Privacy Policy

We take the protection of your data seriously and strive to collect and store as little data as possible. Nevertheless, a certain amount of storage and analysis of user data is necessary in order to guarantee and improve the operation of this website. In principle, this website can be used without having to provide any personal data. There is also no assignment of data to a specific person - unless you tell us your name, for example in an email, using one of our forms or when placing an order.


If you use one of the services offered on this website or buy goods, this also regularly requires the collection, processing and storage of personal data, such as your name and address , Your email address or telephone number. This collection, processing and storage takes place either on the basis of your express consent previously obtained or a corresponding legal approval and on the basis of the provisions of the European General Data Protection Regulation and the German Federal Data Protection Act.


We would like to inform you here about the type, scope and purpose of the data collected, processed, stored and used by us via this website, as well as about your rights in this context.


We use SSL transport encryption on this page. This serves, among other things, to protect confidential content, for example in the case of inquiries to us. You can see that the connection is actually encrypted in the address line of your browser, which always begins with "https://" and confirms the existing transport encryption with a green lock symbol.

1. Name and address of the person responsible for processing

The person responsible within the meaning of the General Data Protection Regulation and the other data protection regulations is:


ELFERSHOP GmbH
Hauptstrasse 97, 72667 Schlaitdorf, Germany
info@elfershop.de

2. Definitions

Data protection law knows special terms that we also use in this data protection declaration in accordance with the legal definitions of the European General Data Protection Regulation. Therefore, the expression in this data protection declaration

  • „personal data“
    all information relating to an identified or identifiable natural person ("data subject “) Refer;
  • „data subject“
    every identified or identifiable natural person whose personal data is processed; A natural person is regarded as identifiable who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special features that Express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person;
  • „Processing“
    any process carried out with or without the help of automated processes or any such series of processes in connection with personal data Data such as collecting, recording, organizing, arranging, storing, adapting or changing, reading, querying, using, disclosing through transmission, dissemination or any other form of provision, comparison or the Association, restriction, deletion or destruction;
  • „Restriction of processing“
    the marking of stored personal data with the aim of restricting their future processing; < / li>
  • „Profiling“
    any type of automated processing of personal data that consists of using this personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts or change of location analyze or predict this natural person; As a company committed to data protection, we do not use any form of profiling;
  • „pseudonymization“
    the processing of personal data in such a way that the personal data cannot be processed without additional information can be assigned to a specific data subject, provided that this additional information is stored separately and is subject to technical and organizational measures that ensure that the personal data is not a assigned to identified or identifiable natural persons;
  • „file system“
    any structured collection of personal data that is accessible according to certain criteria, regardless of whether this collection is managed centrally, decentrally or according to functional or geographical criteria;
  • „controller“ (or: „Responsible for processing“)
    the natural or legal person, authority , Institution or other body which alone or jointly with others decides on the purposes and means of processing personal data; If the purposes and means of this processing are specified by Union law or the law of the member states, the person responsible can or the specific criteria for its nomination are provided for in accordance with Union law or the law of the Member States;
  • „Processor“
    a natural or legal person, authority, agency or other body that stores personal data in Order of the person responsible processed;
  • „Recipient“
    a natural or legal person, authority, institution or other body to whom personal data is disclosed regardless of whether it is a third party or not. Authorities that may receive personal data as part of a specific investigation according to Union law or the law of the member states are not considered recipients; the Processing of this data by the named authorities takes place in accordance with the applicable data protection regulations in accordance with the purposes of processing;
  • „Third party“
    a natural or legal person, authority, institution or other body, apart from the person concerned, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor;
  • „Consent" of the person concerne“
    every voluntary declaration of intent given in an informed manner and unambiguously for the specific case in the form of a declaration or other unequivocal affirmative act with which the data subject indicates that he or she agrees to the processing of the personal data concerning him;
  • „Violation of the protection of personal data“
    a breach of security leading to destruction, loss or Change, whether unintentional or unlawful, or leads to unauthorized disclosure of or unauthorized access to personal data that has been transmitted, stored or otherwise processed;
  • „cross-border processing“
    processing of personal data that takes place in the course of the activities of branches of a controller or a Processor in the Union takes place in more than one Member State if the controller or processor is established in more than one Member State, or the processing of personal data takes place in the context of the activities of a individual establishment of a controller or a processor takes place in the Union, which, however, has or may have significant effects on data subjects in more than one Member State;
  • „relevant and reasoned objection“
    an objection with regard to whether there is a violation of this regulation or not or whether the intended action against the controller or the processor is in accordance with this Regulation, whereby this objection clearly shows the scope of the risks posed by the draft decision in relation to the fundamental rights and freedoms of the data subjects and, where applicable, the free flow of personal data within the Union.

