Privacy policy
This is a courtesy translation. The legally binding version is the German privacy policy.
§ 1 General
Your personal data (e.g. salutation, name, address, e-mail address, telephone number) is processed by us only in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following provisions inform you — besides the purposes of processing, legal bases, recipients and storage periods — also about your rights and the controller responsible for processing your data. This privacy policy applies only to our websites. If links on our pages forward you to other sites, please inform yourself there about how your data is handled.
§ 2 Getting in touch
(1) Purpose of processing
We process the personal data you provide to us by e-mail, contact form, etc. in order to answer and handle your enquiries. You are not obliged to provide us with your personal data. However, without your e-mail address we cannot reply to you by e-mail.
(2) Legal bases
a) If you have given us your express consent to process your data, Art. 6 (1)(a) GDPR is the legal basis for this processing.
b) If we process your data to carry out pre-contractual measures, Art. 6 (1)(b) GDPR is the legal basis.
c) In all other cases (in particular when using a contact form) Art. 6 (1)(f) GDPR is the legal basis.
RIGHT TO OBJECT: You have the right, on grounds relating to your particular situation, to object at any time to processing carried out on the basis of Art. 6 (1)(f) GDPR that does not serve direct marketing. In the case of direct marketing, however, you may object to the processing at any time without giving reasons.
(3) Legitimate interest
Our legitimate interest in the processing is to communicate with you quickly and to answer your enquiries cost-effectively. If you provide us with your postal address, we reserve the right to use it for postal direct marketing. You can protect your interest in data protection by sharing data sparingly (e.g. by using a pseudonym).
(4) Categories of recipients
Hosting providers, mailing service providers in the case of direct marketing.
(5) Storage period
Your data is deleted once it can be inferred from the circumstances that your enquiry or the matter concerned has been conclusively settled.
If, however, a contract is concluded, the data required under commercial and tax law is retained by us for the statutory periods, i.e. regularly ten years (cf. § 257 HGB, § 147 AO).
(6) Right of withdrawal
In the case of processing based on your consent, you have the right to withdraw your consent at any time.
§ 3 Comments
(1) Purpose of processing
There is the option to write a comment. Your data (e.g. name/pseudonym, e-mail address, website) is then processed only for the purpose of publishing your comment.
(2) Legal basis
The legal basis for this processing is Art. 6 (1)(f) GDPR.
(3) Legitimate interest
Our legitimate interest is the public exchange of user opinions on certain topics and products. Publication serves, among other things, transparency and opinion-forming. Your interest in data protection is preserved, as you can publish your comment under a pseudonym.
(4) Storage period
No specific storage period is provided for. You can request the deletion of your comment at any time.
(5) RIGHT TO OBJECT
You have the right, on grounds relating to your particular situation, to object at any time to processing carried out on the basis of Art. 6 (1)(f) GDPR that does not serve direct marketing. In the case of direct marketing, however, you may object to the processing at any time without giving reasons.
§ 4 Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us:
1. Right of access
You can ask us to confirm whether personal data concerning you is being processed. If so, you can request information about the purposes of processing, the categories of data processed, the recipients, the planned storage period, the existence of a right to rectification, erasure, restriction or objection, the right to lodge a complaint with a supervisory authority, the origin of the data and the existence of automated decision-making. You also have the right to ask whether your data is transferred to a third country or to an international organisation.
2. Right to rectification
You have a right to rectification and/or completion vis-à-vis us if the processed personal data concerning you is incorrect or incomplete. We must carry out the rectification without delay.
3. Right to restriction of processing
Under the statutory conditions you can request the restriction of the processing of your personal data, for example if you contest the accuracy of the data, the processing is unlawful, we no longer need the data but you need it for legal claims, or if you have objected.
4. Right to erasure
You can request that the personal data concerning you be erased without delay, provided one of the statutory grounds applies (Art. 17 GDPR) and no statutory retention obligation or other exception opposes the erasure.
5. Right to notification
If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis us, we are obliged to notify all recipients to whom your data has been disclosed of this rectification, erasure or restriction, unless this proves impossible or involves disproportionate effort.
6. Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller, where the statutory conditions (Art. 20 GDPR) are met.
7. Right to object
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you carried out on the basis of Art. 6 (1)(e) or (f) GDPR. If your data is processed for direct marketing, you have the right to object at any time without giving reasons.
8. Right to withdraw the data protection consent declaration
You have the right to withdraw your data protection consent declaration at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal.
9. Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you, unless the statutory exceptions (Art. 22 GDPR) apply.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
Controller for data processing
Richard Holzberger
Ernst-Platz-Str. 6a
80992 München, Germany
E-mail: willkommen@schachfreunde-muenchen.de