Data Protection at Montanuniversität Leoben According to EU-GDPR

General

Data protection and information security are topics of great importance to Montanuniversität Leoben (hereinafter referred to as MUL). For this reason, the protection of your personal data (hereinafter referred to as data) is an important concern for us.

When handling data, we are complying with all relevant regulations, in particular those of the General Data Protection Regulation (GDPR) and the Austrian Telecommunications Act (TKG) as amended. In addition, we have taken the technical and organisational measures necessary for appropriate data protection.

Below, we would like to inform you in detail about which data is collected when you visit our website and how it is processed or used by us in the following.

If you only use our website to access information, it is generally not necessary for you to provide personal data. However, it is necessary for the operation of the website to process certain data through which a personal reference can be established. In this case, it is only the data that is transmitted to us by your internet browser. These are the following:

  • date and time of accessing one of our webpages,
  • your browser type,
  • your browser settings,
  • the operating system used,
  • the last page you visited,
  • the amount of data transferred and the access status (file transferred, file not found, etc.),
  • your IP address.

Purpose

This is done to enable the accessing and use of the webpages you have clicked on, for statistical purposes and to improve our Internet presence.

Legal Basis

The legal basis for this is our legitimate interest in accordance with Art. 6 (1) lit f GDPR to ensure the operation of the website, the performance of an error and availability analysis and the defence against attacks.

Recipient
The data will be transmitted to order processors if necessary, but not to third parties.

Storage Period

The data will only be stored for a maximum of four weeks unless there is a legal obligation to retain it beyond this. Similarly, longer storage may take place insofar as this is necessary to investigate detected attacks on our website.

Necessity of provision
There is no obligation for you to provide this data. You cannot use the website without providing this data.

To enable you to use this website without restriction, we use cookies. Cookies are small text files that enable the recognition of the user and an analysis of your use of our website. A randomly generated unique identification number is stored in these text files. In addition, a cookie contains information about its origin and the storage period. These cookies cannot store any other data. Setting cookies does not allow us to view files on your computer.

No profiling in the sense of Art 22 GDPR takes place on the website of Montanuniversität Leoben.

The cookies set by our website do not pose any risk to the user’s computer system, as they do not cause any damage and do not contain any viruses or the like.

There are three types of cookies that we use for the operation of our website:

  • Functional cookies to ensure the technical operation and basic functions of our website. This type of cookies is used, among other things, to store your selection about which cookies are enabled via cookie banners.
  • Statistics/marketing cookies to understand how visitors interact with our website and to be able to set targeted advertising activities. Information is only collected and analysed anonymously. This provides us with valuable insights to optimise the website and our product offering.
  • Third-party cookies if third-party media content is integrated, for example when playing YouTube videos.

Cookies Used

Storage Period

Necessary/Optional

Typo3

12 months

necessary

Google Analytics

14 months

optional

The use of cookies can also be prevented by changing the browser settings. If your browser supports the Do-Not-Tracktechnology and you have activated it, no usage profile will be created about your visit. However, please note that the website at hand may not be fully usable without cookies.

Legal Basis

The legal basis for the use of functional cookies is our legitimate interest pursuant to Art 6 para 1 lit f GDPR to ensure the technical operation and basic functions of our website as well as to save your selected cookie settings and to operate the website accordingly.

The legal basis for the use of cookies for marketing and analysis purposes (see the section on Google Analytics below), which you can give via cookie banners, is your consent pursuant to Art 6 para 1 lit a GDPR.

The legal basis for the use of third-party cookies is exclusively your consent pursuant to Art 6 para 1 lit a GDPR, which you can give either via the cookie banner or by accessing the corresponding content, for example when playing a YouTube video (for further details, see the section on YouTube videos).

Notice of Revocation and Notice of Objection

You can revoke the consent you have given at any time without affecting the legality of the processing carried out based on your consent until revocation. You may have the right to object to processing of your data based on a legitimate interest of the controller. For more information on your data subject rights, please see the section Your rights.

Recipients
This data is transmitted to order processors if necessary, but not to third parties. For information on third country transfers by Google, see the section Third country transfer USA below.

Storage Period
You can find the storage periods for cookies in the table above.

Necessity of Provision

There is no obligation for you to provide this data. By not providing the functional cookies, you could experience problems with accessing and using our website. Not providing other cookies would not have any negative consequences for you.

