Data Protection Policy

I. General information on data protection and data subject rights.

§1 General Information

Data protection is an important issue. Below we provide information about the collection and processing of personal data. Personal data is all data that can be related to you personally.

Responsible according to Art. 4 Para. 7 GDPR
think about IT GmbH

Authorized representative: Dipl. jur. Peter Rados
Gesundheitscampus-Süd 19

44801 Bochum Phone: 0234/3253247
E-Mail:info@think-about.it
data protection officer
You can reach our company’s personally appointed data protection officer at the following address:
Mr Patrick Grihn
grihn@dsb.ruhr
DSB Ruhr
℅ nextindex GmbH & Co. KG
Grabenstr. 12 44787 Bochum

If you have any questions about processing, security or a request for information, you can contact us directly and in confidence.

§2 General overview of data and processing operations

We want to offer you the required clarity in accordance with Art. 12 GDPR.

Therefore, the following overview of processing operations:

Usage data or communication data (when accessing a website, IP address, device information, access time and date, etc.)
Contact details when registering or entering data
inventory data (name, company, address)
Communication data (possibly meta-data about calls, emails)
Content data (especially when sending emails and using the contact form)
In addition (internally), the following additional data for our customers, interested parties, suppliers and business partners for the provision of services in the area of ​​offers and contracts, service and marketing, direct advertising and customer care:
contract data
customer inventory data (CRM)
supplier data
payment data
order data and invoice data
Affected persons (categories)
Users of this website (also called visitors)
Customers
suppliers
purposes
Operating the website and providing the information
Ensuring the operation of the website and our systems (e.g. firewall)
communication with our customers
answering inquiries
optimization and analysis of the website
Providing information to our (potential) customers

§3 Your rights

You have the following rights with regard to the personal data concerning you:
Short:
right to information,
right to rectification or erasure,
right to restriction of processing,
Right to object to processing,
right to data portability,
Right to complain to the data protection supervisory authority about our processing of your personal data.

Detailed rights:
to request information about your personal data processed by us in accordance with Art. 15 GDPR . In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details,
to request the immediate rectification of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR,

to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims,

to request the restriction of the processing of your personal data pursuant to Art. 18 GDPR if you contest the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you require it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 GDPR,

pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller,

to revoke your consent at any time in accordance with Art. 7 Paragraph 3 GDPR . This means that we may no longer continue the data processing based on this consent in the future and

to complain to a supervisory authority pursuant to Art. 77 GDPR . As a rule, you can contact the supervisory authority of your usual place of residence or work or of our office.

Exceptions :

The right to erasure does not exist if the processing is necessary

to exercise the right to freedom of expression and information,

to fulfill a legal obligation required by Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller,
for reasons of public interest in the area of ​​public health pursuant to Art. 9 (2)(h) and (i) and Art. 9 (3) GDPR,
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right referred to in section a) is likely to make the achievement of the objectives of this processing impossible or seriously compromises it, or
to assert, exercise or defend legal claims

§4 Legal basis in general

When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures .

If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing.

If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.

If we obtain consent from the data subject for processing personal data, Art. 6 (1) (a) GDPR serves as the legal basis.