I. General information about data protection
1. Extent of the personal data processing
In principle, we process personal data from our users only to the extent necessary for providing a functioning website and our content and services. Our users’ personal data is processed regularly only with the consent of the user. An exception is in cases where it is not possible to obtain prior consent for material reasons and the processing of the data is permitted by statutory provisions.
2. Legal basis for the processing personal data
Insofar as we obtain consent from the data subject for the processing of personal data, Art. 6 (1) lit. a EU General Data Protection Regulation (GDPR) forms the legal basis.
When processing personal data necessary to fulfil a contract, the contractual party of which is the data subject, Art. 6 (1) lit. b GDPR forms the legal basis. This also applies to the processing required for realising pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation, to which our company is subject, Art. 6 (1) lit. c GDPR forms the legal basis.
In the event that vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6 (1) lit. d GDPR forms the legal basis.
If processing is necessary in order to safeguard a justified interest of our company or a third party and the interests, basic rights and basic freedoms of the data subject do not exceed the aforementioned interest, Art. 6 (1) lit. f GDPR forms the legal basis for the processing.
3. Data deletion and period of retention
The data subject’s personal data is deleted or blocked as soon as the purpose for storage no longer exists. In addition, storage is also possible if this has been required by the European or national parliaments in union directives, laws or other provisions, to which the responsible person is subject. The data may also be blocked or deleted if the storage period prescribed by the cited standards expires, unless it is necessary to store the data further in order to conclude or fulfil a contract.
II. Name and address of the responsible person
The responsible person as defined in the GDPR and other national data protection legislation of the member states and other data protection provisions is:
IcamSystems GmbH
Käthe-Kollwitz-Strasse 84
04109 Leipzig
Germany
Tel.: +49 (0) 341 989999-0
Email: info@icamsystems.de
Website: www.icamsystems.de
III. Name and address of the data protection officer
The data protection officer of the responsible person is:
Lutz Schmidtke
IcamSystems GmbH
Käthe-Kollwitz-Strasse 84
04109 Leipzig
Germany
Tel.: +49 (0) 341 98999-0
Email: datenschutz@icamsystems.de
Website: www.icamsystems.de
IV. Provision of website and creation of logfiles
1. Description and extent of data processing
Every time our website is accessed, our customer automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
(1) Information about the browser type and version used
(2) The user’s operating system
(3) The user’s Internet Service Provider
(4) The user’s IP address
(5) Date and time of access
(6) Websites from which the user’s system came to our internet site
(7) Websites called up by the user’s system via our website
The logfiles contain IP addresses or other data, which facilitate the identification of a user. This might be the case, for example, if the link to the website from which the user came to our website or the link to the website to which the user moves on, contains personal data.
The data is also saved in our system’s logfiles. This data is not stored together with the user’s other personal data.
2. Legal basis for the data processing
Legal basis for the temporary storage of data and logfiles is Art. 6 (1) lit. f GDPR.
3. Purpose of the data processing
The temporary storage of the IP address by the system is necessary so that the website can be transmitted to the user’s computer. To this end, the user’s IP address has to remain stored for the duration of the session. This is stored in logfiles in order to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our IT systems. The data is not analysed in conjunction with this for marketing purposes.
Our justified interest in data processing according to Art. 6 (1) lit. f GDPR also exists in these purposes.
4. Period of retention
The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. If the data is collected in order to provide the website, this is the case when the respective session ends. If the data is stored in logfiles, this is the case after 14 days at the latest.
5. Possible refusal and correction
The recording of data is necessary in order to provide the website and it is stored in logfiles as required in order to operate the website. As a result, it is not possible for the user to refuse this.
V. Use of cookies
1. Description and extent of data processing
Our website uses cookies. Cookies are text files saved in or by the internet browser on the user’s computer system. If a user accesses a website, a cookie may be saved on the user’s operating system. This cookie contains a characteristic sequence of characters, which facilitate a unique identification of the browser if the website is accessed again.
