Data Protection Declaration
I. General information on data processing by cadocare GmbH
The following regulations, advice and information apply in relation to the processing of personal data of individuals. “Personal data” shall be understood as information relating to an identified or identifiable individual. An “identifiable” individual is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or other specific factors.
The personal data of our customers is very important to us. We therefore generally only process the personal data of our users of our web pages if required to provide a functional website as well as to provide our contents and services. Furthermore, it only takes place, as a rule, after receiving consent from the user. A different arrangement shall only apply in such cases where it is not possible to obtain consent due to actual reasons and the processing of data is permitted based on legal regulations.
The following legal basis applies to processing personal data:
(a) If we obtain the consent of the data subject in cases of processing personal data, Art. 6 sec. 1 lit. a of the EU General Data Protection Regulation (GDPR) shall serve as a legal basis.
(b) Art. 6 sec. 1 lit. b GDPR shall serve as a legal basis in cases in which processing personal data is for the fulfilment of a contract with the data subject as the contractual party.
(c) If processing personal data is necessary to fulfil a contractual obligation our company is subjected to, Art. 6 sec. 1 lit. c GDPR shall serve as the corresponding legal basis.
(d) If processing is required to protect the legitimate interests of our company or a third party and if the initially stated interest does not outweigh the interests, basic rights and basic freedoms of the affected person, Art. 6 sec. 1 lit. f GDPR shall serve as a legal basis for data processing.
We shall delete or block personal data when the purpose of storage no longer applies. However, we are forced to store data for longer if foreseen by the European Union or German legislation in the form of directives, laws or other regulations. The data shall also be deleted or blocked in these cases, if the stipulated period for storage expires due to the specified norms, unless further storage is required as soon as the data is necessary for conclusion of a contract or fulfilment of a contract.
II. Provision of the website and creation of Logfiles
Every time our Internet site is called up, our system automatically collects data and information from the computer system of the requesting computer. The following data is collected:
– Date and time of access
– URL of the referral website
– Requested file
– Volume of sent data
– Browser type and version
– Operating system
– IP address
We save this data in your system’s logfiles, with the exception of the user’s IP address or other data that allows allocation of the data to a user.
The legal basis for temporary storage of data is Art. 6 sec. 1 lit. f GDPR.
We have to rely on saving the IP address of the user of our website temporarily, i.e. during the period of Internet use, so that our website can be retrieved on the user’s computer. This also represents in our legitimate interest in data processing according to Art. 6 sec. 1 lit. f GDPR.
The data shall be deleted as soon as it is no longer necessary to achieve the purpose of collection. In the case of collection of data to provide the website, this is the case when the respective session is terminated.
We have to rely on collecting the above-mentioned data or saving it in logfiles for the operation of our website. The user therefore has no right to object.
The respective IP address of the user is stored and transmitted in the Cookies.
The legal basis for the processing of personal data using Cookies is Art. 6, sec. 1 lit. f GDPR.
The user data collected via technically required Cookies shall not be used to create user profiles.
These purposes also represent our legitimate interest in processing personal data according to Art. 6 sec. 1 lit. f GDPR.
Cookies shall be saved on the user’s computer and transmitted from it to our site. Every user can deactivate or restrict the transmission of Cookies by changing the settings in their Internet browser. Cookies already saved can be deleted at any time. If Cookies are deactivated for our website, all functions of the website may no longer be able to be used in full.
IV. Email contact
The user can make contact with cadocare GmbH by using the email address provided on our website. In this case, the user’s personal data transmitted with the email address shall be saved to correspond with the user. The data will not be passed on to third parties.
The legal basis for processing data according to Art. 6 sec. 1 lit. a GDPR if the user has given consent and Art. 6 sec. 1 lit. f GDPR as a request of transmitting an email.
The purpose of data processing is to be able to correspond with you.
The data shall be deleted as soon as it is no longer necessary to achieve the purpose of collection. For personal data sent by email, this is the case when the respective correspondence with you is finished and a legal expiry period for any civil law claims and/or retention periods within the scope of proper accounting principles have expired. The conversation shall be finished when the circumstances show that the respective matter has been fully clarified.
You have the option of withdrawing consent to the processing of personal data at any time and to appeal to further storage of data. Correspondence can no longer be conducted without the personal contact data in such a case.
In such a case, we ask that you contact us directly at firstname.lastname@example.org. All personal data saved during the course of contact shall be deleted in this case.
V. Rights of data subjects
If your personal data is or has been processed, you shall have the following rights with regard to cadocare GmbH:
You can request a confirmation from us stating whether we process personal data. If so, you can request the following information from the responsible party:
(a) The purposes of processing;
(b) The categories of personal data, which are being processing;
(c) The recipients or categories of recipients to whom your personal data has been or will be disclosed;
(d) The planned duration of storage of the personal data concerning you or, if no concrete information can be given on this, the criteria for determining the duration of storage;
(e) The existence of a right to correct or delete the personal data concerning you, the right to restrict processing by cadocare GmbH or the right to object to such processing;
(f) The existence of a right to complain to a regulatory authority;
(g) All available information about the origin of the data, when the personal data is not collected from the you;
(h) The existence of automated decision-making including profiling as per sections 1 and 4 – and at least in these instances – relevant information about the logic involved as well as the impact and the intended effects of such processing for you.
