Buildom Screenshots Team Discord Play Menu  EN  EN DE

Privacy Policy

The protection of your personal data is very important to us. In the following Privacy Policy, we will give you an overview of the type, scope, purpose and duration of the processing of your data by us.

Scope?

The information contained in this Privacy Policy applies to our services offered on and the online game (“Game”) playable at https://www.buildom.de and the associated sub-pages (hereinafter jointly referred to as “Online Service” or “ Service”).

Why do we process data?

We will only process data as far as this is necessary for the functional provision of our Online Service and associated contents and offers, or if this is required by contractual or statutory provisions. In addition, we process data insofar as we have a legitimate interest in doing so or you have given us explicit consent for.

We process the data as follows:

Are we allowed to process data?

If there is no legal permission for such processing (e.g. for the purpose of performance of a contract or due to legitimate interests), this will only take place on the basis of your explicit consent, which can be revoked at any time with effect for the future.

How long do we keep your data?

We only store the data for as long as it is necessary for the purpose for which it was collected, unless there are further legal or contractual retention obligations. If a change of purpose occurs during the processing of the data which requires longer periods of storage, you will be informed about the change of purpose and its legal basis separately - to the extent provided for by law. Your rights to demand deletion of your data, if applicable, remain unaffected by this.

What rights do you have?

In this Policy we will also inform you about your individual rights regarding our processing of data, e.g. your right to information and how you can revoke your given consent and object to the processing without your consent.

The terms used in this Privacy Policy such as “personal data”, “processing”, “restriction of processing”, “profiling”, “processor” or “data controller” shall have the same meaning as defined in Art. 4 of the General Data Protection Regulation (EU) (hereinafter: “GDPR”).

Content

I. General Information on data processing

1. Data controller

The publisher of this Privacy Policy and the body responsible for the data processing (“Controller”) in connection with the use of our Online Service and the Game is:

Martin Kleinhans
Prälat-Michael-Höck-Strasse 15
85354 Freising
E-mail: info@buildom.de

2. Data protection officer

We are not subject to any obligation to appoint a data protection officer. For all inquiries or assertion of rights in connection with the data processing, we ask you to contact us using the contact details provided above.

3. Categories of data subjects

This Privacy Policy provides a complete overview of the type, purpose and scope of any data processing related to our Online Service. Which of these processing activities are actually carried out depends, for example, on whether you only visit our Online Service or use the functions and services offered on it. The processing activity described here may therefore affect you as a visitor or User of our Online Service (hereinafter jointly referred to as “User”).

As far as our Online Service gives other Users the opportunity to publish contents containing data about you or to transmit such contents to us or third parties, you may also be affected by the data processing. The same applies in cases in which our Online Service is linked to external data sources about you or data about you is transmitted to us by partner companies. You may therefore also be affected by the data processing described here if you were neither a visitor nor a User of our online service (hereinafter: “other data subjects”). Insofar as this is prescribed by law, we will separately inform other affected parties about the data processing, stating the origin of the data.

4. Sources and types of data

We process data which we have received from you within the scope and to the extent of your visit, the use of our Online Service (e.g. at your request, to initiate) and/or the conduct of business relations. In addition, in connection with the provision of our services, we process data about you which we legally received from other Users, other third parties or from publicly accessible sources (e.g. the Internet) or data which we have legitimately obtained, for example to prevent and investigate attacks on our IT systems, misuse and fraud cases, to execute orders and perform contracts including delivery and payment or on the basis of your consent.

Such data includes:

5. Lawful basis for processing your data

We process the data primarily on the basis of a legal permission, without prejudice to any supplementary consent you may give.

If the intended processing cannot be carried out on the basis of a legal permission, we will obtain your express consent.

The legal basis for the processing of the aforementioned data is in accordance with the provisions of the GDPR and the German Federal Data Protection Act (BDSG).

