Privacy Policy
We are very pleased about your interest in our company. Data protection has a high value for the management of the work of art B. Any use of the web pages of the KunstWerk B GmbH is, in principle, without any indication of personal data. If an affected person special services of our company via our website if you would like to take advantage of, but it could be necessary to the processing of personal data. The processing of personal data is required and there is no legal basis for such a processing, we will obtain the informed consent of the person concerned in general.
The processing of personal data, such as the name, address, email address or telephone number of a person concerned, shall always be carried out in accordance with the Data Protection Regulation and in accordance with the applicable country-specific KunstWerk B GmbH data protection regulations. Using this data protection declaration our company would like the public about the nature, scope and purpose of the collected, used and processed personal data. In addition, affected persons by means of this data protection declaration of rights to which they are entitled.
The KunstWerk B GmbH, as a controller for the numerous technical and organizational measures have been implemented in order to maximize seamless protection of personal data processed via this web page. In principle, however, Internet-based data transmission security gaps, so that an absolute protection cannot be guaranteed. For this reason it is any person concerned free, personal data also on alternatives because, for example, to send us over the phone.
1. Definitions
The data protection and privacy statement of KunstWerk B GmbH is based on the terminology by the European policy and regulation to the adoption of the Data Protection Regulation (DS-Gmos) were used. Our Privacy Policy is designed to help both for the public and for our customers and business partners are easily readable and understandable. In order to ensure this, we would like to explain the terminology used in advance.
We use this data protection declaration, among other things, the following terms:
(a) Personal data
Personal data is all information relating to an identified or identifiable natural person (hereinafter referred to as the "Affected Person"). A natural person is considered to be identifiable, directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, location data to an Online ID or to one or more specific characteristics, the expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person, can be identified.
b) the
affected person is any person identified or identifiable natural person whose personal data are processed by the controller.
c) Processing
Processing, each with or without the help of automated procedures executed operation or any such set in connection with personal data, such as the collection, the collection, the organization, the grading, storage, adaptation or alteration, reading, the queries that use, The disclosure by transmission, dissemination or any other form of deployment, the adjustment or the link to the restriction, deletion or destruction.
d) restriction of the processing
limitation of processing is the marking of stored personal data with the aim of limiting their processing in future.
E) Profiling
Profiling is any kind of automated processing of personal data, which is that this personal data is used, certain personal aspects that relate to a natural person, evaluate, and in particular to aspects related to job performance, economic situation, health, personal preferences, interests, reliability, behavior, residence or change of location of this natural person to analyze or predict
pseudonyms
pseudonyms. f) is the processing of personal data in a way in which the personal data without involving additional information no longer can be assigned to a specific person concerned, provided that such additional information should be kept separately and are subject to technical and organizational measures to ensure that personal data will not be assigned to an identified or identifiable natural person
responsible or responsible for the processing. g)
Responsible for the processing or responsible is the natural or legal person, public authority, agency or other body which alone or jointly with others about the purposes and means of the processing of personal data. Where the purposes and means of processing by the Union law or the law of the Member States, as the responsible person or the specific criteria of its designation in accordance with Union law or the law of the Member States.
h) Processor
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the person responsible.
i) receiver
is a natural or legal person, public authority, agency or other agency, the personal data to be disclosed, regardless of whether it is a third party or not. Authorities in the context of a specific investigation order, in accordance with Union law or the law of the Member States may obtain personal data, but is not to be considered as receiver.
j) third parties
third parties is a natural or legal person, public authority, agency or other authority in addition to the affected person, the person responsible, the processor and the persons who, under the direct responsibility of the controller or the processor, are authorized to process the personal data.
k) Consent
consent is voluntary for the specific case each of the person concerned in any way informed and unequivocal expression in the form of a declaration or any other unique affirmative action, the affected person to understand that you are concerned with the processing of personal data.
