2.1 General

Personal information is information that may disclose or reveal the identity of the customer. We adhere to the principle of data avoidance. The collection of personal data is avoided whenever possible.

2.2 Handling

Personal data is provided for contractual reasons, content design, execution and completion of the contractual relationship. Your data will not be shared with third parties. For the processing of payments, the payment data required for this purpose shall be passed on to the credit institution commissioned with the payment and, if applicable, the commissioned and selected payment service provider. The use of personal data therefore occurs only to the extent necessary, or if it is required by law or court order, or if necessary, in order to lawfully prevent any illegal use or use in violation of the general terms and conditions.

2.3 Right to information

You have the right to be informed by the data controller about the processing of your personal data. We collect, store and process your data for the entire processing of services provided by >Sessionly for the service department, for the technical administrator and for our own marketing purposes. We collect this data directly when you visit our website. The provision of your personal data is in any case voluntary. Your personal data will only be passed on to third parties if this is legally permissible, for the purposes of contract processing and invoicing, for marketing purposes or if you have given your prior consent. Your personal data will only be kept by us for as long as reasonably deemed necessary by us to achieve the above objectives and as permitted by applicable law. In any case, we store your personal data as long as statutory retention obligations exist or limitation periods for potential legal claims have not yet expired. If you have any questions or concerns regarding the processing of your personal data, please contact us.

2.4 Right of objection

You can object to the storage of your personal data at any time if a) the personal data are processed on the legal basis of an overriding legitimate interest b) are processed on the legal basis to perform a task in the public interest or in the exercise of public authority c) are processed for direct marketing purposes d) are processed for scientific or historical research purposes or for statistical purposes. In order to exercise your right, you must in any case prove your identity.

2.5 Right to confirmation and information

Upon written request, we will inform you of data stored relating to you. This is free, as a matter of principle. In principle, a request for information can be answered in any suitable form. You have the right to obtain confirmation as to whether or not your personal data is processed. Furthermore, you have the right to receive a copy of your personal data. In order to exercise your right, you must in any case prove your identity.

2.6 Right to correction

You have the right at any time to have incorrect personal data corrected, deleted or blocked upon request if data processing results in incorrect personal data of yours. Depending on the purpose of data processing, different deadlines apply for correction. The exercise of this right is free. In order to exercise your right, you must in any case prove your identity.

2.7 Right to deletion (Right to be forgotten)

You have the right to have your data deleted immediately if a) it is no longer necessary to store the data for the purpose of data collection b) you revoke your consent to data processing c) the data are processed unlawfully d) the deletion of the data is based on a legal basis. The data does not have to be deleted if a) freedom of opinion and information prevails b) the storage of the data corresponds to a legal obligation c) the data are necessary for the protection of legal claims. In order to exercise your right, you must in any case prove your identity.

2.8 Right to restrict processing

You have the right to restrict processing if a) you question the accuracy of the data b) the processing is unlawful c) the data is required to assert legal claims after the purpose of the data processing has been completed d) you have lodged an objection pursuant to Art 21 GDPR. In order to exercise your right, you must in any case prove your identity.

2.9 Right to Data Transferability

You have the right to data transferability in an appropriate form if you a) exercise your right towards a controller b) the data have been actively made available to the controller c) the data are processed automatically e) the processing is based on the legal consent or the necessity to fulfil a concluded contract. This gives you the right to have data automatically transferred to another provider. In order to exercise your right, you must in any case prove your identity.

2.10 Right of objection

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning your person, which may be processed on the basis of art. 6 para. 1 lit. e or f  GDPR. This also applies to profiling based on these provisions. In the case of an objection, we will no longer process your personal data unless we can prove a compelling legitimate interest in its continued processing that outweighs your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend our legal claims. In order to exercise your right, you must in any case prove your identity.

2.11 Right to revoke consent

You have the right to revoke your consent to the processing of personal data at any time. In order to exercise your right, you must in any case prove your identity.