Privacy Policy

Data protection at aconso

Protecting your data is the very highest priority for us at aconso AG. We protect the data with which you entrust us, using the technological and organizational tools currently available.

I. Name and address of the responsible party

The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other provisions under data protection law is:

aconso AG
Theresienhöhe 28
80339 Munich
Germany
Tel.: +49 (0)89-516186-0
E-mail: contact@aconso.com
Website: www.aconso.com

II. Name and address of the data protection officer

The data protection officer of the responsibility party is:

Carsten Knoop
audatis Consulting GmbH
Leopoldstr. 2-8
32051 Herford
Germany
Tel.: +49 (0)5221 85496-90
E-Mail: datenschutz@aconso.com

III. General information relating to data processing

1. Scope of the processing of personal data

We principally only collect and use personal data of our users insofar as this is necessary to provide a functional website as well as our contents and services. The collection and use of personal data of our users is, as a rule, only carried out after the granting of the consent by the user. An exception applies in such cases, in which a prior obtaining of a consent is not possible for actual reasons and the processing of the data is permitted by statutory regulations.

2. Legal basis for the processing of personal data

Insofar as we obtain a consent of the relevant person for the processing activities of personal data, Art. 6 Para. 1 lit. a EU General Data Protection Regulation (GDPR) will serve as the legal basis.

With the processing of personal data, which is necessary in order to fulfil a contract, the contractual party of which is the relevant person, Art. 6 Para. 1 lit. b GDPR will serve as the legal basis. This shall also apply to processing activities, which are necessary for the execution of pre-contractual measures.

Insofar as a processing of personal data is necessary in order to fulfil a legal obligation, which our company is subject to, Art. 6 Para. 1 lit. c GDPR will serve as a legal basis.

For the event that vital interests of the relevant person or another natural person render a processing of personal data necessary, Art. 6 Para. 1 lit. d GDPR will serve as a legal basis.

If the processing is necessary in order to safeguard a legitimate interest of our company or of a third party and if the interests, basic rights and basic freedom of the data subject do not outweigh the first named interest then Art. 6 Para. 1 lit. f GDPR will serve as a legal basis for the processing.

3. Data deletion and storage duration

The personal data of the relevant person will be deleted or blocked as soon as the purpose of the storage ceases to apply. A storage can additionally be carried out if this was envisaged by the European or national legislators in regulations under Union law, laws or other regulations, which the responsible party is subject to. A blocking or deletion of the data shall also be carried out if a storage deadline stipulated by the stated standards expires, unless a necessity exists for the further storage of the data for the conclusion of a contract or a fulfilment of a contract.

IV. Provision of the website and creation of logfiles

1. Description and scope of the data processing

Each time our website is called our system will automatically enter data and information from the computer system of the calling computer. The following data are collected hereby:

(1)    Information about the browser type and the used version(2)    The operating system of the user(3)    The Internet-Service-Provider of the user(4)    The IP address of the user(5)    Date and time of the access(6)    Websites, from which the user’s system goes to our website (7)    Websites, which are called from the user’s system via our websiteThe data are also stored in the logfiles of our system. These data will not be stored together with other personal data of the user.

2. Legal basis for the data processing

The legal basis for the temporary storage of the data and the logfiles is Art. 6 Para. 1 lit. f GDPR.

3. Purpose of the data processing

The temporary storage of the IP address by the system is necessary in order to enable a transmission of the website to the user’s computer. For this purpose the IP address of the user must remain stored for the duration of the session. In addition, the storage is carried out in logfiles in order to ensure the functionality of the website. Moreover, the data serve us for the purpose of optimisation of the website and to ensure the security of our IT systems. An evaluation of the data for marketing purposes will not take place in this context.

The aforementioned purposes also serve our legitimate interest in the data processing according to Art. 6 Para. 1 lit. f GDPR.

4. Duration of the storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose of their collection. In the event of the entry of the data for the provision of the website this is the case when the respective session is ended. In the event of the storage of the data in logfiles this is the case after seven days at the latest. A storage in addition to this is possible. In this case the IP addresses of the users will be deleted or distorted so that an allocation of the calling client is no longer possible.

