We are very delighted that you have shown interest in our Arbeitsgemeinschaft 300 Jahre Johann Bergl. Data protection is of a particularly high priority for the management of the Arbeitsgemeinschaft 300 Jahre Johann Bergl. The use of the Internet pages of the Arbeitsgemeinschaft 300 Jahre Johann Bergl is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.<\/p>\n\n\n\n
The processing of personal data, such as the name, address,\ne-mail address, or telephone number of a data subject shall always be in line\nwith the General Data Protection Regulation (GDPR), and in accordance with the\ncountry-specific data protection regulations applicable to the Arbeitsgemeinschaft\n300 Jahre Johann Bergl. By means of this data protection declaration, our\nenterprise would like to inform the general public of the nature, scope, and\npurpose of the personal data we collect, use and process. Furthermore, data\nsubjects are informed, by means of this data protection declaration, of the\nrights to which they are entitled.<\/p>\n\n\n\n
As the controller, the Arbeitsgemeinschaft 300 Jahre Johann\nBergl has implemented numerous technical and organizational measures to ensure\nthe most complete protection of personal data processed through this website.\nHowever, Internet-based data transmissions may in principle have security gaps,\nso absolute protection may not be guaranteed. For this reason, every data\nsubject is free to transfer personal data to us via alternative means, e.g. by\ntelephone.<\/p>\n\n\n\n
1. Definitions<\/p>\n\n\n\n
The data protection declaration of the Arbeitsgemeinschaft\n300 Jahre Johann Bergl is based on the terms used by the European legislator\nfor the adoption of the General Data Protection Regulation (GDPR). Our data\nprotection declaration should be legible and understandable for the general\npublic, as well as our customers and business partners. To ensure this, we\nwould like to first explain the terminology used.<\/p>\n\n\n\n
In this data protection declaration, we use, inter alia, the\nfollowing terms:<\/p>\n\n\n\n
a) Personal data<\/p>\n\n\n\n
Personal data means any information relating to an\nidentified or identifiable natural person (\u201cdata subject\u201d). An identifiable natural\nperson is one who can be identified, directly or indirectly, in particular by\nreference to an identifier such as a name, an identification number, location\ndata, an online identifier or to one or more factors specific to the physical,\nphysiological, genetic, mental, economic, cultural or social identity of that\nnatural person.<\/p>\n\n\n\n
b) Data subject<\/p>\n\n\n\n
Data subject is any identified or identifiable natural\nperson, whose personal data is processed by the controller responsible for the\nprocessing.<\/p>\n\n\n\n
c) Processing<\/p>\n\n\n\n
Processing is any operation or set of operations which is\nperformed on personal data or on sets of personal data, whether or not by\nautomated means, such as collection, recording, organisation, structuring,\nstorage, adaptation or alteration, retrieval, consultation, use, disclosure by\ntransmission, dissemination or otherwise making available, alignment or\ncombination, restriction, erasure or destruction.<\/p>\n\n\n\n
d) Restriction of processing<\/p>\n\n\n\n
Restriction of processing is the marking of stored personal\ndata with the aim of limiting their processing in the future.<\/p>\n\n\n\n
e) Profiling<\/p>\n\n\n\n
Profiling means any form of automated processing of personal\ndata consisting of the use of personal data to evaluate certain personal\naspects relating to a natural person, in particular to analyse or predict\naspects concerning that natural person\u2019s performance at work, economic\nsituation, health, personal preferences, interests, reliability, behaviour,\nlocation or movements.<\/p>\n\n\n\n
f) Pseudonymisation<\/p>\n\n\n\n
Pseudonymisation is the processing of personal data in such\na manner that the personal data can no longer be attributed to a specific data\nsubject without the use of additional information, provided that such\nadditional information is kept separately and is subject to technical and\norganisational measures to ensure that the personal data are not attributed to\nan identified or identifiable natural person.<\/p>\n\n\n\n
g) Controller or controller responsible for the processing<\/p>\n\n\n\n
Controller or controller responsible for the processing is\nthe natural or legal person, public authority, agency or other body which,\nalone or jointly with others, determines the purposes and means of the\nprocessing of personal data; where the purposes and means of such processing\nare determined by Union or Member State law, the controller or the specific\ncriteria for its nomination may be provided for by Union or Member State law.<\/p>\n\n\n\n
