1. Name and contact details of the person responsible
Juliane Siebold
Altung 19
91207 Lauf a. d. Pegnitz
Tel.: (0) 176 633 41 547
E-Mail: info@sqe-railconsulting.de
die zuvor aufgerufene Internetseite;
2. Processing of personal data as part of the operation of this site
Personal data of users of this website is processed to the extent that this is necessary for the purpose of operating a functional website. For this purpose, the following data is automatically collected by the computer accessing this page:
– the IP address of the computer used to access this website;
– the type of browser software used;
– the previously accessed website;
– the configuration of the computer accessing this page;
– Date and Time.
The IP address is only stored for as long as is necessary to provide proper services, in particular to detect and prevent improper use. After seven days at the latest, the IP address of the computer accessing this page will be anonymized.
The legal basis for this processing of personal data is Article 6 Paragraph 1 Sentence 1 Letter f) of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR). The legitimate interest in data processing lies in the proper operation of this website.
3. Categories of recipients of personal data
The data collected as part of the processes described under 2. are processed by a contract data processor in Germany. This provides services for the technical operation and maintenance of this website.
4. Rights of those affected
Persons whose data is collected as part of the processes described under 2 have the following rights:
a) Right to information
The data subject has the right to request confirmation from the person responsible as to whether personal data concerning him or her is being processed; If this is the case, he has the right to access this personal data and the following information:Der Betroffene hat das Recht, von dem Verantwortlichen die Einschränkung der Verarbeitung zu verlangen, wenn eine der folgenden Voraussetzungen gegeben ist: Der Betroffene hat das Recht zur Beschwerde bei einer zuständigen Aufsichtsbehörde.
aa) the processing purposes;
bb) the categories of personal data processed;
cc) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
dd) if possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria for determining that period;
ee) the existence of a right to rectification or deletion of personal data concerning him or to restriction of processing by the controller or a right to object to such processing;
ff) the existence of a right to lodge a complaint with a supervisory authority;
gg) if the personal data are not collected from the data subject, all available information about the origin of the data;
Der Verantwortliche stellt eine Kopie der personenbezogenen Daten, die Gegenstand der Verarbeitung sind, zur Verfügung.
b) Right to rectification
The person concerned has the right to immediately request that the person responsible correct incorrect personal data concerning him. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary statement.
c) Right to deletion
The data subject has the right to request that the controller delete personal data concerning him/her without delay, and the controller is obliged to delete personal data without delay if one of the following reasons applies:
aa) The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
bb) The data subject withdraws his consent on which the processing was based in accordance with Article 6 paragraph 1 letter a or Article 9 paragraph 2 letter a GDPR and there is no other legal basis for the processing.
cc) The data subject objects to the processing in accordance with Article 21 paragraph 1 of the GDPR and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Article 21 paragraph 2 of the GDPR.
dd) The personal data was processed unlawfully.
ee) The deletion of the personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
ff) The personal data was collected in relation to information society services offered in accordance with Article 8 Paragraph 1 GDPR.
If the controller has made the personal data public and is obliged to delete them in accordance with the previous paragraph, he shall, taking into account the available technology and the implementation costs, take appropriate measures, including technical measures, to ensure that data controllers who process the personal data: to inform you that a data subject has requested that you delete all links to this personal data or copies or replications of this personal data.
The above paragraphs do not apply to the extent that processing is necessary
aa) to exercise the right to freedom of expression and information;
bb) to fulfill a legal obligation requiring processing under Union or Member State law to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller ;
cc) for reasons of public interest in the field of public health in accordance with Article 9 paragraph 2 letters h and i and Article 9 paragraph 3 GDPR;
dd) to assert, exercise or defend legal claims.
d) Right to restriction of processing
The data subject has the right to request that the controller restrict processing if one of the following conditions is met:
aa) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
bb) the processing is unlawful and the data subject refuses the deletion of the personal data and instead requests the restriction of the use of the personal data;
cc) the controller no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims, or
dd) the data subject has lodged an objection to the processing in accordance with Article 21 Paragraph 1 of the GDPR as long as it is not yet clear whether the legitimate reasons of the controller outweigh those of the data subject.
If processing has been restricted in this way, these personal data - apart from their storage - may only be used with the consent of the person concerned or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest Union or a Member State.
A data subject who has obtained a restriction on processing will be informed by the person responsible before the restriction is lifted.
e) Right to object to processing
The data subject has the right, for reasons arising from his or her particular situation, to object at any time to the processing of personal data concerning him or her, which is carried out on the basis of Article 6 paragraph 1 letters e or f of the GDPR; The controller will no longer process the personal data unless he or she can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
f) Right to data portability
The data subject has the right to receive the personal data concerning him/her that he has provided to a controller in a structured, commonly used and machine-readable format, and he has the right to transmit these data to another controller without hindrance from the controller to whom the personal data was provided Data has been provided to be transmitted, provided
aa) the processing is based on consent in accordance with Article 6 paragraph 1 letter a or Article 9 paragraph 2 letter a GDPR or on a contract in accordance with Article 6 paragraph 1 letter b GDPR and
bb) the processing is carried out using automated procedures.
When exercising his right to data portability, the data subject has the right to have the personal data transmitted directly from one controller to another controller, to the extent that this is technically feasible.
The exercise of the right is unaffected by Article 17 of the GDPR. This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
g) Right to restriction of processing
The person concerned has the right to lodge a complaint with a responsible supervisory authority.
5. Further information
The provision of personal data is not required by law or contract. A contract is not necessary. There is no obligation to provide personal data. If personal data is not provided in the context described under 2., use of this website is not possible.
Automated decision-making and so-called profiling do not take place.