Data protection

Privacy Policy

Content:
I. Persons responsible for the purposes of data protection laws
II. Data Protection Officer
III. General information about data processing
IV. Automatic data processing when calling the website ru.butterflymag.com
V. Use of cookies
VI. Processing of personal data via the contact form
VII. Processing of personal data when setting up a customer account
VIII. Processing of personal data when establishing a customer account during the order and completion of the order
IX. Processing of personal data when completing an order as a guest (without setting up a customer account)
X. Newsletter
XI. Processing of personal data via e-mail
XII. Processing of personal data via telephone
XIII. Processing of personal data via fax
XIV. Rights of the person concerned

Data processing by us
When using the website www.butterfly.tt, its functionalities, your contact and a request, you provide us with personal data that we process for the purpose of processing your requests. These data are treated strictly strictly bound by our privacy laws.

I. Person responsible in the sense of the data protection laws is:

Tamasu Butterfly Europe GmbH
Kommunikationsstr. 8th
47807 Krefeld
Germany

Telephone number: + 49-2151-935670
E-Mail: info@butterfly.tt

Represented by the CEO:
Takako Osawa, Taisei Imamura

II. Data Protection Officer

Statutory Data Protection Officer:
We have appointed a data protection officer for our company.

RDP Röhl Dehm & Partner Attorneys at Law mbB
Moritzplatz 6
86150 Augsburg
dsb@butterfly.tt

III. General information about data processing

Scope of processing of personal data in general

Basically, we process personal data only to the extent necessary for the provision of a functioning website and our content and services.

Legal basis for the processing of personal data:

The respective legal basis for the processing of personal data arises from the General Data Protection Regulation, which is set out in Article 6 para. 1 lit. a) — f) EU-GDPR.

With the consent of the data subject, Art. 6 para. 1 lit. a) EU-GDPR Legal basis.

Art. 6 para. 1 lit. b) EU-GDPR is the legal basis for the processing of personal data necessary for the performance of a contract of which the data subject is a party or processing operations in the case of pre-contractual measures.

If processing to fulfill a legal obligation of the person responsible is required, Art. 6 para. 1 lit. c) EU-GDPR Legal basis.

If vital interests of the data subject or another natural person require processing, Art. 6 para. 1 lit. d) EU-GDPR Legal basis.

If the processing is necessary for the performance of a task in the public interest or in the exercise of public authority delegated to the controller, the legal basis is Article 6 (1) lit. e) EU-GDPR.

If the processing is necessary to safeguard the legitimate interests of our company and the interests, freedoms or fundamental rights of the data subject do not prevail, the legal basis is Art. 6 (1) lit. f) EU-GDPR.

For the conclusion of a contract or the provision of personal data required by statutory retention requirements

When you contact us, we collect personal information. These data are stored by us partly due to legal regulations, partly they are necessary for the conclusion of a contract. If you want to contract with us, you must provide us with your information so that we can provide our services to you. In addition, statutory retention requirements arise for us from a tax and commercial point of view, which we must comply with. Otherwise we may u.U. our service to you does not yield.

Before providing your personal data, you are welcome to inform your respective contact person in our company whether we need your data to conclude a contract and / or our statutory storage obligations and what the consequences are if you do not provide us with the data Make available.

Data erasure and storage duration

We store your personal data as long as this is necessary to fulfill the purpose or if storage is required by law, Art. 6 (1) lit. c) EU-GDPR.
If the purpose for storing personal data ceased to exist, this data will be deleted or limited in processing after 6 months, unless there is a need for further storage of the data for a contract conclusion or performance.
Any further storage will only take place if this has been provided for by the European or national legislator.

SSL or TLS encryption

On the whole website, we use SSL or TLS encryption for security reasons and to protect your confidential data.
Through this encryption, confidential data, such as requests or orders you submit to us, can not be viewed by third parties.
You can detect an encrypted connection by changing the address line of the browser from «http: //» to «https: //» and a green lock symbol is displayed in the address bar.

IV. Automatic data processing when calling the website ru.butterflymag.com

IP address

1. Description and scope of data processing
When this page is called, requests are sent to the server, which must answer it. For this, your IP address must be collected and processed in order to be able to answer the corresponding server requests.

2. Legal basis for data processing
The legal basis for the processing of this data is Art. 6 (1) lit. f) EU-GDPR.

3. Purpose of the data processing
The purpose of the processing of your IP address is the functionality of the website and the provision of the technical retrieval option.

