Privacy information
Overview
|
2. Name and address of the company 3. Name and address of the data protection officer 4. General information about data processing on our website 5. Rights of the person concerned |
1. This privacy information
informs you as a visitor to our website about the nature, scope and purpose of the personal data collected, used and processed by us. Furthermore, you will be informed about the rights to which they are entitled.
CURSOR Service Distribution is a division of CURSOR Software AG. In accordance with the different business areas, CURSOR Software AG has published various pages on the Internet (different domains). The Internet pages of CURSOR Software AG differ in the type of content and in the type of services offered. The collection and processing of personal data may therefore vary from website to website.
In the following, we use the abbreviation CURSOR for CURSOR Software AG as the responsible company, as stated under point 2. The use of the abbreviation CURSOR does not represent a generalization of this data protection statement in relation to other Internet pages of CURSOR Software AG and its subsidiaries.
This data privacy information applies to visitors to the website of CURSOR Service Distribution (hereinafter the website) with the domains "www.cursor-distribution.de" and "www.admin-scout.com".
The use of our website is generally possible without the disclosure of any personal data. If you wish to make use of special services of our company via our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no statutory requirement for such processing, we will generally obtain your consent.
The processing of personal data, such as name, address, e-mail address or telephone number, is always carried out in accordance with the basic data protection regulation and in accordance with the country-specific data protection regulations applicable to CURSOR.
As the company responsible for processing, CURSOR has implemented technical and organizational measures to ensure the most complete possible protection of personal data processed via this website. Nevertheless, internet-based data transmissions can have security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us by alternative means, for example by telephone.
2. Name and Address of the controller
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:
CURSOR Software AG
Friedrich-List-Strasse 31
35398 Giessen
Germany
Tel.: 0049 641 40 000 0
E-Mail:
Website: www.cursor.de
3. Name and Address of the Data Protection Officer
The Data Protection Officer of the controller is:
BerIsDa GmbH
Rangstraße 9
36037 Fulda
Germany
Tel.: 0049 661 29 69 80 90
E-Mail:
Website: www.berisda.de
Any data subject may, at any time, contact our Data Protection Officer directly with all questions and suggestions concerning data protection.
4. General information about data processing
4.1 Scope of the processing of personal data
The responsible party collects and uses personal data of its users (hereinafter also referred to as "data subject" or "visitor") only to the extent necessary for the provision of a functional website and for the presentation of the contents and services. The collection and processing of personal data of users for other purposes is regularly only carried out with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons, the processing is based on pre-contractual or contractual measures and the processing of the data is permitted by law.
4.2. Legal basis for the processing of personal data
In so far as the controller obtains the consent of the data subject for processing operations involving personal data, Art. 6 para. 1 p. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data. For any transfer to a non-secure third country, the processing is based on Art. 49 para. 1 p. 1 lit. a GDPR.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 p. 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
If processing of personal data is necessary for compliance with a legal obligation to which the controller is subject, Art. 6 para. 1 p. 1 lit. c GDPR serves as the legal basis.
In the case that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 para. 1 p. 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of the controller or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 para. 1 p. 1 lit. f GDPR serves as the legal basis for the processing.
4.3. Data deletion and duration of storage
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply or consent given is revoked by the data subject. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the responsible party is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
5. Rights of the data subject
When we process personal data from you, you have the following rights as a data subject against us as the controller:
5.1. Right of information, Art. 15 GDPR
You have the right to (free) information about your collected and stored personal data at any time within the framework of the applicable legal provisions. This includes, among other things, information about their processing purposes, their origin and recipients, the storage period and the existence of various rights.
5.2. Right to rectification, Art. 16 GDPR
You have a right of rectification and/or completion vis-à-vis the controller, insofar as the personal data processed concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.
5.3. Right to deletion, Art. 17 GDPR
You may request the deletion of your personal data at any time under the conditions of Art. 17 of the GDPR, unless exceptions (such as statutory retention obligations) still apply that entitle the controller to continue processing your personal data.
5.4. Right to restrict processing, Art. 18 GDPR
You have the right, within the framework of the requirements of Art. 18 GDPR, to request a restriction of the processing of data concerning you. A requirement of Art. 18 para. 1 GDPR must be met.
