When you visit our website, our internet provider collects data about your visit in so-called log files. This data includes the name of your internet service provider, your IP address, details of the website you visited before ours, details of which of our websites you visit, and the date, time and duration of your visit. It is used only for statistical purposes. We do not link this data to your person.
The data controller responsible for the data collected and processed as described below is the entity named in this website's legal notice.
IP address storage
We store the IP address transmitted by your web browser for a strictly specific purpose for a period of seven days, in the interest of being able to detect, limit and eliminate attacks on our websites. After this period, we delete the IP address. The lawful basis for this is Art. 6(1)(1)(f) of the GDPR.
We do not collect any user data beyond this when you use the SLOT Manager.
Within the scope of charging a service provider with the processing of the data on our behalf as per Art. 28 GDPR, we transmit your data to such service providers who help us with the operation of our websites and the associated processes. These could be hosting providers, for example. Our service providers are strictly bound by our instructions and are contractually bound to follow these.
Transfer to third countries outside of the EU/EEA
We do not transmit personal data to a third country outside of the EU.
We implement technical and organisational measures to protect your data from unwanted access to the greatest extent possible. We use an encryption procedure on our websites. Your data is transferred from your computer to our server and vice versa via the internet using TLS encryption. You can verify this by the fact that the lock symbol in the status bar of your browser shows a closed lock, and that the address line starts with https://.
Your user rights
The GDPR grants you as the website user certain rights with regard to the processing of your personal data:
1. Right of access (Art. 15 GDPR):
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to access this personal data and the respective information in detail as per Art. 15 GDPR.
2. Right to rectification and erasure (Art. 16 and 17 GDPR):
You have the right to request the correction of any inaccurate personal data relating to you and, if applicable, the completion of any incomplete personal data without delay. Furthermore, you have the right to ask us to immediately erase the respective personal data, provided that one of the reasons listed in detail in Art. 17 of the GDPR applies, e.g. if this data is no longer required for the pursuit of the purposes specified.
3. Right to restriction of processing (Art. 18 GDPR):
You have the right to obtain restriction of processing from us, provided one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to the processing as per Art. 21 GDPR, or pending the verification of whether our legitimate grounds override your interests as the data subject.
4. Right to data portability (Art. 20 GDPR):
In certain cases, which are detailed in Art. 20 of the GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format, or to request the transfer of this data to a third party.
5. Right to object (Art. 21 GDPR):
If data is collected on the basis of Art. 6(1)(1)(f) of the GDPR (data processing is necessary to pursue our legitimate interests) or on the basis of Art. 6(1)(1)(e) of the GDPR (data processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data, unless there are demonstrably compelling and legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.
6. Right to lodge a complaint with a supervisory authority
As per Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of the personal data relating to you infringes the data protection regulations. The right to lodge a complaint with a supervisory authority may be exercised in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
Data protection officer contact details
Our in-house data protection officer is happy to provide more information related to data protection and welcomes respective suggestions:
Dr. Uwe Schläger
datenschutz nord GmbH