Data protection declaration

Via its website, VERMOP Salmon GmbH offers contracting partners, customers and interested parties extensive information. We place particular value on trusting and secure dealings with your personal data and those of your enterprise

The following data protection declaration is the foundation of our action and an integral part of the business relationship with customers, interested parties and third parties.

On the basis of legal and technical changes, we adapt the data protection declaration when necessary. The most recent version of the data protection declaration, which has been published on the internet site, is valid.

The data protection declaration covers the following points:

CONTENTS

Data protection declaration

1. Name and address of the controller of the processing

2. Name and address of the data protection coordinator

3. Use of cookies

4. Production of log files

5. Analysis tools

6. Links and contents on third parties' sites

7. SSL encryption

8. Registering on our internet site

9. Newsletter

10. Possibilities of getting in contact

11. Routine erasure and blockage of personal data

12. The data subject's rights

12.1. Right to information

12.2. Right to rectification

12.3. Right to restriction of the processing

12.4. Right to erasure

12.5. Right to notification

12.6. Right to data portability

12.7. Right to object

12.8. Right to withdraw the data protection law declaration of consent

12.9. Automated individual decision-making including profiling

12.10. Right to complain to a supervisory authority

13. Forwarding of data to third parties

14. Legal foundation of the processing

15. Duration of storage of personal data

15.1. Questions & ideas

1. Name and address of the controller of the processing

The controller in the sense of the European General Data Protection Regulation, other data protection laws in the member states of the European Union and other directives with a data protection law character is:

VERMOP Salmon GmbH

Zeppelinstraße 24
82205 Gilching
Tel. + 49 8105 77889¬0
Email: datenschutz@vermop.com
Website: http://www.vermop.de

2. Name and address of the data protection coordinator

The data protection coordinator controller of the processing is:

Dirk Janthur
Datenschutzberatung Janthur GmbH Hedelfinger Straße 12
73734 Esslingen
Tel. no.: +49 711 71530104
dirk.janthur@janthur.net

3. Use of cookies

The internet sites of VERMOP Salmon GmbH use cookies. Cookies are files which are stored on the user's computer system by the internet browser. The cookies can be transmitted when a site is accessed and thus enable allocation of the users. Cookies help to simplify the use of internet sites for the users.

It is possible to object to setting of cookies at any time by a matching change of the setting in the internet browser. Cookies which have been set can be deleted. We point out that possibly not all the functions of our internet site can be used to the complete extent if cookies are deactivated.

4. Production of log files

Whenever the internet site is accessed, VERMOP Salmon GmbH collects data and information by means of an automated system. They are stored in the log files of the server.

The following data can be recorded in this:

(1) Information about the type of browser and the version used
(2) The user's operating system
(3) The user's internet service provider
(4) The user's IP address
(5) Date and time of the access
(6) Websites from which the user's system comes to our internet site (referrer)
(7) Websites accessed by the user's system via our website

Processing of the data serves to provide the contents of our internet site, to guarantee functionality of our information technology systems and to optimise our internet site. The data in the log files are always stored separate from the users' other personal data.

 

5. Analysis tools

VERMOP Salmon GmbH uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files which are stored on your computer and enable an analysis of the use of website by you. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information in order to evaluate your use of the website, to collate reports about the website activities for the website operators and to render further services connected with the use of the website and the internet. Google will also transmit this information to third parties if necessary to the extent that this is prescribed by law or to the extent that third parties process these data by order of Google.

You can prevent the installation of cookies by a matching setting of your browser software; however, we point out that you will possibly not be able to use all the functions of this website to the complete extent in such a case. By using this website, you declare your agreement to the processing of the data collected about you by Google in the way described above and for the aforementioned purpose.

 

6. Links and contents on third parties' sites

On the internet sites, you will find links to third parties' offers. VERMOP Salmon GmbH cannot assume any liability for these sites and their dealings with personal data.

Liability note: With a decree of 12 May 1998, Hamburg Regional Court decided that one is possibly co-responsible for the contents of a linked site by attaching a link. The Regional Court stated that this can only be prevented by expressly dissociating oneself from these contents. VERMOP Salmon GmbH has placed links to other sites on the internet on these sites. The following applies to all these links:

VERMOP Salmon GmbH expressly declares that VERMOP Salmon GmbH has no kind of influence on the design and the contents of the linked sites. For this reason, VERMOP Salmon GmbH hereby  expressly dissociates itself from the contents of all the linked sites on the homepage and does not make these contents its own. This declaration applies to all the links displayed on the homepage and to all the contents of the sites to which the banners, buttons and links visible with VERMOP Salmon GmbH lead.

