionalität unserer Webseite zu verbessern. Es werden etwa Informationen darüber erfasst, wie unsere Webseite von Besuchern genutzt wird, welche Seiten der Webseite am häufigsten aufgerufen werden oder ob auf bestimmten Seiten Fehlermeldungen angezeigt werden.

Funktion 3: Cookies für Marketing:
Werbe-Cookies (dritter Anbieter) ermöglichen es, Ihnen verschiedene Angebote anzuzeigen, die Ihren Interessen entsprechen. Über diese Cookies können die Webaktivitäten der Nutzer über einen längeren Zeitraum hinweg erfasst werden. Die Cookies erkennen Sie möglicherweise auf verschiedenen von Ihnen verwendeten Endgeräten.

Cookies gemäß Funktion 2 und 3 werden nur aktiviert, wenn Sie Ihre Einwilligung hierzu abgegeben haben. Ihre Einwilligung können Sie erteilen, indem Sie aktiv im angezeigten Hinweis auf „Akzeptieren“ klicken (ggf. nach Selektion von einzelnen Cookies oder Gruppen von Cookies, für die Sie die Einwilligung erteilen). Sie können Ihre Einwilligung jederzeit widerrufen, z.B. indem Sie dieses Einwilligungsbanner erneut aufrufen und Ihre Einstellungen ändern. Durch Ihren Widerruf wird die Rechtmäßigkeit der auf Grund der Einwilligung bis zum Widerruf erfolgten Verarbeitung nicht berührt.

Bitte beachten Sie: Sollten Sie von Ihrem Widerrufsrecht gegen die Nutzung eines solchen Cookies Gebrauch machen, wird ein Opt-Out-Cookie in Ihrem Internetbrowser gesetzt, der die weitere Datenerhebung mittels eines Werbe-Cookies durch den Betreiber der Webseite oder einen Drittanbieter blockiert. Sollten Sie dieses Opt-Out-Cookie löschen, wird eine erneute Datenerhebung nicht verhindert. Bitte informieren Sie sich über die Lebensdauer eines Opt-Out-Cookies.

Falls Sie uns auf Grundlage eines von uns auf der Webseite erteilten Hinweises („Cookie-Banner“) Ihre Einwilligung zur Verwendung von Cookies erteilt haben, richtet sich die Rechtmäßigkeit der Verwendung nach Art. 6 Abs. 1 S. 1 lit. a DSGVO. Die Rechtsgrundlage für technisch erforderliche Cookies, also solche, die für die reibungslose Funktionsweise unserer Website erforderlich sind, ist Art. 6 Abs. 1 lit. c DSGVO.

Die meisten Internetbrowser sind so voreingestellt, dass sie Cookies standardmäßig akzeptieren. Sie können Ihren jeweiligen Internetbrowser jedoch so konfigurieren, dass er nur noch bestimmte oder auch gar keine Cookies mehr akzeptiert. Wir weisen Sie jedoch darauf hin, dass Sie möglicherweise dann Funktionen unserer Webseite nicht mehr nutzen können und möglicherweise stattdessen Warn- bzw. Fehlermeldungen erhalten, wenn Cookies durch Ihre Browsereinstellungen auf unserer Webseite deaktiviert werden.

In Ihren Browsereinstellungen können Sie auch bereits in Ihrem Internetbrowser gespeicherte Cookies löschen. Weiterhin ist es möglich, Ihren Internetbrowser so einzustellen, dass er Sie benachrichtigt, bevor Cookies gespeichert werden. Da sich die verschiedenen Internetbrowser in ihren jeweiligen Funktionsweisen unterscheiden können, bitten wir Sie, das jeweilige Hilfe-Menü Ihres Internetbrowsers für die Konfigurationsmöglichkeiten in Anspruch zu nehmen. Hinweise zu den gebräuchlichsten Internetbrowsern finden Sie hier:

Google Chrome: https://support.google.com/chrome/answer/95647?hl=de
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen?redirectlocale=deedirectslug=cookies-loeschen-daten-von-websites-entfernen
Apple Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Microsoft Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

If you want a comprehensive overview of all third-party accesses to your Internet browser, we recommend the installation of specially developed plug-ins for this purpose.

