Loading Categories Privacy Policy
Sect. 1 General
We are pleased that you visit our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is all data that allows you to be personally identified.
We will process your personal data (e.g. title, name, address, e-mail address, phone number, bank details, credit card number) solely in accordance with the provisions of the German data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please familiarise yourself with the respective use of your data there.
This website uses for security and to protect the transmission of personal data and other confidential content (e.g., orders or requests to the person in charge) an SSL or TLS encryption. You can recognize an encrypted connection by the string "https: //" and the lock icon in your browser bar.
Contact data and data protection officer
The data controller under Art. 4 (7) GDPR is (StellaTech, Graziano Vallera, Finkenkruger Str. 59a, 14612 Falkensee, Germany, Tel. +493322-8529113, Fax: +493322-8529111, Email: info@stellatech.com). The data protection officer for (StellaTech, Graziano Vallera) can be contacted at the above address for the attention of the Data Protection Department or by email at: data-protection@stellatech.com.
In the following we inform about the collection of personal data. Personal data is all data that is personally obtained to you, eg. Name, address, e-mail addresses, phone number.
Sect. 2 Data processing when opening a customer account and for the performance of contracts
According to Article 6 (1) (b) of the GDPR, Personal data will continue to be collected and processed when you submit them to us for the execution of a contract or the opening of a customer account. Which data are collected, can be seen from the respective input forms. A deletion of your customer account is possible at any time and can be performed by sending a message to the above mentioned contact details.
Your personal data you provide us during the ordering process are necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we would not be able to send you the goods without your address. For some payment methods we ask for the necessary payment data in order to pass them on to a payment service provider commissioned by us. Hence, the processing of your data collected during the ordering process is soley for the purpose of contract performance.
We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.
We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).
The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.
We transfer personal data to the responsible department in our own company (customer service, product management, purchasing, accounting, logistics), as well as to:
Hosting service provider for storing our website data and our enterprise resource planning software / order management system: Hosting Provider Hetzner Online GmbH, Am Datacenter-Park 1, 08223 Falkenstein/Vogtland, Germany
For financial accounting and for the verification of company data for intra-Community trade, we provide personal data to: Bundeszentralamt für Steuern (Federal Central Tax Office), An der Küppe 1, 53225 Bonn, Germany as well as to: Tax agency Wirtschafts- und Steuerberatung Reinke GmbH Steuerberatungsgesellschaft, Meinekestrasse 27, 10719 Berlin, Germany
For sending emails to: OVH GmbH, Dudweiler Landstrasse 5, 66123 Saarbrücken,Germany as well as to Mailjet SAS, 13-13 bis, Rue de l'Aubrac, 75012 Paris, France
For the processing of emails which are summarized and edited in a ticket system to: Freshworks GmbH, Alte Jakobstraße 85/86, Hof 3, Haus 6, 10179 Berlin, Germany
Duration of Storage
We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.
We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).
The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.
Sect 3 Contact & contact form
When contacting us (for example via contact form or e-mail), personal data is collected. Which data are collected in the case of a contact form can be seen from the respective contact form.
These data are stored and used solely for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) of the GDPR. If your contact is aimed at concluding a contract, then additional legal basis for the processing is Article 6 (1) (b) of the GDPR. We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire. We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)). The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.
Duration of Storage
We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.
We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).
The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.
Sect. 4 Complaints
If you send us further data in the course of a complaint by using our complaint area in the web shop (Report a reclamation), or by email, the data will be collected, saved and (where appropriate) passed on by us if this is necessary to deal with your complaint. Consequently, the collection, saving and passing on of data takes place for the purpose of performing a contract with the data subject on the basis of Art. 6 (1), sentence 1 (b) GDPR. Failure to provide this information means that a complaint cannot be dealt with and that goods and/or services cannot be delivered or (as the case may be) refunds or substitute deliveries cannot be arranged.
Duration of Storage
We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.
We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).
The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.
Sect. 5 Electronic payment transactions
For the execution of orders via our webshop it is required to perform electronic payment transactions. In relation to the procedure for electronic payment transactions - The data is collected, saved and (where appropriate) passed on by us if this is necessary to make a payment or refund to an account or a credit note. Consequently, the collection, saving and passing on of data takes place for the purpose of performing a contract with the data subject on the basis of Art. 6 (1), sentence 1 (b) GDPR or in order to take steps prior to entering a contract at the request of the data subject on the basis of Art. 6 (1), sentence 1 (b) GDPR. Failure to provide this information means that a payment or refund to an account or a credit note cannot be made.
