Privacy policy

Responsible body within the meaning of § 13 para. 1 TMG

team neusta Aktiengesellschaft
Konsul-Smidt-Strasse 24
28217 Bremen

Phone: +49 421 20696-0
E-mail: info@neusta.de

Chairman of the Supervisory Board:
Dipl.-Ökonom (univers.) Frank Lotze

Board of Directors:
Carsten Meyer-Heder (Chairman)
Fabian Gutsche
Uwe Scheja

1. GENERAL INFORMATION

We take the protection and security of your personal data very seriously and collect, process, store and use your personal data exclusively in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the data protection laws in the Federal Republic of Germany.

To ensure that you have the best possible control over your data, we would like to inform you with our privacy policy which personal data we collect when you use our website "www.team-neusta.de" (hereinafter referred to as "website"), how we use this data and what rights and options you have.

Personal data is all information that relates to identified or identifiable natural persons, e.g. first name, surname, email address.

2. COLLECTION, PROCESSING, STORAGE AND USE OF YOUR DATA

2.1. COLLECTION, PROCESSING, STORAGE AND USE OF YOUR DATA WHEN USING OUR WEBSITE

2.1.1. LOG DATA WHEN ACCESSING OUR WEBSITE

Our website is available to everyone without prior registration. For technical reasons, your internet browser or mobile device automatically transmits the following data to our web server when you access our website:

- IP address of your device,
- Date and time of access,
- URL of the requesting website,
- http response code,
- Name of the retrieved file,
- Amount of data sent,
- browser type and version and
- operating system of your device.

This data is stored by our web server in log files. This data is not stored together with other personal data.

The legal basis for the storage of this data is Art. 6 para. 1 lit. f GDPR.

We use this data to enable the use of our website and its technical administration, to ensure the security of our information technology systems, to prevent the misuse of our website and to optimize our website. These purposes are the legitimate interests pursued by us with the data processing in accordance with Art. 6 para. 1 lit. f GDPR.

We will delete the data as soon as it is no longer required to achieve the purpose for which it was collected. If the data is stored in log files, it will be deleted after seven days at the latest. Log data may be stored beyond this period if the IP address of your device is deleted or anonymized in such a way that it is no longer possible to assign the IP address to you.

2.1.2 COOKIES

We use cookies and other third-party services on our websites. Cookies are small files that are stored on the hard disk of the device you are using at the request of our web server. They enable your computer system to be uniquely identified when you visit our website again and can be used to analyze your use of our website. Cookies may also contain personal data.

We also use third-party services. When you use these services, your personal data is transferred to the third-party providers and used there to evaluate your user behavior.

You can also use our websites without consenting to the use of cookies or other services. You can refuse their use and delete cookies at any time by making the appropriate settings on your device. If you decide against the use of cookies or other services, certain functions of our website may not be available to you or only to a limited extent. The use of cookies and also their rejection or deletion is linked to the device used and also to the browser used. You must therefore make the cookie settings for each of your devices and, if you use multiple browsers, for each browser separately.

We use the following cookies and services:

Necessary:

These cookies are absolutely necessary for the websites to function. Without these cookies, we cannot offer you our services. We may also use these cookies without your consent.

Extended functions and statistics:

These cookies facilitate the operation and improve the functions of the websites, or they collect information about your use of our websites. They enable us to improve our services for you.

Personalization and marketing

These cookies are used by us or by third-party providers to store and/or retrieve data relating to your use of and interaction with their online services and to provide you with information that is specifically relevant to you.

Consent to the use of cookies and management of cookies via the cookie consent banner:

The legal basis for the processing of your data via cookies is Art. 6 para. 1 lit. a GDPR in conjunction with EU Directive 2002/58. Insofar as your consent is required for the use of certain cookies, we will only use these cookies when you use the website if you have given your prior consent.

In the cookie consent banner, you consent to the use of all cookies by clicking the "ACCEPT ALL" button. You can allow or reject the cookies in the respective categories using the "Advanced functions and statistics" or "Personalization and marketing" checkboxes and the "SAVE AND CONTINUE" button. You can select individual cookies via "Show more details". You can revoke or change your settings at any time via the "Cookie settings" link.