7. SSL encryption

For reasons of security and protection of the transmission of confidential contents, such as the inquiries which you send to us as the site operator, this site uses an SSL encryption. You can recognise encrypted transmission by the fact that the browser's address line changes from "http://" to "https://" and by the lock symbol in your browser line.

When the SSL encryption has been activated, the data which you transmit to us cannot be read by third parties.

8. Registration on our internet site

If the data subject makes use of the possibility of registering on the internet site of the controller of the processing, stating personal data, the data in the input mask in question are transmitted to the controller of the processing. The data are exclusively stored for the purpose of internal use by the controller of the processing.

At registration, the user's IP address and the data and time of the registration are stored. This serves to prevent misuse of the services. There is no forwarding of the data to third parties. An exception exists if a statutory obligation to forwarding exists.

Registration of the data is necessary for provision of contents or services. Registered persons have the possibility of having the stored data erased or adapted at any time. The data subject receives information about the personal data stored about him/her at any time.

9. Newsletter

If our company's newsletter is subscribed to, the data in the input mask in question are transmitted to the controller of the processing.

At the registration to the newsletter, the user's IP address and date and time of the registration are stored. This serves to prevent misuse of the services or of the data subject's e-mail address. There is no forwarding of the data to third parties. An exception exists if a statutory obligation to forwarding exists. 

The data are used exclusively for the dispatch of the newsletter. The subscription to the newsletter can be terminated by the data subject at any time. Likewise, the consent for the storage of the personal data can be withdrawn at any time. For this purpose, there is a matching link in each newsletter.

10. Possibilities of getting in contact

There is a contact form on the VERMOP Salmon GmbH internet site which can be used for electronic contacts. As an alternative, contact via the e-mail address which has been provided is possible. If the data subject gets in touch with the controller of the processing via one of these channels, the personal data transmitted by the data subject are automatically stored. The storage merely serves purposes of processing or contact with the data subject. There is no forwarding of the data to third parties.

This is a voluntary statement of personal data. As a matter of principle, VERMOP Salmon GmbH has taken all technical and organisational measures so that these data are secure as well.

Nevertheless, please be careful with the information and do not transmit any sensitive data via this contact form, e.g. your bank account details.

 

11. Routine erasure and blockage of personal data

The controller of the processing only processes and stores the data subject's personal data for as long as is necessary to achieve the purpose of the storage. Storage can be done in excess of this to the extent that this has been provided for by European or national legislation in Union law ordinances, acts or other directives to which the controller of the processing is subject.

As soon as the purpose of storage does not exist or the storage period provided for by the aforementioned directives expires, the personal data are erased or blocked as a routine matter.

12. The data subject's rights

If personal data of yours are processed, you are the data subject in the sense of the GDPR and the following rights accrue to you against the controller:

You can claim all your rights against the company in accordance with the contact data in point 1 or against our data protection coordinator in accordance with the contact data in point 2.

12.1. Right to information

You can demand a confirmation from the controller about whether personal data concerning you are processed by us.

If such a processing exists, you can demand information from the controller about the following matters:

a. the purposes to which the personal data are processed;
b. the categories of personal data which are processed;
c. the recipients or categories of recipients to whom the personal data concerning you have been or have yet to be disclosed;
d. the planned duration of the storage of the personal data concerning you or, if specific details on this are not possible, criteria for the stipulation of the duration of storage;
e. the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of the processing by the controller or a right of objection to this processing;
f. the existence of a right of complaint to a supervisory authority;
g. all available information about the origin of the data if the personal data were not collected from the data subject;
h. the existence of automated decision-making including profiling according to Art. 22 subparagraphs 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved and the implications and the planned effects of such a processing for the data subject.

You have the right to demand information about whether the personal data concerning you are transmitted to a third country or to an international organisation. In this context, you can demand to be informed about the suitable guarantees according to Art. 46 GDPR in connection with the transmission.

In cases of data processing for scientific or historical research purposes or for statistical research purposes:

This right of information can be restricted to the extent that it prospectively makes implementation of the research or statistical purposes impossible or severely impairs it and the restriction is necessary for the performance of the research or statistical purposes.

12.2. Right to rectification

You have a right to rectification and/or completeness against the controller to the extent that the processed personal data concerning you are incorrect or incomplete. The controller has to make the rectification without undue delay.