5.5. Right to be informed, Art. 19 GDPR
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right against the controller to be informed about these recipients.
5.6. Right to data portability, Art. 20 GDPR
If processing takes place on the basis of your consent or on the basis of a contract and with the aid of automated processes, you have a right to the transfer of the data provided by you within the scope of Art. 20 GDPR, provided that the rights and freedoms of other persons are not thereby impaired. The provision shall take place in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically possible.
5.7. Right of objection, Art. 21 GDPR
You have the right to object to the processing of your data at any time, provided that the processing is carried out on the basis of a balancing of interests. This is the case if the controller relies on the public interest or its legitimate interest for processing (see Art. 6 para. 1 sentence 1 lit. e and f). The prerequisite is that you assert reasons arising from your particular situation which outweigh the interests of the controller. The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Art. 21 para. 2 GDPR contains a special, deviating regulation if the personal data concerning you is used for direct marketing. In this case, you have the right to object to the processing of your personal data at any time without further requirements. The personal data concerning you will no longer be processed for the purpose of direct marketing. If profiling is associated with direct advertising, you can also object to this.
In connection with the use of information society services, you have the option of exercising your right to object by means of automated procedures that use technical specifications.
5.8. Automated decision in individual cases, Art. 22 GDPR
In accordance with Art. 22 GDPR, you have the right that decisions which produce legal effects concerning you or similarly affect you are not based solely on automated processing, including profiling. Exceptions may exist if appropriate measures for the protection of your person are guaranteed and there are necessary contractual regulations or a legal provision or you have expressly consented.
This does not apply if the decision
(1) is necessary for the conclusion or performance of a contract between you and the controller,
(2) is permitted by legislation of the Union or the Member States to which the controller is subject and that legislation contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or
(3) is given with your explicit consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 of the GDPR, unless Art. 9 para. 2 lit. a or lit. g applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests. With regard to the cases mentioned in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms as well as your legitimate interests, which include, at a minimum, the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.
5.9. Right to withdraw your consent, Art. 7 para. 3 GDPR
You have the right to revoke your declaration of consent under data protection law at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation. You can send the revocation by e-mail or by mail to the person responsible.
5.10. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
If you are in another federal state or not in Germany, you can also contact the data protection authority there. The supervisory authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information.
6. SSL-Encryption
6.1 Use of SSL encryption
This website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as requests that you as the data subject send to us as the site operator. An encrypted connection can be recognized by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in the browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
7. External hosting
7.1. Description and scope of data processing
This website is hosted by an external service provider (hoster). The personal data collected on this website are stored on the servers of the hoster. This may include IP addresses, contact requests, meta and communication data, contract data, contact information, names, page views and other data generated by a website.
7.2. Legal basis for the processing of data
The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR for the provision of the website.
7.3. Purpose of data processing
The hoster is used for the purpose of a secure, fast and efficient provision of our online offer as well as the reliable presentation and provision of our website by a professional provider. Our legitimate interest lies in these purposes.
7.4 Duration of storage, possibility of objection and elimination
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.
7.5. Conclusion of a contract for order processing
In connection with the data processing described above, a transfer and processing of the data is carried out by our external hoster:
Host Europe GmbH
Hansestr. 111
51149 Köln
We have concluded an order processing contract with our hoster. This is a contract required by data protection law, which ensures that Host Europe GmbH only processes the personal data of our site visitors according to our instructions and in compliance with data protection regulations (GDPR, BDSG, etc.).
8. Provision of the Internet pages and creation of log files
8.1. Description and scope of data processing
Each time you visit our website, our system automatically collects data and information from the system of the calling end device.
The following data will be collected:
(1) Information about the browser type and version used
(2) The operating system of the user
(3) The Internet service provider of the user
(4) The IP address of the user
(5) Date and time of access
(6) Internet pages from which the user's system accesses our website
(7) Internet pages that are called up by the user's system via our Internet site.
The data is also stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.
8.2. Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 p. 1 lit. f GDPR.
8.3. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
The storage in log files takes place in order to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR
8.4. Duration of storage, possibility of objection and elimination
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.
