Vorlage Datenschutzerklärung

1

/

9

Privacy

Policy

for

the

DataPortal

Name

and

address

of

the

responsible

party

The

responsible

party,

pursuant

to

the

EU

General

Data

Protection

Regulations

and

various

national

data

protection

provisions

of

the

member

states

of

the

European

Union

and

other

legal

data

privacy

policies,

is:

Company:

Doppstadt

Beteiligungs

GmbH

Street:

Steinbrink

4

City:

D-

42555

Velbert

Country:

Germany

Phone:

+49

2052

889

-0

Email:

info(at)doppstadt.de

Website:

www.doppstadt.de

Name

and

address

of

the

enforcing

data

protection

officer

For

your

issues

and

questions

regarding

data

protection

laws

as

well

as

for

the

assertion

of

your

rights

as

the

data

subject

please

contact

our

data

protection

officer

(DPO)

using

the

e

-

mail

address,

stated

on

our

Website

under

“

Data

protection

”.

I.

Data

processing

in

general

1.

Scope

of

personal

data

processing

We

collect

and

process

our

user's

(data

subjects)

personal

information

(data)

solely

to

the

extent

necessary

to

maintain

an

operational

DataPortal

for

pro

viding

our

products

and

services.

A

data

subjects'

consent

is

routinely

required

prior

to

collecting

and

processing

personal

information.

An

exception

applies

in

circumstances

where

it

is

not

possible

to

obtain

prio

r

consent

due

to

genuine

reasons

and

the

processing

of

data

is

permitted

by

law.

2.

Legal

basis

for

the

processing

of

personal

data

Once

a

data

subjects'

consent

for

processing

personal

data

has

been

obtained,

Article

6,

Section

1(a)

of

the

EU

General

Data

Protection

Regulation

(GDPR)

serves

as

the

legal

regulation

for

processing

personal

data.

When

processing

personal

data,

required

for

the

performance

of

a

contract

whose

party

to

the

agreement

is

the

data

subject,

Article

6,

Section

1(b)

of

the

GDPR

shall

apply.

Such

shall

also

apply

to

processin

g

activities

involving

the

performance

of

pre

-

contractual

measures.

To

the

extent

personal

data

processing

becomes

necessary

to

fulfil

a

legal

obligation

to

which

our

company

is

subject,

Article

6,

Section

1(c)

of

the

GDPR

shall

apply.

In

the

event

crucial

concerns

regarding

the

interests

of

the

data

subject

or

another

natural

individual

require

the

processing

of

personal

data,

Article

6,

Section

1(d)

of

the

GDPR

shall

apply.

Should

the

processing

be

necessary

to

safeguard

legitimate

interests

of

our

compan

y

or

of

a

third

party

and

should

the

interests,

fundamental

rights

and

freedom

of

the

data

subject

not

outweigh

the

interests

of

our

company,

Article

6,

Section

1(f)

of

the

GDPR

shall

apply

to

the

processing.

3.

Deleting

data

and

data

retention

Personal

information

regarding

the

data

subject

will

be

deleted

or

blocked

once

the

purpose

for

storing

no

longer

applies.

Furthermore,

data

may

be

stored

if

such

storage

has

been

stipulated

by

the

European

or

national

legislature

in

EU

regulations

,

laws

o

r

other

provisions

under

which

the

responsible

party

is

bound.

Data

shall

also

be

blocked

or

deleted

in

the

event

a

storage

period,

as

stipulated

in

the

aforementioned

provisions,

expires,

unless

a

need

for

extended

storage

of

data

arises,

i.e.,

in

order

t

o

conclude

a

contract

or

meet

contractual

obligations.

2

/

9

II.

Proemion

(Operator

of

the

DataPortal)

The

DataPortal

is

provided

as

Software

as

a

Service

(SaaS).

The

provider

is

Proemion

GmbH,

Donaustraße

14,

36043

Fulda.

The

DataPortal

is

a

service

that

can

be

used

to

process

telematics

data.