4. Legitimate interest
The legitimate interest in the temporary storage of the IP address is that the functionality and provision of the technical retrieval ability of the website without them is not possible.

5. Duration of storage
The data will be deleted again as soon as the further storage is no longer necessary due to the need for an error.
This is the case when the data for providing the web page is collected when the retrieval process is completed.

6. Recipients of personal data
The IP address is determined by the following hosting provider on behalf of on the basis of an order processing agreement gem. Art. 28 (2) (4) EU-GDPR processes:

domain factory GmbH
Oscar Messter-Str. 33
85737 Ismaning
Germany

hosting

1. Description and scope of data processing
We use the services of our hosting service provider for the technical realization of the website and its availability as well as its technical maintenance.
This includes the provision of storage and database services as well as their maintenance and care.

2. Legal basis for data processing
The legal basis for the processing of this data is Art. 6 (1) lit. f) EU-GDPR.

3. Purpose of the data processing
The purpose of the processing is the realization of the online offer as well as the detection of malfunctioning and break-in attempts.

4. Legitimate interest
The legitimate interest in commissioning the hosting service provider is the external technical competence and the provision of a functional and uncompromised technical web site environment.

5. Recipients of personal data and data categories:

The following hosting provider is commissioned on the basis of a contract processing agreement. Art. 28 para. 2, para. 4 EU-GDPR acting for us:

domain factory GmbH
Oscar Messter-Str. 33
85737 Ismaning
Germany

Affected data categories are:

user data
communications data
contact details
contract data

Server log files

1. Description and scope of data processing

The IP addresses collected when accessing this page are also stored in so-called server log files in order to detect technical faults and / or manipulation and break-in attempts in the server structure and to make them recoverable.

In addition, the hosting provider of this website automatically collects, stores and processes information in so-called server log files, which are automatically transmitted by your browser.

This information is:

Browser type and browser version
used operating system
Referrer URL
Host name of the accessing computer
Time of the server request

However, this information will not be merged with other data sources.

2. Legal basis for data processing

The legal basis for the processing of this data is Art. 6 (1) lit. f) GDPR.

3. Purpose of the data processing

The purpose of processing your IP address and the above information is to detect malfunctioning and intrusion attempts.

4. Legitimate interest

The legitimate interest in processing the IP address and the above information is to provide a functional and uncompromised technical web page environment.

5. Duration of storage

The data will be deleted within 7 days.

6. Recipients of personal data

The IP address and the above information will be provided by the following hosting provider on behalf of a job processing agreement pursuant to Art. Art. 28 (2) (4) EU-GDPR processes:

domain factory GmbH
Oscar Messter-Str. 33
85737 Ismaning
Germany

V. Use of cookies

1. Description and scope of data processing

The site www.butterfly.tt uses so-called «cookies». Cookies are text files that are stored in the memory and / or on a data carrier of your device used for site visits and that are processed by your Internet browser according to the settings stored there. We use a cookie to determine when you log in to your customer account. In addition, we use a shopping cart cookie in order to recognize and edit the products that you have put into the shopping cart as part of the ordering process.

Content of these cookies is:

SID — Checks if the user has logged in. Checks if a shopping cart has been created for the user and which articles have been deposited there

2. Legal basis for data processing

The legal basis for processing is Art. 6 para. 1 lit. b) and Art. 6 para. 1 lit. f) EU-GDPR.

3. Purpose of the data processing

These cookies contain technical information for the provision of website functionality as part of the order and customer account process. This enables the technical realization of the purchasing and customer account process.

4. Legitimate interest pursuant to Art. 6 para. 1 lit. f) EU-GDPR

Our legitimate interest lies in providing a technical environment that maps an online shopping process to our customers and users. The cookies used contain only technical data and product information which represents the completion of an online shopping by our customers on the initiative of our customers.

5. Duration of storage as well as possibilities of objection and elimination

The cookies used on this site are so-called «session cookies». These will automatically be deleted from the browser cache / memory at the end of your website visit and / or when you close your browser, provided that you have activated this functionality in your browser.

Please check the settings of your internet browser (eg Firefox, Internet Explorer, Edge, Chrome, Opera, Safari). Your internet browser also gives you the option to regulate the treatment of cookies or disable them completely. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all features of the website to the full.

VI. Processing of personal data via the contact form

1. Description and scope of data processing

On our website there is a contact form, which serves only the electronic contact recording. We process your personal data only insofar as you inform us when you contact us.

