Privacy Policy
We are very delighted that you have shown interest inour enterprise. Data protection is of a particularly high priority for themanagement of the Matrixtimer Unternehmensberatung. The use of the Internetpages of the Matrixtimer Unternehmensberatung is possible without anyindication of personal data; however, if a data subject wants to use specialenterprise services via our website, processing of personal data could becomenecessary. If the processing of personal data is necessary and there is nostatutory basis for such processing, we generally obtain consent from the datasubject.
The processing of personal data, such as the name,address, e-mail address, or telephone number of a data subject shall always bein line with the General Data Protection Regulation (GDPR), and in accordancewith the country-specific data protection regulations applicable to theMatrixtimer Unternehmensberatung. By means of this data protection declaration,our enterprise would like to inform the general public of the nature, scope,and purpose of the personal data we collect, use and process. Furthermore, datasubjects are informed, by means of this data protection declaration, of therights to which they are entitled.
As the controller, the MatrixtimerUnternehmensberatung has implemented numerous technical and organizationalmeasures to ensure the most complete protection of personal data processedthrough this website. However, Internet-based data transmissions may inprinciple have security gaps, so absolute protection may not be guaranteed. Forthis reason, every data subject is free to transfer personal data to us viaalternative means, e.g. by telephone.
The data protection declaration of the MatrixtimerUnternehmensberatung is based on the terms used by the European legislator forthe adoption of the General Data Protection Regulation (GDPR). Our dataprotection declaration should be legible and understandable for the generalpublic, as well as our customers and business partners. To ensure this, wewould like to first explain the terminology used.
In this data protection declaration, we use, interalia, the following terms:
Controller for the purposes of the General DataProtection Regulation (GDPR), other data protection laws applicable in Memberstates of the European Union and other provisions related to data protectionis:
Matrixtimer Kilian Krüger
Besselstr. 25
68219 Mannheim
Germany
Tel.: 0621845519
E-Mail: info@matrixtimer.de
Website: www.matrixtimer.de
3. Cookies
The Internet pages ofthe Matrixtimer Unternehmensberatung use cookies. Cookies are text files thatare stored in a computer system via an Internet browser.
Many Internet sitesand servers use cookies. Many cookies contain a so-called cookie ID. A cookie IDis a unique identifier of the cookie. It consists of a character string throughwhich Internet pages and servers can be assigned to the specific Internetbrowser in which the cookie was stored. This allows visited Internet sites andservers to differentiate the individual browser of the dats subject from otherInternet browsers that contain other cookies. A specific Internet browser canbe recognized and identified using the unique cookie ID.
Through the use ofcookies, the Matrixtimer Unternehmensberatung can provide the users of thiswebsite with more user-friendly services that would not be possible without thecookie setting.
By means of a cookie,the information and offers on our website can be optimized with the user inmind. Cookies allow us, as previously mentioned, to recognize our websiteusers. The purpose of this recognition is to make it easier for users toutilize our website. The website user that uses cookies, e.g. does not have toenter access data each time the website is accessed, because this is taken overby the website, and the cookie is thus stored on the user's computer system.Another example is the cookie of a shopping cart in an online shop. The onlinestore remembers the articles that a customer has placed in the virtual shoppingcart via a cookie.
The data subject may,at any time, prevent the setting of cookies through our website by means of acorresponding setting of the Internet browser used, and may thus permanentlydeny the setting of cookies. Furthermore, already set cookies may be deleted atany time via an Internet browser or other software programs. This is possiblein all popular Internet browsers. If the data subject deactivates the settingof cookies in the Internet browser used, not all functions of our website may beentirely usable.
4. Collection of general data and information
The website of theMatrixtimer Unternehmensberatung collects a series of general data andinformation when a data subject or automated system calls up the website. Thisgeneral data and information are stored in the server log files. Collected maybe (1) the browser types and versions used, (2) the operating system used bythe accessing system, (3) the website from which an accessing system reachesour website (so-called referrers), (4) the sub-websites, (5) the date and timeof access to the Internet site, (6) an Internet protocol address (IP address),(7) the Internet service provider of the accessing system, and (8) any othersimilar data and information that may be used in the event of attacks on ourinformation technology systems.
When using thesegeneral data and information, the Matrixtimer Unternehmensberatung does notdraw any conclusions about the data subject. Rather, this information is neededto (1) deliver the content of our website correctly, (2) optimize the contentof our website as well as its advertisement, (3) ensure the long-term viabilityof our information technology systems and website technology, and (4) providelaw enforcement authorities with the information necessary for criminalprosecution in case of a cyber-attack. Therefore, the MatrixtimerUnternehmensberatung analyzes anonymously collected data and informationstatistically, with the aim of increasing the data protection and data securityof our enterprise, and to ensure an optimal level of protection for thepersonal data we process. The anonymous data of the server log files are storedseparately from all personal data provided by a data subject.
