1. GENERAL INFORMATION
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you could be personally identified. You can find detailed information on the subject of data protection in our data protection declaration below this text. The data protection declaration complies with Regulation (EU) 2016/679 on the protection of natural persons in the processing of personal data, on the free movement of data and on the repeal of Directive 95/46 / EC (General Data Protection Regulation GDPR, valid on May 25, 2018) as well as that Swiss Federal Law on Data Protection (DSG, of June 19, 1992 (as of January 1, 2014).
Data collection on our website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This can be, for example, data that you enter in a contact form.
Other data are automatically recorded by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected in order to ensure that the website is error-free. Other data can be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the legal notice if you have any further questions about data protection. You also have the right to lodge a complaint with the responsible supervisory authority.
Analysis tools and third-party tools
When you visit our website, your surfing behavior can be statistically evaluated. This is mainly done with cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find detailed information on this in the following data protection declaration.
You can contradict this analysis. We will inform you about the possibilities of objection in this data protection declaration.
2. GENERAL INFORMATION AND MANDATORY INFORMATION
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This data protection declaration explains which data we collect and what we use it for. It also explains how and for what purpose this is done.
We point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.
Note on the responsible body
The responsible body for data processing on this website is:
Vegisan AG
Brenden 415
9426 Lutzenberg
Switzerland
Telephone: +43 5574 4253812
E-Mail: contact-uk@leanfood.com
The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. An informal e-mail to us is sufficient. The legality of the data processing carried out before the revocation remains unaffected by the revocation.
Right of appeal to the responsible supervisory authority
In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the competent supervisory authority. The responsible supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html .
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or a third party in a common, machine-readable format. If you request the direct transfer of the data to another person in charge, this will only be done if it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses an SSL or. TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http: //” to “https: //” and by the lock symbol in your browser line.
If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
Encrypted payment transactions on this website
If there is an obligation to provide us with your payment data (e.g. account number for direct debit authorization) after the conclusion of a paid contract, this data is required to process the payment.
Payment transactions using common means of payment (Visa / MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http: //" to "https: //" and by the lock symbol in your browser line.
In the case of encrypted communication, your payment data that you transmit to us cannot be read by third parties.
Information, blocking, deletion
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, their origin and recipient and the purpose of the data processing and, if necessary, a right to correct, block or delete this data. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of personal data.
Objection to advertising mail
We hereby object to the use of the contact data published in the context of the imprint obligation for sending unsolicited advertising and information materials. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.
3. DATA COLLECTION ON OUR WEBSITE
Cookies
Some of the websites use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted.
Cookies that are required to carry out the electronic communication process or to provide certain functions you want (e.g. shopping cart function) are stored on the basis of Art. 6 Para. 1 lit. f GDPR saved. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for analyzing your surfing behavior) are stored, these are treated separately in this data protection declaration.
Contact form
If you send us inquiries using the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the request and in case of follow-up questions. We do not pass on this data without your consent.
The processing of the data entered in the contact form takes place exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. An informal e-mail to us is sufficient. The legality of the data processing operations carried out before the revocation remains unaffected by the revocation.
The data you enter in the contact form will remain with us until you ask us to delete it. Revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.
Registration on this website
You can register on our website in order to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be given in full. Otherwise we will reject the registration.
For important changes, for example in the scope of the offer or for technically necessary changes, we will use the email address provided during registration to inform you in this way.
The processing of the data entered during registration is based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent at any time. An informal e-mail to us is sufficient. The legality of the data processing that has already taken place remains unaffected by the revocation.
The data recorded during registration will be stored by us as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.
Processing of data (customer and contract data)
We collect, process and use personal data only insofar as they are necessary for the establishment, content or change of the legal relationship (inventory data). This is done on the basis of Art. 6 Para. 1 lit. b GDPR, which allows the processing of data for the performance of a contract or pre-contractual measures. We collect, process and use personal data on the use of our website (usage data) only insofar as this is necessary to enable the user to use the service or to bill.
The customer data collected will be deleted after the order has been completed or the business relationship has ended. Statutory retention periods remain unaffected.
Data transfer when concluding a contract for online shops, dealers and dispatching of goods
We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the company entrusted with the delivery of the goods or the credit institution commissioned with the payment processing. A further transmission of the data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, e.g. for advertising purposes.
The basis for data processing is Art. 6 Para. 1 lit. b GDPR, which allows the processing of data for the performance of a contract or pre-contractual measures.
