Legal Information – cert4trust.de

We collect and process personal data that you have provided to us, for example via our contact form, or that we obtain through your use of our online services.

This may include the following types of data:

Names
Contact details (email, telephone numbers)
Content data (text entries)
Usage data (webpages visited, interest in content, access times)
Meta/communication data (device information, IP addresses)

Furthermore, we may process other data comparable to the categories mentioned.
Data is also stored in server log files, which are collected and automatically stored by the provider and are, for the most part, transmitted to us by your browser. These are:

Referrer URL
Hostname of the accessing computer
Date and time of the server request
Name of the requested file
Page from which the relevant file was requested
Web browser and operating system used
(Full) IP address of the requesting computer
Amount of data transferred

We may process further data comparable to the categories mentioned.

The legal basis for the temporary storage of this data and the log files is Article 6(1)(f) of the GDPR. We collect the data listed in order to ensure that the website connects smoothly and to enable users to use our website conveniently. The log file is used to assess system security and stability, as well as for administrative purposes.

We currently also offer the following social media channels: LinkedIn

The legal basis for collecting data when using social media is Article 6(1)(f) of the GDPR. Through the use of social media, we can obtain statistical usage data from the respective social media company. This may include, amongst other things, information on page views and activity, views of individual articles, videos and services, etc.

Consent, Article 6(1)(a) and Article 7 of the GDPR;
to provide our services and carry out contractual measures, as well as to respond to enquiries, Article 6(1)(b) of the GDPR;
to comply with legal obligations, Article 6(1)(c) of the GDPR;
where the vital interests of the data subject or of another natural person require the processing of personal data, Article 6(1)(d) of the GDPR;
for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, Article 6(1)(e) of the GDPR;
to safeguard legitimate interests, Article 6(1)(f) of the GDPR.
The processing of data for purposes other than those for which it was collected is governed by the provisions of Article 6(4) of the GDPR.
The processing of special categories of data (in accordance with Article 9(1) of the GDPR) is governed by the provisions of Article 9(2) of the GDPR.]

We process data in connection with administrative tasks, the organisation of our business, financial accounting and compliance with legal obligations, such as archiving. The data processed in this context is the same as that which we process in the course of providing our contractual services. The legal basis for the processing is Article 6(1)(c) of the GDPR and Article 6(1)(f) of the GDPR. Those affected by the processing include customers, prospective customers, business partners and website visitors. The purpose of the processing is administration, financial accounting, office organisation, data archiving, the performance of our duties and the provision of our services. To ensure this, data is passed on to the tax authorities, advisers (e.g. tax advisers or auditors) and other fee-charging bodies and payment service providers. Furthermore, based on our business interests, details of suppliers, event organisers and other business partners are stored for the purpose of possible future contact.

In order to be able to provide our contractual and pre-contractual services to our contractual partners, prospective clients, other clients, customers, or clients, we process data in accordance with Article 6(1)(b) of the GDPR. We process our contractual partners’ master data (e.g. names and addresses), contact details (e.g. email addresses and telephone numbers), contractual data (e.g. services used, contract terms, contractual correspondence, names of contact persons) and payment details (e.g. bank details, payment history). As a general rule, we do not process special categories of personal data, except where they form part of commissioned or contractual processing. We process only the data necessary for the establishment and fulfilment of contractual obligations. Data is disclosed to external individuals and organisations only where this is required under the terms of a contract. When processing data entrusted to us as part of a commission, we act in accordance with the client’s instructions and the statutory requirements. If our online services are used, we may store the IP address and the time of the respective user action. This storage is based on our legitimate interest, as well as the user’s interest in protection against misuse and other unauthorised use.

To the extent permitted by law, we process and store your personal data, in particular for as long as this is necessary to fulfil the relevant purposes and provided that there are no statutory retention obligations preventing its erasure. If the data is not deleted because it is required for other, legally permissible purposes, its processing will be restricted. This means that the data will be blocked and will not be processed for any other purposes. This applies in particular to data that must be retained for commercial or tax law reasons. In accordance with statutory requirements, books, records, management reports, accounting documents, commercial ledgers and documents relevant for tax purposes are retained for 10 years in accordance with Sections 147(1) of the German Fiscal Code (AO), 257(1) nos. 1 and 4, and (4) of the German Commercial Code (HGB). A six-year retention period applies to commercial correspondence in accordance with Section 257(1)(2) and (3), and (4) of the German Commercial Code (HGB).

We would like to inform you of the data subject rights you have vis-à-vis the data controller with regard to the processing of your personal data in accordance with the General Data Protection Regulation:

a. Right of access:
In accordance with Article 15 of the GDPR, you have the right to request information about your personal data processed by us.

b. Right to rectification:
In accordance with Article 16 of the GDPR, you have the right to request the rectification of inaccurate personal data or the completion of incomplete personal data held by us without undue delay.

c. Right to erasure:
In accordance with Article 17 of the GDPR, you have the right to request the erasure of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

d. Right to restriction of processing:
In accordance with Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data where you contest the accuracy of the data, where the processing is unlawful but you oppose its erasure, and where we no longer require the data but you need it to assert, exercise or defend legal claims, or where you have objected to the processing pursuant to Article 21 of the GDPR.

e. Right to data portability under Article 20 of the GDPR:
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller, insofar as this is technically feasible.

f. Right to lodge a complaint:
You may lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR. As a rule, you may contact the supervisory authority of the federal state in which we are based or, where applicable, that of your usual place of residence or place of work.

g. Right to withdraw consent:
You may withdraw any consent you have already given in accordance with Article 7(3) of the GDPR. You also have the right to withdraw your consent to the processing of data at any time, with effect for the future. In the event of withdrawal, we will delete the relevant data without delay, unless further processing can be based on a legal basis that does not require consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent prior to its withdrawal.

h. Right to object
You may, on grounds relating to your particular situation, object at any time to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) of the GDPR (data processing in the public interest) and Article 6(1)(f) of the General Data Protection Regulation (data processing based on a balancing of interests). This also includes profiling based on this provision within the meaning of Article 4(4) of the GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

16. Obligation to provide data

When using the internet or social media, you are only required to provide the personal data that is necessary for such use or that we are legally obliged to collect. Without this data, meaningful use may be restricted or impossible.

Legal notice

Cert4Trust GmbH

Privacy policy

CONTACT FORM

Legal notice

Cert4Trust GmbH

Privacy policy

1. Data controller

2. Company Data Protection Officer

3. Sources and data relating to the processing of personal data

4. Hosting

CONTACT FORM