h) Processor<\/p>\n\n\n\n
Processor is a natural or legal person, public authority,\nagency or other body which processes personal data on behalf of the controller.<\/p>\n\n\n\n
i) Recipient<\/p>\n\n\n\n
Recipient is a natural or legal person, public authority,\nagency or another body, to which the personal data are disclosed, whether a\nthird party or not. However, public authorities which may receive personal data\nin the framework of a particular inquiry in accordance with Union or Member\nState law shall not be regarded as recipients; the processing of those data by\nthose public authorities shall be in compliance with the applicable data protection\nrules according to the purposes of the processing.<\/p>\n\n\n\n
j) Third party<\/p>\n\n\n\n
Third party is a natural or legal person, public authority,\nagency or body other than the data subject, controller, processor and persons\nwho, under the direct authority of the controller or processor, are authorised\nto process personal data.<\/p>\n\n\n\n
k) Consent<\/p>\n\n\n\n
Consent of the data subject is any freely given, specific,\ninformed and unambiguous indication of the data subject\u2019s wishes by which he or\nshe, by a statement or by a clear affirmative action, signifies agreement to\nthe processing of personal data relating to him or her.<\/p>\n\n\n\n
2. Name and Address of the controller<\/p>\n\n\n\n
Controller for the purposes of the General Data Protection\nRegulation (GDPR), other data protection laws applicable in Member states of\nthe European Union and other provisions related to data protection is the Arbeitsgemeinschaft\n300 Jahre Johann Bergl, represented by:<\/p>\n\n\n\n
Mariazell im Wienerwald<\/p>\n\n\n\n
Verein f\u00fcr Kultur und Denkmalpflege im oberen Triestingtal<\/p>\n\n\n\n
ZVR 800660722<\/p>\n\n\n\n
Thenneberg 218<\/p>\n\n\n\n
2571 Altenmarkt<\/p>\n\n\n\n
Dr. Thomas Aigner: t.aigner[a]mariazell-wienerwald.at<\/p>\n\n\n\n
Website: https:\/\/mariazell-wienerwald.at\/<\/a><\/p>\n\n\n\n 3. Cookies<\/p>\n\n\n\n The Internet pages of the Arbeitsgemeinschaft 300 Jahre\nJohann Bergl use cookies. Cookies are text files that are stored in a computer\nsystem via an Internet browser.<\/p>\n\n\n\n Many Internet sites and servers use cookies. Many cookies\ncontain a so-called cookie ID. A cookie ID is a unique identifier of the\ncookie. It consists of a character string through which Internet pages and\nservers can be assigned to the specific Internet browser in which the cookie\nwas stored. This allows visited Internet sites and servers to differentiate the\nindividual browser of the dats subject from other Internet browsers that\ncontain other cookies. A specific Internet browser can be recognized and\nidentified using the unique cookie ID.<\/p>\n\n\n\n Through the use of cookies, the Arbeitsgemeinschaft 300\nJahre Johann Bergl can provide the users of this website with more\nuser-friendly services that would not be possible without the cookie setting.<\/p>\n\n\n\n By means of a cookie, the information and offers on our\nwebsite can be optimized with the user in mind. Cookies allow us, as previously\nmentioned, to recognize our website users. The purpose of this recognition is\nto make it easier for users to utilize our website. The website user that uses\ncookies, e.g. does not have to enter access data each time the website is\naccessed, because this is taken over by the website, and the cookie is thus\nstored on the user\u2019s computer system. Another example is the cookie of a\nshopping cart in an online shop. The online store remembers the articles that a\ncustomer has placed in the virtual shopping cart via a cookie.<\/p>\n\n\n\n The data subject may, at any time, prevent the setting of\ncookies through our website by means of a corresponding setting of the Internet\nbrowser used, and may thus permanently deny the setting of cookies.\nFurthermore, already set cookies may be deleted at any time via an Internet\nbrowser or other software programs. This is possible in all popular Internet\nbrowsers. If the data subject deactivates the setting of cookies in the\nInternet browser used, not all functions of our website may be entirely usable.<\/p>\n\n\n\n 4. Collection of general data and information<\/p>\n\n\n\n The website of the Arbeitsgemeinschaft 300 Jahre Johann\nBergl collects a series of general data and information when a data subject or\nautomated system calls up the website. This general data and information are\nstored in the server log files. Collected may be (1) the browser types and\nversions used, (2) the operating system used by the accessing system, (3) the\nwebsite from which an accessing system reaches our website (so-called\nreferrers), (4) the sub-websites, (5) the date and time of access to the\nInternet site, (6) an Internet protocol address (IP address), (7) the Internet\nservice provider of the accessing system, and (8) any other similar data and\ninformation that may be used in the event of attacks on our information\ntechnology systems.