Privacy policy

We are very pleased about your interest in our company. Data protection has a particularly high priority for the management of the Alex 30 Hostel. A use of the websites of the Alex 30 Hostel is basically possible without any indication of personal data. If an affected person wishes to use special services of our company through our website, however, a processing of personal data could be required. If the processing of personal data is required and there is no legal basis for such a processing, we generally involve a consent of the person concerned. The processing of personal data, for example, the name, the address, e-mail address or telephone number of an affected person, always takes place in accordance with the Privacy Policy and in accordance with the country-specific privacy policy applicable to the Alex 30 hostel. With this privacy policy, our company wishes to inform the public about the nature, scope and purpose of the personal data used and processed by us. Furthermore, affected persons are elucidated by means of this privacy policy on the rights they are entitled.

The Alex 30 Hostel has implemented numerous technical and organizational measures for the processing, to ensure as seamless possible protection of the personal data processed via this website. Nevertheless, Internet-based data transfers may generally have security gaps so that an absolute protection can not be guaranteed. For this reason, everyone affected person is free to transmit personal data on alternative ways, for example by telephone.

The Data Protection Declaration of the Alex 30 Hostel is based on the terminology used by the European Directive and Regulator in the adoption of the Data Protection Basic Regulation (DS-GMO). Our privacy policy should be readily readable and understandable for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

Among other things, we use the following terms in this privacy policy:

1. Definitions

  • Personal data
    Personal data are all information relating to an identified or identifiable natural person (hereinafter referred to as “affected person”). A natural person is considered to be identifiable, directly or indirectly, in particular by means of assignment to an identifier such as a name, to a pass number, location data, an online identifier or one or more special features, the expression of physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person can be identified.
  • affected person
    Affected person is any identified or identifiable natural person whose personal data is processed by the person responsible for processing.
  • Processing
    Processing is every procedure executed with or without the help of automated procedures or any series of tasks in connection with personal data such as the collection, capture, organization, organization, storage, adaptation, or change, reading, queries, use, Disclosure by transmission, distribution or other form of deployment, adjustment or linking, limitation, deleting or destruction.
  • Restriction of processing
    Restriction The processing is the marking of stored personal data with the aim of restricting its future processing.
  • Profiling
    Profiling is any type of automated processing of personal data, which is that these personal data are used to evaluate certain personal aspects that relate to a natural person, in particular to aspects of work performance, economic situation, health, personal Preferences, interests, reliability, behavior, whereabouts or change of location of this natural person to analyze or predict.
  • Pseudonymization
    Pseudonymization is the processing of personal data in a manner to which the personal data can no longer be assigned to a specific person to a specific person without involving additional information, provided that this additional information is stored separately and subject to technical and organizational measures that ensure that the personal data Not assigned to an identified or identifiable natural person.
  • Responsible or responsible for processing
    Responsible or responsible for processing is the natural or legal person, authority, facility or other entity, which decides alone or together with others about the purposes and means of processing personal data. If the purposes and means of this processing are specified by the Union law or the law of the Member States, the responsible or may be provided for the specific criteria of his naming under Union law or the law of the Member States.
  • Processor
    Processor is a natural or legal person, authority, facility or other body, which processes personal data on behalf of the responsible person.
  • Recipient
    Recipient is a natural or legal person, authority, facility or other body that discloses personal data, regardless of whether it is a third party or not. Behörden, die im Rahmen eines bestimmten Untersuchungsauftrags nach dem Unionsrecht oder dem Recht der Mitgliedstaaten möglicherweise personenbezogene Daten erhalten, gelten jedoch nicht als Empfänger.
  • Third
    Third is a natural or legal entity, authority, facility or other body except the person concerned, the responsible person, the contractor and the persons who are authorized under the immediate responsibility of the responsible or the contractor, to process the personal data.
  • Consent
    Consent is each voluntary of the person concerned voluntarily for the particular case in a noted manner and unambiguously given will in the form of an explanation or any other unambiguous confirmatory action to understand the person concerned that they agree with the processing of personal data concerning them is.

