{"id":124202,"date":"2019-09-02T10:39:16","date_gmt":"2019-09-02T10:39:16","guid":{"rendered":"https:\/\/rolling-turtles.com\/gdpr\/"},"modified":"2019-09-02T10:39:16","modified_gmt":"2019-09-02T10:39:16","slug":"gdpr","status":"publish","type":"page","link":"https:\/\/rolling-turtles.com\/tr\/gdpr\/","title":{"rendered":"GDPR"},"content":{"rendered":"\t\t
1.<\/b> General<\/b><\/a><\/span><\/p> 2.<\/b> Definitions set out in art. 4 GDPR<\/a><\/b><\/span><\/p> 3.<\/b> Name and contact details of the responsible authority (art. 13 paragraph 1 lit. a\u00a0 GDPR)<\/b><\/a><\/span><\/p> 4.<\/b> Which data do we use?<\/b><\/a><\/span><\/p> 5.<\/b> Legal basis and purpose of data processing<\/b><\/a><\/span><\/p> 6.<\/b> How long will my data be retained?<\/b><\/a><\/span><\/p> 7.<\/b> Who gets my data?<\/b><\/a><\/span><\/p> 8.<\/b> Encryption of personal data \u00a0 (SSL- or TLS-encryption)<\/b><\/a><\/span><\/p> 9.<\/b> Special data protection advice on the use of data collection, analysis tools and advertising in our online offers<\/b><\/a><\/span><\/p> 10.<\/b> Privacy protection for applications and in the application progress<\/b><\/a><\/span><\/p> 11.<\/b> Rights of the data subject (art. 12 ff.\u00a0 GDPR)<\/b><\/a><\/span><\/p> 12.<\/b> Exercise of the rights of the data subject<\/b><\/a><\/span><\/p> 13.<\/b> Other<\/b><\/a><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t Thank you for your interest in the company websites and other online offers of Rolling Turtles GmbH, Haasstr. 4, 64293 Darmstadt, Germany; hereafter referred to as “RT”.\u00a0<\/p> We take the issues of data protection and confidentiality very seriously and follow applicable European and national data protection rules; In particular, these are the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), the Telemedia Act (TMG) and the Hessian Data Protection and Freedom of Information Act (HDSIG).<\/p> For this reason, with the following information we would like to give you an overview of the processing of your personal data by us and of your rights under data protection law, in particular set out in articles 13, 14 and 21 GDPR.<\/p> Which data will be processed in detail and in which way it will be used depends on the requested or agreed services. Therefore, not all parts of this information will apply to you.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t This Privacy Policy should be easy to read and to understand as well for the public as for our customers and business partners. Therefore, we orientate ourselves to the following definitions, which are also simple and understandable, set out in art. 4 GDPR.\u00a0<\/i><\/p> \u00a0 \u00a0 \u00a0a) Personal data \u00a0 \u00a0 \u00a0b) Processing \u00a0 \u00a0 \u00a0c) Restriction of processing \u00a0 \u00a0 \u00a0d) Profiling \u00a0 \u00a0 \u00a0e) Pseudonymization \u00a0 \u00a0 \u00a0f) The person concerned \u00a0 \u00a0 \u00a0g) File system \u00a0 \u00a0 \u00a0h) Controller \u00a0 \u00a0 \u00a0i) Processor \u00a0 \u00a0 \u00a0j) Receiver \u00a0 \u00a0 \u00a0k) Third party \u00a0 \u00a0 \u00a0i) Consent The responsible position for the data processing is:\u00a0<\/p> Rolling Turtles GmbH<\/p> Haasstr. 4<\/p> D-64293 Darmstadt<\/p> Germany<\/p> Tel: +49 1734903333<\/p> Mail: penelope.k@rolling-turtles.com<\/a>\u00a0<\/p> Web: https:\/\/rolling-turtles.com\/de\/<\/a>\u00a0<\/p> VAT identification number.:\u00a0 DE325737455<\/p> Registry Court:\u00a0 Local court Darmstadt<\/p> Registry Number:\u00a0 HRB 99127<\/p> Representatives managing directors:\u00a0 Dipl.-Ing. Benjamin Wawra; Dipl.-Ing. Konstantinos Kotalakidis<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t We only process personal data that we have received from you as part of our contractual or other business relationship.<\/strong><\/p> In addition, we process personal information that we have legitimately gained from publicly available sources (such as debtor directories, land registers, trade and association registers, press, media) and have permission to process.<\/strong><\/p> Finally, we also work with personal information that we have legitimately received from other third parties (such as Schufa); for example, on the basis of your consent. These are used to execute orders or to fulfill contracts.<\/strong><\/p> Below is an example of some data that we process in cooperation with our customers, suppliers and employees:<\/strong><\/p> We process personal data only for the fulfillment of contractual obligations, due to legal requirements, for our own advertising purposes and for the protection of legitimate interests. The lawfulness of the processing is based on the provisions listed under no. 1 (see above), in particular on art. 6 GDPR.