2. The name and address of the controller
responsible within the meaning of the data protection regulation in the Member States of the European Union, other applicable data protection laws and other provisions of data protection law: Character is the
KunstWerk B GmbH
Cluser Strasse 5
78647 Trossingen, Germany
Tel.: 0049 7425334369
E-Mail: info@kunstwerk-b.de
Website: www.kunstwerk-b.de
3. Registration of general data and information on
the Internet side of the KunstWerk B GmbH collects with each call of the internet page by a person or an automated system a number of general data and information. These general data and information are saved in the log files of the server. (1) can be collected the used browser types and versions, (2) the operating system used by the accessing system, (3) The internet page, from which a system accessible on our website (so-called referrer), (4) The Unterwebseiten, what about accessing a system can be controlled on our internet page, (5) the date and time of accessing the internet page, (6) An Internet Protocol address (IP address), (7) The Internet service provider of the accessing system and (8) Other related data and information, which the security in the event of attacks on our information technology systems.
In the use of these general data and information, the KunstWerk B GmbH can not be traced back to the person concerned. This information will be much more needed to deliver the content of our web page correctly (1), (2) the content of our web page as well as the advertising for to optimize these, (3) The long-term functional capability of our information technology systems and the technology of our internet page as well as (4) In order to ensure that law enforcement authorities in the event of a cyber attack to provide the necessary information to law enforcement. This anonymous data collected and information provided by the KunstWerk B GmbH therefore, on the one hand, statistically and also evaluated with the aim, data protection and data security in our company, in order to ultimately increase an optimal level of protection for personal data processed by us. The anonymous data of the server log files are separate from all by an affected person personal data is stored.
4. Contact possibility on the website of
the internet page of the KunstWerk B GmbH contains information which could lead to the rapid electronic contact with our company as well as a direct communication with us, which is also a general address the so-called electronic mail (E-mail address). If an affected person via e-mail or via a contact form contact with the person responsible for the processing, by the person concerned transmitted personal data will be saved automatically. Such on a voluntary basis by an affected person to the person responsible for the processing of personal data will be used for the purposes of processing or contacting the person concerned. There is no transfer of personal data to third parties.
5. Routine deletion and blocking of personal data
by the data controller processes and stores personal data of the person concerned only for the period of time that is required to achieve the storage, or if required by the European directives and Regulation encoder or an other legislators in laws or regulations which the controller is subject, provision was made for.
Eliminates the need for storage purpose or running a European policy and regulation encoder or another competent legislator prescribed storage period, the personal data is routinely and according to the legislation of blocked or deleted.
6. Rights of the person concerned
(a)
Every person has the right to confirmation by the European policy and regulation, employers the right granted by the controller to request a confirmation of whether personal data are processed. A person would like to take this confirmation in order to do this, you can at any time to an employee of the controller.
b) to
the processing of personal data of right to information each person has the right granted by the European policy and regulation sensor, at any time of the controller for the free of charge information about the personal data stored to its person and a copy of this information. Furthermore, the European policy and regulation encoder of the affected person information about the following information:
the processing purposes
the categories of personal data that can be processed
the recipients or categories of recipients to whom the personal data has been disclosed or to be disclosed, particularly in the case of recipients in third countries or international organizations
if possible the planned duration for which personal data is stored, or, if this is not possible, the criteria for determining the duration of
the existence of a right to correction or deletion of personal data or to restrict the processing by the leaders of the opposition right against this processing or
the existence of a complaint right at a supervisory authority
if the personal data is not collected from the data subject : All available information about the origin of the data,
the existence of an automated decision-making including profiling, in accordance with Article 22 para.1 and 4 DS-Gmos and - at least in these cases - statement strong information about the logic involved as well as the scope and desired impact of such processing for the affected person is
also available for the affected person has a right to information as to whether or not personal data to a third country or an international organization. If this is the case, it is the responsibility of the person concerned in the rest of the right to information about the appropriate guarantees in relation to the transmission.
Would like to take this right to information in an affected person, it can at any time to an employee of the controller.
c) right to correction of
any processing of personal data of the person concerned has the right granted by the European policy and regulation sensor, the immediate correction of incorrect personal data relating to him/her. In addition, the person concerned shall have the right to, taking account of the purposes of the processing, the completion of incomplete personal data - also by means of a supplementary declaration - to demand.