The

data

entered/transmitted

by

you

for

the

purpose

of

processing

will

be

stored

on

Proemion's

servers.

Possible

data

categories

are:

(1)

Company

data

(2)

vehicle

or

machine

information

(3)

GPS

data

(4)

user

profile

data

(5)

CU

data.

Legal

basis

The

processing

of

data

is

based

on

a

contract

according

to

Article

6,

Section

1(b)

of

the

GDPR.

If

a

corresponding

consent

was

requested

for

the

further

processing

of

additional

voluntary

data,

the

processing

of

this

data

is

based

on

Article

6,

Section

1(a)

of

the

GDPR.

Data

Retention

The

data

shall

be

deleted

once

these

are

no

longer

required

for

their

intended

purpose.

This

is

the

case

for

data

in

the

DataPortal

for

the

fulfilment

of

a

contract

or

for

the

implementation

of

pre

-

contractual

measure

s

when

the

data

is

no

longer

required

for

the

implementation

of

the

contract.

Even

after

the

conclusion

of

the

contract,

it

may

be

necessary

to

store

personal

data

of

the

contractual

partner

in

order

to

fulfil

contractual

or

legal

obligations.

Data

Priva

cy

Agreement

We

have

concluded

a

Data

Privacy

Agreement

with

Proemion

GmbH

in

which

we

oblige

Proemion

GmbH

(processor)

to

protect

our

customers'

data

and

not

to

disclose

it

to

third

parties.

III.

Providing

the

DataPortal

and

creating

log

files

1.

Description

and

scope

of

data

processing

Whenever

our

DataPortal

Login

page

is

accessed,

our

system

automatically

collects

data

and

information

from

the

computer

system

of

the

visiting

party.

The

following

data

is

collected:

(1)

Information

regarding

the

brow

ser

type

and

current

browser

version

(2)

The

user's

operating

system

(3)

The

user's

internet

service

provider

(4)

The

user's

IP

address

(5)

Access

date

and

time

(6)

Websites

from

which

the

user's

computer

system

accesses

our

website

(7)

Websites

which

are

accessed

by

the

user's

computer

system

via

our

website

(8)

Username

(9)

Information

about

the

operations

(and

their

parameters)

performed

by

the

user

The

data

is

also

stored

in

the

log

files

of

our

computer

system.

This

data

is

not

stored

together

with

other

personal

user

da

ta.

3

/

9

2.

Data

processing

compliance

The

legal

basis

for

the

temporary

storage

of

data

and

log

files

is

Article

6,

Section

1(f)

of

the

GDPR.

3.

Purpose

of

data

processing

The

temporary

storage

of

the

IP

address

by

the

computer

system

is

necessary

to

enable

the

DataPort

al

to

be

transmitted

to

the

user's

computer.

For

this

purpose,

the

user's

IP

address

must

remain

stored

for

the

duration

of

the

session.

The

storage

in

log

files

is

necessary

to

ensure

DataPortal

operation.

We

also

use

the

data

to

optimize

the

DataPortal

and

to

ensure

the

security

of

our

information

technology

systems.

An

evaluation

of

the

data

for

marketing

purposes

is

not

performed

in

this

context.

These

objectives

also

include

our

legitimate

interest

in

data

processing

in

accordance

with

Ar

ticle

6,

Section1(f)

of

the

GDPR.

4.

Data

Retention

The

data

shall

be

deleted

once

these

are

no

longer

required

for

their

intended

purpose.

When

a

collection

of

data

occurs

for

the

purpose

of

providing

the

DataPortal

,

ending

the

respective

session

results

in

such

data

being

deleted.

In

case

of

storage

of

data

in

application

logs,

we

delete

it

after

40

days

at

the

latest.

In

case

of

storage

of

data

in

access

logs

,

we

delete

it

after

60

days

at

the

latest.

Additional

data

backup

is

available

,

if

it

is

necessary,

in

particular,

for

error

analyses

or

product

improvements.