9. Cookies - use and application
9.1. Description and scope of data processing
This website uses cookies exclusively to ensure network and information security. Cookies are small text files. These are stored for technical session control in the temporary memory of the web browser or on the hard drive of the visitor to the website. Among other things, we store so-called session cookies on your hard drive, which are only valid for the duration of your visit to our portal.
For the correct technical and functional provision of our services, we use the following cookies:
- 0373b0c27d23bb7d77cbc5d647dd7e6a
Type: Functional cookie (Session ID).
Function/Purpose: correct technical and functional provision of our information offering.
Storage duration: expires at the end of the session. - e8c6a8ee7a66b860a5af8117c356fa0b
Type: Function cookie (default language de-DE, en-GB).
Function/Purpose: correct technical and functional provision of our information offer.
Storage period: expires at the end of the session. - joomla_user_state
Type: Functional cookie (login for protected areas).
Function/purpose: correct technical and functional provision of our information offer.
Storage duration: expires at the end of the session.
If these cookies are blocked, correct use of the information offered on this web server will no longer be possible.
9.2. Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 sentence 1 lit. f GDPR; the storage of cookies in your terminal device is based on § 25 para. 2 no. 2 TTDSG.
9.3. Purpose of data processing
The cookies are needed to identify and authorize you for the entire duration of your visit after you have successfully logged into the protected area. After the end of your visit, these cookies are automatically deleted from your hard drive.
9.4. Possibility of objection, storage period
Visitors to websites can prevent cookies from being saved by changing certain browser settings. As a rule, the web browser can also be set in such a way that it asks the visitor to the website whether he or she agrees before cookies are set. Furthermore, once cookies have been set, they can be deleted again by the visitor to the website at any time. The product descriptions/instructions of the respective browser manufacturers contain information on the settings required for this. Please note that individual functions of our website may not work if you have deactivated the use of cookies. Session cookies are deleted from your hard drive after you have finished visiting our website.
10. Contact via forms
10.1 Description and scope of data processing
Our website contains various forms that you, as a visitor to the site, can use to contact us electronically. If you use this option, the data you enter will be transmitted to us and stored.
The data collected in the individual forms is described below with its input fields. Our forms are divided into a part with your voluntary information on the respective contact request (optional information) and a part with fields that must be filled in so that we are able to process your request (mandatory information).
All forms uniformly contain a Contact section with the following mandatory fields:
- First name (text)
- Last name (text)
- E-mail (text)
- Company (text)
- Headquarters (text)
- Country (text)
- GDPR Consent (checkbox)
This data is used to establish contact with you as a visitor, to verify your request (avoidance of form spam) and to prove that you have been made aware of the website's privacy information. Without this information, the use of our forms and the establishment of contact is not possible.
For your actual request, our forms contain the following optional fields with voluntary information.
Form contact request
- Subject (text)
- Message (text)
Form Admin-Scout Request
- I would like to arrange a presentation (checkbox)
- I am interested in a trial (checkbox)
- Scout Starter / Best Practice Configuration (checkbox)
- Scout-Trainer / Online Workshop for introduction (checkbox)
- Scout-Admin / Support in Informix administration (checkbox)
- Scout-Ultimate / Informix Administration with 7x24 Support (checkbox)
- Your questions or suggestions (text)
- Your phone number (text)
Form Informix Service Request
- Description of your requierement (text)
- Informix / Installation (checkbox)
- Informix / Backup & Recovery (checkbox)
- Informix / High Availability (checkbox)
- Informix / Performance Tuning (checkbox)
- Informix / Migration & Trade-Up (checkbox)
- Your questions or suggestions (text)
- Your phone number (text)
Form Informix Support Request
- Description of your requierement (text)
- Your phone number (text)
Form Informix Workshop Request
- Description of your requirement (text)
- Your phone number (text)
Form Admin-Scout Guided Tour
- Tour 1 - Scout Basics (checkbox)
- Tour 2 - Administration Inside (checkbox)
- Tour 3 - Performance Special (checkbox)
- Your questions or suggestions (text)
- Your phone number (text)
Form Informix Admin Request
- Scout-Admin / Standard Administration (checkbox)
- Scout-Ultimate / Administration with 7x24 Support (Checkbox)
- Description of your requierement (text)
- Your phone number (text)
When you submit a form, we also store the following administrative information in log files:
- Sent (timestamp of submission, YYYY-MM-DD HH:MM.SS)
- IP (your internet address from which the form was sent, 00.000.000.000)
- Browser (details of the browser used)
- System (details of the operating system used)
- User ID (if you are registered on our site)
- Username (if you are registered on our site)
- Name (if you are registered on our site)
10.2 Legal basis for data processing
The legal basis for the processing of the data submitted by form is based on:
- Art. 6 para. 1 p. 1 lit. b GDPR (processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the data subject's request).