5. Possibility for an objection and remedy

The entry of the data for the provision of the website and the storage of the data in logfiles is absolutely essential for the operation of the website. There is consequently no possibility to file an objection on the part of the user.

V. Use of cookies

1. Description and scope of the data processing

Our website uses cookies. Cookies are text files, which are stored in the internet browser or by the internet browser on the user’s computer system. If a user calls a website then a cookie can be stored on the operating system of the user. This cookie contains a characteristic string, which enables a clear identification of the browser when the website is called again. We use cookies in order to design our website more user-friendly. Some elements of our website render it necessary that the calling browser can also be identified after a change in site. The following data are hereby stored and transmitted in the cookies:

(1)    Log-In information
(2)    Condition of the cookie banner, however only after the consent of the user

We additionally use cookies on our website, which enable an analysis of the surfing behaviour of the users. The following data can be transmitted in this manner:

(1)    Entered search terms
(2)    Frequency of the site calls
(3)    Use of website functions

The data of the users that are collected this way will be pseudonymised by precautionary technical measures. Therefore, an allocation of the data to the calling user is no longer possible. The data will not be stored together with other personal data of the users.

When calling our website the users are informed by an info banner about the use of cookies for analysis purposes and are referred to this privacy statement. The user can prevent the storage of cookies in his browser settings.

2. Legal basis for the data processing

The legal basis for the processing of personal data by using cookies is Art. 6 Para. 1 lit. f GDPR.

3. Purpose of the data processing

The purpose of the use of technically necessary cookies is to simplify the use of websites for the users. Some functions of our website cannot be offered without the use of cookies. For this purpose it is necessary that the browser is also recognised after a change in site.

The user data collected by technically necessary cookies will not be used to create user profiles.

The use of the analysis cookies shall be carried out for the purpose to improve the quality of our website and its contents. Through the analysis cookies we find out how the website is used and can thus consistently optimise our offer.

These purposes also serve our legitimate interest in the processing of the personal data according to Art. 6 Para. 1 lit. f GDPR.

4. Duration of the storage, possibility for objection and remedy

Cookies are stored on the user’s computer and transmitted by it to our site. Therefore, you as user also have the full control over the use of cookies. By a change in the settings in your internet browser you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at all times. This can also be carried out automatically. If cookies are deactivated for our website, it is however possible that all functions of the website can no longer be used in full.

The transmission of Flash-Cookies cannot indeed be prevented via the settings of the browser, however by changes to the setting of the Flash Player.

VI. Newsletter

1. Description and scope of the data processing

On our website there is the possibility to subscribe to a free newsletter. With the registration for the newsletter the data from the input mask are transmitted to us:

(1)    E-mail address
(2)    Form of address
(3)    First and last name
(4)    Company

Moreover, the following data are collected with the registration:

(1)    IP address of the calling computer
(2)    Date and time of the registration
(3)    Date and time of the activation
(4)    URL of the site of the registration

For the processing of the data your consent will be obtained within the scope of the registration process and reference will be made to this privacy statement. If you acquire goods or services from aconso or you have requested information in this respect from us and hereby deposit your e-mail address, this can consequently be used by us to send a newsletter. In such a case exclusively direct advertising for own similar goods or services will be sent via the newsletter.

The newsletter will be sent with the newsletter service CleverReach (Cleverreach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. The commissioning of Cleverreach GmbH & Co. KG is based on a jointly signed agreement for the contract processing according to GDPR and envisages the compliance with all stipulations under data protection law as well as the protection of your data. We merely transmit your data to CleverReach for the purpose and the administration of the newsletter despatch. You can find further information pertaining to CleverReach in the privacy statement of CleverReach.

The data will not be forwarded to any third parties in connection with the data processing for the despatch of newsletters apart from the data processing by CleverReach. The data are exclusively used for sending the newsletter. With the newsletter tracking available in CleverReach we evaluated how the newsletter is opened and used. The following data are stored in this respect:

(1)    Openings with date and time
(2)    Clicks with date and time
(3)    De-registrations with date and time
(4)    Ability for service (bounces)
(5)    Location
(6)    E-mail client
(7)    Device

2. Legal basis for the data processing

The legal basis for the processing of the data after registration for the newsletter by the user with the existence of a consent of the user is Art. 6 Para. 1 lit. a GDPR.