<\/p>\n\n\n\n When using these general data and information, the Arbeitsgemeinschaft\n300 Jahre Johann Bergl does not draw any conclusions about the data subject.\nRather, this information is needed to (1) deliver the content of our website\ncorrectly, (2) optimize the content of our website as well as its\nadvertisement, (3) ensure the long-term viability of our information technology\nsystems and website technology, and (4) provide law enforcement authorities\nwith the information necessary for criminal prosecution in case of a\ncyber-attack. Therefore, the Arbeitsgemeinschaft 300 Jahre Johann Bergl\nanalyzes anonymously collected data and information statistically, with the aim\nof increasing the data protection and data security of our enterprise, and to\nensure an optimal level of protection for the personal data we process. The\nanonymous data of the server log files are stored separately from all personal\ndata provided by a data subject.<\/p>\n\n\n\n 5. Contact possibility via the website<\/p>\n\n\n\n The website of the Arbeitsgemeinschaft 300 Jahre Johann\nBergl contains information that enables a quick electronic contact to our\nenterprise, as well as direct communication with us, which also includes a\ngeneral address of the so-called electronic mail (e-mail address). If a data\nsubject contacts the controller by e-mail or via a contact form, the personal\ndata transmitted by the data subject are automatically stored. Such personal\ndata transmitted on a voluntary basis by a data subject to the data controller\nare stored for the purpose of processing or contacting the data subject. There\nis no transfer of this personal data to third parties.<\/p>\n\n\n\n 6. Routine erasure and blocking of personal data<\/p>\n\n\n\n The data controller shall process and store the personal\ndata of the data subject only for the period necessary to achieve the purpose\nof storage, or as far as this is granted by the European legislator or other\nlegislators in laws or regulations to which the controller is subject to.<\/p>\n\n\n\n If the storage purpose is not applicable, or if a storage\nperiod prescribed by the European legislator or another competent legislator\nexpires, the personal data are routinely blocked or erased in accordance with\nlegal requirements.<\/p>\n\n\n\n 7. Rights of the data subject<\/p>\n\n\n\n a) Right of confirmation<\/p>\n\n\n\n Each data subject shall have the right granted by the\nEuropean legislator to obtain from the controller the confirmation as to\nwhether or not personal data concerning him or her are being processed. If a\ndata subject wishes to avail himself of this right of confirmation, he or she\nmay, at any time, contact any employee of the controller.<\/p>\n\n\n\n b) Right of access<\/p>\n\n\n\n Each data subject shall have the right granted by the\nEuropean legislator to obtain from the controller free information about his or\nher personal data stored at any time and a copy of this information.\nFurthermore, the European directives and regulations grant the data subject\naccess to the following information:<\/p>\n\n\n\n Furthermore, the data subject shall have a right to obtain\ninformation as to whether personal data are transferred to a third country or\nto an international organisation. Where this is the case, the data subject\nshall have the right to be informed of the appropriate safeguards relating to\nthe transfer.<\/p>\n\n\n\n If a data subject wishes to avail himself of this right of\naccess, he or she may, at any time, contact any employee of the controller.<\/p>\n\n\n\n c) Right to rectification<\/p>\n\n\n\n Each data subject shall have the right granted by the\nEuropean legislator to obtain from the controller without undue delay the\nrectification of inaccurate personal data concerning him or her. Taking into\naccount the purposes of the processing, the data subject shall have the right\nto have incomplete personal data completed, including by means of providing a\nsupplementary statement.<\/p>\n\n\n\n If a data subject wishes to exercise this right to\nrectification, he or she may, at any time, contact any employee of the\ncontroller.