<\/strong><\/p> \u00a0 \u00a0 \u00a0a. Based on your consent Insofar as you have given us consent to the processing of personal data for specific purposes (for example, disclosure of personal data to tax consultants as processors within the meaning of art. 28 GDPR or to financial and social authorities, etc.; evaluation of customer data for internal marketing purposes, for example, to Schufa), the legality of this processing is based on your consent.<\/strong><\/p> A given consent can be revoked at any time; see art. 7 para. 3 GDPR. This also applies to the revocation of declarations of consent, which \u2013 such as the SCHUFA declaration \u2013 were granted to us before the validity of the GDPR, that is before 25 May 2018.<\/strong><\/p> \u00a0 \u00a0 \u00a0b. For the fulfillment of contractual obligations The processing of personal data is done, for example<\/strong><\/p> Further details on the purpose of data processing can be found in the respective contract documents and the terms and conditions.<\/strong><\/p> \u00a0 \u00a0 \u00a0c. Due to legal requirements, for the protection of vital interests or in the public interest In addition, as RT we are subject to various legal obligations, which means legal requirements that may also be justified in the public interest:<\/strong><\/p> The processing of personal data may therefore be necessary, for example, to fulfill tax control and reporting obligations, to prevent fraud and money laundering and \/ or to verify identity and age; such arise among others from the banking act, money laundering act and \/ or various tax laws.<\/strong><\/p> In rare cases, the processing of personal data may be required even if the vital interests of the data subject or another natural person are to be protected. This would be the case, for example, if a visitor (for example customer) would be injured in our company in Darmstadt (Haasstr 4, 64293 Darmstadt, Germany), on one of our exhibition stands, transfer areas of the motorhomes or in our rented seminar facilities and then his data (including name, age, health insurance data or other vital information) would have to be forwarded to a doctor, hospital or other third party.<\/strong><\/p> \u00a0 \u00a0 \u00a0d. In the context of the balance of interests In the end, processing of your personal data can be based on art. 6 I lit. f GDPR.<\/strong><\/p> Processing operations are based on this legal basis if processing is necessary to safeguard the legitimate interests of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the person concerned prevail.<\/strong><\/p> Therefore, we process your data in addition to the actual fulfillment of the contract for the protection of legitimate interests of us or third parties. Examples are:<\/strong><\/p> \u00a0<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t If necessary, we process and store your personal data at least for the period required by applicable law.<\/strong><\/p> The respective legal storage and documentation obligations serve the fulfillment of legal claims; they result from the Commercial Code (HGB), the Tax Code (AO), the Banking Act (KWG) or the Money Laundering Act (GwG).<\/strong><\/p> Longer retention periods are possible as far as operational needs (for example: proper administration of customer, supplier and personal data) or the compliance with official regulations require this.<\/strong><\/p> For example, we at RT retain most customer data for the duration of the contract and for a period of 11 years after the end of the contract.<\/strong><\/p> Within the company RT, those entities receive your data, which they need to fulfill our contractual and legal obligations. External processors (within the meaning of article 28 GDPR) employed by us may also receive data for these purposes. These are companies in the categories of credit-related services, IT services, logistics, printing services, telecommunications, debt collection, tax consultancy and sales and marketing.<\/strong><\/p> For security reasons and to protect the transmission of confidential content, our company homepage uses a transmission method based on the SSL protocol (Secure Sockets Layer) or on a TLS (Transport Layer Security) encryption.<\/strong><\/p> These protocols allow encryption of all traffic between your browser and our servers. This protects your data during transmission against manipulation and unauthorized access by third parties as far as possible.