Data protection

Thank you for visiting this website. The protection of personal data is very important to us. According to Art. 4 of the European General Data Protection Regulation (hereinafter "GDPR"), personal data is all information that relates to an identified or identifiable natural person (hereinafter "data subject"). These include B. Name, date of birth, address, telephone number and email address.

Name and address of the person responsible for data processing:

Schaar-Goldapp Consulting GmbH

Lion Wall 13

38100 Braunschweig

Germany

Email: hello@schaar-goldapp-consulting.de

Internet site: www.schaar-goldapp-consulting.de

We are not obliged to appoint a data protection officer.

We and our processors take extensive organizational and technical measures to protect the data collected when you visit this website. However, the transmission of data on the Internet, including by e-mail, cannot be completely protected against unauthorized access by third parties. Accordingly, data, messages and information can also be sent to us by post to the above address.

In the following we will inform you how and to what extent personal data is collected, processed and used in connection with visiting this website. We also provide information in Section III. the visitors to our website and data subjects about their rights.

Within the meaning of the GDPR, the term "processing" refers to any process carried out with or without the help of automated processes or any such series of processes in connection with personal data such as the collection, recording, organization, ordering, storage, adaptation or change that Reading, querying, use, disclosure by transmission, distribution or any other form of provision, comparison or linking, restriction, deletion or destruction.

In principle, we only process personal data of visitors to our website insofar as this is necessary for the provision of a functional website and its content as well as for the provision of our services and in accordance with the Union regulations, laws or other regulations issued by European or national legislators.

Insofar as consent has been given by the data subject for the processing of personal data, Article 6 Paragraph (1) Letter a) of the GDPR is the legal basis.

The legal basis for the processing of personal data that is necessary for the performance of a contract to which the data subject is a party is Article 6 Paragraph (1) Letter b) of the GDPR. This also applies to processing operations that are required to carry out pre-contractual measures that are carried out at the request of the person concerned.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 Paragraph (1) Letter c) of the GDPR is the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 Paragraph (1) Letter d) of the GDPR is the legal basis.

If processing is necessary for the performance of a task that is in the public interest or is carried out in the exercise of official authority and has been assigned to us as the person responsible, Article 6 Paragraph (1) Letter e) of the GDPR is the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the interests of our company or the third party, Art. 6 Paragraph (1) Letter f) of the GDPR is the legal basis .

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. A storage can also take place if this is done by the European or a national legislator in Union regulations, laws or other regulations, e.g. B. statutory retention requirements to which our company is subject is provided. At the end of a prescribed storage period, the personal data will be deleted or blocked, unless further storage is required in accordance with one of the above paragraphs 3. b., 3. c., 3. d., 3. e. or 3. f. mentioned legal bases required and permissible.

Each time our website is accessed, the system of our contract processor collects various data and information from the computer system used by the user and saves them in a so-called log file. This data and information can include

In addition, data and information can be recorded in the log file that appear useful in order to ward off possible attacks on the IT systems of our order processor.

The log files are stored to ensure the security of the information technology systems of our contract processor and the functionality of our website. In addition, the data and information stored in the log files are used for statistical evaluations and to improve our website.

The data stored in the log files will only be passed on to third parties if we or our processor are obliged to do so by law or a court decision, or if this is necessary after attacks on the information technology systems of our processor to assert his rights or for criminal prosecution.

In order to avoid the processing of personal data, the user's IP address is pseudonymised before it is saved in the log file. In addition, the data and information contained in the log files are stored separately from the otherwise recorded personal data of data subjects, so that the data and information contained in the log file cannot be assigned to a data subject.

In order to facilitate the visit to our website, so-called temporary cookies (session cookies) are temporarily saved by our website in the memory of the computer used for the visit. These are data records with randomly generated identification numbers and information about its origin and storage period. These session cookies do not contain any personal data and can neither be used for recognition on subsequent visits to our website nor for the evaluation of the interests or surfing behavior of the visitor. The session cookies are automatically deleted when you end your visit to our website or when you close the Internet browser used by the visitor.

