Data protection policy

Where the term “user” is used in the following data protection declaration, it refers to female users and male users, as well as those of a third gender.

I Name and address of the data controller

The data controller for the purposes of the General Data Protection Regulation and other national data protection laws of Member States as well as other data privacy regulations is:

Diary Lady Escort
Owner Sven Gustavsohn
Binterimstrasse.1
40223 Düsseldorf
Telephone: +49 (0)152-08443357
E-Mail: kontakt@dl-escort.de

II General information on data processing

1. Scope of processing of personal data

In principle, we collect and use personal data of our users only as far as this is necessary for the provision of a functional website as well as for our content and services. The collection and use of personal data of our users takes place only after the user has agreed thereto, or if the processing of that data is permitted by legal regulations.

2. Legal basis for the processing of personal data

Where we obtain the consent of the affected person for the processing of personal information, article 6 (1) letter (a) of EU General Data Protection Regulation (GDPR) serves as a legal basis for the processing of that personal data. Article 6 (1) letter (b) GDPR is the legal basis for processing personal data which is necessary to fulfil a contract to which the person concerned is a party. This also applies to processing operations which are necessary for the implementation of pre-contractual measures.
Where such processing of personal data is necessary to the fulfilment of a legal obligation to which our company is subject, article 6 (1) letter (c) GDPR is the legal basis. In cases where the vital interests of the person concerned or of another natural person require the processing of personal data, article 6 (1) letter (d) GDPR is the legal basis. Where processing is necessary to safeguard the legitimate interests of our company or a third party, and this is not outweighed by the interests, fundamental rights and fundamental freedoms of the person concerned, article 6 (1) letter (f) GDPR is the legal basis for processing.

3. Data deletion and period of storage

The personal data of the person concerned will be deleted or blocked as soon as the purpose of such storage no longer applies. Storage may also take place if it is provided for by European or national legislation in Union regulations, laws or other provisions to which the data controller is subject. The data will also be blocked or deleted when the storage period prescribed by the aforementioned regulations expires, unless there is a requirement for further storage of the data for the finalisation of a contract, or performance of the contract.

III. Provision of the website and creation of log files

1. Description and scope of data processing

Our system automatically collects data and information at very visit to the website in respect of the computer system making the visit.
The following data are collected:

– Information on browser type and the version used
– The user’s operating system
– The user’s internet service provider
– The user’s IP address
– Date and time of access
– Websites from which the user’s system gained access to our website
– Websites that are accessed by the user’s system through our website

The data collected about the user’s visit to the website will be stored anonymously for analysis purposes and deleted on the following day.

The data is collected and processed by our respective server host, which works for us as part of processing an order.

2. Legal basis for data processing

The legal basis for the collection and storage of the data during the user’s visit to the website is Article 6 para 1 letter (f) GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary in order to enable the delivery of the website to the user’s computer. To do this, the user’s IP address must be kept for the duration of the session. For these purposes, we also have a legitimate interest in the processing of data in accordance with article 6 (1) letter (f) GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for achieving the purpose of its collection. Where the data is collected in order to enable the provision of the site, deletion takes place at the point when the relevant session is terminated. If data are stored in log files, they are deleted on the day following the visit.

5. Possibilities for objection and deletion

Collection of the data for the provision of the website is absolutely necessary to the operation of the internet site. Consequently, there is no possibility of objection from the user. Further storage in log files takes place after anonymization, and so not personally identifiable. There is no right of objection in the absence of personal data, and as a result of anonymization we would not be able to identify the log file relevant to the respective user in order to process the objection.

IV. Use of cookies

a) Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser, or from the internet browser on the user’s computer system. When a user calls up a website, a cookie may be stored on the user’s operating system. This cookie contains a character string that allows the browser to be uniquely identified when the web site is called up again. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can also be identified after a page change. In this process the following data are stored and transmitted in the cookies:
Screen resolution
Information as to whether cookies are permitted.

