![]() ![]() Furthermore, we have established procedures to ensure the exercise of data subjects' rights, deletion of data, and response to data compromise. The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as the access, input, transfer, safeguarding of availability and their separation. We take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk in accordance with the law, taking into account the state of the art, the cost of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons. Furthermore, state data protection laws of the individual federal states may apply. In particular, the BDSG contains special regulations on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transmission, and automated decision-making in individual cases, including profiling. These include, in particular, the Act on Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act - BDSG). ![]() National data protection regulations in Germany - In addition to the data protection regulations of the General Data Protection Regulation, national regulations on data protection apply in Germany. DSGVO) - The processing is necessary to protect the legitimate interests of the controller or a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data. DSGVO) - Processing is necessary for compliance with a legal obligation to which the controller is subject. DSGVO) - Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures carried out at the request of the data subject. Contract performance and pre-contractual requests (Art.a DSGVO) - The data subject has given his/her consent to the processing of personal data relating to him/her for one or more specific purposes. Please note that in addition to the regulations of the DSGVO, the national data protection regulations in your, or our country of residence and domicile may apply. In the following, we share the legal basis of the General Data Protection Regulation (GDPR) on the basis of which we process personal data. ![]()
0 Comments
Leave a Reply. |