DATA PROTECTION

General information

This privacy policy contains detailed information about what happens to your personal data when you visit our website, www.bos-berlin.de. Personal data is all data with which you can be personally identified. When processing your data, we strictly adhere to the legal provisions, in particular the General Data Protection Regulation ("GDPR"), and attach great importance to ensuring that your visit to our website is absolutely secure.

Responsible body

The person responsible for data protection purposes for the collection and processing of personal data on this website is:

First name, last name: Udo Herkenrath

Street, house number: Mühlenstraße 22

Postal code, city: 13187 Berlin

Country: Germany

E-Mail: info@b-o-s-berlin.de

Tel.: 017653163132

Cookies

To make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your device. Cookies cannot run programs or transmit viruses to your computer system.

Cookies that are required to carry out the electronic communication process or to provide certain functions you require are stored based on Art. 6 Paragraph 1 Letter f of GDPR. We have a legitimate interest in storing cookies to ensure that our services are technically error-free and optimized. If other cookies (e.g. cookies to analyze your surfing behavior) are stored, these are treated separately in this privacy policy.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Contact form

If you contact us by email or via a contact form, the data you provide, including your contact details, will be stored to process your request or to be available for follow-up questions. This data will not be passed on without your consent.

The data entered in the contact form is processed exclusively based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. An informal notification by email is sufficient for the revocation. The legality of the data processing operations carried out up to the revocation remains unaffected by the revocation.

Data transmitted via the contact form will remain with us until you request deletion, revoke your consent to storage or there is no longer any need to store the data. Mandatory legal provisions - in particular retention periods - remain unaffected.

Data use and sharing

We will not sell or otherwise market the personal data that you provide to us, e.g. by email (e.g. your name and address or your email address) to third parties. Your personal data will only be processed for correspondence with you and only for the purpose for which you provided the data to us. To process payments, we pass on your payment details to the credit institution responsible for the payment.

The data that is automatically collected when you visit our website is only used for the purposes stated above. The data will not be used for any other purpose.

We assure you that we will not pass on your personal data to third parties unless we are legally obliged to do so or you have given us your prior consent.

SSL or TLS encryption

Our website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the website operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

§ 1 Storage period

Personal data that has been communicated to us via our website will only be stored until the purpose for which it was entrusted to us has been fulfilled. Insofar as commercial and tax retention periods must be observed, the storage period for certain data can be up to 10 years.

§ 2 Rights of the data subject

With regard to the personal data concerning you, as a data subject, you have the following rights vis-à-vis the controller in accordance with the statutory provisions:

2.1 Right of withdrawal

Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to revoke your consent to the processing of data at any time with future effect in accordance with Art. 7 Para. 3 GDPR. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. Storage of data for billing and accounting purposes remains unaffected by a revocation.

2.2 Right to information

You have the right, in accordance with Art. 15 GDPR, to request confirmation from us as to whether we process personal data concerning you. If such processing has taken place, you have the right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed of the guarantees in accordance with Art. 46 GDPR when your data is forwarded to third countries.

2.3 Right to rectification

You have the right to request the immediate rectification of inaccurate personal data concerning you and/or the completion of your incomplete data at any time in accordance with Art. 16 GDPR.

2.4 Right to erasure

You have the right to request the erasure of your personal data in accordance with Art. 17 GDPR if one of the following reasons applies:

A) Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

B) You withdraw your consent on which the processing is based according to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR, and there is no other legal basis for the processing.

C) You object to the processing pursuant to Art. 21 Para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 Para. 2 GDPR.

D) The personal data were processed unlawfully.

E) The erasure of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member State to which we are subject.

F) The personal data were collected in relation to the offer of information society services pursuant to Art. 8 (1) GDPR.