<\/p>\n\n\n\n d) Right to erasure (Right to be forgotten)<\/p>\n\n\n\n Each data subject shall have the right granted by the\nEuropean legislator to obtain from the controller the erasure of personal data\nconcerning him or her without undue delay, and the controller shall have the\nobligation to erase personal data without undue delay where one of the\nfollowing grounds applies, as long as the processing is not necessary:<\/p>\n\n\n\n The personal data are no longer necessary in relation to the\npurposes for which they were collected or otherwise processed.<\/p>\n\n\n\n The data subject withdraws consent to which the processing\nis based according to point (a) of Article 6(1) of the GDPR, or point (a) of\nArticle 9(2) of the GDPR, and where there is no other legal ground for the\nprocessing.<\/p>\n\n\n\n The data subject objects to the processing pursuant to\nArticle 21(1) of the GDPR and there are no overriding legitimate grounds for\nthe processing, or the data subject objects to the processing pursuant to\nArticle 21(2) of the GDPR.<\/p>\n\n\n\n The personal data have been unlawfully processed.<\/p>\n\n\n\n The personal data must be erased for compliance with a legal\nobligation in Union or Member State law to which the controller is subject.<\/p>\n\n\n\n The personal data have been collected in relation to the\noffer of information society services referred to in Article 8(1) of the GDPR.<\/p>\n\n\n\n If one of the aforementioned reasons applies, and a data\nsubject wishes to request the erasure of personal data stored by the Arbeitsgemeinschaft\n300 Jahre Johann Bergl, he or she may, at any time, contact any employee of the\ncontroller. An employee of Arbeitsgemeinschaft 300 Jahre Johann Bergl shall\npromptly ensure that the erasure request is complied with immediately.<\/p>\n\n\n\n Where the controller has made personal data public and is\nobliged pursuant to Article 17(1) to erase the personal data, the controller,\ntaking account of available technology and the cost of implementation, shall\ntake reasonable steps, including technical measures, to inform other\ncontrollers processing the personal data that the data subject has requested\nerasure by such controllers of any links to, or copy or replication of, those\npersonal data, as far as processing is not required. An employee of the Arbeitsgemeinschaft\n300 Jahre Johann Bergl will arrange the necessary measures in individual cases.<\/p>\n\n\n\n e) Right of restriction of processing<\/p>\n\n\n\n Each data subject shall have the right granted by the\nEuropean legislator to obtain from the controller restriction of processing\nwhere one of the following applies:<\/p>\n\n\n\n The accuracy of the personal data is contested by the data\nsubject, for a period enabling the controller to verify the accuracy of the\npersonal data.<\/p>\n\n\n\n The processing is unlawful and the data subject opposes the\nerasure of the personal data and requests instead the restriction of their use\ninstead.<\/p>\n\n\n\n The controller no longer needs the personal data for the\npurposes of the processing, but they are required by the data subject for the\nestablishment, exercise or defence of legal claims.<\/p>\n\n\n\n The data subject has objected to processing pursuant to\nArticle 21(1) of the GDPR pending the verification whether the legitimate\ngrounds of the controller override those of the data subject.<\/p>\n\n\n\n If one of the aforementioned conditions is met, and a data\nsubject wishes to request the restriction of the processing of personal data\nstored by the Arbeitsgemeinschaft 300 Jahre Johann Bergl, he or she may at any\ntime contact any employee of the controller. The employee of the Arbeitsgemeinschaft\n300 Jahre Johann Bergl will arrange the restriction of the processing.<\/p>\n\n\n\n f) Right to data portability<\/p>\n\n\n\n Each data subject shall have the right granted by the\nEuropean legislator, to receive the personal data concerning him or her, which\nwas provided to a controller, in a structured, commonly used and\nmachine-readable format. He or she shall have the right to transmit those data\nto another controller without hindrance from the controller to which the\npersonal data have been provided, as long as the processing is based on consent\npursuant to point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2)\nof the GDPR, or on a contract pursuant to point (b) of Article 6(1) of the\nGDPR, and the processing is carried out by automated means, as long as the\nprocessing is not necessary for the performance of a task carried out in the\npublic interest or in the exercise of official authority vested in the\ncontroller.<\/p>\n\n\n\n Furthermore, in exercising his or her right to data\nportability pursuant to Article 20(1) of the GDPR, the data subject shall have\nthe right to have personal data transmitted directly from one controller to\nanother, where technically feasible and when doing so does not adversely affect\nthe rights and freedoms of others.