We recommend that you always log off completely after you have finished using a terminal device that you share with other people and whose Internet browser is set to allow cookies.

5 // CONTACT

You have the possibility to contact us by post, telephone, fax or e-mail. If you contact us by post, we can process in particular your address data (e.g. surname, first name, street, place of residence, postcode), date and time of receipt of the mail as well as those data which result from your letter itself. If a contact is established, a secretarial service may also process your data and transfer them to us following your contact. Depending on the data you enter here, we will then contact you again either by phone, fax or e-mail and call you back or write to you if necessary. If you contact us by telephone, we will process in particular your telephone number and, if necessary, during the conversation, your name, your e-mail address, the time of the call and details of your request. If you contact us by fax, the fax number or the sender identification as well as the data resulting from the fax will be processed. When you contact us by e-mail, your e-mail address, the time of the e-mail and the data resulting from the message text (and attachments if applicable) are processed. The purpose of processing the above-mentioned data is to process your contact request and to be able to get in touch with you in order to answer your request. The legal basis for the processing of personal data described here is Art. 6 para. 1 lit. f DSGVO. It is our legitimate interest to offer you the opportunity to contact us at any time and to be able to answer your questions. The personal data will only be processed as long as it is necessary for the processing of the contact request.

5 // DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING

Pursuant to Art. 6 Para. 1 lit. b DSGVO, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. A deletion of your customer account is possible at any time and can take place by a message to the above address of the responsible person. We store and use the data provided by you for contract processing. After complete completion of the contract or deletion of your customer account, your data will be blocked with regard to legal retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data was reserved by our side, about which we inform you below accordingly.

6 // REGISTRATION ON OUR WEBSITE

You have the possibility to register on our website by providing personal data. Which personal data is transmitted to us in this process is determined by the respective input mask used for registration. The personal data entered by you will be collected and stored exclusively for our internal use and for our own purposes. We may arrange for the transfer to one or more processors, such as a parcel service provider, who will also use the personal data exclusively for an internal use attributable to us. When you register on our website, the IP address assigned by your internet service provider (ISP), the date and time of registration are also saved. The storage of this data takes place against the background that this is the only way to prevent the misuse of our services and, if necessary, to enable the clarification of criminal offences committed. In this respect, the storage of this data is necessary for our protection. This data will not be passed on to third parties unless there is a legal obligation to do so or the passing on of the data serves criminal prosecution. Your registration, voluntarily providing us with personal data, enables us to offer you content or services which, by their very nature, can only be offered to registered users. Registered persons are free to change the personal data provided during registration at any time or to have them completely deleted from the database. We will provide every person concerned with information at any time on request about what personal data about you is stored. Furthermore, we will correct or delete personal data upon request or your notification, provided that this does not conflict with any statutory retention obligations. All our employees are available to you as contact persons in this context.

7 // USE OF OUR WEBSHOP

If you want to order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. Mandatory information necessary for the processing of contracts is marked separately, further information is voluntary. We process the data provided by you to process your order. For this purpose, we may pass on your payment data to our house bank or a payment service provider used. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b DSGVO. We may also process the data you provide in order to inform you about other interesting products from our portfolio or to send you e-mails with technical information. We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, after two years, we will restrict processing, i.e. your data will only be used to comply with legal obligations. To prevent unauthorised access to your personal data by third parties, especially financial data, the ordering process is encrypted using TLS technology.