For inquiries via the contact form the following data will be processed:

Surname*
E-mail address*
phone
Comment*

The fields marked with an «*» symbol are mandatory fields, without which no request can be sent to us via this contact form.

Please enter the telephone number only if you wish us to contact you by telephone.

The indication of the name serves the personal address in the context of the processing of your inquiry.

When entering the data into the forms, no data will be transmitted to us, this will only happen after pressing the «Send» button.

At the time of sending the message, the following data is also processed:

Date and time of the request

2. Legal basis for data processing

The legal basis for the processing of personal data for processing and answering your inquiries is Art. 6 para. 1 lit. f) EU-GDPR.
The legal basis for the processing of personal data for the preparation and / or execution of a contractual relationship is Article 6 (1) lit. b) EU-GDPR.

3. Purpose of the data processing

The processing of the personal data via the contact form is solely for the purpose of establishing contact and enabling the informational approach of the customer by the company on the initiative of the customer.
Depending on the intention and content of your request, the purpose may also be the initiation and / or performance of a contractual relationship, in which case the purpose is also to maintain the customer relationship.

4. Legitimate interest

The legitimate interest in data processing lies in the possibility to process your request and to be able to respond to you according to your request. The collected data will be processed on the basis of a request from you. This processing is also in your interest to respond to your request as you expect.

5. Duration of storage

The data are deleted within 6 months after they are no longer necessary for the achievement of the purpose of their collection or are subject to any further statutory retention obligations (for example, 10 years after AO, 6 years in accordance with HGB). For your data entered in the contact form, this is the case when the conversation with the user has ended.
In this case, the conversation is terminated when it emerges from the circumstances that the relevant facts have been finally clarified.

VII. Processing of personal data when setting up a customer account

1. Description and scope of data processing

You can create a customer account on our website to facilitate the ordering process. This account helps you to make the ordering process more efficient for you by automating the insertion of delivery data and managing your orders. For this purpose, we offer you a registration process in which you provide us with the following data:

First given name*
Surname*
company
E-mail address*
Date of birth
Password*
Confirm Password*

2. Legal basis for data processing

The legal basis for the processing of personal data for the preparation and / or execution of a contractual relationship is Article 6 (1) lit. b) EU-GDPR.

3. Purpose of the data processing

The processing of the personal data during the registration process is the purpose of the customer account, with which you can manage your orders and your contract data with ease.

4. Duration of storage

Your personal data will be deleted if you give us the order to delete your customer account. This does not apply if the data are subject to further statutory retention obligations (for example, 10 years after AO, 6 years in accordance with HGB). In this case, processing will be restricted until the expiry of the retention period.

5. Recipient of personal data

The data is processed by the following technical service provider on the basis of a contract processing agreement acc. Art. 28 (2) (4) EU-GDPR processes:

VIII. Processing of personal data when setting up a customer account during the order and completion of the order

1. Description and scope of data processing

You can create a customer account on our website to facilitate the ordering process. This account helps you to make the ordering process more efficient for you by automating the insertion of delivery data and managing your orders. For this purpose, we offer you a registration process in which you provide us with the following data:

First given name*
Surname*
company
E-mail address*
Address*
City*
Post Code*
Country*
phone
fax
Password*
Confirm Password*
Payment Information

If you are already a registered customer, only the following data for the billing address will be requested during the ordering process:

First given name*
Surname*
company
Address*
City*
Post Code*
Country*
phone
fax
Payment Information

If you would like to send the order to an address other than the billing address, the following data for the shipping address will also be requested:

First given name*
Surname*
company
Address*
City*
Post Code*
Country*
phone
fax

2. Legal basis for data processing

The legal basis for the processing of personal data for the preparation and / or execution of a contractual relationship is Article 6 (1) lit. b) EU-GDPR.

3. Purpose of the data processing

The processing of the personal data during the registration process is the purpose of the customer account, with which you can manage your orders and your contract data with ease.
The processing of personal data in the context of the order is the execution of the order, the payment, the delivery of the product and the possibility of any complaints, as well as the maintenance and maintenance of the customer relationship.

4. Duration of storage

Your personal data will be deleted if you give us the order to delete your customer account. This does not apply if the data are subject to further statutory retention obligations (for example, 10 years after AO, 6 years in accordance with HGB). In this case, processing will be restricted until the expiry of the retention period.