<\/p>\n\n\n\n In order to assert the right to data portability, the data\nsubject may at any time contact any employee of the Arbeitsgemeinschaft 300\nJahre Johann Bergl.<\/p>\n\n\n\n g) Right to object<\/p>\n\n\n\n Each data subject shall have the right granted by the\nEuropean legislator to object, on grounds relating to his or her particular\nsituation, at any time, to processing of personal data concerning him or her,\nwhich is based on point (e) or (f) of Article 6(1) of the GDPR. This also applies\nto profiling based on these provisions.<\/p>\n\n\n\n The Arbeitsgemeinschaft 300 Jahre Johann Bergl shall no\nlonger process the personal data in the event of the objection, unless we can\ndemonstrate compelling legitimate grounds for the processing which override the\ninterests, rights and freedoms of the data subject, or for the establishment,\nexercise or defence of legal claims.<\/p>\n\n\n\n If the Arbeitsgemeinschaft 300 Jahre Johann Bergl processes\npersonal data for direct marketing purposes, the data subject shall have the right\nto object at any time to processing of personal data concerning him or her for\nsuch marketing. This applies to profiling to the extent that it is related to\nsuch direct marketing. If the data subject objects to the Arbeitsgemeinschaft\n300 Jahre Johann Bergl to the processing for direct marketing purposes, the Arbeitsgemeinschaft\n300 Jahre Johann Bergl will no longer process the personal data for these\npurposes.<\/p>\n\n\n\n In addition, the data subject has the right, on grounds\nrelating to his or her particular situation, to object to processing of\npersonal data concerning him or her by the Arbeitsgemeinschaft 300 Jahre Johann\nBergl for scientific or historical research purposes, or for statistical\npurposes pursuant to Article 89(1) of the GDPR, unless the processing is\nnecessary for the performance of a task carried out for reasons of public\ninterest.<\/p>\n\n\n\n In order to exercise the right to object, the data subject\nmay contact any employee of the Arbeitsgemeinschaft 300 Jahre Johann Bergl. In\naddition, the data subject is free in the context of the use of information\nsociety services, and notwithstanding Directive 2002\/58\/EC, to use his or her\nright to object by automated means using technical specifications.<\/p>\n\n\n\n h) Automated individual decision-making, including profiling<\/p>\n\n\n\n Each data subject shall have the right granted by the\nEuropean legislator not to be subject to a decision based solely on automated\nprocessing, including profiling, which produces legal effects concerning him or\nher, or similarly significantly affects him or her, as long as the decision (1)\nis not is necessary for entering into, or the performance of, a contract\nbetween the data subject and a data controller, or (2) is not authorised by\nUnion or Member State law to which the controller is subject and which also\nlays down suitable measures to safeguard the data subject\u2019s rights and freedoms\nand legitimate interests, or (3) is not based on the data subject\u2019s explicit\nconsent.<\/p>\n\n\n\n If the decision (1) is necessary for entering into, or the\nperformance of, a contract between the data subject and a data controller, or\n(2) it is based on the data subject\u2019s explicit consent, the Arbeitsgemeinschaft\n300 Jahre Johann Bergl shall implement suitable measures to safeguard the data\nsubject\u2019s rights and freedoms and legitimate interests, at least the right to\nobtain human intervention on the part of the controller, to express his or her\npoint of view and contest the decision.<\/p>\n\n\n\n If the data subject wishes to exercise the rights concerning\nautomated individual decision-making, he or she may, at any time, contact any\nemployee of the Arbeitsgemeinschaft 300 Jahre Johann Bergl.<\/p>\n\n\n\n i) Right to withdraw data protection consent<\/p>\n\n\n\n Each data subject shall have the right granted by the\nEuropean legislator to withdraw his or her consent to processing of his or her\npersonal data at any time.<\/p>\n\n\n\n If the data subject wishes to exercise the right to withdraw\nthe consent, he or she may, at any time, contact any employee of the Arbeitsgemeinschaft\n300 Jahre Johann Bergl.<\/p>\n\n\n\n 8. Data protection provisions about the application and use\nof Google Analytics (with anonymization function)<\/p>\n\n\n\n On this website, the controller has integrated the component\nof Google Analytics (with the anonymizer function). Google Analytics is a web\nanalytics service. Web analytics is the collection, gathering, and analysis of\ndata about the behavior of visitors to websites. A web analysis service\ncollects, inter alia, data about the website from which a person has come (the\nso-called referrer), which sub-pages were visited, or how often and for what\nduration a sub-page was viewed. Web analytics are mainly used for the\noptimization of a website and in order to carry out a cost-benefit analysis of\nInternet advertising.