Permanently stored cookies (permanent cookies), with the help of which, for example, visitors to Internet pages can be recognized even after a long time, individual settings can be saved or the user behavior of visitors can be evaluated, are not used on our website.

Visitors to our website can prevent the storage of cookies and delete cookies that have already been saved by setting their internet browser accordingly. In this case not all functions of our website can be used.

You can contact us using the contact form offered on our website or by e-mail. The information provided in the contact form is sent to us as an email and then deleted from the website.

The information sent to us via the contact form or by email will only be saved and used to answer your request for contact and to fulfill your request. They will only be passed on to third parties with your consent or if we are legally obliged to do so.

Information not marked with an * (asterisk) in the contact form is optional and not required to answer your contact request. This information is intended to make it easier for us to fulfill your request. You provide this information on a voluntary basis and with your consent. If you give us your telephone number, you also consent to us contacting you by phone to answer your contact request and to fulfill your request.

For your right to revoke your consent to the processing of personal data, please read paragraph 8. In the following section III ..

You have the right at any time to request confirmation from us as the person responsible (see preliminary remarks) free of charge as to whether personal data relating to you will be processed by us. If this is the case, you as the data subject have the right to free information about this personal data and the following information:

the purposes for which the personal data are processed;

the categories of personal data that are processed;

the recipients or the categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;

if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining the storage duration;

the existence of a right to correction or deletion of your personal data, a right to restrict processing by the person responsible or a right to object to this processing;

the existence of a right of appeal to a supervisory authority;

all available information on the origin of the data if the personal data are not collected from the data subject;

The existence of automated decision-making including profiling in accordance with Art. 22 Paragraphs (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for you as the data subject.

You also have the right to request information about whether your personal data is being transmitted to a third country or to an international organization. If this is the case, you have the right to be informed about the appropriate guarantees according to Art. 46 GDPR in connection with the transmission.

As the data subject, you have the right at any time to request that we, as the person responsible (see preliminary remarks), correct incorrect personal data that concern you. Furthermore, as the data subject, you have the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - including by means of a supplementary declaration.

As a data subject, you have the right at any time to request that we as the person responsible (see under preliminary remarks) restrict the processing of your personal data if one of the following conditions is met:

You dispute the accuracy of the personal data concerning you for a period of time that enables the person responsible to check the accuracy of the personal data;

the processing is unlawful and you, as the data subject, refuse to delete the personal data and instead request that the use of the personal data be restricted;

The person responsible no longer needs the personal data for the purposes of processing, but you as the data subject need this data to assert, exercise or defend legal claims;

As the data subject, you have objected to the processing in accordance with Art. 21 Paragraph (1) of the GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of your personal data has been restricted, this data - apart from its storage - may only be used with your consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest processed by the European Union or a member state.

If the processing has been restricted according to the above conditions, you as the data subject will be informed by the person responsible before the restriction is lifted.

As the data subject, you have the right to request the deletion of personal data concerning you at any time from us as the person responsible (see preliminary remarks), and the person responsible is obliged to delete this data immediately if one of the following reasons applies:

The personal data relating to you are no longer necessary for the purposes for which they were collected or otherwise processed.

As the data subject, you revoke your consent on which the processing of personal data was based in accordance with Art. 6 Paragraph (1) Letter a) or Art. 9 Paragraph (2) Letter a) of the GDPR, and there is no other Legal basis for the processing.

As the data subject, you object to the processing in accordance with Art. 21 Paragraph (1) of the GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 Paragraph (2) of the GDPR Processing a.

The personal data concerning you have been processed unlawfully.

The deletion of your personal data is necessary to fulfill a legal obligation under the law of the European Union or the law of the member states to which the person responsible is subject.

The personal data relating to you was collected in relation to information society services offered in accordance with Art. 8 Paragraph (1) of the GDPR.

