Privacy Statement
BioRegio STERN Management GmbH would like to inform you that by visiting the website “www.bioregio-stern.de” or by using content of this website personal data is processed in various ways.
If the processing of personal data hereafter is based on a “legitimate interest”, you have the right to object to this processing at any time, e.g. by sending an e-mail to info@bioregio-stern.de.
We would like to inform you about the aspects relevant for data protection regarding the use of the website https://www.bioregio-stern.de/ as follows:
1. Information regarding the accessing of the website
- Controller as defined in the General Data Protection Regulation (GDPR) is BioRegio STERN Management GmbH, Friedrichstr. 10, 70174 Stuttgart, Germany, phone: +49 711 870354-0, e-mail: info@bioregio-stern.de, represented by the managing director Dr. Klaus Eichenberg (hereafter referred to as “BioRegio STERN”, “we” or “us”)
- We process your IP address. The processing is done for the purpose of being able to display the website on the internet. Your IP address is also transferred to third parties (hosting provider). The “purposes of the legitimate interests pursued by the controller” (Art. 6 par. 1 point (f) GDPR) is the legal basis for the processing of personal data.
- There are legitimate interests (Art. 6 par. 1 point (f) GDPR) in integrating third parties into the transmission via website as this is technically required. Without the integration of third parties displaying the website in your internet browser is not possible. This integration is limited to parties directly involved in the communication process.
- Maybe your internet browser sends us additional data about your system without being arranged by us, e.g. type of browser and browser version; operating system; if you have clicked on a hyperlink on another website that links to our website, the address of this website (“Referrer”) and the name of your computer. In case you send us this data we will not further process it.
- storage period: we or our hosting provider will erase the personal data 60 days after accessing the website, as long as not stated differently hereafter. If you request erasure earlier we will erase the data without undue delay provided that there is no other legal basis for the processing.
- For offering the website we use this hosting provider as a processor: LF.net Netzwerksysteme GmbH, Ruppmannstr. 27, 70565 Stuttgart. This hosting provider is strictly bound by instructions of BioRegio STERN.
- You have the right to request access (Art. 15 GDPR), to request rectification (Art. 16 GDPR) or erasure of personal data (Art.17. GDPR) or restriction of processing (Art. 18 GDPR) or to object to processing (Art. 21 GDPR) as well as the right to data portability (Art. 20 GDPR).
- You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on “legitimate interests” (Art. 6 par. 1 point (f) GDPR), including profiling based on those provisions.
- You have the right to lodge a complaint with a supervisory authority. You may have a choice between various supervisory authorities. The supervisory authority responsible for our establishment is “Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg“.
- The provision of personal data neither is a statutory nor a contractual requirement nor is it a requirement necessary to enter into a contract. You are not obliged to provide the personal data. A possible consequence of failure to provide such data is that you partially or completely are not able to access the BioRegio STERN website and therefore are not able to see its contents.
- There is no automated decision-making or profiling referred to in Art. 22 GDPR.
- Please also note the information under "Cookies".
3. contact form
We offer a contact form by which you can send us a message. We inform you about the processing of personal data as follows:
- Controller as defined in the General Data Protection Regulation (GDPR) is BioRegio STERN Management GmbH (see above).
- The processing is done for the following purpose: You can contact us (see the imprint) by using the contact form. This is an alternative to contacting us e.g. by e-mail. We would like to send you an answer after your message. We process the data that you have filled in into the contact form (e.g. company/institute, name, e-mail, phone and further data filled in by you) and additionally as it is technically necessary: Your IP address, date and time. The legal basis for processing the personal data is your consent (Art. 6 par. 1 point (a) General Data Protection Regulation (GDPR)) and additionally the legal basis is that the contact happens “in order to take steps at the request of the data subject prior to entering into a contract” (Art. 6 par. 1 point (b) GDPR). Regarding the involvement of a transport company (e.g. when we send an e-mail to your e-mail address) the “purposes of the legitimate interests pursued by the controller” (Art. 6 par. 1 point (f) GDPR) are the legal basis.
