Data protection officer of our company is Mr. Thomas Schürstedt. The data protection officer can be reached as follows:

Thomas Schürstedt

E-Mail: schuerstedt(at)daniel-gruppe.de

The production of the anonymized data is carried out standardized by our website provider, which currently can not be deactivated by us.

This data is collected in a standardized manner by our website provider. This collection of data can not currently be deactivated but the data is not used or evaluated by us:

• IP address in anonymous form is used to determine the location of the access
• Referrer (previously visited website)
• Requested website or file
• Browser type and browser version
• Operating system used
• Used device type
• Time of access

As part of the processing of their anonymous data

• through our website provider, which is bound by contract, are viewed
• further transfers are not made

In order to achieve the reasons described in point 4.1, it is necessary that you give us your personal information for the enjoyment. For a conclusion as well as the implementation of the contract with them is the mandatory or legally required. In case of non-provision we can not conclude a contract with you. In the case of complaints, you can always contact the responsible supervisory authority. For our company that is in point 3.3. competent authority. You have the right to have this judicially examined, according to article 78 of the DS-GVO, against a supervisory authority and, according to article 79 DS-GVO, against our company.

You have the right to request information about whether we process personal information about you or not. When we process personal information from you, you are entitled to learn

• why we process your data (see also point 4.1);
• what kinds of data we process from you;
• which type of recipients should receive or receive data from you (see also point 4.3);
• how long we will save your data; If it is not possible to give an indication of the storage duration, we must inform you of how the retention period will be determined (eg after expiry of statutory retention periods) (see also section 4.5);
• that you have a right to rectification and deletion of the data concerning you, including the right to limit the processing and / or the possibility of objection (see also points 5.2, 5.3 and following);
• that you have the right of appeal to a supervisory authority;
• where your data comes from, if we did not collect it directly from you;
• whether your data will be used for an automatic decision and, if so, what logic the decision is based on and what impact and scope the automated decision may have for you;
• that, if data about you are transmitted to a country outside the European Union, you are entitled to information as to whether and, if so, based on which guarantees, an adequate level of protection of the data recipient is ensured;
• that you have the right to request a copy of your personal data. Data copies are always provided in electronic form. The first copy is free of charge, additional copies may require a reasonable fee. A copy can only be provided if the rights of other persons are not affected.

You have the right to demand deletion of your personal data from us if

• the personal data are no longer required for the purposes for which they were collected and processed;
• the data has been processed on the basis of your consent and you have revoked your consent; however, this does not apply if there is another legal permission for data processing;
• Have lodged an objection to data processing the legal authorization of which is in the so-called "legitimate interest" (referred to in Article 6 (1) (e) or (f)); deletion does not have to take place if there are legitimate reasons for further processing;
• You have lodged an objection to data processing for direct marketing purposes;
• Your personal data has been processed unlawfully;
• it concerns data of a child, which were raised for services of the information society (= electronic service) on the basis of the consent (according to kind 8 exp. 1 DSGVO).

A right to delete personal data does not exist if

• the right to freedom of expression and information conflicts with the request for cancellation;
• the processing of personal data
  - to fulfill a legal obligation (eg statutory retention requirements),
  - to perform public duties and interests under applicable law (including "public health") or
  - required for archiving and / or research purposes;
• the personal data required to assert, exercise or defend legal claims.

The deletion must be carried out immediately (without culpable hesitation). If personal data has been made public by us (eg on the Internet), we must ensure, as far as is technically possible and reasonable, that other data processors are also informed about the deletion request, including the deletion of links, copies and / or replications.

You have the right to restrict the processing of your personal data in the following cases:

• If you have disputed the accuracy of your personal information, you may request that your data not be used elsewhere for the duration of the verification of accuracy, thereby limiting its processing.
• In the case of unlawful data processing, you may request the restriction of data usage instead of data deletion;
• If you require your personal data to assert, exercise or defend your rights, but we no longer need your personal information, you may require us to restrict the processing to the purposes of law enforcement;
• If you have objected to data processing (pursuant to Art. 21 para. 1 GDPR) (see also point 5.7) and it is not yet clear whether our interests in processing outweigh their interests, they may request that their data be used for the purposes of processing Duration of the test is not used for other purposes and thus their processing is restricted.

Personal data whose processing has been restricted to their request may, subject to storage - only

• with her consent,
• to assert, exercise or defend legal claims,
• to protect the rights of other natural or legal persons, or
• be processed for reasons of important public interest

Should a processing restriction be lifted, they will be informed in advance.

You have the right to request the data that you have provided to us in a common electronic format (eg as a PDF or Excel document). You may also request us to transfer this information directly to another (through a specific) company, if technically possible for us. The condition for having this right is that the processing takes place on the basis of a consent or for the execution of a contract (see point 4.2) and is carried out with the help of automated procedures. The exercise of the right to data portability does not affect the rights and freedoms of others. If you exercise the right to data portability, you continue to have the right to data deletion under Article 17 of the GDPR.

If your data is processed for the purpose of performing public interest or legitimate interests (see 4.2), you may object to such processing. You must explain to us the reasons that arise from your particular situation for your opposition. This can z. B. special family circumstances or legitimate secrecy interests. In the event of objection, we shall refrain from any further processing of your data for the purposes stated under point 4.1, unless

• there are compelling, legitimate grounds for processing that outweigh their interests, rights and freedoms, or
• the processing is necessary for the assertion, exercise or defense of legal claims.

You may object to the use of your data for the purpose of direct mail at any time; this also applies to profiling insofar as it is connected with direct mail. In the case of opposition, we may no longer use your data for direct marketing purposes.

Direct mail and / or profiling is never initiated or carried out by us.

Decisions by us that have a legal consequence or that significantly affect you must not be based solely on the automated processing of personal data. This includes profiling. This prohibition does not apply as far as the automated decision

• is required for the conclusion or fulfillment of a contract with you,
• is permitted by law, if such legislation contains reasonable measures to protect your rights and freedoms and your legitimate interests, or
• with their express consent.

Decisions that are based exclusively on automated processing of special categories of personal data (= sensitive data) are only permitted if based on

• Your express consent or
• there is a significant public interest in processing

and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

For exercising the rights of the persons concerned, please contact the authorities mentioned under point 4. Requests that are submitted electronically are usually answered electronically. The information, communications and measures to be provided under the GDPR, including "the exercise of the data subject rights, are generally provided free of charge. Only in the case of manifestly unfounded or excessive requests are we entitled to levy an appropriate fee for the processing or to refrain from taking action (according to Article 12 (5) of the DS-BER).

If there are reasonable doubts about your identity, we may request additional information from you for identification purposes. If an identification is not possible for us, we are entitled to refuse to process your request. We will - if possible - notify you separately about a missing possibility for identification. (see Articles 12 (6) and 11 DS-BER).

Information and information requests are usually processed immediately, within one month of receipt of the request. The deadline may be extended by a further two months, as far as this is necessary taking into account the complexity and / or the number of requests; In the event of an extension, we will inform you of the reasons for the delay within one month of receiving your request. If we do not respond to a request, we will immediately notify you of the reasons for doing so within one month of receipt of the request and inform you of the possibility to lodge a complaint with a supervisory authority or to seek judicial remedy. (see Article 12 (3) and (4) of the GDPR).

Please note that you can exercise your rights only in the context of the Union or the member states of foreseen restrictions and restrictions. (Article 23 of the GDPR)