Data transfer when concluding a contract for services and digital content
We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the credit institute commissioned with processing payments.
A further transmission of the data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, e.g. for advertising purposes.
The basis for data processing is Art. 6 Para. 1 lit. b GDPR, which allows the processing of data for the performance of a contract or pre-contractual measures.
4. SOCIAL MEDIA
Facebook plugins (like & share button)
Plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our pages. You can recognize the Facebook plugins by the Facebook logo or the "Like" button on our website. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/ .
When you visit our website, the plug-in creates a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. If you click the Facebook "Like" button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This enables Facebook to assign your visit to our website to your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by Facebook. You can find more information on this in Facebook's privacy policy at: https://de-de.facebook.com/policy.php .
If you do not want Facebook to be able to assign your visit to our website to your Facebook user account, please log out of your Facebook user account.
Google+ plugin
Our pages use Google+ functions. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Collection and dissemination of information: You can use the Google+ button to publish information worldwide. You and other users receive personalized content from Google and our partners via the Google+ button. Google saves both the information that you have given +1 for a piece of content and information about the page that you viewed when you clicked +1. Your +1 can be displayed as a hint together with your profile name and your photo in Google services, such as in search results or in your Google profile, or in other places on websites and advertisements on the Internet.
Google records information about your +1 activities in order to improve Google services for you and others. In order to be able to use the Google+ button, you need a globally visible, public Google profile that must contain at least the name chosen for the profile. This name is used in all Google services. In some cases this name can also replace another name that you used when sharing content via your Google account. The identity of your Google profile can be shown to users who know your email address or who have other identifying information about you.
Use of the information collected: In addition to the purposes outlined above, the information you provide will be used in accordance with the applicable Google data protection provisions. Google may publish summarized statistics about the +1 activities of users or pass them on to users and partners, such as publishers, advertisers or linked websites.
5. ANALYSIS TOOLS AND ADVERTISING
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files that are saved on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
The storage of Google Analytics cookies is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
IP anonymization
We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser plugin
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de .
Objection against data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to this website: Deactivate Google Analytics .
You can find more information on how Google Analytics handles user data in Google's data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de .
Order data processing
We have concluded an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic characteristics in Google Analytics
This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain information on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. These data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the point “Objection to data collection”.
Facebook pixel
Our website uses the visitor action pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) to measure conversion.
In this way, the behavior of the page visitors can be tracked after they have been forwarded to the provider's website by clicking on a Facebook ad. This enables the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized.
The data collected are anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook data usage guidelines. This enables Facebook to place advertisements on Facebook pages as well as outside of Facebook. As the website operator, we cannot influence this use of the data.
You can find further information on protecting your privacy in Facebook's data protection information: https://www.facebook.com/about/privacy/ .
You can also deactivate the remarketing function “Custom Audiences” in the advertising settings area at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen . To do this, you have to be logged into Facebook.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/ .
6. NEWSLETTER
Click tip
This website uses Klick-Tipp to send newsletters. The provider is KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd's Bush Road, London W6 7NJ, United Kingdom.
Klick-Tipp is a service with which, among other things, the sending of newsletters can be organized and analyzed. The data you enter for the purpose of subscribing to the newsletter is stored on the Klick-Tipp servers.
Data analysis with one click
If we send newsletters with the help of Klick-Tipp, we can determine whether a newsletter message has been opened and which links have been clicked.
Klick-Tipp also enables us to divide the newsletter recipients into different categories (so-called tagging). The newsletter recipients can be classified according to gender, personal preferences (e.g. vegetarian or non-vegetarian) or customer relationship (e.g. customer or potential customer). In this way, the newsletters can be better adapted to the respective target groups. You can find more information at: https://www.klick-tipp.com and https://www.klick-tipp.com/handbuch .
If you do not want an analysis by clicking the tip, you must therefore unsubscribe from the newsletter. We provide a link for this in every newsletter message. You can also unsubscribe from the newsletter directly on the website.
Legal basis
The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.
Storage period
The data you have stored with us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of Klick-Tipp after you unsubscribe from the newsletter. This does not affect data that we have stored for other purposes (e.g. e-mail addresses for the members' area).
You can find more information in the data protection provisions of Klick-Tipp at: https://www.klick-tipp.com/datenschutzerklaerung .
Conclusion of a contract for order data processing
We have concluded a contract for order data processing with Klick-Tipp, in which we oblige Klick-Tipp to protect our customers' data and not to pass them on to third parties.
