Protecting your personal data is important to us. We process your data in accordance with applicable national and European data protection laws. To inform you about our data processing, including the purposes and your rights, we provide information about our data processing here.

 

In Section I of the data protection information, you’ll find details about the controller and the contact information of the data protection officer. Section II contains information about data processing related to your visit and use of our website. Section III informs you about data processing for press service purposes, and Section IV covers processing for production purposes. The information in Section V applies to all mentioned processing activities.

 

 

1. Controller

The controller, as defined by the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and other data protection regulations, is:

 

307 production GmbH

Gereonshof 17

50670 Cologne

 

 

2. Data Protection Officer

You can reach the data protection officer of the controller by mail or email at:

 

Studio Hamburg GmbH

Data Protection Officer

Jenfelder Allee 80

22039 Hamburg

 

 

 

a. Scope of Processing Personal Data

The controller collects and processes users’ personal data only to the extent necessary for providing a functional website and its content and services. The collection and use of users’ personal data regularly occur with the user’s consent. An exception applies in cases where obtaining consent is not possible for factual reasons, and processing is permitted by legal provisions.

 

b. Legal Basis for Processing Personal Data

When the controller obtains the user’s consent for processing personal data, Article 6(1)(a) GDPR serves as the legal basis. For processing personal data necessary for the performance of a contract with the user, Article 6(1)(b) GDPR serves as the legal basis. The same applies to processing operations required for pre-contractual measures. If processing personal data is necessary for compliance with a legal obligation to which the controller is subject, Article 6(1)(c) GDPR serves as the legal basis. If the processing is necessary to protect vital interests of the user or another natural person, Article 6(1)(d) GDPR serves as the legal basis. When processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, and the interests, fundamental rights, and freedoms of the user do not override those legitimate interests, Article 6(1)(f) GDPR serves as the legal basis for processing.

 

c. Data Deletion and Storage Duration

The personal data of the user will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. Blocking or deletion of data also occurs when a storage period prescribed by the mentioned standards expires unless there is a need for further storage of the data for conclusion or performance of a contract.

 

 

Due to separate written agreements, the controller also processes personal data through service providers as part of order processing relationships pursuant to Article 28 GDPR. The controller remains responsible for data protection towards you. The employees of the data processors are obligated to maintain the confidentiality of your data, similar to the employees of the controller. They are subject to the instructions of the controller. All legally required technical and organizational security measures to protect your personal data from loss and misuse are ensured by the controller. Your personal data is stored in secure operating environments, accessible to employees of the data processors only to the extent necessary to fulfill contractual tasks.

 

 

The controller collects and uses users’ personal data only to the extent necessary for providing a functional website and the content and services of the controller. When accessing this website, the controller’s system automatically records the following data from the user’s computer system and stores it in log files (so-called log files): name of the accessed file, date and time of access, amount of data transferred, message about the successful access, type of your browser and version used, user’s IP address, user’s operating system, user’s internet service provider, websites from which the user’s system accessed this website, websites accessed by the user’s system through this website. There is no merging of this data with other data sources. The legal basis for collecting and storing data in log files is Article 6(1)(f) GDPR. The temporary collection of data by the system is necessary to enable delivery of the website to the user’s computer and to ensure its display. Storage in log files also serves to ensure the stability and functionality of the website. Furthermore, the data serves to optimize this website and ensure the security of the controller’s information technology systems against possible external attacks. This is also the legitimate interest in data processing according to Article 6(1)(f) GDPR. The data is deleted as soon as it is no longer necessary for the purpose of its collection. For data collected to provide the website, this occurs at the end of each session; concerning data storage in log files, this happens no later than seven days. Extended storage is possible. In this case, the user’s IP address is deleted or anonymized so that allocation to the calling computer is no longer possible. The collection of data to provide the website and its storage in log files is essential for the operation of the service, so users have no option to object.

 

 

On this website, you have the option to contact the controller through an online contact form or via email. The personal data (e.g., name, address, telephone number, or email address) transmitted to the controller via the contact form or by email is used solely for processing user inquiries. There is no disclosure of this data to third parties. The legal basis for processing data transmitted via the contact form, with the user’s prior consent, is Art. 6(1)(a) GDPR, and for processing data transmitted via email, it is Art. 6(1)(f) GDPR. The controller’s legitimate interest in processing the data lies in responding to user inquiries, as per Art. 6(1)(f) GDPR. The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This occurs when the processing of the respective user inquiry is completed, indicating that the matter in question has been conclusively clarified. Users have the option to revoke their consent to the processing of personal data at any time and to object to the storage of their personal data transmitted to the controller via email. In such cases, the conversation cannot be continued. Users can contact e-mail for this purpose. All personal data stored as part of the contact will be deleted.