5. Recipient of personal data
The data is processed by the following technical service provider on the basis of a contract processing agreement acc. Art. 28 (2) (4) EU-GDPR processes:

Not applicable

IX. Processing of personal data upon completion of an order as a guest (without setting up a customer account)

1. Description and scope of data processing

On our website is an online shop functionality, which allows you to order our products online.
Here you can initiate the ordering of products on our shop, which we then deliver to you as part of our shipping process.

You can use the shop functions as a guest or as a registered customer after creating a customer account.

For the creation of a customer account, the information listed above under VII.

If you want to place the order as a guest, we charge:

First given name*
Surname*
company
E-mail address*
Address*
City*
Post Code*
Country*
phone
fax
Payment Information

If you would like to send the order to an address other than the billing address, the following data for the shipping address will also be requested:

First given name*
Surname*
company
Address*
City*
Post Code*
Country*
phone
fax

2. Legal basis for data processing

The legal basis for the processing of personal data for the preparation and / or execution of a contractual relationship is Article 6 (1) lit. b) EU-GDPR.

3. Purpose of the data processing

The processing of personal data in the context of the order is the execution of the order, the payment, the delivery of the product and the possibility of any complaints, as well as the maintenance and maintenance of the customer relationship.

4. Duration of storage

The data are deleted within 6 months after they are no longer necessary for the achievement of the purpose of their collection or are subject to any further statutory retention obligations (for example, 10 years after AO, 6 years in accordance with HGB). In this case, processing will be restricted until the expiry of the retention period.

5. Recipient of personal data

The data is processed by the following technical service provider on the basis of a contract processing agreement acc. Art. 28 (2) (4) EU-GDPR processes:

Not applicable

The data will be processed by the following shipping service provider on the basis of an order processing agreement acc. Art. 28 (2) (4) EU-GDPR processes:

DHL Paket GmbH
Lane 10
53113 Bonn

The data is processed by the following payment service providers:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg

EVO Payments International GmbH
Elsa-Brändström-Straße 10-12
50668 Cologne

X. Newsletter

1. Description and scope of data processing

We offer a newsletter with promotional information for our customers and interested parties. Signing up to our newsletter service uses the double-opt-in procedure to verify your registration.
Here you sign up via the newsletter form and receive an e-mail with a link after pressing the login button, which you can press to confirm and conclude the newsletter registration process. If you press this confirmation link, you will receive regular mailings with the content specifically described when you sign up for the newsletter. This registration process is also the process for obtaining your competition consent to send the newsletter within the meaning of the UWG. You can revoke this competitive consent at any time with effect for the future by pressing the unsubscribe link contained in each newsletter.

Our newsletter contains information about our offers, services and us.

We log every registration for our newsletter, so that we can provide proof of the registration in accordance with the statutory requirements.
The login and confirmation time as well as your IP address are saved.

At the same time, your data will also be logged and saved at our shipping service provider.

To register for our newsletter, it is sufficient if you provide your e-mail address in the registration form. However, we kindly ask you to give us a name so that we can personally address you in the newsletter.

For legally compliant administration of your consent, the data transmitted by you during the registration will be processed in our CRM system.

2. Legal basis for data processing

The legal basis for processing your personal data for sending the newsletter is Art. 6 para. 1 lit. f) EU-GDPR.

The legal basis for the processing and logging of the application procedure is Art. 6 para. 1 lit. f) EU-GDPR.

3. Purpose of the data processing

The purpose of data processing is solely to send out our newsletter and to document your registration in a legally secure manner, as well as to maintain the customer relationship.

4. Legitimate interest

Our legitimate interest lies in the customer- and user-friendly advertising approach for the purpose of direct advertising (recital 47 to the EU-GDPR) and the legally compliant logging of the registration process.

5. Duration of storage

The data provided by you when registering for the newsletter will be deleted by us at the latest 6 months after you have unsubscribed from the newsletter.

6. Recipient of personal data

Sendinblue S.a.r.l
55 rue d’Amsterdam, 75008 Paris

Our shipping service provider works for us on behalf of and on the basis of a contract processing agreement in accordance with Art. 28 para. 2, 4 EU-GDPR.
Our shipping service provider will not use your information to write to you.

XI. Processing of personal data via e-mail

1. Description and scope of data processing

For requests by e-mail, personal data will be processed depending on the content of your e-mail:

This is in any case your e-mail address, date and time as well as the content of the message. Too, depending on the content of your e-mail, for example, the following personal data are processed:

First name Last Name
phone number

The data will be used exclusively for the processing of the conversation and / or the performance and / or initiation of a contractual relationship.