- There are legitimate interests (Art. 6 par. 1 point (f) GDPR) in integrating third parties especially into the transmission via website (hosting provider) and via e-mail (hosting provider and the providers of the mailboxes) as this is technically required. Without the integration of third parties we cannot have contact with you. This integration is limited to parties directly involved in the communication process.
- For offering the website and the contact form we use this hosting provider as a processor: LF.net Netzwerksysteme GmbH, Ruppmannstr. 27, 70565 Stuttgart. This hosting provider is strictly bound by instructions of BioRegio STERN.
- storage period: BioRegio STERN will erase the personal data within two weeks after the reason for contacting us is settled or has disappeared in another way or two weeks after the contact with you has been terminated – whichever is the later. If you request erasure earlier we will erase the data without undue delay provided that there is no other legal basis for the processing.
- You have the right to request access (Art. 15 GDPR), to request rectification (Art. 16 GDPR) or erasure of personal data (Art.17. GDPR) or restriction of processing (Art. 18 GDPR) or to object to processing (Art. 21 GDPR) as well as the right to data portability (Art. 20 GDPR).
- You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on “legitimate interests” (Art. 6 par. 1 point (f) GDPR).
- You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- You have the right to lodge a complaint with a supervisory authority. You may have a choice between various supervisory authorities. The supervisory authority responsible for our establishment is “Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg“.
- The provision of personal data neither is a statutory nor a contractual requirement nor is it a requirement necessary to enter into a contract. You are not obliged to provide the personal data. A possible consequence of failure to provide such data is that in case you have further questions or remarks you have to use another way of getting in contact with us.
- There is no automated decision-making or profiling referred to in Art. 22 GDPR.
5. Registration to the company database
Purpose: BioRegio STERN offers you the possibility to register your company/institute etc. in our company database if your company/institute complies with the profile of BioRegio STERN. You can register in the company database by filling in your name and surname, the company/institute, an address and an e-mail address. Besides, BioRegio STERN asks for your consent. Hereto, we inform you as follows:
Freely consent and right to withdraw consent: You are completely free to give consent. You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can declare the withdrawal e.g. at our establishment, via letter to BioRegio STERN Management GmbH, Friedrichstr. 10, 70174 Stuttgart, or via e-mail to info@bioregio-stern.de or telefax to 0711-870354-44.
Requirements: You have to be at least 16 years old.
Data being processed: Your name and surname, your company/institute, an address and an e-mail-address. Additionally, as it is technically required: your IP address, date and time. In case you provide further information, personal data contained herein are also processed.
Content of the consent that you are asked for when filling in the registration form:
- You are giving consent that BioRegioSTERN stores the personal data provided by you by registering your company/institute etc. and that BioRegio STERN processes those data for communication with you about a registration to the company database.
Additional information on data protection:
- Controller as defined in the General Data Protection Regulation (GDPR) is BioRegio STERN Management GmbH (see above).
- The processing is done for the purposes stated above (under “Purpose”). The legal basis for processing the personal data is your consent (Art. 6 par. 1 point (a) GDPR). Furthermore, the legal basis for processing the personal data is that there are “purposes of the legitimate interests pursued by the controller” (Art. 6 par. 1 point (f) GDPR).
- There are legitimate interests (Art. 6 par. 1 point (f) GDPR) in integrating third parties into the transmission via website (hosting provider) and via e-mail (hosting provider and the providers of the mailboxes) as this is technically required to make the registration by using the registration form possible. This integration is limited to parties directly involved in the communication process. Furthermore, integrating a hosting provider is necessary to display the company database on the website.
- For offering the company database we use a third-party provider as a processor: LF.net Netzwerksysteme GmbH, Ruppmannstr. 27, 70565 Stuttgart.. This third-party provider is strictly bound by instructions of BioRegio STERN.
- storage period: BioRegio STERN will erase the data without undue delay after you have informed us that your company/institute no longer wants to be registered in the company database. If you withdraw your consent or you request erasure earlier we will erase the data without undue delay provided that there is no other legal basis for the processing.
