PRIVACY POLICY
in accordance with the European Data Protection Basic Regulation (DSGVO) and national data protection laws of the member states of the European Union
1. Name and address of the company responsible
Our company is responsible in terms of the Data Protection Basic Regulation (Datenschutz-Grundverordnung) and other national data protection laws of the member states of the European Union as well as other data protection regulations:
GEEC – Global Experts Energy Consulting GmbH
Am Steinbrück 15, 40589 Düsseldorf, Germany
phone: +49 211 70086970
E-mail: contact(at)ge-ec.de
2. Name and address of the Data Protection Officer (Datenschutzbeauftragter)
Our company has appointed a Data Protection Officer:
Holger Lichtschläger
c./o. GEEC – Global Experts Energy Consulting GmbH
Am Steinbrück 15, 40589 Düsseldorf, Germany
phone: +49 211 70086970
e-mail: dsgvo(at)ge-ec.de
3. General information on data processing
The protection of your personal data is particularly important to us. Therefore, for security reasons and to protect the transmission of confidential content, our Internet sites use SSL encryption.
You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
3.1 Scope of our processing of personal data
As a matter of principle, we process your personal data only to the extent necessary for the provision of functional Internet sites and our contents and services. The processing of your personal data is regularly only carried out with your consent. An exception is made in those cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted or prescribed by legal regulations.
3.2 Legal basis of our processing of personal data
Insofar as we obtain your consent for the processing of personal data, Art. 6 sec. 1 lit. a DSGVO serves as the legal basis.
When processing personal data which is necessary for the performance of a contract to which you are a party, Art. 6 sec. 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations which are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 sec. 1 lit. c DSGVO serves as the legal basis.
In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 sec. 1 lit. d DSGVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or of a third party and if your interests, your fundamental rights and your fundamental freedoms do not outweigh our interests, Art. 6 sec. 1 lit. f DSGVO serves as the legal basis for the processing.
3.3 Data erasure and storage duration
Your personal data will be deleted or blocked as soon as the purpose of the collection is no longer applicable.
Furthermore, data may be stored if this has been required by the European or national legislator in EU regulations, laws or other regulations to which we are subject.
The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further data storage of the data for the conclusion or performance of a contract.
4. Provision of our Internet sites
4.1 Description and scope of our data processing
Whenever you access our Internet pages, our system automatically collects data and information from the computer system of your accessing computer.
The following data is collected by us in this respect:
– Information about the type of browser used and the version of the accessing computer
– Information about the operating system and version of the accessing computer
– Data from your Internet service provider
– IP address of the system used
– Date and time of your access to our Internet pages
– Websites from which your system accesses our website, as well as websites which are accessed by your system via our websites
4.2 Legal basis for data processing
The legal basis for the temporary storage of data in our system and in log files is Art. 6 sec. 1 lit. f DSGVO.
4.3 Purpose of data-collection and – processing
The temporary storage of data including the IP address by our system is necessary in order to enable our websites to be delivered to your computer. For this purpose, your IP address must remain stored for the duration of the session.
An evaluation of the data for marketing purposes does not take place in this context.
Our legitimate interest in data processing is given according to Art. 6 sec. 1 lit. f DSGVO.
4.4 Duration of data storage
The data will be deleted by us as soon as it is no longer necessary for the purpose of its collection.
Collected data, which is required for the provision of our Internet pages, is deleted when you leave our Internet site and end the respective session.
4.5 Possible objections and removal
The collection of data for the provision of our Internet website and the storage of the data in log files is absolutely necessary for the operation of our Internet presence. Consequently, there is no possibility for you to object to the collection of this data.
5. Use of log files
5.1 Description and scope of our data processing
The data automatically collected by our system each time our Internet site is accessed (section 4.1. above) is stored in log files of our system. This data is not stored together with other personal data of yours.
5.2 Legal basis for data processing
The legal basis for the temporary storage of data in our system and in log files is Art. 6 sec. 1 lit. f DSGVO.