2. Legal basis for data processing

On the basis of the user’s express request via e-mail, the legal basis for the processing of the data is Art. 6 para. 1 lit. f) EU-GDPR. If the establishment of contact by e-mail also aims to conclude and / or execute a contract, additional legal basis for the processing is Art. 6 para. 1 lit. b) EU-GDPR.

3. Purpose of the data processing
The processing of personal data via your e-mail request is solely for the purpose of contacting and facilitating the customer’s informational approach to the customer at the initiative of the customer.
Purpose may also be the initiation and / or performance of a contractual relationship, depending on the intention and content of your request.

4. Legitimate interest

The legitimate interest in data processing lies in the possibility to process your request and to be able to respond to you according to your request. The collected data will be processed on the basis of a request from you. This processing is also in your interest to respond to your request as you expect.

5. Duration of storage

The data are deleted within 6 months after they are no longer necessary for the achievement of the purpose of their collection or are subject to any further statutory retention obligations (for example, 10 years after AO, 6 years in accordance with HGB). For your email, this is the case when the conversation with the user ends.
In this case, the conversation is terminated when it emerges from the circumstances that the relevant facts have been finally clarified.

XII. Processing of personal data via telephone

1. Description and scope of data processing

For telephone inquiries, depending on the content of the call, personal data is processed:

This may also include the following personal information, depending on the information you provide during the call:

First name Last Name
phone number
customer number
payment data
contract data

The data will be used exclusively for the processing of the conversation and / or the performance and / or initiation of a contractual relationship.

2. Legal basis for data processing

On the basis of the user’s express request via telephone, the legal basis for the processing of data is Art. 6 para. 1 lit. f) EU-GDPR. If contacting by telephone also aims to conclude and / or execute a contract, additional legal basis for processing is Art. 6 para. 1 lit. b) EU-GDPR.

3. Purpose of the data processing

The processing of personal data by telephone is solely for the purpose of establishing contact and enabling the customer to informally address the customer at the initiative of the customer.
Depending on the intention and content of your request, the purpose may also be the initiation and / or performance of a contractual relationship, as well as the maintenance of the customer relationship.

4. Legitimate interest

The legitimate interest in data processing lies in the possibility to process your request and to be able to respond to you according to your request. The collected data will be processed on the basis of a request from you. This processing is also in your interest to respond to your request as you expect.

5. Duration of storage

The data are deleted within 6 months after they are no longer necessary for the achievement of the purpose of their collection or are subject to any further statutory retention obligations (for example, 10 years after AO, 6 years in accordance with HGB). For your email, this is the case when the conversation with the user ends.
In this case, the conversation is terminated when it emerges from the circumstances that the relevant facts have been finally clarified.

XIII. Processing of personal data via fax

1. Description and scope of data processing

For requests by fax, personal data will be processed, depending on the content of your message:

This is in any case your fax number, date and time as well as the content of the message. Additionally, depending on the content of your message, e.g. the following personal data are processed:

First name Last Name
phone number
customer number
payment data
contract data

The data will be used exclusively for the processing of the conversation and / or the performance and / or initiation of a contractual relationship.

2. Legal basis for data processing

Due to the express request of the user via fax, the legal basis for the processing of the data is Art. 6 para. 1 lit. f) EU-GDPR. If the establishment of contact by fax also aims to conclude and / or execute a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b) EU-GDPR.

3. Purpose of the data processing

The processing of personal data about your inquiry by fax is solely for the purpose of contacting and facilitating the informational approach of the customer by the company at the initiative of the customer.
Purpose may also be the initiation and / or performance of a contractual relationship, depending on the intention and content of your request.

4. Legitimate interest

The legitimate interest in data processing lies in the possibility to process your request and to be able to respond to you according to your request. The collected data will be processed on the basis of a request from you. This processing is also in your interest to respond to your request as you expect.

5. Duration of storage

The data are deleted within 6 months after they are no longer necessary for the achievement of the purpose of their collection or are subject to any further statutory retention obligations (for example, 10 years after AO, 6 years in accordance with HGB). For the fax request this is the case when the respective conversation with the user has ended.
In this case, the conversation is terminated when it emerges from the circumstances that the relevant facts have been finally clarified.

 

XIV. Rights of the person concerned

If personal data is processed by you, you are the data subject in the sense of the General Data Protection Regulation. Therefore, you have the following rights to the person responsible.

To exercise your rights to us as the person in charge, please contact us at the following e-mail address: dsb@butterfly.tt

1. Right to information — Art. 15 EU-GDPR

You have the right to ask the person in charge to confirm that you are processing personal data in question.