In

this

event,

the

personal

information

of

the

users

will

be

deleted

or

altered,

making

it

impossible

to

identify

the

contacting

client.

5.

Options

regarding

objections

and

deletion

The

co

llection

of

data

required

for

the

availability

of

the

DataPortal

and

the

storage

of

the

data

in

log

files

is

mandatory

for

the

operation

of

the

DataPortal

.

Therefore,

the

user

does

not

have

the

option

to

reject

the

collection

of

relevant

data.

IV.

Cookie

policy

1.

Description

and

scope

of

data

processing

Our

DataPortal

uses

cookies.

Cookies

are

small

data

files

that

are

stored

on

your

computer

or

other

device

when

you

visit

a

website.

Once

a

user

visits

the

DataPortal

,

a

cookie

may

be

stored

on

the

user's

ope

rating

system.

This

cookie

contains

a

characteristic

string

of

characters

which

uniquely

identifies

the

browser

on

subsequent

visits

to

the

DataPortal

.

We

use

cookies

to

improve

our

DataPortal

and

enhance

user

experience.

Several

of

our

DataPortal

feature

s

require

visitor

browser

identification

with

each

new

page

to

navigate

around

our

DataPortal

.

We

require

cookies

and

local

browser

storage

for

the

following

applications:

(1)

Log

-

in

information

(2)

Language

settings

(3)

Track

your

searches

(4)

User

preferences

(5)

Theming

(6)

Timezone

(7)

Last

visited

page

on

DataPortal

2.

Legal

regulations

regarding

data

privacy

Article

6,

Section

1(f)

of

the

GDPR

regulates

the

processing

of

personal

data

regarding

cookies

.

4

/

9

3.

Purpose

of

processing

data

The

purpose

of

using

technically

essential

cookies

is

to

simplify

your

visit

to

our

DataPortal

.

Several

features

of

our

DataPortal

require

the

use

of

cookies.

It

is

essential

that

the

browser

is

recognized

even

in

the

event

of

navigating

to

a

new

page.

Use

r

data

collected

for

technically

essential

cookies

are

not

used

to

create

user

profiles.

These

intentions

serve

as

our

legitimate

interest

for

the

processing

of

personal

data

in

accordance

with

Article

6,

Section

1

(f)

of

the

GDPR.

4.

Data

Retention

,

restrict

ing

and

deleting

cookies

Cookies

are

stored

on

the

user's

computer

and

transmitted

to

our

DataPortal

.

Therefore,

you

as

a

user

have

full

control

regarding

the

use

of

cookies.

By

changing

the

settings

in

your

internet

browser,

you

can

deactivate

or

limit

the

placement

of

cookies.

Previously

stored

cookies

can

be

deleted

at

any

time.

This

can

also

be

performed

automatically.

In

the

event

cookies

are

deactivated

for

our

DataPortal

,

this

may

result

that

not

all

features

of

our

DataPortal

can

be

used

to

their

fu

ll

extent.

V.

Register/

Login

1.

Description

and

scope

of

data

processing

On

the

DataPortal

it

is

possible

to

log

in

by

entering

a

user

name

and

a

password.

The

registration

and

creation

of

the

user

data

is

carried

out

centrally

by

an

admin.

The

following

data

is

usually

stored

by

you

during

registration:

(1)

Name

(2)

F

irst

name

(3)

E

mail

(4)

O

rganization

(5)

L

anguage

(6)

DataPortal

permissions

An

activity

log

is

created

for

logged

-

in

users.

2.

Data

privacy

compliance

The

legal

basis

for

processing

the

data

is

the

fulfilment

of

a

contract

(or

pre

-

contractual

measures)

pursuant

to

Art.

6

(1)

lit.

b

DSGVO.

The

legal

basis

for

storing

additional

data,

such

as

activity

logging,

is

also

based

on

the

legitimate

interest

in

ensuring

t

he

integrity

of

the

DataPortal

pursuant

to

Art.

6

(1)

lit.

f

DSGVO.

