Date: Fri, 29 Mar 2024 01:18:38 +0000 (UTC) Message-ID: <1870733225.12207.1711675118064@change.sos-berlin.com> Subject: Exported From Confluence MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_Part_12206_1069418157.1711675118064" ------=_Part_12206_1069418157.1711675118064 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Content-Location: file:///C:/exported.html
We are very delighted that you have shown interest in our enterp= rise. Data protection is of a particularly high priority for the management= of the Software- und Organisations-Service GmbH. The use of the Intern= et pages of the Software- und Organisations-Service GmbH is possible wi= thout any indication of personal data; however, if a data subject wants to = use special enterprise services via our website, processing of personal dat= a could become necessary. If the processing of personal data is necessary a= nd there is no statutory basis for such processing, we generally obtain con= sent from the data subject.
The processing of personal data, such as the name, address, e-mail addre=
ss, or telephone number of a data subject shall always be in line with the =
General Data Protection Regulation (GDPR), and in accordance with the country-spe=
cific data protection regulations applicable to the Software- und
As the controller, the Software- und Organisations-Service GmbH has = implemented numerous technical and organizational measures to ensure the mo= st complete protection of personal data processed through this website. How= ever, Internet-based data transmissions may in principle have security gaps= , so absolute protection may not be guaranteed. For this reason, every data= subject is free to transfer personal data to us via alternative means, e.g= . by telephone.
The data protection declaration of the Software- und Organisations-Service GmbH is based on the terms used by the European legislator for the a= doption of the General Data Protection Regulation (GDPR). Our data protection dec= laration should be legible and understandable for the general public, as we= ll as our customers and business partners. To ensure this, we would like to= first explain the terminology used.
In this data protection declaration, we use, inter alia, the following t= erms:
Personal data means = any information relating to an identified or identifiable natural person (= =E2=80=9Cdata subject=E2=80=9D). An identifiable natural person is one who = can be identified, directly or indirectly, in particular by reference to an= identifier such as a name, an identification number, location data, an onl= ine identifier or to one or more factors specific to the physical, physiolo= gical, genetic, mental, economic, cultural or social identity of that natur= al person.
Data subject is any = identified or identifiable natural person, whose personal data is processed= by the controller responsible for the processing.
Processing is any op= eration or set of operations which is performed on personal data or on sets= of personal data, whether or not by automated means, such as collection, r= ecording, organisation, structuring, storage, adaptation or alteration, ret= rieval, consultation, use, disclosure by transmission, dissemination or oth= erwise making available, alignment or combination, restriction, erasure or = destruction.
Restriction of proce= ssing is the marking of stored personal data with the aim of limiting their= processing in the future.
Profiling means any = form of automated processing of personal data consisting of the use of pers= onal data to evaluate certain personal aspects relating to a natural person= , in particular to analyse or predict aspects concerning that natural perso= n's performance at work, economic situation, health, personal preferences, = interests, reliability, behaviour, location or movements.
Pseudonymisation is = the processing of personal data in such a manner that the personal data can= no longer be attributed to a specific data subject without the use of addi= tional information, provided that such additional information is kept separ= ately and is subject to technical and organisational measures to ensure tha= t the personal data are not attributed to an identified or identifiable nat= ural person.
Controller or contro= ller responsible for the processing is the natural or legal person, public = authority, agency or other body which, alone or jointly with others, determ= ines the purposes and means of the processing of personal data; where the p= urposes and means of such processing are determined by Union or Member Stat= e law, the controller or the specific criteria for its nomination may be pr= ovided for by Union or Member State law.
Processor is a natur= al or legal person, public authority, agency or other body which processes = personal data on behalf of the controller.
Recipient is a natur= al or legal person, public authority, agency or another body, to which the = personal data are disclosed, whether a third party or not. However, public = authorities which may receive personal data in the framework of a particula= r inquiry in accordance with Union or Member State law shall not be regarde= d as recipients; the processing of those data by those public authorities s= hall be in compliance with the applicable data protection rules according t= o the purposes of the processing.