If such processing is available, you have a right to information about such personal data and the following information:

• the purposes for which the personal data are processed;
• the categories of personal data being processed;
• the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed;
• if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining the duration of the storage;
• the right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
• the existence of a right of appeal to a supervisory authority;
• all available information on the origin of the data, if the personal data are not collected from the data subject;
• the existence of automated decision-making including profiling under Article 22 (1) and (4) of the GDPR and — at least in these cases — meaningful information on the logic involved and the implications and intended effects of such processing on the affected party Person.

In addition, you have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can also request the appropriate guarantees in accordance with. Art. 46 DS-BER in connection with the transmission of information.

2. Right to rectification — Art. 16 DS-BER

You have the right to immediate correction and / or completion of the data concerning you, provided that the personal data processed is incorrect or incomplete.

3. Right to cancellation — Art. 17 DS-BER

Deletion obligations:

You have the right to demand the immediate deletion of your personal data at any time, provided that one of the following reasons is met:

• the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed;
• You have revoked your consent to the processing in accordance with. Art. 6 para. 1 lit. a) or Art. 9 para. 2 lit. a) based on DS-BER and there is no other legal basis for processing;
• In accordance with Art. 21 (1), you have filed an objection against the processing and there are no legitimate reasons for the processing, or you objected to the processing pursuant to Art. 21 (2) EU-GDPR;
• the personal data relating to you have been processed unlawfully;
• the deletion of personal data concerning you is required to fulfill a legal obligation under Union or national law, to which the controller is subject;
• the personal data relating to you were collected in relation to information society services offered pursuant to Article 8 (1) of the GDPR.

exceptions:
There is no right to erasure if processing is required

to exercise the right to freedom of expression and information;
to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task which is in the public interest or in the exercise of official authority which has been entrusted to the controller ;
for reasons of public interest in the field of public health as referred to in Article 9 (2) (h) and (i) and Article 9 (3);
for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes under Article 89
Paragraph 1 of the GDPR, in so far as the law referred to in subparagraph (a) is likely to render impossible or seriously prejudice the achievement of the objectives of that processing; or
to assert, exercise or defend legal claims.

4. Right to restriction of processing — Article 18 of the GDPR

You have the right under the following conditions to demand the restriction of your personal data:

• if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of the personal information;
• if the processing is illegal and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
• if the controller no longer needs the personal data for the purposes of the processing, but you need them for the assertion, exercise or defense of legal claims, or
• if you object to the processing pursuant to Art. 21 para. 1 EU-GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, these data may only be used, with the exception of storage, for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or be processed for reasons of important public interest of the Union or of a Member State.

If the restriction on processing has been restricted due to the above conditions, you will be notified by the person responsible before the restriction is lifted.

5. Right to information — Art. 19 DS-BER

If you have claimed any of your rights to rectification, erasure or restriction of processing, we shall be obliged to notify all recipients of the personal data you have disclosed about the correction, erasure or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.

In addition, you have the right to be informed about these recipients.

6. Right to Data Portability — Art. 20 DS-BER

You have the right to receive personally identifiable information relating to you provided to the Responsible in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that

a) the processing on a consent acc. Art. 6 para. 1 lit. a) EU-GDPR or Art. 9 para. 2 lit. a) EU-GDPR or on a contract in accordance with. Art. 6 para. 1 lit. b) EU-GDPR is based and
b) the processing is done by automated means.

In exercising this right to data transferability, you also have the right to obtain that personal data concerning you are transmitted directly from one controller to another party, as far as technically feasible.

7. Right of objection — Art. 21 EU-GDPR

You have the right at any time, for reasons arising from your particular situation, to prevent the processing of personal data relating to you which, on the basis of Article 6 (1) lit. e) or f) EU-GDPR takes an objection; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for assertion, exercise or defense of legal claims.
If personal data is processed in order to operate direct mail, you have the right to object at any time to the processing of the personal data relating to you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of Information Society Services, of exercising your right to opt-out by means of automated procedures that use technical specifications.

8. Right to revoke the data protection consent declaration

You have the right to withdraw your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

9. Right to complain to a supervisory authority — Art. 77 DS-BER

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its habitual residence, place of work or place of alleged infringement, if you believe that the processing of the Your personal data violates the General Data Protection Regulation.

The supervisory authority to which you are complaining must inform you as the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 DS-BER.

These privacy notices are updated at regular intervals.