Data Privacy Policy

We are very pleased that you are interested in our company. Data privacy has a particularly high priority for the management of KHD - Katzengruber Human Development Group GmbH. Use of the webpages of KHD - Katzengruber Human Development Group GmbH is generally possible without providing any personal data. If someone wants to use particular services of our company via our webpage, this might, however, require a processing of personal data. If the processing of personal data is required and if there is no legal basis for such processing, we will generally obtain the consent from the data subject.

Personal data of a data subject, such as the name, address, email address or phone number, is processed always in accordance with the General Data Protection Regulation and in compliance with the country-specific data protection laws that apply to KHD - Katzengruber Human Development Group GmbH. By means of this Data Privacy Policy, our company would like to inform the public about the nature, scope and purpose of the personal data that is collected, used and processed by us. Furthermore, the data subjects are informed through this Data Privacy Policy about their rights.

KHD - Katzengruber Human Development Group GmbH, as the data controller who is responsible for the processing, has implemented numerous technical and organisational measures to ensure the most complete protection possible of the personal data processed via this website. Nonetheless, web-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, it is at the discretion of every data subject to transmit personal data also via alternative channels, for example, by telephone.

1. Definitions

The Data Privacy Policy of KHD - Katzengruber Human Development Group GmbH is based on the terms that are used by the legislator of European directives and regulations in the decree of the General Data Protection Regulation (GDPR). Our Data Privacy Policy is intended to be easy to read and comprehensible for the public as well as our customers and business partners. To ensure this, we would like to explain first off the terms that are used.

Some of the terms that are used in this Data Privacy Policy are the following:

  • a) Personal data

    Personal data is all information relating to an identified or identifiable natural person ( referred to as the “data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

  • b) Data subject

    A data subject is any identified or identifiable natural person whose personal data is used by the data controller responsible for the processing.

  • c) Processing

    Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

  • d) Restriction of processing

    Restriction of the processing means the marking of stored personal data with the aim of limiting their processing in the future.

  • e) Profiling

    Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

  • f) Pseudonymisation

    Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

  • g) Data controller or entity responsible for the processing

    Data controller or entity responsible for the processing means the natural person or legal entity, authority, institution or other agency that alone or jointly with others determines the purposes and means of the processing of personal data. If the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by EU law or the law of the Member States.

  • h) Commissioned data processors

    A commissioned data processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

  • i) Recipient

    A recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. Authorities that may receive personal data within the scope of a particular inquiry pursuant to EU law or the law of the Member States, however, are not considered to be recipients.

  • j) Third parties

    A third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

  • k) Consent

    Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. Name and address of the data controller

Data controller in the definition of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a nature similar to data protection regulations is:

KHD - Katzengruber Human Development Group GmbH

Schloß Seefeld, Schloßhof 7

82229 Seefeld

Germany

Phone: +49 8152 9 82 53-0

Email: This e-mail address is being protected from spambots. You need JavaScript enabled to view it

Website: www.khd-group.com

3. Cookies

The webpages of KHD - Katzengruber Human Development Group GmbH use cookies. Cookies are text files that are stored by the internet browser in a computer system.

Many webpages and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a number sequence whereby webpages and servers can be attributed to the specific internet browser in which the cookie has been saved. This enables the visited websites and serves to differentiate the individual browser of the data subject from other web browsers that contain different cookies. A certain web browser can be recognised and identified by means of the unique cookie ID.

By using cookies, KHD - Katzengruber Human Development Group GmbH can provide user-friendly services to the users of this website, which would not be possible without setting cookies.

By means of a cookie, the information and offers on our website can be optimised in the user’s interest. Cookies enable us, as already mentioned, to recognise returning visitors to our website. The purpose of recognition is to make the use of our website easier for the users. The user of a website that uses cookies, for example, does not have to re-enter his/her access data again on each visit to the website, because this is done by the website and the cookie stored in the user’s computer system. Another example is a cookie for a shopping cart in an online shop. The online shop remembers the items that a customer has placed in a virtual shopping cart by means of a cookie.