For other cookies that are used while using analysis tools and playing videos, please read clauses IX and X.

b) Legal basis for data processing

The legal basis for processing personal data using cookies is Article 6 (1) letter (f) GDPR.

c) Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Certain functions of our website cannot be offered without the use of cookies. This requires that the browser continues to be recognised after a page change.
We need cookies for the following applications:
Correct graphical representation of the website on the user’s device.
The user data collected by these cookies is not used to create user profiles.
For these purposes, we also have a legitimate interest in the processing of personal data in accordance with article 6 (1) letter (f) GDPR.

d) Duration of storage, possibility of objection and deletion

Cookies are stored on the user’s computer and sent by it to our site. Therefore you, as a user, have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, certain functions of the website may no longer be used in full. If the user does not take any action to delete the cookies earlier, they will be deleted automatically after 24 hours.

V. The “Contact” contact form and email contact

1. Description and scope of data processing

On our website there is a contact form which can be used to contact us electronically. If a user takes up this option, the data entered in the input form will be transmitted to us and stored. These data are:
Name, email address, subject of the message and the message text, as well as – if specified – the website and telephone number.
In addition, the IP address and time of the request are stored in the server log files. The IP address is anonymised before it is saved.
Alternatively, you can contact us using the email address already provided. In this case, the personal data of the user transmitted with the email are stored.
The data is collected and processed by the relevant server host which is working for us in processing instructions. Also, in doing this, there is no disclosure of data to third parties. The data is used exclusively for the processing of our conversation.

2. Legal basis for data processing

The legal basis for this data processing is Article 6 (1) letter (f) GDPR. If the objective of the contact is to conclude a contract, an additional legal basis for processing is Article 6 (1) letter (b) GDPR.

3. Purpose of data processing

The processing of personal data from the input screen is used by us solely for the purposes of processing the contact. Cases of email contact also include the necessary legitimate interest in the processing of the data.
Other personal data processed during submission are used for web analysis, and to prevent misuse of the contact form, as well as to ensure the security of our information technology systems.

4. Duration of storage

Data is deleted as soon as it is no longer necessary to achieve the purposes for which it was collected. This is the case for the personal data from the input screen of the contact form, and those sent by email, if the relevant conversation with the user is finished. The conversation ends when it is clear from the circumstances that the facts concerned have been clarified.
Personal data collected during submission is anonymised prior to storage and deleted on the day following.

5. Possibility for objection and deletion

The user may object at any time to the storage of his personal data. If this is the case, the conversation may not continue. All personal data which was stored during such contact will be deleted.

VI. Casting form

1. Description and scope of data processing

On our website there is a contact form for applications which can be used for making contact electronically. If a user takes advantage of this option, the data entered in the input form will be transmitted to us and stored. These data are:

Name, place of residence, email address, mobile phone number, preferred availability times, age, height, body weight, clothing size, bra size, existence and location of piercings and/or tattoos, language skills, information on previous escort experience, possibly listings at other escort agencies, driving licence held and availability of motor vehicle, professional activity; In addition, as far as appropriate information is provided, information as to how the user was aware of us, as well as images on which the user is shown.
In addition, the IP address and time of the request are stored in the server log files. The IP address is anonymised before it is saved. The data is collected and processed by the relevant server host which is working for us as part of task processing. In addition, there is no transfer of data to third parties in this regard. The data is used exclusively for the application. If working together takes place, we publish the details of age, height, weight, clothing size, bra size, existence and location of piercings and/or tattoos, as well as language skills, on our internet site under a pseudonym.

2. Legal basis for data processing

The legal basis for the processing of the data is Article 6 (1) letter (b) GDPR. In the event of continuing statutory retention obligations after termination of the cooperation, the legal basis for the continued storage is Article 6 (1) letter (c) GDPR. The legal basis for storing the information on how the user has been alerted to us is Article 6 (1) letter (f) GDPR.

3. Purpose of data processing

The processing of the personal data from the input screen is used only for
processing the application. The information on how the user became aware of us is used for statistical purposes only, and is used to improve our ability to be found on the various advertising channels. The information is stored separately from the other data and is completely anonymous. The other personal data processed during submission are used for analysis purposes, as well as to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case when it is established that cooperation will not occur. If cooperation does take place, we delete the data without delay after the cooperation has ended, except for the name, place of residence, mobile phone number and email address. We will delete the name, place of residence, mobile phone number and email address as soon as it is clear that no rights and obligations arising from that cooperation still exist, and statutory retention obligations no longer apply. Additional personal data collected during submission are deleted on the day following.