If we have made the personal data concerning you public and we, as the person responsible, are obliged to delete them in accordance with Art. 17 Paragraph (1) of the GDPR, we will take appropriate measures, including technical measures, to address others, taking into account the available technology and the implementation costs To inform those responsible for data processing who process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.

The right to deletion does not exist if processing is necessary

to exercise the right to freedom of expression and information;

to fulfill a legal obligation that requires processing under the law of the European Union or of the member states to which the person responsible is subject, or to perform a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible;

for reasons of public interest in the field of public health in accordance with Art. 9 Paragraph (2) Letters h) and i) and Art. 9 Paragraph (3) of the GDPR;

for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. (1) of the GDPR, insofar as the right to erasure is likely to make the realization of the objectives of this processing impossible or seriously impair it, or

for the establishment, exercise or defense of legal claims.

If you as the person concerned have asserted the right to correction, deletion or restriction of processing against us as the person responsible, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of any correction or deletion of the data or restriction of processing unless this proves impossible or involves disproportionate effort.

As the person responsible, we will inform you about these recipients if you, as the data subject, request this.

As the data subject, you have the right to receive the personal data concerning you, which you have provided to us as the person responsible, in a structured, common and machine-readable format at any time. You also have the right to transfer this data to another person responsible without hindrance from us as the person responsible to whom the personal data was provided, provided thatthe processing is based on consent in accordance with Art. 6 Paragraph (1) Letter a) or Art. 9 Paragraph (2) Letter a) of the GDPR or on a contract in accordance with Art. 6 Paragraph (1) Letter b) of the GDPR andthe processing is carried out using automated procedures.

This must not impair the freedoms and rights of other people. Your right to restrict the processing of your personal data (see Section III. Paragraph 3) is not restricted by exercising your right to data portability.

When exercising your right to data portability, you as the data subject also have the right to have your personal data transmitted directly from one person responsible to another, insofar as this is technically feasible.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been transferred to the person responsible.

As the data subject, you have the right, for reasons that arise from your particular situation, to object to the processing of your personal data, which is based on Art. 6 Para. (1), at any time with us as the person responsible (see preliminary remarks). Letter e) or f) of the GDPR takes place, to object; this also applies to profiling based on these provisions. As the controller, we will no longer process the personal data relating to you, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you are processed in order to operate direct mail, you have the right to object to the processing of the personal data concerning you for the purpose of such advertising at any time with us as the person responsible (see preliminary remarks); this also applies to profiling insofar as it is connected to such direct advertising. If you object to processing for direct marketing purposes, the personal data relating to you will no longer be processed for these purposes.

In connection with the use of information society services - regardless of Directive 2002/58 / EC - you as the data subject have the option of exercising your right of objection by means of automated procedures that use technical specifications.

You have the right to withdraw your declaration of consent under data protection law at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of revocation. Please send your revocation by email to hello@schaar-goldapp-consulting.de.

As the data subject, you have the right not to be subject to a decision based solely on automated processing - including profiling - that has legal effects on you or significantly affects you in a similar manner. This does not apply if the decisionis necessary for the conclusion or performance of a contract between you as the data subject and us as the person responsible,is permissible on the basis of legal provisions of the European Union or the member states to which we as the controller are subject and these legal provisions contain appropriate measures to safeguard your rights and freedoms and your legitimate intereststakes place with your express consent.

However, these decisions may not be based on special categories of personal data according to Art. 9 Paragraph (1) of the GDPR, unless Art. 9 Paragraph (2) Letter a) or g) of the GDPR applies and appropriate measures have been taken to ensure the To protect rights and freedoms as well as the legitimate interests of you as the data subject.

With regard to the cases mentioned in paragraphs a) and c) above, we as the person responsible take appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of you as the person concerned, including at least the right to obtain intervention by a person on the part of the person responsible heard on presenting one's own point of view and challenging the decision.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you, as the person concerned, are of the opinion that the processing of the data concerning you personal data violates the GDPR.

The supervisory authority to which the complaint was lodged informs the complainant about the status and the results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 of the GDPR.