Please note that if you deactivate cookies, their functions (e.g. analyses) will no longer be executed.

2.2. COLLECTION, PROCESSING, STORAGE AND USE OF YOUR DATA FOR THE RECEIPT OF OUR NEWSLETTER

2.2.1. REGISTRATION FOR THE NEWSLETTER

You have the option of subscribing to our free newsletter via our website by entering your name and email address. After entering your email address, you will receive a welcome email from us to the email address you have provided. By clicking on the link contained in the email, you confirm that you are the person actually authorized to access the email address provided (so-called double opt-in procedure) and activate the newsletter subscription. When you register to receive our newsletter, we obtain your consent to the processing of your data.

The legal basis for the processing of your data after registration for our newsletter is Art. 6 para. 1 lit. a GDPR.

We will only use the email address you provide to send you our newsletter.

The email address you provide will only be stored by us for as long as you wish to receive our newsletter. You can revoke your consent to us at any time and thereby unsubscribe from the newsletter with effect for the future. You can also withdraw your consent by clicking on the unsubscribe link in the footer of each newsletter. The withdrawal of your consent does not affect the lawfulness of the processing of your data for the purpose of receiving the newsletter based on your consent before its withdrawal.

2.2.2. LOG DATA FOR NEWSLETTER REGISTRATION

When you access our website, the data in accordance with section 2.1. of this privacy policy is also automatically collected and stored.


2.3. COLLECTION, PROCESSING, STORAGE AND USE OF YOUR DATA WHEN YOU CONTACT US

2.3.1. CONTACTING US BY EMAIL

You have the option of contacting us via our email addresses

info@team-neusta.de 
or 
info@neusta.de 

to contact us and send us a message (electronic contact). In this case, your personal data transmitted by email will be stored by us.

The legal basis for the processing of your personal data that you transmit to us in the course of contacting us electronically by email is Art. 6 para. 1 lit. f GDPR. If the electronic contact by email is aimed at the conclusion of a contract with us, the legal basis for the processing of your personal data is also Art. 6 para. 1 lit. b GDPR.

We use your data to process your request and to contact you. These purposes are the legitimate interests pursued by us with the data processing in accordance with Art. 6 para. 1 lit. f GDPR.

Your data will be deleted by us - unless contractual or legal obligations prevent deletion - as soon as it is no longer required for the aforementioned purposes; this is the case when the facts on which your electronic contact is based have been fully clarified. If you conclude a contract with us on the basis of your electronic contact, your data will only be deleted when it is no longer required for the fulfillment of the contract or the implementation of pre-contractual measures. We would like to point out that it may be necessary to store your data even after the contract has been fulfilled in order to comply with contractual or legal obligations.

You can object to the use of your personal data at any time without incurring any costs other than the transmission costs. In such a case, your data stored in the context of electronic contact will be deleted; the processing of your request cannot be continued. If your data is required to fulfill a contract or to carry out pre-contractual measures, (premature) deletion of your data is only possible insofar as contractual or legal obligations do not prevent deletion.

2.3.2. LOG DATA WHEN CONTACTING US BY EMAIL

When you access our website, the data in accordance with section 2.1 of this privacy policy is also automatically collected and stored.

2.3.3. CONTACT VIA OUR CONTACT FORM

You have the option of contacting us by providing the mandatory data

Name and email address

to contact us via our contact form and send us a message.

The legal basis for the processing of your data that you transmit to us when contacting us is Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract with us, the legal basis for the processing of your data is also Art. 6 para. 1 lit. b GDPR.

We use your data exclusively to process your request, to process any contract and to contact you. These purposes are the legitimate interests pursued by us with the data processing in accordance with Art. 6 para. 1 lit. f GDPR.

Unless contractual or legal obligations prevent deletion, we will delete your data as soon as it is no longer required for the aforementioned purposes. This is the case when your request has been answered and the facts underlying your contact have been fully clarified. If you conclude a contract with us on the basis of your contact, your data will only be deleted when it is no longer required for the fulfillment of the contract or the implementation of pre-contractual measures. We would like to point out that it may be necessary to store your data even after the contract has been fulfilled in order to comply with contractual or legal obligations.

