Dear Visitor,
The protection of your privacy is important to us! We would therefore like to use the following information to inform you about how we handle your data that is collected when using our Internet offers as well as during usage of our mobile Werder applications.
1. The party responsible for our general Internet offers and the mobile Werder applications, and pertaining to the Basic Data Protection Regulation (GDPR) and other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature, is:
SV Werder Bremen GmbH & Co KG aA (WERDER)
Franz-Böhmert-Straße 1c
28205 Bremen
Telephone: +04 21 - 43 45 90
Fax: 04 21/49 35 55
E-Mail: info@werder.de
Internet: www.werder.de
2. Responsible parties for individual services:
| Services | Responsible Authority |
|---|---|
WERDER.DE | SV Werder Bremen GmbH & Co KG aA |
| FANSHOP and NEWSLETTER (FANSHOP) | Werder Bremen Fan-Service GmbH Hoerneckestraße 11/13 28217 Bremen |
| WERDER CARD | Werder Bremen Payment GmbH Franz-Böhmert-Str. 1c 28205 Bremen |
| NEWSLETTER (Members, E-Paper) | Sport-Verein "Werder" v. 1899 e.V.
|
| CLUB MEMBERSHIP | Sport-Verein "Werder" v. 1899 e.V.
|
Rechtsanwalt Bertold Frick,
Datenschutz-Metropol GmbH,
Baumwollbörse, Wachtstraße 17/24, 28195 Bremen
E-Mail: datenschutzbeauftragter@werder.de
1. Scope of personal data processing
We only collect and use personal data of our users insofar necessary to provide a functional website as well as our content and services. If this is not the case, personal data will only be used with the consent of the user on a regular basis. An exception applies in such cases where prior consent cannot possibly be obtained and the processing of the data is permitted by law.
2. Legal basis of processing
Insofar as we obtain the consent of personal data of the affected individual for the processing of personal data, Article 6(1)(a) of the Basic EU Data Protection Regulation (GDPR) will serve as the legal basis. For the processing of personal data necessary for the performance of a contract, of which the data subject is a part, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 paragraph 1 lit. c GDPR serves as the legal basis. In the event that the vital interests of the data subject or another individual requires the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis. If processing is necessary to protect a justified interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6(1)(f) GDPR serves as the legal basis for processing. The legitimate interest of our company lies in the performance of our business activities.
3. Routine deletion and blocking of personal data
WERDER processes and stores the personal data of the data subject only for as long as it is necessary for storage purposes. Furthermore, data may be stored insofar as this has been specified by the European or national legislator in EU regulations, laws or other rules to which the person responsible for the processing is subject. As soon as the storage purpose ceases to apply or a storage period prescribed by the aforementioned regulations expires, the personal data is routinely blocked or deleted.
4. Security of your data
We take all reasonable technical and organizational precautions to protect your information. All webpages that request sensitive information from you are encrypted before being transmitted to us. This provides the best possible protection against unauthorized access.
1. Log Files
When you visit a page of our website, by default our web server collects the name of the retrieved file, the date and time of access, the amount of data transferred, and any error messages.
The following data may be collected:
The processing of data serves to deliver the content of our website, in order to guarantee the functionality of our information technology systems and to optimize our website. The data of the log files are always stored separately from other personal data of the users.
2. Cookies
Our website uses cookies. Cookies are small text files that are stored in your browser cache for the duration of your browser session ("session cookies") or on your hard drive for a certain amount of time ("permanent cookies"). Cookies allow us to recognize your browser so that, on future visits to our website, we can provide you more quickly with content tailored more precisely to your personal preferences. The cookies do not store any personal data.
You can change or revoke your cookie settings following the link below:
Cookie Settings
How can I prevent the storage of cookies?
You can configure your browser so that it accepts cookies only with your permission. Any remaining cookies can be deleted. However, disabling cookies may limit the functionality of our website. Instructions on how to disable cookies are available at Link.
3. Google Services
(Google Analytics, Google Universal Analytics, and Google DoubleClick)
a) Google Tools for Analyzing Usage Behavior with Pseudonymous Identifiers
To make the use of our webpages more comfortable for our customers, our site uses the analytics and advertising tools Google Analytics (including the Universal Analytics features) and DoubleClick by Google, created by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 ("Google").
b) How Do the Tools Work?
Google Analytics uses "cookies" (see Section 1), which are stored on your computer. These cookies enable us to analyze your use of our website.