The

legal

basis

for

the

processing

of

additional

voluntary

data

,

if

the

user

has

given

consent,

is

Art.

6

(1)

lit.

a

DSGVO.

3.

Purpose

of

data

processing

Registration

of

the

user

is

necessary

for

the

fulfilment

of

a

contract

with

the

user

or

for

the

implementation

of

pre

-

contractual

measures.

The

login

is

necessary

to

ensure

secure

access

to

the

data

in

the

DataPortal.

Furthermore,

the

user

-

specific

login

assigns

the

user

rights

within

the

DataPortal

and

allows

user

settings

to

be

saved.

4.

Data

Retention

The

data

shall

be

deleted

once

these

are

no

longer

required

for

their

intended

purpose.

5

/

9

This

is

the

case

for

the

data

stored

during

the

registration

process

for

the

fulfilment

of

a

contract

or

for

the

implementati

on

of

pre

-

contractual

measures

if

the

data

is

no

longer

required

for

the

implementation

of

the

contract.

Even

after

the

conclusion

of

the

contract,

there

may

be

a

need

to

store

personal

data

of

the

contractual

partner

in

order

to

fulfil

contractual

or

legal

obligations.

5.

Options

regarding

objection

s

and

deletion

You

can

have

the

data

stored

about

you

changed

at

any

time.

As

a

user,

you

have

the

option

to

cancel

your

registration

at

any

time.

However,

please

note

that

in

this

case,

the

telematics

services

may

no

longer

be

fully

usable.

The

end

user

must

send

a

request

to

delete

the

account

or

change

data

to

the

responsible

party

.

The

responsible

party

will

forward

the

requests

for

deletion

or

data

modification

to

Proemion

Technical

Support,

by

phone

or

via

the

support

form

posted

on

Proemion's

homepage.

If

the

data

is

required

for

the

fulfilment

of

a

contract

or

for

the

implementation

of

pre

-

contractual

measures,

early

deletion

of

the

data

is

only

possible

insofar

as

contractual

or

legal

obligations

do

not

prevent

deletion.

VI.

Rights

of

the

data

subject

In

the

event

your

personal

data

is

processed

by

us,

you

are

a

data

subject

as

defined

under

the

GDPR

and

you

are

entitled

to

the

following

rights

towards

the

responsible

party:

1.

The

right

to

access

of

information

You

may

request

confirmati

on

from

the

responsible

party

regarding

whether

personal

data

on

your

behalf

is

being

processed

by

him

.

In

the

event

of

such

processing,

you

may

request

the

following

information

from

the

responsible

party:

(1)

the

purpose

for

which

the

personal

data

are

being

processed;

(2)

the

categories

of

personally

identifying

information

being

processed;

(3)

the

recipients

or

categories

of

recipients

to

whom

the

personal

data

regarding

oneself

has

been

or

will

be

disclosed;

(4)

the

intended

duration

of

personal

data

storage

regarding

oneself

or,

in

the

event

specific

details

are

not

possible,

criteria

for

dete

rmining

the

retention

period;

(5)

the

right

to

exercise

the

rectification

or

erasure

of

personal

data

regarding

oneself,

a

right

to

limit

processing

by

the

responsible

party

and

a

right

to

object

to

such

processing;

(6)

the

right

of

appeal

with

a

supervis

ory

authority;

(7)

all

available

information

regarding

origin

of

the

data,

in

the

event

the

personally

identifiable

data

was

not

collected

from

the

data

subject;

(8)

the

existence

of

an

automated

data

processor,

including

profiling,

in

accordance

with

Arti

cle

22,

Section

1

and

4

of

the

GDPR

and,

at

least

in

these

events,

conclusive

information

regarding

the

logic

involved

as

well

as

the

scope

and

intended

consequences

of

such

processing

for

the

data

subject.

You

have

the

right

to

request

information

pertaining

to

whether

personal

data

concerning

you

is

being

disclosed

to

a

third

country

or

to

an

international

organization.