You can object to the use of your personal data at any time without incurring any costs other than the transmission costs. In such a case, your data stored in the context of contacting us will be deleted; the processing of your request can then not be continued. If your data is required to fulfill a contract or to carry out pre-contractual measures, (premature) deletion of your data is only possible insofar as contractual or legal obligations do not prevent deletion.

2.4. COLLECTION, PROCESSING, STORAGE AND USE OF YOUR DATA FOR (UNSOLICITED) APPLICATIONS BY EMAIL

2.4.1. (UNSOLICITED) APPLICATION BY EMAIL

You have the option of applying via our email address

office@team-neusta.de

for a job advertisement or to send us an unsolicited application. In this case, your personal data transmitted by email will be stored by us.

The legal basis for the processing of your personal data that you send us as part of your (unsolicited) application by email is Art. 6 para. 1 lit. f GDPR. If your (unsolicited) application by email leads to the establishment of an employment relationship with us, the legal basis for the processing of your personal data is also Art. 6 para. 1 lit. b GDPR and Section 26 para. 1 BDSG (new).

We use your personal data to carry out the application process, to review and process your (unsolicited) application, to decide whether to establish an employment relationship with us and to respond to your inquiries and contact you. These purposes are the legitimate interests pursued by us with the data processing in accordance with Art. 6 para. 1 lit. f GDPR.

Your data will be deleted by us 6 months after completion of the application process, unless contractual or legal obligations prevent deletion. If you conclude a contract with us on the basis of your (unsolicited) application, your data will only be deleted when it is no longer required for the performance of the contract or pre-contractual measures. We would like to point out that it may be necessary to store your personal data even after termination of the contract in order to comply with contractual or legal obligations.

You can object to the use of your personal data at any time without incurring any costs other than the transmission costs. In such a case, your data stored as part of your (unsolicited) application by email will be deleted; the processing of your (unsolicited) application cannot be continued. If your data is required for the performance of a contract or pre-contractual measures, (premature) erasure of your data is only possible insofar as contractual or legal obligations do not prevent erasure.

2.4.2. LOG DATA FOR (UNSOLICITED) APPLICATIONS BY EMAIL

When you access our website, the data in accordance with section 2.1 of this privacy policy is also automatically collected and stored.

2.4.3. APPLICATION VIA THE CAREER PORTAL

Please also note our privacy policy on the processing of application data.

3. DISCLOSURE OF PERSONAL DATA

3.1 Your personal data will not be passed on, sold or otherwise transferred to third parties unless this is necessary for the purpose of fulfilling a contract. Otherwise, we will only pass on your personal data to third parties within the framework of a legal permission or on the basis of your consent, which can be revoked at any time for the future, and only to the extent necessary to fulfill our contractual obligations.

3.2 Our service partners (e.g. hosting service providers) require your personal data and process it exclusively on our behalf within the framework of order processing, which is expressly provided for in accordance with Art. 28 para. 3 GDPR.

3.3 We only transfer your personal data to state institutions or authorities if we are obliged to do so by law.

4. EVALUATION OF USAGE BEHAVIOR

4.1. GOOGLE ANALYTICS

We use the services of Google Analytics on our website, a web analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

Google Analytics uses tracking code and "cookies", small text files that are stored on the device you are using and that enable your use of our website to be analyzed. The information generated by the cookie about your use of our website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization "anonymizeIp", your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR. 

We use Google's web analysis service to design our website in line with requirements and to continuously improve and optimize it. Google uses the data and information obtained on our behalf to evaluate your use of our website, to compile reports on website activity and to provide us with other services relating to the use of our website and the Internet. These purposes are the legitimate interests pursued by us with the data processing in accordance with Art. 6 para. 1 lit. f GDPR.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of our website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of our website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

You can find more information on terms of use and data protection at

http://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/.

You can change your settings for the Google Analytics cookie at any time via the "Cookie settings" link. If the cookie is deactivated, you do not give your consent and its function will no longer be executed. Please note that this may limit the functionality of our website, so that you may not be able to use all the functions of our website.