If you have given us your consent to process data for specific purposes (e.g. sending a newsletter), your consent is the legal basis for the processing activity. Further details on the purpose and scope of the processing activities can be found in the detailed explanations in this Privacy Policy as well as in the additional information provided upon obtaining your consent.

You can revoke your consent at any time. The revocation of your consent does not affect the legality of the processing that has been carried out until the moment of revocation. Further information can be found under III of this Policy.

b. Fulfillment of (pre-) contractual obligations (Article 6 (1) (b) of the GDPR)

If the processing is necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures taken at your request, the lawfulness of the processing shall be based on Article 6 (1) (b) of the GDPR.

Further details on the purpose and scope of data processing can be found in the detailed explanations in this Privacy Policy as well as in the contract documents and terms and conditions presented when the contract is initiated and concluded.

c. Fulfillment of a legal obligation (Article 6 (1) (c) of the GDPR)

We are subject to various legal obligations which require the collection and processing of data or have effects on the extent and duration of the storage of data (e.g. tax regulations, money laundering act).

d. Legitimate Interest (Article 6 (1) (f) of the GDPR)

If necessary, we also process your data on the base of our legitimate interests or the legitimate interests of a third party. This only applies if your interests or fundamental rights, which require the protection of personal data, do not prevail.

Such an interest on our part is assumed in the following cases:

Please see IV of this Policy for your right of objection.

6. Children / Age verification

Our Online Service is not aimed at persons under the age of 16. In order to avoid the use of our Online Service by such persons, we reserve the right to collect the date of birth of the User. The data is collected on the basis of Art. 6 (1)(3) of the GDPR in fulfilment of our obligations under the Youth Protection Act.

The age information is only stored until after verification of the age. Please note that age data can also be processed for other reasons and may then be subject to a longer storage period. Please refer to this Privacy Policy for corresponding information.

7. Storage duration and data erasure

Under the precondition of their legality, the data will be processed and stored as long as it is necessary for the purposes stated in this Policy to fulfil our contractual and legal obligations or you have expressly consented to. Your rights from III and IV of this Policy remain unaffected.

Deletion of data or restriction of the processing activity is therefore carried out regularly as soon as the purpose of processing is achieved and the data is not required anymore. We process data longer than absolutely necessary for their contractual purpose - for a limited period - for the following purposes:

With regard to the abovementioned time limits, please note that the time of actual deletion or restriction of processing may be postponed due to different regulations regarding the beginning of these time limits.

Since different constellations regarding the storage obligations and the beginning and/or ending may exist, exact information on the storage period and data erasure can only be granted on request in individual cases. In this respect, we refer to your rights to information described under III of this Policy.

8. Obligation to provide data

When collecting the data, we expressly give notice to you if certain data is required for the use of our Services or for the conclusion of a contract or if provision is required by law or contract.

If you refuse to provide such mandatory data, you may not be able to fully access our Services or conclude a contract with us. You will not suffer any other disadvantages as a result of not providing the data.

9. Categories of recipients of your personal data

Within our organization, only those who are required to access your data for the purpose of fulfilling our contractual and legal obligations as well as other purposes pursued with the data processing and specified in this Privacy Policy will have access to your data. The same applies in the event that we carry out the processing activities together with another data controller. In such a case, we will inform you of the third-party controller separately in connection with the collection of the data.

In addition, external service providers and vicarious agents we use to provide certain services may also receive data for the purposes described herein, insofar as they are subject to professional secrecy, maintain the confidentiality of your data and comply with our written data protection instructions. Such transfer takes place exclusively on the basis of the legal bases stated in this Privacy Policy (e.g. to fulfil contractual or legal obligations) or to protect our legitimate interests, which includes but is not limited to our interest to outsource processing activities required for our Online Service to appropriate experts.

We may contract third parties to provide services for us and process data on our behalf. Such parties have been reviewed and are deemed suitable by us before we use their services. They are contractually obliged to guarantee the compliance with our confidentiality obligations concerning you and the compliance with the requirements of the GDPR as well as the BDSG. The legal basis for the transfer of data to contract processors in each case is the legal basis stated in this Privacy Policy.

