1. Name and contact details of the responsible person
Dr. Robert Mutschler
Hindenburgstrasse 7
74395 Mundelsheim
E-Mail: info@unimog-safari-rental.de
2. Processing of personal data in the context of the operation of this site
Personal data of the users of this website are processed to the extent necessary for the purpose of operating a functioning website. For this purpose, the following data is automatically collected from the computer calling this page:
– the IP address of the computer with which this website is accessed;
The type of browser software used;
– the previously accessed website;
– the configuration of the computer calling this page;
– Date and Time.
The IP address is only stored for as long as necessary for the provision of proper services, in particular for the detection and prevention of improper use. At the latest after seven days, the IP address of the computer calling this page is anonymized.
The legal basis for this processing of personal data is Article 6 (1) sentence 1 lit. f) of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR). The legitimate interest in the data processing lies in the proper operation of this website.
3. Categories of recipients of personal data
The data collected in the context of the processes described under 2. will be processed by a contract data processor in Germany. This provides services for the technical operation and maintenance of this website.
4. Rights of the persons concerned
Persons whose data are collected in accordance with the procedures described under 2. have the following rights:
a) Right to information
The data subject has the right to ask the person responsible for a confirmation as to whether personal data concerning him / her are being processed; if this is the case, he has a right to information about such personal data and to the following information:
aa) the processing purposes;
bb) the categories of personal data being processed;
(cc) the recipients or categories of recipients to whom the personal data have been or are being disclosed, in particular in the case of beneficiaries in third countries or international organizations;
dd) if possible, the planned duration for which the personal data are stored or, if this is not possible, the criteria for determining that duration;
ee) the right of rectification or erasure of the personal data concerning him or the limitation of the processing by the person responsible or a right to object to such processing;
ff) the existence of a right of appeal to a supervisory authority;
gg) if the personal data are not collected from the person concerned, all available information about the origin of the data;
The controller will provide a copy of the personal data that is the subject of the processing.
b) Right to rectification
The person concerned has the right to demand from the person responsible immediately the correction of incorrect personal data concerning him. In consideration of the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary statement.
c) Right to erasure
a) FromThe person concerned has the right to ask the person responsible for the personal data concerning him or her to be deleted immediately, and the person responsible is obliged to delete personal data immediately, if one of the following reasons applies:
aa) The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
(bb) The person concerned revokes his consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR and there is no need for any other legal basis for the processing.
(cc) The person concerned objects to the processing in accordance with Article 21 (1) of the GDPR and there are no legitimate reasons for the processing, or the person concerned opposes the processing in accordance with Article 21 (2) GDPR.
dd) The personal data were processed unlawfully.
ee) The deletion of personal data is required to fulfill a legal obligation under Union or national law to which the controller is subject.
ff) The personal data were collected in relation to information society services offered pursuant to Article 8 (1) of the GDPR.
If the controller has made the personal data publicly available and is required to delete it in accordance with the preceding paragraph, he shall take appropriate measures, including technical ones, to inform data controllers who process the personal data, taking into account available technology and implementation costs; Inform that an Affected Person has requested that you delete any links to such Personal Information or copies or replications of such Personal Information.
The preceding paragraphs do not apply if processing is required.
aa) to exercise the right to freedom of expression and information;
(bb) to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to perform a task of public interest or in the exercise of public authority delegated to the controller ;
(cc) for reasons of public interest in the field of public health as referred to in Article 9 (2) (h) and (i) and Article 9 (3) GDPR;
(dd) to assert, exercise or defend legal claims. (a) The person concerned has the right to require the person responsible to delete personal data concerning him or her without delay, and the person responsible shall immediately erase personal data, if any of the following Reasons apply:
aa) The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
(bb) The person concerned revokes his consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR and there is no need for any other legal basis for the processing.