Third party is a nat= ural or legal person, public authority, agency or body other than the data = subject, controller, processor and persons who, under the direct authority = of the controller or processor, are authorised to process personal data.
Consent of the data = subject is any freely given, specific, informed and unambiguous indication = of the data subject's wishes by which he or she, by a statement or by a cle= ar affirmative action, signifies agreement to the processing of personal da= ta relating to him or her.
Controller for the purposes of the General Data Protection Regulation (<= span class=3D"scayt-misspell-word" style=3D"color: inherit;">GDPR), = other data protection laws applicable in Member states of the European Unio= n and other provisions related to data protection is:
Software- und <=
span class=3D"scayt-misspell-word" style=3D"color: inherit;">Organisations-=
Service GmbH
Giesebrechtstr. 16
10629 Berlin
Germany
Phone: +49 30 86 47 =
90-0
E-mail: info@sos-berlin.com
Website: www.sos-berlin.com
The Internet pages of the Software- und Organisations-Service GmbH u= se cookies. Cookies are text files that are stored in a computer system via= an Internet browser.
Many Internet sites and servers use cookies. Many cookies contain a so-c= alled cookie ID. A cookie ID is a unique identifier of the cookie. It consi= sts of a character string through which Internet pages and servers can be a= ssigned to the specific Internet browser in which the cookie was stored. Th= is allows visited Internet sites and servers to differentiate the individua= l browser of the dats subject from other Internet browsers that contain oth= er cookies. A specific Internet browser can be recognized and identified us= ing the unique cookie ID.
Through the use of cookies, the Software- und Organisations-Service = GmbH can provide the users of this website with more user-friendly services= that would not be possible without the cookie setting.
By means of a cookie, the information and offers on our website can be o= ptimized with the user in mind. Cookies allow us, as previously mentioned, = to recognize our website users. The purpose of this recognition is to make = it easier for users to utilize our website. The website user that uses cook= ies, e.g. does not have to enter access data each time the website is acces= sed, because this is taken over by the website, and the cookie is thus stor= ed on the user's computer system. Another example is the cookie of a shoppi= ng cart in an online shop. The online store remembers the articles that a c= ustomer has placed in the virtual shopping cart via a cookie.
The data subject may, at any time, prevent the setting of cookies throug= h our website by means of a corresponding setting of the Internet browser u= sed, and may thus permanently deny the setting of cookies. Furthermore, alr= eady set cookies may be deleted at any time via an Internet browser or othe= r software programs. This is possible in all popular Internet browsers. If = the data subject deactivates the setting of cookies in the Internet browser= used, not all functions of our website may be entirely usable.
The website of the Software- und Organisations-Service GmbH collects= a series of general data and information when a data subject or automated = system calls up the website. This general data and information are stored i= n the server log files. Collected may be (1) the browser types and versions= used, (2) the operating system used by the accessing system, (3) the websi= te from which an accessing system reaches our website (so-called referrers)= , (4) the sub-websites, (5) the date and time of access to the Internet sit= e, (6) an Internet protocol address (IP address), (7) the Internet service = provider of the accessing system, and (8) any other similar data and inform= ation that may be used in the event of attacks on our information technolog= y systems.
When using these general data and information, the Software- und Organisations-S=
ervice GmbH does not draw any conclusions about the data subjec=
t. Rather, this information is needed to (1) deliver the content of our web=
site correctly, (2) optimize the content of our website as well as its adve=
rtisement, (3) ensure the long-term viability of our information technology=
systems and website technology, and (4) provide law enforcement authoritie=
s with the information necessary for criminal prosecution in case of a cybe=
r-attack. Therefore, the Software- und Organisations-Service GmbH analy=
zes anonymously collected data and information statistically, with the aim =
of increasing the data protection and data security of our enterprise, and =
to ensure an optimal level of protection for the personal data we process. =
The anonymous data of the server log files are stored separately from all p=
ersonal data provided by a data subject.