- Art. 6 para. 1 p. 1 lit. f GDPR (Processing is necessary for the purposes of the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child).
Depending on your request formulated in the form, Art. 6 para. 1 p. 1 lit. b GDPR or Art. 6 para. 1 p. 1 lit. f GDPR or both provisions apply.
10.3 Purpose of the data processing
The processing of personal data from the forms is solely for the purpose of processing your enquiry. The other personal data processed during the sending process serve to prevent misuse of the contact forms and to ensure the security of our information technology systems.
10.4 Duration of storage, possibility of objection and elimination
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data, this is the case when the respective conversation with the user or the business transactions initiated via an enquiry have ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been concluded.
The additional personal data collected during the sending process will be deleted after a period of ninety days at the latest.
If a visitor contacts us via a form, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.
After the initiation or conclusion of a contract, it may be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations. If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.
11. Contact via e-mail
11.1 Description and scope of data processing
On our website and in our signatures, e-mail addresses are provided via which it is possible to contact us electronically. In this case, the personal data of the data subject transmitted with the e-mail will be stored. In this context, the data is not passed on to third parties. The data will be used exclusively for contacting and conducting the conversation.
11.2 Legal basis for data processing
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 p. 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b GDPR.
11.3 Purpose of the data processing
The processing of personal data is solely for the purpose of processing the contact. This is also the basis for the necessary legitimate interest in processing the data.
12.4 Duration of storage, possibility of objection and elimination
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For personal data sent by e-mail, this is the case when the respective conversation with the data subject has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. If a contract is concluded as a result of the e-mail contact, the corresponding (legal) retention obligations and regulations apply.
If a data subject contacts us by e-mail, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.
12. Registration on our website
12.1. Description and scope of data processing
On our website we offer visitors and our customers the possibility of registration.
- Registered users have extended access to the site, can view additional information or access information via download.
- Registered users may be granted rights to download files and software packages. These registrations are part of the contractually agreed deliveries of software products, media and updates.
An entry mask is available for registration. In the process, personal data is collected via the fields listed here, transmitted to us and stored:
Mandatory fields
- First and last name (text)
- E-mail address (text)
- Username (text)
- Password (text)
- Street (text)
- Zip code (text)
- Location (text)
- Country (text)
- Agree to terms of use (checkbox)
Optional fields
- Company (text)
- Subscription to newsletters (checkbox)
The following data is also stored at the time of registration:
- IP address of the user
- Date and time of registration
Registration - Double-Opt-In Procedure
The registration on our website is always done with a double opt-in procedure. After your request for registration, you will receive an e-mail asking you to confirm the request. This confirmation serves as proof that you have used your e-mail address to register on our website. If you confirm your request via the link contained in the e-mail, activation can be carried out by one of our administrators. After the activation you will receive another e-mail in which we inform you about the successful completion of the registration.
Login, Registration
Logins after registration are carried out by means of user name and password. Via the menu item "My profile | My data" you can view and adjust your stored data. Via the function "Forgotten access data", new access data can be requested after a legitimation.
12.2. Legal basis for data processing
If the user has given his consent, the legal basis for the processing of the data is Art. 6 para. 1 p. 1 lit. a GDPR. If the registration serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 p. 1 lit. b GDPR.
12.3. Purpose of data processing
User registration is required for the provision of certain content and services on our website. Our site provides targeted information and services for customers, prospective customers and employees. Registration is required for all non-public content. A control of the offer and access to content, takes place via assigned user groups. In addition, the registration of the user may serve to fulfill a contract with the user. Individual users can be set up rights to obtain software media and updates.
