Glossary

Definitions

"Personal data (pD)"

... are all information that relates to an identified or identifiable natural person (hereinafter "Data subject"); A natural person is regarded as identifiable who, directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to a Online identifier or one or more special features can be identified, the expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of these are a natural person. Examples of pbD include address data, name, telephone number, IP address, email address.

"Special categories pD"

... describes PD, making up the racial and ethnic origin, political opinions, or religious ideological beliefs or union membership, as well as genetic data, biometric Data for the unique identification of a natural person, health data or data on sex life or the sexual orientation.

Responsible

... is the natural or legal person, authority, institution or other body that alone or jointly with others decide on the purposes and means of processing personal data; are the purposes and Means of this processing prescribed by Union law or the law of the member states, the Responsible person or the specific criteria of his appointment according to Union law or the law of Member States are provided.

Processor

... is a natural or legal person, public authority, agency or other body that collects personal data in Order of the person responsible processed.

Third

... is a natural or legal person, authority, institution or other body, apart from the person concerned, the person responsible, the processor and the persons who are under the direct responsibility of the The controller or the processor are authorized to process the personal data.

Employees

... in the sense of the BDSG (new) are:

• Employees, including temporary workers in the ratio to the borrower,
• employees working for their vocational training,
• Participants in services for participation in working life as well as in clarifications of professional Aptitude or work trial (rehabilitation candidates),
• Employed in recognized workshops for disabled people,
• Volunteers who do a service according to the Youth Volunteer Service Act or the Federal Voluntary Service Act afford,
• Persons who are to be regarded as employee-like persons due to their economic dependency; These also include those who work from home and their equals,
• Applicants for an employment relationship as well as persons whose employment relationship has ended are considered employees

Processing

... describes every process or series of processes carried out with or without the aid of automated processes in connection with personal data such as the collection, recording, organization, ordering, the Storage, adaptation or modification, reading, querying, use, disclosure by Transmission, dissemination or any other form of providing, matching or linking the Restriction, deletion or destruction.

Profiling

... describes any type of automated processing of personal data that consists of this Personal data is used to identify certain personal aspects that relate to a natural person relate to, evaluate, in particular aspects relating to work performance, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts or relocation of these natural ones Analyze or predict person.

Pseudonymization

… describes the processing of personal data in a way that the personal data without The use of additional information can no longer be assigned to a specific data subject, provided that this additional information is kept separately and technical and organizational measures subject to ensuring that the personal data is not an identified or identifiable natural person.

File system

... describes any structured collection of personal data that is accessible according to certain criteria, regardless of whether this collection is centralized, decentralized or based on functional or geographical criteria is managed in an orderly manner.

Description of the rights of the data subject

Right to confirmation and information (Art. 15, GDPR)

You have the right to request confirmation from us as to whether your personal data is being processed be.

You also have the right to request information about yours from us in writing at any time to receive processed personal data within the scope of Art. 15 GDPR.

This right is restricted by the exceptions of § 34 BDSG, according to which the right to information does not apply in particular, if the data is only due to statutory retention requirements or for data backup and data protection control are stored, the provision of information would require a disproportionate effort and a misuse the data processing is prevented by suitable technical and organizational measures.

Right to correction (Art. 16, GDPR)

You have the right, according to Ar. 16 GDPR, to request us to correct your data immediately.

Right to deletion (right to be forgotten) (Art. 17, GDPR)

You have the right, under the conditions described in Art. 17 GDPR, to request us to delete you to request the relevant data. These prerequisites apply in particular if the respective Processing purpose has been achieved or otherwise ceases to exist, as well as if we process your data unlawfully should, you have revoked your consent without the data processing being carried out on any other legal basis can be continued if you successfully object to the data processing and in cases of the existence of a Obligation to delete on the basis of Union law or the law of an EU member state to which we are subject.

This right is subject to the restrictions from $ 35 BDSG, according to which the right to deletion can be waived in particular, if, in the case of non-automated data processing, there is a disproportionately high effort for the deletion and your interest in the deletion is to be regarded as low.

Right to restriction of processing (Art. 18, GDPR)

In accordance with Art. 18 GDPR, you can request that we only process your personal data process to a limited extent. This right exists in particular if the correctness of the personal data It is controversial if, under the conditions of a justified request for deletion, instead of deletion, a request restricted processing. Furthermore, in the event that the data is not used for the purposes pursued by us longer are required, but you need the data to assert, exercise or defend legal claims and if the success of an objection is still controversial.

Right to data portability (Art. 20, GDPR)

In accordance with Art. 20 GDPR, you have the right to obtain from us the personal data relating to you that you provide to us have provided in a structured, commonly used, machine-readable format, as well as the right that we transfer this data to another person responsible.

Automated decision in individual cases including profiling (Art. 22 GDPR)

You have the right not to exclusively use automated processing - including profiling - to be subject to a decision that has legal effect on you or you in similarly significantly affected.