<\/p>\n\n\n\n The operator of the Google Analytics component is Google\nInc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.<\/p>\n\n\n\n For the web analytics through Google Analytics the\ncontroller uses the application \u201c_gat. _anonymizeIp\u201d. By means of this\napplication the IP address of the Internet connection of the data subject is\nabridged by Google and anonymised when accessing our websites from a Member\nState of the European Union or another Contracting State to the Agreement on\nthe European Economic Area.<\/p>\n\n\n\n The purpose of the Google Analytics component is to analyze\nthe traffic on our website. Google uses the collected data and information,\ninter alia, to evaluate the use of our website and to provide online reports,\nwhich show the activities on our websites, and to provide other services\nconcerning the use of our Internet site for us.<\/p>\n\n\n\n Google Analytics places a cookie on the information\ntechnology system of the data subject. The definition of cookies is explained\nabove. With the setting of the cookie, Google is enabled to analyze the use of\nour website. With each call-up to one of the individual pages of this Internet\nsite, which is operated by the controller and into which a Google Analytics\ncomponent was integrated, the Internet browser on the information technology\nsystem of the data subject will automatically submit data through the Google\nAnalytics component for the purpose of online advertising and the settlement of\ncommissions to Google. During the course of this technical procedure, the\nenterprise Google gains knowledge of personal information, such as the IP\naddress of the data subject, which serves Google, inter alia, to understand the\norigin of visitors and clicks, and subsequently create commission settlements.<\/p>\n\n\n\n The cookie is used to store personal information, such as\nthe access time, the location from which the access was made, and the frequency\nof visits of our website by the data subject. With each visit to our Internet\nsite, such personal data, including the IP address of the Internet access used\nby the data subject, will be transmitted to Google in the United States of\nAmerica. These personal data are stored by Google in the United States of\nAmerica. Google may pass these personal data collected through the technical\nprocedure to third parties.<\/p>\n\n\n\n The data subject may, as stated above, prevent the setting\nof cookies through our website at any time by means of a corresponding\nadjustment of the web browser used and thus permanently deny the setting of\ncookies. Such an adjustment to the Internet browser used would also prevent\nGoogle Analytics from setting a cookie on the information technology system of\nthe data subject. In addition, cookies already in use by Google Analytics may\nbe deleted at any time via a web browser or other software programs.<\/p>\n\n\n\n In addition, the data subject has the possibility of\nobjecting to a collection of data that are generated by Google Analytics, which\nis related to the use of this website, as well as the processing of this data\nby Google and the chance to preclude any such. For this purpose, the data\nsubject must download a browser add-on under the link\nhttps:\/\/tools.google.com\/dlpage\/gaoptout and install it. This browser add-on\ntells Google Analytics through a JavaScript, that any data and information\nabout the visits of Internet pages may not be transmitted to Google Analytics.\nThe installation of the browser add-ons is considered an objection by Google.\nIf the information technology system of the data subject is later deleted,\nformatted, or newly installed, then the data subject must reinstall the browser\nadd-ons to disable Google Analytics. If the browser add-on was uninstalled by\nthe data subject or any other person who is attributable to their sphere of\ncompetence, or is disabled, it is possible to execute the reinstallation or\nreactivation of the browser add-ons.<\/p>\n\n\n\n Further information and the applicable data protection\nprovisions of Google may be retrieved under\nhttps:\/\/www.google.com\/intl\/en\/policies\/privacy\/ and under http:\/\/www.google.com\/analytics\/terms\/us.html.\nGoogle Analytics is further explained under the following Link\nhttps:\/\/www.google.com\/analytics\/.