transformal GmbH:Terms of service: Difference between revisions

No edit summary
Line 18: Line 18:
* Message indicating whether the retrieval was successful and the amount of data transferred
* Message indicating whether the retrieval was successful and the amount of data transferred
* Data on the browser type and version used and its operating system
* Data on the browser type and version used and its operating system
The temporary storage of data is necessary to provide this site. Further storage in log files is to ensure its functionality and security. The data are processed on the basis of Art. 6 Para. 1 Letter f GDPR. The data are deleted as soon as they is no longer required to achieve the purpose for which they were collected. This is the case when the respective session has ended. Log files are stored for up to one month and protected against abuse. After that, they are only available indirectly via the reconstruction of backups and are permanently deleted after the legally required backup period has expired.  
The temporary storage of data is necessary to provide this site. Further storage in log files is to ensure its security and integrity. The data are processed on the basis of Art. 6 Para. 1 Letter f GDPR and are deleted when they no longer are required to achieve this purpose. Log files are stored for up to one month and protected against abuse. After that, they are only available indirectly via the reconstruction of backups and are permanently deleted after the legally required backup period has expired.  


===Rights of those affected===
===Rights of those affected===
''Right to disclosure'' – You can request the disclosure in accordance with Art. 15 GDPR about your personal data that we process.
''Right to disclosure'' – Visitors can request the disclosure in accordance with Art. 15 GDPR about your personal data that we process. '' Right to object'' – Visitors have the right to object for special reasons (see point II). ''Right to rectification'' – If the data concerning visitors are no longer correct, they can request rectification in accordance with Art. 16 GDPR. If their data is incomplete, they can request completion. ''Right to erasure'' – Visitors can request the erasure of their personal data in accordance with Art. 17 GDPR. ''Right to restriction of processing'' – Visitors have the right to request restriction of the processing of your personal data in accordance with Art. 18 GDPR. ''Right to complain'' – If visitors believe that the processing of their personal data violates data protection law, they have the right to complain to a data protection supervisory authority of their choice in accordance with Article 77, Paragraph 1 of the GDPR. This also includes the data protection supervisory authority responsible for the controller: [https://www.datenschutz-berlin.de/ State Commissioner for Data Protection and Freedom of Information Berlin]. ''Right to data portability'' – If the requirements of Art. 20 Para. 1 DS-GVO are met, visitors have the right to have data that we process automatically on the basis of their consent. The collection of data to provide this site and the storage of log files are essential for the operation of this site. They are therefore not based on consent in accordance with Art. 6 Para. 1 Letter a GDPR or on a contract in accordance with Art. 6 Para. 1 Letter b GDPR, but are justified in accordance with Art. 6 Para. 1 Letter f GDPR. The requirements of Art. 20 Para. 1 GDPR are therefore not met in this respect.
'' Right to object'' – You have the right to object for special reasons (see point II).
''Right to rectification'' – If the data concerning you are no longer correct, you can request rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request completion.
''Right to erasure'' – You can request the erasure of your personal data in accordance with Art. 17 GDPR.
''Right to restriction of processing'' – You have the right to request restriction of the processing of your personal data in accordance with Art. 18 GDPR.
''Right to complain'' – If you believe that the processing of your personal data violates data protection law, you have the right to complain to a data protection supervisory authority of your choice in accordance with Article 77, Paragraph 1 of the GDPR. This also includes the data protection supervisory authority responsible for the controller: [https://www.datenschutz-berlin.de/ State Commissioner for Data Protection and Freedom of Information Berlin].
''Right to data portability'' – If the requirements of Art. 20 Para. 1 DS-GVO are met, you have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. The collection of data to provide this site and the storage of log files are essential for the operation of this site. They are therefore not based on consent in accordance with Art. 6 Para. 1 Letter a GDPR or on a contract in accordance with Art. 6 Para. 1 Letter b GDPR, but are justified in accordance with Art. 6 Para. 1 Letter f GDPR. The requirements of Art. 20 Para. 1 GDPR are therefore not met in this respect.


===Right to object in accordance with Art. 21 Para. 1 GDPR===
===Right to object in accordance with Art. 21 Para. 1 GDPR===
Should you store personal data on this site, you have the right to object to the processing of these data based on Article 6 Para. 1 Letter f GDPR at any time for reasons related to your particular situation. The provider will then no longer process the personal data unless they can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. The collection of data to provide the site and the storage of log files are essential for the operation of the site.
Should visitors store personal data on this site, they have the right to object to the processing of these data based on Article 6 Para. 1 Letter f GDPR at any time for reasons related to their particular situation. We will then no longer process their personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. The collection of data to provide the site and the storage of log files are essential for the operation of the site.


===Abuse of rights===
===Abuse of rights===
Abuse of data subject rights for purposes unrelated to privacy protection (including litigation discovery, commercial advantage, or harassment) may result in requests being deemed manifestly unfounded under Art. 12 Para. 5 GDPR. Detailed logs of all requests are maintained for this assessment.
Abuse of data subject rights for purposes unrelated to privacy protection (including litigation discovery, commercial advantage, or harassment) may result in requests being deemed manifestly unfounded under Art. 12 Para. 5 GDPR. Detailed logs of all requests are maintained for this assessment.