5.3 Purpose of data collection and processing
The storage of data including IP address in log files is done to ensure the functionality of our internet sites. In addition, the data is used to optimize our Internet sites and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Our legitimate interest in data processing is given according to Art. 6 sec. 1 lit. f DSGVO.
5.4 Duration of data storage
Your data stored in log files is regularly deleted by us within seven days after leaving our website and after the end of the session.
However, we reserve the right to store the data stored in log files for a longer period of time. In this case, however, your IP address will be deleted or modified so that it is no longer possible to assign the data to you.
5.5 Possibility of objection and removal
The collection of data in log files is absolutely necessary for the operation of our website. Consequently, there is no possibility for you to object to the collection of this data.
6. Use of cookies
6.1 Description and scope of our data processing
Our Internet sites use cookies. Cookies are text files that are stored in your internet browser or stored by your internet browser on your computer system. If you access one of our Internet websites, a cookie may be stored on your operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified the next time you call up our Internet pages.
In detail, the following cookies are used:
6.1.1 Technically necessary cookies
We use technically necessary cookies to make our Internet sites more user-friendly. Some elements of our website require the accessing browser to be able to be identified even after a site change.
The following data is stored and transmitted to us using necessary cookies:
– Log-in information
– Language settings
6.1.2 Analytical cookies
6.1.2.1. Analysis and service cookies
We use our own analysis and service cookies in order to analyse the behaviour of users on our website and to be able to continuously improve our internet service and make it more user-friendly. These cookies are also required for the security of our Internet pages.
With our own analytical cookies, the following data is stored and transmitted to us:
– Entered search terms
– Frequency of page views
– Use of website functions and features
Your data collected via analytical and service cookies is not stored together with other personal data of yours. This data is also pseudonymised by us through technical precautions. It is therefore not possible for us to assign the data to you.
6.1.2.2 Third party analytical and service cookies
In order to improve and secure our Internet service, our website uses tracking and analysis services from third parties, which also use cookies to the extent described below (see point 9 below).
6.1.3 Cookie notice in the opt-in procedure
When you access our website, you will be informed about the use of cookies and your consent to the processing of the personal data used in this context will be obtained. In this context, reference is made both to this data protection declaration and to how you can prevent the storage of cookies in the settings of your browser.
6.2 Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 sec. 1 lit. f DSGVO.
The legal basis for the processing of personal data using analytical cookies is Art. 6 sec. 1 lit. a DSGVO if the user has given his/her consent to this effect.
6.3 Purpose of data collection and processing
6.3.1 Technically necessary cookies
The purpose of using technically necessary cookies is to simplify the use of websites for our users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a site change.
6.3.2 Analysis cookies
The purpose of using the analytical cookies is to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used by our users. This enables us to constantly optimize our Internet offer.
6.4 Duration of data storage
Cookies are stored exclusively on your computer and transmitted by it to our website. You therefore have full control over the use and storage duration of the cookies.
6.5 Possibility of objection and removal
In the settings of your Internet browser you can restrict or deactivate the transmission of cookies. You can delete already stored cookies manually at any time or have them deleted automatically by making the appropriate settings in your Internet browser.
Please note that it is possible that not all functions of our Internet service can be used to their full extent if you deactivate cookies on our website.
7. Internet and e-mail contact
7.1 Description and scope of our data processing
Our Internet site contains a contact form which can be used for electronic contact via the Internet. If you take this opportunity, the data entered in the input form will be transmitted to us and stored.
This data contains mandatory data (necessary data) and additional data (optional data):
In detail, the following data is requested in the contact form:
7.1.1 Mandatory data
– Name
– Company
– E-mail address
– Position
7.1.2. Additional information
At the time of sending the message, the following additional data is also stored:
– IP address of the user
– Date and time of message transmission
For processing the data, your consent will be obtained during the sending process and reference will be made to this data protection declaration.