For payments & refunds, we transfer the required data to the respective necessary payment service provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, Deutsche Bank AG, Taunusanlage 12, 60325 Frankfurt am Main, Germany or Klarna (formerly Sofortbanking): Klarna Bank AB , Sveavägen 46, 111 34 Stockholm, Sweden.
Duration of Storage
We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.
We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).
The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.
Sect. 6 PayPal transactions
Please note that all PayPal transactions are subject to the PayPal Privacy Policy:
Sect. 7 Shipping of goods
In relation to the procedure for shipping goods - The data are collected, saved and (where appropriate) passed on by us if this is necessary to deal with your order. Consequently, the collection, saving and passing on of data takes place for the purpose of performing a contract with the data subject on the basis of Art. 6 (1), sentence 1 (b) GDPR or in order to take steps prior to entering a contract at the request of the data subject on the basis of Art. 6 (1), sentence 1 (b) GDPR.
Failure to provide this information means that an order cannot be carried out and that goods and/or services cannot be delivered.
For the shipment of goods we transfer personal data to the respectively necessary shipping service provider: FedEx Express Germany GmbH, Langer Kornweg 34 k, 65451 Kelsterbach, DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany, Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany, UPS, Görlitzer Straße 1, 41460 Neuss,Germany TNT Express GmbH, Haberstraße 2, 53842 Troisdorf,Germany or to DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany
Duration of Storage
We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.
We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).
The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.
Sect. 8 Customs clearance
For the international export of goods, it is necessary to declare the shipment and apply for export documents. In relation to the procedure for customs clearance - The data are collected, saved and (where appropriate) passed on by us if this is necessary to deal with your export order. Consequently, the collection, saving and passing on of data takes place for the purpose of performing a contract with the data subject on the basis of Art. 6 (1), sentence 1 (b) GDPR or in order to take steps prior to entering a contract at the request of the data subject on the basis of Art. 6 (1), sentence 1 (b) GDPR. Failure to provide this information means that an order cannot be carried out and that goods and/or services cannot be delivered.
For the customs clearance process, we may submit the required data to:
Customs offices : Zollamt (Ausfuhrzollstelle),Berliner Str. 8, 16727 Velten, Germany Hauptzollstelle Köln, Am Niehler Hafen 4, 50735 Köln, Germany Hauptzollamt Frankfurt am Main, Frankfurter Flughafen, Hahnstraße 68-70, 60528 Frankfurt am Main, Germany, Zollamt Berlin-Flughafen-Tegel, 13405 Berlin, Germany, Zollamt Schönefeld, Georg-Wulf-Str. 1, 12529 Schönefeld, Germany as well as to AEB Express, Sigmaringer Str. 109, 70567 Stuttgart, Germany
Duration of Storage
We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.
We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).
The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.
Sect. 9 Verification of merchant accounts / Intra-community trade
For the verification and activation of a merchant account for our B2B area, as well as for possible intra-community trade, it is necessary to request further company data.
In relation to this procedure - The data are collected, saved and (where appropriate) passed on by us if this is necessary to check your company information in relation to intra-community trade. Consequently, the collection, saving and passing on of data takes place for the purpose of performing a contract with the data subject on the basis of Art. 6 (1), sentence 1 (b) GDPR or in order to take steps prior to entering a contract at the request of the data subject on the basis of Art. 6 (1), sentence 1 (b) GDPR or for the purpose of fulfilling a legal obligation of the data controller on the basis of Art. 6 (1), sentence 1 (c) GDPR. Failure to provide this information means that an activation of a merchant account can not be offered and / or that a tax-exempt intra-community supply cannot be realized.
For the verification of company data for intra-Community trade, we submit personal data to: Bundeszentralamt für Steuern (Federal Central Tax Office), An der Küppe 1, 53225 Bonn, Germany as well as to: Tax agency Wirtschafts- und Steuerberatung Reinke GmbH Steuerberatungsgesellschaft, Meinekestrasse 27, 10719 Berlin, Germany
Duration of Storage
We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.
We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).
The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.