3. Legal basis for data processing

We process personal data on the basis of the provisions of the European General Data Protection Regulation and the German Federal Data Protection Act:

  • For processing operations for which we obtain consent for a specific processing purpose, processing is carried out on the basis of Article 6 Paragraph 1 Letter a of the General Data Protection Regulation.
  • Insofar as the processing of personal data for the fulfillment of a contract to which the data subject is a party (such as the delivery of goods or the provision of other services or consideration) or to carry out pre-contractual measures (e.g. for inquiries about our products or services), the processing is based on Article 6 Paragraph 1 Letter b of the General Data Protection Regulation.
  • Insofar as the processing of personal data is necessary due to a legal obligation applicable to us, such as to fulfill tax obligations or commercial retention requirements, the processing is carried out on the basis of Article 6 Paragraph 1 letter c of the General Data Protection Regulation.
  • Insofar as the processing of personal data should exceptionally be necessary to protect the vital interests of the data subject or another natural person, the processing would be based on Article 6 Paragraph 1 letter d of the General Data Protection Regulation.
  • The processing of personal data that is necessary to safeguard a legitimate interest of our company or a third party is carried out on the basis of Article 6 Paragraph 1 Letter f of the General Data Protection Regulation unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail. One such legitimate interest is the conduct of our business for the benefit of all our employees and our shareholders.


The provision of personal data may be required for legal reasons (such as commercial or tax law) or for reasons of contract processing. If such data (e.g. information about a contractual partner) is not made available to us for processing, we cannot conclude a corresponding contract.

4. Log files

On our internet server, like on other web servers, a log file is kept. This log file stores records in which

  1. the IP address with which you are surfing the Internet and the Internet service provider you are using
  2. Date and time of each access to our website,
  3. the exact URL of the individual webpage you are visiting
  4. the data you requested from the server,
  5. general information about the web browser you use to access the website (in particular the browser type and version) and operating system as well as
  6. partly the website from which you came to our website (the so-called "referrer")


This information is used by us

  • for the correct delivery of the respective website
  • or statistical purposes,
  • to further improve our website and to optimize the advertising on it,
  • to permanently guarantee the functionality and integrity of our information technology systems, including the defense against attacks in the event of attacks on our information technology systems and
  • in the event of an attack on our information technology systems to provide the necessary information to the law enforcement authorities


required and used.


We collect this data anonymously and store it separately from all personal data given to us by a data subject.

5. Cookies and usage profiles

We can

  • to provide user-friendly services that would not be possible without the cookie setting,
  • as part of our web shop to remember the items that you have placed in the (virtual) shopping cart,
  • as part of a login you have made as a user,
  • for advertising purposes, for market research and
  • to improve our services and internet offers


Evaluate usage profiles under a pseudonym, but only if you have not made use of your legal right to object to this use of your
data. Some of our services require that we use so-called cookies.


Cookies are small amounts of data (text files) that your internet browser saves on your computer. Information about your visit to our website can be stored in cookies, which enables us to recognize your browser and to distinguish it from the browsers of other data subjects.


Most browsers are set to accept cookies by default. However, you can reconfigure your browser at any time so that it rejects cookies or asks you to confirm beforehand. If you reject cookies, however, this may mean that not all offers and functions of this website will work properly or are usable for you.


Further details on the use of cookies on this website - including the existing opt-out options - can be found in this
privacy policy in the sections

  • for internal visitor statistics and
  • for visitor tracking through advertising networks.

6. Internal visitor statistics

This website uses "Google Analytics" for statistical analysis of visitor access. This is a web analysis service offered by Google Inc. Google Inc. acts as a processor on our behalf. The data collection and processing takes place via servers operated by Google Inc, which are usually not located in the European Union but in the USA. Here will be Pseudonymous usage profiles created for visitors to our website.


We use the web analysis service "Google Analytics" with activated "IP anonymization". The IP address of the visitors to our website is shortened here. This shortening of the IP address is not done by us, but by Google Inc.


The company Google Inc. uses cookies for "Google Analytics", the information of which is read out by Google, transferred to servers in the USA and processed and stored there .