We use cookies to make our website user-friendly. Some elements of our website require the accessing browser to be identifiable after a site change as well.
On our website we also use cookies that facilitate an analysis of the user’s surfing.
In this way the following data can be determined:
(1) Frequency of site accesses
If consent is not obtained from the user before cookies are saved, which are not technically necessary: (no processing without consent)
The user’s data collected in this way is pseudonymised as a result of technical measures. It is therefore no longer possible to allocate the data to the accessing user. The data is not saved together with other personal data from the user.
When accessing our website, users are informed of the use of cookies for analysis purposes by an information banner and are referred to this data protection declaration. In this context, there is also a reference to how to prevent the saving of cookies in the browser settings.
When accessing our website, the user is informed of the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. In conjunction with this there is also a reference to this data protection declaration.
2. Legal basis for the data processing
The legal basis for processing personal data using cookies is Art. 6 (1) 1 lit. a GDPR.
3. Purpose of the data processing
The purpose of the use of technically required cookies is to simplify the use of websites for the user. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised again after changing sites. We need cookies for the following applications:
(1) Transfer of language settings
(2) Consent to cookies
The user data collected by the technically required cookies is not used to create user profiles.
Our justified interest in the processing of personal data according to Art. 6 (1) lit. f GDPR also exists in these purposes.
4. Period of retention, possible refusal and correction
Cookies are saved on the user’s computer and transmitted by it to our site. You, as user, therefore also have full control over the use of cookies. By changing the settings in your internet browser you can disable or restrict the transmission of cookies. Cookies already saved can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it is possible that not all functions of the website will be usable in full.
VI. Email contact
1. Description and extent of data processing
Contact via the provided email address is possible. In this case, the personal data transmitted with the email is used.
In this context the data is not forwarded to third parties. The data is used exclusively for processing the conversation.
2. Legal basis for the data processing
Legal basis for processing the data transmitted when sending an email is Art. 6 (1) lit. f GDPR. If the email contact aims to conclude a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR.
3. Purpose of the data processing
When contacting us by email, we have the required justified interest in processing the data in order to respond to the contact.
4. Period of retention
The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. This is the case when the respective conversation with the user ends. The conversation is over if the circumstances indicate that the relevant matter has been conclusively clarified.
5. Possible refusal and correction
It is possible at all times for the user to withdraw their consent to the processing of personal data. If the user contacts us by email on datenschutz@icamsystems.de they can refuse at any time to have their personal data saved. In this case, the conversation cannot be continued.
All personal data saved during the contact is then deleted in this case.
VII. Use of Google Maps
1. Extent of the personal data processing
We use Google Maps on our website to display interactive maps. Google Maps is a map service from Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). If individual pages of our website are accessed, which contain Google Maps, your browser connects directly with the Google servers. The map content is sent by Google directly to your browser and integrated by them into the website. The following data is processed:
(1) Date and time of the visit to our website
(2) Internet address or URL of the accessed website
(3) IP address
2. Legal basis for the processing personal data
Legal basis for processing the user’s personal data is Art. 6 (1) lit. f GDPR.
3. Purpose of the data processing
The processing of the user’s personal data allows us to represent geographic information visually.
4. Period of retention
The data is typically deleted after the website has been left. You can learn more about data processing by Google by going to www.google.com/privacypolicy.html.
5. Possible refusal and correction
If you do not want Google to collect, process or use data about you via our website, you can disable JavaScript in your browser settings. In this case, however, you cannot use the map display.
VIII. Secure data transmission
Within the website visit we use the widespread SSL method (Secure Socket Layer) in conjunction with the respective highest encryption level supported by your browser. You can tell whether a single page of our website is transmitted encrypted from the locked representation of the key or lock icon.
Moreover, we employ appropriate technical and organisational security measures in order to protect your data against inadvertent or malicious manipulations, partial or entire loss, destruction or against unauthorised access by third parties. Our security measures are constantly being improved corresponding to technological developments.