Sect. 10 Web analysis with Google Analytics
(1) This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called “cookies”, or text files that are stored on your computer to facilitate analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is sent to a Google server in the U.S. and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activities for the website operators and to provide other services related to website and internet usage. If necessary, Google will also transmit this information to third parties, if this is prescribed by law or if a third party is processing this data on behalf of Google. Under no circumstances will Google link your IP address to other data stored by Google.
(2) Legal basis
The legal basis for this processing is article 6 (1) (f) GDPR.
(3) Legitimate interest
Our legitimate interest is the statistical analysis of user behavior for optimization and marketing purposes. This website uses Google Analytics with the “anonymizeIP()” add-on, which processes the IP addresses of site visitors only in shortened form to exclude direct personal identification.
(4) Categories of recipients
Google, Partner companies
(5) Transmission to a third country
Google LLC, based in the United States, is certified to the US-European privacy agreement „Privacy Shield“, which ensures compliance with the level of data protection in the EU.
(6) Duration of Storage
1. Storage duration of user and event data: 50 month
2. Storage duration of other tracking data: see the table „Used cookies“ under Sect. 10
(7) RIGHT OF REVOCATION
You can prevent the installation of the cookies by a setting in your browser software; we would, however, draw your attention to the fact that you might then be unable to make full use of the functions of this website. By using this website, you are stating your consent to the processing of the data obtained about you by Google in the manner described above and for the aforementioned purpose. You may revoke your consent to the collection and use of your IP address by Google Analytics at any time, with effect for the future. More details can be found at:
Alternatively, to the browser plugin or within browsers on mobile devices you can click on the following link to put an opt-out cookie. This will avoid the recording by Google Analytics on this webpage for the future. This opt-out cookie will only work in the current browser and only for this domain. After deleting cookies from your browser you have to click the link again:
DoubleClick
Our webpage is using the functionalities of Google Analytics in connection with the Google DoubleClick Network. The Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. DoubleClick uses cookies to show as relevant advertisements as possible. Google keeps track of which ads have been shown to you and which ones you have clicked on. Using the DoubleClick cookies allows Google and its network to serve ads based on your previous visits to websites (or apps). The information generated by the cookies are transmitted by Google for evaluation to a Google server and stored there.
You can permanently deactivate cookie for advertisement by blocking them in your browser settings or by downloading and installing the browser plug-in available under the following link:
Please note that certain functions of this website may not be used or may only be of limited use if you have deactivated the use of cookies.
Sect. 11 Embedded YouTube videos
We have included YouTube videos on our website, which are stored on the servers of the provider YouTube and are playable from our website via an embedding. Embedding the videos is done with the advanced privacy option enabled. When you play these videos, your computer will store YouTube cookies and DoubleClick cookies and may transfer data to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, which is the operator of YouTube.
When playing videos stored on YouTube, at least the following data will be transmitted to Google: IP address & cookie, the specific address of the page you visited, system date and time of the page view, identification of your browser.
Whether you have a Google Account that you are logged in to, or you do not have a user account, the transfer of this information occurs. If you're signed in like this, Google may associate that information directly with your account. If you do not wish to be assigned to your profile, you must log out before activating the play button for the video.
YouTube / Google store these data as user profiles and may use them for purposes of advertising, market research and / or custom design of their websites. Such an evaluation is done in particular (also for non-registered users) to provide needs-based advertising and to inform other users about your activities on our website. You have the right to object to the formation of these user profiles but you must be directed to Google as the operator of YouTube to exercise it.
Further information on the purpose and scope of the data collection and its processing by Google can be found on this information page: https://policies.google.com/privacy?hl=en&gl=en
Sect. 12 Information about cookies
(1) Purpose of data processing
This website uses technically necessary cookies. These are small text files that are stored for a short period in or by your Internet browser on your computer system. These cookies are employed, for example, when several products must be inserted in a shopping basket.
Other cookies remain stored permanently and recognize your browser on your next visit. These cookies are employed, for example, to store permanently your passwords for a customer account.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies and long term cookies are not used to create user profiles to preserve your interest in data protection.
(4) Duration of Storage
The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies remain stored from a few minutes to several years.
(5) Right of revocation
If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website. Your consent to persistent cookies can be withdrawn at any time by deleting the cookies in your browser settings.