Important for you: You can generally prevent the installation of cookies by setting your browser software accordingly. Alternatively, you can prevent Google from collecting, processing and storing the data generated by the cookie by clicking https://tools.google.com/dlpage/gaoptout?hl=de Download and install the available browser plug-in.


You can read the data protection declaration of Google Inc. relevant for the "Google Analytics" service at https://support.google.com/analytics/answer/6004245?hl=de see.

7. eMail and contact forms

If you send us an e-mail or contact us via a contact form, the personal data voluntarily transmitted to us will be automatically saved for the purpose of processing or contacting us processed. If you have given us this, this includes in particular the name you have given, your address or e-mail address, your telephone number and other information you have voluntarily provided. At If you contact us via a form provided on this website, the IP address you used for this purpose will also be saved. As a matter of principle, we only use the personal data arising from this to the extent necessary to process your inquiries and orders. This data will not be passed on to third parties under any circumstances, unless we are legally obliged to do so.

8. Registration

This website allows you to register. This registration takes place by providing personal data, which we request in the input form provided for this purpose. In addition, the IP address used by you as well as the date and time of sending the registration form are recorded. This personal data is used by us for internal use, for the purpose of communicating with you, for processing existing or future contractual relationships (e.g. orders), to protect our technical system and to prevent misuse and, if necessary, to pass them on to one or more contract processors (such as postal, parcel and payment service providers).


As a registered person, you can change or delete your personal data provided during registration at any time, provided that there are no legal regulations - such as statutory retention requirements - to the contrary. You can also receive information from us at any time about which personal data is stored about you as the person concerned.

9. Newsletter

If you subscribe to a newsletter offered by us on this website, you must send us certain personal data, in particular your e-mail address, using the corresponding input form.


When registering for the newsletter, for legal reasons we use the "double opt-in" procedure by means of an automatically processed confirmation email to the email address you provided. Mail address. In this way, we check whether the owner of the e-mail address you provided has actually authorized the receipt of the newsletter as the person concerned.


We use the personal data collected during the newsletter registration exclusively

  • for sending the newsletter and
  • for sending information and inquiries by e-mail that are required or required for the operation or further development of the newsletter service.


A newsletter subscription can be canceled at any time, and the consent to the storage of personal data can be revoked at any time. This termination or revocation can be made via the link contained in every newsletter or via any other communication to the person responsible for processing. In the event of both termination and revocation, we will process the respective personal data, unless this is legal oppose requirements, delete them and stop sending the newsletter to the person concerned.

In addition to the information transmitted via the input form, we also save the date and time of your registration as well as the IP address you used. This is done for the purpose of our own legal protection as well as for the purpose of protecting our technical systems against misuse.

The newsletters we send contain tracking pixels, that is, miniature graphics embedded in the e-mail, the call of which is recorded in a log file has been. In the same way, a recording and evaluation of the access to links contained in the newsletter is carried out. The storage and processing of this data takes place exclusively for statistical purposes Evaluation of the newsletter dispatch, to optimize the newsletter dispatch and to better adapt the newsletter content to the respective subscriber.