IX. Rights of the data subject
If your personal data is processed, you are the data subject as defined in GDPR and you have the following rights against the responsible person:
1. Right of information
You can demand confirmation from the responsible person as to whether personal data relating to you is being processed by us.
If it is being processed, you can demand the following information from the responsible person:
(1) the purpose for which the personal data is being processed;
(2) the categories of personal data being processed;
(3) the recipients and categories of recipients, to whom the personal data relating to you has been disclosed or is being disclosed;
(4) the planned duration of the storage of the personal data relating to you or, if concrete information is not available, criteria for specifying the duration of storage;
(5) the existence of a right to correction or deletion of the personal data relating to you, a right to restrict the processing by the responsible person or a right to refuse this processing;
(6) the existence of a right to complain to a regulatory authority;
(7) all available information about the origin of the data, if the personal data is not collected from the data subject;
(8) the existence of an automated decision, including profiling according to Art. 22 (1) and (4) GDPR and – at least in these cases – useful information about the logic involved and the range and desired effects of such processing for the data subject.
You have the right to demand information as to whether the personal data relating to you is transmitted to a third country or to an international organisation. In this context, you can demand to be informed of the appropriate guarantees according to Art. 46 GDPR in conjunction with the transmission.
2. Right of correction
You have the right to demand the responsible person corrects and/or completes the data insofar as the processed personal data relating to you is incorrect or incomplete. The responsible person must carry out the correction straight away.
3. Right to restrict the processing
You can demand restrictions to the processing of data relating to you under the following conditions:
(1) if you dispute the accuracy of the personal data relating to you for a period which allows the responsible person to check the accuracy of the personal data;
(2) the processing is unlawful and you refuse the deletion of the personal data and instead demand the restriction of the use of the personal data;
(3) the responsible person no longer requires the personal data for the purposes of the processing but you need it to assert, exercise or defend against legal claims, or
(4) if you have lodged an objection against the processing according to Art. 21 (1) GDPR and it has not yet been ascertained as to whether the justified grounds of the responsible person outweigh your grounds.
If the processing of the personal data relating to you has been restricted, this data may only be processed – apart from its storage – with your consent or to assert, exercise or defend against legal claims or to protect the rights of another natural or juridical person or on the grounds of an important public interest of the European Union or a member state.
If the restriction of processing was restricted according to the above requirements, you shall be advised by the responsible person before the restriction is lifted.
4. Right to deletion
a) Duty to delete
You can demand from the responsible person that the personal data relating to you is deleted immediately and the responsible person is obliged to delete the data immediately if one of the following grounds applies:
(1) The personal data relating to you is no longer required for the purposes for which it was collected or otherwise processed.
(2) You revoke your consent, on which the processing according to Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR is based, and there is no other legal basis for the processing.
(3) You object to the processing according to Art. 21 (1) GDPR and there are no superior grounds for the processing, or you object to the processing according to Art. 21 (2) GDPR.
(4) The personal data relating to you has been unlawfully processed.
(5) Deletion of the personal data relating to you is necessary in order to fulfil a legal obligation according to European Union law or the law of the member states, to which the responsible person is subject.
(6) The personal data relating to you has been collected in respect of services offered by an information company according to Art. 8 (1) GDPR.
b) Information on third parties
If the responsible person has disclosed the personal data relating to you and is it required to delete it according to Art. 17 (1) GDPR, taking into account the available technology and implementation costs, it shall take appropriate measures, also of a technical nature, to inform the persons responsible for the data processing, who are processing the personal data, that you as a data subject have demanded that they delete all links to this personal data or to copies or replications of these personal data.
c) Exceptions
There is no right to deletion if the processing is necessary
(1) to exercise the right to freedom of opinion and information;
(2) to fulfil a legal obligation which requires the processing is subject according to the law of the European Union or the member states, to which the responsible person is subject, or to carry out a task, which is in the public interest or in the exercise of official authority, which has been transferred to the responsible person;
(3) on public interest grounds in the area of public health according to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
(4) for archiving purposes in the public interest, for academic or historical research purposes or for statistical purposes according to Art. 89 (1) GDPR, insofar as the right cited under section a) is expected to make the realisation of the goals of this processing impossible or seriously impacts on them, or
(5) to assert, exercise or defend against legal claims.