- You have the right to request access (Art. 15 GDPR), to request rectification (Art. 16 GDPR) or erasure of personal data (Art.17. GDPR) or restriction of processing (Art. 18 GDPR) or to object to processing (Art. 21 GDPR) as well as the right to data portability (Art. 20 GDPR).
- You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on “legitimate interests” (Art. 6 par. 1 point (f) GDPR), including profiling based on those provisions.
- You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- You have the right to lodge a complaint with a supervisory authority. You may have a choice between various supervisory authorities. The supervisory authority responsible for our establishment is “Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg“.
- The provision of personal data neither is a statutory nor a contractual requirement nor is it a requirement necessary to enter into a contract. You are not obliged to provide the personal data. A possible consequence of failure to provide such data is that your company/institute cannot be registered in our company database.
- There is no automated decision-making or profiling referred to in Art. 22 GDPR.
6. Registration for an event
Purpose: BioRegio STERN organizes events occasionally. You can register for those events on our website by filling in your name and surname, your title, a company/institute and an e-mail address. Besides, BioRegio STERN asks for your consent. Hereto, we inform you as follows:
Free consent and right to withdraw consent: You are completely free to give consent. You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can declare the withdrawal e.g. at our establishment, via letter to BioRegio STERN Management GmbH, Friedrichstr. 10, 70174 Stuttgart, or via e-mail to info@bioregio-stern.de or telefax to 0711-870354-44.
Requirements: You have to be at least 16 years old.
Data being processed: Name and surname, company/institute, address and an e-mail-address. Additionally, as it is technically required: your IP address, date and time. In case you provide further information, personal data contained herein are also processed.
Content of the consents that you are asked for when filling in the registration form:
- You are giving consent that BioRegio STERN processes the personal data you have filled in in the registration process for an event. We use the data filled in in the registration process for your participation in the event, e.g. for keeping and updating a list of participants (only internal use), the preparation of name tags for the event, issuing certificates of participation (if wished).
Additional information on data protection:
- Controller as defined in the General Data Protection Regulation (GDPR) is BioRegio STERN Management GmbH (see above).
- The processing is done for the purposes stated above (under “Purpose”). The legal basis for processing the personal data is your consent (Art. 6 par. 1 point (a) GDPR). Furthermore, the legal basis for processing the personal data is that there are “purposes of the legitimate interests pursued by the controller” (Art. 6 par. 1 point (f) GDPR).
- There are legitimate interests (Art. 6 par. 1 point (f) GDPR) in integrating third parties into the transmission via website (hosting provider) and via e-mail (hosting provider and the providers of the mailboxes) as this is technically required to make the registration by using the registration form possible. This integration is limited to parties directly involved in the communication process.
- For offering the online registration tool for events BioRegio STERN uses a third-party provider as a processor: LF.net Netzwerksysteme GmbH, Ruppmannstr. 27, 70565 Stuttgart. This third-party provider is strictly bound by instructions of BioRegio STERN.
- storage period: BioRegio STERN will erase the data without undue delay after the end of the contact, e.g. after the end of an event. If you withdraw your consent or you request erasure earlier we will erase the data without undue delay provided that there is no other legal basis for the processing.
- You have the right to request access (Art. 15 GDPR), to request rectification (Art. 16 GDPR) or erasure of personal data (Art.17. GDPR) or restriction of processing (Art. 18 GDPR) or to object to processing (Art. 21 GDPR) as well as the right to data portability (Art. 20 GDPR).
- You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on “legitimate interests” (Art. 6 par. 1 point (f) GDPR), including profiling based on those provisions.
- You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- You have the right to lodge a complaint with a supervisory authority. You may have a choice between various supervisory authorities. The supervisory authority responsible for our establishment is “Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg“.
- The provision of personal data neither is a statutory nor a contractual requirement nor is it a requirement necessary to enter into a contract. You are not obliged to provide the personal data. A possible consequence of failure to provide such data is that you cannot register for the event.