<\/p>\n\n\n\n 9. Legal basis for the processing<\/p>\n\n\n\n Art. 6(1) lit. a GDPR serves as the legal basis for\nprocessing operations for which we obtain consent for a specific processing\npurpose. If the processing of personal data is necessary for the performance of\na contract to which the data subject is party, as is the case, for example,\nwhen processing operations are necessary for the supply of goods or to provide\nany other service, the processing is based on Article 6(1) lit. b GDPR. The\nsame applies to such processing operations which are necessary for carrying out\npre-contractual measures, for example in the case of inquiries concerning our\nproducts or services. Is our company subject to a legal obligation by which\nprocessing of personal data is required, such as for the fulfillment of tax\nobligations, the processing is based on Art. 6(1) lit. c GDPR. 10. The legitimate interests pursued by the controller or by\na third party<\/p>\n\n\n\n Where the processing of personal data is based on Article\n6(1) lit. f GDPR our legitimate interest is to carry out our business in favor\nof the well-being of all our employees and the shareholders.<\/p>\n\n\n\n 11. Period for which the personal data will be stored<\/p>\n\n\n\n The criteria used to determine the period of storage of\npersonal data is the respective statutory retention period. After expiration of\nthat period, the corresponding data is routinely deleted, as long as it is no\nlonger necessary for the fulfillment of the contract or the initiation of a\ncontract.<\/p>\n\n\n\n 12. Provision of personal data as statutory or contractual\nrequirement; Requirement necessary to enter into a contract; Obligation of the\ndata subject to provide the personal data; possible consequences of failure to\nprovide such data<\/p>\n\n\n\n We clarify that the provision of personal data is partly\nrequired by law (e.g. tax regulations) or can also result from contractual\nprovisions (e.g. information on the contractual partner).<\/p>\n\n\n\n Sometimes it may be necessary to conclude a contract that\nthe data subject provides us with personal data, which must subsequently be\nprocessed by us. The data subject is, for example, obliged to provide us with\npersonal data when our company signs a contract with him or her. The\nnon-provision of the personal data would have the consequence that the contract\nwith the data subject could not be concluded.<\/p>\n\n\n\n Before personal data is provided by the data subject, the\ndata subject must contact any employee. The employee clarifies to the data\nsubject whether the provision of the personal data is required by law or\ncontract or is necessary for the conclusion of the contract, whether there is\nan obligation to provide the personal data and the consequences of\nnon-provision of the personal data.<\/p>\n\n\n\n 13. Existence of automated decision-making<\/p>\n\n\n\n As a responsible team, we do not use automatic decision-making or profiling.<\/p>\n\n\n\n This Privacy Policy has been generated by the Privacy Policy\nGenerator of the German\nAssociation for Data Protection<\/a> that was developed in cooperation with Privacy\nLawyers<\/a> from WILDE BEUGER SOLMECKE, Cologne.<\/p>\n","protected":false},"excerpt":{"rendered":" We are very delighted that you have shown interest in our Arbeitsgemeinschaft 300 Jahre Johann Bergl. Data protection is of a particularly high priority for the management of the Arbeitsgemeinschaft 300 Jahre Johann Bergl. The use of the Internet pages of the Arbeitsgemeinschaft 300 Jahre Johann Bergl is possible without any indication of personal data; … <\/p>\n
\nIn rare cases, the processing of personal data may be necessary to protect the\nvital interests of the data subject or of another natural person. This would be\nthe case, for example, if a visitor were injured in our company and his name,\nage, health insurance data or other vital information would have to be passed\non to a doctor, hospital or other third party. Then the processing would be\nbased on Art. 6(1) lit. d GDPR.
\nFinally, processing operations could be based on Article 6(1) lit. f GDPR. This\nlegal basis is used for processing operations which are not covered by any of\nthe abovementioned legal grounds, if processing is necessary for the purposes\nof the legitimate interests pursued by our company or by a third party, except\nwhere such interests are overridden by the interests or fundamental rights and\nfreedoms of the data subject which require protection of personal data. Such\nprocessing operations are particularly permissible because they have been\nspecifically mentioned by the European legislator. He considered that a\nlegitimate interest could be assumed if the data subject is a client of the\ncontroller (Recital 47 Sentence 2 GDPR).<\/p>\n\n\n\n