Data Privacy Statement
The protection of your privacy is important to us! With the following information, we would like to inform you about how we deal with your data that is collected when using our website.
Responsible persons within the meaning of the EU General Data Protection Regulation (GDPR) are:
DD Die Denkfabrik Forschungs und Entwicklungs GmbH
Represented by: Dr.-Ing. Günther W. Diekhöner
Hochschulring 6, 28359 Bremen
Email: [email protected]
DD Die Denkfabrik Asia Pte. Ltd.
Represented by: Philipp Kristian Diekhöner
11 Collyer Quay, #17-00, Singapore 049317
Email: [email protected]
I. Scope and processing of personal data
In principle, we collect and use personal data of our users only to the extent necessary to provide a functional website, content, and services. If this is not the case, the personal data is used regularly only with the consent of the user. An exception applies to cases in which prior consent is not possible for reasons of fact and the processing of the data is permitted by law.
II. Legal basis of processing
Insofar as we obtain the consent of the data subject for processing of personal data, Article 6 paragraph 1 lit. a EU General Data Protection Regulation (GDPR) as legal basis.
In the processing of personal data necessary for the performance of a contract of which the data subject is a party, Article 6 (1) lit. b GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual measures.
To the extent that processing of personal data is required to fulfill a legal obligation to which our company is subject, Article 6 (1) lit. c GDPR as legal basis.
In the event that vital interests of the data subject or any other natural person require the processing of personal data, Article 6 (1) lit. d GDPR as legal basis.
If the processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, then Article 6 (1) lit. f GDPR as legal basis for processing. The legitimate interest of our company lies in the execution of our business activities.
III. Routine deletion and blocking of personal data
We only process and store the personal data of the data subject for as long as necessary to achieve the purpose of the storage. In addition, such storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible for the processing is subject. As soon as the storage purpose is removed or a storage period prescribed by the aforementioned regulations expires, the personal data is routinely blocked or deleted.
IV. Security of your data
We use the widely used Secure Socket Layer (SSL) method in conjunction with the highest level of encryption supported by your browser. In general, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we’ll use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed representation of the key or lock symbol in the lower status bar of your browser.
We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
C. Usage data
I. Log files
1. Description and scope of the data collection
Each time the website is accessed, we or the site provider collects data and information through an automated system. These are stored in the log files of the server.
The following data can be collected here:
– Information about the browser type and version used
– The operating system of the user
– The internet service provider of the user
– The IP address of the user (Anonymized by 2 bytes (e.g. 192.168.xxx.xxx))
– Date and time of access
– Websites from which the user’s system is accessed on our website (referrer)
– Web pages accessed by the user’s system through our website
2. Legal basis for data processing
The legal basis for the temporary storage of the log files is Art. 6 para. 1 lit. f GDPR. Our legitimate interest follows from data collection purposes listed in the next subsection. In no case we use the collected data for the purpose of drawing conclusions about you.
3. Purpose of the data processing
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user’s IP address must be kept for the duration of the session.
The processing and storage in log files is done to ensure the functionality of the website, to optimize our website, to ensure a comfortable use to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed.
4. Duration of storage
In the case of storing the data in log files, this is the case after no more than seven days. An additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
5. Opposition and removal possibility
The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.
The data processed by cookies are for the purposes mentioned in order to safeguard our legitimate interests as well as third parties pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR required.
In addition, cookies are set by Clicky Analytics on our website. For details, please refer to the relevant sections. How can I prevent the storage of cookies?
You can set in your browser that a storage of cookies is accepted only if you agree. You can delete existing cookies. By deactivating cookies, however, the usability of our websites may be limited. Information on how to disable cookies can be found at the following wikihow.com.
D. Your personal data (inventory data)
I. What are “personal data”?
Personal data is information about yourself that allows you to draw conclusions about your identity or relate directly or indirectly to your person, e.g. your name, address or phone number. Information that does not allow conclusions to be made about a specific or identifiable person is not included.