 

 

a. General Information about Cookies

This website uses cookies. Cookies are text files that are stored on your computer system when you access a website. A cookie contains a characteristic string that enables the browser to be uniquely identified when the website is accessed again. Previously stored cookies can be deleted from your computer system at any time.

 

b. Essential Cookies

Some of the cookies used on the website are essential for its operation and provision (essential cookies). The legal basis for the data processing associated with essential cookies is Art. 6(1)(f) GDPR. When you visit our website, our legitimate interest in providing the website properly and its basic functions outweighs your interest in confidentiality.

 

c. Non-Essential Cookies

Other, non-essential (third-party) cookies are used to improve our website and integrate content from third parties. The website uses these cookies only, and your personal data is processed for the purposes of these cookies only if you have given your consent. You can give this consent by clicking the appropriate button on the cookie banner. The “Cookie Details” button provides more information about each cookie, its purpose, and the respective (third-party) provider, and you can give your consent for each cookie separately. The legal basis for the data processing associated with non-essential cookies is Art. 6(1)(a) GDPR in conjunction with your consent. If you do not give your consent, these non-essential cookies will not be used. By clicking the “Essential Cookies Only” button, you can explicitly reject the setting of non-essential cookies. You can revoke your consent at any time (see also Section V, item 1, lit. g) by disabling cookies via the “Cookie Details” button on the cookie banner.

 

 

The controller has integrated components from YouTube on this website. YouTube is an internet video portal that allows video publishers to post video clips for free and enables users to view, rate, and comment on them for free. YouTube allows the publication of all types of videos, including complete films and television programs, as well as music videos, trailers, or videos created by users, which are accessible through the internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When any of the individual pages of this website operated by the controller and containing a YouTube component (YouTube video) is accessed, the internet browser on the information technology system of the data subject is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be accessed at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google gain knowledge of which specific subpage of our website is visited by the data subject.

If the data subject is simultaneously logged into YouTube, YouTube recognizes with each call-up to a subpage that contains a YouTube video which specific subpage of our internet page the data subject is visiting. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google receive information through the YouTube component that the data subject has visited our website whenever the data subject is logged in to YouTube at the same time as accessing our website; this occurs regardless of whether the person clicks on a YouTube video or not. If such transmission of this information to YouTube and Google is not desirable for the data subject, the delivery can be prevented if the data subject logs off from their YouTube account before a call-up to our website is made.

The data protection provisions published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provide information about the collection, processing, and use of personal data by YouTube and Google.

 

This website contains links to third-party online offerings over which the controller has no influence and for which the controller cannot assume responsibility for data protection or content. Please read the privacy statements of the online offerings accessed through this website.

 

 

The controller has integrated components of the company Facebook on this website and is present on the internet with its own Facebook pages. Facebook is a social network. A social network is an internet-based social meeting place, an online community that allows users to communicate with each other and interact in the virtual space. A social network can serve as a platform for the exchange of opinions and experiences or allows the internet community to provide personal or company-related information. Facebook enables users of the social network to create private profiles, upload photos, and network through friend requests, among other features. The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a person lives outside the USA or Canada, the responsible party for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When any of the individual pages of this website operated by the controller and containing a Facebook component (Facebook plug-in) is accessed, the internet browser on the information technology system of the data subject is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be accessed at https://developers.facebook.com/docs/plugins/?locale=de_DE. As part of this technical process, Facebook gains knowledge of which specific subpage of our website is visited by the data subject.

If the data subject is simultaneously logged into Facebook, Facebook recognizes with each call-up to a subpage by the data subject and during the entire duration of their stay on this website which specific subpage of our internet page the data subject is visiting. This information is collected by the Facebook component and associated with the respective Facebook account of the data subject by Facebook. If the data subject clicks on one of the Facebook buttons integrated on this website, such as the “Like” button, or if the data subject makes a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data.

