I. Information on the processing of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR)

1. Controller and data protection officer

Responsible for this website is Mika Kaijo, Fürstenrieder Strasse 284, 81377 Munich, Germany,  expand@gentrios.com.

2. Data processed for the provision of the website and the creation of log files

 

a. What data is processed for what purpose?

 

Each time the content of the website is accessed, data that may allow identification is temporarily stored. The following data is collected:

 

– Date and time of access

– IP address

– Host name of the accessing computer

– Website from which the website was accessed

– Websites accessed via the website

– Visited page on our website

– Message as to whether the retrieval was successful

– Amount of data transferred

– Information about the browser type and version used

– Operating system

Temporary storage of the data is necessary for the course of a website visit to enable delivery of the website. Further storage in log files takes place in order to ensure the functionality of the website and the security of the information technology systems. Our legitimate interest in data processing also lies in these purposes.

b. On what legal basis is this data processed?

The data is processed on the basis of Article 6(1)(f) GDPR.

c. How long will the data be stored?

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the provision of the website, this is the case when the respective session has ended. The log files are stored directly and only accessible to administrators. After that, they are only indirectly available via the reconstruction of backup tapes and are permanently deleted after a maximum of four weeks.

3. Rights of data subjects

a. Right to information

You can request information in accordance with Art. 15 GDPR about your personal data that we process.

b. Right to object

You have the right to object for specific reasons (see point II).

c. Right to rectification

If the information concerning you is not (or no longer) correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.

d. Right to erasure

You can request the erasure of your personal data in accordance with Art. 17 GDPR.

e. Right to restriction of processing

In accordance with Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted.

f. Right to lodge a complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Art. 77 (1) GDPR. This also includes the data protection supervisory authority responsible for the controller State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, https://www.ldi.nrw.de/kontakt/ihre-beschwerde.

g. Right to data portability

In the event that the requirements of Art. 20 para. 1 GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website. They are therefore not based on consent pursuant to Art. 6(1)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, but are justified pursuant to Art. 6(1)(f) GDPR. The requirements of Art. 20 (1) GDPR are therefore not met in this respect.

II Right to object pursuant to Art. 21 (1) GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (f) of Article 6(1) GDPR. DS-GVO takes place, to file an objection. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website.