Google Analytics

If you have given your consent for statistical/marketing cookies, our website uses Google Analytics, a web analysis tool from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google), in order to tailor the offer even more specifically to our visitors.

Google Analytics also uses cookies, which are stored on your computer to enable an analysis of the website. The information generated by these cookies about your use of this website (including your IP address) is transmitted to a Google server and stored there. Your IP address will be automatically shortened/anonymised by the IP anonymisation used by this website as soon as Google receives your IP address.

Based on this information and on behalf of the website operator, Google compiles reports on website activity and other services related to Internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

In order to generally prevent the collection of data generated by cookies and related to your Internet surfing behaviour (including your IP address) as well as the dissemination of this data by Google, you can download and install an appropriate browser plugin under the link: tools.google.com/dlpage/gaoptout. This will set an opt-out cookie, which will prevent the future collection of your data. For more information on Google’s terms of use and privacy policy, please visit https://www.google.de/intl/de/policies/ .

Third Country Transfer USA
The statistics and marketing cookies are processed by Google LLC, which does not exclude processing of the data in the USA. The Schrems II ruling of the ECJ (C-311/18) does not certify an adequate level of data protection in the USA, as the US authorities can gain access to personal data of EU citizens, and they have no effective legal remedy against this. By granting this consent, you expressly agree to the transfer of your data to the USA (Art 49 para 1 lit a GDPR).

Google Maps

We use the Google Maps component from Google on our website.

No cookies are set when using the Google Maps component. We would like to point out that data is only transferred to Google when you actively select the component, i.e., click on the map and use the component. Google alone is responsible for any processing of personal data in this regard (e.g., IP address, location) – we do not have access to this data.

The use of Google Maps and the information obtained via Google Maps is subject to the Google terms of use as set under http://www.google.de/intl/de/policies/terms/regional.html and the additional terms of use for Google Maps, which can be found by clicking on the following link https://www.google.com/intl/de_at/help/terms_maps/.

YouTube videos are embedded on our website, which are stored on www.youtube.com and can be played directly from our website. We use the extended data protection mode option provided by YouTube, which means that no data about you as a user is transmitted to YouTube if you do not play the videos.

Only when you play the videos are YouTube cookies stored on your computer and data transmitted to the YouTube operator Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as Google). If you play videos stored on YouTube, at least the following data will be transmitted to Google: IP address and cookie ID, the specific address of the page accessed on our site, the language setting of the browser, the system date and time of the access as well as the identifier of your browser. The data transfer takes place regardless of whether you are logged in to YouTube via a user account or you do not have a user account. If you are logged in, this data is directly assigned to your account. You can prevent this allocation by logging out before activating the start button. YouTube or Google stores this data as user profiles and uses it for the purposes of advertising, market research and/or designing its website in line with usage patterns. You have the right to object to the creation of these usage profiles, which you must address directly to Google as the operator of YouTube.

Google provides further information on YouTube data protection under www.google.at/intl/de/policies/privacy/. By playing the YouTube videos, you consent to the processing of data by Google. We do not process the data concerned.

Third Country Transfer

We use Facebook pixel from Facebook on our website. For this purpose, we have implemented a program code on our homepage. Facebook Pixel is a snippet of JavaScript code that loads a collection of functions that allow Facebook to track your user actions if you have come to our website via Facebook Ads. For example, when you submit a form on our website, the Facebook pixel is triggered and stores your actions on our website in one or more cookies. These cookies allow Facebook to match your user data (IP address and user ID) with your Facebook account data. Facebook then deletes this data again. The collected data is anonymous and not visible to us and can only be used in the context of ad placements. If you are a Facebook user and are logged in, your visit to our website is automatically assigned to your Facebook user account.

We use Facebook pixel from Facebook on our website. For this purpose, we have implemented a program code on our homepage. Facebook Pixel is a snippet of JavaScript code that loads a collection of functions that allow Facebook to track your user actions if you have come to our website via Facebook Ads. For example, when you submit a form on our website, the Facebook pixel is triggered and stores your actions on our website in one or more cookies. These cookies allow Facebook to match your user data (IP address and user ID) with your Facebook account data. Facebook then deletes this data again. The collected data is anonymous and not visible to us and can only be used in the context of ad placements. If you are a Facebook user and are logged in, your visit to our website is automatically assigned to your Facebook user account.