The data subject can prevent at any time that cookies are set by our website by means of a corresponding adjustment in settings of the web browser that he/she uses and can thereby object permanently to the setting of cookies. In addition, cookies already set can be deleted at any time via a web browser or other software program. This is possible in all common web browsers. If the data subject deactivates the setting of cookies in the web browser that he/she uses, it might not be possible to access all features of our website to the full extent under certain circumstances.

4. Collection of general data and information

The website of KHD - Katzengruber Human Development Group GmbH collects a various general data and information on each retrieval of the website by a data subject or an automated system. This general data and information is stored in the logfiles of the server. What can be gathered is (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system was referred to our website (so-called referrers), (4) the subpages on our website that are navigated to by means of an accessing system, (5) the date and time of an access to the website, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system, and (8) other similar data and information that serves to defend against possible attacks on our information technology systems.

When using this general data and information, KHD - Katzengruber Human Development Group GmbH does not draw any conclusions as to the identity of the data subject. This information is required instead to (1) deliver the contents of our website correctly, (2) optimise the contents of our website and its marketing, (3) ensure the permanent functionality of our information technology systems and the technology of our website, and (4) provide the information required for criminal prosecution to the law enforcement authorities in the event of a cyberattack. This data and information collected in anonymised form is therefore analysed by KHD - Katzengruber Human Development Group GmbH statistically on the one hand and, on the other hand, with the objective to increase data protection and data security at our company to ultimately ensure an optimal level of protection for the personalised data that is processed by us. The anonymous data in the server logfiles is separated from all personal data specified by the data subject.

5. Contact option provided via the website

The website of KHD - Katzengruber Human Development Group GmbH contains, due to legal regulations, information also including a general address for the so-called electronic mail (email address), which permits quick electronic contact with our company and direct communication with us. If a data subject contacts the data controller who is responsible for the processing via email or a contact form, the personal data transmitted by the data subject is stored automatically. Such personal data that is transmitted by the data subject on a voluntary basis to the data controller is stored for the purposes of processing or contact with the data subject. This personal data will not be transmitted to third parties.

6. Routine deletion and blocking of personal data

The data controller processes and stores the personal data of the data subject only for the period required to reach the purpose of the storing or insofar as the legislator of European directives and regulations or by another legislator has provided for this in laws or regulations that apply to the data controller.

If the purpose for the storing no longer applies or if a storage period prescribed by the legislator of European directives and regulations or by another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with legal regulations.

7. Rights of data subjects

  • a) Right to confirmation

    Each person has the right granted by the legislator of European directives and regulations to obtain a confirmation from the data controller of whether the personal data about them is being processed. If a data subject wants to exercise this right to confirmation, he/she can contact an employee of the data controller for this purpose at any time.

  • b) Right to be provided with information

    Each data subject whose personal data is being processed has the right granted by the legislator of European directives and regulations to obtain information free of charge at any time from the data controller as to the personal data that is stored about them and to receive a copy of this information. Furthermore, the legislator of European directives and regulations has granted the data subject the right to be given the following information:

    • the purposes of the processing;
    • the categories of personal data that is processed;
    • the recipients or categories of recipients to whom personal data has been disclosed or will be disclosed in the future; in particular, in the case of recipients in third countries or international organisations;
    • if possible, the planned period in which the personal data is stored or, if this is not possible, the criteria for determining this period;
    • the existence of a right to correction or erasure of the personal data or the right to restrict the processing by the data controller or a right to object to this processing;
    • the existence of a right to lodge complaint with a supervisory authority;
    • if the personal data is not collected from the data subject: all available information on the origin of the data;
    • the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

    The data subject furthermore has a right to be informed whether personal data has been transmitted to a third country or an international organisation. If this is the case, the data subject additionally has the right to obtain information about the suitable guarantees relating to the transmission.

    If a data subject wants to exercise this right to be provided with information, he/she can contact an employee of the data controller for this purpose at any time.