Used cookies
Foo
Bar
Domain
Name of the cookie
Description
Deletion
Disabling (Opt-out)
stellatech.com
setcookie('current_script', $current_script);
to store the text value ''de"/"en"
after finishing the browser session
by disabling the acceptance of cookies in your browser; may have negative effect on the functions of our webshop
stellatech.com
$_COOKIE['PHPSESSID']
server is using this to identify user
after finishing the browser session
by disabling the acceptance of cookies in your browser; may have negative effect on the functions of our webshop
stellatech.com
get_cookie('popsite')
stores the text value "yes" when emails are send in bulk(e.g. newsletter)
after finishing the browser session
by disabling the acceptance of cookies in your browser; may have negative effect on the functions of our webshop
stellatech.com
'browserupdateorg'=pause
In some javascript file this is used, internal purpose to store text value 'pause'
after 24 hours
by disabling the acceptance of cookies in your browser; may have negative effect on the functions of our webshop
third provider
_utma
Used by Google Analytics to store information about the number of visits, the first visit, and the last visit
after 2 years
third provider
_utmb
Used by Google Analytics to track the time a user enters a website
after 30 minutes
third provider
_utmc
"session cookie" => stores a so-calles session id which enables to assign different requests of your browser to the common session.
after finishing the browser session
third provider
_utmt
used to throttle the request rate
after 10 minutes
third provider
_utmz
used for the measurement of traffic through advertising campaigns
after 6 month
third provider
_ga
used by Google Analytics to track user activity across multiple browser sessions
after 2 years
Sect. 13 Newsletter
13.1 Registering for our newsletter
If you register to receive our email newsletter, we will regularly send you information about our range of products and services.
The only mandatory information required for sending the newsletter is your email address. The provision of any other data is voluntary and is used to address you personally. You do not have to provide this data. After you provide confirmation we save your email address for the purpose of sending you the newsletter. The legal basis for this is Art. 6 (1), sentence (1) (a) GDPR. To send the newsletter we use the so-called “double opt-in procedure”. This means that we will only send an email newsletter to you if you have expressly confirmed that you consent to the newsletter being sent. We then send you a confirmation email, which asks you to confirm that you wish to receive the newsletter in future by clicking on the relevant link. When you activate the confirmation link you grant your consent for us to use your personal data in accordance with Art. 6 (1), [sentence 1] (a) GDPR.
13.2 When you register for our newsletter we save your IP address registered by the internet service provider (ISP), as well as the date and time of registration, so that we can prove your registration later and (where appropriate) investigate any possible misuse of your personal data.
The data collected by us upon registration is only used to make promotional approaches by way of the newsletter. You can withdraw your consent to receipt of the newsletter and cancel it at any time. You can declare that you withdraw your consent by clicking on the link provided in every newsletter email, by email to info@stellatech.com or by message to the contact details specified in our legal notice. This does not affect the legality of any data processing that took place on the basis of the consent until it was withdrawn.
13.3 Sending newsletters to existing customers
If you provided us with your email address when purchasing products, we reserve the right to email you with regular offers relating to products in our range that are similar to those already purchased. Pursuant to § 7 (3) of the German Unfair Competition Act (UWG), we do not need to obtain a separate consent from you to do this. Data processing in this respect takes place solely on the basis of our legitimate interest in personalised direct advertising pursuant to Art. 6 (1) (f) GDPR. If you objected to the use of your email address for this purpose at the outset, we will not send you any emails. You are entitled to object to the use of your email address for the above advertising purposes at any time with effect for the future by sending a message to the data controller named above. We will discontinue the use of your email address for advertising purposes without delay after receipt of your objection.
13.4 We expressly point out that we evaluate your user behaviour when we send our newsletters. For this evaluation, the emails that are sent contain so-called “web-beacons” or “tracking pixels”. These are one-pixel image files saved on our website. To carry out the evaluations we link the data provided to us pursuant to point 11.2 above and the web-beacons with your email address and an individual ID. Links contained in the newsletter also contain this ID.
We create a user profile from the data obtained in this way. This user profile is used to tailor the newsletter to your individual interests. When you read our newsletter, we record which links you click on and then use this to draw inferences about your personal interests. We link this data to your activities on our website.
You can object to such tracking at any time by clicking on the separate unsubscribe link included in every newsletter or informing us of this using another method of contact. The information is saved for as long as you subscribe to the newsletter. After you unsubscribe we save the data in a purely statistical and anonymous form.
Please note that such tracking is not possible if you have deactivated the displaying of images in your email programme as standard. In this event, the newsletter will not be fully displayed and you may not be able to use all of the functions. If you display the images manually, the above-described tracking occurs.