Our website uses Snapchat Pixel, a tracking technology of the social network Snapchat. We set a cookie on your computer, which is integrated with a JavaScript code from Snapchat that is also implemented. Certain user actions predefined by us are recorded and can also be tracked (e.g., search queries on the website or accessing various pages). The collected data is anonymous, not visible to us and can only be used in the context of ad placements.

We use TikTok Pixel, a conversion tracking tool for advertisers, on our website. This is a code that we have implemented on our website. With the help of this code, if you give your explicit consent, a connection is established with the TikTok servers when you visit our website in order to track your behaviour on our website. For example, when you submit a form on our website, the TikTok pixel is triggered and stores your actions on our website in one or more cookies. The data collected is anonymous and not visible to us and is only used in the context of ad placements.

On iMooX, freely accessible and openly licensed online courses (Massive Open Online Courses) are offered on various topics, which are available to all interested parties free of charge, independent of time and place. Our aim is to make educational content produced at university level accessible to the general population and to give as many people as possible the opportunity to educate themselves. Every semester, more exciting courses are added to the platform. We offer free and openly licensed educational content for all – educate yourself anytime, anywhere.

 

Source: https://imoox.at/page/about

Purpose

If you contact us via the contact form on the website, by email or by telephone, the data you provide will be stored by us for the purpose of processing your enquiry (prospective students, etc.) and in the event of follow-up questions.

The legal basis for this is our legitimate interest according to Art 6 (1) lit f GDPR to answer your enquiry.

Storage Period

The data is only stored for as long as is necessary to achieve its designated purpose or within the framework of legal retention periods.

Necessity of Provision
Failure to provide your data would result in us not being able to process your request further. This could possibly result in you breaching existing obligations to cooperate with us.

Purpose
You have the possibility to subscribe to our newsletter via our website. This will keep you up to date and provide you with interesting news and information about Montanuniversität Leoben as well as invitations to our events. For this purpose, we need your name, your e-mail address and your declaration that you agree to receive the newsletter. When you register for our newsletter, we will also save your IP address as well as the date and time of your registration. In the event that a third party misuses your email address and subscribes to our newsletter without your knowledge, this serves as a safeguard on our part and as proof of your consent. Furthermore, we use the double opt-in process.

In addition, statistics on opening, reading and clicking behaviour are compiled in connection with the newsletter. This enables us to send you only the information that is really of interest to you.

Legal Basis
The legal basis for sending the newsletter is your consent pursuant to Art 6 (1) lit a GDPR. The creation of statistics is based on our legitimate interest pursuant to Art 6 (1) lit f GDPR, whereby our interest results from the aforementioned purpose. You have the possibility to object to this by unsubscribing from the newsletter.

Recipients
The newsletter is sent exclusively by and through Montanuniversität Leoben. No external third parties are involved.

Storage Period
The deletion or non-processing for the above purpose takes place after unsubscribing from the newsletter.

Revocation
You can cancel your subscription to the newsletter at any time by pressing the unsubscribe button. Your cancellation will be sent to the following e-mail address: alumni(at)unileoben.ac.at. Of course, you can also contact us by e-mail or telephone. We will then immediately delete your data in connection with the newsletter mailing. The legality of the processing carried out between your consent and the cancellation remains unaffected.

Necessity of Provision
There is no obligation for you to provide this data. Without providing your data, you will not be able to receive our newsletter.

Purpose
The personal data you provide during an application (including correspondence) will be processed for recording and storage as well as for coordination and evaluation in the application process. Furthermore, your data may be kept on file for subsequent application processes with your consent. In addition, we carry out an anonymous statistical evaluation of the applicant structure. Without the provision of your data, it is not possible to consider your application in the application process, as we would otherwise not be able to assess whether you are suitable for the respective position.

Legal Basis
The legal basis is the implementation of pre-contractual measures within the meaning of Art 6 para 1 lit b GDPR. In the case of record keeping, the legal basis is your express consent within the meaning of Art 6 para 1 lit a GDPR.

Storage Period
After completion of the application process, the personal data you have submitted will be deleted after 6 months. In certain cases, the data may be kept longer, namely for the assertion and defence of legal claims.