8 // USE OF DATA WHEN REGISTERING FOR THE E-MAIL NEWSLETTER

On the Dursol website, users are given the opportunity to subscribe to our company newsletter. Which personal data is transmitted to us when ordering the newsletter is determined by the input mask used for this purpose. Dursol informs its customers and business partners at regular intervals by means of a newsletter about offers from the company. The newsletter of our company can only be received by the person concerned if (1)the data subject has a valid e-mail address; and (2)the person concerned registers for the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address first entered by a person concerned for the newsletter dispatch using the double opt-in procedure. This confirmation e-mail is used to check whether the owner of the e-mail address, as the person concerned, has authorised the receipt of the newsletter. When registering for the newsletter, we also save the IP address assigned by the Internet Service Provider (ISP) of the computer system used by the person concerned at the time of registration, as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of a data subject's e-mail address at a later date and therefore serves to provide legal protection for the data controller. The personal data collected during registration for the newsletter is used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or for registration, as could be the case if there are changes to the newsletter offer or if technical conditions change. Personal data collected within the scope of the newsletter service will not be passed on to third parties. The subscription to our newsletter can be cancelled by the person concerned at any time. The consent to the storage of personal data, which the person concerned has given us for the newsletter dispatch, can be revoked at any time. For the purpose of revocation of consent, a corresponding link is included in every newsletter. Furthermore, it is also possible at any time to unsubscribe from the newsletter directly on our website or to inform us of this in another way.

9 // NEWSLETTER TRACKING

Dursol's newsletters contain so-called counting pixels. A tracking pixel is a thumbnail image embedded in e-mails sent in HTML format to allow log file recording and analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Using the embedded pixel-code, Dursol can recognize whether and when an e-mail was opened by a person concerned and which links in the e-mail were called up by the person concerned. Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by us in order to optimise the newsletter dispatch and to adapt the content of future newsletters even better to the interests of the person concerned. These personal data will not be passed on to third parties. Affected persons are entitled to revoke the separate declaration of consent submitted via the double opt-in procedure at any time. After a revocation these personal data will be deleted by us. Dursol automatically interprets a cancellation of receipt of the newsletter as a revocation.

10 // CONTACT POSSIBILITY VIA THE WEBSITE

Due to legal regulations, the Dursol company website contains information that enables rapid electronic contact with our company and direct communication with us, which also includes a general address for so-called electronic mail (e-mail address). If you contact us by e-mail or via a contact form, the personal data you have submitted will be stored automatically. Such personal data that you voluntarily provide to us will be stored for the purpose of processing or contacting you. This personal data will not be passed on to third parties.

11 // ROUTINE DELETION AND BLOCKING OF PERSONAL DATA

We process and store your personal data only for the period of time required to achieve the purpose of storage or if this is provided for by the European Directives and Regulations or other legislation in laws or regulations to which we are subject. If the purpose of storage ceases to apply or if a storage period prescribed by the European Directive and Regulation Giver or another competent legislator expires, the personal data will be blocked or deleted as a matter of routine and in accordance with the statutory provisions.

12 // RIGHTS OF THE PERSON CONCERNED

12.1 // RIGHT TO CONFIRMATION

Every data subject has the right, granted by the European Directive and Regulation, to obtain from the controller confirmation as to whether personal data relating to him or her are being processed. If a data subject wishes to exercise this right of confirmation, he or she may at any time contact an employee of the controller.

12.2 // RIGHT TO INFORMATION

Any person affected by the processing of personal data has the right, granted by the European Directives and Regulations, to obtain at any time and free of charge from the data controller information on personal data relating to him/her and a copy thereof. Furthermore, the European Directive and Regulation maker has granted the data subject access to the following information:

the processing purposes
the categories of personal data processed
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular to recipients in third countries or international organisations
if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
the existence of a right of rectification or erasure of personal data relating to him or her or of a restriction on processing by the controller or a right to object to such processing
the existence of a right of appeal to a supervisory authority
if the personal data are not collected from the data subject: All available information about the origin of the data
the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) DSGVO and - at least in these cases - meaningful information on the logic involved and the scope and intended consequences of such processing for the data subject.

The data subject shall also have the right to obtain information as to whether personal data have been transferred to a third country or to an international organisation. If this is the case, the data subject shall also have the right to obtain information on the appropriate guarantees in connection with the transfer. If a data subject wishes to exercise this right of access, he or she may at any time contact an employee of the controller.

12.3 // RIGHT TO CORRECTION

Any person affected by the processing of personal data has the right, granted by the European legislator, to request the rectification without delay of inaccurate personal data concerning him. Furthermore, the data subject shall have the right to obtain the completion of incomplete personal data, including by means of a supplementary declaration, having regard to the purposes of the processing. If a data subject wishes to exercise this right of rectification, he or she may at any time contact a member of staff of the controller.