2. Name and address of the responsible for processing

Responsible within the meaning of the Data Protection Basic Regulation, other data protection laws in the Member States of the European Union and other provisions with a privacy character is:

3. Cookies

The websites of MS Hostel Alex 30 UG use Cookies. Cookies are text files that are stored and stored via an Internet browser on a computer system. Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookies. It consists of a string, through which websites and servers can be assigned to the concrete Internet browser in which the cookie was stored. This allows the visited websites and servers to distinguish the individual browser of the person concerned from other Internet browsers containing other cookies. A specific internet browser can be recognized and identified via the unique cookie ID. Through the use of cookies, the Alex 30 Hostel can provide users of this website more user-friendly services that would not be possible without the cookie setting. By means of a cookie, the information and offers can be optimized on our website within the meaning of the user. Cookies allow us to recognize the users of our website as already mentioned. The purpose of this recognition is to make it easier for users to use our website. The user of a website that uses cookies, for example, does not need to enter its access data on each visit of the website, because this is adopted by the website and the cookie stored on the user’s computer system. Another example is the cookie of a shopping basket in the online shop. The online shop remembers the articles that a customer laid in the virtual shopping cart has a cookie. The affected person can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus conflict with the setting of cookies permanently. Furthermore, already set cookies can be deleted at any time via an Internet browser or other software programs. This is possible in all common internet browsers. If the affected person deactivates the setting of cookies in the Internet browser used, may not be fully usable all the functions of our website.

4. Recording of general data and information

The website of the Alex 30 Hostel records a number of general data and information with each entry of the website through an affected person or an automated system. This general data and information are stored in the log files of the server. The (1) browser types and versions, (2) can be used, (2) the operating system used by the accessory system, (3) the website, from which a accessing system passes to our website (so-called referrers), (4) the subjects, which over A accessing system to our website are controlled, (5) the date and time of access to the website, (6) an Internet Protocol Address (IP Address), (7) the Internet Service Provider of the Accessing System and (8) other similar data and information that serve in the case of attacks on our information technology systems. When using this general data and information, the Alex 30 Hostel does not draw any conclusions about the person concerned. Rather, this information is needed to deliver (1) the contents of our website correctly, (2) optimize the contents of our website as well as advertising for them, (3) to ensure the permanent functionality of our information technology systems and the technology of our website and ( 4) In order to provide law enforcement authorities in the case of a cyber attack the information necessary for law enforcement. This data and information raised anonymously will therefore be evaluated by the Alex 30 Hostel on the one hand statistically and also with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data specified by a person concerned.

5. Contact possibility via the website

The website of the Alex 30 Hostel contains information due to statutory regulations, which enable fast electronic contact to our company and direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If an affected person receives contact with the person responsible for processing by e-mail or via a contact form, the personal data transmitted by the person concerned will be automatically stored. Such a voluntary basis from an affected person to the personal data transferred for the processing are stored for purposes of processing or contacting the person concerned. There is no distribution of these personal data to third parties.

6. Routine deletion and blocking of personal data

The person responsible for processing processes and stores personal data of the person concerned only for the period required to achieve the purpose of storage or if this is due to the European policy and regulator or other legislator in laws or regulations, which responsible for processing underlying, was provided. If the storage purpose is eliminated or runs a storage period prescribed by the European Directive and Regulator or any other competent legislator, the personal data is routinely and in accordance with the statutory provisions shall be blocked or deleted.

7. Rights of the affected person

Confirmation right

Each person concerned has the right granted by the European directive and regulatory authority to request confirmation from the person responsible for processing whether it is processed to relevant personal data. If an affected person wants to use this right of confirmation, it can be contacted at any time to an employee of the person responsible for processing.

Information right

Any person affected by the processing of personal data has the right granted by the European Directive and Regulator and to receive any free information on the personal data stored for processing for the processing of the personnel responsible for processing and a copy of this information. Furthermore, the European directive and regulatory authority of the person concerned has informed the following information about the following information:
The processing purposes
The categories of personal data that are processed
The recipients or categories of recipients to which the personal data have been disclosed or are not yet disclosed, especially for recipients in third countries or in international organizations
If possible, the planned duration for which the personal data is stored or, if not possible, the criteria for the definition of this duration
The existence of a right to correction or deletion of the personal data relating to you or to restrict the processing by the responsible or a right of opposition to this processing
The existence of a complaint with a supervisory authority
If the personal data is not collected from the person concerned: all information available on the origin of the data
The existence of automated decision-making, including profiling in accordance with Article 22 (1) and 4 DS-GMOs and – at least in these cases – meaningful information about the logic involved, as well as the scope and the desired effects of such processing for the person persons concerned is the person concerned Right of information regarding whether personal data were transmitted to a third country or to an international organization. If this is the case, the person concerned is the right to obtain information about the appropriate guarantees in connection with the transmission. You can use an affected person of this right to information at any time to an employee of the for Contact the processing.