The data subject has the possibility to register on the website of the c= ontroller with the indication of personal data. Which personal data are tra= nsmitted to the controller is determined by the respective input mask used = for the registration. The personal data entered by the data subject are col= lected and stored exclusively for internal use by the controller, and for h= is own purposes. The controller may request transfer to one or more process= ors (e.g. a parcel service) that also uses personal data for an internal pu= rpose which is attributable to the controller.
By registering on the website of the controller, the IP address=E2=80=94= assigned by the Internet service provider (ISP) and used by the data subjec= t=E2=80=94date, and time of the registration are also stored. The storage o= f this data takes place against the background that this is the only way to= prevent the misuse of our services, and, if necessary, to make it possible= to investigate committed offenses. Insofar, the storage of this data is ne= cessary to secure the controller. This data is not passed on to third parti= es unless there is a statutory obligation to pass on the data, or if the tr= ansfer serves the aim of criminal prosecution.
The registration of the data subject, with the voluntary indication of p= ersonal data, is intended to enable the controller to offer the data subjec= t contents or services that may only be offered to registered users due to = the nature of the matter in question. Registered persons are free to change= the personal data specified during the registration at any time, or to hav= e them completely deleted from the data stock of the controller.
The data controller shall, at any time, provide information upon request= to each data subject as to what personal data are stored about the data su= bject. In addition, the data controller shall correct or erase personal dat= a at the request or indication of the data subject, insofar as there are no= statutory storage obligations. The entirety of the controller=E2=80=99s em= ployees are available to the data subject in this respect as contact person= s.
The website of the Software- und Organisations-Service GmbH contains= information that enables a quick electronic contact to our enterprise, as = well as direct communication with us, which also includes a general address= of the so-called electronic mail (e-mail address). If a data subject conta= cts the controller by e-mail or via a contact form, the personal data trans= mitted by the data subject are automatically stored. Such personal data tra= nsmitted on a voluntary basis by a data subject to the data controller are = stored for the purpose of processing or contacting the data subject. There = is no transfer of this personal data to third parties.
The data controller shall process and store the personal data of the dat= a subject only for the period necessary to achieve the purpose of storage, = or as far as this is granted by the European legislator or other legislator= s in laws or regulations to which the controller is subject to.
If the storage purpose is not applicable, or if a storage period prescri= bed by the European legislator or another competent legislator expires, the= personal data are routinely blocked or erased in accordance with legal req= uirements.
Each data subject sh= all have the right granted by the European legislator to obtain from the co= ntroller the confirmation as to whether or not personal data concerning him= or her are being processed. If a data subject wishes to avail himself of t= his right of confirmation, he or she may, at any time, contact any employee= of the controller.
Each data subject sh= all have the right granted by the European legislator to obtain from the co= ntroller free information about his or her personal data stored at any time= and a copy of this information. Furthermore, the European directives and r= egulations grant the data subject access to the following information:
Furthermore, the dat= a subject shall have a right to obtain information as to whether personal d= ata are transferred to a third country or to an international organisation.= Where this is the case, the data subject shall have the right to be inform= ed of the appropriate safeguards relating to the transfer.
If a data subject wi= shes to avail himself of this right of access, he or she may, at any time, = contact any employee of the controller.
Each data subject sh= all have the right granted by the European legislator to obtain from the co= ntroller without undue delay the rectification of inaccurate personal data = concerning him or her. Taking into account the purposes of the processing, = the data subject shall have the right to have incomplete personal data comp= leted, including by means of providing a supplementary statement.
If a data subject wi= shes to exercise this right to rectification, he or she may, at any time, c= ontact any employee of the controller.
Each data subject sh= all have the right granted by the European legislator to obtain from the co= ntroller the erasure of personal data concerning him or her without undue d= elay, and the controller shall have the obligation to erase personal data w= ithout undue delay where one of the following grounds applies, as long as t= he processing is not necessary:
If one of the aforem= entioned reasons applies, and a data subject wishes to request the erasure = of personal data stored by the Software- und Organisations-Service GmbH= , he or she may, at any time, contact any employee of the controller. An em= ployee of Software- und Organisations-Service GmbH shall promptly ensur= e that the erasure request is complied with immediately.