Necessity of Provision

  • Application process: The provision of your data during your application is necessary for the possible conclusion of a contract. Without the provision of your data, we cannot process your application any further.
  • Keeping records: There is no obligation for you to provide your data for record keeping. Without the provision of your data for record keeping, we will not be able to contact you in further application procedures.

Purpose
As is usual at any event, photos and/or videos will be taken at the events we organise. We are not interested in identifying individual persons, but purely in documenting the event. For documentation purposes, the photos and/or videos taken will be securely stored by us and, if necessary, also published on the internet (on our homepage, our accounts on social media platforms and in the newsletter). In addition, it will also be stored for archival purposes. Furthermore, we may present the photos/videos taken at future events (e.g., annual/anniversary events).

Legal Basis
The processing (meaning the production, presentation and publication of the photos/videos) is based on our overriding legitimate interest in documenting our own events and also storing them in an archive (Art 6 (1) lit e GDPR in conjunction with § 12 Austrian Data Protection Act). This also includes the interest in informing the public and interested parties about events of Montanuniversität Leoben as well as documenting our own historical development with photos and videos for future generations.

Storage Period
Photos/videos taken are stored as long as they are necessary for the purpose. Photos/video recordings will be deleted immediately if they are not suitable for the above-mentioned purposes, would violate the legitimate interests of the person depicted or in the event of an objection by the person concerned.

Necessity of Provision
You are under no obligation to be photographed or recorded. Not providing your data will not have any negative consequences for you.

Revocation
If you do not agree with the recording or publication, please inform the photographer on site immediately. You can also contact us after the photo/video has already been taken. More details on the right of objection below.

Purpose
The purpose is to process your applications in connection with data subject rights under the GDPR. We also store this data beyond the processing of the application to demonstrate that we have fulfilled our legal obligation to process your application in a timely and appropriate manner.

Legal Basis
The legal basis for processing your applications is Art 12 and following of GDPR. Accordingly, we must send you all notifications in connection with your data subject rights. The storage of data beyond the completion of the application is based on our legitimate interest pursuant to Art 6 (1) f GDPR, whereby this interest results from the above-mentioned purpose.

Storage Period
Your data will be stored for three years after the application has been processed. This is due to the general statute of limitations according to § 24 para 4 Austrian Data Protection Act. Until the time of deletion, the data will be restricted so that no further processing or access takes place.

Necessity of Provision
The provision of your data is required by law (see legal basis above). Without the provision of your data, we cannot process your applications.

Generally, usage data in social media is processed for advertising and market research purposes. For example, the providers of social media can create their own usage profiles from various interests of the users and subsequently use these usage profiles to place targeted advertisements within and outside the social media. For these purposes, social media also use cookies in which the usage behaviour and interests of the users are stored. Furthermore, these usage profiles may also contain data on the users as members of the respective social media, provided they are logged in to these (hereinafter referred to as usage data).

For a detailed description of the respective data processing and the options to object or revoke, please refer to the data protection information of the respective social medium (see section on social media in detail below).

Additionally, in the course of our appearances on social media, we also process your username, name, contact and communication information, insofar as you contact us and share this data with us.

Purpose
We use our presences in social media to inform about us and, of course, also to get in touch with users and to communicate. In addition, we receive statistical evaluations of usage data collected by the respective social media in anonymised form in order to better adapt our information offer to your interests.

Legal Basis
The legal basis for communicating with you via social media is our legitimate interest pursuant to Art 6 (1) (f) GDPR to respond to your enquiries. The legal basis for processing in joint responsibility with the respective social medium is our legitimate interest (Art 6 para 1 lit f GDPR) in the processing of data for analysis and marketing purposes described above for the continuous improvement of our presence in social media.

Joint Responsibility
Since we operate presences in social media (see a detailed list in section on presences in social media below), we take into account the current developments in the area of data protection in social media and take them very seriously. We therefore inform you that due to the current jurisdiction of the European Court of Justice, there is joint responsibility within the meaning of Art 26 GDPR between the operator of a media presence and the respective provider of this social medium for the processing of your usage data. We have taken the necessary precautions for this joint responsibility, insofar as this was made possible for us by the respective provider.