Facebook receives information via the Facebook component that the data subject has visited this website whenever the data subject is logged in to Facebook at the same time as accessing this website; this occurs regardless of whether the data subject clicks on the Facebook component or not. If such transmission of this information to Facebook by the data subject is not desired, the data subject can prevent the transmission by logging out of their Facebook account before calling up our website.

The data protection regulations published by Facebook, which can be accessed at https://de-de.facebook.com/about/privacy/, provide information about the collection, processing, and use of personal data by Facebook. Furthermore, it is explained there what setting options Facebook offers to protect the privacy of the data subject. Various applications are also available that enable the data subject to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

 

 

Regarding the operation and provision of the website, if the controller transmits personal data to recipients in third countries (see above), suitable guarantees exist in the form of EU standard contractual clauses adopted by the EU Commission, in accordance with Art. 46 GDPR.

 

 

 

Only if you have given your consent, Studio Hamburg Produktion Gruppe GmbH, Jenfelder Allee 80, 22039 Hamburg (short “SHPG”), as well as each of the other companies of Studio Hamburg Produktion Gruppe GmbH conclusively listed below (collectively “Group”), processes your name and email address to inform you via email about productions of the companies and production- and company-relevant news of the Group within the “Studio Hamburg Produktion Gruppe GmbH Press Service” (collectively “Press Service Notifications”). You will receive Press Service Notifications from the following companies of Studio Hamburg Produktion Gruppe (“Group”):

 

– Studio Hamburg Produktion Gruppe GmbH, Jenfelder Allee 80, 22039 Hamburg

– LETTERBOX FILMPRODUKTION GMBH, Jenfelder Allee 80, 22039 Hamburg

– REAL FILM Berlin GmbH, Köthener Straße 3, 10963 Berlin

– Nordfilm GmbH, Büsumer Weg 51, 24106 Kiel

– Riverside Entertainment GmbH, Jenfelder Allee 80, 22039 Hamburg

– Doclights GmbH, Jenfelder Allee 80, 22039 Hamburg

– AMALIA FILM GMBH, Adelgundenstrasse 5b, 80538 München

– Studio Hamburg UK, 41-42 Eastcastle Street, 5th floor, London W1W 8DU, UK

– FRIDAY FILM GmbH, Köthener Straße 3, 10963 Berlin

– ALWAYSON PRODUCTION GMBH, Herrengraben 31, 20459 Hamburg

– 307 production GmbH, Gereonshof 17, 50670 Köln

 

Your consent to receive Press Service Notifications is voluntary and can be revoked at any time. You are neither contractually nor legally obligated to provide your name and email address for the transmission of Press Service Notifications. If you do not provide the data, you will not receive Press Service Notifications. You can also revoke your consent by using the link provided in each Press Service Notification or by email to e-mail.

The legal basis for the described data processing for sending Press Service Notifications is your consent in conjunction with Art. 6(1)(a) GDPR.

 

 

Only to the extent necessary to fulfill legally mandatory requirements to which SHPG or the other companies of the Group (see “Responsibility for Press Service Notifications” below) are subject, data provided by you for receiving Press Service Notifications will also be processed for these purposes. The legal basis for data processing to fulfill legal obligations is Art. 6(1)(c) GDPR.

 

 

The dispatch of Press Service Notifications is carried out centrally within the Group by SHPG (press office). If another company of the SHPG is responsible for data protection for the dispatch of Press Service Notifications (see below), SHPG processes your personal data for the dispatch of Press Service Notifications on behalf and under the instruction of this company.

For data processing within the scope of the Press Service, each individual company of the Group that processes your data for the dispatch of Press Service Notifications is “responsible”. This is stated in the imprint of each individual Press Service Notification as well as in this privacy policy. You can also contact the respective responsible company of the Group by email at e-mail.

 

 

a. General Information on (Sub-)Processing

SHPG engages external service providers (processors) for data processing in the context of the press service with tasks related to registration and deregistration, design, content management, and the dispatch of press service notifications. These service providers are granted access to your personal data to the extent necessary for these purposes. This is based on separate data processing agreements for each purpose in accordance with Art. 28 et seq. GDPR. External service providers process personal data on behalf and under the instruction of SHPG or, indirectly, under the instruction of the respective responsible company of the Group (see “Responsibility for Press Service Notifications”). The same applies to sub-processors used by external service providers within the scope of their (sub-)contract for the commissioned data processing. As part of this (sub-)processing, personal data is transferred to service providers in third countries. In these cases, appropriate guarantees within the meaning of Art. 46 GDPR exist through the conclusion of EU standard contractual clauses issued by the EU Commission.