7. PLUGINS AND TOOLS
YouTube
Our website uses plugins from YouTube, operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers will be established. This tells the YouTube server which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.
Further information on handling user data can be found in YouTube's data protection declaration at: https://www.google.de/intl/de/policies/privacy .
Vimeo
Our website uses plugins from the Vimeo video portal. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
If you visit one of our pages equipped with a Vimeo plug-in, a connection to the Vimeo servers will be established. The Vimeo server is informed which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information recorded by Vimeo is transmitted to the Vimeo server in the USA.
If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.
Further information on handling user data can be found in Vimeo's data protection declaration at: https://vimeo.com/privacy .
Google Web Fonts
This page uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.
If your browser does not support web fonts, a standard font will be used by your computer.
You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/ .
Google Maps
This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and saved there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.
You can find more information on handling user data in Google's data protection declaration: https://www.google.de/intl/de/policies/privacy/ .
8. PAYMENT PROVIDERS
PayPal
On our website we offer payment via PayPal, among other things. The provider of this payment service is PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).
If you choose to pay via PayPal, the payment details you have entered will be transmitted to PayPal.
The transfer of your data to PayPal takes place on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfill a contract). You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past.
Instant bank transfer
On our website we offer, among other things, payment via “instant transfer”. The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter “Sofort GmbH”).
With the help of the “Sofortüberweisung” process, we receive a real-time payment confirmation from Sofort GmbH and can immediately begin to meet our obligations.
If you have decided on the payment method “Sofortüberweisung”, you transmit the PIN and a valid TAN to Sofort GmbH, with which they can log into your online banking account. Sofort GmbH automatically checks your account balance after logging in and carries out the transfer to us using the TAN you transmitted. It then immediately sends us a transaction confirmation. After logging in, your sales, the credit line of the overdraft facility and the existence of other accounts as well as their stocks are automatically checked.
In addition to the PIN and TAN, the payment data you have entered and your personal data are also transmitted to Sofort GmbH. Your personal data is your first and last name, address, telephone number (s), email address, IP address and any other data required for payment processing. The transmission of this data is necessary to establish your identity beyond any doubt and to prevent attempted fraud.
The transfer of your data to Sofort GmbH takes place on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfill a contract). You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past.
You can find details about paying with immediate transfer from the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/ .
9. RIGHTS OF THE DATA SUBJECT
a) Right to confirmation
Every person concerned has the right granted by the European directive and regulation giver to request confirmation from the person responsible for the processing as to whether personal data concerning them are being processed. If an affected person wishes to exercise this right to confirmation, they can contact an employee of the person responsible for processing at any time.
b) Right to information
Every person affected by the processing of personal data has the right granted by the European directives and regulations to receive free information about the personal data stored about them and a copy of this information from the person responsible for the processing at any time. Furthermore, the European directives and regulations grant the data subject access to the following information:
- the processing purposes
- the categories of personal data that are processed
- the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular for recipients in third countries or international organizations
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
- the existence of a right to correction or deletion of the personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing
- the existence of a right to lodge a complaint with a supervisory authority
- if the personal data are not collected from the data subject: All available information on the origin of the data
- the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject
Furthermore, the data subject has a right to information as to whether personal data has been transmitted to a third country or to an international organization. If this is the case, the data subject has the right to receive information about the appropriate guarantees in connection with the transmission.
If a person concerned wishes to exercise this right to information, they can contact an employee of the person responsible for processing at any time.
c) Right to rectification
Every person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to request the immediate correction of incorrect personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - including by means of a supplementary declaration.
If a data subject wishes to exercise this right to rectification, they can contact an employee of the controller at any time.
d) Right to deletion (right to be forgotten)
Every person affected by the processing of personal data has the right granted by the European directive and regulation giver to demand that the person responsible delete the personal data concerning them immediately, provided that one of the following reasons applies and insofar as the processing is not necessary:
- The personal data were collected or otherwise processed for purposes for which they are no longer necessary.
- The data subject revokes their consent, on which the processing was based in accordance with Art. 6 Paragraph 1 Letter a GDPR or Art. 9 Paragraph 2 Letter a GDPR, and there is no other legal basis for the processing.
- The data subject objects to the processing in accordance with Art. 21 Paragraph 1 GDPR, and there are no overriding legitimate reasons for the processing, or the data subject objects in accordance with Art. 21 Paragraph 2 GDPR to the Processing a.
- The personal data was processed unlawfully.
- The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject.