The legal basis for the despatch of the newsletter as a result of the sale of goods or the procurement of our service is Section 7 Para. 3 UWG [German law against unfair competition].

The legal basis for the newsletter tracking is Art. 6 Para. 1 lit. f GDPR.

3. Purpose of the data processing

The collection of the user’s e-mail address serves to serve the newsletter.

The collection of other personal data within the scope of the registration process serves to prevent a misuse of the services or the used e-mail address.

The purpose of the data processing for the newsletter tracking is to improve the newsletter and the reader experience with the newsletter.

4. Duration of the storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose of their collection. The e-mail address of the user will accordingly be stored for as long as the subscription to the newsletter is active. The other personal data collected within the scope of the registration process will, as a rule, be deleted after a period of seven days.

5. Possibility for an objection and remedy

The subscription of the newsletter can be terminated by the relevant user at all times. A corresponding link can be found in each newsletter for this purpose. A revocation of the consent to the storage of the personal data collected during the registration process is also made possible hereby.

VII. Contact form and e-mail contact

1. Description and scope of the data processing

A contact form is available on our website, which can be used for the electronic contact. If a user takes advantage of this possibility then the data entered in the input mask will be transmitted to us and stored. These data are:

(1)    Form of address
(2)    First name
(3)    Last name
(4)    Corporate name
(5)    Personal enquiry text
(6)    Additional details relating to size of the company, telephone number and the manner in which the attention of the user was drawn to aconso, are optional and take place voluntarily.

At the time when the message is sent moreover the following data will be stored:

(1)     Date of the registration
(2)     Time of the registration

For the processing of the data your consent will be obtained within the scope of the despatch processing and reference will be made to this privacy statement.

Alternatively, it is also possible to contact us via the provided e-mail address. In this case the personal data of the user transmitted with the e-mail will be stored. The personal data transmitted to us via the contact form, by e-mail or other means can be passed on to one of our business partners for processing the enquiry.

2. Legal basis for the data processing

The legal basis for the processing of the data with the existence of a consent of the user is Art. 6 Para. 1 lit. a GDPR.

If you contact us via the above-mentioned channels to implement a contract with us, Art. 6 para. 1 sentence 1 lit. b) GDPR is the legal basis for processing (processing to fulfil a contract). If your establishment of contact serves the conclusion of a contract with us or one of our business partners, then the legal basis for the processing by us, including our transmission of your personal data to our business partners Art. 6 Para. 1 S. 1 lit. b) GDPR (pre-contractual measures). If your contact neither serves the execution of a contract, nor its justification, the legal basis for the processing by us, including our transmission to our business partners, is our legitimate interest in the optimal support of your inquiry and thus the customer acquisition and retention according to Art. 6 Para. 1 S. 1 lit. f) GDPR.

The protection of your personal data is important to us. If you do not wish your data to be transferred to our business partners, we would therefore ask you to inform us accordingly during the initial contact. A transmission to our business partners does not take place in this case.

3. Purpose of the data processing

The processing of the personal data from the input mask serves us, as well as in the case of the transmission to our business partners only the treatment of the establishment of contact. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of the storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected and if there are no legal obligations to retain them. In order to achieve the purpose, the personal data from the input mask of the contact form and those sent by e-mail are no longer required once the respective correspondence with the user has ended. This is the case if it can be inferred from the circumstances that the relevant facts have been conclusively clarified. If your contact serves to substantiate or execute a contract, the statutory storage obligations amount to 6 years from receipt of the corresponding message (§ 147 para. 3, 4 AO, § 257 para. 4, 5 HGB). The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Possibility for an objection and remedy

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail and the contact does not serve the execution or justification of a contract, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. An e-mail via the online contact form or an e-mail to contact@aconso.com is sufficient to object to the storage. In this case, all personal data stored in the course of establishing contact will be deleted.