However, this right does not apply if the processing is necessary:

A) to exercise the right to freedom of expression and information;

B) to fulfill a legal obligation which requires processing by Union or Member State law to which we are subject or to perform a task carried out in the public interest or in the exercise of official authority vested in us;

C) for reasons of public interest in the area of public health pursuant to Art. 9 (2)(h) and (i) and Art. 9 (3) GDPR;

D) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the rights of the data subject are likely to render the achievement of the objectives of this processing impossible or seriously compromise it, or

E) to assert, exercise or defend legal claims.

If we have made your personal data public and are obliged to delete it in accordance with the above, we will take appropriate measures, including technical ones, considering the available technology and the implementation costs, to inform data controllers which process the personal data that you, as the data subject, have requested that they delete all links to your personal data or copies or replications of these personal data.

2.5 Right to restriction of processing

You have the right to request the restriction of processing (blocking) of your personal data in accordance with Art. 18 GDPR. You can contact us at any time using the address provided in the imprint. The right to restrict processing exists in the following cases:

A) If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the check, you have the right to request that the processing of your personal data be restricted.

B) If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.

C) If we no longer need your personal data, but you require it to exercise, defend or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of deleted.

D) If you have lodged an objection in accordance with Art. 21 Para. 1 GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, these data may - with the exception of storage - only be processed with your consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the EU or a Member State.

2.6 Right to information

If you have asserted your right to rectification, erasure or restriction of processing against us, we are obliged to inform all recipients to whom your personal data was disclosed of said rectification, erasure or restriction of processing, unless doing so should prove impossible or involve disproportionate expenditure. Pursuant to Art. 19 GDPR, you have the right to be informed of these recipients upon request.

2.7 Right not to be subjected to a decision based solely on automated processing – including profiling

According to Art. 22 GDPR, you have the right not to be subjected to a decision based solely on automated processing – including profiling – that produces legal effects concerning you or significantly affects you in a similar way.

This does not apply if the decision

A) is necessary for the conclusion or performance of a contract between you and us,

B) is permitted by Union or Member State law to which the controller is subject, and this law contains appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or

C) with your express consent.

However, the decisions in the cases referred to in (a) to (c) must not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2)(a) or (g) applies and appropriate measures to protect your rights and freedoms, as well as your legitimate interests, have been taken.

In the cases referred to in (a) and (c), we shall take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

2.8 Right to data portability

If the processing is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract in accordance with Art. 6 Para. 1 lit. b GDPR and is carried out with the help of automated procedures, you have the right, in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format and to transmit it to another controller or to request that it be transmitted to another controller, provided that this is technically feasible.

2.9 Right of objection

Insofar as we base the processing of your personal data on the balance of interests pursuant to Art. 6 Para. 1 lit. f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on this provision. The respective legal basis on which processing is based can be found in this data protection declaration. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims (objection pursuant to Art. 21 Para. 1 GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for the purposes of direct marketing (objection in accordance with Art. 21 Para. 2 GDPR).

In connection with the use of information society services, you have the option of exercising your right of objection by means of automated procedures that use technical specifications, notwithstanding Directive 2002/58/EC.

2.10 Right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR

In the event of violations of the GDPR, those affected have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged violation. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

The supervisory authority responsible for us is:

Berlin Commissioner for Data Protection and Freedom of Information

Friedrichstr. 219

10969 Berlin

Visitor entrance: Puttkamer Straße 16 - 18 (5th floor)

Telephone: 030/138 89-0

Email: mailbox@datenschutz-berlin.de

Internet: https://www.datenschutz-berlin.de

Validity and Modification of this Privacy Policy

This privacy policy is valid from December 21, 2024. We reserve the right to change this privacy policy at any time in compliance with the applicable data protection regulations. This may be necessary, for example, to comply with new legal provisions or to take into account changes to our website or new services on our website. The version available at the time of your visit applies.

If this privacy policy changes, we intend to post any changes to our privacy policy on this page so that you are fully informed of what personal information we collect, how we use it, and under what circumstances it may be disclosed.