Alternatively, it is possible to contact us via an e-mail address provided. In this case your personal data transmitted with the e-mail will be stored.
In this context, the data will not be passed on to third parties. The data will be used exclusively for the processing of the requested contact and the subsequent conversation.
7.2 Legal basis for data processing
The legal basis for processing the data via our contact form is your consent as well as Art. 6 sec. 1 lit. a DSGVO.
The legal basis for processing the data transmitted in the course of sending an e-mail is Art. 6 sec. 1 lit. f DSGVO. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing of the data is Art. 6 sec. 1 lit. b DSGVO.
7.3 Purpose of data collection and processing
The processing of personal data from the contact form or a sent e-mail serves exclusively to process the establishment of contact and the subsequent conversation.
Other personal data collected and processed when using the contact form is used exclusively to prevent misuse of the contact form and to optimize the security of our information technology systems.
Our legitimate interest in processing the data results from your request to contact us.
7.4 Duration of data storage
The data collected from you via our contact form or via an e-mail sent to us will be deleted as soon as they are no longer required for the purpose of their collection.
It is no longer necessary to keep the data once the conversation with you is over. The conversation is finished when it can be concluded from the circumstances that the matter in question has been finally clarified between us.
The personal data additionally collected at the time of sending the message via our contact form will be deleted after a period of seven days after the end of the conversation with you at the latest.
7.5 Possibility of objection and removal
You have the possibility to revoke your consent to the processing of your personal data at any time. If you have contacted us by e-mail, you can object to the storage of your personal data at any time.
The exercise of the right of revocation or objection should clearly identify you as the person and contain the following minimum information:
– Name
– First name
– Company
– E-mail address
Your revocation or objection should be formulated unambiguously. You will find formulation suggestions below:
Example of a revocation of the consent to the processing of personal data (contact form):
Dear Sir or Madam,
I hereby revoke my consent to the processing of my personal data provided with your Internet contact form for
Jane Doe
Sample-Company
Jane.doe@sample-company.de
and request their deletion from your systems.
With kind regards
Jane Doe
Example of an objection to the processing of personal data (e-mail):
Dear Sir or Madam,
I hereby object to the processing of my personal data provided by e-mail to
John Doe
Sample company
John.doe@sample-company.de
and ask for their deletion from your systems.
With kind regards
John Doe
Your revocation or objection can be sent to us (see point 1. above) or to our data protection officer (see point 2. above) either by post or by e-mail.
Upon receipt of your revocation or your objection, all personal data stored in the course of the contact will be deleted immediately, subject to our further storage obligations (see point 3.3. above).
Please bear in mind that after your revocation or your objection, the conversation cannot be continued by us.
8. Social media plug-ins
If applicable our websites offer you the possibility to use plugins of the following social media providers:
– YouTube
– Google+
Our Internet sites do not permit any automated routines or mechanisms with which your data or information is automatically transmitted to the social media providers when you visit our Internet sites.
If you click a button of a social media provider on our Internet site, you use an external link and will leave our Internet site. Hereby you change to the data protection responsibility of the linked website of the social media provider, on which we have no influence.
9. Tracking and analysis services
Our Internet pages use the following third-party tracking and analysis services to improve and secure our Internet offering:
9.1 Google Analytics
Google Analytics is a web analysis service for determining and evaluating the use of our Internet sites. The operator of the service is
Google Inc,
1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
9.1.1 Details regarding the data processing company
The data collection and processing of Google Analytics on our Internet pages is carried out by
Google Ireland Ltd,
Google Building Gordon House, 4th Barrow Street Dublin, D04 E5W5, Ireland.
In addition, the data is also used to a limited extent by the provider of the analysis service
Google Inc.,
1600 Amphitheatre Parkway Mountain View, CA 94043, USA,
and its parent company
Alphabet Inc.,
1600 Amphitheatre Parkway Mountain View, CA 94043, USA,
processed (see point 9.1.3 below).