6. Information on application management

We collect and process the personal data of applicants for the purpose of completing the application process. The processing can also be carried out electronically. This is particularly the case if an applicant submits application documents to us electronically, for example by e-mail or via a web form on the website. If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the legal regulations. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, as long as no other legitimate interests on our part are opposed to deletion. Other legitimate interests in this sense include, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz - AGG).

The data processing is required for the initiation of the employment relationship pursuant to Art. 88 GDPR § Section 26 (1) BDSG.

VIII. Third-Party-Cookies and web analysis services

1. Description and scope of the data processing

For the web analysis we cooperate with advertising partners, which help to design the internet offer and the website more interesting for you. Therefore, cookies of partner companies are also stored on your hard drive during a visit to our website (cookies of third party providers, so-called Third-Party-Cookies). Third-Party-Cookies are cookies, which belong to other domains than that, which is displayed in the address bar of the browser. These make it possible to track the browsing progress of the user. Data collected by Third-Party-Cookies are processed by their respective providers by order of aconso as responsible party for the data. The data processing, which takes place via the individual service providers, can be summarised in detail as follows:

a) etracker

Data are collected and stored for marketing and optimisation purposes on our website using technologies of etracker GmbH. Use profiles can be created from these data under a pseudonym. Cookies can be used for this purpose. Cookies are small text files, which are stored locally in the cache of the internet browser of the visitor to the site. The cookies enable the recognition of the internet browser. The data collected using the etracker technologies will not be used to personally identify the visitor to this website without the separately granted consent of the data subject and will not be aggregated with personal data about the holder of the pseudonym. The data collection and storage can be objected to at all times with effect for the future. You can submit an objection to data collection and storage by clicking on the following link: Objection.

b) Google AdWords Conversion Tracking

We use Google AdWords for aconso.com and within the scope of Google AdWords the Conversion-Tracking, an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). A cookie is set by Google AdWords hereby (“Conversion Cookie”) if a user comes to for aconso.com via a Google advertisement. These cookies will cease to be valid after 30 days and do not serve the personal identification. If the user visits certain sites of aconso.com and the cookie has not expired yet aconso and Google can recognise that someone has clicked on the advertisement and was thus forwarded to the site. Each AdWords customer will receive a different cookie. Cookies can thus not be tracked via the websites of AdWords customers. The information obtained by using the Conversion-Cookie serves to create Conversion statistics for AdWords customers, which decided in favour of Conversion-Tracking. The AdWords customers will find out the total number of users, who clicked on their advertisement and were forwarded to a site fitted with a Conversion-Tracking-Tag. However, they do not receive any information, with which users can be personally identified. You can find further information relating to the data protection by Google here.

Users, who would not like to take part in the tracking procedure, can refuse the setting of a cookie that is necessary for this purpose – for example per browser setting, which generally deactivates the automatic setting of a cookie. Cookies for Conversion-Tracking can also be deactivated by setting the browser of the user so that cookies from the domain “googleadservices.com” are blocked.

c) Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer to help the website analyse how visitors use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States . Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

You can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing this browser plug-in.

Please note that this website initializes Google Analytics with the setting "anonymizeIp". This guarantees anonymized data collection by masking the last part of your IP address.

Further information concerning the terms and conditions of use and data privacy can be found here or here.

d) Google Retargeting

For our website we use the Remarketing function of Google Inc. ("Google"). This function serves to display interest-related advertisements to visitors of the website within the scope of the Google advertising network. The browser of the website visitor stores cookies, which enable the visitor to be recognised again when this website is called, which belongs to the advertising network of Google. On these sites advertisements can then be displayed to the visitor, which refer to contents that the visitor previously called on websites, which use the Remarketing function of Google. According to its own details Google does not collect any personal data during this process. You can find further information relating to the data protection by Google here.