In

this

context,

you

may

request

to

be

informed

of

the

appropriate

safeguards

pursuant

to

Article

46

of

the

GDPR

as

it

relates

to

the

dis

closure

of

information

.

2.

The

right

to

rectification

6

/

9

You

have

a

right

to

rectification

and/or

completion

by

the

responsible

party

in

the

event

of

inaccurate

or

incomplete

processing

of

your

personal

data.

The

party

responsible

is

required

to

correct

the

data

without

delay.

3.

The

right

to

restrict

processing

You

may

request

the

restriction

of

personal

data

processing

regarding

yourself,

under

the

following

circumstances:

(1)

when

you

deny

the

accuracy

of

your

personally

identifying

data

for

a

time

period

in

which

the

responsible

party

is

able

to

verify

the

accuracy

of

the

personal

data;

(2)

processing

proves

to

be

unlawful

and

you

object

to

the

removal

of

the

personal

data

and

request

instead

the

restriction

of

personal

data

processing;

(3)

the

responsible

party

no

longer

requires

the

personal

data

for

the

purpose

of

processing,

but

you

need

them

for

the

establishment,

exercise

or

defence

of

legal

claims,

or

(4)

in

the

event

you

have

objected

to

the

processing

pursuant

to

Article

21,

Section

1

of

the

GDPR

and

it

h

as

not

yet

been

determined

whether

the

legitimate

grounds

of

the

responsible

party

override

your

interests.

In

the

event

the

processing

of

your

personal

data

has

been

restricted,

such

data

may,

with

the

exception

of

being

stored,

be

processed

only

with

you

r

consent

or

for

the

establishment,

exercise

or

defence

of

legal

claims

or

for

the

protection

of

the

rights

of

another

natural

or

legal

individual

or

for

reasons

of

substantial

public

interest

of

the

European

Union

or

a

member

state.

In

the

event

a

limitation

of

the

processing

restriction

has

been

imposed

in

accordance

with

the

above

circumstances,

you

will

be

informed

by

the

responsible

party

before

the

restriction

is

lifted.

4.

The

right

to

request

deletion

a)

Obligation

to

delete

You

may

request

the

responsible

party

to

delete

your

personal

data

without

unreasonable

delay,

and

the

responsible

party

is

obligated

to

delete

such

data

without

unreasonable

delay

in

the

event

one

of

the

following

reasons

apply:

(1)

Your

personal

data

is

no

longer

necessary

for

the

purpose

for

which

they

were

collected

or

otherwise

processed.

(2)

You

revoke

your

consent

for

which

the

processing

was

based

pursuant

to

Article

6,

Section

1(a)

or

Article

9,

Section

2(a)

of

the

GDPR

and

there

remains

no

other

legal

basis

for

the

processing

of

data.

(3)

You

object

to

the

processing

pursuant

to

Article

21,

Section

1

of

the

GDPR

and

there

remain

no

overriding

legitimate

grounds

for

the

processing,

or

you

object

to

the

processing

pursuant

to

Article

21,

Section

2

of

the

GDPR.

(4)

The

personal

data

regarding

your

information

have

been

processed

unlawfully.

(5)

The

removal

of

the

personal

data

concerning

you

is

required

for

compliance

with

a

legal

obligation

under

European

Union

or

member

state

law

to

which

the

responsible

party

is

subject.

(6)

Your

personal

data

has

been

collected

in

connection

with

a

Society

Information

Services

offer

pursuant

to

Article

8,

Section

1

of

the

GDPR.

b)

Information

provided

to

third

parties

7

/

9

In

the

event

the

responsible

party

has

made

your

personal

data

public

and

is

required

to

delete

it

pursuant

to

Article

17,

Section

1

of

the

GDPR,

the

responsible

party

shall

take

reasonable

steps,

including

technical

measures,

with

regard

to

available

technology

and

the

cost

of

implementation,

to

inform

those

data

controllers

which

process

the

personal

data

that

you,

as

the

data

subject,

have

reque

sted

that

they

erase

all

links

to

or

copies

or

replications

of

such

personal

data.