9.1.2 Information on technologies used
Google Analytics uses cookies (see 6. above), which enable an analysis of your visit to our website.
However, our Internet pages do not allow the use of pixel tags in the “Universal Analytics” mode, which would allow user activities to be tracked across multiple devices for marketing and advertising purposes.
9.1.3 Description and scope of data processing
Google Analytics is used by us on the one hand to optimize our websites and on the other hand to analyze the cost-benefit of our internet presence.
Google Analytics automatically installs a cookie on your computer system with every visit to our website.
The following data is collected by Google Analytics:
– Information about the type of browser used and the version of the accessing computer
– Information about the operating system and version of the accessing computer
– Language settings
– Date and time of your access to our Internet sites
– IP address of the system used
– Location information of the system in use
– Websites from which your system accesses our website, as well as websites which are accessed by your system via our websites
– individual user behavior such as calling up our Internet pages (so-called “click paths”), time spent on the Internet pages, downloads, widget interactions, etc.
The data collected by Google Analytics is collected via a server of Google Ireland Ltd. within the European Union, temporarily stored and usually transferred to a server of Google Inc. in the USA for final storage.
The data collected by Google Analytics may also be transferred to third parties where required by law or where third parties process the data on behalf of Google Ireland Ltd., Google Inc. or Alphabet Inc.
Our websites use Google Analytics with a preset IP anonymization, so that your IP address within member states of the European Union (EU) or in other states party to the Agreement on the European Economic Area (EEA) is shortened before final storage. Only in exceptional cases will the full IP address be transferred to a server of Google Inc. in the USA and shortened there. This ensures that your IP address cannot be merged with other data concerning you and cannot be linked to you.
9.1.4 Legal basis of data processing
The legal basis for the processing of the data by Google Analytics is Art. 6 sec. 1 lit. a DSGVO (see 6.1.3. above).
9.1.5. Purpose of data collection and processing
Google Analytics collects data in order to evaluate your use of our website, to create reports on website activities and to provide us with additional services related to the use of the website and the Internet.
9.1.6 Duration of data storage
The data collected by us via Google Analytics is deleted after 26 months at the latest.
9.1.7 Opposition and removal options
You can restrict, deactivate or delete the cookies used by Google Analytics at any time (see above point 6.5.).
Please note that it is possible that not all functions of our website can be used to their full extent if you deactivate cookies for Google Analytics.
9.1.8 Other information
Additional information about privacy and cookie usage for the Google Analytics web analytics service can be found at
Data protection: https://support.google.com/analytics/answer/6004245?hl=de
Cookie policy: https://policies.google.com/technologies/cookies?hl=de
9.2 Google reCAPTCHA
Google reCAPTCHA is a tracking and web analysis service to prevent the use and impairment of our Internet pages by automated programs. The operator of the service is
Google Ireland Ltd,
Google Building Gordon House, 4th Barrow Street Dublin, D04 E5W5, Ireland.
9.2.1 Details regarding the data processing company
The data collection of Google reCAPTCHA on our websites is carried out by
Google Ireland Ltd,
Google Building Gordon House, 4th Barrow Street Dublin, D04 E5W5, Ireland.
The data processing is carried out by
Alphabet Inc.,
1600 Amphitheatre Parkway Mountain View, CA 94043, USA,
(see point 9.2.3 below).
9.2.2. information on the technologies used
Google reCAPTCHA uses cookies (see point 6 above), which enable an analysis of the data entries on our website.
9.2.3 Description and scope of data processing
Google reCAPTCHA is used by us exclusively to secure our Internet pages.
Google reCAPTCHA automatically installs a cookie on your computer system with every visit to our website.
The following data is collected by Google reCAPTCHA:
– Information about the type of browser used including browser plugins and the version of the accessing computer
– Information about the operating system and version of the accessing computer
– Language settings
– IP address of the system used
– Websites from which your system accesses our website, as well as websites which are accessed by your system via our internet sites.