Where the controller= has made personal data public and is obliged pursuant to Article 17(1) to = erase the personal data, the controller, taking account of available techno= logy and the cost of implementation, shall take reasonable steps, including= technical measures, to inform other controllers processing the personal da= ta that the data subject has requested erasure by such controllers of any l= inks to, or copy or replication of, those personal data, as far as processi= ng is not required. An employees of the Software- und Organisations-Service&= nbsp;GmbH will arrange the necessary measures in individual cases.
Each data subject sh= all have the right granted by the European legislator to obtain from the co= ntroller restriction of processing where one of the following applies:
If one of the aforem= entioned conditions is met, and a data subject wishes to request the restri= ction of the processing of personal data stored by the Software- und <= span class=3D"scayt-misspell-word" style=3D"color: inherit;">Organisations-= Service GmbH, he or she may at any time contact any employee of= the controller. The employee of the Software- und Organisations-Service&nbs= p;GmbH will arrange the restriction of the processing.
Each data subject sh= all have the right granted by the European legislator, to receive the perso= nal data concerning him or her, which was provided to a controller, in a st= ructured, commonly used and machine-readable format. He or she shall have t= he right to transmit those data to another controller without hindrance fro= m the controller to which the personal data have been provided, as long as = the processing is based on consent pursuant to point (a) of Article 6(1) of= the GDP= R or point (a) of Article 9(2) of the GDPR, or on a contract pur= suant to point (b) of Article 6(1) of the GDPR, and the processing is carrie= d out by automated means, as long as the processing is not necessary for th= e performance of a task carried out in the public interest or in the exerci= se of official authority vested in the controller.
Furthermore, in exer= cising his or her right to data portability pursuant to Article 20(1) of th= e GDPR= span>, the data subject shall have the right to have personal data transmit= ted directly from one controller to another, where technically feasible and= when doing so does not adversely affect the rights and freedoms of others.=
In order to assert t= he right to data portability, the data subject may at any time contact any = employee of the Software- und Organisations-Service GmbH.
Each data subject sh= all have the right granted by the European legislator to object, on grounds= relating to his or her particular situation, at any time, to processing of= personal data concerning him or her, which is based on point (e) or (f) of= Article 6(1) of the GDPR. This also applies to profiling based on these pro= visions.
The Software- und&nb= sp;Organisati= ons-Service GmbH shall no longer process the personal data in t= he event of the objection, unless we can demonstrate compelling legitimate = grounds for the processing which override the interests, rights and freedom= s of the data subject, or for the establishment, exercise or defence of leg= al claims.
If the Software- und= Organis= ations-Service GmbH processes personal data for direct marketin= g purposes, the data subject shall have the right to object at any time to = processing of personal data concerning him or her for such marketing. This = applies to profiling to the extent that it is related to such direct market= ing. If the data subject objects to the Software- und Organisations-Service&= nbsp;GmbH to the processing for direct marketing purposes, the Software- un= d Organi= sations-Service GmbH will no longer process the personal data f= or these purposes.
In addition, the dat= a subject has the right, on grounds relating to his or her particular situa= tion, to object to processing of personal data concerning him or her by the= Software- und Organisations-Service GmbH for scientific or historical = research purposes, or for statistical purposes pursuant to Article 89(1) of= the GDP= R, unless the processing is necessary for the performance of a task = carried out for reasons of public interest.
In order to exercise= the right to object, the data subject may contact any employee of the Soft= ware- und Organisations-Service GmbH. In addition, the data subject is = free in the context of the use of information society services, and notwith= standing Directive 2002/58/EC, to use his or her right to object by automat= ed means using technical specifications.
Each data subject sh= all have the right granted by the European legislator not to be subject to = a decision based solely on automated processing, including profiling, which= produces legal effects concerning him or her, or similarly significantly a= ffects him or her, as long as the decision (1) is not is necessary for ente= ring into, or the performance of, a contract between the data subject and a= data controller, or (2) is not authorised by Union or Member State law to = which the controller is subject and which also lays down suitable measures = to safeguard the data subject's rights and freedoms and legitimate interest= s, or (3) is not based on the data subject's explicit consent.