12.4 // RIGHT TO DELETION (RIGHT TO BE FORGOTTEN)

Any person affected by the processing of personal data has the right, granted by the European Directives and Regulations, to obtain from the controller the immediate erasure of personal data relating to him/her, if one of the following reasons applies and provided that the processing is not necessary:

The personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
The data subject withdraws the consent on which the processing was based pursuant to Article 6(1)(a) DPA or Article 9(2)(a) DPA and there is no other legal basis for the processing.
The data subject lodges an objection to the processing pursuant to Article 21(1) DPA and there are no overriding legitimate reasons for processing, or the data subject lodges an objection to the processing pursuant to Article 21(2) DPA.
The personal data were processed unlawfully.
The deletion of personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
The personal data was collected in relation to information society services offered in accordance with Art. 8 Paragraph 1 of the DSGVO.

If one of the above reasons applies and a data subject wishes to request the deletion of personal data stored by Dursol, he or she can contact an employee of the data controller at any time. The employee of Dursol will ensure that the request for deletion is complied with immediately. If the personal data has been made public by Dursol and our company, as the responsible party, is obliged to delete the personal data in accordance with Art. 17 para. 1 DSGVO, Dursol will take reasonable measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data that the data subject has requested these other data controllers to delete all links to these personal data or copies or replications of these personal data, unless the processing is necessary. The Dursol employee will make the necessary arrangements in individual cases.

12.5 // RIGHT TO LIMITATION OF PROCESSING

Any person affected by the processing of personal data has the right, granted by the European Directives and Regulations, to obtain from the controller the restriction of processing if one of the following conditions is met:

The accuracy of the personal data is contested by the data subject, for a period of time that allows the controller to verify the accuracy of the personal data.
The processing is unlawful, the data subject refuses to have the personal data deleted and instead requests that the use of the personal data be restricted.
The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the purpose of asserting, exercising or defending legal claims.
The data subject has lodged an objection to the processing pursuant to Art. 21 para. 1 DPA and it is not yet clear whether the legitimate reasons of the controller outweigh those of the data subject.

If one of the above-mentioned conditions is met and a data subject wishes to request the restriction of personal data stored by Dursol, he/she may contact an employee of the data controller at any time. The employee of Dursol will arrange for the restriction of processing.

12.6 // RIGHT TO DATA TRANSFERABILITY

Any person affected by the processing of personal data has the right, granted by the European Directives and Regulations, to receive the personal data concerning him/her which have been made available to a controller by the data subject in a structured, common and machine-readable format. It shall also have the right to transfer such data to another controller without hindrance from the controller to whom the personal data have been made available, provided that the processing is based on the consent pursuant to Art. 6, paragraph 1, letter a DPA or Art. 9, paragraph 2, letter a DPA or on a contract pursuant to Art. 6, paragraph 1, letter b DPA and the processing is carried out by means of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, in exercising their right to data transfer, the data subject has the right, in accordance with Art. 20, para. 1 of the DPA, to obtain that personal data be transferred directly from one responsible party to another, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons. In order to assert the right to data transferability, the person concerned can contact an employee of Dursol at any time.

12.7 // RIGHT TO OBJECT

Every person concerned by the processing of personal data has the right, granted by the European legislator, to object at any time, for reasons arising from his or her particular situation, to the processing of personal data concerning him or her carried out pursuant to Article 6(1)(e) or (f) of the DPA. This also applies to profiling based on these provisions. In the event of an objection, Dursol no longer processes personal data unless we can prove compelling reasons for processing worthy of protection that outweigh the interests, rights and freedoms of the person concerned, or the processing serves to assert, exercise or defend legal claims. If Dursol processes personal data for the purpose of direct marketing, the data subject has the right to object at any time to the processing of personal data for the purpose of such marketing. This also applies to profiling, insofar as it is associated with such direct mail. If the data subject objects to Dursol processing for direct marketing purposes, Dursol will no longer process the personal data for these purposes. Furthermore, the data subject has the right to object, for reasons arising from his or her particular situation, to the processing of personal data concerning him or her carried out at Dursol for the purposes of scientific or historical research or for statistical purposes, in accordance with Art. 89, paragraph 1, DPA, unless such processing is necessary for the performance of a task carried out in the public interest. In order to exercise the right of objection, the person concerned may directly contact any employee of Dursol or any other employee. The data subject shall also be free to exercise his right of objection in relation to the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures involving technical specifications.