We would like to point out that the primary processing of your usage data in the social media takes place with the respective provider of this social medium and we receive this - if at all - exclusively in anonymised form and therefore the primary responsibility according to the GDPR also lies with the provider of the social medium. Therefore, we also recommend that you assert your data subject rights in this context directly with the respective social medium. The corresponding links to the data protection information of the providers can be found in the section on social media in detail below. You can also assert your data protection rights in this context against us within the scope of our joint responsibility. In this case, we will immediately contact the respective provider of the social medium.

Recipients
Your personal data may be passed on to external order processors, but in any case, not to third parties.

Third Country Transfer
In the case of the social media Facebook, LinkedIn, YouTube (Google) and Twitter, it may happen under certain circumstances that usage data is processed outside the European Union, specifically in the USA. The ECJ's Schrems II ruling (C-311/18) does not certify an adequate level of data protection in the US, as US authorities can access personal data of EU citizens and they have no effective legal remedy against this.

Storage Period
Your data, which we process as part of your contact in the course of your presence in the social media, will be processed by us until the deletion of your account in the respective social medium, unless a longer retention is required due to the processing purpose, legal provisions or for the assertion or defence of rights. As soon as none of these reasons apply, your data will be deleted.

We only receive and process usage data in anonymised form. For more information about the storage period, please visit the data protection information of the respective social medium.

Necessity of Provision
Failure to provide your data when contacting us to initiate a contract would result in us not being able to process your contact further. Not providing it when used for other reasons would not have any negative consequences for you.

Presence on Social Media
We are represented in various social media with our own presences:

Company

Facebook Ireland Ltd.

Address

4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland

Data Protection Information

https://www.facebook.com/policy.php 

Joint Responsibility

https://www.facebook.com/legal/terms/page_controller_addendum 

Further Information

https://www.facebook.com/legal/terms/information_about_page_insights_data 

Company

LinkedIn Ireland Unlimited Company

Address

Wilton Plaza, Wilton Pl, Saint Peter’s, Dublin 2, Irland

Data Protection Information

https://www.linkedin.com/legal/privacy-policy?_l=de_DE 

Joint Responsibility

https://de.linkedin.com/legal/l/dpa 

Further Information

https://www.linkedin.com/help/linkedin/answer/89877?trk=microsites-frontend_legal_privacy-policy&lang=de 

Company

Google Ireland Limited

Address

Gordon House, 4 Barrow Street, Dublin, D4 E5W5, Irland

Data Protection Information

https://policies.google.com/privacy?gl=AT&hl=de#about 

Montanuniversität Leoben promotes the use of digital media as part of its educational obligations. This also includes the recording of courses and the use of webinars or streaming to enable participation in non-presence.

As we mainly use Cisco Webex or Zoom for the webinars, you will find further information on data processing in the privacy policies of the respective providers. You can find more information under the following links:

We might also use other video tools in exceptional cases.

For complete data protection information, please see:

DS Info Distance Learning

 

If personal data is processed by you (collected, recorded, stored, evaluated, modified, read out, queried, disclosed, disseminated, matched, linked, restricted, deleted, destroyed, etc.), you are a data subject within the meaning of the GDPR.

At this point, we would like to point out once again that the primary processing of your usage data in the context of the use of social media (section 3) takes place with the respective provider of this social medium and that we receive this data - if at all - exclusively in anonymised form and therefore the primary responsibility according to the GDPR also lies with the provider of the social medium. Therefore, we also recommend that you assert your data subject rights regarding your usage data directly with the respective social medium. However, you can also assert your data protection rights in this context against us within the scope of our joint responsibility. In this case, we will immediately contact the respective provider of the social medium.

As a data subject, you have the following rights against any data controller who processes your personal data:

Right to Information:
In accordance with Art. 15 of the Data Protection Regulation (GDPR), you have the right to request information about all personal data concerning you that is processed at Montanuniversität Leoben. In such a case, information about this data must be provided. In addition, you have the right to receive the following information:

  • purposes of processing,
  • categories of personal data being processed,
  • recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations,
  • if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria used to determine that duration,
  • existence of a right to correction or deletion of personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing,
  • existence of a right of appeal to a supervisory authority,
  • if the personal data is not collected from you, all available information about the origin of the data,
  • existence of automated decision-making including profiling and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for you,
  • appropriate guarantees in accordance with Art. 46 GDPR if personal data is transferred to a third country or to an international organisation.

