Data protection
I. Name and address of the controller
The controller within the meaning of the General Data Protection Regulation and other national
data protection laws of the member states and other data protection regulations
provisions is:
SCS GmbH
Sophienstrasse 21
70178 Stuttgart
Germany
Phone: +49 170 9124360
E-Mail: info@scs.earth
Website: www.scs.earth
II. Name and address of the data protection officer
The data protection officer of the controller is:
Dr. Thorsten Alxneit
SCS GmbH
Sophienstrasse 21
70178 Stuttgart
Germany
Phone: +49 170 9124360
E-Mail: info@scs.earth
Website: www.scs.earth
III General information on data processing
1. scope of the processing of personal data
We only process our users' personal data to the extent necessary to provision of a functional website and our content and services. is necessary. The processing of personal data of our users takes place regularly only with the user's consent. An exception applies in cases in which prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
2. legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. person concerned, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis. In the processing of personal data necessary for the performance of a contract to which the data contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures are required. Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the natural person require the processing of personal data, Art. Art. 6 para. 1 lit. d GDPR serves as the legal basis. If the processing is necessary for the purposes of the legitimate interests pursued by our company or of a third party and if the interests, fundamental rights and freedoms of the data of the data subject do not override the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.
3 Data erasure and storage duration
The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Storage may take place beyond this, if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject, has been provided for. The data will also be blocked or erased if a storage period storage period prescribed by the aforementioned standards expires, unless there is a the need for further storage of the data for the conclusion or fulfillment of a contract. fulfillment of the contract.
IV. Provision of the website and creation of log files
1. description and scope of data processing
Each time our website is accessed, our system automatically collects data and information information from the computer system of the accessing computer. The following data is collected: (1) Date and time of access The data is also stored in the log files of our system. Not affected by this This does not affect the IP addresses of the user or other data that enable the assignment of the data to a user. This data is not stored together with other other personal data of the user does not take place.
2. legal basis for data processing
The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f GDPR.
3. purpose of the data processing
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. are no longer required. In the case of the collection of data for the provision of the website, this is the case this is the case when the respective session has ended.
4. duration of storage
The temporary storage of the IP address by the system is necessary to enable the website to be delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR
5. possibility of objection and removal
The collection of data for the provision of the website and the storage of data in log files is log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
V. Use of cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system are stored. When a user accesses a website, a cookie may be stored on the user's stored on the user's operating system. This cookie contains a This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is the website when it is accessed again. We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a can be identified even after a page change.
b) Legal basis for data processing
The legal basis for the processing of personal data using cookies is use of cookies is Art. 6 para. 1 lit. f GDPR.
c) Purpose of the data processing
The purpose of using technically necessary cookies is to simplify the use of simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary for the browser to be recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. used to create user profiles. These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.
e) Duration of storage, objection and removal options
Cookies are stored on the user's computer and transmitted by it to our website. transmitted to our site. As a user, you therefore have full control over the use of cookies. Status May 2018 12 cookies. By changing the settings in your internet browser, you can deactivate or restrict the deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are are deactivated for our website, it may no longer be possible to use all the functions of the website can no longer be used to their full extent.
VI Newsletter
1. description and scope of data processing
On our website, you have the option of subscribing to a free newsletter. subscribe. When registering for the newsletter, the data from the input mask is input mask are transmitted to us. The following data is also collected during registration (1) Date and time of registration Your consent is obtained for the processing of the data as part of the registration process consent is obtained during the registration process and reference is made to this privacy policy. In connection with the data processing for the sending of newsletters data is not passed on to third parties. The data will be used exclusively for sending the newsletter is used.
2. legal basis for data processing
The legal basis for the processing of data after registration for the newsletter by the user is, with the user's consent, Art. 6 para. 1 lit. a GDPR.
3. purpose of the data processing
The purpose of collecting the user's email address is to deliver the newsletter.
4. duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. are no longer required. The user's email address is therefore stored for as long as long as the subscription to the newsletter is active.
5. right of objection and removal
The subscription to the newsletter can be canceled by the user concerned at any time. be canceled. For this purpose, there is a corresponding link in every newsletter.
VII Registration
1. description and scope of data processing
On our website, we offer users the opportunity to register by providing personal data. register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data is not passed on to third parties does not take place. The following data is collected as part of the registration process: (1) Date and time of registration As part of the registration process, the user's consent to the processing of this data is obtained. this data is obtained.
2. legal basis for data processing
The legal basis for the processing of data with the consent of the user is Art. 6 para. 1 lit. a GDPR.
3. purpose of the data processing
User registration is required for the provision of certain content and services on our website. services on our website.
4. duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. are no longer required. This is the case for the data collected during the registration process if the registration on our website is canceled or modified.