5. Possibility of objection and deletion

The user can object to the storage of the information as to how he became aware of us, provided this information is assigned to that user. In this case, the information is immediately deleted or anonymised in such a way that an assignment to the user is not possible.

VII. Booking requests

1. Description and scope of data processing

On our website there is a contact form for booking enquiries which can be used for making contact electronically. If a user takes advantage of this option, the data entered in the input form will be transmitted to us and stored. These data are:
Name, first name, the preferred method of contact (phone or email), email address, the time of day at which the user is reachable, the model booked, date, time and duration of the desired date, the address of the meeting point (house or hotel address), the desired outfit for the model, the wishes for the expiry of the date and a description of the person of the user – the content of which is determined by the user. As far as appropriate information is given, we also store the telephone number and the way in which the user became aware of us. If a date with the desired model is made, we give the date, time and desired duration of the date, the address of the meeting point (house or hotel address), the desired outfit of the model, the wishes for the expiry of the date and the user’s self-description to the model to the desired model unaltered. We will pass the last name to the model if a house visit is desired, and the surname is required to carry out the date, for example to choose the right bell of a multi-party house.
Also, the IP address and time of the request are stored in the server log files. The IP address is anonymised before it is saved.
The data is collected and processed by the relevant server host, which is working for us in terms of task processing.

2. Legal basis for data processing

The legal basis for the processing of the data is Article 6 (1) letter (b) GDPR. Where storage continues after a date is concluded for the purposes of settlement with the model, the legal basis is Article 6 para 1 letter (f) GDPR. The legal basis for storing the information on how the user became aware of us Article 6 (1) letter (f) GDPR.

3. Purpose of data processing

The processing of the personal data from the input screen is used by us to broker a contract with the desired model and for subsequent settlement with the model (capture of a relationship between us and the model on which commission is due). The transfer to the model is solely for the execution of the desired date. The information on how the user became aware of us is for statistical purposes only and is used to improve our ability to be found on the various advertising channels. The information is stored separately from other data and is completely anonymous. Other personal data processed during the submission are used for analysis purposes as well as to prevent misuse of the contact form, and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case if it is established that a contract with a model will not occur. If a contract does occur, we delete the data as soon as we no longer need it to enforce our commission claims against the model. This is normally the case after fulfilment of the contract, and at the latest after legal enforcement. Additional personal data collected during submission are deleted on the day following.

5. Possibility for objection and deletion

The user can object to the storage of the information as to how he became aware of us, provided this information is assigned to that user. In this case, the information is immediately deleted or anonymised in such a way that an assignment to the user is not possible. It is possible for the user to object to the use of the personal data for the purpose of invoicing our commission claims against the model. Where this is the case, we do not process the personal data any more, other than to protect grounds for processing which outweigh the interests, rights and freedoms of the user; or such processing serves to assert, exercise or defend legal claims.

VIII. Feedback

1. Description and scope of data processing

On our website there is a contact form for feedback, which can be used for the transmission of a description of experiences with a model. If a user accepts this option, the data entered in the input form will be transmitted and saved as an email to us. These data are:
Name (pseudonyms are also allowed), email address, model booked, message text.
The IP address and time of the request are also stored in the server log files. The IP address is anonymised before it is saved.
The data is collected and processed by the respective server host which is working for us as part of task processing.
Good reviews are provided manually, quoting the given name online; the email address will not be published. Clear names, which enable the identification of the user, are replaced by us with pseudonyms.

2. Legal basis for data processing

The legal basis for the processing of the data is Article 6 (1) lit. (f) GDPR. Where the data is stored as evidence, including in the context of a claim, Article 6 (1) letter (f) GDPR is the legal basis.

3. Purpose of data processing

The publication of the user’s information given via the input screen serves advertising purposes for our agency and the model. The storage of the email with all detail in our computer resources also helps proving in the event of receipt of competition law warnings which are based on the assertion that the assessment is a sham. Our legitimate interest in processing consists of the need for advertisement and proof. Other personal data processed during submission are used for analysis purposes, as well as to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data is deleted as soon as consent has been revoked, and the data is no longer needed for evidence purposes; this is frequently the case at the end of the limitation period under competition law. If the feedback is not published, we delete the data immediately. The additional personal data collected during submission will be deleted on the following day.

