Enquiry from affected parties

Use of the Data Subject Request Tool (DSR) for the management of data subject requests a. Scope of the processing of personal data

We use functionalities of the data protection plugin ‘DSR’ of DataCo GmbH, Dachauer Str. 65, 80335, Munich, Bavaria, Germany (hereinafter referred to as: DataCo).

By using the ‘Submit data subject request’ button, all visitors to our website have the opportunity to exercise their data subject rights. To do so, you indicate your relationship with our company, which data subject right you wish to exercise, provide further optional information and, if necessary, identify yourself with further characteristics. The data subject enquiry will then be processed by us.

The following personal data will be processed by DataCo:

• Surname
• First name
• Reference to the person responsible (employee, customer, interested party, etc.)
• e-mail address
• Other voluntarily communicated personal data

Further information on the processing of data by DataCo can be found here: https://www.dataguard.de/datenschutzerklaerung

In addition, log files containing the following may be forwarded to DataCo GmbH to ensure technical functionality:

• Information about the browser type and version used
• The user's operating system
• The user's internet service provider
• The IP address of the user
• Date and time of access
• Websites from which the user's system made the request

b. Purpose of data processing

The use of DSR serves to safeguard the data subject rights of our website visitors. This enables you to exercise your rights as a data subject and to contact us quickly and easily.

c. Legal basis for the processing of personal data

The legal basis for the use of the DSR tool and the sending of corresponding data is your declaration of consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

The legal basis for the use of the log files is our legitimate interest in ensuring the technical functionality of the tool in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

d. Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law.

e. Cancellation and removal options

You can object to the collection and processing of your personal data or revoke your declaration of consent by contacting the controller by e-mail or using the DSR tool.