10. Online advertising

  1. Use of Google Adwords Conversion
    1. We use the offer of Google Adwords to draw attention to our attractive offers with the help of advertising material (so-called Google Adwords) on external websites. In relation to the data from the advertising campaigns, we can determine how successful the individual advertising measures are. We are interested in showing you advertisements that are of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
    2. These advertising media are delivered by Google via so-called "ad servers". We use ad server cookies for this purpose, through which certain parameters for measuring success, such as the insertion of advertisements or clicks by the user, can be measured. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The analysis values ​​for this cookie are usually the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user is not would like to be addressed more).
    3. These cookies enable Google to recognize your internet browser. If a user visits certain pages of the website of an Adwords customer and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. This means that cookies cannot be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify the users on the basis of this information.
    4. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data that is collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating AdWords Conversion, Google receives the information that you are visiting the corresponding part of our website have accessed or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and save it.
    5. You can prevent participation in this tracking process in various ways: a) By setting your browser software accordingly; in particular, by suppressing third-party cookies You will not receive any third party advertisements; b) by deactivating the cookies for conversion tracking by setting your browser so that cookies from the domain “www.googleadservices.com” are blocked, https://www.google.de/settings/ads , where this setting will be deleted if you delete your cookies; c) by deactivating the interest-based advertisements of the providers who are part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices , although this setting will be deleted if you delete your cookies; d) by permanent deactivation in your Firefox, Internet Explorer or Google Chrome browsers under the link https://www.google.com/settings/ads/plugin . We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
    6. The legal basis for the processing of your data is Art. 6 Para. 1 S. 1 lit. f GDPR. Further information on data protection at Google can be found here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html . Alternatively, you can visit the Network Advertising Initiative (NAI) website at visit https://www.networkadvertising.org . Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .
  2. Remarketing
    In addition to Adwords Conversion, we use the Google Remarketing application. This is a process that we would like to use to address you again. This application allows you to see our advertisements when you continue to use the internet after visiting our website. This is done by means of cookies stored in your browser, via which your usage behavior when you visit different Websites are recorded and evaluated by Google. In this way, Google can determine your previous visit to our website. A merging of the data collected in the context of remarketing with your personal data, which may be stored by Google, does not take place by Google according to its own statements. In particular, according to Google, pseudonymization is used in remarketing.
  3. DoubleClick by Google
    1. This website continues to use the online marketing tool DoubleClick by Google. DoubleClick uses cookies to show ads that are relevant to users, to improve reports on campaign performance or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are shown in which browser and can thus prevent them from being displayed multiple times. In addition, DoubleClick can use cookie IDs to record what are known as conversions that relate to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information.
    2. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data that is collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and save it.
    3. You can prevent participation in this tracking process in various ways: a) By setting your browser software accordingly; in particular, by suppressing third-party cookies You will not receive any third party advertisements; b) by deactivating the cookies for conversion tracking by setting your browser so that cookies from the domain “www.googleadservices.com” are blocked, https://www.google.de/settings/ads , where this setting will be deleted if you delete your cookies; c) by deactivating the interest-based advertisements of the providers who are part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices , although this setting will be deleted if you delete your cookies; d) by permanent deactivation in your Firefox, Internet Explorer or Google Chrome browsers under the link https://www.google.com/settings/ads/plugin . We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
    4. The legal basis for the processing of your data is Art. 6 Para. 1 S. 1 lit. f GDPR. Further information about DoubleClick by Google is available at https://www.google.de/ doubleclick and https://support.google.com/adsense/answer/2839090 , as well as general data protection at Google: https://www.google.de/intl/de/policies/privacy . Alternatively you can visit the website of the Network Advertising Initiative (NAI) at http: //www.networkadvertising. org visit. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
  4. Facebook Custom Audiences
    1. The website also uses the remarketing function “Custom Audiences” from Facebook Inc. (“Facebook”). This allows users of the website to be shown interest-related advertisements (“Facebook Ads”) when visiting the social network Facebook or other websites that also use the process. We are interested in showing you advertisements that are of interest to you in order to make our website more interesting for you.
    2. Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data that is collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you are visiting the corresponding website of our Have accessed our website or have clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and save your IP address and other identification features.
    3. The deactivation of the "Facebook Custom Audiences" function is [here and] for logged-in users under https://www.facebook.com/settings/?tab=ads possible.
    4. The legal basis for the processing of your data is Art. 6 Para. 1 S. 1 lit. f GDPR. Further information on data processing by Facebook is available at https://www.facebook.com/about/privacy.

11. Integration of Google customer reviews

The Google Customer Reviews widget is integrated on this website to display the Google customer reviews and any reviews collected.


This serves to safeguard our legitimate interests, which predominate within the scope of a weighing of interests, in an optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. The widget and the services advertised with it are an offer from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.


When the widget is called up, the web server automatically saves a so-called server log file that contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting Provider (access data) and documents the retrieval. In addition, the order number, email address, billing country and identification number of the purchased products are transmitted when orders are placed.


You can find the privacy policy at https://www.google.com/policies/privacy/ . At https://adssettings.google.com/authenticated you can find the Object to data processing.

12. Google Maps Maps

This website uses the map service "Google Maps" of the provider Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The processed data can include, in particular, location data and IP addresses of the users, which, however, are not collected without their consent (within the framework of the settings of their mobile devices and browser). The data can be processed in the USA. You can find the data protection declaration under https://www.google.com/policies/privacy/ . At https://adssettings.google.com/ you can authenticated the data processing contradict.