  • c) Right to rectification

    Each data subject whose personal data is being processed has the right granted by the legislator of European directives and regulations to demand the immediate rectification of inaccurate personal data about him/her. Moreover, the data subject has the right, in consideration of the purposes of the processing, to demand the completion of incomplete personal data – also by means of a supplementary statement.

    If a data subject wants to exercise this right to rectification, he/she can contact an employee of the data controller for this purpose at any time.

  • d) Right to erasure (right to be forgotten)

    Each data subject whose personal data is being processed has the right granted by the legislator of European directives and regulations to demand from the data controller that the personal data about him/her be erased immediately if one of the following reasons applies and provided that processing is not required:

    • The personal data was collected or otherwise processed for purposes for which it is no longer needed.
    • The data subject revokes his/her consent that served as the basis for the processing according to Art. 6 (1) lit. a) GDPR or Art. 9 (2) lit. a) GDPR and there is no other legal basis for the processing.
    • The data subject raises an objection according to Art. 21 (1) GDPR against the processing and there are no overriding justified reasons for the processing, or the data subject objects to the processing according to Art. 21 (2) GDPR.
    • The personal data has been processed unlawfully.
    • The deletion of personal data is required to fulfil a legal obligation according to EU law or the laws of the Member States that apply to the data controller.
    • The personal data has been collected with regard to offered services of the information society according to Art. 8 (1) GDPR.

    If one of the aforementioned reasons applies and a data subject would like to initiate the erasure of personal data that is stored by KHD - Katzengruber Human Development Group GmbH, he/she can contact an employee of the data controller for this purpose at any time. The employee of KHD - Katzengruber Human Development Group GmbH will directly follow the request for erasure.

    If personal data has been made publicly accessible by KHD - Katzengruber Human Development Group GmbH and if our company, as the data controller according to Art. 17 (1) GDPR is obligated to erase the personal data, KHD - Katzengruber Human Development Group GmbH will take appropriate measures, also such of a technical nature, in consideration of the available technology and implementation costs, to inform other data controllers, who process the published personal data, that the data subject has requested from these other data controllers that all links to this personal data be erased or that he/she has requested copies or replications of this personal data, provided that processing is not required. The employee of KHD - Katzengruber Human Development will see to the necessary arrangements in the individual case.

  • e) Right to restriction of processing

    Each data subject whose personal data is being processed has the right granted by the legislator of European directives and regulations to request the restriction of the processing from the data controller if one of the following conditions is given:

    • the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
    • the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
    • the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the assertion, exercise or defence of legal claims;
    • the data subject has objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

    If one of the aforementioned conditions applies and a data subject would like to request the restriction of the processing of personal data that is stored by KHD - Katzengruber Human Development Group GmbH, he/she can contact an employee of the data controller for this purpose at any time. The employee of KHD - Katzengruber Human Development will then see to the restriction of the processing.

  • f) Right to data portability

    Each data subject whose personal data is being processed has the right granted by the legislator of European directives and regulations to receive the personal data concerning him or her, which he/she has provided to a controller, in a structured, commonly used and machine-readable format. The data subject furthermore has the right to transmit this data to another controller without hindrance from the data controller to which the personal data has been provided, provided that the processing is based on a consent pursuant to lit. (a) of Art. 6 (1) lit. a) GDPR or Art. 9 (2) lit. a) GDPR or on a contract pursuant to Art. 6 (1) lit. b) GDPR and the processing is carried out by automated means, provided that the processing is not required for the fulfilment of a task that is in the public interest or in exercise of public power that has been delegated to the data controller.

    In addition, the data subject has the right in the exercise of his/her right to data portability according to Art. 20 (1) GDPR to effect that the personal data is transmitted by a data controller to another data controller, insofar as this is technically practicable and no rights and freedoms of others are impaired thereby.

    To assert the right to data portability, the data subject can contact an employee of KHD - Katzengruber Human Development Group GmbH at any time.