If the decision (1) = is necessary for entering into, or the performance of, a contract between t= he data subject and a data controller, or (2) it is based on the data subje= ct's explicit consent, the Software- und Organisations-Service GmbH sha= ll implement suitable measures to safeguard the data subject's rights and f= reedoms and legitimate interests, at least the right to obtain human interv= ention on the part of the controller, to express his or her point of view a= nd contest the decision.
If the data subject = wishes to exercise the rights concerning automated individual decision-maki= ng, he or she may, at any time, contact any employee of the Software- und&n= bsp;Organisat= ions-Service GmbH.
Each data subject sh= all have the right granted by the European legislator to withdraw his or he= r consent to processing of his or her personal data at any time.
If the data subject = wishes to exercise the right to withdraw the consent, he or she may, at any= time, contact any employee of the Software- und Organisations-Service = GmbH.
The data controller shall collect and process the personal data of appli= cants for the purpose of the processing of the application procedure. The p= rocessing may also be carried out electronically. This is the case, in part= icular, if an applicant submits corresponding application documents by e-ma= il or by means of a web form on the website to the controller. If the data = controller concludes an employment contract with an applicant, the submitte= d data will be stored for the purpose of processing the employment relation= ship in compliance with legal requirements. If no employment contract is co= ncluded with the applicant by the controller, the application documents sha= ll be automatically erased two months after notification of the refusal dec= ision, provided that no other legitimate interests of the controller are op= posed to the erasure. Other legitimate interest in this relation is, e.g. a= burden of proof in a procedure under the General Equal Treatment Act (AGG)= .
On this website, the controller has integrated the component of Google A= nalytics (with the anonymizer function). Google Analytics is a web analytic= s service. Web analytics is the collection, gathering, and analysis of data= about the behavior of visitors to websites. A web analysis service collect= s, inter alia, data about the website from which a person has come (the so-= called referrer), which sub-pages were visited, or how often and for what d= uration a sub-page was viewed. Web analytics are mainly used for the optimi= zation of a website and in order to carry out a cost-benefit analysis of In= ternet advertising.
The operator of the Google Analytics component is Google Inc., 1600 Amph= itheatre Pkwy, Mountain View, CA 94043-1351, United States.
For the web analytics through Google Analytics the controller uses the a= pplication "_gat. _anonymizeIp". By means of this application the IP addres= s of the Internet connection of the data subject is abridged by Google and = anonymised when accessing our websites from a Member State of the European = Union or another Contracting State to the Agreement on the European Economi= c Area.
The purpose of the Google Analytics component is to analyze the traffic = on our website. Google uses the collected data and information, inter alia,= to evaluate the use of our website and to provide online reports, which sh= ow the activities on our websites, and to provide other services concerning= the use of our Internet site for us.
Google Analytics places a cookie on the information technology system of= the data subject. The definition of cookies is explained above. With the s= etting of the cookie, Google is enabled to analyze the use of our website. = With each call-up to one of the individual pages of this Internet site, whi= ch is operated by the controller and into which a Google Analytics componen= t was integrated, the Internet browser on the information technology system= of the data subject will automatically submit data through the Google Anal= ytics component for the purpose of online advertising and the settlement of= commissions to Google. During the course of this technical procedure, the = enterprise Google gains knowledge of personal information, such as the IP a= ddress of the data subject, which serves Google, inter alia, to understand = the origin of visitors and clicks, and subsequently create commission settl= ements.
The cookie is used to store personal information, such as the access tim= e, the location from which the access was made, and the frequency of visits= of our website by the data subject. With each visit to our Internet site, = such personal data, including the IP address of the Internet access used by= the data subject, will be transmitted to Google in the United States of Am= erica. These personal data are stored by Google in the United States of Ame= rica. Google may pass these personal data collected through the technical p= rocedure to third parties.