5. Contact possibility via the website
The website of theMatrixtimer Unternehmensberatung contains information that enables a quickelectronic contact to our enterprise, as well as direct communication with us,which also includes a general address of the so-called electronic mail (e-mailaddress). If a data subject contacts the controller by e-mail or via a contactform, the personal data transmitted by the data subject are automaticallystored. Such personal data transmitted on a voluntary basis by a data subjectto the data controller are stored for the purpose of processing or contactingthe data subject. There is no transfer of this personal data to third parties.
6. Routine erasure and blocking of personal data
The data controllershall process and store the personal data of the data subject only for theperiod necessary to achieve the purpose of storage, or as far as this isgranted by the European legislator or other legislators in laws or regulationsto which the controller is subject to.
If the storage purposeis not applicable, or if a storage period prescribed by the European legislatoror another competent legislator expires, the personal data are routinelyblocked or erased in accordance with legal requirements.
7. Rights of the data subject
· a) Right of confirmation
Each data subjectshall have the right granted by the European legislator to obtain from thecontroller the confirmation as to whether or not personal data concerning himor her are being processed. If a data subject wishes to avail himself of thisright of confirmation, he or she may, at any time, contact any employee of thecontroller.
· b) Right of access
Each data subjectshall have the right granted by the European legislator to obtain from thecontroller free information about his or her personal data stored at any timeand a copy of this information. Furthermore, the European directives andregulations grant the data subject access to the following information:
o the purposes of theprocessing;
o the categories ofpersonal data concerned;
o the recipients orcategories of recipients to whom the personal data have been or will bedisclosed, in particular recipients in third countries or internationalorganisations;
o where possible, theenvisaged period for which the personal data will be stored, or, if notpossible, the criteria used to determine that period;
o the existence of theright to request from the controller rectification or erasure of personal data,or restriction of processing of personal data concerning the data subject, orto object to such processing;
o the existence of theright to lodge a complaint with a supervisory authority;
o where the personaldata are not collected from the data subject, any available information as totheir source;
o the existence ofautomated decision-making, including profiling, referred to in Article 22(1)and (4) of the GDPR and, at least in those cases, meaningful information aboutthe logic involved, as well as the significance and envisaged consequences ofsuch processing for the data subject.
Furthermore, the datasubject shall have a right to obtain information as to whether personal dataare transferred to a third country or to an international organisation. Wherethis is the case, the data subject shall have the right to be informed of theappropriate safeguards relating to the transfer.
If a data subjectwishes to avail himself of this right of access, he or she may, at any time,contact any employee of the controller.
· c) Right to rectification
Each data subjectshall have the right granted by the European legislator to obtain from thecontroller without undue delay the rectification of inaccurate personal dataconcerning him or her. Taking into account the purposes of the processing, thedata subject shall have the right to have incomplete personal data completed,including by means of providing a supplementary statement.
If a data subjectwishes to exercise this right to rectification, he or she may, at any time,contact any employee of the controller.
· d) Right to erasure (Right to be forgotten)
Each data subjectshall have the right granted by the European legislator to obtain from thecontroller the erasure of personal data concerning him or her without unduedelay, and the controller shall have the obligation to erase personal datawithout undue delay where one of the following grounds applies, as long as theprocessing is not necessary:
o The personal data areno longer necessary in relation to the purposes for which they were collectedor otherwise processed.
o The data subjectwithdraws consent to which the processing is based according to point (a) ofArticle 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and wherethere is no other legal ground for the processing.
o The data subjectobjects to the processing pursuant to Article 21(1) of the GDPR and there areno overriding legitimate grounds for the processing, or the data subjectobjects to the processing pursuant to Article 21(2) of the GDPR.
o The personal data havebeen unlawfully processed.
o The personal data mustbe erased for compliance with a legal obligation in Union or Member State lawto which the controller is subject.
o The personal data havebeen collected in relation to the offer of information society servicesreferred to in Article 8(1) of the GDPR.
If one of theaforementioned reasons applies, and a data subject wishes to request theerasure of personal data stored by the Matrixtimer Unternehmensberatung, he orshe may, at any time, contact any employee of the controller. An employee ofMatrixtimer Unternehmensberatung shall promptly ensure that the erasure requestis complied with immediately.