  • g) Right to object

    Each data subject whose personal data is being processed has the right granted by the legislator of European directives and regulations to object at any time, for reasons arising from his/her particular situation, to the processing of their personal data based on Art. 6 (1) lit. e) or lit. f) GDPR. This also applies to profiling based on these provisions.

    KHD - Katzengruber Human Development Group GmbH will then cease the processing of this personal data in the case of an objection, unless we can prove compelling reasons for the processing, which qualify for protection and which override the interests, rights and freedoms of the data subject, or if the processing serves the purpose of asserting, exercising or defending legal claims.

    If KHD - Katzengruber Human Development Group GmbH processes personal data to engage in direct marketing, the data subject has the right to object at any time to the processing of personal data for such marketing. This also applies to profiling to the extent as is related to such direct marketing. If the data subject declares an objection to KHD - Katzengruber Human Development Group GmbH to the processing for direct marketing purposes, KHD - Katzengruber Human Development Group GmbH will no longer process the personal data for such purposes.

    Furthermore, the data subject has the right, for reasons arising from his/her particular situation, to object to the processing of personal data relating to him/her, which is carried out at KHD - Katzengruber Human Development Group GmbH for scientific or historical research purposes or for statistical purposes according to Art. 89 (1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons that are in the public interest.

    To exercise the right to object, the data subject can contact any employee of KHD - Katzengruber Human Development Group GmbH or another employee directly. The data subject additionally has discretion, notwithstanding Directive 2002/58/EC, to exercise his/her right to object with regard to the use of the services of the information society by means of automated procedures in which technical specifications are used.

    • h) Automated individual decision-making including profiling

    Each data subject whose personal data is being processed has the right granted by the legislator of European directives and regulations not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning him or her or similarly significantly affects him or her, unless the decision (1) is necessary for entering into, or performance of, a contract between the data subject and a data controller; or (2) is authorised by EU law or the law of the Member States to which the controller is subject and which also provides for suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests; or (3) is based on the data subject’s explicit consent.

    If the decision is made (1) for the conclusion or fulfilment of a contract between the data subject and a data controller; or (2) with the explicit consent of the data subject, KHD - Katzengruber Human Development Group GmbH will implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

    If the data subject wants to exercise rights with regard to automated decision-making, he/she can contact an employee of the data controller for this purpose at any time.

  • i) Right to revoke a consent according to data protection laws

    Each data subject whose personal data is being processed has the right granted by the legislator of European directives and regulations to revoke a consent to the processing of personal data at any time.

    If the data subject wants to exercise his/her right to revoke a consent, he/she can contact an employee of the data controller for this purpose at any time.

8. Data protection for job applications and application procedures

The responsible data controller collects and processes the personal data of job applicants for the purpose of carrying out the application process. The processing can also be implemented electronically. This is the case in particular if an applicant transmits corresponding application documents via electronic channels, for example, by email or an online form on the website to the responsible data controller. If the data controller concludes an employment contract with an applicant, the transmitted data will be stored for the purposes of processing the employment contract in observation of the legal regulations. If no employment contract is concluded by the data controller with the applicant, the application documents will be deleted two months after the announcement of the decision to decline, provided that no other justified interests of the data controller are opposed to deletion. Other justified interest in this sense is, for example, the burden of proof in proceedings pursuant to the General Equal Treatment Act (AGG).

9. Data privacy provisions on the use and application of Google Analytics (with anonymisation feature)

The data controller has integrated the component Google Analytics (with anonymisation feature) on this website. Google Analytics is a web analysis service. Web analysis is the gathering, collection and analysis of data about the behaviour of the visitors to websites. A web analysis service also gathers data about the website from which a data subject was referred to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is primarily used to optimise a website and to conduct a cost-benefits analysis of online advertising.

The operator company of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The data controller uses for the web analysis via Google Analytics the extension "_gat._anonymizeIp". By means of the extension, the IP address of the data subject’s internet connection is truncated and anonymised by Google if our webpages are accessed from a Member State of the European Union or another signatory state to the Treaty on the European Economic Area.