The data subject may, as stated above, prevent the setting of cookies th= rough our website at any time by means of a corresponding adjustment of the= web browser used and thus permanently deny the setting of cookies. Such an= adjustment to the Internet browser used would also prevent Google Analytic= s from setting a cookie on the information technology system of the data su= bject. In addition, cookies already in use by Google Analytics may be delet= ed at any time via a web browser or other software programs.
In addition, the data subject has the possibility of objecting to a coll= ection of data that are generated by Google Analytics, which is related to = the use of this website, as well as the processing of this data by Google a= nd the chance to preclude any such. For this purpose, the data subject must= download a browser add-on under the link https://tool= s.google.com/dlpage/gaoptout and install it. This browser add-on tells = Google Analytics through a JavaScript, that any data and information about = the visits of Internet pages may not be transmitted to Google Analytics. Th= e installation of the browser add-ons is considered an objection by Google.= If the information technology system of the data subject is later deleted,= formatted, or newly installed, then the data subject must reinstall the br= owser add-ons to disable Google Analytics. If the browser add-on was uninst= alled by the data subject or any other person who is attributable to their = sphere of competence, or is disabled, it is possible to execute the reinsta= llation or reactivation of the browser add-ons.
Further information and the applicable data protection provisions of Goo= gle may be retrieved under https://www.google.co= m/intl/en/policies/privacy/ and under http://= www.google.com/analytics/terms/us.html. Google Analytics is further exp= lained under the following Link https://www.google.com/analytic= s/.
On this website, the controller has integrated components of Twitter. Tw= itter is a multilingual, publicly-accessible microblogging service on which= users may publish and spread so-called =E2=80=98tweets,=E2=80=99 e.g. shor= t messages, which are limited to 280 characters. These short messages are a= vailable for everyone, including those who are not logged on to Twitter. Th= e tweets are also displayed to so-called followers of the respective user. = Followers are other Twitter users who follow a user's tweets. Furthermore, = Twitter allows you to address a wide audience via hashtags, links or retwee= ts.
The operating company of Twitter is Twitter, Inc., 1355 Market Street, S= uite 900, San Francisco, CA 94103, UNITED STATES.
With each call-up to one of the individual pages of this Internet site, = which is operated by the controller and on which a Twitter component (Twitt= er button) was integrated, the Internet browser on the information technolo= gy system of the data subject is automatically prompted to download a displ= ay of the corresponding Twitter component of Twitter. Further information a= bout the Twitter buttons is available under https:= //about.twitter.com/de/resources/buttons. During the course of this tec= hnical procedure, Twitter gains knowledge of what specific sub-page of our = website was visited by the data subject. The purpose of the integration of = the Twitter component is a retransmission of the contents of this website t= o allow our users to introduce this web page to the digital world and incre= ase our visitor numbers.
If the data subject is logged in at the same time on Twitter, Twitter de= tects with every call-up to our website by the data subject and for the ent= ire duration of their stay on our Internet site which specific sub-page of = our Internet page was visited by the data subject. This information is coll= ected through the Twitter component and associated with the respective Twit= ter account of the data subject. If the data subject clicks on one of the T= witter buttons integrated on our website, then Twitter assigns this informa= tion to the personal Twitter user account of the data subject and stores th= e personal data.
Twitter receives information via the Twitter component that the data sub= ject has visited our website, provided that the data subject is logged in o= n Twitter at the time of the call-up to our website. This occurs regardless= of whether the person clicks on the Twitter component or not. If such a tr= ansmission of information to Twitter is not desirable for the data subject,= then he or she may prevent this by logging off from their Twitter account = before a call-up to our website is made.
The applicable data protection provisions of Twitter may be accessed und= er https://twitter.com/privacy?lang=3Den.