In cases of data processing for scientific or historical research purposes or for statistical research purposes:

Your right to rectification can be restricted to the extent that it prospectively makes implementation of the research or statistical purposes impossible or severely impairs it and the restriction is necessary for the performance of the research or statistical purposes.

12.3. Right to restriction of the processing

Under the following preconditions, you can demand restriction of the processing of the personal data concerning you:

a. if you dispute the correctness of the personal data concerning you for a period which enables the controller to examine the correctness of the personal data;
b. The processing is unlawful and you reject erasure of the personal data and instead demand restriction of the use of the personal data;
c. The controller no longer needs the personal data for the purposes of processing, but you need them for establishing, exercising or defending legal claims or
d. If you have objected to the processing pursuant to Art. 21 subparagraph 1 GDPR and it is not yet certain whether the controller’s legitimate reasons prevail over your reasons.

If processing of the personal data concerning you has been restricted, these data - apart from their storage - may only be processed with your consent or in order to establish, to exercise or to defend legal claims or to protect the rights of any other natural or legal entity or for reasons of an important public interest of the Union or of a Member State.

If the processing has been restricted pursuant to the aforementioned preconditions, you will be notified by the controller before the restriction is rescinded.

In cases of data processing for scientific or historical research purposes or for statistical research purposes:

Your right to restriction of the processing can be restricted to the extent that it prospectively makes implementation of the research or statistical purposes impossible or severely impairs it and the restriction is necessary for the performance of the research or statistical purposes.

12.4. Right to erasure

You can demand that the controller erases the personal data concerning you without undue delay and the controller is obliged to erase these data without delay to the extent that one of the following reasons applies:

a. The personal data concerning you are no longer necessary for the purposes for which they have been recorded or processed in any other way.
b. You withdraw your consent on which the processing was based pursuant to Art. 6 subparagraph 1 lit. a or Art. 9 subparagraph 2 lit. a GDPR and there is no other legal foundation for the processing.
c. You make an objection against the processing pursuant to Art. 21 subparagraph 1 GDPR and there are no prevailing legitimate reasons for the processing, or you make an objection against the processing pursuant to Art. 21 subparagraph 2 GDPR.
d. The personal data concerning you have been processed unlawfully.
e. Erasure of the personal data concerning you is necessary for fulfilment of a legal obligation pursuant to Union law or the law of the Member States to which the controller is subject.
f. The personal data concerning you have been recorded with a view to services offered by the information society pursuant to Art. 8 subparagraph 1 GDPR.

12.4.2.

If the controller has made the personal data concerning you public and if he is obliged to erase them pursuant to Art. 17 subparagraph 1 GDPR, he shall take suitable measures, also of a technical nature, taking the available technology and the costs of implementation into due account, in order to inform the persons responsible for data processing who are processing the personal data about the fact that you as the data subject have demanded erasure of all the links to these personal data or of copies or replications of these personal data from them.

12.4.3.

The right to erasure shall not exist to the extent that processing is necessary

a. to exercise the right to freedom of expression and information;
b. to fulfil a legal obligation which requires processing pursuant to Union law or Member State law to which the controller is subject or for attending to a task which is in the public interest or is done in exercising public authority which has been assigned to the controller;
c. for reasons of the public interest in the area of public health pursuant to Art. 9 subparagraph 2 lit. h and i and also Art. 9 subparagraph 3 GDPR; 
d. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 subparagraph 1 GDPR, to the extent that the right stated under Section a) prospectively makes implementation of the purposes of this processing impossible or severely impairs it or
e. to establish, to exercise or to defend legal claims.

12.5. Right to notification

If you have claimed the right to rectification, erasure or restriction of processing from the controller, the latter is obliged to inform all the recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of the processing, unless this proves to be impossible or is connected with disproportionately great efforts.

The right to be informed about these recipients accrues to you vis-à-vis the controller.

12.6. Right to data portability

You have the right to receive the personal data concerning you which you have provided to the controller in a structured, customary and machine-readable format. In addition, you have the right to transmit these data to another controller without impediment by the controller to whom the personal data have already been transmitted, provided

a. processing is based on a consent pursuant to Art. 6 subparagraph 1 lit. a GDPR or Art. 9 subparagraph 2 lit. a GDPR or on a contract pursuant to Art. 6 subparagraph 1 lit. b GDPR and
b. the processing is done by means of automated procedures.

When exercising this right, you further have the right to have the personal data concerning you transmitted directly from one controller to another controller to the extent that this is technically feasible. Freedoms and rights of other persons may not be impaired by this.

The right to data portability does not apply to a processing of personal data which is necessary in order to attend to a task which is in the public interest or is done when exercising public authority which has been assigned to the controller.