- There is no automated decision-making or profiling referred to in Art. 22 GDPR.
7. Advertising a job on our JobPortal
Purpose: BioRegio STERN offers you the possibility to advertise a job on the “JobPortal” of BioRegio STERN. Hereto you can contact us via our website by filling in your name and surname, your title, a company/institute and an e-mail address. Besides, BioRegio STERN asks for your consent. Hereto, we inform you as follows:
Free consent and right to withdraw consent: You are completely free to give consent. You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can declare the withdrawal e.g. at our establishment, via letter to BioRegio STERN Management GmbH, Friedrichstr. 10, 70174 Stuttgart, or via e-mail to info@bioregio-stern.de or telefax to 0711-870354-44.
Requirements: You have to be at least 16 years old.
Data being processed: Name and surname, title, company/institute and an e-mail-address. Additionally, as it is technically required: your IP address, date and time. In case you provide further information, personal data contained herein are also processed.
Content of the consents that you are asked for when filling in the registration form:
- You are giving consent that BioRegioSTERN stores the personal data provided by you in order to contact us with the purpose of advertising a job and that BioRegio STERN processes those data for communication with you.
Additional information on data protection:
- Controller as defined in the General Data Protection Regulation (GDPR) is BioRegio STERN Management GmbH (see above).
- The processing is done for the purposes stated above (under “Purpose”). The legal basis for processing the personal data is your consent (Art. 6 par. 1 point (a) GDPR). Furthermore, the legal basis for processing the personal data is that there are “purposes of the legitimate interests pursued by the controller” (Art. 6 par. 1 point (f) GDPR).
- There are legitimate interests (Art. 6 par. 1 point (f) GDPR) in integrating third parties into the transmission via website (hosting provider) and via e-mail (hosting provider and the providers of the mailboxes) as this is technically required to make the registration by using the registration form possible. This integration is limited to parties directly involved in the communication process.
- For offering the contact form for advertising jobs BioRegio STERN uses a third-party provider as a processor: LF.net Netzwerksysteme GmbH, Ruppmannstr. 27, 70565 Stuttgart. This third-party provider is strictly bound by instructions of BioRegio STERN.
- storage period: BioRegio STERN will erase the personal data within two weeks after the reason for contacting us is settled or has disappeared in another way (e.g. after deleting a job from the JobPortal) or two weeks after the contact with you has been terminated (as long as no job is posted in the JobPortal) – whichever is the later. If you withdraw your consent or you request erasure earlier we will erase the data without undue delay provided that there is no other legal basis for the processing.
- You have the right to request access (Art. 15 GDPR), to request rectification (Art. 16 GDPR) or erasure of personal data (Art.17. GDPR) or restriction of processing (Art. 18 GDPR) or to object to processing (Art. 21 GDPR) as well as the right to data portability (Art. 20 GDPR).
- You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on “legitimate interests” (Art. 6 par. 1 point (f) GDPR), including profiling based on those provisions.
- You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- You have the right to lodge a complaint with a supervisory authority. You may have a choice between various supervisory authorities. The supervisory authority responsible for our establishment is “Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg“.
- The provision of personal data neither is a statutory nor a contractual requirement nor is it a requirement necessary to enter into a contract. You are not obliged to provide the personal data. A possible consequence of failure to provide such data is that you cannot contact us by using the contact form and that you have to choose another way to contact us.
- There is no automated decision-making or profiling referred to in Art. 22 GDPR.
8. Web Analysis by Matomo
8.1. Scope of the Processing of Personal Data
We use the open-source software tool Matomo on our website to analyze the surfing behavior of our users. The tool does not set any cookies on the users’ computers. However, the website operator collects data on accesses to the site via a time-limited hash file and stores this as so-called “server log files.” Matomo accesses the server log files and generates results based on these log files. In this respect, only a digital fingerprint is stored for 24 hours. The following data are collected in this way:
(1) The anonymized IP address of the user
(2) The accessed webpage
(3) The time of access
(4) The status code of the access
(5) The file size of the retrieval
(6) The user agent, e.g. the browser used
The software runs exclusively on the web server of the site operator. Storage of the users’ data takes place only there. The data are not passed on to third parties.