Universal Analytics allows us to analyze activities on our websites across devices (for example, if you access our site by computer and later by smartphone). It does so by assigning a pseudonym to the user, rather than to the device. The pseudonym is a "User ID," a unique sequence of numbers that is not personally identifiable. You are assigned a User ID when you register at werder.de or when you log into your existing customer account. Google only receives the User ID and the usage data associated with the User ID. As a result, it impossible to attribute the usage data to a specific person.
DoubleClick by Google uses cookies to show you advertisements that are relevant to you. Your browser is assigned an anonymous identification number (ID). This number is used to monitor which ads appear in your browser and which ads have been viewed. The cookies do not contain personal information. DoubleClick cookies only allow Google and its partner sites to display ads that are relevant to you based on your previous visits to our website or other online sites.
c) What Happens to My Information?
The information collected by these applications is transmitted to a Google server in the USA and stored there. Google uses this information on our behalf to evaluate your use of the website, to compile reports on website activities, and to provide us, as the website operator, with additional services related to website and Internet usage. Google does not merge the information transmitted from your browser in connection with these Google services with any other data. In order to enhance the protection of your information, we use Google Analytics and Universal Analytics with the extension “_anonymizeIp().” This extension processes IP addresses only in an abbreviated form to prevent any of your information from being traced directly to you.
d) How Can I Prevent My Information from Being Collected and Processed?
By using our website, you agree to have information collected and processed by Google in the manner and for the purposes described here. However, you may opt out of the collection and/or processing of your information at any time with future effect:
You can prevent cookies from being stored by adjusting the relevant settings on your browser. However, please be advised that if you opt out of using cookies, you may not be able to use all of the features of this website.
You can also prevent your information from being collected by Google Analytics and Universal Analytics and then transmitted to Google for processing. To do so, download and install the browser plugin available at Link
You can deactivate DoubleClick cookies by downloading and installing the browser plugin available at Link in the section on the DoubleClick deactivation add-on. Alternatively, you can deactivate DoubleClick cookies on the Digital Advertising Alliance website, Link
For additional information on how Google uses cookies and the ways you can disable them, visit Link or Link zu den Google Werbeeinstellungen
4. Google AdWords Conversion Tracking
In order to evaluate and optimize our online advertising, our website uses the "conversion tracking" feature of the advertising program Google AdWords. This feature lets us identify whether users access our website through Google ads and, if so, how many users access us this way. When you click on a Google ad, Google places a "conversion cookie" on your device. This cookie has a 30-day "lifetime." If a user accesses one of our webpages through our Google ad within these 30 days, Google identifies which ad brought the visitor to our site and shares this information with us. Personal information that could be used to identify individual visitors is not collected. We only receive a statistical analysis of the total number of users who clicked on our ads and were directed to our site.
For more information on Google Conversion Tracking, visit Link
You can opt out of conversion cookies, and therefore prevent conversion tracking, by:
5. Google Ad Manager
On Werder.de we also generate advertising revenues. In order to use advertisements as specifically and successfully as possible for the advertising customer (for example by not repeatedly displaying the same advertisement to the same user), we use a so-called AdServer, which controls the delivery of the advertisements - for example through the use of cookies. Werder uses the Google Admanager for the delivery of advertising. Information about the service can be found here: Link. You can prevent the use of cookies by the Admanager by:
6. Facebook - Pixel
With the given consent, which you have confirmed by clicking the following button when visiting our website:
"We use cookies and marketing tools on our website and collect personal data. With 'OK' you agree to the use of cookies and marketing tools and accept our privacy policy. You can customize the settings under 'Privacy' at any time and receive further information."
We use another conversion - tracking - tool, Facebook - pixels, a service of the,
Facebook Inc.
1601 S. California Ave,
Palo Alto,
CA 94304,
USA.
With this service, we as well as Facebook can keep track of the user’s actions after they have clicked on a Facebook advertisement. This way, we can analyze the effectiveness of Facebook advertisements for statistical and marketing research purposes with the aim of optimizing advertisement activities.
The collected data is kept anonymously which means we cannot trace the identity of the user. However, the data will be saved by Facebook, so Facebook can bring a connection between the advertisement and the user profile. Facebook will use this information for their advertisement purposes, according to the Facebook record usage policy (https://www.facebook.com/about/privacy)/). You can allow Facebook as well as their partner organizations the display of advertisements on and off of the Facebook page. A cookie can be installed on your computer for this purpose.