5. Possibility of objection and deletion

The user may revoke consent at any time to the processing of the personal data. The user may contact us at any time by email to object to the storage of his personal data at any time. In this event, all personal data stored in connection with the contact will be deleted in accordance with Point XI No. 4.

IX. Use of Google Analytics

1. Description and scope of data processing

This website uses functions of the web analysis service Google Analytics Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics allows us to capture and analyse the usage of our website by the user. Google Analytics uses so-called “cookies”. These are text files, which are stored on the user’s computer and which allow an analysis of the use of the website. The information generated by the cookie about the use of this website is usually transferred to a server of Google in the USA and stored there.
We have enabled the IP anonymisation feature on this website. Through this, within Member States of the European Union or in other States which are parties to the Agreement on the European Economic Area the IP address is shortened prior to transmission to the United States. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate the use of the website by the user, in order to compile reports on the website activities and to provide us with further services related to the use of the website and the internet. The IP address submitted by Google Analytics from the user’s browser is not merged with other Google data.
This website uses the “demographic features” function of Google Analytics. This allows for the creation of reports that contain statements about the age, gender, and interests of the page visitors. This data comes from Google’s interest-based advertising and third party visitor data. This data cannot be assigned to any specific person.

2. Legal basis for processing

The legal basis for the storage is Article 6 (1) letter (f) GDPR. We have a legitimate interest in analysing user behaviour in order to optimize both our web site and our advertising. We have signed a contract with Google for data processing and are fully implementing the strict specifications of the German data protection authorities when using Google Analytics.

3. Purpose of processing

The use of cookies, and the transfer of IP address information on to Google, is used to analyse the use of our website, which we use in turn to improve our offer and our advertising.

4. Duration of storage

Sessions and campaigns are ended after a certain amount of time. Standard practice was that sessions end after 30 minutes without activity, and campaigns after six months. The time limit for campaigns can be no more than two years. For more information about terms of use and privacy, see https://www.google.com/analytics/terms/de.html
https://policies.google.com/

4. Possibility of objection and deletion

The user can prevent the storage of cookies by using the corresponding setting of the browser software; however, we would point out that if this setting is used case you may not be able to use all functions of this website in full. You may also prevent the collection of the data generated by the cookie, and the website use (including the IP address) by Google, and the processing of this data by Google, by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de.
The user can prevent Google Analytics from capturing his data by clicking on the following link. An opt-out cookie is used to prevent the user’s data from being collected during future visits to this site: Disable Google Analytics.
The user can disable the “demographic features” function at any time through the advertisement settings in his Google account, or prohibit the collection of his data by Google Analytics as shown above.
More information on how user data is handled in Google Analytics is provided in Google’s data protection policy:
https://support.google.com/analytics/answer/6004245?hl=de.

X. YouTube

1. Description and content of the data processing

We embed videos from the YouTube platform, which is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (hereinafter: Google). The privacy policy can be found at https://www.google.com/policies/privacy/.
Google, as a third party, can only send the content offered to your browser by using your IP address. For the purposes of communication, Google sets cookies on your browser and uses your IP address.
We have included the videos in the Extended Data Protection mode. This means that the IP address will not be transferred to Google and YouTube cookies will not be set until you have clicked the frame (the playback area) of the video once.

2. Legal basis for data processing

The legal basis for the processing of the data is Article 6 (1) letter (f) GDPR.

3. Purpose of data processing

The purpose of the data processing is to provide video content from a third party without using space on our website server, in order to extend the offering on our website. This is our legitimate interest.

4. Duration of storage/prevention

By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies which have already been stored may be deleted at any time. This can also be done automatically. If cookies are disabled for our website, certain functions of the website may no longer be used in full. If you do not disable the transfer of cookies, or do not actively delete the cookies, the cookies stored by Google will be deleted by the end of eight months at the latest.
You can prevent cookie setting, and the transmission of the IP address to Google by not clicking on the video frames.