 

b. Data Transfer for Third-Party Purposes

Transfer of personal data to state institutions and authorities only takes place within the framework of mandatory legal regulations. Furthermore, the data provided by you for receiving press service notifications will not be disclosed to third parties for their purposes.

 

 

The data controller stores and processes your personal data only for as long as it is necessary for the respective purpose (see Section III No. 1). Storage and processing beyond that is only carried out to the extent permissible under another legal basis, such as to fulfill legal requirements (see Section III No. 2).

 

 

 

Note on data processing for journalistic or artistic purposes: Within the scope of Article 85(2) of the EU General Data Protection Regulation (GDPR), EU member states may deviate from the GDPR for the processing of personal data for journalistic or artistic purposes. This privilege is specified by law in Germany, for example, in the KunstUrhG. A comprehensive information obligation for data subjects, such as on the purposes, scope, and legal bases of processing, is not legally mandatory in these cases. With this Section 12, we inform you about processing activities related to the implementation of productions that are not subject to the privileges within the meaning of Article 85(2) GDPR.

 

 

a. Execution of the Contract with You

The data controller stores and uses the personal data provided by you for the conclusion and execution of the contract or collected during the recording of audio and video footage to fulfill the contract between you and the data controller.

This includes, in particular, the creation of audio and visual recordings of you, their subsequent production, and their exploitation as agreed in the contract. Additionally, we retain the contract and the personal data provided by you in it until the complete execution of the contract and process your contact details for contract-related communication with you.

The legal basis for this data processing is Art. 6(1)(b) GDPR.

 

b. Pursuit of Legitimate Interests

The data controller also processes created photo and video recordings, as well as personal data provided by you within the framework of the contract, to the extent necessary to safeguard legitimate interests, provided that your interests or fundamental rights and freedoms do not override them.

To safeguard legitimate interests, it may be necessary, in particular, to use the contract document for your proof in connection with the production of granted rights, as well as for asserting or defending against possible claims.

The legal basis for this data processing is Art. 6(1)(f) GDPR.

 

c. Fulfillment of Legal Requirements

The data controller is subject to various legal obligations and requirements, such as commercial and tax-related retention and reporting obligations. The data controller processes your personal data for these purposes only to the extent necessary to fulfill legal requirements.

The legal basis for this data processing is Art. 6(1)(c) GDPR.

 

 

a. Disclosure to Other Data Controllers

The data controller only transfers your personal data to other data controllers to the extent necessary for the execution of the contract (see Section IV No. 2. a.) or to safeguard legitimate interests (see Section IV No. 2. b.), or if it is legally obligated to do so by enforceable official or court orders (Section IV No. 2. c.).

For the execution of the contract (Section IV No. 2. a.), it may be necessary for the data controller to provide the audio and visual recordings to third parties involved in the production (e.g., commissioning broadcasters, co-financing partners, E&O insurance) for exploitation.

To the extent that third parties process data transmitted by the data controller for their own purposes (e.g., as part of the processing and execution of the production), the processing is carried out independently by the respective third party.

 

b. Data Processing on Behalf

The data controller also commissions external service providers with tasks related to the production, such as data hosting, contract filing, holding, and accounting. These “data processors” have been carefully selected by the data controller and are regularly monitored, particularly with regard to the careful handling and securing of data stored with them. All service providers are obligated to confidentiality and compliance with legal requirements. This is based on data processing agreements concluded for this purpose in accordance with Art. 28 et seq. GDPR. External service providers process personal data on behalf and on the instructions of the data controller. The same applies to sub-processors.

 

 

a. General Information

Data transfer to entities in states outside the EU/EEA (so-called third countries) only takes place if:

– it is necessary for the execution of the contract (e.g., processing the production with the commissioning broadcaster),

– it is legally required (e.g., tax reporting obligations); or

– the data controller uses data processors (see Section IV No. 4. a.) outside the EU/EEA.

b. Adequacy Decision and Guarantees

To the extent that the data controller transfers personal data to recipients in third countries, suitable guarantees within the meaning of Art. 46 GDPR exist through the conclusion of EU standard contractual clauses by the European Commission.