We only implement a Facebook pixel with your personal consent. This consent for implementing the custom audience pixel can only be given by users who are older than 13 years. In case you are younger than 13 years, we kindly request you to ask your legal guardian for their consent. You can revoke your consent any time.
Please click the following button if you want to revoke your consent.
7. Using Facebook Insights
Facebook uses its "Facebook Insights" service on our Facebook pages. If you consent to tracking on our website by opting in, your data will be collected for our Facebook fan page. You may exercise your rights towards Facebook Ireland and WERDER. The primary responsibility according to DS-GVO for the processing of Insights data lies with Facebook. Facebook fulfils all obligations under the DS-GVO with regard to the processing of Insights data and makes the essence of Page Insights available to individuals concerned with their data. WERDER makes no decisions regarding the processing of Insights data and other information resulting from Art. 13 DSGVO, including legal basis, identity of the person responsible and storage period of cookies on user terminals.
For more information about the Page Insights additions regarding the responsible party at Facebook please click this link.
8. AddThis
Our website uses "AddThis" plugins to make it easier for you to add bookmarks. AddThis is a service provided by AddThis LLC, 8000 West Park Drive, Suite 625, McLean, VA 22102, USA. It uses cookies (see Section 2) to transmit information (for example, time of use and browser language) to AddThis in the USA, where the information is processed. For more information on the scope and purpose of data collection and use, visit www.addthis.com/privacy. We do not collect or process the information. You may prevent the use of your information at any time by accepting an "opt-out cookie." For help, please visit the above URL.
1. What is “personal data”?
Personal data is information about you which allows conclusions to be drawn about your identity or which directly or indirectly refers to you, e.g. your name, your address or your telephone number. Information which does not allow conclusions to be drawn about a specific or identifiable person is not included.
2. Your registration with WERDER
If you register on the WERDER website by providing personal data, the data will be transmitted to WERDER in the respective input form. The data is stored exclusively for the purpose of internal use at WERDER. During registration, the IP address of the user and the date and time of registration are stored in addition to the data mentioned below. This serves to prevent misuse of services. The data will not be passed on to third parties. An exception applies if there is a legal obligation to disclose.
Registered persons have the possibility to delete or modify the stored data at any time. The affected person will receive information about the personal data stored about him or her at any time. Registration is based on our legitimate interests. With the possibility to register, we can offer our visitors the comfort to log in again regularly and to store the data permanently.
a) What Information Do We Collect and How Do We Use It?
For your registration, we need certain information from you, such as your name, address, date of birth, email address, and a username. The fields that must be filled out for registration are marked as mandatory in the login menu. Other information (such as your cell phone number) is optional. We store and use the information you provide only to render the services requested by you, such as for ticket sales, WerderTV subscriptions, or purchases in our store.
b) Bank and Credit Card Information
For certain paid services, we also require bank or credit card data. We only store your bank details if payment is made by direct debit. If you choose to pay with a credit card, we need your credit card information. Credit card information is not collected by us. It is collected directly and exclusively by the payment service providers commissioned by us, which specialize in online transactions. This way, you can shop with confidence.
c) Can I Buy Something from the Fanshop Without Registering?
You must register before you can purchase anything in our Fanshop. The information we collect to process the purchase is not stored in the central database (see Section 3). It is only collected and stored in the store system.
3. Your Club Membership
a) What data do we collect and for what purpose?
The following data is collected from the club membership registration form:
First and last name, address (street, house number, postal code, town), date of birth, date of joining the association, department and, if applicable, team membership, bank details, if applicable, the names and contact details of the legal representatives, telephone number, e-mail addresses, if applicable, function in the association, household and family membership if applicable when allocated to the family contribution, health data.
The processing of your data takes place:
b) Public relations
As part of the public relations work on club activities, personal data is published in notices, in the club newspaper and on websites and passed on to the press.
This includes data from generally accessible sources:
The publication of personal data on the Internet or in local, regional or national print media is carried out to safeguard the legitimate interests of the association (cf. Article 6 para. 1 lit. f) DSGVO). The legitimate interest of the club is to inform the public by reporting on the activities of the club. In this context, personal data, including pictures of the participants, are published, for example, in the context of reporting on sporting events of the club.
The publication of photos and videos, which were made outside of public events, takes place exclusively on the basis of the consent of the persons depicted.
