back

Data protection

Data Protection Officer

On this page we would like to inform you about the used data processing strategies and the implemented specifications of the information processing. The data protection has legitimately - as required by the new General Data Protection Regulation of the European legislator - a high priority and protection value. The following statement gives you an overview of how we ensure this protection and what kind of data is collected for which purpose.

The use of the internet pages on our website is basically possible without any indication of personal data. However, if a data subject wishes to use special services through our website, personal data processing may be required. If the processing of personal data is necessary and there is no legal basis for such processing, we generally seek the consent of the data subject.

The processing of personal data, such as the collection of the name, address, e-mail address, telephone number or other information of a data subject, shall be in accordance with the requirements of the General Data Protection Regulation and in accordance with the country-specific data protection provisions applicable to the website. Our Privacy Policy aims to provide information about the type, scope and purpose of the personal information processed by our website to the public. At the same time, we want to use this statement to inform people affected about their rights.

As the controller responsible for processing, our website has implemented numerous organizational and technical measures to ensure the most complete protection possible for the personal data it processes. Nevertheless, Internet-based data transmissions can generally have security holes, so that absolute protection can not be guaranteed. For this reason, every person concerned is free to pass on personal data to us in alternative ways, for example by telephone or in person.

1 Definitions

The privacy policy of our portal is based on the terminology used by the European directive and regulatory authority when adopting the General Data Protection Regulation (GDPR). In Germany we called the GDPR Datenschutz-Grundverordung and we prefer to take the German abbreviation DSGVO in the following. Our privacy policy should be easy to read and understand, both for the public and for our visitors, members and business partners. In order to do that, we would first like to explain the terms of the DSGVO that we have adopted.

We use the following terms in this privacy policy, including but not limited to:

• Personal data
  Personal data is any information relating to an identified or identifiable natural person (hereinafter the "affected person"). A natural person is considered to be identifiable, which can be identified directly or indirectly, in particular via the assignment to an identifier such as a name, to an identification number, to location data, to an online identifier or to one or more special features that express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
• Affected person
  Affected person is any identified or identifiable natural person whose personal data is processed by the responsible controller.
• Processing
  Processing shall be understood to mean any process or series of operations relating to personal data carried out with or without the aid of automated procedures. Processing includes processes of collection, collection, organization, ordering, storage, adaptation or modification, retrieval, retrieval, use, disclosure by transfer, dissemination or any other form of provision, reconciliation, or linking, restricting, deleting or destroying information.
• Restriction of processing
  Under limiting the processing, the marking of personal data stored with the aim of limiting its future processing is defined.
• Profiling
  Profiling means any kind of automated processing of personal data which involves the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal to analyze or predict preferences, interests, reliability, behavior, whereabouts, or relocation of that natural person.
• Pseudonymization
  Pseudonymisation is the processing of personal data in a way to which it can no longer be assigned to a specifically affected person without the need for additional information. This additional information shall be kept separately and shall be subject to organisational and technical measures to ensure that the personal data are not assigned to an identified or identifiable natural person.
• Responsible or responsible for data controlling
  Responsible or responsible for processing is the natural or legal person, authority, institution or other body that decides alone or jointly with others about the purposes and means of processing personal data. Where the purposes and means of such processing are determined by union law or by the law of the Member States, the responsible or entitled to the specific criteria of his designation in accordance with Union law or the law of the Member States may be provided.
• Order processors
  An order processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the responsible controller.
• Recipient
  A recipient is a natural or legal person, authority, institution or other body that discloses personal information, regardless of whether it is a third party or not. However, authorities which may receive personal data under a specific investigation mandate under Union law or the law of the Member States shall not be considered as recipients.
• Third party
  The term "third party" means a natural or legal person, authority, institution or other body authorised to process the personal data but they are all other than the affected person, the responsible, the order processor and the persons under the direct responsibility of the responsible or order processors.
• Consent
  Consent is any of the affected person concerned voluntarily for the particular case in an informed manner and unequivocally given expression of will in the form of a declaration or other clear and conclusive act which gives the affected person the right to understand that she or he agrees to the processing of the personal data relating to her or him.

2 Name and address of the responsible

The person responsible within the meaning of the General Data Protection Regulation, other data protection laws in the Member States of the European Union and other provisions with data protection character is:

Gertrud Lingens-Leser
Max-Planck-Str. 3
52428 Jülich

Phone: +49 2461 9954549
Webseite: www.maat-ka-ra.de
E-Mail: karl.leser@t-online.de

3 Name and address of the data protection officer

The data protection officer of the responsible (controller) is:

Gertrud Lingens-Leser
Max-Planck-Str. 3
52428 Jülich

Any affected person can contact our data protection officer at any time with any questions or suggestions regarding data protection.