12.7. Right to objection

You have the right to make an objection against the processing of the personal data concerning you which is done on the basis of Art. 6 subparagraph 1 lit. e or f GDPR at any time for reasons which result from your particular situation; this also applies to a profiling based on these provisions.

In such a case, the controller no longer processes the personal data concerning you unless he can prove cogent reasons for the processing worthy of protection which prevail over your interests, rights and freedoms, or the processing serves establishing, exercising or defending legal claims. If the personal data concerning you are processed for purposes of direct advertising, you have the right to make an objection against the processing of the personal data concerning you for the purpose of such advertising at any time; this also applies to the profiling to the extent that it is connected with such direct advertising. If you object to the processing for the purpose of direct advertising, the personal data concerning you shall no longer be processed for these purposes.

Notwithstanding Regulation 2002/58/EC, you have the possibility of exercising your right of objection in connection with the use of information society services by means of automated methods in which technical specifications are used.

In cases of data processing for scientific or historical research purposes or for statistical research purposes:

You also have the right to object to the processing of the personal data concerning you for scientific or historical research purposes or for statistical research purposes pursuant to Art. 89 subparagraph 1, GDPR, for reasons which result from your particular situation.

Your right to objection can be restricted to the extent that it prospectively makes implementation of the research or statistical purposes impossible or severely impairs it and the restriction is necessary for the performance of the research or statistical purposes.

12.8. Right to withdrawal of the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. The lawfulness of the processing done on the basis of the consent until the revocation is not affected by the withdrawal of the consent.

12.9. Automated individual decision-making including profiling

You have the right not to be subject to a decision based on exclusively automated processing - including profiling - which develops a legal effect against you or considerably impairs you in a similar way. This does not apply if the decision

a. is necessary for the conclusion or the performance of a contract between yourself and the controller,
b. is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests or
c. is made with your explicit consent.

However, these decisions may not be based on certain categories of personal data according to Art. 9 subparagraph 1 GDPR, to the extent that Art. 9 subparagraph 2 lit. a or g does not apply and suitable measures for the protection of the rights and freedoms and your legitimate interests have been taken.

With a view to the cases stated in a. and c., the controller takes suitable measures in order to safeguard the rights and freedoms and also your legitimate interests, which includes at least the right to achieve intervention by a person on the part of the controller, to portray your own point of view and to object to the decision.

12.10. Right of complaint to a supervisory authority

Notwithstanding any other administrative law or judicial remedy, you also have the right to a complaint to a supervisory authority, in particular in the Member State of your place of residence, your workplace or the place of the assumed breach if you are of the opinion that the processing of the personal data concerning you breaches the GDPR.

The supervisory authority to which the complaint has been sent notifies the complainant about the status and the outcome of the complaint, including the possibility of an effective judicial remedy pursuant to Art. 78 GDPR.

13. Forwarding of the data to third parties

As a matter of principle, there is no forwarding of the data, possible exceptions have been regulated in the above points. Above all, forwarding is not done for commercial purposes (address trading).

14. Legal foundation for the data processing

To the extent that we obtain consent from the data subject for processing procedures, Art. 6 subparagraph 1 lit. a European General Data Protection Regulation (GDPR) serves as the legal foundation for the processing of personal data.

In the processing of personal data which is necessary to perform a contract, the contracting party of which is the data subject, Art. 6 subparagraph 1 lit. b GDPR serves as the legal foundation. This also applies to processing procedures necessary to implement pre-contractual measures.

To the extent that processing of personal data is necessary to fulfil a legal obligation to which our enterprise is subject, Art. 6 subparagraph 1 lit. c GDPR serves as the legal foundation.

In the event of vital interests of the data subject or of another natural entity making processing of personal data necessary, Art. 6 subparagraph 1 lit. d GDPR serves as the legal foundation.

If processing is necessary to safeguard a legitimate interest of our enterprise or a third party and if the data subject’s interests, fundamental rights and fundamental freedoms do not prevail over the first named interest, Art. 6 subparagraph 1 lit. f GDPR serves as the legal foundation for the processing. Our enterprise's justified interest is implementing our business activity.

15. Duration of the storage of personal data

Personal data are stored for the duration of the statutory archiving period in question. After the expiry of the period, the data are erased as a routine matter to the extent that there is no necessity for the preparation or the performance of a contract.

15.1. Questions & ideas

If you have questions and ideas, please send us an e-mail to

datenschutz@vermop.com.

25.05.2018