<\/strong><\/p> An encrypted connection is indicated by the browser\u2019s address bar changing from \u201chttp: \/\/\u201d to \u201chttps: \/\/\u201d and by the lock icon in your browser bar. If SSL or TLS encryption is enabled, the data you submit to us can basically not be read by third parties<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t a. Privacy policy for the use of so-called \u201ccookies\u201d<\/strong><\/p> We have a legitimate interest in making our websites attractive and enabling the use of certain features, as well as making our offering more user-friendly, effective and secure. In order to optimize our web offers and continue to provide them technically error-free, we use cookies.<\/strong><\/p> \u00a0 \u00a0 \u00a0(1) Description and scope of data processing<\/strong><\/p> Our website uses cookies. Cookies are text files that are stored in the Internet browser or in the Internet browser on the user\u2019s computer system. When a user visits a website, a cookie may be stored on the user\u2019s operating system.\u00a0 Ruft ein Nutzer eine Website auf, so kann ein Cookie auf dem Betriebssystem des Nutzers gespeichert werden. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.<\/strong><\/p> We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser be identified even after a page break.<\/strong><\/p> \u00a0 \u00a0 \u00a0(2)\u00a0Legal basis for data processing<\/strong><\/p> The legal basis for the processing of personal data using cookies is Article 6 (1) lit. F GDPR.<\/strong><\/p> \u00a0 \u00a0 \u00a0(3)\u00a0Purpose of the data processing<\/strong><\/p> The purpose of using technically necessary cookies is to simplify the use of websites for users. Among other things, we need cookies for the following applications:<\/strong><\/p> \u00a0 \u00a0 \u00a0aa) simplification of the login process (storage subdomain, if necessary username)<\/strong><\/p> \u00a0 \u00a0 \u00a0bb)\u00a0if necessary assignment of a registration to a cooperation partner (affiliate)<\/strong><\/p> \u00a0 \u00a0 \u00a0cc)\u00a0permanent storage of UI settings (here: preferred language)<\/strong><\/p> The user data collected by technically necessary cookies will not be used to create user profiles. \u00a0 \u00a0 \u00a0(4)\u00a0Duration of retention, objection and disposal<\/strong><\/p> Cookies are stored on the computer of the user and transmitted by him to our site. Therefore, as a user, you have full control over the use of cookies.<\/strong><\/p> \u00a0 \u00a0aa) Firefox: \u00a0 \u00a0bb) Chrome:\u00a0 \u00a0 \u00a0cc) Internet Explorer:\u00a01.General<\/strong><\/h5>
2.Definitions set out in art. 4 GDPR<\/strong><\/h5>
\u201ePersonal data\u201c\u00a0 means any information\u00a0 referring to an identified or identifiable natural person(hereinafter the “data subject”). A natural person is considered to be identifiable, who, directly or indirectly can be identified, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, which expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.<\/p>
\u201eProcessing\u201c is any operation or set of operations performed upon personal data with or without the aid of automated procedures, such as specification, collection, organization, ordering, storage, adaptation or modification, reading, querying, use, disclosure through submission, dissemination or any other form of provision, reconciliation or association, restriction, erasure or destruction.<\/p>
\u201eRestriction of Processing “is the marking of personal data retained with the aim of limiting its future processing.\u00a0<\/p>
\u201eProfiling\u201c\u00a0 is any kind of automated processing of personal data that consists in using this personal information to evaluate certain personal aspects relating to a natural person, and in particular to analyze or predict aspects related to job performance, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts, or relocation of that natural person.\u00a0<\/p>
“Pseudonymization” means the processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without the help of additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that that personal data information is not assigned to an identified or identifiable natural person.<\/p>
\u201eThe person concerned” means any identified or identifiable natural person whose personal data is processed by the controller.\u00a0<\/p>
“File system” means any structured collection of personal data accessible by specific criteria, whether that collection is centralized, decentralized or organized according to functional or geographical considerations.<\/p>