Correction
In accordance with Art. 16 GDPR, you have the right to immediately request the correction and/or completion of incorrect personal data concerning you.

Deletion
In accordance with Article 17 GDPR, you have the right to demand that personal data relating to you be deleted immediately. The person responsible is obligated to delete personal data immediately if one of the following reasons applies:

  • Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  • You revoke your consent, on which the processing is based in accordance with Art. 6 Para. 1 lit or Art. 9 Para. 2 lit a, and there is no other legal basis for the processing.
  • You file an objection to the processing pursuant to Art. 21 Para. 1 and there are no overriding legitimate reasons for the processing. Or you object to the processing in accordance with Article 21 (2).
  • Your personal data has been processed unlawfully.
  • The deletion of your personal data is necessary for compliance with a legal obligation in Union or Member State law to which the controller is subject.
  • Your personal data was collected in relation to information society services offered in accordance with Article 8 Paragraph 1.

The right to deletion does not apply if the processing of your data is necessary for:

  • exercising the right to freedom of expression and information,
  • fulfilling a legal obligation that requires processing under Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller,
  • reasons of public interest in the field of public health in accordance with Art 9 Para 2 lit h and i as well as Art 9 Para 3 GDPR,
  • archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para,
  • asserting, exercising or defending legal claims.

If the person responsible has made your personal data public and is obligated to delete it, they shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data, that an affected person has requested them to delete all links to this personal data or copies or replications of this personal data.

Restriction
In accordance with Article 18 GDPR, you have the right to request restriction of processing if:

  • the accuracy of the personal data is disputed by you, for a period of time that enables the controller to verify the accuracy of the personal data,
  • the processing is unlawful, and you refuse to delete the personal data and instead request that the use of the personal data be restricted,
  • the person responsible no longer needs your personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or,
  • you have lodged an objection to the processing in accordance with Article 21 Paragraph 1, as long as it is not certain whether the legitimate reasons of the person responsible outweigh yours.

If the processing has been restricted, this personal data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State are processed. The lifting of a restriction imposed by you requires your prior notification.

Notification
If you have asserted the right to correction, deletion or restriction of processing against the person responsible, they are obliged to inform all recipients to whom your personal data has been disclosed of this correction, deletion or restriction of processing. Except where this proves impossible or involves a disproportionate effort.

Transfer of Data
You have the right to receive the personal data concerning you that you have provided to a person responsible in a structured, common and machine-readable format. You also have the right to transmit that data to another controller without hindrance from the controller to whom the personal data was provided, provided:

  • the processing is based on consent in accordance with Art. 6 Para. 1 lit a or Art. 9 Para. 2 lit a or on a contract in accordance with Art. 6 Para. 1 lit b and
  • the processing is carried out using automated procedures.

You can also arrange for your personal data to be transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible.

The right to transfer of data does not apply to processing of personal data that is required to perform a task that is in the public interest or in the exercise of official authority that has been assigned to the controller. It must not interfere with the rights and freedoms of other people.

Objection
In accordance with Article 21 GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data relating to you, which is based on Article 6 Paragraph 1 lit e or f GDPR. The right to object can therefore be asserted if the processing:

  • is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been assigned to the person responsible, or
  • is necessary to protect the legitimate interests of the controller or a third party, unless your interests or fundamental rights and freedoms that require the protection of personal data prevail (especially if you are a child) and
  • the person responsible cannot prove any compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms or the processing does not serve to assert, exercise or defend legal claims.

The right to objection can also be asserted if the processing is for direct marketing purposes.

In connection with the use of information society services, notwithstanding Directive 2002/58/EC, you can exercise your right to objection by means of automated procedures using technical specifications.

In the case of processing that serves to fulfil a task in the public interest, you can only assert the right to object if the processing is not necessary in this context and if:

  • the processing is carried out for scientific or historical research purposes or for statistical purposes in accordance with Article 89 Paragraph 1 and
  • you provide reasons against the processing that arise from your particular situation.

Withdrawal of Consent

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the legality of the processing carried out based on the consent up to the point of withdrawal.

Complaint
If you are of the opinion that the processing of your personal data violates data protection law or your data protection claims have otherwise been violated in any way, please contact us. This is how we can address your concerns. However, you also have the right to contact the responsible data protection authority.