Data Protection Declaration for the processing of personal data

Part I gives you general information about the processing of your personal data by us and the rights you have as a natural person (hereinafter “data subject”). Part II informs you in which cases you can object to the processing of your data by us.

 

Part I: General data privacy information

Name and address of the controller (The person responsible within the meaning of the GDPR, within other data protection laws in force in the Member States of the European Union and within other provisions of a data protection nature)

INSONE GmbH
Stallbaumstraße 8
D-04155 Leipzig
Germany
E-Mail:      info[at]insone.de
Phone:    +49 (0) 341 9915 3890

 

Contact details of the data protection officer

Jan Marschner, LL.M.
Attorney at Law | Data Protection Officer
Markt 9
D-04109 Leipzig
Germany
E-Mail:      jm[at]datenschutzbeauftragter-leipzig.de
Phone:   +49 (0) 341 – 2618 9373

 

Provision of the website and creation of log files

Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

• Information about the browser type and the version used
• The user’s operating system
• The user’s IP address
• Date and time of access
• Websites from which the user’s system accesses our website

The data is stored in log files. The legal basis for the temporary storage of data is Art. 6 (1) (f) GDPR. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session. These purposes also include our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR.

The data will be deleted as soon as they are no longer required for the purpose for which they were collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended. In addition, log files are stored for seven days. This serves the care and maintenance of the server.

The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object.

 

Communication

We process your personal data on the basis of Art. 6 (1) (1) (b) GDPR. The processing serves the execution of our contracts or pre-contractual measures with you and the execution of your order, as well as all necessary activities in our company. The respective details for the purpose of data processing can be found in the respective contract documents and terms and conditions. In addition, we process the personal data transmitted to us in the course of establishing contact. The legal basis is Art. Art. 6 (1) (f) GDPR. This is permissible insofar as the processing is necessary to safeguard our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms that require the protection of personal data prevail. Such a justified interest exists in the assertion of legal claims and defence in legal disputes, in the execution of payment processing via external service providers, in guaranteeing the IT security and IT operation of the company and in direct advertising. A given consent can be revoked at any time. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected. We also process personal data pursuant to Art. Art. 6 (1) (c) GDPR insofar as this is necessary for the fulfilment of legal obligations to which we are subject as a company. The purposes of the processing include, for example, commercial and tax retention obligations according to § 257 HGB and § 147 AO.

When contacting us by e-mail, additional e-mail log files are created and stored for four weeks with the e-mail header information. We do not have access to them ourselves. The legal basis is Art. Art. 6 (1) (f) GDPR. The legitimate interest lies in the defence against illegal e-mails and prosecution. In this respect, there is no possibility of objection.

Within the company, those departments that need your data to fulfil their contractual and legal obligations will have access to it. Processors providing data processing services (Art. 28 GDPR) may also receive data for these purposes. These are companies in the categories IT services, logistics, debt collection as well as sales and marketing. In exceptional cases, bearers of professional secrets (tax advisors, auditors, lawyers) and authorities may also be recipients of your data.

If necessary, we process and store your personal data for the duration of the business relationship. This also includes the initiation and processing of the contract. In addition, we store your personal data for the duration of warranty and guarantee claims. In addition, we store your personal data insofar as we are legally obliged to do so. Corresponding duties of proof and storage arise in particular from commercial and tax law reasons according to § 257 HGB and § 247 AO.

The processing of personal data is necessary for communication as well as for the justification and execution of the contract. Without the provision of your personal data, we usually have to refuse to conclude the contract or can no longer execute an existing contract or have to terminate it.

Your rights as a data subject

Pursuant to Art. 15 GDPR, you have the right to obtain information about the personal data stored about you. If incorrect personal data have been processed, you have a right to correction pursuant to Art. 16 GDPR.

If the legal requirements are met, you can request the deletion or restriction of the processing and lodge an objection against the data processing (Art. 17, 18 and 21 GDPR). According to Art. 20 GDPR, you can assert the right to data transfer for data that is processed automatically on the basis of your consent or a contract with you.

These rights can be asserted against INSONE GmbH at the address given above under the heading “Name and address of the controller”.

If you are of the opinion that data processing violates data privacy law, you have the right to complain to a data privacy supervisory authority of your choice (Art. 77 GDPR in conjunction with § 19 BDSG). This also includes the data protection supervisory authority responsible for us, which you can reach at the following contact details:

Saxon data privacy commissioner
Devrientstr. 5
01067 Dresden
Germany
Phone: +49 (0) 351 – 85471 101
E-Mail: saechsdsb[at]slt.sachsen.de

 

Part II: Information about your right of objection according to Art. 21 GDPR

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you on the basis of Art. 6 (1) (f) GDPR (data processing on the basis of a weighing of interests). If you file an objection, we will no longer process your personal data unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

In individual cases, we process your personal data in order to conduct direct advertising. You have the right at any time to object to the processing of your personal data for the purpose of such advertising. If you object to the processing for purposes of direct advertising, we will no longer process your personal data for these purposes.

The objection can be made in any form and should, if possible, be directed to the contact data listed above under the heading ” Name and address of the controller”.