A person would like to take this right of rectification, it can at any time to an employee of the controller.
d) Right to cancellation (right to be forgotten)
Any processing of personal data of the person concerned has the right granted by the European policy and regulation, by the responsible employer to require that personal data shall be deleted unless one of the following reasons is applicable and to the extent that the processing is not required:
The personal data were collected for such purposes or in any other way, for which you no longer need.
The affected person, revoke your consent to the processing according to type. 6(1)(a DS-GMO or product. 9(2)(a DS-Gmos was based, and there is a lack of any legal basis for the processing.
The person concerned shall, in accordance with nature. 21, paragraph 1 of the DS-Gmos to object to the processing, and there are no priority for legitimate reasons the processing, or the person concerned shall, in accordance with nature. 21 para. 2 of the DS-Gmos to object to the processing.
The personal data has been processed unlawfully.
The deletion of the personal data is to fulfill a legal obligation, in accordance with Union law or the law of the Member States is required, the controller is subject.
The personal data in relation to the services offered by the information society in accordance with art. Article 8, paragraph 1 DS-Gmos will be charged.
If one of the above-mentioned reasons and an affected person the erasure of personal data, which are stored in the KunstWerk GmbH, would like to do this, you can at any time to an employee of the controller. The employees of the KunstWerk B GmbH will arrange for the deletion request and without delay.
The personal data from the KunstWerk B GmbH is made public and is our company as the person responsible in accordance with art. 17 para. 1 of the DS-Gmos for deletion of personal data, the work of art B GmbH, taking into account the available technology and the implementation costs and appropriate measures, including technical, in order to meet other responsible for data processing personal data, the published process, being informed that the affected person from these other for the data controller the erasure of all links to these personal data or copies or replicas of this personal data is requested, to the extent that the processing is not required. The employees of the KunstWerk B GmbH are determined on a case-by-case whatever needs to be done.
e) right to limitation of processing
each of the processing of personal data by the person concerned has the right granted to European directives and regulation by the responsible employer, the restriction of the processing, if any of the following conditions exist:
the accuracy of the personal data is denied by the person concerned, and for a period, it allows the person responsible to verify the accuracy of the personal data.
The processing is unlawful, the affected person rejects the deletion of personal data and requires instead, the restriction of the use of personal data.
The responsible person requires the personal data for the purposes of the processing is no longer needed, the affected person, however, for the assertion, exercise or defense of legal claims.
The person concerned has to object to the processing according to type. 21, paragraph 1 of the DS-Gmos is inserted and it is still not clear whether the legitimate reasons of the responsible as opposed to those of the person concerned predominate.
If one of the above conditions exist and an affected person of the restriction of personal data, which are stored in the KunstWerk B GmbH, would like to request, it can at any time to an employee of the controller. The employees of the KunstWerk B GmbH, the restriction of the processing.
F) right to data portability
any processing of personal data of the person concerned has the right granted by the European policy and regulation sensor, the personal data concerning you, by the person concerned a responsible have been deployed in a structured, common and machine-readable format. In addition, she has the right to record this data to any other responsible without interference from the officers, which the personal data were provided, to communicate, provided that the processing on the consent pursuant to Art. 6(1)(a DS-GMO or product. 9(2)(a DS-GMO or on a contract in accordance with nature. 6(1)(b) DS-Gmos is based and the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task in the public interest or in the exercise of public authority, which is the person in charge has been transferred.
In addition, the person concerned in the exercise of their right to data portability in accordance with art. 20 para. 1 of the DS-Gmos have the right to ensure that the personal data directly from a responsible to another shall be responsible, in so far as this is technically feasible and if this does not affect the rights and freedoms of others.
For the assertion of the right to data portability, the affected person at any time to an employee in the KunstWerk B GmbH.
g) right of opposition
any processing of personal data of the person concerned has the right granted by the European policy and regulation encoder, reasons related to their specific situation, at any time to object to the processing of personal data relating to him/her, because of the nature. 6(1)(e or f DS-Gmos, appeal is made. This also applies for these provisions based on profiling.