A transfer of your data to other third parties or for other purposes than those listed above will only take place if:

10. Transfer of data to a third country or to an international organization

We only transfer data to countries outside the EU, the EEA or Switzerland (so-called third countries) if this is necessary or legally required for the fulfilment of your orders (e.g. processing of an order from abroad and delivery there).

In addition, a transfer of personal data to a third country or to an international organization can take place if you have given us your consent to do so or if the data is transferred to a data processor. We will only use commissioned processors in a third country for which there is no valid adequacy decision if, in addition to our written instructions, there are suitable guarantees of data transfer pursuant to Art. 46 of the GDPR and on condition that enforceable rights and effective legal remedies are available for individuals. This can be done, for example, by agreeing on the EU standard contractual clauses for compliance with the EU data protection level.

Our Online Service may contain references to services of third-party internet pages (external links).

The mere inclusion of these external links in our website does not provide the third-party provider with information about you when you visit our website. Only when you click on the external links you will be redirected to websites and offers to which our Privacy Policy does not apply. The processing of data by the third-party provider may already occur when you simply open the external link. You can find information about the respective level of data protection in the privacy statement of the person/organization responsible for that website.

If you wish to avoid data processing by the sites connected to the external links, please do not use them. Depending on the device and browser you are using, you can usually display the target URL of a link, even without opening the link (e.g. by right-clicking and selecting further information).

12. Special categories of data (Sensitive Data)

The processing and transfer of special categories of data by us - in accordance with Art. 9 of the GDPR - generally only takes place with your express consent. Otherwise, we will only process such data if we can rely on one of the legal permissions specified in this Privacy Policy and one of the exceptional cases stipulated in Art. 9 of the GDPR applies (in particular if you have obviously made this data public or if the processing is necessary to assert, exercise or defend legal claims).

II. Data Processing in Detail

1. Provision of the Online Service and creation of log files

Type and scope of data processing

When you access our website, we automatically process data about you. These are the following data:

This data is stored in a log file of our system.

When using individual services of our Online Service, an error log can also be created by a processor commissioned by us. Please refer to our information on Sentry below for more details.

Purpose of data processing

We do not process these data - including their storage and statistical evaluation - together with other personal data of the User but use them exclusively to the extent necessary:

The legal basis for the above processing, temporary storage and statistical evaluation of the data is Art. 6(1)(f) of the GDPR. Our legitimate interest in data processing results from the aforementioned purposes.

Duration of storage

The data are usually deleted within 7 days after your visit to our Online Service. The storage period is necessary for the aforementioned security concerns (e.g. for the clarification of cyber-attacks, fraud or abuse cases). A longer storage takes place only if we are legally obliged to do so. Individual data may also be stored for a longer period of time if this is necessary for troubleshooting, clarification or for evidence in the event of a hacker attack or misuse of our Online Service.

Statistical reports aggregated from the data are stored for up to 3 years. These reports are anonymous and can no longer be associated with any natural person.

Possibility of objection; Your rights

For more information on your right to object to the above processing of data and to your other rights in relation to data processing, please refer to III and IV of this Policy.

2. Use of cookies

Type and scope of data processing

Our Online Service uses cookies. These are small text files that your browser or another program that you use to access our Online Service. Cookies are stored on your computer or mobile device.

Such cookies contain characteristic strings which allow the browser to be uniquely identified during the use of our Online Service and, if necessary, when our Online Service is accessed again.

In addition, cookies may contain information that is required to provide our services or to provide you with a more personalized and convenient User experience. Information that enables us to analyze your behavior on our website may also be stored in cookies.

Unless stated otherwise in this Privacy Policy, the following information is stored in the cookies we use:

The above information will not be processed by us together with other data about you. As far as possible, the data will also be anonymized, or at least pseudonymized, so that it cannot be associated with the accessing User. These data will not be passed on to third parties.