12.8 // AUTOMATED DECISIONS IN INDIVIDUAL CASES INCLUDING PROFILING

Any person concerned by the processing of personal data shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly affects him or her in a similar way, granted by the European legislator, provided that the decision

is not necessary for the conclusion or performance of a contract between the data subject and the controller, or
is authorised by Union or national legislation to which the controller is subject and that legislation provides for adequate measures to safeguard the rights and freedoms and legitimate interests of the data subject, or
with the express consent of the data subject.

Is the decision

necessary for the conclusion or performance of a contract between the data subject and the controller, or
it is carried out with the express consent of the data subject,

Dursol shall take reasonable measures to safeguard the rights and freedoms and the legitimate interests of the data subject, which shall include at least the right to obtain the intervention of the person responsible, to express his or her point of view and to contest the decision. If the data subject wishes to exercise rights relating to automated decisions, he or she may at any time contact a member of staff of the controller.

12.9 // RIGHT TO REVOKE DATA PROTECTION CONSENT

Every person affected by the processing of personal data has the right, granted by the European Directive and Regulation Giver, to revoke his or her consent to the processing of personal data at any time.

If the data subject wishes to exercise his or her right to withdraw consent, he or she may at any time contact an employee of the controller.

12.10 // RIGHT OF APPEAL TO A SUPERVISORY AUTHORITY

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are domiciled, your place of work or the place where the alleged infringement occurred, if you consider that the processing of personal data relating to you is in breach of the DPA.

The supervisory authority to which the complaint was filed shall inform the complainant of the status and the results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 DSGVO.

Contact details of the competent supervisory authority:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Helga Block
P.O. Box 20 04 44
40102 Düsseldorf

Cavalry Lane 2-4
40213 Düsseldorf

Phone: 02 11/384 24-0
Fax: 02 11/384 24-10
E-mail: poststelle@ldi.nrw.de
Homepage: http://www.ldi.nrw.de

13 // DATA PROTECTION IN APPLICATIONS AND IN THE APPLICATION PROCESS

We collect and process the personal data of applicants for the purpose of processing the application procedure. The processing may also be carried out by electronic means. This is particularly the case if an applicant submits the relevant application documents to us electronically, for example by e-mail or via a web form on the website. If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents are automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests on our part conflict with a deletion. Other legitimate interests in this sense include, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

14 // INFORMATION ON GOOGLE SERVICES

We use on our website various services provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. You will find more detailed information on the individual concrete services of Google, which we use on this website, in the further course of this data protection notice. By integrating Google services, Google may collect information (including personal data) and process it. It cannot be excluded that Google may also transfer the information to a server in a third country. As can be seen from Google's Privacy Shield certification (which can be found at https://www.privacyshield.gov/list with the search term "Google"; see also https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI), Google has committed itself to comply with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework on the collection, use and storage of personal data from the member states of the EU and Switzerland respectively. Google (including Google LLC and its wholly owned subsidiaries in the U.S.) has declared through this certification that it complies with the Privacy Shield Principles. For further information, please visit https://www.google.de/policies/privacy/frameworks/. We ourselves cannot influence which data Google actually collects and processes. However, Google states that the following information (including personal data) can be processed among others:

Protocol data (especially IP address)
Location-related information
Unique application numbers
Cookies and similar technologies