5. right of objection and removal
As a user, you have the option of canceling your registration at any time. The data stored about you data stored about you at any time.
VIII Contact form and e-mail contact
1. description and scope of data processing
A contact form is available on our website, which can be used for electronic contact. contact can be used. If a user makes use of this option, the data the data entered in the input mask will be transmitted to us and stored. These data are (1) Date and time of registration Your consent to the processing of the data is obtained as part of the sending process is obtained and reference is made to this privacy policy. Alternatively, you can contact us via the e-mail address provided. In In this case, the user's personal data transmitted with the e-mail will be stored. stored. The data will not be passed on to third parties in this context. The data will be used exclusively for processing the conversation.
2. legal basis for data processing
The legal basis for the processing of data with the consent of the user is Art. 6 para. 1 lit. a GDPR. The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. para. 1 lit. b GDPR.
3. purpose of the data processing
The processing of the personal data from the input mask serves us solely to processing the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form. to prevent misuse of the contact form and to ensure the security of our IT systems. of our information technology systems.
4. duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. are no longer required. For the personal data from the input screen of the contact form and contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. right of objection and removal
The user has the option to withdraw their consent to the processing of personal data at any time. personal data at any time. If the user contacts us by e-mail, they can object to the storage of their personal data at any time. In In such a case, the conversation cannot be continued and all personal data stored in the course of contacting us will be deleted, will be deleted in this case.
IX. Web analysis through Google Analytics
1. scope of the processing of personal data
We use Google Analytics on our website to analyze the surfing behavior of our users. The software places a cookie on the user's computer (for cookies, see above). If individual pages of our website are are accessed, the following data is stored: (1) Two bytes of the IP address of the user's accessing system (2) The website accessed (3) The website from which the user accessed the website (referrer) (4) The subpages that are accessed from the accessed website (5) The time spent on the website (6) The frequency with which the website is accessed The software runs exclusively on the servers of our website. The storage of of the user's personal data only takes place there. The data is not passed on to third parties.
2. legal basis for the processing of personal data
The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. f GDPR.
3. purpose of the data processing
The processing of users' personal data enables us to analyze the surfing behavior of our users. surfing behavior of our users. By evaluating the data obtained, we are able to able to compile information about the use of the individual components of our website. compile. This helps us to constantly improve our website and its user-friendliness. constantly improve. These purposes also constitute our legitimate interest in the processing of the data in accordance with Art. 6 para. 1 lit. f GDPR. By anonymizing the IP address, the interest of users in the protection of their personal data is sufficiently taken into account. sufficiently taken into account.
4. duration of storage
The data will be deleted as soon as it is no longer required for our recording purposes. are needed. In our case, this is the case after one year.
5. right of objection and removal
Cookies are stored on the user's computer and transmitted by it to our website. transmitted to our site. As a user, you therefore have full control over the use of cookies. cookies. By changing the settings in your internet browser, you can deactivate or restrict the deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are are deactivated for our website, it may no longer be possible to use all the functions of the website can no longer be used to their full extent. You can find more information on the privacy settings of Google Analytics under the following link: https://policies.google.com/privacy
X. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
1. right to information
You can request confirmation from the controller as to whether personal data concerning you is being processed by us. If such processing is taking place, you can request the following information from the controller information: (1) the purposes for which the personal data are processed; (2) the categories of personal data being processed (3) the recipients or categories of recipients to whom the personal data concerning you personal data concerning you have been or will be disclosed will be disclosed; (4) the envisaged period for which the personal data concerning you will be stored or, if specific information on this is not possible, criteria for determining the the storage period; (5) the existence of a right to rectification or erasure of personal data concerning you personal data concerning you, a right to restriction of processing by the controller processing by the controller or a right to object to such processing; (6) the existence of a right to lodge a complaint with a supervisory authority (7) all available information about the origin of the data if the personal data was personal data are not collected from the data subject; (8) the existence of automated decision-making, including profiling in accordance with Art. 22 (1) and (4) GDPR and - at least in these cases meaningful information about the logic involved, as well as the significance and the envisaged intended effects of such processing for the data subject. You have the right to request information as to whether the personal data concerning you personal data to a third country or to an international organization. transferred. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer. be informed.
2. right to rectification
You have the right to obtain from the controller the rectification and/or controller if the processed personal data concerning you is incorrect or incomplete, are inaccurate or incomplete. The controller must make the rectification without undue delay. carry out the correction.