The KunstWerk B GmbH processes the personal data in the case of an objection, unless we can no longer compelling legitimate grounds for processing in accordance with the interests, rights and freedoms of the person concerned, or outweigh the processing is used for the establishment, exercise or defense of legal claims.
The KunstWerk B GmbH processed personal data, in order to advertise directly, so, the person concerned has the right at any time to object to the processing of personal data for the purposes of such advertising. This also applies to the Profiling, in so far as it with such direct advertising. Contradicts the affected person in relation to the work of art B GmbH the processing for purposes of direct marketing, the KunstWerk B GmbH the personal data is no longer process for these purposes.
In addition, the person concerned has the right to reasons related to their specific situation, against which the processing of personal data, in the KunstWerk B GmbH to scientific or historical research purposes or for statistical purposes, in accordance with nature. 89 para. 1 of the DS-Gmos, appeal, except where such processing is necessary for the performance of a task in the public interest.
In order to ensure the exercise of the right of opposition may be entered on the affected person directly every employee of the KunstWerk B GmbH or another employee. The affected person is free, also in connection with the use of information society services, regardless of the Directive 2002/58/EC, using automated procedures to exercise your right of objection, in which technical specifications can be used.
H) automated decisions taken in individual cases including profiling
each of the processing of personal data by the person concerned has the European policy and regulation, not a right granted to employers - including profiling based solely on automated processing - be subject to a decision, the legal effect or significantly affected in a similar way, provided that the decision (1) Not for the conclusion or performance of a contract between the person concerned and the person responsible is required, or (2) As a result of legislation of the Union or the Member States to which the controller is subject, is admissible and this legislation shall take appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the person concerned or (3) with the express consent of the person concerned.
Is the decision (1) for the conclusion or performance of a contract between the person concerned and the person responsible for necessary or (2) is carried out through the explicit consent of the person concerned, the KunstWerk B GmbH shall take the appropriate measures to the rights and freedoms as well as the legitimate interests of the person concerned, including the right to maintain at least a person on obtaining the intervention on the part of the responsible, on presentation of one's own position and to challenge the decision belongs.
The affected person wants to assert rights with regard to automated decisions, it can at any time to an employee of the controller.
i) Right to revocation of a data protection legal consent to
the processing of personal data Each person has the right granted by the European policy and regulation encoder, a consent to the processing of personal data at any time.
The affected person wants to assert their right to revoke a consent, it can at any time to an employee of the controller.
7. Data protection for applications and the application procedure
for the controller collects and processes the personal data of applicants for the purpose of processing of the application process. The processing can also be carried out electronically. This is particularly the case when a candidate relevant application documents on the electronic way, for example by e-mail or via a web form on the website, being sent to the controller. The Controller includes an employment contract with a candidate, the transmitted data for the purpose of processing of the employment relationship stored in compliance with the statutory regulations. Is used by the controller no contract of employment concluded with the applicant, the application documents two months after notification of the rejection decision is automatically deleted, provided that a deletion of any other legitimate interests of the controller. Legitimate interest in this sense, for example, is a burden of proof in a proceeding under the General Equal Treatment Act (AGG).
8. Data protection rules for the deployment and use of Facebook it
shall be for the controller on this internet page components of Facebook. Facebook is a social network.
A social network is an Internet-driven social meeting point, an online community that allows users in the rule, to communicate and to interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or makes it possible for the Internet community, personal or business-related information. Facebook allows users of the social network, among other things, the creation of private profiles, upload photos and networking via friend requests.
Operating company of Facebook is the Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025\, USA. Is responsible for the processing of personal data, if an affected person lives outside the United States or Canada, the Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.
Each call one of the individual pages of this website is operated by the controller and on what a facebook component (Facebook plug-in), the internet browser on the information technology system of the person concerned by the respective Facebook component automatically causes a representation of the corresponding Component Download Facebook from Facebook. A general overview of all Facebook plug-ins can be accessed under https://developers.facebook.com/docs/plugins/?locale=de_DE. In the context of this technical process, Facebook receives knowledge about what concrete bottom of our internet page is visited by the person concerned.