On this website, the controller has integrated components of YouTube. Yo= uTube is an Internet video portal that enables video publishers to set vide= o clips and other users free of charge, which also provides free viewing, r= eview and commenting on them. YouTube allows you to publish all kinds of vi= deos, so you can access both full movies and TV broadcasts, as well as musi= c videos, trailers, and videos made by users via the Internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San B= runo, CA 94066, UNITED STATES. The YouTube, LLC is a subsidiary of Google I= nc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.= p>
With each call-up to one of the individual pages of this Internet site, = which is operated by the controller and on which a YouTube component (YouTu= be video) was integrated, the Internet browser on the information technolog= y system of the data subject is automatically prompted to download a displa= y of the corresponding YouTube component. Further information about YouTube= may be obtained under https://www.youtube.com/yt/about/en/<= /a>. During the course of this technical procedure, YouTube and Google gain= knowledge of what specific sub-page of our website was visited by the data= subject.
If the data subject is logged in on YouTube, YouTube recognizes with eac= h call-up to a sub-page that contains a YouTube video, which specific sub-p= age of our Internet site was visited by the data subject. This information = is collected by YouTube and Google and assigned to the respective YouTube a= ccount of the data subject.
YouTube and Google will receive information through the YouTube componen= t that the data subject has visited our website, if the data subject at the= time of the call to our website is logged in on YouTube; this occurs regar= dless of whether the person clicks on a YouTube video or not. If such a tra= nsmission of this information to YouTube and Google is not desirable for th= e data subject, the delivery may be prevented if the data subject logs off = from their own YouTube account before a call-up to our website is made.
YouTube's data protection provisions, available at https://www.google.com/intl/en/policies/privacy/, provide informa= tion about the collection, processing and use of personal data by YouTube a= nd Google.
Art. 6(1) lit. a GDPR serves as the legal basis for processing opera= tions for which we obtain consent for a specific processing purpose. If the= processing of personal data is necessary for the performance of a contract= to which the data subject is party, as is the case, for example, when proc= essing operations are necessary for the supply of goods or to provide any o= ther service, the processing is based on Article 6(1) lit. b GDPR. The same = applies to such processing operations which are necessary for carrying out = pre-contractual measures, for example in the case of inquiries concerning o= ur products or services. Is our company subject to a legal obligation by wh= ich processing of personal data is required, such as for the fulfillment of= tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare = cases, the processing of personal data may be necessary to protect the vita= l interests of the data subject or of another natural person. This would be= the case, for example, if a visitor were injured in our company and his na= me, age, health insurance data or other vital information would have to be = passed on to a doctor, hospital or other third party. Then the processing w= ould be based on Art. 6(1) lit. d GDPR. Finally, processing operations could= be based on Article 6(1) lit. f GDPR. This legal basis is used for processi= ng operations which are not covered by any of the abovementioned legal grou= nds, if processing is necessary for the purposes of the legitimate interest= s pursued by our company or by a third party, except where such interests a= re overridden by the interests or fundamental rights and freedoms of the da= ta subject which require protection of personal data. Such processing opera= tions are particularly permissible because they have been specifically ment= ioned by the European legislator. He considered that a legitimate interest = could be assumed if the data subject is a client of the controller (Recital= 47 Sentence 2 GDPR).
Where the processing of personal data is based on Article 6(1) lit. f&nb= sp;GDPR our legitimate interest is to carry out our business in favor of the= well-being of all our employees and the shareholders.
The criteria used to determine the period of storage of personal data is= the respective statutory retention period. After expiration of that period= , the corresponding data is routinely deleted, as long as it is no longer n= ecessary for the fulfillment of the contract or the initiation of a contrac= t.
We clarify that the provision of personal data is partly required by law= (e.g. tax regulations) or can also result from contractual provisions (e.g= . information on the contractual partner). Sometimes it may be necessary to= conclude a contract that the data subject provides us with personal data, = which must subsequently be processed by us. The data subject is, for exampl= e, obliged to provide us with personal data when our company signs a contra= ct with him or her. The non-provision of the personal data would have the c= onsequence that the contract with the data subject could not be concluded. = Before personal data is provided by the data subject, the data subject must= contact any employee. The employee clarifies to the data subject whether t= he provision of the personal data is required by law or contract or is nece= ssary for the conclusion of the contract, whether there is an obligation to= provide the personal data and the consequences of non-provision of the per= sonal data.
As a responsible company, we do not use automatic decision-making or pro= filing.