4.2. GOOGLE ADWORDS CONVERSION TRACKING

We also use Google Adwords Conversion Tracking on our website, a web analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

Google Adwords uses tracking code and "cookies", small text files that are stored on the device you are using if you have reached our website via a Google ad. The cookie loses its validity after 30 days. If you visit our website again within these 30 days, Google can recognize that you have clicked on a Google ad and have been redirected to our website.

The legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR. 

We use Google's web analysis service to statistically record the use of our website and to continuously improve and optimize our website. On our behalf, Google uses the data and information obtained to evaluate your use of our website and to create reports (so-called conversion statistics) for us. The conversion statistics tell us how many users clicked on our ad and were redirected to our website with a conversion tracking tag. 

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.

You can find more information on data protection at

https://services.google.com/sitestats/de.html

You can change your settings for the Google Adwords Conversion Tracking cookie at any time via the "Cookie settings" link. If the cookie is deactivated, you do not give your consent and its function will no longer be executed. Please note that this may limit the functionality of our website, so that you may not be able to use all the functions of our website.

4.3. FACEBOOK PIXEL

We use Facebook Pixel on our website, an offer from Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; website: www.facebook.com.

With the help of the Facebook pixel, Facebook is able to determine the visitors of our online offer as a target group for the display of ads (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those users on Facebook and within the services of the partners cooperating with Facebook (so-called "Audience Network" www.facebook.com/audiencenetwork/ ) who have also shown an interest in our online offer or who have certain characteristics (e.g. interest in certain topics or products that can be seen from the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Facebook ad (so-called "conversion measurement").

With Facebook Pixel, usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses) and location data (information on the geographical position of a device or person) are transmitted.

Facebook Pixel is only used with your consent. The legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR. You can change your settings for the Facebook Pixel cookie at any time via the "Cookie settings" link. If the cookie is deactivated, you do not give your consent and its function will no longer be executed. Please note that this may limit the functionality of our website, so that you may not be able to use all the functions of our website.

5. SOCIAL MEDIA PLUGINS

Social media plugins ("plugins") from the social networks Facebook, Google + and Instagram, the microblogging service Twitter and the video portal YouTube ("provider") are integrated on our website on the basis of Art. 6 para. 1 lit. f GDPR. In order to increase the protection of your data when you visit our website, we integrate the plugins into our website using the so-called "2-click solution". This integration ensures that no connection is established with the provider's servers when you visit our website. Your browser only establishes a direct connection to the provider's servers when you activate the plugins and thus give your consent to data transmission.

5.1 FACEBOOK

Social media plugins ("plugins") from the social network Facebook are integrated on our website. Facebook is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). An overview of the Facebook plugins and their appearance can be found here:

developers.facebook.com/docs/plugins

When you visit our website and activate the plugin, a direct connection is established between your browser and the Facebook server via the plugin. Facebook receives the information that you have visited our website with your browser, even if you do not have a Facebook profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your profile on Facebook. If you interact with the plugin, for example by clicking the "Like" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on the social network and displayed to your contacts there.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options to protect your privacy can be found in Facebook's data protection information at

www.facebook.com/policy.php

If you do not want Facebook to be able to associate your visit to our website with your Facebook user account, please log out of your Facebook user account.

5.2 TWITTER

Social media plugins ("plugins") from the microblogging service Twitter are integrated on our website. Twitter is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). An overview of the Twitter buttons and their appearance can be found here:

twitter.com/about/resources/buttons

When you visit our website and activate the plugin, a direct connection is established between your browser and the Twitter server via the plugin. By integrating the plugin, Twitter receives the information that your browser has accessed our website, even if you do not have a Twitter profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a Twitter server in the USA and stored there. If you interact with the plugin, for example by clicking the "Tweet" button, the corresponding information is transmitted directly to a Twitter server and stored there. The information is also published on your Twitter account and displayed to your contacts there.

For the purpose and scope of data collection and the further processing and use of your data by Twitter, as well as your rights in this regard and settings options for protecting your privacy, please refer to Twitter's privacy policy at:

twitter.com/privacy

If you do not want Twitter to assign the data collected via our website directly to your Twitter profile, you must log out of Twitter before activating the plugin.