4 Cookies

Our websites use cookies. Cookies are text files that are stored and stored via an Internet browser on a terminal device (laptop, tablet, smartphone, PC, etc.).

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited websites and servers to distinguish the individual's browser from other Internet browsers that contain differently marked cookies. A particular web browser can be recognized and identified by the unique cookie ID.

By using cookies, our website can provide users of the website with more user-friendly services that would not be possible without cookies.

With the help of cookies, the information and offers on our website can be optimized for the benefit of the user. Cookies enable us to recognize a user of our website within his time of use or in general. The purpose of this recognition is to make it easier for users to use our website, e.g. with form usage. For example, a non-logged-in user of a website that uses cookies does not have to re-enter their access data every time they visit the website because this is done by the website and the cookie stored on the user's computer system. Only when he has logged out or the time of the last log-in is too long ago, the cookie is deleted or is invalid. Another example is the cookie of a shopping basket in the online shop. The online shop remembers the items that a customer has placed in the virtual shopping cart in the process of not yet completed, via a cookie. Upon completion of the order, the cookie will be deleted. Without the use of cookie technology, users would need to identify themselves with each user's username and password for each shopping cart action.

We also use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer. These cookies enable us to automatically recognize when you visit our site again that you have already been with us or which entries or settings you have made. These cookies are automatically deleted after a defined time.

The affected person can prevent the setting of cookies on our website at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Furthermore, already set cookies can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. Please use the help function of your browser if you want to know how it can delete cookies. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

Through so-called online ad cookies, you can find out about the following link http://www.youronlinechoices.com in most European languages and counteract the setting of this type of cookies under preference management.

The data processed by cookies are for the stated and discussed purposes for the protection of our legitimate interests as well as the third party according to Art. 6 para. 1 s. 1 lit. f DSGVO required.

5 Collection of general data and information

Our website collects a number of general data and information with each call by an affected person or an automated system. This general data and information are stored in the logfiles of the server. The following list provides information about what can be captured.

• The type of browser and version used,
• the operating system used by the accessing system,
• the internet site from which a comprehensive system reaches our website (so-called referrers),
• the sub-websites, which are controlled via a comprehensive system on our website,
• The date and time of access to the website,
• an Internet Protocol address (IP address),
• the Internet service provider of the accessing system and
• other similar data and information used to provide security in the event of attacks on our information technology systems.

When using this general data and information, we do not draw any conclusions about the affected person. Rather, this information is needed to

• correctly deliver the contents of our website,
• optimize the content of our website as well as the advertising for it,
• ensure the long-term functioning of our information technology systems and the technology of our website, as well as
• to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

These anonymously collected data and information are evaluated by us statistically and also with the aim of increasing the data protection and data security on our portal. We want to ensure an optimal level of protection for the personal data we are working on. The anonymous data of the server logfiles are stored separately from all personal data provided by an affected person.

The legal basis for data processing is Art. 6 (1) s.1 li. f DSGVO.

6 Routine deletion and blocking of personal data

The responsible for data processing shall process and store personal data of the affected person only for the period of time required to achieve the storage purpose, or if this is done by the European directive and regulation giver or by any other legislator in laws or regulations which are subject to the responsible for data protection.

If the purpose of the storage is omitted or if a storage period prescribed by the European directive and regulation provider or another competent legislator is cancelled, the personal data will be routinely and in accordance with the legal Regulations blocked or deleted.

7 Rights of the affected person

a) Right to confirmation
Each affected person shall have the right granted by the European directive and regulation giver to require the responsible for data protection to confirm whether the personal data concerned are being processed. If an affected person wishes to claim this right of confirmation, she may contact our data protection officer or another employee of the responsible of data protection at any time.

b) Right to information
Any affected person concerned by the processing of personal data shall have the right granted by the European directive and regulation provider to charge free information on the personal data stored on his person and to get a copy of that information. Furthermore, the European directives and regulation giver has granted rights to the affected person for information about the following:

• The processing purposes
• The categories of personal data that are processed
• The recipients or categories of recipients to whom the personal data has been disclosed or will still disclose, in particular to recipients in third countries or to international organisations
• If possible, the planned duration for which the personal data is stored, or, if this is not possible, the criteria for determining this duration
• The existence of a right to rectification or deletion of the personal data relating to the person or to the limitation of processing by the responsible data protector or a right of objection against such processing
• The existence of a right of appeal by a supervisory authority (according to Art. 77 DSGVO)
• If the personal data are not collected from the affected person: All available information on the origin of the information
• The existence of automated decision-making, including profiling in accordance with art.22 para. 2 and para. 4 of the DS-GVO and, at least in such cases, meaningful information on the logic involved and the scope and impact of a processing for the affected person. In addition, the affected person is entitled to a right of access to information on whether personal information has been transmitted to a third country or to an international organisation. Where this is the case, the affected person shall also be entitled to obtain information on the appropriate guarantees in connection with the transfer. If a affected person wishes to avail himself of this right of access, it may at any time contact our privacy officer or another employee of the responsible data protector.

c) Right to rectification(according to Art. 16 DSGVO)
Any person affected by the processing of personal data shall have the right granted by the European directives and regulation giver to require the immediate rectification of any incorrect personal data relating to them. Furthermore, the person concerned has the right to demand the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing. If a affected person wishes to avail himself of this right of rectification, she may at any time contact our data protection officer or another employee of the responsible.

d) Right to delete (right to be forgotten according to Art. 17 DSGVO)
Any person concerned by the processing of personal data shall have the granted right by the European directive and regulation giver to require the controller to delete the personal data relating to him without delay, provided that for one of the following reasons and to the extent that the processing is not required:

• The personal data were collected for such purposes or processed in any other way for which they are no longer necessary.
• The affected person shall revoke the consent to which the processing was based in accordance with art.6 para. 1 lit. a of the DS-GVO or art. 9 para. 2 lit. a of the DS-GVO, and there is no other legal basis for processing.
• The affected person disagrees with the processing pursuant to art. 21 para. 1 of the DS-GVO and there are no priority reasons for the processing, or the affected person submits an opposition to processing in accordance with art. 21 para. 2 of the DS-GVO.
• The personal data has been processed in an unlawful form.
• The deletion of personal data is necessary for the fulfilment of a legal obligation under union law or the law of the Member States to which the person responsible is subject.
• The personal data were collected in relation to the services offered by our website in accordance with art. 8 para. 1 of the DS-GVO. If one of the above reasons applies and an affected person wishes to cause the deletion of personal data stored in our website, it may at any time contact our data protection officer or another person responsible for the processing. Our data protection officer or another employee will arrange for the deletion request to be immediately fulfilled. If the personal data have been made public by us and we are responsible for the deletion of the personal data in accordance with art. 17 para. 1 DS-GVO, and If our company is responsible for the deletion of personal data in accordance with art. 17 para. 1 of the DS-GVO, we shall take appropriate measures, taking into account the available technology and the implementation costs, also in a technical way, to inform other data controllers who process the published personal data that the affected person has requested the deletion of all links to this personal data or of copies or replicas of such personal data, insofar as the processing is not required. The data protection officer of our website or another employee will arrange the necessary in individual cases.

e) Right to restrict processing (according to Art. 18 DSGVO)
Any affected person concerned by the processing of personal data shall have the right granted by the European directive and regulation giver to require the controller to restrict the processing if one of the following conditions is met:

• The correctness of the personal data is disputed by the affected person, for a period of time, which enables the controller to verify the accuracy of the personal data.
• The processing is unlawful, the affected person rejects the deletion of the personal data and instead demands the restriction of the use of the personal data.
• The person responsible no longer needs the personal data for the purposes of the processing, but the affected person needs it for the assertion, exercise or defence of legal claims.
• The affected person has appealed against the processing in accordance with art. 21 par. 1 of the DS-GVO and it is not yet determined whether the legitimate reasons of the responsible outweigh those of the affected person. If any of the above conditions are met and an affected person wishes to require the restriction of personal data stored in our database, it may at any time contact our data protection officer or another person responsible for the processing. The data protection officer of our website or another employee will cause the restriction of the processing.

f) Right to data transferability (Art. 20 DSGVO)
According to the European directive and regulation giver, any affected persons shall have the right, to get the personal data in a structured, common and machine-readable format, if they have provided these data to the responsible. The affected persons shall also have the right to transmit such data from one to another responsible party without hindrance by the responsible for providing the personal data, and that the handing out based on the consent provided for in art. 6 para. 1 lit. a of the DS-GVO or art. 9 para. 2 lit. a of the DS-GVO or a contract pursuant to art. 6 para. 1 lit. b of the DS-GVO and the processing is carried out using automated procedures. This contains however that the processing is not necessary for the performance of a task which is in the public interest or in the exercise of public authority which has been transferred to the responsible.
Furthermore, in exercising its right to transfer data in accordance with art. 20 para. 1 of the DS-GVO, the person concerned shall have the right to obtain that the personal data are transmitted directly by one responsible to another person responsible, insofar as this is technically feasible and if this does not affect the rights and freedoms of other persons.
In order to assert the right to transfer data, the affected person may at any time contact our Data protection Officer or another employee.