- The personal data was collected in relation to the information society services offered in accordance with Art. 8 Para. 1 GDPR.
If one of the above reasons applies and a data subject wishes to have personal data stored at Vegisan AG deleted, they can contact an employee of the person responsible for processing at any time. The Vegisan AG employee will arrange for the deletion request to be complied with immediately.
If the personal data has been made public by Vegisan AG and our company, as the person responsible, is obliged to delete the personal data in accordance with Art. 17 Paragraph 1 GDPR, Vegisan AG takes appropriate measures, taking into account the available technology and the implementation costs of a technical nature, in order to inform other data processors who process the published personal data that the data subject has requested the deletion of all links to this personal data or of copies or replications of this personal data from these other data processors has requested, as far as the processing is not necessary. The Vegisan AG or partner employee will arrange the necessities in individual cases.
e) Right to restriction of processing
Every person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to demand that the controller restrict processing if one of the following conditions is met:
- The correctness of the personal data is contested by the data subject for a period that enables the person responsible to check the correctness of the personal data.
- The processing is unlawful, the person concerned refuses to delete the personal data and instead requests that the use of the personal data be restricted.
- The person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims.
- The data subject has an objection to the processing acc. Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh those of the person concerned.
If one of the above conditions is met and a person concerned would like to request the restriction of personal data stored at Vegisan AG, they can contact an employee of the person responsible for processing at any time. The Vegisan AG employee will arrange for the processing to be restricted.
f) Right to data portability
Every person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to receive the personal data relating to them, which have been made available to a responsible party by the person concerned, in a structured, common and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that the processing is based on the consent in accordance with Art. 6 Para. 1 Letter a GDPR or Art. 9 Para 2 letter a DS-GVO or on a contract according to Art. 6 para. 1 letter b DS-GVO and the processing is carried out using automated procedures,
Furthermore, when exercising your right to data portability in accordance with Art. 20 (1) GDPR, the person concerned has the right to have the personal data transmitted directly from one person responsible to another, insofar as this is technically feasible and if this does not affect the rights and freedoms of other persons.
To assert the right to data portability, the person concerned can contact an employee of Vegisan AG at any time.
g) Right to object
Every person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to object at any time to the processing of personal data relating to them, which is based on Art. 6 Para. 1 Letter e or f DS-GVO takes place to object. This also applies to profiling based on these provisions.
Vegisan AG will no longer process the personal data in the event of an objection, unless we can prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend of legal claims.
If Vegisan AG processes personal data in order to operate direct mail, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is related to such direct mail. If the data subject objects to Vegisan AG processing for direct marketing purposes, Vegisan AG will no longer process the personal data for these purposes.
In addition, the data subject has the right, for reasons that arise from their particular situation, to object to the processing of personal data concerning them that is carried out by Vegisan AG for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 DS- GMOs take place, to object, unless such processing is necessary to fulfill a task in the public interest.
To exercise the right to object, the data subject can contact any Vegisan AG employee or another employee directly. The data subject is also free, in connection with the use of information society services, regardless of Directive 2002/58 / EC, to exercise their right of objection by means of automated procedures in which technical specifications are used.
h) Automated decisions in individual cases including profiling
Every person affected by the processing of personal data has the right granted by the European legislator of directives and regulations not to be subjected to a decision based solely on automated processing - including profiling - which has a legal effect on them or significantly affects them in a similar manner, if the decision (1) is not necessary for the conclusion or performance of a contract between the data subject and the person responsible, or (2) based on legal provisions of the Union or of the member states to which the person responsible is subject,is admissible and these legal provisions contain appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject or (3) takes place with the express consent of the data subject.
If the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the person responsible, or (2) it is made with the express consent of the data subject, Vegisan AG takes appropriate measures to safeguard the rights and freedoms and the legitimate To protect the interests of the data subject, including at least the right to obtain intervention by a person on the part of the person responsible, to express one's own point of view and to contest the decision.
If the data subject wishes to assert rights with regard to automated decisions, he or she can contact an employee of the controller at any time.
i) Right to withdraw consent under data protection law
Every person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to revoke their consent to the processing of personal data at any time.
If the person concerned wishes to assert their right to withdraw consent, they can contact an employee of the person responsible for processing at any time.
This data protection declaration was partly created by the data protection declaration generator of DGD Deutsche Gesellschaft für Datenschutz GmbH, which works as the external data protection officer in Munich , in cooperation with the data protection lawyer Christian Solmecke .