Provided that the person concerned at the same time, logged into Facebook, Facebook with every call of our internet page by the person concerned and during the entire duration of the stay on our internet site, what concrete bottom of our internet page visited the affected person. This information will be collected by the Facebook component by Facebook and the Facebook account assigned to the person concerned. The affected person pressed one of the buttons on our web page built-in Facebook, for example, the "Like" button, or the person concerned to comment, Facebook assigns this information to your personal Facebook user account of the person concerned and saves this personal data.
Facebook receives via the Facebook component is always a information that the person concerned has visited our website, if the affected person at the time of the call of our internet page at the same time, logged in with Facebook; this takes place regardless of whether the person clicks on the facebook component or not. Such a transfer of this information to Facebook from the person concerned not wanted, this can prevent the transmission before calling up our Internet page from your Facebook account log out.
The published data from Facebook, the directive is available under Https://de-de.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. There will also explain what settings options Facebook to protect the privacy of the person concerned. In addition, different applications available, which make it possible to suppress a data transfer to Facebook. Such applications can be used by the person concerned, in order to suppress a data transfer to Facebook.
9. The legal basis for the processing
type. 6 I lit. a DS-Gmos is our company as a legal basis for processing operations, in which we obtain consent for a specific processing purpose. Is the processing of personal data for the performance of a contract to which the data subject is party, as this is the case, for example, in the case of processing operations for delivery of goods or the provision of any other service or performance are necessary, it is based on the processing type. 6 I lit. b DS-Gmos. The same applies for such processing operations are required for the implementation of pre-contractual measures, such as in cases of requests for our products or services. Our company is subject to a legal obligation by which any processing of personal data is required in order to fulfill tax obligations, such as, for example, is based on the processing type. 6 I lit. c DS-Gmos. In rare cases, the processing of personal data is required in order to vital interests of the data subject or a natural person to protect them. This would be the case, for example, if a visitor in our company would be hurt and then his name, his age, his health insurance information, or other vital information to a doctor, hospital or other third parties. Then the processing on type. 6 I lit. d DS-Gmos are based. In the final analysis, processing operations on the type. 6 I lit. f DS-Gmos are based. On this legal basis, the processing operations from any of the above-mentioned legal basis should be recorded when processing for the currency of a legitimate interest of our company or a third party is required, provided that the interests, fundamental rights and freedoms of the person concerned is not predominate. Such processing operations are permitted in particular therefore because you through the European legislators have been specially mentioned. In so far as he took the view that a legitimate interest could be assumed, if the affected person is a customer of the person responsible (recital 47 sentence 2 of the DS-BER).
10. Legitimate interests in respect of the processing, the tracked by the responsible or a third party
is based on the processing of personal data Article 6 I lit. f DS-BER is our legitimate concern the implementation of our business activities in favor of the well-being of all our employees and our share owners.
11. The personal data will be stored for the duration
the criterion for the duration of the retention of personal data is the respective statutory retention period. After the expiry of the period, the relevant data is routinely deleted if they are no longer required for the fulfilment of the contract or contract negotiations.
12. Statutory or contractual provisions for the provision of personal data; necessity for conclusion of the contract and the requirement of the person concerned, the personal data; possible consequences of non-deployment
we clarify that the provision of personal data for the part required by law (for example, tax regulations) or also from contractual arrangements (e.g. information on the contract partner). Sometimes it may be necessary to the formation of a contract that an affected person us personal data provided in the order must be processed by us. The affected person is obliged to provide us with personal data, for example, if our business enters into a contract with her. A non-provision of personal data, it would result in the contract with the concerned could not be closed. Before a deployment of personal data by the person concerned must be examined the victim to one of our staff. Our staff clarifies the affected on a case-by-case basis on whether the provision of personal data legally or contractually required or is necessary for the conclusion of the contract, whether an obligation exists, the personal data, and the consequences of the non-provision of personal data.
13. Existence of an automated decision-making
as a responsible company, we renounce an automatic decision-making or profiling.
This data protection declaration, which was adopted by the data protection explanation generator of the DGD GmbH, the German Society for data protection as an external data protection officer Fürth operates, in cooperation with the IT and data protection lawyer Christian Solmecke created.