Right to correction

Any person affected by the processing of personal data has the right granted by the European Directive and Regulator, to demand the immediate correction of incorrect personal data. Furthermore, the person concerned is the right to demand, taking into account the purposes of processing, the completion of incomplete personal data – even by means of a supplementary explanation – to claim an affected person of this right of correction, it can be used at any time to an employee of the Contact for processing.

Right to deletion (right to forget)

Any person affected by the processing of personal data has the right granted by the European Directive and Regulator and to demand from the person responsible for the personal data to be deleted immediately if one of the following reasons approves and as far as the processing is not required:
Personal data were collected or otherwise processed for such purposes for which they are no longer necessary.
The person concerned revokes their consent to which the processing in accordance with Article 6 (s). 1 letter A DS-GMO or Art. 9 para. 2 Letter A DS-GMO supported, and there is a lack of legal basis for processing.
The person concerned laid down in accordance with Art. 21 Abs. 1 DS-GMO contradiction against the processing, and there are no primary legitimate reasons for processing, or the person concerned shall be submitted in accordance with Art. 21 Abs. 2 DS-GMO contradiction against the processing.
Personal data were illegally processed.
The deletion of personal data is required to fulfill a legal obligation under Union law or the law of the Member States under which the person responsible is subject.
Personal data were published in relation to the services offered by the information society in accordance with Art. 8 Abs. 1 DS-GMOs are raised.Sofern one of the reasons mentioned above and an affected person wants to initiate the deletion of personal data stored in the Alex 30 Hostel, it can be contacted at any time to an employee of the person responsible for processing. The employee of the Alex 30 Hostel will arrange that the extinguishing demand will have fulfilled immediately. The personal data was publicly made by the Alex 30 hostel and is our company as a responsible person under Article 17 (s). 1 DS-GMOs to delete the personal data, the Alex 30 hostel, taking into account the available technology and implementation costs, shall take note of adequate measures, also a technical manner to inform other data processing, which process the published personal data, set that the person concerned from these other data processing for data processing required the deletion of all links to these personal data or copies or replication of these personal data, insofar as the processing is not required. The employee of the Alex 30 Hostel will cause the necessary one in individual cases.

Right to restriction of processing

Any person concerned by the processing of personal data has the right granted by the European Directive and Regulator, to demand the restriction of processing from the person responsible if one of the following conditions is given:
The accuracy of personal data is denied by the person concerned, for a duration that makes it possible to verify the correctness of personal data.
The processing is unlawful, the person concerned rejects the deletion of personal data and instead requires the limitation of the use of personal data.
The responsible person no longer requires the personal data for the purposes of processing, but the person concerned requires them to assert, exercise or defense of legal claims. The person concerned has appealed against processing acc. Art. 21 para. 1 DS-GMO and it is not yet determined whether the legitimate reasons of the responsible person are predominant compared to those of the person concerned. Sofar is given one of the above requirements and one The person concerned is the limitation of personal data stored at the Alex 30 Hostel, it may require them to contact an employee of the responsible for processing at any time. The employee of the Alex 30 Hostel will initiate the restriction of the processing.

Right to data transferability

Any person affected by the processing of personal data has the right granted by the European Directive and Regulator, which provides you with personal data relating to a responsible person by the person concerned, in a structured, common and machine-readable format. It also has the right to convey this data to another responsible person without disability provided by the person responsible for personal data, provided that the processing is subject to consent in accordance with Article 6 (12). 1 letter A DS-GMO or Art. 9 para. 2 letter A DS-GMO or on a contract in accordance with Art. 6 Abs. 1 letter B DS-GMO is based and the processing by means of automated procedures, provided that processing is not necessary for the perception of a task which is in public interest or in the exercise of public violence, which was transferred to the responsible person. The person concerned has when exercising your right to data transferability according to Art. 20 Abs. 1 DS-GMO The right to obtain that personal data will be transmitted directly from a responsible person to another responsible person insofar as this is technically feasible and if it is not affected by the rights and freedoms of other persons. For the assertion of the right to data transferability The person affected at any time contact an employee of the Alex 30 Hostel.