For sending emails we submit personal data to mail providers: OVH GmbH, Dudweiler Landstrasse 5, 66123 Saarbrücken,Germany as well as to Mailjet SAS, 13-13 bis, Rue de l'Aubrac, 75012 Paris, France
Duration of Storage
Your e-mail address will only be stored for the respective duration of your registration.
Sect. 14 Use of the service provider "WhatsApp"
With our mobile phone number, you can contact us via WhatsApp.
After sending your start message, your personal data will be processed by WhatsApp, Inc. based on Art. 6 para. 1 sentence 1 lit. b DSGVO processed (for example, name and first name, phone number, messenger ID, profile picture, messages).
EU representative under Article 27 for data processing, WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland is available at:
The processing also takes place in the USA for commercial purposes. If you do not want this, please do not use the service WhatsApp.
To use this service, an existing messaging account at WhatsApp is required. Please note that in this way WhatsApp receives personal data (in particular communication meta data) which is also passed on to other companies within the Facebook group and will be processed on servers in countries outside the EU (for example USA) in which an adequate level of data protection cannot be guaranteed. However, WhatsApp Inc. and Facebook Inc. are certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law. Further information includes the above-mentioned data protection guideline. We have no exact knowledge and no influence on the data processing by WhatsApp.
Your data processed for this service will be saved by WhatsApp indefinitely.
Revocation for data processing
The data processing can be contradicted at any time by entering "STOP" in WhatsApp.
Sect. 15 Backorder notification
In relation to the procedure for reminders about desired products when they become re-available - As a registered customer of the online shop with a user account, it is possible for you to be notified by email as soon as an item that is currently out of stock becomes available again.
In order to do this, you can place the desired articles (of which insufficient quantities are available) in your basket by clicking on the basket. If there is insufficient stock, the number of unavailable items will be shown in the outstanding items list in your basket and you will be automatically notified when the desired items become available again. This process does not oblige you to purchase the items. However, you will receive notification emails for these items until you buy them or remove them from your basket.
No other data are collected. Only the email address, name and title already provided on registration for the user account are utilised so that the notification addresses you personally.
You can stop notifications in the event of re-availability at any time by removing the item from your basket.
We reserve the right to automatically remove entries for re-availability notifications from the outstanding items list in the basket if the customer has not reacted to 3 notifications.
For sending emails we submit personal data to mail providers: OVH GmbH, Dudweiler Landstrasse 5, 66123 Saarbrücken,Germany as well as to Mailjet SAS, 13-13 bis, Rue de l'Aubrac, 75012 Paris, France
Duration of Storage
Your e-mail address will only be stored for the respective duration of your registration.
Sect. 16 Rights of the data subject
If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards the controller:
1. Right of access by the data subject
You may ask the controller to confirm whether your personal data is processed.
In the case of such processing, you may request the following information from the controller:
(1) the purposes of the processing of the personal data;
(2) the categories of personal data concerned;
(3) the recipients or categories of recipient to whom the personal data have been or will be disclosed;
(4) the estimated period of time for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(5) the right to request from the controller to rectify or erase the personal data or the right to restrict the processing of personal data concerning the data subject or to object to such processing;
(6) the right to lodge a complaint with a supervisory authority;
(7) the right to all available information on the source of the data if the personal data are not collected from the data subject;
(8) the existence of automated decision-making, including profiling in accordance with Article 22 (1) and (4) of the GDPR and - at least in these cases - meaningful information for your about the logic involved, as well as the consequences and intended effects of such processing.
As a data subject, you have the right to be informed whether the personal data concerning you are transferred to a third country or to an international organisation. In this regard, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
2. Right to rectification
You have the right to have corrected and/or completed your personal data from the controller if your personal data processed is incorrect or incomplete. The controller has to make the correction without delay.
3. Right to restriction of processing
You have the right to obtain from the controller restriction of processing where one of the following applies:
(1) if you contest the accuracy of the personal data relating to you for a period of time that enables the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse to erase the personal data and request the restriction of the use of the personal data instead;
(3) the controller no longer needs the personal data for the purposes of processing, but you need them to establish, exercise or defend legal claims; or
(4) if you have lodged an objection against the processing in accordance with Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your grounds.