We will only use cookies that would allow us or, outside of our Online Service, third parties to track your behavior on the Internet or those that serve to create cross-site user profiles, if you have expressly consented to their use in advance. You will be informed separately about such use in this Policy.

Purpose of data processing

The purpose of using technically necessary cookies is to be able to deliver our Online Service to you or to make it more user-friendly. Some elements of our Online Service require that the accessing browser can still be identified even after a page change, as otherwise our offer cannot be used or cannot be used reasonably.

We use analysis cookies to ensure and improve the quality of our Online Service and their content. Through statistical analysis of the pseudonymized data obtained in this way, we learn more about how our online service is used. In addition, this data is also used for troubleshooting and to avert dangers in the event of attacks on our IT systems, misuse or fraud.

The legal basis for the use of technically necessary cookies is Art. 6(1)(f) of the GDPR. Our legitimate interest in data processing also results from the aforementioned purposes.

Any processing beyond this, in particular in the form of cross-site tracking cookies, other cookies for advertising and analysis purposes, will only take place if this is separately pointed out in this Privacy Policy and exclusively on the basis of consent obtained from you prior to processing in accordance with Art. 6(1)(a) of the GDPR.

Duration of storage

Cookies are stored on the User’s computer and transmitted to our site by the User. Therefore, you as a User have full control over the use and storage duration of cookies.

Temporary cookies are automatically deleted when you leave our website and close your browser. Persistent cookies remain stored on your end device even after you leave our online service and close your browser. They can be read again by the website when you use our online service again.

You can prevent or restrict temporary or persistent cookies from being stored on your end device by making the appropriate settings in the program with which you access our Online Service (e.g. browser, etc.). You can also delete cookies that have already been saved at any time by using the corresponding delete function on your browser. Please note that not all functions of our Online Service may be available in this case or any data stored in the cookies or logins may have to be re-entered when using our Online Service again.

Possibility of objection; your rights

For further information on your right to object to the above processing of data and on your other rights in connection with data processing, please see III and IV of this Policy.

3. Registration / User account / Free account / E-mail

Type and scope of data processing

On our website you have the possibility to register as a User by providing certain data. Through an input mask you can submit corresponding data, which will then be transmitted to us at your request and stored by us.

Please refer to the respective input mask to learn which data is concerned and which of these data is mandatory for the respective purpose of registration. In any case, your e-mail address, your password and a player name (nickname) are freely selectable and must be provided, in compliance with our security rules.

Upon your registration, the following technical access data are also stored:

Purpose of data processing

Your voluntary registration enables you to use the free version of our online game. We need your e-mail address to send you an activation code to activate your account, as well as for notifications and communication in connection with your use of our Online Service and for security-relevant notifications, such as password recovery.

Your nickname is used to identify your account in the game and to associate the matches you play with your account, for example in statistics or replays. The nickname is published after your registration and can be viewed by other players in order to communicate with you as part of the game, play games against each other as well as to locate and publish your account in player rankings and other game-related statistics.

Please also refer to the information provided during the registration process for each purpose of registration.

The collection of the data serves to fulfil a contract (user account) to which you are a party or is necessary for the implementation of pre-contractual measures, which are taken at your request, so that the legal basis for the processing of the data is Art. 6(1)(b) of the GDPR.

The technical access data collected upon your registration will be processed on the basis of Art. 6(1)(f) of the GDPR for troubleshooting, prevention and investigation of attacks on our IT systems and cases of misuse and fraud.

Any further processing of the data may take place after your express consent in accordance with Art. 6(1)(a) of the GDPR; the processing purposes will then be explained to you in connection with the consent.

Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.

This is usually the case if the registration on our Online Service is cancelled or modified. A longer storage takes place only if our legitimate interest in a longer storage outweighs your interest in the deletion and/or we are legally obliged to do so.