5.3 YOU TUBE

Social media plugins ("plugins") from the video portal YouTube are also integrated on our website. YouTube is operated by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA ("YouTube").

When you visit our website and activate the plugin, a direct connection is established between your browser and the YouTube server via the plugin. YouTube receives the information that you have accessed our website with your browser, even if you do not have a YouTube account or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a YouTube server in the USA and stored there. If you are logged in to YouTube, YouTube can directly associate your visit to our website with your YouTube account.

For more information on the collection and use of your data by YouTube, your rights in this regard and setting options to protect your privacy, please refer to YouTube's privacy policy at

www.google.de/intl/de/policies/privacy

If you do not want YouTube to assign the information collected directly to your YouTube account, you must log out of YouTube before visiting our website.

5.4 INSTAGRAM

Social media plugins ("plugins") from the Instagram service are integrated on our website. Instagram is operated by Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). An overview of the Instagram plugins can be found here:

blog.instagram.com/post/36222022872/introducing-instagram-badges

When you visit our website and activate the plugin, a direct connection is established between your browser and the Instagram servers via the plugin and the button is displayed on our website by notifying your browser. By integrating the plugin, Instagram receives the information that your browser has accessed our website. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. This applies regardless of whether you have an Instagram profile or are logged in to Instagram.

If you interact with the plugin while you are logged in to Instagram, the corresponding information is transmitted directly to an Instagram server and stored there. The information collected is also published on your Instagram profile and displayed to your contacts.

For more information on the collection and use of your data by Instagram, your rights in this regard and setting options to protect your privacy, please refer to Instagram's privacy policy at

help.instagram.com/155833707900388/

If you do not want Instagram to assign the information collected directly to your profile, you must log out of Instagram before visiting our website.

6. GOOGLE MAPS

On our website we use the services of Google Maps, a map service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

If you have activated Java Script in your browser but have not installed a Java Script blocker, your browser will establish a direct connection to the Google servers in the USA and transmit your IP address to Google in order to deliver the map content to your browser. The map content is transmitted by Google directly to your browser, which integrates it into the website. If you use the route planner function, the (start) address you enter will also be transmitted to Google.

The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR.

We use Google's map service to display interactive maps, in particular to create directions so that you can find us easily. These purposes are the legitimate interests pursued by us with the data processing in accordance with Art. 6 para. 1 lit. f GDPR.

You can deactivate Java Script by making the appropriate setting in your browser software; however, we would like to point out that you will not be able to use the map display in this case.

You can find more information on terms of use and data protection at

www.google.com/intl/de_de/help/terms_maps.html and www.google.de/intl/de/policies/.

7. RESPONSIBLE OFFICE

Responsible for the processing of your personal data is

team neusta Aktiengesellschaft
Konsul-Smidt Strasse 24
28217 Bremen

Phone: +49 421 / 20 696 - 0
Fax: +49 421 / 20 696 - 99
Email: info@team-neusta.de

8. DATA PROTECTION OFFICER

We have appointed as our data protection officer

Ms. Bärbel Rolfes
HEC GmbH
Konsul-Smidt-Strasse 20
28217 Bremen

Phone: +49 421 / 20750-371
Email: datenschutz@neusta.de
 

9. LOCATION OF YOUR DATA / DATA SECURITY

9.1 Our servers and data centers are located at infrastructure services GmbH. Data processing is carried out by team neusta GmbH.

9.2 As a rule, we process your personal data within the European Union. However, we also use the services of some third-party providers. If these third-party providers are located in territories that do not provide a level of data protection equivalent to the regulations applicable within the European Union, we take all necessary steps to ensure that your personal data is adequately protected. We achieve this either by concluding data protection contracts or by ensuring that the third-party providers comply with appropriate security standards.

9.3 We take various physical, technical, organizational and administrative security measures to protect your data to the appropriate extent depending on the sensitivity of the data.

9.4 We use SSL encryption on our website for security reasons, in particular to protect your personal data. You can recognize the encrypted connection by the lock symbol in the address bar of your browser.