Where the controllerhas made personal data public and is obliged pursuant to Article 17(1) to erasethe personal data, the controller, taking account of available technology andthe cost of implementation, shall take reasonable steps, including technicalmeasures, to inform other controllers processing the personal data that thedata subject has requested erasure by such controllers of any links to, or copyor replication of, those personal data, as far as processing is not required.An employees of the Matrixtimer Unternehmensberatung will arrange the necessarymeasures in individual cases.
· e) Right of restriction of processing
Each data subjectshall have the right granted by the European legislator to obtain from thecontroller restriction of processing where one of the following applies:
o The accuracy of thepersonal data is contested by the data subject, for a period enabling thecontroller to verify the accuracy of the personal data.
o The processing isunlawful and the data subject opposes the erasure of the personal data andrequests instead the restriction of their use instead.
o The controller nolonger needs the personal data for the purposes of the processing, but they arerequired by the data subject for the establishment, exercise or defence oflegal claims.
o The data subject hasobjected to processing pursuant to Article 21(1) of the GDPR pending theverification whether the legitimate grounds of the controller override those ofthe data subject.
If one of theaforementioned conditions is met, and a data subject wishes to request therestriction of the processing of personal data stored by the MatrixtimerUnternehmensberatung, he or she may at any time contact any employee of thecontroller. The employee of the Matrixtimer Unternehmensberatung will arrangethe restriction of the processing.
· f) Right to data portability
Each data subjectshall have the right granted by the European legislator, to receive thepersonal data concerning him or her, which was provided to a controller, in astructured, commonly used and machine-readable format. He or she shall have theright to transmit those data to another controller without hindrance from thecontroller to which the personal data have been provided, as long as theprocessing is based on consent pursuant to point (a) of Article 6(1) of theGDPR or point (a) of Article 9(2) of the GDPR, or on a contract pursuant topoint (b) of Article 6(1) of the GDPR, and the processing is carried out byautomated means, as long as the processing is not necessary for the performanceof a task carried out in the public interest or in the exercise of officialauthority vested in the controller.
Furthermore, inexercising his or her right to data portability pursuant to Article 20(1) ofthe GDPR, the data subject shall have the right to have personal datatransmitted directly from one controller to another, where technically feasibleand when doing so does not adversely affect the rights and freedoms of others.
In order to assert theright to data portability, the data subject may at any time contact anyemployee of the Matrixtimer Unternehmensberatung.
· g) Right to object
Each data subjectshall have the right granted by the European legislator to object, on groundsrelating to his or her particular situation, at any time, to processing ofpersonal data concerning him or her, which is based on point (e) or (f) ofArticle 6(1) of the GDPR. This also applies to profiling based on theseprovisions.
The MatrixtimerUnternehmensberatung shall no longer process the personal data in the event ofthe objection, unless we can demonstrate compelling legitimate grounds for theprocessing which override the interests, rights and freedoms of the datasubject, or for the establishment, exercise or defence of legal claims.
If the MatrixtimerUnternehmensberatung processes personal data for direct marketing purposes, thedata subject shall have the right to object at any time to processing ofpersonal data concerning him or her for such marketing. This applies toprofiling to the extent that it is related to such direct marketing. If thedata subject objects to the Matrixtimer Unternehmensberatung to the processingfor direct marketing purposes, the Matrixtimer Unternehmensberatung will nolonger process the personal data for these purposes.
In addition, the datasubject has the right, on grounds relating to his or her particular situation,to object to processing of personal data concerning him or her by theMatrixtimer Unternehmensberatung for scientific or historical researchpurposes, or for statistical purposes pursuant to Article 89(1) of the GDPR,unless the processing is necessary for the performance of a task carried outfor reasons of public interest.
In order to exercisethe right to object, the data subject may contact any employee of theMatrixtimer Unternehmensberatung. In addition, the data subject is free in thecontext of the use of information society services, and notwithstandingDirective 2002/58/EC, to use his or her right to object by automated meansusing technical specifications.
· h) Automated individual decision-making, includingprofiling
Each data subjectshall have the right granted by the European legislator not to be subject to adecision based solely on automated processing, including profiling, whichproduces legal effects concerning him or her, or similarly significantlyaffects him or her, as long as the decision (1) is not is necessary for enteringinto, or the performance of, a contract between the data subject and a datacontroller, or (2) is not authorised by Union or Member State law to which thecontroller is subject and which also lays down suitable measures to safeguardthe data subject's rights and freedoms and legitimate interests, or (3) is notbased on the data subject's explicit consent.
If the decision (1) isnecessary for entering into, or the performance of, a contract between the datasubject and a data controller, or (2) it is based on the data subject'sexplicit consent, the Matrixtimer Unternehmensberatung shall implement suitablemeasures to safeguard the data subject's rights and freedoms and legitimateinterests, at least the right to obtain human intervention on the part of thecontroller, to express his or her point of view and contest the decision.