3. right to restriction of processing
Under the following conditions, you may request the restriction of the processing of personal data concerning personal data concerning you: (1) if you contest the accuracy of the personal data concerning you for a period enabling the controller to duration that enables the controller to verify the accuracy of the personal verify the accuracy of the personal data; (2) the processing is unlawful and you oppose the erasure of the personal data and request the data and instead request the restriction of the use of the personal data; or use of the personal data; (3) the controller no longer needs the personal data for the purposes of the processing purposes of the processing, but you require the personal data for the establishment, exercise or defense of legal claims, or (4) if you have lodged an objection to the processing pursuant to Art. 21 (1) GDPR and it has not yet been established whether the legitimate grounds of the controller outweigh your reasons. If the processing of personal data concerning you has been restricted data - apart from being stored - may only be used with your consent or for the establishment assertion, exercise or defense of legal claims or for the protection of the rights of another rights of another natural or legal person or for reasons of important public interest of the Union public interest of the Union or of a Member State. If the restriction of processing has been restricted in accordance with the above conditions you will be informed by the controller before the restriction is lifted. is lifted.
4. right to erasure
a) Obligation to erasure You have the right to obtain from the controller the erasure of personal data concerning you personal data concerning you to be erased without undue delay and the controller is obliged to erase this data without undue delay where one of the following grounds applies (1) the personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed are no longer necessary. (2) You withdraw your consent on which the processing is based according to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing. legal basis for the processing. (3) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR. (4) The personal data concerning you has been processed unlawfully. (5) The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject. to which the controller is subject. (6) The personal data concerning you have been collected in relation to the offer of information society information society services offered in accordance with Art. 8 para. 1 GDPR. b) Information to third parties If the controller has made the personal data concerning you public and is obliged pursuant to Art. 17 (1) GDPR to erase the personal data, the controller, taking taking into account the available technology and the implementation costs appropriate measures, including those of a technical nature, to ensure that the controller inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to personal data or copies or replications of such personal data. data. c) Exceptions The right to erasure does not apply if the processing is necessary (1) to exercise the right to freedom of expression and information (2) for compliance with a legal obligation which requires processing by Union or Member State law to which the of the Union or of the Member States to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; (3) for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR; (4) for archiving purposes in the public interest, scientific or historical research purposes historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render the is likely to render impossible or seriously impair the achievement of the objectives of that processing impaired, or (5) for the establishment, exercise or defense of legal claims.
5. right to information
If you have asserted the right to rectification, erasure or restriction of processing against the processing to the controller, the controller is obliged to inform all recipients to whom the personal data recipients to whom the personal data concerning you have been disclosed rectification or erasure of the data or restriction of processing, unless this proves this proves to be impossible or involves a disproportionate effort. associated with disproportionate effort. You have the right vis-à-vis the controller to be informed about these recipients. to be informed about these recipients.
6. right to data portability
You have the right to receive the personal data concerning you, which you have provided to the controller in a structured, commonly used and machine-readable format. machine-readable format. You also have the right to transmit this data to to another controller without hindrance from the controller to which the personal data have been controller to whom the personal data have been provided, provided that (1) the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and (2) the processing is carried out by automated means. In exercising this right, you also have the right to obtain that the personal data concerning you personal data concerning you to be transmitted directly from one controller to another controller to the extent that this is technically feasible. Freedoms and rights of other persons must not be affected by this. The right to data portability does not apply to the processing of personal data necessary for the necessary for the performance of a task carried out in the public interest or in the exercise of official public interest or in the exercise of official authority vested in the controller. has been delegated.
7. right to object
You have the right to object, on grounds relating to your particular situation, at any time against the processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. profiling based on these provisions. The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your outweigh your interests, rights and freedoms, or the processing is necessary for the establishment assertion, exercise or defense of legal claims. If the personal data concerning you are processed for the purpose of direct marketing direct marketing, you have the right to object at any time to the processing of your personal personal data concerning you for the purpose of such advertising; this also applies to This also applies to profiling insofar as it is associated with such direct advertising. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be personal data concerning you will no longer be processed for these purposes. You have the option, in connection with the use of information society services information society services - notwithstanding Directive 2002/58/EC - to exercise your right to object exercise your right to object by automated means using technical specifications. are used.
8. right to withdraw the declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. revoke it. The withdrawal of consent shall affect the lawfulness of processing based on consent before its withdrawal. processing carried out on the basis of the consent until revocation.
9. automated decision-making in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling. processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision (1) is necessary for the conclusion or performance of a contract between you and the controller is necessary, (2) is authorized by Union or Member State law to which the controller is subject Member States to which the controller is subject and where such legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests; or interests, or (3) with your express consent. However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and suitable measures to safeguard your rights and freedoms and your and your legitimate interests have been taken. With regard to the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard the rights and freedoms and your legitimate interests, This includes at least the right to obtain the intervention of a person on the part of the the controller, to express his or her point of view and to contest the decision. decision.
10. right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a you have the right to lodge a complaint with a supervisory authority, in particular in the Member Member State of your habitual residence, place of work or place of the alleged infringement infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the the complainant about the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.