The IP addresses are not stored in full. In this way, it is impossible to assign the shortened IP address to the accessing computer.
8.2. Legal Basis for the Processing of Personal Data
The legal basis for the processing of users’ personal data is Article 6(1)(f) GDPR. Our legitimate interest in processing the data lies in obtaining information on how our website is used, in order to further optimize our website presence in the future.
8.3. Purpose of Data Processing
The processing of the data serves to measure reach and enables us to optimize our website. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. By anonymizing the IP address, the users’ interest in protecting their personal data is sufficiently taken into account.
8.4. Duration of Storage
The data are deleted as soon as they are no longer required for our recording purposes.
If you do not agree to the storage and use of your data, you can deactivate the storage and use here. In this case, an opt-out cookie will be stored in your browser, which prevents Matomo from storing usage data.
If you delete your cookies, this will also result in the deletion of the Matomo opt-out cookie. The opt-out must be reactivated when you visit our site again.
Your visit to this website is currently being recorded by Matomo web analytics. Uncheck this box to opt out.
Furthermore, we inform you as follows:
- The controller under data protection law is BioRegio STERN Management GmbH (see above).
- Duration of storage: The data are deleted immediately once the general statistics have been created, from which your individual data can no longer be derived. If you request deletion beforehand, the data will be deleted immediately, unless another legal basis for processing exists.
- You have a right of access (Art. 15 GDPR), as well as the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), or restriction of processing (Art. 18 GDPR), and furthermore a right to data portability (Art. 20 GDPR) and a right to object to processing (Art. 21 GDPR).
- The data subject has the right, on grounds relating to their particular situation, to object at any time to the processing of personal data concerning them which is carried out on the basis of legitimate interests (Art. 6(1)(f) GDPR); this also applies to profiling based on these provisions.
- There is a right to lodge a complaint with a supervisory authority for data protection. You may have the choice between several data protection supervisory authorities. The supervisory authority responsible for our registered office is “The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.”
- The provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You and the data subject are not obliged to provide the data. A possible consequence of not providing the data is that your data cannot be included in the general statistics and therefore cannot be taken into account in the evaluation and improvement of our website.
- There is no automated decision-making and no profiling pursuant to Art. 22 GDPR.
9. LinkedIn Account
9.1. Controller
We operate our own LinkedIn account. For this purpose, we make use of the technical platform and services of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. In addition to us, BioRegio STERN Management GmbH itself (see above under 1. Information on Visiting the Website), LinkedIn Ireland Unlimited Company is also a “controller” with regard to the processing of your personal data.
9.2. Types and Scope of the Processing of Affected Personal Data
By operating our LinkedIn account, the user data provided within your own LinkedIn account (such as name, employer, professional field, date of birth, etc.) are processed — if you yourself have a LinkedIn account. Regardless of whether you operate your own LinkedIn account, your assigned IP address is also processed.
9.3. Purposes and Legal Basis of Processing
The processing of this data takes place on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in being able to provide a contemporary platform in order to engage in appropriate information exchange with users.
The purposes of the data processing associated with the platform by LinkedIn itself, as well as the applicable legal bases and further information on the nature of the data and purposes of LinkedIn’s data processing, can be found in LinkedIn’s Privacy Policy at
https://de.linkedin.com/legal/privacy-policy
9.4. Categories of Recipients
LinkedIn processes personal data as described above. The categories of recipients of these data can also be viewed at https://de.linkedin.com/legal/privacy-policy
IMPORTANT! Please note the following: LinkedIn is a U.S.-based platform operated by a company headquartered in the United States. In the United States, there is no data protection level equivalent in substance to that of the European Union. The operators of social media platforms have also not provided specific safeguards to compensate for this shortfall. There is no general data protection law in the U.S., no data protection supervisory authorities, and no guarantees concerning potential access by government agencies. Authorities may access data stored on U.S. servers without a judicial order. Since the Snowden disclosures, it has also become known that such access does not occur only in isolated cases, but that a permanent and broad evaluation of data is technically possible and in fact practiced.