If you are signed in to your Google Account, Google may add the processed information to your account and treat it as personal information, depending on your account settings. Further information on this can be found at https://www.google.de/policies/privacy/partners. Google makes the following statements, among others, in this regard: "We may combine personal information from one service with information and personal information from other Google services. This makes it easier for you to share content with friends and acquaintances, for example. Depending on your account settings, your activities on other websites and apps may be linked to your personal information to improve Google's services and the advertising Google displays. (https://www.google.com/intl/de/policies/privacy/index.html) You can prevent this information from being added directly by signing out of your Google Account, or by changing the appropriate account settings in your Google Account. Furthermore, you can change your cookie settings (e.g. delete cookies, block cookies, etc.). You can find more information in Google's privacy policy, which you can download here: https://www.google.com/policies/privacy/. You can find information about Google's privacy settings at https://privacy.google.com/take-control.html. The provision of personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, the non-availability of this website may mean that you are unable to use some of the functions of our website or cannot use them to their full extent.

15 // APPLICATION AND USE OF GOOGLE ANALYTICS FOR WEB ANALYSIS

We have integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analysis service. Web analysis is the collection, compilation and evaluation of data about the behaviour of visitors to websites. A web analysis service collects, among other things, data about the website from which a data subject came to a website (so-called referrer), which sub-pages of the website were accessed or how often and for how long a sub-page was viewed. A web analysis is mainly used for the optimization of a website and for the cost-benefit analysis of internet advertising.

The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.
We use Google Analytics only with activated IP anonymization ("anonymize IP"). By means of this add-on, the IP address of your internet connection is shortened and anonymised by Google if access to our internet pages takes place from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website, and to provide other services related to the use of our website.
Legal basis for the processing of your data is your consent according to Art. 6 para. 1 p. 1 lit. a DSGVO.

Google Analytics sets a cookie on your system. By setting the cookie, Google is enabled to analyse the use of our website. Each time you call up one of the individual pages of this website that is operated by us and on which a Google Analytics component has been integrated, the Internet browser on your system is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. Within the scope of this technical procedure, Google obtains knowledge of personal data, such as your IP address, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission settlements.

By means of the cookie, personal information, for example the access time, the location from which an access originated and the frequency of visits to our website by you, is stored. Each time you visit our website, this personal data, including the IP address of your internet connection, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

You can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on your system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, you have the option to object to the collection of data generated by Google Analytics and related to the use of this website as well as the processing of this data by Google and to prevent such processing. To do this, you must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout. This browser add-on tells Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as an objection. If your system is deleted, formatted or reinstalled at a later date, you must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by you or another person within your control, you have the option of reinstalling or reactivating the browser add-on.

Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/.

REVOCATION OF YOUR CONSENT

We use Google Analytics exclusively with your consent. You can revoke your consent by
- preventing the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of our website to their full extent;
- downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de
- removing the consent from Google Analytics in the consent tool to prevent the collection of data by Google Analytics on our website in the future. This will place an opt-out cookie in your browser. Please note that you must activate the opt-out cookie in each browser you use on all of your end devices and also reactivate it if necessary once you delete all cookies in a browser.

Note on data transfer to the USA: The service provider has its headquarters in the USA. In its ruling of 16.07.2020, the ECJ declared the agreement on the so-called EU-US Privacy Shield invalid (C-311/18).

We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.

16 // APPLICATION AND USE OF THE GOOGLE MARKETING PLATFORM (FORMERLY GOOGLE DOUBLECLICK/GOOGLE AD MANAGER) FOR ANALYSIS AND ADVERTISING

We use the "Google Marketing Platform" to place ads in the Google advertising network (e.g. in search results, in videos, on web pages, etc.).

The Google Marketing Platform is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://marketingplatform.google.com. To ensure the level of data protection when processing data in the USA, Google has subjected itself to the conditions of the Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAItatus=Active.

The Google Marketing Platform is characterized by the fact that ads are displayed in real time based on presumed interests of the users. This allows us to display ads for and within our online offering in a more targeted manner in order to present users only with ads that potentially match their interests. For example, if a user is shown advertisements for products in which he or she is interested on other online offers, this is referred to as "remarketing".

According to Google, the cookies used do not contain any personal information. However, a cookie may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns with which the user has already been in contact.

The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO.

