Privacy statement
This Privacy Policy applies to the use of the website www.bastian-schweinsteiger.de, as well as to the use of the external websites, in particular Bastian Schweinsteiger’s social media profiles on Facebook, Twitter, Instagram and YouTube (hereinafter referred to as the Website). Your personal data are col-lected and processed in compliance with the applicable provisions of data protection law, in particular the EU’s General Data Protection Regulation (GDPR). This Policy describes how your data are col-lected and for what purpose they are used, as well as what options and rights you have in this regard. We will adapt this Privacy Policy if changes in our processing methods so require, and would ask you to consult the content of our latest Privacy Policy on a regular basis.
1. The controller
The controller within the meaning of the General Data Protection Regulation, of other privacy laws applicable in the Member States of the European Union, and of other provisions of a data protection nature is:
PACO Investment GmbH
Forsthausstraße 4
82031 Grünwald
Deutschland
E-Mail: webmaster@bastian-schweinsteiger.de
2. The purposes of data processing
We process your personal data for the purpose of making our Website available, responding to con-tact enquiries and other forms of communication with its users, for security measures, and for audi-ence measurement as part of our marketing.
3. The legal basis of data processing
When our Website is used within the territorial scope of the GDPR, we process your personal data in accordance with the following legal basis: Consent to the processing of personal data is obtained on the basis of Art. 6§1(a) and Art. 7 GDPR. The processing of personal data for the performance of a contract to which we are party, as well as the answering of enquiries, takes place on the basis of Art. 6§1(b) GDPR. The processing of personal data for compliance with a legal obligation to which we are subject is carried out on the basis of Art. 6§1(c) GDPR. Should processing be necessary in order to protect the vital interests of the person concerned or of another natural person, this is done on the basis of Art. 6§1(d) GDPR. If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, this is to be done on the basis of Art. 6§1(e) GDPR. If processing of personal data is necessary for the purposes of our legiti-mate interests, this takes place on the basis of Art. 6§1(f) GDPR. Where personal data are to be used for a purpose other than that for which they have been collected, this takes place on the basis of Art. 6§4 GDPR. The processing of special categories of personal data (listed in Art. 9§1 GDPR) is governed by Art. 9§2 GDPR.
4. Data processing security
We make every effort to ensure the security of your personal data within the framework of the applica-ble privacy legislation, and maintain technical and organisational measures to safeguard your personal data, which we select and continually adapt to take account of the type, scope and risk of data pro-cessing, as well as of economic aspects and of the current state-of-the-art, in order to ensure an ap-propriate level of protection at all times.
5. Transfer to third parties, transfer to non-EU countries
As a matter of principle, we process your personal data within our company only. If and insofar as we involve third parties in the processing (as processors, joint controllers or other third parties), this is carried out on the basis of your consent, a legal basis of permission, a legal obligation, or our legiti-mate interests. Personal data will only be processed outside the EU, the EEA or the Swiss Confedera-tion on the basis of your consent, to fulfil our contractual obligations, to fulfil a legal obligation, or to safeguard our legitimate interests. Such processing outside the EU, the EEA or the Swiss Confedera-tion will only take place if the necessary special legal requirements are met.
6. Erasure/blocking
We only process and store your personal data for the period of time that is necessary to achieve the purpose for which it is stored, or if this has been provided for by the European Parliament or another legislature in laws or provisions to which the controller is subject. If the purpose of storage ceases to apply, or if a storage period prescribed by the European Parliament or another competent legislature expires, the personal data are erased as a matter of routine and in accordance with the statutory pro-visions.
7. Your rights
You have the rights set out below with regard to your personal data in accordance with the General Data Protection Regulation and the applicable country-specific data protection regulations. Should you wish to assert these rights, please send your enquiry by e-mail or post, clearly identifying yourself, to the postal or e-mail address stated in No. 1.
