Privacy Policy
General
By visiting this website, you agree to the processing of certain personal data. While there is no personal data collected during the initial page load, certain functions of this website and related services can trigger processing of personal data, which is why visitors shall be informed about the details of this processing, its purpose, and of course their personal rights. Every data processing process on this website occurs in accord with federal data protection law, including the General Data Protection Regulation (GDPR) and the Bundesdatenschutzgesetz (BDSG). Therefore an agreement for this data processing is obtained if there is no legal basis for an individual case of data processing.
Short Version
In accord with the GDPR and the BDSG, the persons affected by data processing have a right to Access (Art. 15 GDPR) for the data that is collected from them. They can request a confirmation of the data processing and a handout of the collected data. Additionally, they have a right to lodge a complaint with a supervisory authority (Art. 77 GDPR), a right to rectification (Art. 16 GDPR) that can also be evoked due to incomplete data. They have a right to erasure (“right to be forgotten”) (Art. 17 GDPR), a right to restriction of processing (Art. 18 GDPR), as well as a right to data portability (Art. 20 GDPR). Persons affected have a right to object (Art. 21 GDPR) to the future processing of their data, and the restrictions regarding the automatic individual decision-making, including profiling (Art. 22 GDPR) are in place.
Cookies
This site uses so-called "cookies" to store a login session, as well as for an optional, client-side-only feature that is used to enrich the user experience of this site. You can configure your browser to stop accepting our cookies if you wish.
Statistics, Display, Cooperation with federal authorities
No usage statistics are currently collected.
Using the Service as a User
Upon signing up for Fernehalwes, some personal data, such as email address and name is collected and stored internally. Viewing certain pages does not require registration or the providing of any further information. Because this information is publicly displayed to all Users and visitors, it should not contain critical information about you or anyone else.
A transfer of the data entered as a User takes place to the following commissioned third parties:
| Name | Reason for data processing | Service | Data Protection |
|---|---|---|---|
| fly.io, Inc | Hosting | Fernehalwes (fernehalwes.org) | https://fly.io/legal/privacy-policy/ |
| Sentry (45 Fremont Street, 8th Floor, San Francisco, CA 94105) | Error Handling | Fernehalwes (fernehalwes.org) | Privacy Shield |
Transmission of data is not legally or contractually obligated, and there are no other obligations for it. However, the transmission is required for completion of our services.
In addition to the general information about the Right to Revocation of an Agreement (see below), we inform you that you, at any time, have the possibility to revoke any collection, processing and/or usage of data transmitted to us. A revocation like this is not bound to a certain submission method and can therefore be submitted using your preferred mode of communication.
Legal Basis
Legal basis for the processing of data is GDPR Art. 6 §1a if the data is processed according to consent of the affected individual. However, the data processing is often based on GDPR Art. 6 §1b for contract fulfillment, or on GDPR Art. 6 §1f for protection of interests. Said interests represent the act of providing and maintaining the online services for informing (potential) customers and (potential) business partners, as well as other parties interested in this online appearance. In exceptional cases, the legal basis can also be another reason as described in GDPR Art. 6 §1c-e.
Your Rights
According to the GDPR and the BDSG, the persons affected by data processing have the following rights:
Right to Information: Affected parties can request a confirmation of the processing of their personal data from the responsible parties. This includes information about the intent of the processing, the recipients or categories of recipients that receive the processed data, and, if possible, the planned duration of the criteria for setting the duration of data retention. It also includes the existence of a right to erasure or rectification of the data, the existence of a right to submitting complaints to the supervisory authorities, information about the origin of the data if it did not originate from the affected party, the existence of an automated decision making including profiling and, in these cases, the involved logic as well as the scope and the intended consequences, and finally, information regarding transmission of data into third-party countries or to an international organization in these cases. Affected parties also have the right to receive a copy of the processed data.
If the right to rectification, erasure or restriction is invoked, the affected can request to see who the processed data is transmitted to.
Right to lodge a complaint with a supervisory authority: Affected parties have the right to lodge a complaint with a supervisory authority if they hold the belief that the processing of data violated the GDPR.