If the data subjectwishes to exercise the rights concerning automated individual decision-making,he or she may, at any time, contact any employee of the MatrixtimerUnternehmensberatung.
· i) Right to withdraw data protection consent
Each data subjectshall have the right granted by the European legislator to withdraw his or herconsent to processing of his or her personal data at any time.
If the data subjectwishes to exercise the right to withdraw the consent, he or she may, at any time,contact any employee of the Matrixtimer Unternehmensberatung.
8. Data protection for applications and the application procedures
The data controllershall collect and process the personal data of applicants for the purpose ofthe processing of the application procedure. The processing may also be carriedout electronically. This is the case, in particular, if an applicant submitscorresponding application documents by e-mail or by means of a web form on thewebsite to the controller. If the data controller concludes an employmentcontract with an applicant, the submitted data will be stored for the purposeof processing the employment relationship in compliance with legalrequirements. If no employment contract is concluded with the applicant by the controller,the application documents shall be automatically erased two months afternotification of the refusal decision, provided that no other legitimateinterests of the controller are opposed to the erasure. Other legitimateinterest in this relation is, e.g. a burden of proof in a procedure under theGeneral Equal Treatment Act (AGG).
9. Legal basis for the processing
Art. 6(1) lit. a GDPRserves as the legal basis for processing operations for which we obtain consentfor a specific processing purpose. If the processing of personal data isnecessary for the performance of a contract to which the data subject is party,as is the case, for example, when processing operations are necessary for thesupply of goods or to provide any other service, the processing is based onArticle 6(1) lit. b GDPR. The same applies to such processing operations whichare necessary for carrying out pre-contractual measures, for example in thecase of inquiries concerning our products or services. Is our company subjectto a legal obligation by which processing of personal data is required, such asfor the fulfillment of tax obligations, the processing is based on Art. 6(1)lit. c GDPR. In rare cases, the processing of personal data may be necessary toprotect the vital interests of the data subject or of another natural person.This would be the case, for example, if a visitor were injured in our companyand his name, age, health insurance data or other vital information would haveto be passed on to a doctor, hospital or other third party. Then the processingwould be based on Art. 6(1) lit. d GDPR. Finally, processing operations couldbe based on Article 6(1) lit. f GDPR. This legal basis is used for processingoperations which are not covered by any of the abovementioned legal grounds, ifprocessing is necessary for the purposes of the legitimate interests pursued byour company or by a third party, except where such interests are overridden bythe interests or fundamental rights and freedoms of the data subject whichrequire protection of personal data. Such processing operations areparticularly permissible because they have been specifically mentioned by theEuropean legislator. He considered that a legitimate interest could be assumedif the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).
10. The legitimate interests pursued by the controller or by a third party
Where the processingof personal data is based on Article 6(1) lit. f GDPR our legitimate interestis to carry out our business in favor of the well-being of all our employeesand the shareholders.
11. Period for which the personal data will be stored
The criteria used todetermine the period of storage of personal data is the respective statutoryretention period. After expiration of that period, the corresponding data isroutinely deleted, as long as it is no longer necessary for the fulfillment ofthe contract or the initiation of a contract.
12. Provision of personal data as statutory or contractual requirement;Requirement necessary to enter into a contract; Obligation of the data subjectto provide the personal data; possible consequences of failure to provide suchdata
We clarify that the provisionof personal data is partly required by law (e.g. tax regulations) or can alsoresult from contractual provisions (e.g. information on the contractualpartner). Sometimes it may be necessary to conclude a contract that the datasubject provides us with personal data, which must subsequently be processed byus. The data subject is, for example, obliged to provide us with personal datawhen our company signs a contract with him or her. The non-provision of thepersonal data would have the consequence that the contract with the datasubject could not be concluded. Before personal data is provided by the datasubject, the data subject must contact any employee. The employee clarifies tothe data subject whether the provision of the personal data is required by lawor contract or is necessary for the conclusion of the contract, whether thereis an obligation to provide the personal data and the consequences ofnon-provision of the personal data.
13. Existence of automated decision-making
As a responsible company,we do not use automatic decision-making or profiling.
This Privacy Policy has been generatedby the Privacy Policy Generator of the DGD - Your External DPO that was developed incooperation with German Lawyers from WILDE BEUGER SOLMECKE,Cologne.
© 2024 Matrixtimer Consultancy
revision6 Werbeagentur und WebdesignE-Mail: info@matrixtimer.de
Phone: +49 621 8455 190