Person responsible in the sense of the DS-GVO Art. 4 Para. 7
Tel.: +49 8231 92692 0
Fax: +49 8231 92692 99
represented by the managing directors, Mrs. Sybille Lohfink-Mair and Mr. Wolfgang Mair
Contact details of the data protection officer
Use of data
The processing of personal data is carried out for the fulfillment of the resulting tasks, such as the implementation of events, communication with internal and external contacts, information on current topics (newsletter, journal), etc.
Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) a of the EU General Data Protection Regulation (DS-GVO) serves as the legal basis for the processing of personal data.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) b DS-GVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) c DS-GVO serves as the legal basis.
If the processing is necessary for the protection of a legitimate interest of our company
• Management Assistance
• Simone Schubert
or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) f DS-GVO serves as the legal basis for the processing.
Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
If you use third-party services or social plugins on our pages, third-party cookies become active. You can configure the browser setting according to your preferences and, for example, refuse to accept third-party cookies or all cookies. However, we would like to point out that you may then not be able to use all functions of this website.
The legal basis for the processing of personal data using cookies is Art. 6 (1) a if the user has given his consent, and Art. 6 (1) f if technically necessary cookies are used. Our concern within the meaning of Art. 6 para. 1 f (legitimate interest) of the General Data Protection Regulation is the error-free and optimized provision of our online offer and our website.
Our website contains a contact form that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. These data are name, first name, e-mail address, telephone number, company, position in the company, reason for contact.
The legal basis for the processing of this personal data is based on Art. 6 (1) b DS-GVO, fulfillment of pre-contractual measures.
The purpose of the processing is to enable communication with the user.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.
E-mail, telephone, business cards, etc.
Insofar as you have provided us with personal data electronically, in the course of a telephone call or by means of business cards, this data will only be processed in order to carry out contractual or pre-contractual measures, to fulfill legal obligations or to safeguard our legitimate interests.
The legal basis for the processing of this personal data is based on Art. 6 (1) b, c, f DS-GVO. Our concern within the meaning of Art. 6 (1) f (legitimate interest) Data Protection Regulation is to communicate with you on topics relevant to the company and to provide you with relevant information.
The purpose of the processing is to enable the communication or the response to the inquiries.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.
The controller has integrated the Matomo component on this website. Matomo is an open source software tool for web analysis. Web analysis is the collection, compilation and evaluation of data about the behavior of visitors to websites. Among other things, a web analysis tool collects data about the website from which a data subject came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used for optimizing a website and for cost-benefit analysis of internet advertising.
The software is operated on the server of the controller, and the log files, which are sensitive under data protection law, are stored exclusively on this server.
The purpose of the Matomo component is to analyze the flow of visitors to our website. The controller uses the data and information obtained, among other things, to evaluate the use of this website in order to compile online reports showing the activities on our Internet pages.
Matomo sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. The setting of the cookie enables us to analyze the use of our website. Each time one of the individual pages of this website is called up, the Internet browser on the information technology system of the data subject is automatically caused by the Matomo component to transmit data to our server for the purpose of online analysis. As part of this technical procedure, we obtain knowledge of personal data, such as the IP address of the data subject, which we use, among other things, to trace the origin of visitors and clicks.
By means of the cookie, personal information, for example the access time, the location from which an access originated and the frequency of visits to our website are stored. Each time you visit our website, this personal data, including the IP address of the Internet connection used by the data subject, is transmitted to our server. This personal data is stored by us. We do not pass on this personal data to third parties.
The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Matomo from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Matomo can be deleted at any time via an Internet browser or other software programs.
Furthermore, the data subject has the possibility to object to the collection of data generated by Matomo and related to a use of this website and to prevent such a collection. To do this, the data subject must set “Do Not Track” in your browser.
However, with the setting of the opt-out cookie, there is the possibility that the Internet pages of the controller are no longer fully usable for the data subject.
Further information and the applicable data protection provisions of Matomo can be found at https://matomo.org/privacy/.
This website uses Google Analytics, a web analytics service provided by Google, Inc (“Google”). The use is based on Art. 6 para. 1 p. 1 lit. f. DSGVO. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website such as.
operating system used,
Referrer URL (the previously visited page),
host name of the accessing computer (IP address),
time of the server request,
are usually transferred to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. We have also extended Google Analytics on this website with the code “anonymizeIP”. This guarantees the masking of your IP address so that all data is collected anonymously. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. [Note Instructions on how to integrate the opt-out cookie can be found at: https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable].
We continue to use Google Analytics to analyze data from Double Click cookies and also AdWords for statistical purposes. If you do not wish this to happen, you can deactivate this via the Ads Preferences Manager (http://www.google.com/settings/ads/onweb/?hl=de) deaktivieren.
Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).
Data subject rights
If personal data is processed by you, you are a data subject within the meaning of the DS-GVO and you are entitled to the following rights vis-à-vis the controller:
a) Right to information
You may request confirmation from the controller as to whether personal data concerning you is being processed by us.
If such processing is taking place, you may request information from the controller about the following:
The purposes for which the personal data are processed;
the categories of personal data which are processed;
the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage period;
the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
the existence of a right of appeal to a supervisory authority;
any available information about the origin of the data, if the personal data are not collected from the data subject.
You have the right to request information on whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 DS-GVO in connection with the transfer.
b) Right to rectification
You have a right to rectification and/or completion vis-à-vis the controller if the personal data processed concerning you are inaccurate or incomplete. The controller shall carry out the rectification without undue delay.
c) Right to restriction of processing
Under the following conditions, you may request the restriction of the processing of personal data concerning you:
if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
the controller no longer needs the personal data for the purposes of processing, but you need them for the establishment, exercise or defense of legal claims; or
if you have objected to the processing pursuant to Article 21 (1) DS-GVO and it is not yet clear whether the legitimate grounds of the controller outweigh your grounds.
If the processing of personal data relating to you has been restricted, such data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
d) Right to erasure
– Obligation to erasure
You may request the controller to erase the personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay, if one of the following reasons applies:
The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
You withdraw your consent on which the processing was based pursuant to Art. 6 (1) a or Art. 9 (2) a DS-GVO and there is no other legal basis for the processing.
You object to the processing pursuant to Art. 21 (1) DS-GVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DS-GVO.
The personal data concerning you have been processed unlawfully.
The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) DS-GVO.
– Information to third parties
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable measures, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.
The right to erasure does not exist to the extent that the processing is necessary
For the exercise of the right to freedom of expression and information;
for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) DS-GVO, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
for the assertion, exercise or defense of legal claims.
e) Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right vis-à-vis the controller to be informed about these recipients.
f) Right to data portability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another controller without hindrance from the controller to whom the personal data was provided, provided that
the processing is based on consent pursuant to Art. 6 (1) a DS-GVO or Art. 9 (2) a DS-GVO or on a contract pursuant to Art. 6 (1) b DS-GVO and
the processing is carried out with the help of automated procedures.
In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
g) Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) of the DS-GVO.
The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.
If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
h) Right of revocation
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Please address the revocation to:
Frau Sybille Lohfink-Mair
i) Right of complaint
If you have any questions or complaints regarding the processing of your personal data, please contact our data protection officer at the following address.
E-Mail: firstname.lastname@example.org (or to the postal address mentioned under point “h”).
You also have the right to lodge a complaint with the competent data protection authority in connection with the processing of your data.
Bavarian State Office for Data Protection Supervision
Right of reservation