13. Youtube videos

This website uses "YouTube" videos from the provider Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We use the extended data protection mode "nocookie". You can find the data protection declaration at https://www.google.com/policies/privacy/ . Under https://adssettings.google.com/authenticated you can object to the data processing.

14. Data processing for job applications

If personal data is transmitted to us - for example via a corresponding application form on the website or by email - as part of job applications for the purpose of processing the application process, the following also applies: < / p>


In the event that an employment contract is concluded with the job applicant, we will save the personal data transmitted to us for the purpose of processing the employment relationship.


Otherwise we will automatically delete the personal data transmitted to us two months after the rejection, provided that there are no other legitimate interests of the person responsible for processing. Such a legitimate interest that opposes the deletion can be a documentation and evidence obligation due to a violation of the General Equal Treatment Act or a legal defense against us filed or threatened legal proceedings of the job applicant.

15. Duration of storage, deletion and blocking of personal data

Personal data of the data subjects are processed or stored by the person responsible for the processing, subject to other legal provisions, only for the period of time necessary to achieve the storage purpose. Another determining criterion for the duration of the storage of personal data is the respective statutory retention period.


After the storage purposes have ceased to exist and existing statutory storage periods have expired, the person responsible for processing will process the personal data in accordance with the statutory provisions and requirements even without a corresponding request from the person concerned blocked or deleted.

16. Your rights as a data subject

In the following we describe the rights that every person affected by the processing of personal data has against the person responsible for the processing. If you would like to exercise one of these rights, you can contact the person responsible for processing at any time. We recommend that you inform us of your request either in writing or by email at elfershop.de.


Every person affected by the processing of personal data has to contact the person responsible for the processing

  1. the right to confirmation,
    i.e. the right to request confirmation from the person responsible as to whether personal data relating to you is being processed;
  2. the right to information,
    i.e. in the case of the processing of personal data, a right to information about this personal data and to the following information:
    1. the processing purposes;
    2. the categories of personal data that are processed;
    3. the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or international organizations;
    4. if possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria for determining this duration;
    5. the existence of a right to correction or deletion of personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing;
    6. the right to lodge a complaint with a supervisory authority;
    7. if the personal data are not collected from the data subject, all available information about the origin of the data;
    8. the existence of automated decision-making including profiling in accordance with Article 22 Paragraphs 1 and 4 of the General Data Protection Regulation and - at least in these cases - meaningful information about the logic involved and the scope and the intended effects of such processing for the data subject. (Note: We do not use profiling or any other methods of automated decision-making.)
  3. the right to information,
    in the case of the transfer of personal data to a third country or to an international organization Right to be informed about the appropriate guarantees in accordance with Article 46 of the General Data Protection Regulation in connection with the transfer;
  4. the right to provide
    a copy of the personal data that is the subject of the processing. For all further copies requested by the person concerned, the person responsible can demand an appropriate fee based on the administrative costs. If the data subject submits the application electronically, the information is available in a common electronic format put, unless otherwise stated. This right to receive a copy must not affect the rights and freedoms of any other person;
  5. the right to correction,
    i.e. the right to request the person responsible to correct any incorrect personal data concerning you without delay. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data - including by means of a supplementary declaration;
  6. the right to deletion ("right to be forgotten"),
    i.e. the right to request the person responsible to delete personal data concerning them immediately, and the person responsible is obliged to delete personal data immediately if one of the following reasons applies:
    1. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
    2. The data subject withdraws his or her consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) of the General Data Protection Regulation, and it there is no other legal basis for the processing.
    3. According to Article 21 paragraph 1 of the General Data Protection Regulation objection to the processing and there are no overriding legitimate reasons for the processing, or the person concerned submits according to Article 21 paragraph 2 of the General Data Protection Regulation against the processing.
    4. The personal data was processed unlawfully.
    5. The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject.
    6. The personal data was collected in relation to information society services offered in accordance with Article 8 Paragraph 1 .
      If the person responsible has made the personal data public and is obliged to delete them in accordance with Paragraph 1, he shall do so Taking into account the available technology and the implementation costs, appropriate measures, including technical measures, to inform those responsible for data processing who process the personal data that a data subject has requested the deletion of all links to this personal data or has requested copies or replications of this personal data. This does not apply if the processing is necessary
    7. to exercise the right to freedom of expression and information;
    8. to fulfill a legal obligation that requires processing under the law of the Union or of the member states to which the person responsible is subject, or to perform a task that is public Interest lies or takes place in the exercise of official authority that has been transferred to the person responsible;
    9. for reasons of public interest in the area of ​​public health in accordance with Article 9 paragraph 2 letters h and i and Article 9 (3) of the General Data Protection Regulation;
    10. for archival purposes in the public interest, scientific or historical research purposes or for statistical purposes according to Article 89 paragraph 1 of the General Data Protection Regulation, insofar as the aforementioned right is likely to make the achievement of the objectives of this processing impossible or seriously impair it, or
    11. for the establishment, exercise or defense of legal claims.
  7. the right to restrict processing,
    i.e. the right of a person affected by the processing of personal data to require the person responsible to delete personal data concerning them immediately, and the person responsible is obliged to delete personal data immediately if one of the following reasons applies:
    1. the accuracy of the personal data is contested by the data subject, for a period that enables the person responsible to check the accuracy of the personal data.
    2. the processing is unlawful and the data subject refuses to delete the personal data and instead requests the restriction of the use of the personal data;
    3. the person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them for the establishment, exercise or defense of legal claims, or
    4. the person concerned objects to the processing according to Article 21 paragraph 1 of the General Data Protection Regulation, as long as it has not yet been determined whether the legitimate reasons of the person responsible outweigh those of the person concerned. </li >