On the club website the data of the members of the board, the heads of department and the trainers will be published with first name, surname, function, e-mail address and telephone number.
c) Use and publication of member data and lists
The list of members or participants are made available to the respective employees of the club (e.g. board members, department heads, and trainers) to the extent required by the respective task. When it comes to the extent of the personal data used, we will follow the guideline of minimal use of data.
Personal data of members may only be passed on to other club members with the consent of the person concerned. The use of participant lists, in which the participants of meetings and other events register for example as proof of attendance, is not regarded as such a publication.
d) Disclosure of member data to third parties
We only pass on your personal data to third parties if:
you have given your express consent pursuant to Art. 6 para. 1 sentence 1 lit. a DSGVO, the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data, for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. a DSGVO is necessary for the disclosure of your data pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO. 6 para. 1 sentence 1 lit. c DSGVO, this is legally permissible and required according to Art. 6 para. 1 sentence 1 lit. b DSGVO for the implementation of your membership.
This includes in particular the disclosure of your data to:
Your data will not be passed on to third parties for advertising purposes.
4. Storage of Personal Information in a Central Database
a) Central Storage
When you register with us, we store the information that we collect in a central database, which is operated by SV Werder Bremen GmbH & Co KG aA. All companies in the WERDER BREMEN Group use the database to provide services.
Companies in the WERDER BREMEN Group Currently Include:
Sport - Verein „WERDER" von 1899 e.V.
SV WERDER BREMEN GmbH & Co KG aA
WERDER BREMEN Fan - Service GmbH
WERDER BREMEN Payment GmbH
b) Why Is the Information Stored Centrally?
Our online services are based on a client system that is used by all companies of the WERDER BREMEN Group, which can access the central database through the system. This system enables us to render services more economically and more effectively, provide better data protection from third parties, and avoid duplicate records. It also makes our system more user-friendly for you. You only need one user account to access all WERDER services. When you create one profile with a username and password, you can also use it for other types of services.
5. Fanshop
If you would like to purchase products or services from WERDER in the fan shop, you must provide certain details. We require your name, your address, your e-mail address and your date of birth to process the contracts you have entered into with WERDER. Further information is voluntary.
You can only pay for services in the fan shop by credit card, therefore we need your credit card
information. However, this credit card data is not collected by us, but directly and exclusively via the payment service providers commissioned by us and specialized in online transactions. This also applies to payment providers such as PayPal and direct deposit. As soon as you select this, you will be redirected to the respective page, where other data protection regulations may apply. These can be found in the specific respective data protection regulations of each provider.
A purchase in our fanshop is possible with or without registration. The data collected by us to process purchases is not stored in the central database (see section 3), but only recorded and stored in the shop system in order to fulfil our contract with you.
If you ordered goods from WERDER that are to be delivered to you, we will pass on your name and address to the respective delivery service. This is done so that the product arrives safely with you and the contract between you and Werder can be fulfilled.
6. Newsletter
If you subscribe to the WERDER newsletter, the data will be transmitted in the corresponding input page to the person responsible for processing. When registering for the newsletter, the IP address of the user and the date as well as time of registration are stored. This serves to prevent misuse of the services or the e-mail address of the person concerned. The data will not be passed on to third parties. An exception exists if there is a legal obligation to disclose the information. The data will be used exclusively for sending the newsletter. The newsletter will be sent on the basis of your consent (Art. 6 para. 1 sentence 1 lit. a) DS-GMO).
By registering for the newsletter you agree that we send a newsletter to your e-mail address. By registering you agree to the following text of consent:
"Herewith I agree that one of the organizations of Werder Bremen will send me e-mails to the e-mail address given by me for the purpose of sending me information about SV Werder Bremen. The organizations of Werder Bremen are: Sports-Verein "WERDER" of 1899 e.V., SV Werder Bremen GmbH & Co KG aA, Werder Bremen Fan-Service GmbH. I have the right to revoke this consent at any time with effect for the future. I have taken note of the data protection declaration with further information on data processing."
You can revoke this consent at any time in the future by unsubscribing from the newsletter. To do this, go to www.werder.de after signing on with your user profile to "My data" and unsubscribe from the newsletter or click on the unsubscribe link "Unsubscribe from this newsletter" at the bottom of the newsletter. You will then be automatically removed from the mailing list.
The registration for our newsletter occurs with a so-called ‘’double opt-in’’ procedure. This means that after registration you will receive an e-mail asking you to confirm your registration. The time of registration and confirmation as well as the IP address are stored as proof of registration for the newsletter.