Should you not wish the Remarketing function of Google, you can principally deactivate this by carrying out the corresponding settings under https://adssettings.google.com. Alternatively, you can deactivate the use of cookies for interest-related advertising via the advertising network initiative by following the instructions under this link.

e) LinkedIn Analytics and LinkedIn Ads

1. We use the conversion tracking technology and retargeting feature of LinkedIn Corporation on our website.

2. This technology can be used to play personalized ads on LinkedIn to visitors to this website. It also provides the ability to create anonymous reports on ad performance and website interaction information. For this purpose, the LinkedIn Insight tag is integrated into this website. This establishes a connection to the LinkedIn server if you visit this website and are logged into your LinkedIn account at the same time.

3. See LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy for more information about data collection and use. You will also find the possibilities and rights to protect your privacy. If you are logged in to LinkedIn, you can deactivate data collection at any time by clicking on the following link: https://www.linkedin.com/psettings/enhanced-advertising

2. Legal basis for the data processing

The legal basis for the processing of personal data by using cookies for the web analysis is Art. 6 Para. 1 lit. f GDPR.

3. Purpose of the data processing

The processing of the personal data of the users enables us to analyse the surfing behaviour of our users. By the evaluation of the acquired data we are in the position to compile information about the use of the individual components of our website. This helps us to consistently improve our website and its user friendliness. By the anonymization of the IP address the interest of the users in their protection of personal data is sufficiently taken into account.

4. Duration of the storage, possibility for an objection and remedy

With regard to the duration of the storage, possibility for an objection and remedy see the presentation under VIII a) 1-4 relating to the individual service providers.

IX. Social media

We use presences within social networks and/or platforms in order to be able to communicate in a modern way with interested persons and users within these networks and/or platforms and to be able to provide information about our services, offers and current topics. We draw your attention to the fact that your data may be processed by the relevant providers outside the European Union within the framework of the use of these networks and/or platforms. This may result in certain risks for you as a user. For example, the enforcement of your rights may be more difficult. Processing of your data by the platform providers is generally carried out for market research and advertising purposes. User profiles can be created based on your usage behaviour (of the respective network) and the resulting interests. These profiles can be used, for example, to place advertisements inside and outside the platforms that are intended to correspond to your interests. Network and/or platform providers from the USA certified according to the Privacy Shield are obliged to comply with EU data protection standards.

1. Legal basis for the processing of your personal data

The legal basis for the processing of your personal data is Art. 6 para. 1 lit. f GDPR. Our legitimate interests are based on effective user information and modern communication with you. Insofar as the network and/or platform providers obtain consent for the aforementioned data processing, the legal basis is Art. 6 para. 1 lit. a in connection with Art. 7 GDPR.

a) Facebook:
The use of Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) (possibly pages, groups) is based on an agreement on the joint processing of personal data. Facebook's Privacy Policy can be found at: https://www.facebook.com/about/privacy/ (specifically for Facebook pages at: https://www.facebook.com/legal/terms/information_about_page_insights_data). Facebook opt-out settings can be found at: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com. Facebook is certified under the privacy shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

b) Twitter:
We maintain an online presence on the Twitter short message service (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA). Twitter's privacy policy can be found at: https://twitter.com/de/privacy. You can change your opt-out settings at https://twitter.com/personalization Twitter is certified under the privacy shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

c) XING:
We maintain an online presence at the XING career network (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany). XING's privacy policy can be found at: https://privacy.xing.com/de/datenschutzerklaerung.

d) LinkedIn:
We maintain an online presence at the LinkedIn network (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA). Further information can be found in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy. LinkedIn is certified under the privacy shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0.

2. Your rights as an involved person/user

The assertion of your rights as a user of the networks and/or platforms is best made against the particular providers. Only they have access to your data and can take and implement appropriate measures and provide information. Of course you can also contact us for questions and help.