II. Ways to contact
On the website a contact form is available, which can be used for electronic contact. To use the contact form, please enter your name, e-mail address and your message so that we can process and answer your request accordingly. Providing a contact form will serve our legitimate interests as we have more opportunities to contact you. Alternatively, you can contact us via the provided e-mail address ([email protected]), by telephone or at our address. If the data subject contacts the controller through one of these channels, the personal data transmitted by the data subject will be automatically stored. The storage is solely for the purpose of processing or contacting the person concerned. A transfer of data to third parties does not take place. The data is used on the basis of our legitimate interests (Article 6 (1) sentence 1 lit. GDPR). We have an interest in providing our visitors with as many contact channels as possible and responding to them quickly.
III. Forwarding to other websites
IV. Disclosure of data to third parties
Apart from the facts already described, we only pass on your personal data to third parties if:
• If you have given express consent to this according to according to Art. 6 para. 1 sentence 1 lit. a GDPR.
• In the event that disclosure is necessary for compliance with a legal obligation to which the controller is subject according to Art. 6 para. 1 sentence 1 lit. c GDPR.
• If it is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract according to Art. 6 para. 1 sentence 1 lit. b GDPR.
• If the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party according to Art. 6 para. 1 sentence 1 lit. f GDPR
• If the disclosure is required to assert, exercise or defend legal claims according to Art. 6 para. 1 sentence 1 lit. f GDPR, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data.
E. Rights of the data subject
You have the right:
In accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you may request to obtain the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right of rectification, deletion, limitation of processing or opposition, the existence of a Complaint right, the origin of their data, if they were not collected from us, as well as the existence of an automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 DS-BER and possibly provide meaningful information on their details. You have the right to request information on whether the personal data relating to you are being transmitted to a third country or to an international organization, in which connection you may request that the appropriate guarantees be provided. To be informed of Art. 46 DS-BER in connection with the transfer;
In accordance with Art. 16 GDPR do demand the rectification of inaccurate or incomplete personal data stored by us immediately;
in accordance with Art. 17 GDPR, to require the deletion of your personal data stored by us, except where the processing is for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims or for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) of the GDPR is necessary in so far as that law is likely to render impossible or seriously affect the achievement of the objectives of that processing;
in accordance with Art. 18 GDPR to demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject their deletion and we no longer need the data, but you to assert, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR; if the processing of personal data concerning you has been restricted, you may process such data only with your consent or to assert, exercise or defend legal claims or protect the rights of another natural or legal person or for reasons of major public interest of the Union or of a Member State and you will be briefed by the controller before the restriction is lifted;
According to Art. 20 GDPR to receive your personal data, which you have provided to us, in a structured, common and machine-readable format to receive or to require the transfer to another person responsible, as far as freedom and rights of others are not affected. This right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller;
Pursuant to Art. 7 para. 3 GDPR to withdraw your once granted consent at any time. As a result, we are not allowed to continue the data processing based on this consent for the future;
pursuant to Art. 22 GDPR not to be subjected to a decision based solely on automated processing – including profiling – that will have legal effect or similarly affect you in a similar manner, unless the decision is for the purpose of concluding or fulfilling a contract between you and we are required to do so by virtue of Union or Member State legislation to which the controller is subject, and where such legislation contains reasonable measures to safeguard your rights and freedoms and your legitimate interests or with your express consent. These decisions may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g and reasonable measures have been taken to protect the rights and freedoms and your legitimate interests;
according to Art. 77 GDPR to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our office. The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the DS-BER.
F. Right to object
If the processing of your personal data is based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR are processed, you have the right to object against the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or if the objection is directed against direct mail. In the latter case, you have a general right of objection, which is implemented by us without stating a particular situation.
If you would like to exercise your right of revocation or objection, please send an email to [email protected].
G. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement of you consider that the processing of personal data relating to you infringes this Regulation.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78.