3. Decision regarding adequacy

Regarding the transfer of data to the United States for the use of YouTube, the European Commission’s made a decision regarding adequacy of the regulations of the Privacy Shield Agreement on 12.07.2016 (C(2016) 4176). Google has submitted itself to the regulations of the Privacy Shield; you can find the certificate here: https://www.privacyshield.gov/participant? id=a2zt000000001L5AAI

XI. Rights of affected persons

If your personal data is processed, you are an affected person within the meaning of GDPR and you have the following rights in respect of the data controller:

1. The right to information

You may require the data controller to confirm whether personal data pertaining to you is processed by us. If such processing is taking place, you can require information from the data controller as follows:

(1) The purposes for which the personal data are processed;
(2) The categories of personal data that are being processed;
(3) The recipients or categories of recipients to which the personal data relating to them has been or will be disclosed;
(4) The planned duration of the storage of personal data relating to you, or, where specific information is not possible, criteria for determining the storage duration;
(5) The existence of a right to rectification or deletion of personal data relating to you, a right to limitation of such processing by the data controller or a right of objection against such processing;
(6) The existence of a right of appeal to an oversight authority;
(7) All available information on the source of the data, if the personal data were not collected from the person affected;
(8) The existence of any automated decision-making, including profiling, pursuant to article 22 (1) and (4) of the GDPR and, at any rate in such cases, meaningful information on the logic involved and the scope and impact of such a processing for the person concerned.
You have the right to demand information on whether the personal data relating to you is transmitted to a third country, or to an international organisation. Related to this, you may demand to be informed of suitable guarantees pursuant to article 46 GDPR in connection with such transmission.

2. Right to rectification

You have the right to rectification and/or completion in respect of the data controller, where the personal data processed relating to you are incorrect or incomplete. The data controller shall make the correction without delay.

3. Right to restrict processing

Under the following conditions, you may require the restriction of the processing of personal data concerning you:
(1) If you dispute the accuracy of the personal data relating to you, for a period of time which allows the data controller to verify accuracy;
(2) If the processing is unlawful, and you reject the deletion of the personal data, and instead demand the restriction of the use of personal data;
(3) The data controller no longer needs the personal data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims; or
(4) If you have appealed against the processing in accordance with article 21 (1) of the GDPR, and have not yet established whether the legitimate reasons of the data controller outweigh your reasons.
If the processing of the personal data relating to you has been restricted, this data may be processed only – apart from its storage, – subject to your consent, or to the assertion, exercise or defence of legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or of a Member State.
If the limitation of processing has been restricted according to these conditions, the data controller will inform you before the restriction is lifted.

4. Right to deletion

a) Obligation to delete
You may require the data controller to delete the personal data relating to you immediately, and the data controller is obliged to remove this data immediately, provided that one of the following reasons applies:
(1) The personal data relating to you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent to the processing given under Article 6 para 1 letter (a) or Article 9 (2) letter (a) GDPR, and there is no other legal basis for processing.
(3) You lodge an objection to the processing under Article 21 (1) GDPR, and there are no overriding reasons for the processing; or, you lodge an objection to the processing under Article 21 (2), GDPR.
(4) The personal data relating to you have been processed unlawfully.
(5) The deletion of the personal data relating to you is necessary in order to fulfil a legal obligation under Union law, or the law of a Member State, to which the data controller is subject.
(6) The personal data relating to you were collected in relation to services offered by the information society according to Article 8 (1) GDPR.
b) Information to third parties

If the data controller has made public the personal data relating to you, and is obliged to delete them pursuant to article 17 (1) of the GDPR, he shall take reasonable measures, taking into account the available technology and implementation costs, including technical considerations, that the data controller shall inform all those who process the personal data that you as an affected person has demanded the deletion of all links to this personal data and of any copies or replicas of that personal data Exceptions

The right to deletion does not apply where the processing is required;
(1) To exercise the right to freedom of expression and information;
(2) To fulfil a legal obligation which requires the processing under Union law or law of Member States to which the data controller is subject; or to carry out a task which is in the public interest or in the exercise of public authority which has been transferred to the data controller;
(3) For reasons of public interest in the field of public health in accordance with article 9 (2) letters (h) and (i) and article 9 (3) GDPR;
(4) For archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes pursuant to article 89 (1) GDPR, to the extent that the law referred to in section a) is likely to make the fulfilment of the objectives of this processing impossible or seriously impaired; or
(5) For the assertion, exercise or defence of legal claims.