– Data input on our Internet pages such as mouse movements, click behavior, keyboard entries, etc.
– Individual user behaviour such as calling up our Internet pages (so-called “click paths”), time spent on the Internet pages, downloads, widget interactions, etc.
The reCAPTCHA data analyses begin when one of our Internet pages is accessed and take place completely in the background, without you being notified of the analysis.
The data collected by Google reCAPTCHA is collected via a server of Google Ireland Ltd. within the European Union, temporarily stored and usually transferred to a server of Alphabet Inc. in the USA for final processing and storage.
The IP address transmitted by your browser as part of Google reCAPTCHA is not merged with other data collected by us or third parties (Google Ireland Inc. or Alphabet Inc.). This ensures that your IP address cannot be linked to you via other data concerning you.
9.2.4 Legal basis of data processing
Insofar as you have given your consent to us for processing of personal data, Art. 6 sec. 1 lit. a DSGVO serves as the legal basis (see 6.1.3. above).
If you have not given your consent, the legal basis for the processing of data by Google reCAPTCHA is Art. 6 sec. 1 lit. f DSGVO. We have a legitimate interest in protecting our Internet pages from abusive and automated spying of our contents as well as from abusive and automated data overload of our systems (SPAM).
9.2.5 Purpose of data collection and processing
Google reCAPTCHA collects the data to ensure that people can use our website and to exclude automated programs from use.
9.2.6. Duration of data storage
The data will be deleted by us as soon as they are no longer necessary for the purpose of their collection. This is the case at the latest when you leave our website and end the respective session.
9.2.7 Objection and removal options
You may restrict, disable or delete the cookies used by Google reCAPTCHA at any time (see section 6.5 above).
Please note that if you deactivate cookies for Google reCAPTCHA, our website can no longer be used.
9.2.8. Other information
Additional information about privacy and cookie usage for the Google reCAPTCHA web analytics service can be found at
Data protection: https://policies.google.com/privacy?hl=de
Cookie policy: https://policies.google.com/technologies/cookies?hl=de
10. Your legal rights as a person affected
If your personal data is processed, you are a person affected within the meaning of the DSGVO. In this case, you are entitled to the following rights against us as the party responsible (see point 1. above):
10.1 Disclosure right
You can request confirmation from us as to whether personal data concerning you is being processed by us.
If such processing is carried out, you can request information from us about the following:
– the purposes for which your personal data is processed
– the categories of your personal data that is processed by us
– the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed
– the planned duration of the storage of personal data related to you or, if specific details cannot be given, criteria for determining the duration of storage
– the existence of a right of rectification or erasure of personal data concerning you, a right to have the processing limited by the controller or a right to object to such processing
– the existence of a right of appeal to a regulatory authority
– all available information about the origin of the data, if the personal data is not collected from you as a person concerned
– the existence of automated decision-making, including profiling in accordance with Art. 22 (1) and (4) DPA and – at least in these cases – meaningful information on the logic involved and the scope and intended consequences of such processing for the data subject
You have the right to request information as to whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 DSGVO in connection with the transfer.
10.2 Right of correction
You have the right to obtain from us the correction and/or completion of your processed personal data, if such data concerning you is incorrect or incomplete. We shall make the correction without delay.
10.3 Right to limit processing
Under the following conditions, you may request us to restrict the processing of personal data concerning you:
– if you dispute the accuracy of the personal data concerning you for a period of time and allow us to verify the accuracy of the personal data
– the processing of your personal data by us is unlawful and you object to the deletion of such data and instead request the restriction of the use of such data
– we no longer need your personal data for the purposes of processing, but you still need it to assert, exercise or defend legal claims
– if you have lodged an objection to the processing of your personal data in accordance with Art. 21 sec. 1 DSGVO and it has not yet been established whether our legitimate reasons for processing your data outweigh your reasons.