Contradiction’s right

Any person affected by the processing of personal data has the right granted by the European Directive and Regulator, for reasons resulting from its special situation, at any time against the processing of personal data, which due to Art. 6 para. 1 letter E or F DS-GVO is made to appeal. This also applies to a profiling-based profiling. The Alex 30 Hostel does not process the personal data in the event of contradiction, unless we can prove compelling relevant reasons for the processing that the interests, rights and freedoms of the person concerned Outweighing, or processing is used to assert, exercise or defense of legal claims. The Alex 30 Hostel’s personal data is used to operate direct advertising, the person concerned has the right to at any time contradict against the processing of personal data for the purpose of such advertising. This also applies to profiling, as far as this is associated with such direct advertising. If the affected person contradicts the person to the Alex 30 hostel of processing for the purpose of direct advertising, the Alex 30 Hostel will no longer process the personal data for these purposes.Cudem has the person concerned the right, for reasons resulting from their special situation , against the processing of personal data related to the Alex 30 hostel for scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) DS-GMOs, unless such processing is to fulfill one The task required in the public interest. For the exercise of the right to contradiction, the person concerned may contact any employee of the Alex 30 hostel or other employee directly. The person concerned is also free, in connection with the use of services of the information society, regardless of Directive 2002/58 / EC, to exercise its right of objection by means of automated procedures in which technical specifications are used.
Automated decisions in individual cases including profiling
Any person affected by the processing of personal data has the right granted by the European Directive and Regulator, not to be subject to exclusively on automated processing – including profiling-based decision, which is unfolded to legal effect or in a similar manner significantly, if the decision (1) is not necessary for the conclusion or fulfillment of a contract between the person concerned and the responsible person, or (2) is permissible due to the Union legislation or the Member States which are subject to the person responsible and these legislation is appropriate to preserve the rights and freedoms as well as the legitimate interests of the person concerned or (3) with the explicit consent of the person concerned is carried out. If the decision (1) for the conclusion or fulfillment of a contract between the relevant Person and the responsible person or (2) takes place with the express consent of the person concerned, the Alex 30 hostel meets reasonable measures to maintain rights and freedoms and the legitimate interests of the person concerned, for which at least the right to obtain the intervention a person by the responsible person, to present their own point of view and on contesting the decision. Possed the person concerned with relation to automated decisions, it can at any time apply to an employee of the person responsible for processing.

Right to revocation of a data protection consent

Any person affected by the processing of personal data has the right granted by the European Directive and Regulator authority to revoke a consent to the processing of personal data at any time. If the person concerned claims to assert their right to revoke a consent, it can be assigned to an employee at any time of those responsible for processing.

8. Data protection for applications and application process

The person responsible for processing raises and processes the personal data of applicants for the purpose of processing the application process. The processing can also be made electronically. This is particularly the case if an applicant submitted appropriate application documents on the electronic way, for example by e-mail or via a web form on the website, to which responsible for processing. If the person responsible for processing a contracting contract with an applicant, the transmitted data for the purpose of processing the employment relationship shall be stored in compliance with the statutory provisions. If no employment contract with the applicant is concluded by the applicant, the application documents are automatically deleted two months after the announcement of the cancellation decision, unless any other legitimate interests of the person responsible for processing. Miscellaneous interest in this sense is, for example, a proceedings in a method according to the General Equal Treatment Act (AGG).

9. Privacy Policy for use and use of Facebook

The responsible for the processing has integrated on this website components of the company Facebook. Facebook is a social network. A social network is an Internet-operated social meeting place, an online community that allows users to communicate with each other and interact in virtual space. A social network can serve as a platform for exchanging opinions and experiences or enables the internet community to provide personal or corporate information. Facebook allows users of the social network including the creation of private profiles, the upload of photos and networking about friend requests. Operator company from Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. Responsible for the processing of personal data if an affected person lives outside the US or Canada, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. With each call of one of the individual pages of this website, which is operated by the responsible for processing and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the person concerned is automatically through the respective Facebook Component causes a representation of the corresponding Facebook component from Facebook to download. An overview of all Facebook plug-ins can be retrieved at https://developers.facebook.com/docs/plugins/?locale=en_en.

In the context of this technical procedure, Facebook has aware of what concrete underside of our website is visited by the person concerned. If the affected person is logged in on Facebook at the same time, Facebook recognizes with every call to our website through the person concerned and throughout the duration of the respective stay on our website, which visits the affected person’s concrete underside of our website. This information is collected by the Facebook component and assigned to the respective Facebook account of the person concerned through Facebook. If the affected person operates one of the Facebook buttons integrated on our website, for example the “Like” button, or gives the affected person a comment, assigns Facebook this information to the personal Facebook user account of the person concerned and stores this personal data . Facebook always receives information about the Facebook component that the person concerned has visited our website if the person concerned is logged in at the time of calling our website at Facebook; This will take place regardless of whether the affected person clicks the Facebook component or not. If such a transmission of this information on Facebook is not wanted by the affected person, this can prevent the transmission from making a look at our website from your Facebook account before calling our website.