5. Right to be informed

If you have exercised the right to rectify, delete or restrict the processing with respect to the data controller, the latter is obliged to inform all those to whom the personal information of the affected person has been disclosed of that correction or deletion or limitation of the processing, unless this proves to be impossible, or involves a disproportionate effort.
You have the right to be informed by the data controller of those recipients.

6. Right to data transferability

You have the right to receive the personal data relating to you, which you have provided to the data controller, in a structured, current and machine-readable format. You also have the right to transmit this data to another data controller without hindrance by the current data controller of the personal data, provided that
(1) The processing is based on a consent according to article 6 para 1 letter (a) GDPR or article 9 (2) letter (a) GDPR or on a contract pursuant to article 6 (1). (b) GDPR is based; and
(2) The processing is carried out using automated procedures.
In exercising this right, you also have the right to require that the personal data relating to you be transmitted directly by one data controller to another data controller, to the extent that this is technically feasible. Freedoms and rights of other persons may not be adversely affected by this.
The right to transfer data does not apply to the processing of personal data where necessary for the performance of a task which is in the public interest or is carried out in the exercise of public authority which has been transferred to the data controller.

7. Right to object

You have the right to object at any time against the processing of personal data relating to you which is based on article 6 (1) letters (e) or (f) GDPR for reasons arising from your particular situation. This also applies to profiling based on these provisions.

The data controller shall no longer process the personal data relating to you, unless he can prove compelling and legitimate reasons for the processing that outweigh your interests, rights and freedoms, or that the processing serves the enforcement, exercise or defence of legal claims.
If the personal data relating to you is processed in order to provide direct advertising, you have the right to object at any time to the processing of the personal data relating to you for the purposes of such advertising; This also applies to profiling to the extent that it is related to such direct advertising.
If you object to such processing for direct marketing purposes, the personal data relating to you will no longer be processed for these purposes.
Irrespective of Directive 2002/58/EC, in connection with the use of information society services you they have the possibility of exercising your right of objection by means of automated procedures which use technical specifications.

8. Right to revoke the data protection declaration of consent

You have the right to revoke your data protection declaration of consent at any time. The revocation of the consent does not affect the legality of the processing by virtue of that consent, up to the point of the revocation.

9. Automated decision-making in individual cases including profiling

You have the right not to be subjected to a decision based solely on automated processing, including profiling, which will have a legal effect on you or may have a significant adverse effect on you in a similar way. This does not apply if the decision
(1) is necessary for the conclusion or fulfilment of a contract between you and data controller;
(2) is permissible under provisions of the law of the Union or of Member States to which the data controller is subject, and these legal provisions contain appropriate provisions to safeguard your rights and freedoms as well as your legitimate interests; or
(3) takes place with your express consent.

In any event under article 9 (1) GDPR these decisions may not be based on specific categories or personal data, unless Article 9 (2) letters (a) or (g) apply, and reasonable measures have been taken for the protection of rights and freedoms and your legitimate interests.

As regards the cases referred to in (1) and (3), the data controller shall take appropriate measures to safeguard the rights and freedoms and your legitimate interests, to include as a minimum the right to a personal intervention on the part of the data controller, the right to present your own point of view, and to challenge the decision.

10. Right to appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to appeal to a supervisory authority, specifically in the Member State of your place of residence, your workplace, or the location of the alleged infringement, if you consider that the processing of the personal data relating to you is in breach of the GDPR.
The supervisory authority with which the complaint was lodged shall inform the complainant of the status and results of the appeal, including the possibility of a judicial remedy under article 78 GDPR.
The competent supervisory authority in matters of data protection law for our company is the State Commissioner for Data Protection of the Federal State in which our company is headquartered. A list of the State Commissioners and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

cookie settings

cookie settings
[borlabs_cookie align=”center”]

user log
[borlabs_cookie_log]

Opt-out Google Analytics
[borlabs_cookie_opt_out tracking=”google-analytics”]