X. Rights of the relevant person

If personal data are processed by you are the data subject within the meaning of GDPR and you are entitled to the following rights towards the responsible party (aconso):

1. Right to information

You can request a confirmation from the responsible party concerning whether personal data, which relate to you, are processed. In case of such processing you can request details about the following information:

(1)    the purposes, for which the personal data are processed;
(2)    the categories of personal data, which are processed;
(3)    the recipients or the categories of recipients, towards whom the personal data relating to you were disclosed or will be disclosed still;
(4)    the planned duration of the storage of the personal data relating to you or, if concrete details are not possible in this respect, criteria for the stipulation of the storage duration;
(5)    the existence of a right to rectification or deletion or the personal data relating to you, of a right to limitation of the processing by the responsible party or a right to file an objection against this processing;
(6)    the existence of a right to lodge a complaint at a supervisory authority;
(7)    all available information about the origin of the data if the personal data are not collected from the relevant person;
(8)    the existence of an automatic decision-making including profiling pursuant to Art. 22 Para. 1 and 4 GDPR and – at least in these cases – feasible information about the involved logic as well as the range and the intended implications of such a processing for the relevant person.

You have a right to request information concerning whether the personal data relating to you will be transmitted to a third country or to an international organisation. In this context you can request to be notified about the suitable guarantees pursuant to Art. 46 GDPR in connection with the transmission.

2. Right to rectification

You have a right to rectification and/or completeness towards the responsible party if the processed personal data, which relate to you, are incorrect or incomplete. The responsible party has to carry out the rectification without delay.

3. Right to limitation to the processing

Under the following prerequisites you can request the limitation to the processing of the personal data relating to you:

(1)    if you dispute the accuracy of the personal data relating to you for a duration, which enables the responsible party to check the accuracy of the personal data;
(2)    the process is unlawful and you refuse the deletion of the personal data and instead request the limitation to the use of the personal data;
(3)    the responsible party no longer requires the personal data for the purposes of the processing, However, you require these for the assertion, exercising or defence of legal claims, or
(4)    if you have filed an objection against the processing pursuant to Art. 21 Para. 1 GDPR and it has not been determined yet whether the legitimate reasons of the responsible party outweigh compared to your reasons.

If the processing of the personal data relating to you was limited these data may – apart from their storage – only be processed with your consent or for the assertion, exercising or defence of legal claims or for the protection of the rights of another natural person or legal entity or are processed for reasons of an important public interest of the Union or a member state.

If the limitation to the processing was limited according to the aforementioned prerequisites, you will be informed by the responsible party before the limitation is revoked.

4. Right to deletion

a)    Deletion obligation

You can request from the responsible party that the personal data relating to you are deleted without delay and the responsible party is obligated to delete these data without delay if one of the following reasons applies:

(1)    The personal data relating to you are no longer necessary for the purposes, for which they were collected or processed in any other way.
(2)    You revoke your consent on which the processing is supported pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR, and there is no legal basis otherwise for the processing.
(3)    You file an objection against the processing pursuant to Art. 21 Para. 1 GDPR and there are no legitimate reasons for the processing have precedence or you file an objection against the processing pursuant to Art. 21 Para. 2 GDPR.
(4)    The personal data relating to you were processed unlawfully.
(5)    The deletion of the personal data relating to you is necessary in order to fulfil a legal obligation according to Union law or the law of the member states, which the responsible party is subject to.
(6)        The personal data relating to you were collected with regard to offered services of the information society pursuant to Art. 8 Para. 1 GDPR.

b)    Information to third parties

If the responsible party has published the personal data relating to you and if it is obligated pursuant to Art. 17 Para. 1 GDPR to delete these it shall take appropriate measures by showing consideration for the available technology and the implementation costs, also of a technical kind in order to inform for the party responsible for the data processing, which processes the personal data, that you as relevant person have request from them the deletion of all links to these personal data or of copies or replications of these personal data.

c)    Exceptions

The right to deletion shall not exist insofar the processing is necessary

(1)    in order to exercise the right to free expression of an opinion and to information;
(2)    to fulfil a legal obligation, which requires the processing according to the law of the Union or the member states, which the responsible party is subject to, or is carried out in order to perform a task, which is in the public interest or while exercising a public authority, which was assigned to the responsible party;
(3)    for reasons of the public interest in the field of public health pursuant to Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 GDPR;
(4)    for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para. 1 GDPR, insofar as the law stated under Section a) is expected to render or seriously impair the realisation of the aims of this processing, or
(5)    to assert, exercise or defend legal claims.