    If the processing has been restricted according to this, these personal data - apart from their storage - may only be used with the consent of the data subject or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons an important public interest of the Union or of a Member State. A data subject who has obtained a restriction on processing will be informed by the person responsible before the restriction is lifted.
  8. The right to data portability,
    i.e. the right of the person affected by the processing of personal data to receive the personal data concerning them, which they have provided to a person responsible, in a structured, common and machine-readable format, and they have the right to transfer this data to another person responsible without hindrance from the Responsible to whom the personal data have been provided, provided that
    1. the processing is based on consent in accordance with Article 6 (1) (a) or Article 9 (2) (a) of the General Data Protection Regulation or on a contract in accordance with Article 6 (1) (b) of the General Data Protection Regulation and
    2. processing is carried out using automated methods.

    When exercising their right to data portability, the data subject has the right to have the personal data transmitted directly from one person responsible to another, insofar as this is technically feasible. This right must not impair the rights and freedoms of other persons.
    Exercising this right to data portability does not affect the right to deletion (“right to be forgotten”). This Right applies not for processing that is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been transferred to the person responsible.
  9. The right to object,
    i.e. the right of the person affected by the processing of personal data, for reasons arising from their particular situation, to object at any time to the processing of personal data relating to them, which is based on Article 6 Paragraph 1 Letter e or f of the General Data Protection Regulation to insert; this also applies to profiling based on these provisions. The person responsible no longer processes the personal data unless he can prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims /> If personal data are processed in order to operate direct mail, the person concerned has the right to object at any time to the processing of personal data concerning them for the purpose of such advertising; This also applies to profiling insofar as it is related to such direct mail.
    If the data subject objects to processing for direct mail purposes, the personal data will no longer be processed for these purposes.
    In connection with Regardless of Directive 2002/58 / EC, the data subject can exercise his or her right of objection to the use of information society services by means of automated procedures in which technical specifications are used. The data subject has the right, for reasons that arise from their special situation arise against the processing of personal data concerning them, which is carried out for scientific or historical research purposes or for statistical purposes in accordance with Article 89 paragraph 1 of the General Data Protection Regulation, unless the processing is for the fulfillment of a public Interesting task required.
  10. the right not to be subject to an automated decision in individual cases (including profiling),
    towards you develops legal effect or similarly significantly affects it. This does not apply if the decision
    1. is necessary for entering into, or performance of, a contract between the data subject and the person responsible,
    2. is permissible on the basis of legal provisions of the Union or of the member states to which the person responsible is subject and these legal provisions take appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject included or
    3. takes place with the express consent of the data subject.

    In the cases mentioned in letters a and c above, the person responsible for processing shall take appropriate measures to safeguard the rights and freedoms and legitimate interests of the person concerned, including at least the right to obtain intervention by a person on the part of the person responsible Statement of one's own point of view and to contest the decision.
    Automated decisions may not be based on special categories of personal data unless the data subject has consented or the processing is based on Union law or the law of a Member State, which is reasonable Relative to the pursued goal, safeguarding the essence of the right to data protection and providing for appropriate and specific measures to safeguard the fundamental rights and interests of the data subject if there is a significant public interest.