The purpose of the Google Analytics component is to analyse visitor traffic on our website. Google uses the gathered data and information also to analyse the usage of our website, to compile online reports for us that indicate the activities on our webpages, and to perform further services relating to the use of our website.

Google Analytics uses a cookie on the data subject’s information technology system. It was explained above what cookies are. Setting the cookie enables Google to analyse the usage of our website. By each retrieval of one of the individual pages of this website, which is operated by the data controller and in which a Google Analytics component has been integrated, the web browser on the data subject’s information technology system is prompted automatically by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. Within the scope of this technical procedure, Google will obtain knowledge of personal data, such as the data subject’s IP address, which is used by Google to determine the origin of the visitors and the clicks, and to issue invoices for commission fees in subsequence.

By means of the cookie, personal data such as the time of the access, the place from which an access was made and the frequency of the data subject’s visits to our website is stored. On each visit to our webpages, this personal data including the IP address of the internet connection used by the data subject is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google might transmit the personal data gathered in this technical procedure to third parties under certain circumstances.

As described above, the data subject can prevent at any time that cookies are set by our website by means of a corresponding adjustment in the setting of the web browser that he/she uses and to thereby object permanently to the setting of cookies. Such a setting in the web browser used would also prevent that Google sets a cookie on the data subject’s information technology system. A cookie already set by Google Analytics can be deleted at any time via the web browser or other software programs.

The data subject additionally has the possibility to object and prevent the gathering of data generated by Google Analytics, the use of the personal data relating to this website, and the processing of this data by Google. For this purpose, the data subject needs to download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about the visit to websites may be transmitted to Google Analytics. Installation of the browser add-on is considered to be an objection by Google. If the data subject’s information technology system is deleted, formatted or reinstalled at a later time, the data subject will have to reinstall the browser add-on to deactivate Google Analytics. If the browser add-on is deinstalled or deactivated by the data subject or another person attributable to his/her sphere of influence, there is the possibility of reinstallation or repeated activation of the browser add-on.

You can find more information and the applicable data privacy policies of Google at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link https://www.google.com/intl/de_de/analytics/.

10. Data privacy provisions on the use and application of Google AdWords

The data controller has integrated Google AdWords integrated on this website. Google AdWords is a service for online advertising, which enables advertisers to display ads in the search engine results of Google as well as in the Google advertising network. Google AdWords enables an advertiser to determine certain keywords in advance, by means of which an ad is displayed in the search engine results of Google exclusively when the user calls up a search result that is relevant in terms of the keyword by means of the search engine. In the Google advertising network, the ads are distributed across webpages that are relevant for the topic by means of an automatic algorithm and in consideration of the previously defined keywords.

The operator of the services of Google AdWords is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is the advertising of our website by displaying personalised advertising according to interests on the websites of third-party companies and in the search engine results of the search engine Google and the displaying of external advertising on our website.

If the data subject is referred to our website via a Google ad, a so-called conversion cookie is stored by Google on the information technology system of the data subject. It was explained above what cookies are. A conversion cookie loses its validity after thirty days and does not serve to identify the data subject. Through the conversion cookie, provided that the cookie has not expired yet, it is tracked whether certain subpages, e.g. the shopping cart of an online shop, have been called up on our website. Both we as well as Google can trace by means of the conversion cookie whether a data subject, who was referred to our website from an AdWords ad, has generated a sale, thus purchased a product or cancelled such a process.

The data and information gathered by means of conversion cookies is used by Google to generate traffic statistics for our website. These traffic statistics are used by us in turn to assess the total number of users, who have been referred to us via AdWords ads, thus to measure the success or lack thereof of the respective AdWords ad and to optimise our AdWords ads for the future. Neither our company nor other advertising customers of Google AdWords receive information from Google by means of which the data subject could be identified.