5. Right to notification

If you have asserted the right to rectification, deletion or limitation to the processing against the responsible party it is obligated to inform all recipients, to which the personal data relating to you were disclosed, of this rectification or deletion or the data or limitation to the processing unless it proves to be impossible or is associated with a disproportionate amount of work. You are entitled towards the responsible party to be informed about these recipients.

6. Right to data portability

You have the right to receive the personal data relating to you, which you have made available to the responsible party, in a structured, common and machine-readable format. In addition you have the right to transmit these data to another responsible party without an impediment by the responsible part, to which the personal data were made available if

(1)    the processing is based on a consent pursuant to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b GDPR and
(2)    the processing is carried out using an automatic process.

While exercising this right you further have the right to achieve that the personal data relating to you are transmitted directly by one responsible party to another responsible party if this is technically possible. Freedom and rights of other persons may not be impaired hereby.

The right to data portability shall not apply to a processing of personal data, which is necessary to perform a task, which is in the public interest or is carried out while exercising a public authority, which was assigned to the responsible party.


7. Right of objection

You have the right, for reasons, which arise from your special situation, at all times to file an objection against the processing of the personal data relating to you, which is carried out owing to Art. 6 Para. 1 lit. e or f GDPR, this also applies to a profiling supported on this provision.

The responsible party will no longer process the personal data relating to you, unless it can prove essential reasons that are worthy of protection for the processing, which outweigh your interests, rights and freedom, or the processing serves to assert, exercise or defend legal claims.

If the personal data relating to you are processed in order to conduct direct advertising you have the right to file an objection against the processing at all times of the personal data relating to you for the purpose of such advertising, this shall also apply to the profiling, insofar as it is associated with such direct advertising.

If you file an objection against the processing for purposes of direct advertising, then the personal data relating to you will no longer be processed for these purposes.

You have the possibility, in connection with the use of services of the information society – irrespective of the Directive 2002/58/EC – to exercise your right to file an objection by means of an automatic process, with which technical specifications are used.


8. Right to revocation of the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at all times. By the revocation of the consent the legality of the processing carried out owing to the consent until the revocation will not be affected.

9. Automatic decision in an individual case including profiling

You have the right not to be submitted to a decision that is exclusively based on an automatic processing – including profiling –, which shall have legal effect towards you or substantially impairs you in a similar manner. This shall not apply if the decision

(1)    is necessary for the conclusion or the fulfilment of a contract between you and the responsible party,
(2)    is admissible owing to legal regulations of the Union or the member states, which the responsible party is subject to, and these legal regulations contain appropriate measures for the safeguarding of your rights and freedom as well as your legitimate interests or
(3)    is carried out with your explicit consent.

However, these decisions may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, if Art. 9 Para. 2 lit. a or g GDPR does not apply and appropriate measures were taken to protect the rights and freedom as well as your legitimate interests.

With regard to the cases stated in (1) and (3) the responsible party will take appropriate measures in order to safeguard the rights and freedom as well as your legitimate interests, which shall at least include the right to achieve the intervention of a person on the part of the responsible party, to prevent the own point of view and to contest the decision.

10. Right to lodge a complaint at a supervisory authority

Irrespective of a legal remedy otherwise under administrative law or in court you have the right to lodge a complaint at a supervisory authority, in particular in the member state of your place of abode, your workplace or the place of the presumed breach, if you are of the opinion that the processing of the personal data relating to you breaches the GDPR.

The supervisory authority, at which the complaint was lodged, will inform the complainant about the status and the results of the complaint including the possibility of a court legal remedy according to Art. 78 GDPR.

XI. Up-to-dateness and amendment of the data protection declaration

This data protection declaration is currently valid and has the status: 15 February 2019.

Due to the further development of our web pages and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can call up and print out the current data protection declaration at any time on the website under www.aconso.com/en/privacy_policy/.
 

We use cookies to personalise content and advertisements and to analyse accesses to our website. We also share information about your use of our website with our partners for advertising and analysis. Our partners may combine this information with other data that you have provided to them or that they have collected as part of your use of the services. Read details in our privacy policy