The Data Directive published by Facebook, which is available at https://de-de.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data through Facebook. Furthermore, there will be explained which setting options Facebook offers protection of privacy of the person concerned. In addition, different applications are available, which make it possible to suppress a data transmission on Facebook. Such applications can be used by the person concerned to suppress a data transmission on Facebook.

10. Privacy Policy for use and use of Google Analytics (with anonymization function)

The responsible for processing has integrated the component Google Analytics (with anonymization function) on this website. Google Analytics is a web analysis service. Web analysis is the survey, collection and evaluation of data on the behavior of websites from websites. A web analysis service captures, among other things, data about which website an affected person has come to a website (so-called referrers) on which subpages of the website accessed or how many times and for which residence time has been considered. A web analysis is predominantly used to optimize a website and the cost-benefit analysis of Internet advertising. Operator company The Google Analytics component is the Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The responsible for the processing for the Web analysis via Google Analytics the addition “_Gat._anonymizeizeP”. By means of this addition, the IP address of the internet connection of the affected person of Google is shortened and anonymized when accessing our websites from a Member State of the European Union or from another Contracting State of the Agreement on the European Economic Area. The purpose of the Google Analytics component is the analysis of the visitor streams on our website. Google uses the data obtained and information, among other things, to evaluate the use of our website to assemble for us online reports, which show the activities on our websites, and to provide more services related to the use of our website.

Google Analytics sets a cookie on the information technology system of the person concerned. What are cookies have already been explained above. With the setting of the cookie Google will enable an analysis of the use of our website. By every call of one of the individual pages of this website, which is operated by the responsible for processing and on which a Google Analytics component has been integrated, the Internet browser is automatically caused by the respective Google Analytics component on the information technology system of the person concerned To transmit data for the purpose of online analysis to Google. As part of this technical procedure, Google receives knowledge about personal data, such as the IP address of the person concerned, which Google, among other things, serve to understand the origin of visitors and clicks and enable commission settlements. With the cookies, personal information, for example, the access time, the location, from which access assayed and the frequency of visits to our website is stored by the person concerned. Each time you visit our websites, these personal data, including the IP address of the Internet access used by the person concerned, will be transferred to Google in the United States of America. This personal data is stored by Google in the United States of America. Google continues to provide these persons related to the technical procedure to third parties. The affected person can prevent the setting of cookies through our website, as already shown above, at any time by means of a corresponding setting of the Internet browser used, and thus conflict with the setting of cookies permanently. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs. Furthermore, the person concerned is the possibility of reflecting the data generated by Google Analytics, to a use of this website and the processing of these data by Google and to prevent such.

To do this, the affected person must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout. This browser add-on shares Google Analytics via JavaScript that no data and information about visiting websites can be sent to Google Analytics. The installation of the browser add-on is considered by Google as a contradiction. If the information technology system of the person concerned is deleted, formatted or reinstalled at a later date, the person concerned must take a reinstallation of the browser add-ons to disable Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or another person who is attributable to their power range, there is the possibility of reinstalling or re-activating the browser add-on.

Further information and the applicable data protection regulations from Google can be found at https://www.google.de/intl/en/policies/privacy/ and at www.google.com/analytics/terms/en.html. Google Analytics will be explained in more detail under this link https://www.google.com/intl/en_en/analytics/.

11. Privacy Policy for use and use of Google+

The responsible for processing has integrated the Google+ button on this website as a component. Google+ is a so-called social network. A social network is an Internet-operated social meeting place, an online community that allows users to communicate with each other and interact in virtual space. A social network can serve as a platform for exchanging opinions and experiences or enables the internet community to provide personal or corporate information. Google+ allows users of the social network including the creation of private profiles, the upload of photos and networking about friend requests. Google+ operator company is the Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. By every call of one of the individual pages of this website, which is operated by the responsible for processing and on which a Google+ button has been integrated, the Internet browser on the information technology system of the person concerned is automatically caused by the respective Google+ button, a representation of the corresponding Google+ To download the button from Google. As part of this technical procedure, Google receives knowledge about which concrete underside of our website is visited by the person concerned. More detailed information about Google+ is available at https://developers.google.com/+/.