 

c. Storage Duration and Deletion

The data controller only stores and processes your personal data for as long as it is necessary for the respective purpose (see Section IV No. 2). Furthermore, storage and processing only take place to the extent permitted by another legal basis, such as to fulfill legal requirements (see Section IV No. 2.c.).

 

 

 

a. Right to Information pursuant to Art. 15 GDPR

You can request confirmation from the data controller as to whether personal data concerning you is being processed by the data controller. If such processing is taking place, you can request the following information from the data controller: the purposes for which the personal data is processed; the categories of personal data that are processed; the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed; the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, the criteria for determining the storage period; the existence of a right to correction or deletion of personal data concerning you, a right to restriction of processing by the data controller, or a right to object to such processing; the existence of a right to lodge a complaint with a supervisory authority; all available information on the origin of the data if the personal data is not collected from the data subject; the existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, as well as the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.

 

b. Right to Rectification pursuant to Art. 16 GDPR

You have the right to request correction and/or completion from the data controller if the processed personal data concerning you is incorrect or incomplete. The data controller must make the correction without delay.

 

c. Right to Erasure pursuant to Art. 17 GDPR

You can request the data controller to delete personal data concerning you without delay, and the data controller is obligated to delete this data without delay if one of the following reasons applies: The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed. You revoke your consent on which the processing is based according to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing. You object to the processing pursuant to Art. 21(1) GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR. The personal data concerning you has been unlawfully processed. The erasure of personal data concerning you is necessary to fulfill a legal obligation under Union or Member State law to which the data controller is subject. The personal data concerning you has been collected in relation to the offer of information society services pursuant to Art. 8(1) GDPR.

If the data controller has made the personal data concerning you public and is obligated to delete it pursuant to Art. 17(1) GDPR, the data controller, taking into account available technology and implementation costs, shall take reasonable steps, including technical measures, to inform data controllers processing the personal data that you, as the data subject, have requested the deletion of all links to this personal data or of copies or replications of this personal data.

The right to erasure does not exist to the extent that processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation that requires processing under Union or Member State law to which the data controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller; for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR; for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to in Section 1 of this Section is likely to render impossible or seriously impair the achievement of the objectives of that processing, or for the establishment, exercise, or defense of legal claims.

 

d. Right to Restriction of Processing pursuant to Art. 18 GDPR

Under the following conditions, you can request the restriction of processing of personal data concerning you: if you dispute the accuracy of the personal data concerning you for a period that enables the data controller to verify the accuracy of the personal data; the processing is unlawful, and you oppose the deletion of personal data and request instead the restriction of the use of personal data; the data controller no longer needs the personal data for the purposes of the processing, but you need it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Art. 21(1) GDPR, and it is not yet clear whether the legitimate grounds of the data controller outweigh your grounds.

If the processing of personal data concerning you has been restricted, these data may – apart from their storage – only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction of processing has been restricted under the above conditions, you will be informed by the data controller before the restriction is lifted.

 

e. Right to Information according to Art. 19 GDPR

If you have asserted the right to rectification, erasure, or restriction of processing against the data controller, the data controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this correction or deletion of data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by the data controller about these recipients.

 

f. Right to Data Portability pursuant to Art. 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to the data controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another data controller without hindrance from the data controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and the processing is carried out by automated means. In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one data controller to another, insofar as this is technically feasible. This right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

 

g. Right to Withdraw Consent pursuant to Art. 7(3) GDPR

You have the right to withdraw your data protection consent declaration at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

 

h. Right to Lodge a Complaint with a Supervisory Authority pursuant to Art. 77 GDPR

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the Data Protection Officer for Broadcasting of the NDR in Hamburg if you believe that the processing of personal data concerning you violates the GDPR. The supervisory authority will inform the complainant about the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

 

i. Right to Object pursuant to Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. The data controller will no longer process the personal data concerning you unless they can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims. If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.

You have the option, in connection with the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object by means of automated procedures using technical specifications.

Furthermore, you have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes pursuant to Art. 89(1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

 

 

The data controller reserves the right to change this data protection declaration at any time to ensure that it complies with current legal requirements. This also applies in the event that this data protection declaration needs to be adapted due to new or revised services. The new data protection declaration will apply the next time you visit this website.