10. YOUR RIGHTS

10.1. RIGHT TO INFORMATION

10.1.1 You are entitled to request information from us at any time and free of charge as to whether personal data concerning you is being processed by us. If this is the case, you have a right of access to this personal data and to the following information

- the purposes for which the personal data concerning you are processed;
- the categories of personal data being processed
- the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed
- the envisaged period for which the personal data concerning you will be stored, or, if not possible, the criteria used to determine that period
- the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by us as the controller and a right to object to such processing
- the existence of a right to lodge a complaint with a supervisory authority
- all available information about the origin of the data if the personal data is not collected from you
- the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You are also entitled to request information from us as to whether your personal data is transferred to a third country or to an international organization. In this context, you may request to be informed by us about the appropriate safeguards pursuant to Art. 46 GDPR.

10.1.2 To protect your data, we reserve the right to request proof of identity.

10.1.3 We can provide the data protection information in a common electronic format.

10.2. RIGHT TO RECTIFICATION

You also have the right to demand that we correct incorrect personal data. Furthermore, taking into account the purposes of the processing of your personal data, you have the right to request that we complete incomplete personal data.

10.3. RIGHT TO RESTRICTION OF PROCESSING

10.3.1 You have the right to obtain from us restriction of processing of your personal data where one of the following applies

- if you contest the accuracy of the personal data concerning you, for a period enabling us to verify the accuracy of the personal data;
- if the processing is unlawful and you oppose the erasure of the personal data concerning you and request the restriction of their use instead;
- we no longer need the personal data concerning you for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims
or
- you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether our legitimate grounds override yours.

10.3.2 If the processing of your personal data has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

10.3.3 If you have obtained a restriction on the processing of your personal data, you will be informed by us before the restriction is lifted.

10.4. RIGHT TO ERASURE ("RIGHT TO BE FORGOTTEN")

10.4.1 You have the right to obtain from us the erasure of your personal data without undue delay where one of the following grounds applies:

- The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- you withdraw your consent on which the processing was based according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, and where there is no other legal ground for the processing
- You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR;
- The personal data concerning you have been processed unlawfully;
- the personal data concerning you have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject
- The personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.

10.4.2 If we have made personal data public and we are obliged to delete it in accordance with Art. 17 para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data controllers who process your personal data that you have requested us to delete all links to your personal data or copies or replications of your personal data.

10.4.3 The right to erasure of your personal data does not exist if the processing is necessary

- to exercise the right to freedom of expression and information
- for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us
- for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing
or
- for the establishment, exercise or defense of legal claims.

10.4.4 If you have asserted your right to rectification, erasure or restriction of processing of your personal data against us, we are obliged to notify all recipients to whom your personal data has been disclosed of the rectification, erasure or restriction of processing of your personal data, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by us about the recipients of your personal data.

10.5. RIGHT TO DATA PORTABILITY

10.5.1 You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that

- the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
- the processing is carried out by automated means.

10.5.2 In exercising your right to data portability, you also have the right to have your personal data transmitted directly from us to another controller without hindrance from us, where technically feasible. The freedoms and rights of others must not be impaired by this.

10.5.3 The right to data portability does not apply to the processing of your personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.


10.6. RIGHT TO OBJECT

10.6.1 You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.

10.6.2 We will no longer process your personal data after your objection unless we can demonstrate compelling legitimate grounds for the further processing of your personal data which override your interests, rights and freedoms, or the further processing of your personal data serves the establishment, exercise or defense of legal claims.


10.7. RIGHT TO WITHDRAW CONSENT UNDER DATA PROTECTION LAW

You have the right to withdraw your data protection consent at any time. Your withdrawal will not affect the lawfulness of the processing of your personal data based on your consent before its withdrawal.


10.8. RIGHT TO LODGE A COMPLAINT

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the provisions of the GDPR. The supervisory authority to which you have submitted your complaint will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

11. UPDATE

11.1 We reserve the right to change this privacy policy from time to time. We will inform you in advance of any significant changes to the Privacy Policy.

11.2 The use of your personal data is subject to the current version of the Privacy Policy, which can be accessed via "PRIVACY POLICY" on our websites. If you continue to access our websites after the changes come into force, you declare your consent to the updated privacy policy.

If you have any questions or comments about the above privacy policy, please do not hesitate to contact us. Please send an email to

datenschutz@neusta.de

Status: August 2023