You have a right to ask cadocare GmbH to correct and/or complete your personal data, provided the processed personal data is incorrect or incomplete. cadocare GmbH must undertake the correction immediately.
You are entitled to demand the restriction of the processing of personal data relating to you under the following conditions:
(a) When you question the accuracy of the personal data for a duration, which allows cadocare GmbH to check the accuracy of the personal data;
(b) When processing is unlawful and you reject the deletion of the personal data and instead ask for the use of the personal data to be restricted;
(c) When cadocare GmbH no longer needs the personal data for the purposes of processing, but you still need the same to assert, exercise or defend legal claims, or
(d) When you have lodged an appeal against processing as per Art. 21 sec. 1 GDPR and it has not as yet been ascertained whether the legitimate grounds of cadocare GmbH outweigh your grounds.
If the processing of the personal data has been restricted, then this data may be processed – apart from storing it – only with your consent or to assert, exercise or defend legal claims or to protect the rights of another individual or legal person or for reasons of important public interest to the Union or a member state.
You can ask cadocare GmbH to delete the personal data concerned immediately and we shall be obliged to delete this data immediately, provided one of the following reasons apply:
(a) The personal data is no longer required for the purposes it was collected for or processed otherwise.
(b) You revoke your consent, upon which processing as per Art. 6 sec. 1 lit. a or Art. 9 sec. 2 lit. a GDPR was based, and there is no other legal basis for processing.
(c) You lodge an appeal as per Art. 21 sec. 1 GDPR against processing and there are no overriding legitimate reasons for processing, or you lodge an appeal as per Art. 21 sec. 2 GDPR against processing.
(d) The personal data was processed unlawfully.
(e) The deletion of personal data is required to fulfil a legal obligation according to Union law or the law of member states we are subject to.
(f) The personal data was collected with regards to services offered by the information company as per Art. 8 sec. 1 GDPR.
If cadocare GmbH has published the personal data and is obligated as per Art. 17 sec. 1 GDPR to delete it, then we shall take appropriate measures, including technical support – whilst taking into consideration the available technology and costs of implementation – to inform parties responsible for processing this data that you, as the person concerned, have asked that all links to this personal data or copies or replications of this personal data are deleted.
The right to deletion does not apply when processing is required:
(a) For exercising the right to freedom of expression and information;
(b) To fulfil a legal duty, which cadocare GmbH is obligated to process according to Union law or the member states law the responsible party is subject to, or to recognise an obligation, which is of public interest or is carried out to exercise an official authority, which has been transferred to the party concerned;
(c) On grounds of public interest with regards to public health in accordance with Art. 9 sec. 2 lit. h and i as well as Art. 9 sec. 3 GDPR;
(d) For asserting, exercising or defending legal claims.
If you have asserted the right to correct, delete or restrict the processing of your personal data with regards to us, then we shall be obligated to inform all recipients to whom the personal data has been disclosed of this correction or deletion of data or restriction of processing, unless it proves impossible or it would involve unreasonable expense. Furthermore, we shall be obligated to inform you about these recipients on request.
You have the right to receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another responsible party without restriction by us, if
(a) Processing is based on consent as per Art. 6 sec. 1 lit. a GDPR or Art. 9 sec. 2 lit. a GDPR or a contract as per Art. 6 sec. 1 lit. b GDPR and
(b) Processing is carried out using automated procedures.
When exercising this right, you have a further right to insist that the personal data concerned is transmitted directly from us to another responsible party, provided this is technically possible. This must not affect other person’s freedoms and rights.
You have the right to object at any time, for reasons that arise due to your special circumstances, against the processing of personal data concerning you carried out on the basis of Art. 6 sec. 1 lit. e or f GDPR; this also applies to profiling based on this regulation.
cadocare GmbH shall no longer process the personal data concerning you, unless it can prove urgent compelling reasons for processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data is processed for direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising.
If you object to processing for the purposes of direct advertising the personal data will no longer be processed for these purposes.
You have the right to withdraw your data protection consent declaration at any time. Consent can be withdrawn without affecting the legitimacy of the processing that was carried out based on the consent before it was withdrawn.
Irrespective of another regulatory or legislative remedy, you have the right to complain to the state commissioner for data protection and freedom of information for North-Rhine Westphalia, or another regulatory authority, in particular in the member state of your residence, workplace or the place of the alleged breach, if you are of the opinion that the processing of personal data is in breach of the GDPR.
VI. Name and address of the responsible party
The responsible party in terms of the EU General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection law regulations is:
Tel.: +49 (0) 2451 94349-0
If you have any questions about our website or data protection, please contact: email@example.com.