5. Right of information
If you have asserted the right to correction, deletion or restriction of processing against responsible person, they are required to inform all recipients, to whom the personal data relating to you has been disclosed, of these correction or deletion of data or of the restriction of processing, unless this is found to be impossible or is connected with disproportionate cost.
You have the right to be informed by the responsible person of these recipients.
6. Right to data portability
You have the right to receive the personal data relating to you from the responsible person to whom you provided the information, in an accessible and computer-readable format. In addition, you have the right to transmit this data to another responsible person without hindrance from the responsible person, to whom the personal data was provided, insofar as
(1) the processing is based on consent according to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR or on a contract according to Art. 6 (1) lit. b GDPR and
(2) the processing is performed using automated methods.
To exercise this right, you also have the right to effect the transfer of the personal data relating to you directly from one responsible person to another responsible person, provided this is technically feasible. Freedoms and rights of other persons may not be affected as a result of this.
The right to data portability does not apply to the processing of personal data which is necessary in order to perform a task that is in the public interest or when exercising official authority transferred to the responsible person.
7. Right of refusal
For reasons resulting from your specific situation, you have the right to lodge a refusal at any time against the processing of personal data that relates to you, which is being undertaken on the basis of Art. 6 (1) lit. e or f GDPR; this also applies to a profiling based on these conditions.
The responsible person no longer processes the personal data relating to you unless they can demonstrate essential protected reasons for the processing, which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend against legal claims.
If the personal data relating to you is processed in order to prepare direct advertising, you have the right at any time to object to the processing or the personal data relating to you for these advertising purposes; this also applies to profiling, insofar as it is connected with this direct advertising.
If you object to the processing for purposes of direct advertising, the data relating to you is no longer processed for these purposes.
It is possible for you, in conjunction with the use of services from the information company – Directive 2002/58/EU notwithstanding – to exercise your refusal by automatic means in which technical specifications are used.
8. Right to revoke declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. Revoking the consent does not affect the legality of the processing performed until revocation of the consent.
9. Automated decision in a specific case, including profiling
You have the right not to be subject to a decision based exclusively on an automated processing – including profiling – which has a legal impact on you or which affects you considerably in a similar way. This shall not apply if the decision
(1) is necessary for the conclusion or fulfilment of a contract between you and the person responsible,
(2) is permitted on the basis of legal provisions of the European Union or the member states, to which the person responsible is subject, and these legal provisions include reasonable measures for safeguarding your rights and freedoms as well as your justified interests, or
(3) is made with your express consent.
However, these decisions may not be based on specific categories of personal data according to Art. 9 (1) GDPR, insofar as Art. 9 (2) lit. a or g GDPR does not apply and reasonable measures to protect the rights and freedoms as well as your justified interests have been taken.
With regard to the cases stated in (1) (3), the person responsible shall take reasonable measures to safeguard the rights and freedoms as well as your justified interests, which at least includes the right to effect the intervention of a person representing the person responsible to represent their own perspective and to appeal the decision.
10. Right to appeal to a regulatory authority
Irrespective of any other legal remedy under administrative or court law, you have the right to appeal to a regulatory authority, notably in the member state of your residence, your workplace or the place of the alleged breach, if you believe that the processing of the personal data relating to you breaches the GDPR.
The regulatory authority, to which the appeal is submitted, shall inform the appellant of the state and results of the appeal, including the possibility of court remedy according to Art. 78 GDPR.