a) The right to confirmation and to information
You have the right to obtain from us a confirmation at any time as to whether personal data concerning you are being processed. If this is the case, you have the right to obtain from us in-formation at no charge regarding the personal data that are being stored concerning you, to-gether with a copy of these data. You furthermore have the right to the following information:
• the purposes for which the data are being processed
• the categories of personal data being processed
• the recipients or categories of recipient to whom the personal information have been or will be disclosed, in particular where the recipients are in third countries or international organisations
• if possible, the envisaged period for which the personal data concerning you will be stored, or, if not possible, the criteria used to determine that period
• the existence of the right to request rectification or erasure of the personal data concern-ing you, or of a right of restriction of processing by the controller, or to object to pro-cessing
• the existence of the right to lodge a complaint with a supervisory authority
• where the personal data are not collected from the data subject: any available information regarding from which source the data originate
• the existence of automated decision-making, including profiling, referred to in Arti-cle 22§§1 and 4 GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such pro-cessing for the data subject
• You have furthermore the right to be informed whether personal data are transferred to a third country or to an international organisation. If this is the case, you also have the right to be informed of the appropriate safeguards related to such transfer.
Should you wish to assert a right to information, please send your enquiry by e-mail or post, clearly identifying yourself, to the postal or e-mail address stated in No. 1.
b) The right to rectification
You have a right to obtain from us, without undue delay, rectification and/or completion of inac-curate or incomplete personal data concerning you that have been processed. Taking into ac-count the purposes, you have a right to obtain from us completion of incomplete personal data – including by means of a supplementary declaration. Should you wish to assert this right to recti-fication, please send your enquiry by e-mail or post, clearly identifying yourself, to the postal or e-mail address stated in No. 1.
c) The right to erasure (“the right to be forgotten”)
You have the right to obtain from us the erasure of personal data concerning you without undue delay, and we have the obligation to erase personal data without undue delay where one of the following grounds applies:
• The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
• You withdraw consent on which the processing was based according to Article 6§1 (a), or Article 9§2 (a) GDPR, and there is no other legal ground for the processing.
• You object to the processing pursuant to Article 21§1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Arti-cle 21§2 GDPR.
• The personal data have been unlawfully processed.
• The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject.
• The personal data concerning you have been collected in relation to the offer of infor-mation society services referred to in Article 8§1 GDPR.
• Where we have made the personal data public and are thus obliged to erase the data, we must take reasonable steps, including technical measures, taking account of available technology and the cost of implementation, to inform the controllers which are processing the personal data that you have requested them to erase any links to, or copy or replica-tion of, those personal data.
Should you wish to assert this right to erasure, please send your enquiry by e-mail or post, clearly identifying yourself, to the postal or e-mail address stated in No. 1.
d) The right to restriction of processing
You have the right to obtain from us the restriction of processing where one of the following ap-plies:
• You contest the accuracy of the personal data concerning you, for a period enabling us to verify the accuracy of the personal data.
• The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
• We no longer need the personal data for the purposes of the processing, but they are re-quired by you for the establishment, exercise or defence of legal claims.
• You have objected to processing pursuant to Article 21§1 GDPR pending verification of whether the legitimate grounds that we have asserted override your interests.
Should one of the above apply to you and you wish to obtain the restriction of personal data that we have stored, please send your enquiry by e-mail or post, clearly identifying yourself, to the postal or e-mail address stated in No. 1.
e) The right to data portability
You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format, and you have the right to trans-mit those data to another controller without hindrance from us, where
• 1. the processing is based on consent pursuant to Article 6§1 (a) GDPR or Article 9§2 (a), or on a contract pursuant to Article 6§1 (b)
and
• 2. the processing is carried out by automated means.
In exercising your right to data portability in accordance with para. 1, you have the right to have the personal data transmitted directly to another controller, where technically feasible. Should you wish to assert this right to data portability, please send your enquiry by e-mail or post, clear-ly identifying yourself, to the postal or e-mail address stated in No. 1.
f) The right to object
You have the right to object, on grounds relating to your particular situation, at any time to pro-cessing of personal data concerning you which is based on Article 6§1 (e) or (f); this also ap-plies to profiling based on those provisions. We will then cease processing the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or processing serves the establishment, exercise or de-fence of legal claims. Where we process personal data for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. You have the right to object, on grounds relating to your particular situation, at any time to processing of per-sonal data concerning you being carried out for scientific or historical research purposes or sta-tistical purposes in accordance with Article 89§1 GDPR, unless processing is necessary for the performance of a task in the public interest. Should you wish to assert this right to object, please send your enquiry by e-mail or post, clearly identifying yourself, to the postal or e-mail address stated in No. 1. In the context of the use of information society services, and notwithstanding Di-rective 2002/58/EC, you may furthermore exercise your right to object by automated means us-ing technical specifications.