If the registration process was carried out to fulfil a contract or to implement pre-contractual measures, we store the data as long as this is necessary for the performance of the contract. It may also be necessary to store changes to the data records in order to maintain a corresponding history and thus meet legal requirements or to prevent or clarify cases of misuse and fraud. Even after the conclusion of the contract, it may be necessary to process your data in order to comply with contractual or legal obligations or in connection with the assertion of legal claims.

Possibility of revocation and objection; your rights

For further information on your right to revoke any consent you have given at any time with effect for the future or to object to the above processing of data and on your other rights in connection with data processing, please refer to III and IV of this Policy.

4. Google Sign in / Facebook Connect

Instead of a direct registration on our website, you can also register with Facebook Connect or Google Sign in. These services are provided by Facebook Ireland Limited (“Facebook”), located at 4 Grand Canal Square, Dublin 2, Ireland or Google Ireland Limited (“Google”), located at Gordon House, Barrow Street, Dublin 4, Ireland (collectively the “Provider”).

If you choose to register in this manner, you must consent to the data processing activity set out below on our website and will be automatically directed to the relevant Facebook or Google platform by clicking on the “Facebook” or “Google” buttons.

There you can log in with your login information. This links your profile with the respective provider to our website or services. This link enables us to access certain data stored by you with the respective provider. For your protection, we have limited the transmission of data to the minimum necessary for the purpose of your registration / login as well as to the minimum technically possible with the respective provider.

Via Facebook: ID, name, profile picture, e-mail address.
Via Google: ID, name, profile picture, e-mail address, language preference.

The providers do not receive any data from us. By registering on our website, however, the providers implicitly gain knowledge of your use of our Online Service. The extent to which this circumstance is stored and processed by the providers is beyond our knowledge. For further information on this and other data processing on the platform of the providers, please refer to the Privacy Policy of the respective provider.

When you register, the following technical access data will also be stored:

After a registration through these providers, you must also choose a nickname, which is stored to your account. If you have not approved your e-mail address for transmission via your profile with the provider, you must also enter your e-mail address on our site to be able to complete the registration process.

Purpose of data processing

Your registration via the providers and the transmitted ID serves to enable you to use the free version of our game online game. The purpose of providing your e-mail address is to enable us to send you the terms and conditions of use and other contract-relevant documents on a durable medium in accordance with legal requirements.

Your nickname is used to identify your account in our game and to associate matches that have been played with your account, for example in statistics or replays. The nickname will be published after your registration and can be viewed by other players in order to be able to communicate with you over the course of the game, to play games against each other and to locate and publish your account in the ranking of players and other game-related statistics. Please also refer to the information provided during the registration process for each purpose of registration.

The linking of your profile with the respective provider to our service is based on your express consent pursuant to Art. 6 (1)(a) of the GDPR, unless otherwise stated below. Your consent will be stored by us, including the ID of your account with the provider, the circumstance of your consent and the date of consent.

The collection of the ID, your name, the e-mail address and the nickname serve to fulfil a contract (user account) to which you are a contracting party or are necessary for the implementation of pre-contractual measures, which take place at your request. The legal basis for the processing of the data is Art. 6 (1)(b) of the GDPR.

The technical access data collected during your registration will be processed on the basis of Art. 6 (1)(f) of the GDPR for troubleshooting, prevention and investigation of attacks on our IT systems and cases of misuse and fraud.

Your consent to data processing will be stored on the basis of Art. 6 (1)(c) of the GDPR, as we are now legally obliged to do so.

Any further processing of this data may be carried out after your express consent in accordance with Art. 6 (1)(a) of the GDPR; the processing purposes will then be explained to you in connection with the consent.

Duration of storage

The data transmitted to us by the providers will be used to set up and provide your account, whereby we only store the ID and your e-mail address for later purposes of access to our Online Service and delete the remaining data transmitted to us by the respective provider, immediately after your registration.

The remaining data collected by us will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.