Right to rectification: Affected parties can request the rectification of incorrect related user data. A rectification can also lie in the completion of relevant data.
Right to erasure (“right to be forgotten”): Affected parties can request the immediate erasure of personal data, if the data is currently irrelevant for the specified purpose, or, if the legal basis for data processing is the consent of the affected, if this consent is retracted and there is no other legal basis for the processing of data. Affected parties can request erasure if the they object according to GDPR Art. 21 §1 against the processing of data, and if there are no prioritised qualifying reasons, or if the affected objects according to GDPR Art. 21 §2. They can request erasure if the data is illegally processed, or if the erasure is necessary for fulfillment of a legal requirement according to union law or the law of the member state(s) of the affected, or if the data was upraised in relation to provided services of the information society according to GDPR Art. 8 §1. The requirement to erasure does not apply to the affected if the processing occurs for exercising the right to free speech and information, if the processing occurs to fulfill a legal obligation that is required according to union law or law of the member state(s) of the affected, for realization of an obligation in public interest, for reasons of public interest in the area of public health, for archival reasons in public interest, for scientific or historic research purposes or for statistical purposes according to GDPR Art. 89 §1, as far as the right to erasure hinders the realization of these goals or makes them unattainable, or as far as it is required for the enforcement or defending of legal claims.
Right to restriction of processing: Affected parties can request a restriction of processing from the responsible parties, if the correctness of the personal data is contested by the affected. This right is exercised for a time period which allows for the affected to verify the correctness of the data, and subsequently if the processing of the data would be unlawful. The affected can also exercise the right to restriction of processing if the processing of data is unlawful and, instead of erasure of personal data, request restriction of processing of personal data. The right can also be exercised if the responsible party does no longer need personal data for purposes of data processing, or if the affected has objected to the processing according to GDPR Art. 21 §1, as long as it is unclear whether the reasoning of the responsible parties outweighs those of the affected parties. In case the right to restriction of processing is exercised, the data can only be processed with consent of the affected parties, or for reasons of enforcement or defense of legal claims from an important public interest of the union or the member states. The affected parties are to be informed about annulment of the restriction.
Right to Data Portability: Affected parties can request their personal data that is available to the responsible parties be provided in a structured, common, and machine-readable format. They have a claim that this data is transmitted to another responsible party without interruptions, if the processing occurs on the basis of a mutual agreement or for purposes of contract fulfillment, and if it happens using automated processes. The direct transmission to another responsible party can be requested as far as it is feasible technically.
Right to Object: Affected parties can object against the processing of related personal data at all times, if the processing is required for the realization of a duty in public interest, or the enforcement of public interest is required by the responsible parties, or if the processing is required for preservation of the stated interests of the responsible parties or other affiliated third parties and as far as the interests or basic rights and freedoms of protection of personal data do not outweigh it. This also applies to data-based profiling. Processing has to be omitted when not compelling, protection-worthy reasoning that outweighs the interests, rights and freedoms of the affected can be produced for the processing of data, or when the processing serves the enforcement or defence of legal claims.
Affected parties can object at all times if the processing takes place for purposes of direct advertising. This also applies for profiling (for more details, see below), as far as it is related to such direct advertising. In such cases, further processing of data is not allowed.
The right to object can be exercised regardless of the guidelines 2002/58/EG via automated processes, for which technical specifications are in use. The affected can only object against the processing that occurs because of scientific or historical research purposes according to GDPR Art. 89 §1 if the processing is not required for fulfilling a task in public interest.
Automatic individual decision-making, including profiling: Affected parties can demand to not be subjected to a decision that is based exclusively on automated processing (including profiling) that may have legal consequences or other significant impairments, unless it is for contract conclusion or fulfillment, or if it is required due to legal regulations of the union or member state(s) of the responsible parties, and these regulations include appropriate measures for preservation of the rights and freedoms as well as the justified interests of the affected, or if the automated processing occurred with consent of the affected.
Right to Revocation: The possibility to revoke any agreement for the processing of personal data without naming of any reasons exists at all times and without a specified form. A revocation merely has to be declared to the responsible parties or towards a representative of any of the responsible parties.