We are therefore unable to assess how your data, collected by LinkedIn, are processed and shared.
9.5. Duration of Data Storage
Data collected in the context of interactions with users via LinkedIn (for example, through received messages or comments on our posts) are processed by LinkedIn itself. The duration of storage is also stated in LinkedIn’s Data Policy, available at https://de.linkedin.com/legal/privacy-policy
9.6. Furthermore, we inform you as follows regarding data processing by BioRegio STERN Management GmbH:
- You have the right of access (Art. 15 GDPR), as well as the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), or restriction of processing (Art. 18 GDPR), and furthermore the right to data portability (Art. 20 GDPR) and the right to object to processing (Art. 21 GDPR).
- The data subject has the right, on grounds relating to their particular situation, to object at any time to the processing of personal data concerning them which is carried out on the basis of legitimate interests (Art. 6(1)(f) GDPR); this also applies to profiling based on these provisions.
- There is a right to lodge a complaint with a data protection supervisory authority. You may have the choice among several supervisory authorities. The supervisory authority responsible for our registered office is “The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.”
- The provision of personal data by you is mandatory when using LinkedIn.
- We ourselves do not carry out automated decision-making or profiling pursuant to Art. 22 GDPR.
10. Videos and Links to YouTube
The BioRegio STERN website contains links to the site of the video platform YouTube (operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We operate a video channel on YouTube. We also embed videos that are available on YouTube into the BioRegio STERN website.
This is organized in a way that by only visiting the BioRegio STERN website no data is transmitted to YouTube yet. By clicking on the YouTube logo you are led to our video channel on the platform YouTube. Only by clicking on the YouTube logo data is transmitted to YouTube.
When you are also logged in as member on YouTube, its operator can relate the visit on our site to your YouTube account. We do not know if YouTube can relate your visit on our site to your account when you log in afterwards.
The following applies to the YouTube videos embedded on our website: A video is initially inactive and no data is transmitted to YouTube. Only after you activate the video and thus consent to the associated processing of your personal data by YouTube will YouTube receive information about your visit on our website. If you do not want this, please do not activate the videos.
We need your consent to play the YouTube videos embedded on our website and the associated transmission of data to Google. We inform you about this as follows:
Free consent and right to withdraw consent: You are completely free to give consent. You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can declare the withdrawal e.g. at our establishment, via letter to BioRegio STERN Management GmbH, Friedrichstr. 10, 70174 Stuttgart, or via e-mail to info@bioregio-stern.de or telefax to 0711-870354-44.
Additionally we inform you as follows:
- Controller as defined in the General Data Protection Regulation (GDPR) is BioRegio STERN Management GmbH (see above).
- The legal basis for processing the personal data is your consent (Art. 6 par. 1 point (a) GDPR).
- Data, in particular your IP address, are sometimes sent to Google based in California, USA. Google complies with the provisions of the GDPR for transfers outside the EU or the EEA by means of so-called standard contractual clauses.
- You have the right to request access (Art. 15 GDPR), to request rectification (Art. 16 GDPR) or erasure of personal data (Art.17. GDPR) or restriction of processing (Art. 18 GDPR) or to object to processing (Art. 21 GDPR) as well as the right to data portability (Art. 20 GDPR).
- You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on “legitimate interests” (Art. 6 par. 1 point (f) GDPR), including profiling based on those provisions.
- You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- You have the right to lodge a complaint with a supervisory authority. You may have a choice between various supervisory authorities. The supervisory authority responsible for our establishment is “Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg“.
- The provision of personal data neither is a statutory nor a contractual requirement nor is it a requirement necessary to enter into a contract. You are not obliged to provide the personal data. A possible consequence of failure to provide such data is that embedded YouTube videos cannot be displayed.
- There is no automated decision-making or profiling referred to in Art. 22 GDPR.
Status: April 2023