REVOCATION OF YOUR CONSENT

We use the Google Marketing Platform exclusively with your consent. You can revoke your consent once you have given it by

prevent the storage of cookies by means of a corresponding setting in your browser software; however, we would like to point out that in this case you may not be able to use all functions of our website to their full extent;
Disable your consent via our consent tool;
Block cookies from the domain www.googleadservices.com (https://www.google.de/settings/ads), although this setting will be deleted if you delete your cookies.

Further information and Google's applicable privacy policy can be found at https://www.google.com/intl/de/policies/.

17 // USE AND APPLICATION OF FACEBOOK CUSTOM AUDIENCES INCL. FACEBOOK PIXEL

This website uses the remarketing function "Custom Audiences" of Facebook Inc. ("Facebook"). This allows users of the website to be shown interest-based advertisements ("Facebook ads") when visiting the social network Facebook or other websites that also use this procedure. In this way, we pursue the interest of showing you advertising that is of interest to you in order to make our website more interesting for you. Your express consent is required for this.

The operator of Facebook Custom Audiences is Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland; the parent company is Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding web page of our website or clicked on an ad of ours. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features.

With the help of the Facebook pixel, it is possible for Facebook to determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain that we transmit to Facebook ("Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect. With the help of the Facebook Pixel, we can further track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

Furthermore, when using the Facebook Pixel, we use the additional function "extended matching" (data such as telephone numbers, email addresses or Facebook IDs of the users) to create target groups ("Custom Audiences" or "Look Alike Audiences") transmitted to Facebook (encrypted). Further information on "advanced matching" can be found at https://www.facebook.com/business/help/611774685654668.
The legal basis for the processing of your data is your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO.

Revocation of your consent
We use Facebook Custom Audiences exclusively with your consent. You can revoke your consent once you have given it by
- preventing the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent;
- deactivating your consent via our consent tool;
- deactivating the "Facebook Custom Audiences" function as a logged-in user at https://www.facebook.com/settings/?tab=ads#_.

For more information on data processing by Facebook, please visit https://www.facebook.com/about/privacy.

18 // INTEGRATION OF YOUTUBE VIDEOS

We have integrated components from YouTube on this website. YouTube is an Internet video portal that allows video publishers to post video clips for free and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes, but also music videos, trailers or videos created by users themselves can be accessed via the Internet portal. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland. Each time you call up one of the individual pages of this website, which is operated by us and on which a YouTube component (YouTube video) has been integrated, the Internet browser on your system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. In the course of this technical process, YouTube and Google are informed which specific subpage of our website you are visiting. If you are logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website you are visiting by calling up a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to your YouTube account. YouTube and Google will receive information through the YouTube component that you have visited our website whenever you are logged in to YouTube at the same time you access our website, whether or not you click on a YouTube video. If you do not want this information to be transmitted to YouTube and Google, you can prevent the transmission by logging out of your YouTube account before you access our website. The privacy policy published by YouTube, which is available at https://www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.

19 // USE AND APPLICATION OF THE CREDIT CARD PAYMENT METHOD VIA SIX PAYMENT SERVICES

We have integrated components from SIX Payment Services on this website. SIX Payment Services is an online payment service provider that processes credit card payments on our behalf when a user selects an appropriate payment method. The German operating company is SIX Payment Services (Europe) S.A., Branch Office Germany, Theodor-Heuss-Allee 108, 60486 Frankfurt am Main. All data required for processing the respective payment will be passed on by us to SIX Payment Services. The SIX Payment Services data protection information can be found at https://www.six-payment-services.com/de/services/legal/privacy-statement.html.