Where processing of personal data relating to you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the purpose of establishing, exercising or defending legal claims or for the protecting of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the conditions mentioned above, you will be informed by the controller before the restriction of processing is lifted.
4. Right to erasure
a) Obligation regarding erasure
You have the right to obtain from the controller the erasure of your personal data immediately and the controller is obliged to erase this data without delay where one of the following reasons applies:
(1) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
(2) you withdraw your consent on which the processing is based accordance to point (a) of Article 6 (1), or point (a) of Article 9 (2) GDPR and where there is no other legal ground for the processing;
(3) you submit an objection to the processing accordance to Article 21 (1) of the GDPR, and there are no legitimate reasons for the processing, or you lodge an objection against the processing accordance to Article 21 (2) of the GDPR;
(4) your personal data have been unlawfully processed;
(5) your personal data need to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
(6) your personal data have been collected in relation to the offer information society services referred to Article 8 (1);
b) Obligation to inform other controllers (third parties)
If the controller has made your personal data public and is obliged to erase them accordance to Article 17 (1) of the GDPR, he has to take reasonable steps, taking into account the available technology and the cost of implementation, including technical measures, to inform the controllers who process the personal data that you, as the person concerned, have requested the erasure of any links to, or copy or replication of those personal data.
c) Exceptions
The right to erasure does not apply to the extent that processing is necessary:
(1) for exercising the right of freedom of expression and information;
(2) for fulfilment of a legal obligation which requires processing by the law of the Union or of the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or the exercise of official authority transferred to the controller;
(3) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9 (2) as well as Article 9 (3) of the GDPR;
(4) for archiving purposes in the public interest, scientific or historical research or for statistical purposes in accordance with Article 89 (1), insofar as the right referred to in paragraph 1 is likely to make it impossible or seriously impair the achievement of the objectives of such processing; or
(5) for the establishing, exercising or defending legal claims.
5. Notification obligation
If you have made use of your right to correct, erase or restrict the processing of your personal data, the controller is obliged to inform all recipients to whom the personal data have been disclosed of this correction or erasure of the data or limitation of the processing, unless this proves to be impossible or involves a disproportionate effort.
You have the right to be informed of these recipients by the controller.
6. Right to data portability
You have the right to receive the personal data relating to you which you have provided to the data controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance by the controller, who has been provided with the personal data, where:
(1) the processing is based on a consent in accordance with the point (a) of Article 6 (1) or point (a) of Article 9 (2) or on a contract in accordance with the point (b) of Article 6 (1); and
(2) the processing is carried out using automated means.
In exercising this right, you also have the right to have your personal data are transmitted directly from one controller to another, as far as this is technically feasible. Freedoms and rights of other persons may not be affected thereby.
The right to data portability is not applicable to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority given to the data controller.
7. Right to object
For reasons arising from your particular situation, you have the right to object at any time to processing of personal data concerning you, which is carried out based on point (e) or (f) of Article 6 (1); this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you, unless the controller can prove that there are compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims.
Where the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
Where you object to the processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for these purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you have the possibility of exercising your right to object by automated means using technical specifications.
8. Right to withdraw the declaration of consent under Data Protection Act
You have the right to withdraw your declaration of consent under Data Protection Act at any time. The withdrawal of the consent does not affect the legality of the processing carried out on the basis of the consent until the withdrawal.
9. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effect on you or which significantly impairs you in a similar manner.
This does not apply if the decision:
(1) is necessary for entering into, or performance of, a contract between you and a data controller;
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) is based on your explicit consent.
However, these decisions may not be based on special categories of personal data in accordance with Article 9 (1), unless point (a) or (g) of Article 9 (2) applies and appropriate measures to safeguard the rights and freedoms and your legitimate interests are in place.
Regarding the cases referred to in (1) and (3), the data controller has to take appropriate measures to safeguard the rights and freedoms and your legitimate interests, at least the right to obtain human intervention on the part of the data controller, to state his or her own position and to contest the decision.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes this Regulation.
The supervisory authority with which the complaint has been lodged is to inform the complainant on the progress and the outcome of the complaint including the possibility of judicial remedy accordance to Article 78.
Responsible for data processing:
STELLATECH, Graziano Vallera
Finkenkruger Str. 59a
14612 Falkensee
Phone: +493322-8529113
info@stellatech.com
Contact details of our data protection officer:
Finkenkruger Str. 59a
14612 Falkensee
data-protection@stellatech.com