Marketing Privacy Policy

In the following we would like to inform you about the collection, processing and use of your personal data (“data processing”), in particular about

  • when and for which actions we process data
  • which data we process for which reason
  • who receives data
  • about your rights regarding data processing by us.

I. Contact Details

Controller of the data processing in the meaning of the General Data Protection Regulation (GDPR) within the scope of this website is:

Acrolinx GmbH
Friedrichstraße 100
10117 Berlin
Germany

Phone: (030) 288 84 83 30
Fax: (030) 288 84 83 39
Internet: www.acrolinx.de/

We have also appointed a data protection officer. You can reach him at: dataprotection@acrolinx.com.

II. General information on data processing

1. Scope of processing of personal data

We process personal data in order to contact you and to inform you about our offers and promotions. We only process your personal data if and insofar as this is necessary for a respective contact. You are not subject to any automated decision-making according to Article 22 GDPR.

2. Legal basis of processing of personal data

Generally, Art. 6 para. 1 f) DSGVO represents the legal basis for data processing, since we have a legitimate interest to inform you about our offers and campaigns.

Further legal bases for the processing of personal data are presented below.

 

Reason for Data ProcessingLegal basis in GDPRExplanation
Performance of a contract or steps prior to entering into a contractArt. 6 (1) b)Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
ConsentArt. 6 (1) a)The data subject has given consent to the processing of his or her personal data for one or more specific purposes
Legal ObligationArt. 6 (1) c)Processing is necessary for compliance with a legal obligation to which the controller is subject;

 

3. Sources and categories of personal data

This privacy policy applies to the processing of personal data that you make publicly available on the internet or make available to us (e.g. by making the information available on a website for contact, by contacting us via e-mail or by handing us a business card).

We process freely accessible personal data, such as name, company and contact information (address, e-mail address, telephone number, fax number, etc.).

4. Erasure and storage of data

We will delete your personal data as soon as the legal basis for its processing ceases to exist. In some cases, however, legal bases can also exist in parallel respectively, where a legal basis no longer exists, a new one can intervene, e.g. the obligation to store certain data in order to fulfil a legal obligation to store data.

III. Right to object and right to withdraw consent

If the data processing is based on your consent or our legitimate interest, you have the right to object to the processing or to withdraw your consent at any time. Your objection or withdrawal only has an effect for the future. Where the analytic cookies used offer their own technical options for deactivation, this explained above. You may contact us at any time at gdpr@acrolinx.com to exercise your right of objection or revocation. If you object to processing on the basis of our legitimate interest, we may nevertheless continue processing if we can prove compelling reasons worthy of protection which outweigh your interests, rights and freedoms.

IV. Rights of data subjects

If your personal data is processed, you are a data subject within the meaning of Art. 4 para. 1 GDPR. As data subject, you have the following rights with regard to your personal data. To exercise these rights, please contact us using the contact details above.

 

Right of access by the data subject according to Art. 15 GDPR

You have a right of access concerning your personal data processed by us. This includes the mandatory information set out in Art. 15 GDPR.

Right to rectification according to Art. 16 GDPR

You have the right to request the immediate correction of inaccurate personal data and the completion of incomplete personal data.

Right to erasure according to Art. 17 GDPR

You have the right to request the erasure of your personal data if one of the grounds mentioned in Art. 17 GDPR applies, in particular if there is no longer a legal basis for the processing.

Right to restriction of processing according to Art. 18 GDPR

You have the right to request the restriction of the processing of your personal data if one of the grounds mentioned in Art. 18 GDPR applies, in particular at your request instead of deleting the data.

Right to data portability according to Art. 20 GDPR

You have the right to request all personal data stored by us about you in a structured, commonly used and machine-readable format or to transmit this data to another controller without obstruction by the controller to whom the personal data was made available.

Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR

According to Art. 77 GDPR, you have the right to file a complaint with the supervisory authority responsible for you.

V. Recipients of data

Some of the processing of your personal data is also carried out by data processors. These are included exclusively on the basis of an agreement about the commissioned data processing in accordance with Art. 28 para. 3 GDPR.

VI. Data transfer to third countries

The personal data we collect from you through this website will to some extend be transferred to countries outside the European Economic Area.

In this case, we take appropriate contractual, technical and organizational measures to ensure that your data is handled securely and that an appropriate level of protection, which meets the data protection requirements within the EU/European Economic Area, is guaranteed. An appropriate and adequate guarantee is the certification according to the EU-US Privacy Shield (https://www.privacyshield.gov/list).

 

Last updated: June 2018