Contact with the Data Protection Officer:
datenschutzbeauftragter(at)p-e-c.com
T +49 (0) 201-83916-0
1. Scope of Processing Personal Data
We process personal data of our users only to the extent necessary to provide a functional website and our content and services. The processing of personal data of our users is generally carried out only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by legal regulations.
2. Legal Basis for Processing Personal Data
If we obtain the consent of the data subject for processing personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.
If processing personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
In cases where the processing is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not override this interest, Article 6(1)(f) GDPR serves as the legal basis for processing.
3. Data Deletion and Storage Duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also occur if required by European or national legislation in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted if a legally prescribed retention period expires unless further storage of the data is necessary for contract conclusion or fulfillment.
4. Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the accessing computer’s system. The data is stored in log files of our system. These data are not stored together with other personal data of the user.
5. Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.
6. Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to deliver the website to the user’s computer. For this, the user’s IP address must be stored for the duration of the session.
Storage in log files ensures the functionality of the website. Additionally, the data is used to optimize the website and ensure the security of our information technology systems. Data is not analyzed for marketing purposes.
These purposes also constitute our legitimate interest in data processing under Article 6(1)(f) GDPR.
7. Storage Duration
The data is deleted as soon as it is no longer required for the purpose of its collection. If data is collected to provide the website, this is the case when the session ends.
If the data is stored in log files, they are deleted after seven days at the latest. Storage beyond this period is possible, but in such cases, IP addresses are anonymized so that association with the accessing client is no longer possible.
8. Objection and Removal Option
Data collection for website provision and data storage in log files are essential for operating the website. Therefore, there is no option for the user to object.
If your personal data is processed, you are considered a data subject under the GDPR and have the following rights against the controller:
9. Right to Information
You may request confirmation from the controller whether we process your personal data. If such processing occurs, you can request information about:
- The purposes for which personal data are processed;
- The categories of personal data being processed;
- The recipients or categories of recipients to whom the personal data has been disclosed or will be disclosed;
- The planned duration of personal data storage or, if specific details are not available, criteria for determining the storage duration;
- The existence of a right to correction or deletion of your personal data, a right to restriction of processing by the controller, or a right to object to such processing;
- The existence of a right to lodge a complaint with a supervisory authority;
- All available information about the source of the data if it was not collected from the data subject;
- The existence of automated decision-making, including profiling, under Article 22(1) and (4) GDPR, and, at least in such cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information on whether your personal data is transferred to a third country or an international organization. In this regard, you may request to be informed about the appropriate safeguards under Article 46 GDPR in connection with the transfer.
10. Right to Correction
You have the right to request correction and/or completion if the personal data processed concerning you is incorrect or incomplete. The controller must make the correction immediately.
11. Right to Restriction of Processing
You may request a restriction of processing under the following conditions:
- If you dispute the accuracy of your personal data for a period enabling the controller to verify its accuracy;
- If processing is unlawful and you oppose the deletion of the personal data, requesting a restriction instead;
- If the controller no longer needs the personal data for processing purposes, but you require it for legal claims; or
- If you have objected to processing under Article 21(1) GDPR and it has not yet been determined whether the controller’s legitimate reasons override yours.
If processing is restricted, such data may only be processed with your consent or for legal claims.
12. Right to Deletion
You can request the deletion of your personal data if:
- The data is no longer necessary for its original purposes;
- You withdraw your consent and there is no other legal basis for processing;
- You object to processing and no overriding legitimate reasons exist;
- The data was processed unlawfully;
- Deletion is required for compliance with a legal obligation under EU or member state law.
13. Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller without hindrance.
14. Right to Object
You may object to processing based on legitimate interest. The controller will cease processing unless compelling legitimate grounds override your interests.
15. Right to Withdraw Consent
You may withdraw consent at any time without affecting the legality of prior processing based on consent.
16. Right to Lodge a Complaint
If you believe your data processing violates the GDPR, you have the right to lodge a complaint with a supervisory authority.