This is usually the case if the registration on our Online Service is cancelled or modified. A longer storage takes place only if we are legally obliged to do so.

If the registration process has taken place to fulfil a contract or to implement pre-contractual measures, we store the data as long as this is necessary for the implementation of the contract. In this context, it may also be necessary to store changes to the data records in order to maintain a corresponding history and thus meet legal requirements or to prevent or clarify cases of misuse and fraud. Even after the conclusion of the contract, it may be necessary to store your data in order to comply with contractual or legal obligations or in connection with the assertion of legal claims.

Possibility of revocation and objection; your rights

For further information on your right to revoke any consent you have given at any time with effect for the future or to object to the above processing of data and on your other rights in connection with data processing, please refer to III and IV of this Privacy Policy.

5. Paid Services

Type and scope of data processing

Some functions of our Online Service are only accessible after the purchase of a paid activation. This activation cannot be obtained from us, but from external providers such as Paddle.

On our Online Service we link to these providers. Our Privacy Policy does not apply to the pages of these external providers: they are responsible for their own data processing. Please note their Privacy Policies.

If you visit the website of the external provider from our Online Service, the external provider receives your e-mail address, a pseudonymized User ID, which is assigned to your account with us, as well as a product ID, which is assigned to our Online Service.

The data that you have to provide to the external provider in order to carry out the purchase can be found in the information provided there. We do not receive any insight into the data you entered there, but only a notification about the purchase, which contains your e-mail address and in pseudonymized form, your User ID, the product ID and an order ID, which serves as proof that you have purchased an activation so that we can activate the chargeable areas for you. In addition, we receive billing data that includes the price paid.

Purpose of data processing

The above data is processed exclusively in order to be able to provide you with chargeable services on our Online Service and to settle accounts with the external provider.

The data exchanged between us and the provider are, except for the e-mail address, pseudonymized and are limited to the absolute minimum of the data collected by those responsible.

Legal basis for data processing The processing serves the fulfilment of a contract to which you are a party to or is required for the implementation of pre-contractual measures which are carried out at your request. The legal basis for the processing of the data is Art. 6(1)(b) of the GDPR.

Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. A longer storage is possible if our legitimate interest in the storage outweighs your interest in the deletion (Art. 6(1)(f) of the GDPR), for the fulfillment of legal storage obligations or for the purpose of prosecution as well as for the prevention / investigation of fraud and misuse cases.

Possibility of revocation and objection; your rights

For further information on your right to revoke any consent you have given at any time with effect for the future or to object to the above processing of data and on your other rights in connection with data processing, please refer to III and IV of this Privacy Policy.

6. Chat function / Discord

The Users of our Online Service can conduct game-related conversations on the Internet via the chat platform Discord. Our Online Service links to the chat platform. Please note that our Privacy Policy does not apply to the Discord chat platform. The sole responsible operator of the chat platform is Discord, Inc. You can use the service there under the conditions stated there. You can find Discord’s Privacy Policy at https://discordapp.com/privacy.

7. Error logs / sentry

Type and scope of data processing

We use software from Functional Software, Inc. dba Sentry, located at 132 Hawthorne Street, San Francisco, CA 94107 (“Sentry”) to log and evaluate errors in our Online Service. During the use of our game, the following data records will be stored locally by you and will only be transmitted to Sentry and processed on our behalf in the event of an error:

Purpose of data processing

The data transmission and processing are solely used to identify and correct program errors within the online game.

The transmission of your data to Sentry is based on Art. 6(1)(b) of the GDPR, as the troubleshooting serves on the one hand to fulfil our contractual relationship with you and and the other hand to guarantee the error-free provision of our services to you.

Processing by Sentry is based on our instructions. The data processing in a third country is based on the standard data protection clauses according to Art. 46(2)(c) of the GDPR.

Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.

This is usually the case within 90 days if no error has occurred.

Possibility of objection; your rights

For further information on your right to object to the above processing of data and on your other rights in connection with data processing, please see III and IV of this Policy.