\u201eController\u201c is a natural or legal person, public authority, agency or other entity, who decides alone or jointly with others on the purposes and means of processing personal data. If the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union or national law.<\/p>
“Processor” means a natural or legal person, public authority, agency or other entity that processes personal data on behalf of the controller.\u00a0<\/p>
“Receiver” is a natural or legal person, public authority, agency or other entity to which personal data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered to be beneficiaries.<\/p>
“Third party” means a natural or legal person, public authority, agency or other entity than the data subject, the controller, the processor and the persons empowered under the direct responsibility of the controller or the processor to process the personal data<\/p>
“Consent” means any expression of will voluntarily and unambiguously delivered by the data subject in the form of a statement or other unambiguous confirmatory act by which the data subject indicates that they agree with the processing of the personal data concerning them.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t3. Name and contact details of the responsible authority (art. 13 paragraph 1 lit. a\u00a0 GDPR)<\/strong><\/h5>
4. Which data do we use?<\/strong><\/h5>
5. Legal basis and purpose of data processing\u00a0<\/strong><\/h5>
Depending on the nature of the contract, we process personal data as listed below:<\/strong><\/p>
<\/strong>(art. 6 paragraph 1 (a)\u00a0 GDPR)<\/strong><\/p>
Please note that the revocation only works for the future. Processing that occurred before the revocation is not affected.<\/strong><\/p>
<\/strong>(art. 6 paragraph 1 (b) GDPR)<\/strong><\/p>
<\/strong>(art. 6 paragraph 1 (c, d, e) GDPR)<\/strong><\/p>
<\/strong>(art. 6 paragraph 1 (f) GDPR)<\/strong><\/p>
An overriding legitimate interest can also be accepted according to the second sentence of recital 47 GDPR if the person concerned is a customer of the person responsible.<\/strong><\/p>6. How long will my data be retained?<\/strong><\/h5>
However, the storage period is also judged by the statutory limitation periods, which, for example, after \u00a7\u00a7195 ff. of the Civil Code (BGB) can generally be 3 years, but in certain cases up to 30 years.<\/strong><\/p>
This is due to the 10-year limitation period pursuant to \u00a7199 paragraph 3 sentence 1 no. 1 and paragraph 4 BGB.
For interested parties without subsequent contract conclusion, depending on the intensity of the contract initiation, a retention period of six to 14 months applies; in special cases up to 3 years (limitation of claims for damages due to culpa in contrahendo in accordance with \u00a7 311 paragraph 2 BGB i.V.m. \u00a7 195 BGB).<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t7. Who gets my data?<\/strong><\/h5>
With regard to the data transfer to recipients outside of RT, it should first be noted that we are bound to secrecy about all customer-related facts and valuations of which we become aware.<\/strong><\/p>
We may only disclose information about you if statutory provisions require it, if you have consented to it or if we are otherwise authorized to do so. Under these conditions, recipients of personal data may be, for example: tax authorities; social funds and authorities; employment agencies; bureaus; Schufa; other public entities and institutions.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t8. Encryption of personal data \u00a0 (SSL- or TLS-encryption)<\/strong><\/h5>
9. Special data protection advice on the use of data collection, analysis tools and advertising in our online offers<\/strong><\/h5>
Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break.<\/strong><\/p>
For these purposes, our legitimate interest in the processing of personal data pursuant to art. 6 paragraph 1 lit. f GDPR.<\/strong><\/p>
So you have the option to allow or block the setting of cookies only for individual cases or to exclude them in general and to delete already set cookies. In such a case, we must point out that certain features on our website no longer work, or not properly or only partially. If needed you can deactivate the storage of cookies in the corresponding settings for \u201cthird party cookies\u201d of your web browser. The settings can be found for the respective common browsers under the following links:<\/strong><\/p>
<\/strong>https:\/\/support.mozilla.org\/de\/kb\/cookies-erlauben-und-ablehnen<\/a>\u00a0<\/strong><\/p>
<\/strong>http:\/\/support.google.com\/chrome\/bin\/answer.py?hl=de&hlrm=en&answer=95647<\/a>\u00a0<\/strong><\/p>