g) The right to withdraw your declaration of consent under privacy law
You have the right to withdraw your consent to the processing of personal data at any time. Should you wish to assert this right of withdrawal, please send your enquiry by e-mail or post, clearly identifying yourself, to the postal or e-mail address stated in No. 1.
h) The right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are staying or working, or in which the suspected violation took place, if you consider that the processing of personal data relating to you infringes the law.
8. Access data
Each time you visit our Website, we automatically collect a number of access data on the basis of our legitimate interests in accordance with Art. 6§(f) GDPR. These access data are stored in the server’s logfiles. The type and version of the browser used, the operating system used by the requesting sys-tem, the website from which a requesting system reaches our Website (so-called referrers), the sub-sites which are accessed via a requesting system on our Website, the date and time of access to the Website, an Internet protocol address (IP address), the Internet service-provider of the requesting system, and other similar data and information which serve to avert dangers in the event of attacks on our information technology systems, can be recorded. We do not draw any conclusions regarding your identity when using these access data. The information is required in order to provide and optimise the content of our Website correctly, to ensure the long-term functionality of our information technology systems and the technology of our websites, and to provide criminal prosecution authorities with the necessary information for prosecution in the event of a cyberattack. We therefore evaluate the access data both statistically and with the aim of increasing data protection and data security in our company in order to ensure an optimum level of protection for the personal data that we process. The data in the server logfiles are stored separately from all personal data provided by the data subject.
9. Google Analytics
On the basis of our legitimate interest in accordance with Art. 6§1(f) GDPR, we use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google is certified in accordance with the “Privacy Shield” privacy agreement (http://www.privacyshield.gov/participant?id=a2zt000000001L5AAI), and is thus subject to the guaran-tee of compliance with European data protection law (http://policies.google.com/privacy/frameworks?hl=de&gl=de). Google Analytics uses “cookies”, which are text files stored on your computer, to enable the analysis of how you use the site. The information generated by the cookie about page visitors’ use of this Website will as a rule be transmitted to and stored on a Google server in the USA. If IP anonymisation is activated on this Website, your IP ad-dress will however be previously truncated by Google within the Member States of the European Un-ion or in other Contracting States of the Treaty on the European Economic Area before being transmit-ted. Only in exceptional cases will the full IP address be transmitted to one of Google’s servers in the USA and truncated there. IP anonymisation is activated on this Website. Google will use this infor-mation on our behalf in order to evaluate the way you use the Website, to compile reports for us illus-trating activities on our websites, and to provide other services linked to the use of our Website and of the Internet. Google will not associate the IP address transmitted by your browser in Google Analytics with any other data held by Google. You can prevent cookies being stored by making the appropriate setting on your browser; we would however like to point out that you may not then be able to make full use of all the functions of this Website. You can also prevent the data generated by the cookie regard-ing your use of the Website (including your IP address) from being passed on to Google, as well as Google processing these data, by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de. You can learn more about how Google handles data by consulting Google’s Privacy Policy, which can be retrieved via the link below: http://policies.google.com/privacy
10. Google Tag Manager
We use the Google Tag Manager to integrate Google Analytics services into our Website. The Google Tag Manager does not process any personal data itself. More information about the Google Tag Man-ager can be found by following this link: http://www.google.com/intl/de/tagmanager/use-policy.html
11. Twitter
We integrate functions and contents of the Twitter service into our Website. This service is provided by Twitter Inc., 1355 Market St., Suite 900, San Francisco, CA 94103, USA. If you yourself are a member of this service, the provider of the service can attribute the utilisation of the functions and contents that we have integrated into the Website to your member profile. Twitter is certified in accordance with the “Privacy Shield” privacy agreement (http://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO), and is thus subject to the guar-antee of compliance with European data protection law. You can adjust the extent to which your data are processed by Twitter under the following link: http://twitter.com/personalization. You can find more information on the use of Twitter data in the Twitter privacy statement available via the following link: http://twitter.com/de/privacy.