8. YouTube Videos

Our websites includes links to videos from YouTube. These are videos that can be accessed in a separate window (hereinafter “YouTube videos”).

The YouTube site is operated by Google Ireland Limited, located at Gordon House, Barrow Street, Dublin 4 Ireland (Google). All rights to the website, the corresponding logos and the name are owned by Google.

We have integrated the YouTube videos in such a way that they are only activated when you click on them, in order to avoid transmission of data to Google without your consent when you visit our site. You can play YouTube videos at any time by clicking on them. Only then your browser establishes a direct connection to the YouTube servers. Attention: after clicking on the YouTube video, data can already be transferred to Google, even without you actually watching the video. Google can then possibly identify you, especially if you are logged into your YouTube account at the time the YouTube video is being played. In that case, we will no longer have any influence on this data transmission and further processing.

For further information on data collection by Google and its processing and use of your data and related rights, please refer to Google’s Privacy Policy (https://policies.google.com/privacy/update?hl=de).

The use of YouTube videos by us and the related data processing is based on the aforementioned purposes on Art. 6 (1)(a) of the GDPR.

For further information on your right to object to the aforementioned processing of data and on your other rights in connection with data processing, please see III and IV of this Policy.

III. Your rights

If we process personal data about you, you as a data subject within the framework of the GDPR have the following rights against us as the Controller. In order to exercise your rights, you can contact us under the contact information mentioned above.

1. Right to information

You have a right to information in accordance with Art. 15 of the GDPR. The right to information first covers the question of whether we process your personal data. If this is the case, you can request detailed information on the data, its processing and your other rights to the extent regulated by law. However, restrictions on your right to information may result from §§ 27 and 34 of the German Federal Data Protection Act (BDSG).

2. Right to correction

If your data processed by us is incorrect or incomplete, you have the right to correction and/or completion in accordance with Art. 16 of the GDPR. We must carry out the correction immediately after your request. Restrictions of your right of correction may, however, result from § 27 of the BDSG.

3. Right to erasure of personal data or to restriction of processing

Under the conditions of Art. 17 and 18 of the GDPR, you may request the immediate erasure of the data concerning you or at least the restriction of the processing of the data. However, these rights may be restricted by §§ 27 and 35 of the BDSG.

4. Right to information

If you are entitled to a claim for correction, erasure or restriction of the processing against us, we are obliged to inform all recipients to whom the data have been disclosed of this correction or erasure of the data or restriction of the processing, unless this proves to be impossible or involves a disproportionate effort. Upon request, we will inform you of these recipients in such a case.

5. Right to data portability

You have a right to data portability under the conditions of Art. 20 of the GDPR to the extent specified therein. This includes in particular the provision of the data by us in a structured, common and machine-readable format for further use by you.

According to Art. 7(3) of the GDPR and § 51 of the BDSG, you have the right to revoke your data protection consent at any time with effect for the future. The revocation of your consent does not affect the legality of the processing carried out on the basis of your consent until you revoke it.

7. Automated decision-making in individual cases including profiling

Under the conditions of Art. 22 of the GDPR, you have the right not to be subject to a decision based exclusively on automated processing - including profiling - which has legal effect on you or significantly affects you in a similar manner.

Such procedures are not applied by us.

8. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the GDPR. A list of the supervisory authorities (for non-public data controllers) and their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 of the GDPR.

IV. Your right to object

Right to object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data pursuant to Art. 6(1)(e) of the GDPR (data processing in the public interest) or Art. 6(1)(f) of the GDPR (data processing based on a balancing of interests); this also applies to profiling based on these provisions.

We will then no longer process the data concerning you unless we can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

V. Questions and comments

Thank you for your time and for reading our Privacy Policy. If you have any questions, concerns or remarks about data privacy, please contact the Controller directly.

This document was last updated on November 07, 2020


© 2020 Martin Kleinhans Imprint Terms & Conditions Privacy Policy