Privacy Notice
daspro GmbH, Kurfürstendamm 21, 10719 Berlin, Germany, datenschutz(AT)daspro.de, as controller within the meaning of the GDPR, hereby informs you about the processing of personal data that we carry out.
Below we have compiled the most important information on our typical data processing operations, broken down by group of data subjects. For certain processing operations that only concern specific groups, the information obligations are fulfilled separately.
Where the term "data" is used in this text, it refers exclusively to personal data within the meaning of the GDPR.
1. Visitors to the website
1.1 Server log data – With every request, our web server processes a number of data items that your browser automatically transmits: the IP address currently assigned to your device, the date and time of the request, the time zone, the specific page or file requested, the HTTP status code and the amount of data transferred; in addition, the website from which your request came, the browser used, the operating system of your device and the language setting. The web server uses this data to display the content of this website on your device as well as possible.
1.2 The purpose of the processing is to present our company and its services on the internet and to communicate with our contacts. No change to these purposes is planned.
1.3 The legal basis for the processing is Article 6(1)(f) GDPR (legitimate interest: operating a website and communicating with our contacts).
1.4 Log and communication data are not passed on to third parties unless special circumstances arise. In the event of a suspected criminal offence or in investigation proceedings, data may be transmitted to the police and public prosecutors. We also use service providers as processors, in particular for the provision, maintenance and support of IT systems.
1.5 IP addresses are anonymised after 24 hours at the latest. Enquiries and communications are deleted automatically after ten calendar years.
1.6 The website cannot be used without disclosing data that can be linked to a person, such as the IP address. Communication via the website is not possible without providing data.
2. Business partners and their employees
2.1 We process your data for the purpose of establishing and performing the contractual relationship and to comply with legal requirements. No change to these purposes is planned.
2.2 The legal basis for the processing is, for contracts with natural persons, Article 6(1)(b) GDPR (preparation and performance of the contract), for contracts with legal entities, Article 6(1)(f) GDPR (legitimate interest, namely communication with contacts relevant to the contract), and in all cases Article 6(1)(c) GDPR (legal obligations, in particular tax and commercial law). When examining, enforcing or defending against claims, the legal basis is Article 6(1)(f) GDPR (legitimate interest, namely enforcing claims or defending against claims).
2.3 Recipients of data may be banks for processing payments. Public authorities may be recipients within the scope of their duties, insofar as we are obliged or entitled to transmit data. In individual cases, data may also be transmitted to debt collection agencies, lawyers and courts.
2.4 All data relevant to contracts and accounting are stored for ten calendar years after the end of the contract in accordance with retention periods under tax and commercial law. Enquiries and communications are deleted automatically after ten calendar years.
2.5 Providing data is both a legal and a contractual requirement for business partners and their employees. Without data, the business relationship cannot be established and performed. Providing data is necessary for prospective clients and contacts. Without data, communication is not possible.
3. Prospective clients and contacts
3.1 We process the data of prospective clients and contacts for the purpose of communicating with them.
3.2 The legal basis for processing the data of prospective clients and other contacts is Article 6(1)(f) GDPR (legitimate interest, namely communication with prospective clients and contacts).
3.3 We also use service providers as processors, in particular for the provision, maintenance and support of IT systems.
3.4 Enquiries and communications are deleted automatically after ten calendar years.
3.5 Providing data is necessary for prospective clients and contacts. Without data, communication is not possible.
4. General information and rights of data subjects
4.1 Data is not transferred to third countries.
4.2 We do not use automated individual decision-making.
4.3 You have the right to request information at any time about all personal data we process about you.
4.4 If your personal data is incorrect or incomplete, you have the right to rectification and completion.
4.5 You may request the erasure of your personal data at any time, unless we are legally obliged or entitled to continue processing it.
4.6 Where the legal requirements are met, you may request restriction of the processing of your personal data.
4.7 You have the right to object to processing carried out for the purposes of direct marketing or profiling. Where processing is based on a balancing of interests, you may object to it on grounds relating to your particular situation.
4.8 Where processing is based on your consent or on a contract, you have the right to receive the data you have provided in a portable format, provided this does not adversely affect the rights and freedoms of others.
4.9 Where we process your data on the basis of consent, you have the right to withdraw that consent at any time with effect for the future. Processing carried out before the withdrawal remains unaffected.
4.10 You also have the right to lodge a complaint with a data protection supervisory authority at any time if you believe that data has been processed in breach of applicable law.
As of 24 May 2018. This English version is provided for convenience; the German version is authoritative.