The statistical survey, analysis and recording of the notification procedure is based on justified interest (Art. 6 para. 1 sentence 1 lit. f DS-GMO). The legitimate interest here is in the proper and correct execution of dispatching e-mails.
We only store the e-mail address you have provided when subscribing to the newsletter for as long as you have subscribed to the newsletter. As soon as you have unsubscribed from the newsletter, we will delete your e-mail address.
7. Advertising
If you have expressly consented to the use of your personal information (especially including your email address) by the companies of the WERDER BREMEN Group for advertising and marketing purposes, your information may also be transmitted within the WERDER BREMEN Group (see above, Section 3 a) and used to provide information on membership and promotions, as well as for offers by WERDER sponsors. Your information is not disclosed to third parties outside of the WERDER BREMEN Group. You can revoke your consent at any time. In each of our marketing materials, we include a specific notice reminding you that you may choose to opt out.
8. Disclosure of data to third parties
Soccer is and will remain our primary area of activity. As a result, we leave the technical implementation and maintenance of our Internet service to professionals who are more familiar with these tasks. Our external service providers are obligated to comply with our Privacy Policy.
WERDER has commissioned third parties for individual data processing processes to handle the data on behalf of WERDER. Data is therefore passed on to third parties in order to fulfil the service contracts. WERDER carries through the conclusion of agreements for the processing of data on behalf for the fact that the service providers keep to the regulations to the data security. Service providers are used for the following data processing operations:
Your data will not be passed on to third parties for advertising purposes of third parties, unless you have given your consent in accordance with section 7.
9. Information on the Werder Payment Card (WERDER CARD)
The purchases made with the WERDER CARD cannot be traced to any specific person.
10. Social Media Plugins
Parts of our website may include Share buttons for the social networking sites Facebook, Twitter, and Google+ ("networks"). The Share buttons can be identified by the Share icon, which is displayed next to the word "SHARE." When you click on this button, icons for the three networks appear.
In order to protect your personal information as well as possible, the Share buttons integrated into our site are only activated when you click on the icon for one of the networks. A connection to a social networking server is established only after you have clicked on the corresponding network icon. If you simply access or visit our site, none of your information is transferred.
When you click on a button, your browser establishes a direct connection to the server of the network operator. The operator transfers the content of the Share button directly to your browser and embeds it on the website. This informs the network operator that you have accessed a specific page of our website. If you are logged into the relevant network at the same time, the visit to our website can be associated with your account. If you want to prevent this association, you should log out of the network before clicking on the Share button.
By clicking on the respective share button you agree that your user data and, if applicable, your profile data of the respective social network (if you are logged in at that time) will be transmitted and will be forwarded to the USA [RBF6].
For details on the purpose and scope of data collection by the networks, as well as the further processing and use of the data, and for information on your rights and options for configuring your settings to protect your privacy, please refer to the privacy policy of the relevant network operator:
11. Ways to contact us
On the website www.werder.de there is a contact form that can be used for electronic contact. To use the contact form, enter your name, e-mail address, subject and message so that we can process and respond to your inquiry accordingly. You can also optionally enter your membership number so that we can better assign you to an existing account. The provision of a contact form serves our interests, as it gives us more opportunities to get in touch with you. Alternatively, you can contact us via the e-mail address provided. If the data subject contacts the security officer through one of these channels, the personal data transmitted by the data subject shall be stored automatically. This data is stored solely for the purpose of processing or contacting the person concerned. The data will not be passed on to third parties. The data is used on the basis of our legitimate interests (Art. 6 Par. 1 S. 1 lit f. DS-GMO). We are interested in providing our visitors with as many contact channels as possible and answering them quickly.
12. Redirection to Other Websites
In order to extend our range of services, our websites may contain links to external websites. Other providers are responsible for the content of these external sites. Please refer to the privacy policies of our advertising partners for information on how they collect your personal data. You will know you are being redirected to another website when a new browser window opens and a new URL is displayed in the address line of your browser.
13. Online Job Applications
It is possible to apply online at www.werder.de/de/der-svw/jobs-bei-werder/info for currently advertised job openings at Werder Bremen. To use the specified link, click on it to send us a message via the e-mail program. You can attach your application documents to the message. It is also possible to send applications to Werder Bremen Fan-Service GmbH by mail or e-mail (e-mail address: personal@werder-fanwelt.de). You can use the e-mail address to send your application to Werder Bremen Fan-Service GmbH, here you can also attach application documents.
