1. Data controller and contact details
The data controller as defined by the General Data Protection Regulation (hereinafter referred to as “GDPR”) is:
Protembis GmbH, Pauwelsstr. 17
(hereinafter referred to as „Protembis“).
2. Processing your personal data when using our website
This website is hosted by STRATO AG (https://www.strato.de/). If you visit our website, the device you use to access the website automatically transmits log data (connection data) to the STRATO server. This information is processed in order to enable the use of the website (e.g. by adapting our website to your device). The following log data is collected during this process: domain, anonymized IP, request line, timestamp, status code, the size of the response body, referer sent, user agent sent and remote user. To detect cyber attacks STRATO AG also stores non-anonymized IP addresses for a maximum of 7 days. After this time the IP addresses are irrevocably anonymized.
Protembis does not have access to any non-anonymized IP addresses at any time.
The legal basis for processing your data is Article 6 sec. 1 lit. b GDPR, as automatically collected data is required for the effective provision of this website, as well as Article 6 sec. 1 lit. f GDPR, as the storage is necessary for the purposes of the legitimate interest in ensuring the stability and security of this website.
3. Online advertising and analysis tools
This website is for information purposes only. It does not use any cookies nor any other web analysis tools except as those mentioned in Section 2.
4. Processing your personal data when contacting us
On our website we provide our contact details (e.g. email address, postal mail address). If you choose to contact us we will store and process the information you provide including your personal data. This usually includes your name and your email address as well as any other information you may provide. We process your data solely for the pupose of processing your request.
The legal basis for processing your personal data in connection with a contact by you is Article 6 Section 1 lit. b GDPR, insofar as it is required for the performance of a contract or in order to take steps prior to entering into a contract, as well as Article 6 Section 1 lit. f GDPR, as the processing of your requests is necessary for the purposes of the legitimate interests pursued by both parties.
5. Information sharing
5.2 We may disclose your personal data if legally entitled or required to do so (for example if required by law or by a court order).
6. Cross border data transfer
Within the scope of our processing activities set out above, your personal data may be transferred to other countries (including countries outside the EEA) which may have different data protection standards than your country of residence.
Please note that data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and supervisory authorities. However, we will endeavour to take reasonable measures to keep up an adequate level of data protection also when sharing your personal data with such countries.
In the case of a transfer outside of the EEA, this transfer is generally safeguarded by so-called EU Model Clauses. You can receive the corresponding evidence or further details by sending an email to us.
7. Storage Periods
It is our aim to process your personal data only to the smallest possible extent. We will therefore only store your personal data for as long as it is necessary to fulfil the purpose for which it was originally collected or – if applicable – as long as longer storage is legally required or justified.
8. Your Rights
Depending on the circumstances of the specific case, you have the following rights:
- Right of access: You have the right to request information about and access to your personal data and/ or copies thereof. This includes information on the purposes for which it is used, the category of data concerned, its recipients and authorised persons and, if possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine this period.
- Right of rectification, limitation and deletion: You have the right to demand the correction, deletion or restriction of the processing of your personal data, insofar as the processing of the data is unlawful under data protection law. This is in particular the case if (i) the data is incomplete or inaccurate, (ii) it is no longer necessary for the purposes for which it was collected, (iii) the consent on which the processing was based has been withdrawn, or (iv) you have successfully exercised a right to object to data processing; in cases where the data is processed by third parties, we will forward your requests for rectification, cancellation or limitation of processing to these third parties, unless this proves impossible or involves a disproportionate effort.
- Refusal/ withdrawal of your consent: Many data processing operations are only possible with your explicit consent. You have the right to refuse to consent or to withdraw an already given consent at any time – without affecting the legality of the data processing carried out before the withdrawal.
- Automated decision making including profiling: You have the right not to be subject to a decision based solely on automated processing that has legal effect on you or that significantly affects you in a similar manner.
- Data portability: You have the right to have data that you have provided to us handed over to you or to a third party in a structured, commonly used and machine-readable format. However, you have the right to request that we transfer the personal data directly to another controller, insofar as this is technically feasible.
- Right to lodge a complaint with a supervisory authority: You have the right to take legal action or to appeal to the relevant supervisory authorities if you believe that your rights have been violated as a result of the processing of your personal data that does not comply with data protection regulations.
Right to object:
You have the right to object to the processing of your personal data at any time if we process your personal data for the purposes of direct marketing or if we process your personal data to pursue our legitimate interests and if there are reasons arising from your particular situation.
You may (i) exercise the rights mentioned above or (ii) ask any questions or (iii) lodge a complaint about our processing of your personal data by contacting us in a way as set out above, in Section 1.