1.1 We are pleased that you are visiting our website and thank you for your interest in our services. We take the protection of your personal data very seriously. For this reason our website is SSL-encrypted. In the following we inform you about the collection, processing and use of your personal data on our website. We treat your personal data confidentially and in accordance with the legal data protection regulations and this data protection declaration.
Personal data are all data with which you can be personally identified.
1.2 The responsible party for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
HUM Systems GmbH
Köpenicker Str. 126
1.3 The use of our website is usually possible without providing personal data. However, when using the contact form or by writing an e-mail to us, personal data is collected.
1.4 This website uses SSL encryption for security reasons and to protect the transmission of personal data.
2. Collection of Data via Contact Form
2.1 By means of the contact form your name, your e-mail address, your telephone number and your request will be saved.
2.2 The collected data will be stored and used exclusively for the purpose of answering and processing your request or for contacting you and the related technical administration. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR. If you contact us for the purpose of concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after the final processing of your enquiry, provided that it is clear from the circumstances that the matter in question has been conclusively clarified and there are no legal obligations to retain the data. We will not pass on your personal data without your consent. You will find information on your rights and on revocation under points 6 and 7.
3. Use of Server Log Files - Access Data
The website operator or page provider automatically collects data about accesses to the site and saves them as "server log files". The following data is logged in this way:
• Visited websites
• Time at the time of access
• Amount of data sent in bytes
• Source/reference from which you reached the site
• Browser used
• Operating system in use
• IP address used
The data in the server log files cannot be assigned to specific persons. This data is not merged with other data sources. An evaluation is carried out exclusively to ensure the provision of our Internet presence and to detect possible sources of error. We also reserve the right to subsequently check this data if we become aware of concrete indications of illegal use (e.g. in the case of DoS attacks). The server log files are stored for one calendar month each and then deleted.
Cookies are small text files that enable certain functions on websites on the Internet. When a website is called up, the cookie is sent to the browser together with the requested website. Cookies serve to make our offer more user-friendly, more effective and safer. You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser.
5. Duration of Storage of Personal Data
The duration of the storage of your personal data is determined on by the purpose of its processing and the respective legal retention period (e.g. commercial and tax law retention periods). After the purpose has been fulfilled, the period has expired or there is no longer a legitimate interest in processing your data, your personal data will be deleted unless you have consented to further use. An earmarked storage of your data means e.g. the creation and maintenance of a customer account.
6. Rights of the Data Subject
6.1 The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the person responsible for processing your personal data; we would like to inform you about this below:
6.2 Right to information according to Art. 15 GDPR
You, as a data subject, have the right to obtain confirmation from the data controller referred to in point 1.2 as to whether personal data relating to you are being processed; if this is the case, you have the right to be informed of this personal data and to receive the following information:
– The processing purposes of your personal data
– the categories of personal data processed
– the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular to recipients in third countries or international organisations
– if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
– the existence of a right to correction or deletion of your personal data or restriction of processing by the person responsible or a right to object to this processing
– the right to lodge a complaint with a supervisory authority if the personal data is not collected from the data subject, all available information about the origin of the data
– the existence of automated decision-making, including profiling, in accordance with Article 22 paragraphs 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject
– If personal data is transferred to a third country or an international organization, you as the data subject have the right to be informed about the appropriate guarantees in accordance with Art. 46 in connection with the transfer.
6.3 Right to Rectification according to Art. 16 GDPR
You have the right to have your incorrect personal data in question corrected without delay by the person responsible referred to in 1.2. Furthermore, you can request that your stored incomplete personal data be completed by him.
6.4 Right to Deletion according to Art. 17 GDPR
You have the right to request the deletion of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right does not exist in particular if processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
6.5 Right to Restriction of Processing according to Art. 18 GDPR
You have the right to request the restriction of the processing of your personal data for the time necessary to verify the accuracy of your data that you dispute; if you refuse to have your data deleted because of unlawful processing and instead request the restriction of the processing of your data; if you need your data for the purpose of asserting, exercising or defending legal claims, but after we no longer need it after the purpose for which your personal data was collected has been achieved, or if you object on the grounds of your particular situation as set out in Art. 21 para. 1 GDPR, as long as it has not yet been established whether our justified reasons outweigh any other.
6.6 Right to Information under Art. 19 DSGVO
If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis us, we are obliged to notify all recipients to whom we have disclosed personal data concerning you of this rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort. You may request to be informed of these recipients.
6.7 Right to Data Portability according to Art. 20 GDPR
You have the right to receive the personal data you have provided to us in a structured, common and machine-readable format. You also have the right to request unimpeded transmission of the data to another person responsible, insofar as this is technically feasible.
6.8 Right to Withdraw Consent Given in accordance with Art. 7 Para. 3 GDPR
You can revoke your consent to the processing and storage of data at any time in the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. Withdrawing your consent does not affect the lawfulness of the processing carried out based on the consent until the withdrawal.
6.9 Right to Lodge a Complaint in accordance with Art. 77 GDPR
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority in the member state of your residence, your place of work or the place of the alleged violation.
7. Right to Object Art. 21 GDPR
You have the right to object at any time to the processing of your personal data, which we process in accordance with Art. 6 Para. 1 e or f GDPR, for reasons that arise from your particular situation. Insofar as we cannot demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedom, or the processing serves to assert, exercise or defend legal claims; we do not process and store the data any further.
You can object to the processing of your data for direct marketing purposes at any time. As a result, the processing of the data in this sense will be stopped by us. In the above cases, your objection should be directed to the person responsible specified under 1.2.