Our data protection declaration is based on the terms used by the European Directive and Ordinance when issuing the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.
We use the following terms, among others, in this Privacy Policy:

a) Personal Data

Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data Subject

A data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for processing.

c) Processing

Processing is any operation or sequence of operations conducted with or without the help of automated procedures involving personal data such as collection, entry, organization, sorting, storage, adaptation or editing, read-out, retrieval, usage, disclosure by means of transmission, distribution or any other form of making available, reconciliation or linking, restriction, deletion or destruction.

d) Restriction of Processing

Restriction of processing is the identification of stored personal data for the purpose of restricting its future processing.

e) Profiling

Profiling is any type of automated processing of personal data which involves the use of such data in order to evaluate certain personal aspects of a natural person, in particular in order to analyze or predict aspects with regard to work performance, financial status, health, personal preferences, interests, reliability, behavior, whereabouts or changes in the whereabouts of such natural person.

f) Pseudonymization

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be traced back to a specific data subject without the help of additional information, insofar as this additional information is stored separately and subject to technical and organizational measures which ensure that the personal data cannot be traced back to an identified or identifiable natural person.

g) Controller or Controller Responsible for Processing

Controller or data controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.

h) Processor

A processor is a natural person or legal entity, public authority, institution or other body which processes personal data on behalf of the controller.

i) Receiver

Recipient means a natural or legal person, public authority, agency or other body to whom Personal Data is disclosed, whether or not a third party. However, authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law are not considered recipients.

j) 3rd Party

A 3rd party is a natural person, legal entity, public authority, institution or other body to the exclusion of the data subject, the controller, the processor and persons who, under the direct responsibility of the controller or the processor, are authorized to process personal data.

k) Consent

Consent is any unmistakable declaration of intent provided voluntarily by the data subject in an informed manner for the specific case in the form of a statement or other unequivocally confirmed act with which the data subject indicates that he or she agrees to processing of his or her own personal data.