g) Right to objection
Any affected person by the processing of personal data shall have the right, for reasons arising out of its particular situation, to contradict the processing of any personal information which is made on the basis of art. 6 para. 1 lit. e or lit. f DS-GVO of the European directive and regulation giver. This also applies to profiling based on these provisions.
We will no longer process the personal data in the event of opposition, unless we can prove compelling reasons for the processing that outweigh the interests, rights and freedoms of the affected person, or the processing touch the assertion, exercise or defence of legal claims.
If we processes personal data in order to operate direct advertising, the person concerned has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling as far as it is related to such direct advertising. If the data subject is against processing for direct marketing purposes, we will no longer process the personal information for these purposes.
In addition, the affected person shall have the right, for reasons arising out of its particular situation, to subject to opposition against the processing of personal data relating to it in the case of scientific or historical research purposes or for statistical in accordance with art. 89 para. 1 of the DS-GVO, unless such processing is necessary to fulfil a public interest task.
In order to exercise the right of opposition, the affected person may directly contact our data protection officer or another employee.

h) Automated decisions in individual cases, including profiling (with Art. 22 DSGVO)
Any affected person by the processing of personal data shall have the granted right by the European directive and regulation giver, to be subjected not a decision based solely on automated processing, including profiling, which has a legal effect or which in a similar manner significantly impairs it, provided that the decision

• is not necessary for the conclusion or fulfilment of a contract between the affected person and the responsible, or
• is permissible on the basis of legislation of the Union or of the Member States to which the responsible is subject, and that this legislation provides for appropriate measures to safeguard the rights and freedoms and the legitimate interests of the affected person contain or
• happens with the express consent of the affected person.

Is the decision

• necessary for the conclusion or fulfilment of a contract between the affected person and the responsible for data processing or
• if it is made with the explicit consent of the affected person, we shall take appropriate measures to safeguard the rights and freedoms and the legitimate interests of the affected person, including at least the right to obtain the intervention of a person by of the responsible person, the presentation of his own position and the challenge of the decision.

If the affected person wishes to assert rights with regard to automated decisions, the person concerned may at any time contact our Privacy officer or another employee of the controller.

i) Right to revoke a data protection consent (according to Art. 7 Abs. 3 DSGVO)
Any person affected by the processing of personal data shall have the right to revoke consent to the processing of personal data at any time, as provided by the European directive and regulation giver.
If the affected person wishes to assert his right to revoke a consent, the person concerned may at any time contact our Privacy officer or another employee of the controller.

8 Use of web forms

Our homepage uses forms, e.g. to contact an affected person with our order processors.
The requesting affected person must fill out at least the mandatory fields in the form so that a data processor can answer the requesting person, e.g. via the specified e-mail address.
All contents of forms are encrypted via SSL. Outgoing e-mails to the affected persons are also transmitted via SSL encryption. Emails from affected persons are deleted by the order processor after final processing.

The purpose for the use of web forms is in accordance with Art. 6 para. 1 s.1 lit. f DSGVO based on your voluntarily granted consent.

9 Data security and encryption

Our website uses SSL encryption when it comes to the transmission of confidential or personal content of our users. This encryption is activated, for example, in the processing of donations as well as in the case of inquiries that you provide to us via our website. Please make sure that the SSL encryption is activated from your side in the case of related activities. The use of encryption is easy to see: The display in your browser line changes from "http://" to "https://". Data encrypted via SSL is not readable by third parties. Only send your confidential information when SSL encryption is enabled and contact us in case of doubt.

10 Opposition promotional emails

Within the scope of the legal imprint obligation we must publish our contact data. These are used in part by third parties to send unwanted advertisements and information. We hereby object to any unauthorised sending of advertising material of any kind. We also expressly reserve the right to take legal action against unwanted and unsolicited sending of promotional material. This applies in particular to so-called spam e-mails, spam letters and spam faxes. We would point out that the unauthorized transmission of advertising material may affect both competition law, civil law and criminal offences. Especially spam emails and spam faxes can lead to high claims for damages if they require more staff by trapping mailboxes or faxes.

11 Up-to-dateness and change of this data protection explanation

This privacy policy is currently valid and is as of April 2018.
Through further development of our website and offers or due to changed legal or regulatory requirements, it may be necessary to change this privacy policy.
The current data protection declaration can always be accessed and printed on our website at https://www.maat-ka-ra.de under the menu point "Data protection".

back