If the person concerned is logged in at Google+ at the same time, Google recognizes every time of our website through the affected person and during the entire duration of the respective stay on our website, which visits the concrete underside of our website the person concerned. This information is collected by the Google+ button and assigned by Google to the Google + Account of the person concerned. If the affected person operates one of the Google + buttons integrated on our website and thus assigns a Google + 1 recommendation, assigns this information to the personal Google + user account of the person concerned and stores this personal data. Google stores the Google + 1 recommendation of the person concerned and makes them publicly available in accordance with the conditions accepted by the person concerned in this regard. A Google + 1 recommendation issued by the person concerned on this website is subsequently linked to other personal data, such as the name of the Google + 1 Accounts used by the person concerned, and the photo stored in this Google Services, For example, the search engine results of the Google search engine, the Google account of the person concerned or other bodies, for example on websites or associated with advertisements, stored and processed. Furthermore, Google is able to link the visit to this website with other personal data stored on Google. Google also records this personal information with the purpose of improving or optimizing the different services of Google. Google will always receive information about the Google + button that the person concerned has visited our website if the person concerned is logged in at the time of calling our website at Google+; This will take place regardless of whether the person concerned clicks the Google + button or not. If a transmission of personal data to Google from the person concerned is not intended, this can prevent such a transmission by taking you to log out of your Google + -account before calling our website. Further information and the applicable data protection regulations from Google can be retrieved at https://www.google.de/intl/en/policies/privacy/.

Further information from Google to Google + 1 button can be retrieved at https://developers.google.com/+/web/buttons-policy.

12. Legal basis of processing

Art. 6 I lit. A DS-GMO serves our company as a legal basis for processing operations, which we obtain consent for a specific purpose of the purpose. If the processing of personal data for the fulfillment of a Treaty, whose Party is the person concerned, as required, for example, in processing operations, which is necessary for a delivery of goods or the provision of any other performance or consideration, the processing is based on Art. 6 I lit. b DS-GVO. The same applies to such processing operations which are required to carry out pre-contractual measures, such as in cases of requests for our products or services. If our company is subject to a legal obligation by which processing of personal data is required, such as for fulfillment of tax duties, the processing is based on Art. 6 I lit. c DS-GVO. In rare cases, the processing of personal data could be required to protect vital interests of the person concerned or other natural person. This would be the case, for example, if a visitor would be injured in our operations and then his name, age, health insurance or other vital information would have to be passed on to a doctor, a hospital or other third parties. Then the processing would be based on Art. 6 I lit. D DS-GMOs. Ultimately, processing operations could be based on Art. 6 I lit. F DS-GMOs. On this legal basis, processing processes that are not covered by any of the aforementioned legal bases if the processing is required to maintain a legitimate interest of our company or a third party, provided that the interests, fundamental rights and fundamental freedoms of the person concerned do not predominate. Such processing operations are therefore permitted in particular because they were specially mentioned by the European legislature. In that regard, he considers that a legitimate interest could be accepted if the person concerned is a customer of the responsible person (recital 47 sentence 2 DS-GMOs).

13. Legal interests in processing tracked by the responsible person or a third party

Based on the processing of personal data on Article 6 I lit. F DS-GMOs our legitimate interest is the implementation of our business activities in favor of the well-being of all our employees and our shareholders.

14. Duration for which the personal data is stored

The criterion for the duration of storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted, unless they are required to fulfill the contract or contract initiation.

15. Legal or contractual rules for the provision of personal data; Requirement for the conclusion of the contract; Obligation of the person concerned to provide personal data; Possible consequences of non-provision

We clarify that the provision of personal data is partly required by law (e.g., tax legislation) or can also arise from contractual regulations (e.g., information on the contracting party). Sometimes it may be necessary for a conclusion of the contract that an affected person provides us with personal data, which must be processed by us as a result. For example, the person concerned is obliged to provide us with personal data if our company concludes a contract with her. Non-provision of personal data would mean that the contract could not be closed with the person concerned. Prior to providing personal data by the person concerned, the person concerned must contact one of our employees. Our employee clarifies the individual case-related information concerned whether the provision of personal data is required by law or contractually required or for the conclusion of the contract whether it is an obligation to provide personal data and what consequences would have the non-provision of personal data.

16. Existence of automated decision-making

As a responsible company, we renounce an automatic decision-making or profiling. This privacy policy was prepared by the privacy policy generator of the DGD German Gesellschaft für Datenschutz GmbH, which operates as an external data protection officer Kaufbeuren, in cooperation with the lawyer for privacy Christian Solmecke.