c)

Exceptions

The

right

to

deletion

does

not

exist

insofar

as

the

processing

is

required

(1)

to

exercise

the

right

to

freedom

of

expression

and

information;

(2)

to

comply

with

a

legal

obligation

which

requires

processing

under

European

Union

or

Member

State

law

to

which

the

responsible

party

is

subject,

or

for

the

performance

of

a

task

carried

out

in

the

interest

of

the

public

or

in

the

exercise

of

official

authority

vested

in

the

responsible

party;

(3)

for

reasons

of

public

interest

in

the

scope

of

public

health

in

accordance

with

Article

9,

Section

2(h)

and

(i)

and

Article

9,

Section

3

of

the

GDPR;

(4)

For

archival

purposes

in

the

public

interest,

scientific

or

historical

rese

arch

purposes,

or

statistical

purposes

pursuant

to

Article

89,

Section

1

of

the

GDPR,

insofar

as

the

right

referred

to

in

Part

(a)

is

likely

to

render

impossible

or

seriously

prejudice

the

achievement

of

the

purposes

of

such

processing,

or

(5)

for

the

enfo

rcement,

exercise

or

defence

of

legal

claims.

5.

The

right

to

be

informed

In

the

event

you

have

exercised

the

right

to

rectification,

deletion

or

restriction

of

processing

towards

the

responsible

par

ty,

the

responsible

party

is

obligated

to

communicate

this

rectification

or

deletion

of

data

to

all

recipients

to

whom

the

personal

data

in

your

regards

have

been

disclosed,

unless

this

proves

impossible

or

involves

a

disproportionate

effort.

You

have

the

right

to

be

informed

in

regards

to

these

r

ecipients

by

the

responsible

party.

6.

The

right

to

transferable

data

You

have

the

right

to

receive

the

personal

data

which

you

have

provided

to

the

responsible

party

in

a

structured,

common

and

machine

-

readable

format.

In

addition,

you

have

the

right

to

tra

nsmit

this

data

to

another

responsible

party

without

hindrance

from

the

responsible

party

to

whom

the

personal

data

was

supplied,

provided

that

(1)

the

processing

is

based

on

consent

pursuant

to

Article

6,

Section

1(a)

of

the

GDPR

or

Article

9,

Section

(a)

of

the

GDPR

or

on

a

contract

drawn

pursuant

to

Article

6,

Section

1(b)

of

the

GDPR

and

(2)

the

processing

is

carried

out

with

the

help

of

automated

procedures.

In

exercising

this

right,

you

also

have

the

right

to

obtain

those

personal

data

concerning

you,

which

get

transferred

directly

from

one

responsible

party

to

another

responsible

party,

insofar

as

this

is

technically

feasible.

Freedom

and

rights

of

other

individuals

must

not

be

affected

by

this.

The

right

to

data

portability

does

not

apply

to

processing

of

personal

data

required

for

the

performance

of

a

task

carried

out

in

the

public

interest

or

in

the

exercise

of

official

authority

vested

in

the

responsible

party.

7.

Right

to

object

8

/

9

You

have

the

right

to

object

at

any

time,

on

grounds

relating

to

your

particular

situation,

to

the

processing

of

personal

data

relating

to

you

which

is

carried

out

on

the

basis

of

Article

6,

Section

1(e)

or

(f)

of

the

GDPR;

this

also

applies

to

profili

ng

based

on

these

provisions.

The

responsible

party

shall

no

longer

process

the

personal

data

concerning

you

unless

it

can

demonstrate

compelling

legitimate

grounds

regarding

the

processing

which

override

your

interests,

rights

and

freedom,

or

for

the

establishment,

exercise

or

defence

of

legal

claims.

You

have

the

option,

in

reg

ard

to

the

use

of

Information

Society

Services,

irrespective

of

Directive

2002/58/EC,

to

exercise

your

right

to

object

by

means

of

automated

procedures

using

technical

specifications.

8.

