Data Protection

Personal Data Protection

The protection of personal data is a fundamental right and is carried out in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR) and the relevant national data protection laws.    

Within the meaning of legal provisions, personal data is any information relating to an identified or identifiable natural person. This includes in particular personal details, contact information, identification numbers, location data and any other information that allows conclusions to be drawn about the identity of a data subject.

Principles of Data Processing

The collection, processing, storage and transmission of personal data is carried out solely on the basis of a legal authorisation or the explicit consent of the data subject. All data processing operations must be conducted in accordance with the principles of lawfulness, transparency, purpose limitation, data minimisation and proportionality.

Technical and Organisational Measures

The data controller undertakes to take appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of personal data and to protect such data against unauthorised access, loss, misuse or unlawful processing.

Rights of the Data Subject

In accordance with the applicable legal provisions, data subjects have in particular the following rights:

• Right of access pursuant to Art. 15 GDPR
• Right to rectification of inaccurate data pursuant to Art. 16 GDPR
• Right to erasure („right to be forgotten") pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to object pursuant to Art. 21 GDPR

Disclosure to Third Parties

Personal data is disclosed to third parties only within the framework of legal provisions or on the basis of the explicit consent of the data subject.

Sanctions for Violations

Violations of data protection regulations may result in civil, administrative and criminal consequences and may be sanctioned with significant fines.

The purpose of data protection regulations is to protect the personality rights and privacy of natural persons and to ensure the lawful and responsible handling of personal data.

Data Controller