12.4. Duration of storage, possibility of objection and elimination
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for the data collected during the registration process when the registration on our website is cancelled or modified. You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. As a user, you therefore have the option to cancel your registration at any time. You can change or have changed the data stored about you at any time. To do so, use the menu item "My profile | My data" in the footer of our website. A complete deletion of your entries can only be done by an administrator. Please contact us for this purpose; you will find our contact details at the beginning of this privacy information, for example.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for data collected during the registration process for the fulfillment of a contract or for the implementation of pre-contractual measures when the data is no longer required for the implementation of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations. If the data is required for the performance of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. As a user, you therefore have the option to cancel your registration at any time. You can have the data stored about you changed at any time. The deletion takes place after release by an administrator.
13. Newsletter subscription and tracking
13.1. Description and scope of data processing
On our website you have the following options to subscribe to a free newsletter.
The registration can be done within the framework of a general registration on our website (point 12.)
Independently of a registration, there is the possibility to sign up for a newsletter directly via our newsletter form.
The form includes the input fields:
- Name (text)
- E-mail address (text)
- Agreement terms of use (checkbox)
- Subscription to newsletters (selection field)
In addition, the following data is collected during registration:
- IP address of the accessing computer
- Date and time of registration
For the processing of data for sending the newsletter, your consent is obtained during the registration process and reference is made to this privacy information. The data will be used exclusively for sending the newsletter.
Double opt-in process
The registration for our newsletters is always done with a double opt-in process, regardless of whether you sign up as part of the registration process or directly for a newsletter. After registration, you will receive an e-mail asking you to confirm your subscription. This confirmation serves as proof that you have subscribed to our newsletter with your e-mail address.
Measurement of opening and click rates
Based on your consent, we also evaluate your user behavior within the information we send and assign this information to your e-mail address within our newsletter system. Each newsletter sent to you contains pixel-sized files that allow us to evaluate receipt and read confirmations as well as information about the links you have clicked on in our newsletter. We also store which areas you have visited within our website. The information collected is used to improve the technical and content-related aspects of our information. By creating a personal user profile, we want to tailor our advertising approach to your interests and optimize our offers on our website for you. The measurement of opening rates and click-through rates as well as the storage of the measurement results in the users' profiles and their further processing are carried out on the basis of user consent.
13.2. Legal basis for data processing
The legal basis for the processing of data when registering for our newsletter and the evaluation of our newsletter (newsletter tracking) is the existence of the user's consent (with double opt-in) in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, for any transfer to a third country Art. 49 para. 1 sentence 1 lit. a GDPR. The legal basis for the implementation of the double opt-in procedure is Art. 6 para. 1 sentence 1 lit. f GDPR for proof and verification of your consent. For storage for verification purposes and defense against liability claims (storage of revocation) Art. 6 para. 1 sentence 1 lit. f GDPR.
13.3. Purpose of the data processing
The collection of the user's e-mail address serves to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used. The collection of the analysis data from the delivery of the newsletter serves to improve and optimize our offers.
13.4. Duration of storage, possibility of objection and elimination
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The e-mail address and the name of the user are therefore stored for as long as the subscription to the newsletter is active.
We may also store unsubscribed e-mail addresses for up to three years based on our legitimate interest in order to be able to prove consent previously given, even after unsubscribing. In the event of a permanent objection, we reserve the right to store your e-mail address in an advertising blocking file for this purpose alone. The storage in the advertising blocking file is not limited in time. You can object to the storage if your interests outweigh our legitimate interests.
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, a corresponding link can be found in each newsletter. This also enables a revocation of the consent to the storage of the personal data collected during the registration process.
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can send the revocation either by post or by e-mail to the controller.
Separate cancellation of newsletter tracking is not possible, in this case the entire subscription must be cancelled.
The subscription to our newsletter can be revoked by the affected user at any time by unsubscribing. For this purpose, a corresponding link ("Unsubscribe") can be found in each e-mail sent within the subscription.
Privacy information, status as of April 11. 2024 - js-5882