20 // USE AND APPLICATION OF THE PAYPAL PAYMENT METHOD

We have integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which are virtual private or business accounts. In addition, PayPal offers the possibility of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed through an email address, which is why there is no classic account number. PayPal allows you to initiate online payments to third parties or to receive payments. PayPal also assumes trustee functions and offers buyer protection services. The European operating company of PayPal is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg. If you select "PayPal" as payment option during the ordering process in our online shop, your data is automatically transmitted to PayPal. By selecting this payment option, you agree to the transmission of personal data required for payment processing. The personal information submitted to PayPal is usually first name, last name, address, email address, IP address, phone number, mobile phone number or other information necessary to process payments. For the processing of the sales contract, personal data are also necessary, which are in connection with the respective order. The purpose of the transmission of data is to process payments and prevent fraud. We will transmit personal data to PayPal in particular if there is a legitimate interest for the transmission. The personal information exchanged between PayPal and us may be transferred by PayPal to credit reporting agencies. The purpose of this transmission is to check identity and creditworthiness. PayPal may share personal information with affiliates and service providers or subcontractors as necessary to fulfill contractual obligations or to process the data on behalf of PayPal. You have the possibility to revoke your consent to PayPal to handle personal data at any time. A revocation does not affect personal data that must be processed, used or transmitted for the (contractual) handling of payments. PayPal's applicable privacy policy can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

21 // LEGAL BASIS OF PROCESSING

Art. 6 para. 1 lit. a DSGVO serves our company as a legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, such as processing operations necessary for the supply of goods or any other service or consideration, the processing is based on Article 6 paragraph 1 letter b DPA. The same applies to such processing operations which are necessary to carry out pre-contractual measures, for example in cases of enquiries about our products or services. If our company is subject to a legal obligation which makes it necessary to process personal data, for example to fulfil tax obligations, the processing is based on Art. 6 Para. 1 lit. c DSGVO. Ultimately, processing operations could be based on Art. 6 (1) lit. f DSGVO. Processing operations not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or of a third party, unless the interests, fundamental rights and freedoms of the data subject prevail. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator. In this respect, he took the view that a legitimate interest could be assumed if the data subject is a customer of the person responsible (recital 47 sentence 2 DSGVO). If the processing of personal data is based on Article 6 I lit. f DSGVO, our legitimate interest is the efficient performance of our business activities for the benefit of the well-being of our employees and our shareholders.

22 // STORAGE PERIOD OF PERSONAL DATA

The criterion for the duration of storage of personal data is the respective legal retention period. After the expiry of this period, the corresponding data is routinely deleted if it is no longer required for the fulfilment or initiation of the contract. Otherwise, specific criteria for the retention period are set out in the individual sections of this privacy statement.

23 // UPDATE/DELETION OF YOUR PERSONAL DATA

You may review, change or delete the personal information provided to us at any time by sending an email to datenschutz@autosol.de. In this way you can also exclude the receipt of further information for the future. Likewise, you have the right to revoke any consent you have given at any time with effect for the future. The deletion of the stored personal data is carried out if you revoke your consent for storage. We process and store your personal data only for the period of time required to achieve the purpose of storage, or if required by the European Directives and Regulations or other legislation in laws or regulations to which we are subject. If the purpose of storage ceases to apply or if a storage period prescribed by the European Directive and Regulation Giver or another competent legislator expires, the personal data will be blocked or deleted as a matter of routine and in accordance with the statutory provisions.

24 // LEGAL OR CONTRACTUAL REQUIREMENTS FOR THE PROVISION OF PERSONAL DATA

We would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual regulations (e.g. information on the contractual partner). Sometimes it may be necessary for the conclusion of a contract that a data subject provides us with personal data, which must subsequently be processed by us. For example, the person concerned is obliged to provide us with personal data if our company concludes a contract with him/her. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before the data subject provides personal data, the data subject must contact one of our employees. Our employee will inform the person concerned on a case-by-case basis whether the provision of the personal data is required by law or contract or necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences would be if the personal data were not provided.

25 // EXISTENCE OF AUTOMATED DECISION-MAKING

As a responsible company, we avoid automatic decision making or profiling.

26 // ANNOUNCEMENT OF CHANGES

Changes in the law or changes in our internal processes may make it necessary to adapt this data protection notice.

In the event of such a change, we will inform you of this at least six weeks before it takes effect. You are generally entitled to a right of revocation with regard to the consents you have given.

Please note that (unless you make use of your right of withdrawal) the current version of the data protection information is the valid one.

Note: This data protection notice was created using various sources, including the links provided here. Current case law as well as interpretations and comments have been taken into account to the extent known to us.

Status: 25.03.2021