Right

to

revoke

ones'

consent

to

the

privacy

policy

You

have

the

right

to

revoke

your

consent

under

data

protection

law

at

any

time.

The

revocation

of

consent

does

not

affect

the

lawfulness

of

the

processing

carried

out

on

the

basis

of

the

consent

until

it

is

revoked.

You

may

send

the

revocation

eit

her

by

mail,

email

or

fax

t

o

the

responsible

party.

9.

Automated

decision

regarding

individual

cases,

including

profiling

You

have

the

right

not

to

be

subject

to

a

decision

based

solely

on

automated

processing

-

including

profiling

-

which

poses

legal

ramifications

for

you

or

any

similarly

significant

manner

of

impact

on

you.

This

does

not

apply

in

the

event

the

decision

(1)

is

required

for

the

conclusion

or

performance

of

a

contract

between

you

and

the

responsible

party,

(2)

is

permitted

by

legislation

of

the

European

Union

or

the

Member

States

to

which

the

responsible

party

is

subject

and

that

legislation

maintains

appropriate

measures

to

safeguard

your

rights

and

freedom

and

your

legitimate

interests,

or

(3)

is

done

with

your

express

consent.

However,

these

decisions

may

not

be

b

ased

on

specific

categories

of

personal

data

pursuant

to

Article

9,

Section

1

of

the

GDPR,

unless

Article

9,

Section

2(a)

or

(g)

of

the

GDPR

applies

and

appropriate

measures

have

been

taken

to

protect

the

rights

and

freedom

and

your

legitimate

interests.

With

regard

to

the

cases

referred

to

in

(1)

and

(3),

the

responsible

party

shall

take

reasonable

steps

to

safeguard

the

right

s

and

freedom

of,

and

the

legitimate

interests

of

the

data

subject,

which

shall

include,

at

least,

the

right

to

obtain

t

he

intervention

of

an

individual

on

the

part

of

the

responsible

party,

to

express

his

or

her

point

of

view

and

to

challenge

the

decision.

10.

Right

to

file

a

complaint

with

a

regulatory

authority

Without

affecting

any

other

administrative

or

judicial

remedy,

y

ou

have

the

right

to

file

a

complaint

with

a

supervisory

authority,

in

particular

in

the

Member

State

of

your

residence,

place

of

work

or

the

place

of

the

alleged

infringement,

in

th

e

event

you

consider

the

processing

of

personal

data

relating

to

you

infringes

the

GDPR.

The

supervisory

authority

to

which

the

complaint

has

been

submitted

shall

inform

the

plaintiff

of

the

status

and

outcome

of

the

filed

complaint,

including

the

option

of

a

judicial

appeal

pursuant

to

Article

78

of

the

GDPR.

VII.

SSL

encryption

Th

is

site

uses

SSL

encryption

for

security

purposes

and

to

protect

the

disclosure

of

confidential

content,

such

as

the

inquirie

s

you

send

to

us

as

site

operator.

You

will

recognize

an

encrypted

connection

by

the

fact

that

the

browser

address

bar

changes

from

"http://"

to

"https://"

and

by

the

lock

symbol

in

your

browser

tool

bar.

9

/

9

In

the

event

SSL

encryption

is

activated,

the

data

you

disclose

to

us

cannot

be

read

by

third

parties.

VIII.

Subcontracting

-

i

nformation

o

n

the

s

ubprocessors

used

by

the

provider

of

the

DataPortal

The

DataPortal

uses

services

of

several

sub

processors

,

which

are

carefully

selected

and

used

by

the

provider

of

the

DataPortal.

In

order

to

ensure

a

continuously

updated

overview

of

the

services

and

subcontractors

u

sed,

the

operator

of

the

DataPortal

provides

an

up

-

to

-

date

overview

with

the

required

information

on

the

sub

processors

used

available

at

the

following

link

https://dataportal.proemion.com/#!/subprocessors

.

This

overview

will

be

updated

regularly

if

the

use

of

the

services

changes.