The use of these e-mail addresses for applications serves our legitimate interests to create another way of submitting applications and to address a broader field of potential applicants. Alternatively, you can also send us your written application by mail. The storage of the data collected serves solely to conduct the application process. The maximum storage period is 6 months from the end of the application process. The data will only be passed on to third parties within the framework as described in section 8. Unsolicited applications received electronically (by e-mail) will be deleted immediately upon receipt. However, we reserve the right to save application documents for possible contact for up to 12 months if our legitimate interests indicate that a position may be considered for the specific application within this period. By sending the unsolicited application, you also declare your consent to this storage. You are entitled to revoke your consent to the storage at any time at the e-mail address personal@werder.de. Applications sent by mail to Werder Bremen Fan-Service GmbH will be returned to the applicants at the end of the application process.
14. Your rights as a data subject
If WERDER processes personal data from you, you are subject to basic data protection regulation and you have the following rights vis-à-vis WERDER as the person responsible:
14.1 Right to information
You can ask the person responsible to confirm whether personal data concerning you will be processed by us. If such processing has taken place, you can request the following information from the person responsible:
You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees in accordance with Art. 46 DS-GMO in connection with the transmission of such data.
14.2 Right to correction
You have a right of correction and/or completion vis-à-vis the responsible party if the personal data processed concerning you is incorrect or incomplete. WERDER will make the correction without delay.
14.3 Right to limitation of processing
Under the following conditions, you may request that the processing of your personal data be restricted:
If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another individual or legal person or on grounds of an important public interest of the Union or of a Member State.
If the processing restriction has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.
14.4 Right to cancellation
14.4.1 You may request WERDER to delete personal data concerning you immediately, and WERDER is obliged to delete such data immediately if one of the following reasons applies:
14.4.2 If WERDER has made the personal data concerning you public, then WERDER is obliged to delete it in accordance with Art. 17 Para. 1 DS-GMO, WERDER, taking into account the available technology, and measures appropriate to the implementation costs, including technical measures, to inform data processors who process the personal data that you, as the data subject, have requested the deletion of all links to this personal data or of copies or replications of this personal data.
14.4.3. The right to cancellation does not exist insofar as the processing is necessary
14.5 Right to information
If you have exercised your right to have the data controller correct, delete or limit the processing, the person responsible is obliged to inform all recipients with whom the personal data concerns or has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.
You have the right, vis-à-vis WERDER, to be informed about these recipients.
14.6 Right to data transferability
You have the right to receive the personal data concerning you that you have provided to WERDER in a structured, common and machine-readable format. In addition, you have the right to pass this data on to another person in charge without obstruction by the person in charge to whom the personal data was provided, provided that
In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the responsible person.
14.7 Right of objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you on the basis of Article 6(1)(e) or (f) DS-GMO; this also applies to profiling based on these provisions. WERDER will no longer process personal data concerning you, unless WERDER can prove compelling reasons worthy of protection for the processing which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims. If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling in so far as it is connected with such direct advertising. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the option to exercise your right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.
14.8 Right to revoke the consent of data protection
You have the right to revoke your data protection declaration of consent at any time. The revocation of consent will not affect the legality of the processing carried out on the basis of the consent until revocation.
14.9 Automated individual decisions, including profiling
You have the right not to be subject to a decision based exclusively on automated processing, including profiling, which has legal effect against it or significantly affects it in a similar manner. This does not apply if the decision
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 DS-GMO, unless Art. 9 para. 2 lit. a or g applies and appropriate measures have been met to protect your rights and freedoms and your legitimate interests.
With regard to the cases mentioned in a. and c., WERDER will take appropriate measures to protect the rights and freedoms as well as your legitimate interests, including at a minimum the right to obtain the intervention of a person by the person responsible, to state his own position and to challenge the decision.
14.10 Right of appeal to a regulatory authority
Regardless of any other administrative or judicial assistance, you have the right of appeal to a regulatory authority, in particular in the member state in which you reside, your location of work or the location of possible infringement, should you believe that the processing of personal data concerning you violates the GDPR.
The regulatory authority to which the complaint has been submitted shall inform the person who filed the complaint of the status and results of the complaint, including the possibility of a judicial assistance under Article 78 GDPR.
V 4.0 Bremen in February 2019