By means of the conversion cookie, personal data is stored such as the websites visited by the data subject. In each visit to our webpages, personal data including the IP address of the internet connection used by the data subject is accordingly transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google might transmit the personal data gathered in this technical procedure to third parties under certain circumstances.

As described above, the data subject can prevent at any time that cookies are set by our website by means of a corresponding adjustment in the setting of the web browser that he/she uses and to thereby object permanently to the setting of cookies. Such a setting in the web browser that is used would also prevent that Google sets a conversion cookie on the data subject’s information technology system. A cookie already set by Google AdWords can be deleted at any time via the web browser or other software programs.

The data subject also has the option to object to personalised advertising by Google. To do so, the data subject has to call up the link www.google.de/settings/ads in the web browser he/she uses and adjust the settings as desired by him/her.

You can find more information and the applicable data privacy policies of Google at https://www.google.de/intl/de/policies/privacy/.

11. Legal basis for the processing

Art. 6 (1) lit. a) GDPR serves as the legal basis for our company to implement processing actions for which we obtain consent for a certain purpose of processing. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as this is the case, for example, in processing that is required for the delivery of goods or the performance of another service or counter service, the processing is based on Art. 6 (1) lit. b) GDPR. The same applies to such processing actions that are required to conduct pre-contractual measures, for example, in cases of queries about our products or services. If our company is subject to a legal obligation requiring the processing of personal data, such as for the fulfilment of fiscal duties, the processing is based on Art. 6 (1) lit. c) GDPR. In rare cases, the processing of personal data may become necessary to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were to suffer personal injury at our business and if thereupon his/her name, age, health insurance details and other vital information would have to be transferred to a doctor, hospital or other third party. In such a case the processing would be based on Art. 6 (1) lit. d) GDPR. Ultimately, processing activities could be based on Art. 6 (1) lit. f) GDPR. This legal provision serves as the basis for processing activities, which are not covered by any of the previously mentioned legal basis when the processing is required to protect a justified interest of our company or of a third party, provided that there are no overriding interests, fundamental rights and freedoms of the data subject. Such processing activities are permitted to us in particular because they have been mentioned separately by the European legislature. It presented the opinion that a justified interest could be presumed if the data subject is a customer of the data controller (recital 47 sent. 2 GDPR).

12. Justified interest in the processing that are pursued by the data controller or a third party

If the data processing is based on Art. 6 (1) lit. f) GDPR, our justified interest rests in the exercise of our business operations for the benefit of all our employees and our shareholders.

13. Period for which personal data is stored

The criterion for the period of the storing personal data is the respective statutory retention period. After expiration of the period, the corresponding data will be routinely deleted, provided it is no longer required for the fulfilment of a contract or initiation of a contract.

14. Legal or contractual regulations on the provision of personal data; requirement for the conclusion of the contract; obligation of the data subject to provide personal data; potential consequences of non-provision

We hereby inform you that the provision of personal data is partly mandated by law (e.g. tax regulations) or it can result from contractual agreements (e.g. information on the contractual partner). It may be required for the conclusion of a contract in some cases that a data subject provides personal data to us, which must be processed by us in subsequence. The data subject is obligated, for example, to provide personal data to us when our company concludes a contract with him/her. Non-provision of the personal data would entail that the contract with the data subject could not be concluded. Before a provision of personal data by the data subject, the data subject must contact one of our employees. Our employee will inform the data subject, as specific to the individual case, whether the provision of personal data is mandated by law or the contract, if it is required for the conclusion of the contract, whether there is an obligation to provide the personal data, and what the consequences would be if the personal data was not provided.

15. Applicability of an automated decision-making

As data controller, we omit automatic decision-making or profiling.

This sample Data Privacy Policy was generated by means of the  DSGVO Datenschutzerklärungs Generator [GDPR Data Privacy Policy Generator] of Deutsche Gesellschaft für Datenschutz [ German Association for Data Protection], in cooperation with the law firm for  media law  WILDE BEUGER SOLMECKE | Attorneys at Law.