Data privacy Information

This data privacy information informs you about the handling of your personal data. To make the processing of your data transparent, we would like to provide you with the following information to give you an overview of these processing operations. In order to guarantee fair processing, this data protection declaration contains general information about our handling of your data as well as information about your rights according to the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). We will inform you in detail about I. General Data Processing II. Data processing on our Website III. Further data processing The party responsible for data processing is MILL UG (hereinafter 'we' or 'us'). I. General Data Processing 1. Contact If you have any questions or feedback concerning this information or wish to contact us to assert your rights, please send your enquiry to PLOT Jürgensallee 32, 22609 Hamburg Tel.: +49 40 20970156 Fax: +49 40 20970461 E-Mail: 2. Legal Basis The data protection term "personal data" refers to all information relating to an identified or identifiable natural person. We process personal data in compliance with the data protection regulations, primarily the GDPR and the BDSG. Our data processing solely occurs on a legal permission. We will process personal data solely with your consent (Art. 6 Sec. 1 letter a) GDPR), to perform a contract to which you are a party, or to take steps at your request prior to entering into a contract (Art. 6 Sec. 1 letter b) GDPR), for compliance with a legal obligation (Art. 6 Sec. 1 letter c) GDPR) or where processing is necessary for the purposes of our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (Art. 6 Sec. 1 letter f) GDPR). 3. Period of storage In the absence of alternative provision ensuing from the following statements, we will only store your data for as long as required to achieve the intended processing purpose or to fulfil our contractual or statutory obligations. Such statutory retention requirements may result from regulations under commercial or tax law. 4. Recipients of data We may use Service Providers for individual processes. This includes, for example, hosting, maintenance and support of IT-systems, marketing actions or destruction of files and data carriers. These Service Providers process the data only according to strict instructions and are contractually bound to guarantee suitable technical and organisational measures for data protection. In addition, we may transfer personal data of our customers to parties such as postal and delivery services, payment and information services, banks, tax consultants/auditors or the tax authorities. 5. Processing in the exercise of your rights pursuant to Art. 15 to 22 GDPR If you exercise your rights pursuant to Art. 12 to 22 GDPR for the purpose of providing information and preparing such information, we will process stored data only for this purpose and for purposes of data protection control and otherwise restrict processing in accordance with Art. 18 GDPR. These processing operations are based on the legal basis of Art. 6 Sec. 1 letter c) GDPR in combination with Art. 15 to 22 GDPR and § 34 Sec. 2 BDSG. 6. Your rights As the person concerned, you are entitled to exercise your rights against us. In particular, you have the following rights: • Pursuant to Art. 15 GDPR and § 34 BDSG, you have the right to request information confirming whether or not and, if so, to what extent we are processing personal data concerning you. • Pursuant to Art. 16 GDPR, you have the right get your data rectified. • Pursuant to Art. 17 GDPR and § 35 BDSG, you have the right to delete personal data. • Pursuant to Art. 18 GDPR, you have the right to require us to restrict the processing of your personal data. • Pursuant to Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit such data to another controller. • Where you have granted us separate consent to process your data, you can withdraw such consent at any time pursuant to Art. 7 Sec. 3 GDPR. Any such withdrawal of consent shall not affect the lawfulness of processing based on that consent prior to its withdrawal. • If you consider that the processing of personal data relating to you infringes GDPR provisions, you have the right to lodge a complaint with a supervisory authority pursuant to Art.77 GDPR. 7. Right to object Pursuant to Art. 21 Sec. 1 GDPR, you have the right to object to processing operations based on Art. 6 Sec. 1 letter e) or letter f) GDPR on grounds arising from your particular situation. If we process personal data about you for the purpose of direct marketing, you may object to such processing pursuant to Art. 21 Sec. 2 and Sec. 3 GDPR. II. Data processing on our website When using our website, we collect and use information that you provide by yourself. We also automatically collect certain information about your use of the Site during your visit on the Site. In data protection law, the IP address is also considered as a personal date. An IP address is assigned to each device connected to the Internet by the Internet provider so that it can send and receive data. 1. Processing Server-Log-Files When using our website for purely informative purposes, general information that your browser transmits to our server is initially stored automatically (not via registration). This includes by default: browser type/-version, operating system used, page called, the previously visited page (referrer URL), IP address, date and time of server request and HTTP status code. The processing is carried out to ensure our legitimate interests and is based on the legal basis of Art. 6 Sec. 1 letter f) GDPR. This processing provides the technical administration and security of the website. The stored data will be deleted after seven days unless there is a justified suspicion of illegal use based on concrete indications and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject based on the stored information. Art. 15 to 22 GDPR therefore do not apply pursuant to Art. 11 Sec. 2 GDPR, unless you provide additional information to enable your identification in order to exercise the rights set out in these articles. 2. Contact and requests If you send us a message via the specified contact e-mail, we will process the transmitted data for the purpose of answering your inquiry. We process the data for the purpose of handling your request. If your request relates to the establishment or execution of a contract with us, the processing of your data is based on art. 6 sec. 1 letter b) GDPR. In all other cases we process data out of our legitimate interest in contacting the person enquiring. The latter data processing finds its legal basis in art. 6 sec. 1 letter f) GDPR. III. Further data processing 1. Contractual relationship In order to establish or execute the contractual relationship with our customers, it is regularly necessary to process the contact data of the relevant contact persons provided to us. The processing serves our legitimate interest in a fluent course of business. The legal basis for this processing is Art. 6 Sec. 1 letter f) GDPR. In addition, we process customer and potential customer data for evaluation and marketing purposes. This processing takes place on the legal basis of Art. 6 Sec. 1 letter f) GDPR and serves our interest in further developing our offer and informing you specifically about offers from PLOT. Further data processing can take place if you have consented (Art. 6 Sec. 1 letter a) GDPR) or if this serves to fulfil a legal obligation (Art. 6 Sec. 1 letter c) GDPR). EU Commission platform for online dispute resolution: Note on § 36 VSBG: We do not participate in and are not obliged to participate in any dispute resolution proceedings before a consumer arbitration body. September 2019