(cc) The person concerned objects to the processing in accordance with Article 21 (1) of the GDPR and there are no legitimate reasons for the processing, or the person concerned opposes the processing in accordance with Article 21 (2) GDPR.
dd) The personal data were processed unlawfully.
ee) The deletion of personal data is required to fulfill a legal obligation under Union or national law to which the controller is subject.
ff) The personal data were collected in relation to information society services offered pursuant to Article 8 (1) of the GDPR.
If the controller has made the personal data publicly available and is required to delete it in accordance with the preceding paragraph, he shall take appropriate measures, including technical ones, to inform data controllers who process the personal data, taking into account available technology and implementation costs; Inform that an Affected Person has requested that you delete any links to such Personal Information or copies or replications of such Personal Information.
The preceding paragraphs do not apply if processing is required
aa) to exercise the right to freedom of expression and information;
bb) for compliance with a legal obligation that requires processing by the law of the Union or the Member States, the subject of the charge, or the performance of a task that is of public interest and is carried out in the exercise of public authority that has been delegated to the responsible ;
(cc) for reasons of public interest in the field of public health as referred to in Article 9 (2) (h) and (i) and Article 9 (3) GDPR;
dd) for the assertion, exercise or defense of legal claims.
d) Right to restriction of processing
The data subject has the right to require the person responsible to restrict the processing if one of the following conditions applies:
aa) the accuracy of the personal data is disputed by the data subject, for a period of time which enables the person responsible to verify the accuracy of the personal data;
bb) the processing is unlawful and the person concerned refuses to delete the personal data and instead requests the restriction of the use of the personal data;
(cc) the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them to assert, exercise or defend legal claims; or
dd) the person concerned has lodged an objection to the processing pursuant to Article 21 (1) GDPR, as long as it is not certain that the responsible reasons of the person responsible prevail over those of the person concerned.
If processing has been restricted hereafter, apart from their storage, such personal data may only be used with the consent of the person concerned or to assert, exercise or defend legal claims or protect the rights of another natural or legal person or for reasons of significant public interest Union or a Member State.
An affected party who has subsequently restricted processing will be notified by the controller before the restriction is lifted.
e) Right to object to processing
the person concerned has the right, at any time, to object to personal data relating to the processing of personal data resulting from his particular situation on the basis of Article 6 (1) (e) or (f) of the GDPR; The controller no longer processes the personal data unless he can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for the purpose of enforcing, pursuing or defending legal claims.
f) Data transferability
a) The data subject has the right to receive the personal data relating to him / her in a structured, common and machine – readable format, and has the right to transfer this data to another person without hindrance by the person responsible, personal data provided, provided that
(aa) the processing is based on a consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) GDPR or a contract pursuant to Article 6 (1) (b) GDPR, and
bb) the processing takes place by means of automated procedures.
In exercising his right to data portability, the data subject has the right to obtain that the personal data are transmitted directly from one controller to another responsible party where technically feasible.
The exercise of the right is without prejudice to Article 17 GDPR. This right shall not apply to any processing necessary for the performance of a task which is in the public interest or in the exercise of official authority which has been entrusted to the controller. (A) The data subject shall have the right to access personal data relating to him; He has provided a Responsible Person to receive in a structured, common and machine-readable format, and has the right to transmit such data to another person without hindrance by the controller to whom the Personal Data has been provided, provided that
(aa) the processing is based on a consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) GDPR or a contract pursuant to Article 6 (1) (b) GDPR, and
bb) the processing takes place by means of automated procedures.
In exercising his right to data portability, the data subject has the right to obtain that the personal data are transmitted directly from one controller to another responsible party where technically feasible.
The exercise of the right is without prejudice to Article 17 GDPR. This right does not apply to any processing necessary for the performance of a task of public interest or in the exercise of official authority delegated to the controller.
g) Right to restriction of processing
The person concerned has the right to complain to a competent supervisory authority.
5. Further information
The provision of personal data is not required by law or contract. A contract is not required. There is no obligation to provide personal information. If personal data is not provided in the framework described under 2., use of this website is not possible.
Automated decision making and so-called profiling do not take place.
source: http://www.muster-impressum.de