If the processing of personal data concerning you has been restricted, such data – apart from being stored – may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.
If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
10.4 Right of deletion
You can request from us at any time that we immediately delete the personal data concerning you. We will comply with such a request immediately under the following conditions:
10.4.1 General obligation to delete
Under the following conditions we are obliged to delete the personal data concerning you immediately:
– The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
– You revoke your consent on which the processing was based pursuant to Art. 6 sec. 1 lit. a or Art. 9 sec. 2 lit. a DSGVO and there is no other legal basis for the processing.
– You object to the processing pursuant to Art. 21 sec. 1 DSGVO and there are no overriding legitimate reasons for the processing.
– You object to the processing in accordance with Art. 21 (2) DSGVO.
– The personal data concerning you has been processed unlawfully.
– The deletion of personal data concerning you is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
– The personal data concerning you have been collected in relation to information society services provided in accordance with Article 8(1) of the DSGVO.
10.4.2 Information to third parties
If we have made the personal data concerning you public and are obliged to delete them in accordance with Art. 17 sec. 1 DSGVO, we will take appropriate technical and other measures, taking into account the available technologies and the implementation costs, to inform third parties responsible for data processing who process your personal data that you, as a data subject, have requested the deletion of all links to these personal data or of copies or replications of these personal data.
10.4.3 Exceptions to the obligation to delete
The right to have your personal data deleted does not exist if further processing is necessary for the following reasons:
– to exercise the right to freedom of expression and information
– to comply with a legal obligation imposed on the controller under Union or national law to which the controller is subject or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller,
– for reasons of public interest in the field of public health pursuant to Art. 9 sec. 2 lit. h and i and Art. 9 sec. 3 DSGVO
– for archival, scientific or historical research purposes in the public interest or for statistical purposes pursuant to Art. 89 sec. 1 DSGVO, insofar as the law referred to in section a) is likely to render impossible or seriously prejudice the attainment of the objectives of such processing
– to assert, exercise or defend legal claims
10.5 Right to information and education
If you have asserted the right to correct, delete or limit the processing of your personal data against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this correction, limitation or deletion of the data, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed of the recipients of your data.
10.6 Right to data transferability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person in charge without hindrance by us, provided
– the processing is based on a consent pursuant to Art. 6 sec. 1 letter a DSGVO or Art. 9 sec. 2 letter a DSGVO or on a contract pursuant to Art. 6 sec. 1 letter b DSGVO and
– the processing is carried out using automated procedures.
In exercising this right, you also have the right to obtain that the personal data concerning you be communicated directly by us to another responsible party, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data transferability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
10.7 Right of objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, which is carried out on the basis of Art. 6, secgraph 1, letters e or f of the DPA. This also applies to profiling based on these provisions.
We will then no longer process the personal data concerning you unless we can prove compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. This also applies to profiling, insofar as it is related to such direct marketing.
If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for those purposes.
10.8 Right to revoke the data protection declaration of consent
You have the right to revoke your data protection consent at any time. Revocation of consent does not affect the legality of our processing, which was carried out on the basis of the consent until revocation.
10.9 Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effect on you or which significantly affects you in a similar way. This shall not apply if the decision
– is necessary for the conclusion or fulfilment of a contract between you and the person responsible,
– is authorized by Union or national legislation to which the person responsible is subject and that legislation provides for appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
– is performed with your explicit consent.
However, these decisions may not be based on special categories of personal data in accordance with Art. 9 sec. 1 DSGVO, unless Art. 9 sec. 2 lit. a or g DSGVO applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
With regard to the above-mentioned cases, we will take appropriate measures to protect your rights and freedoms and your legitimate interests, including at least
– the right to obtain the intervention of a person on our part,
– on presentation of the own point of view and
– on appeal against the decision.
10.10. Right to appeal to a regulatory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a regulatory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you is in breach of the DSGVO.
The supervisory authority to which the complaint has been submitted will inform the complainant of the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 DSGVO.