Data protection and Privacy policy

The protection of your personal data is of great importance to IAF-Radioökologie GmbH (hereinafter „we”). We process your personal data in conformity with this privacy statement, the national data protection provisions applicable to us and the General Data Protection Regulation („GDPR”).
This privacy policy informs all users of our services about the collection, processing and use (collectively hereinafter referred to as „processing”) of their personal data, and about their statutory rights.
In the handling of your personal data, we act in strict compliance with the relevant data protection regulations and the following principles. We have implemented a large number of technical and organizational measures to ensure that your personal data processed by us is fully protected. Which data is processed in detail and how it is used depends largely on the requested or agreed services.

Name and address of the responsible body

IAF-Radioökologie GmbH, Wilhelm-Rönsch-Str. 9, 01454 Radeberg („We”), as the operator of the website iaf-dresden.de („Website”), is the responsible body within the meaning of the DSGVO and other countryspecific data protection regulations.

Data protection officer

You can contact our data protection officer, Mr. Andreas Schmitt, at schmitt@iaf-dresden.de at any time with all data protection concerns.

Personal data

Personal data is any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data also includes information about your use of our website. In this connection, we collect personal data from you as follows: information about your visits to our website such as, for example, the scope of the data transferred, the location from which you retrieve data from our website as well as other connection data and files and further contents which your retrieve. As a rule, this is carried out using log files. You will find further information on log files below.

Affected personal data and purpose

We process personal data that we receive from you as part of our business relationships with you. Typically, these are contact details (e.g. salutation, title, surname, first name, company, private addresses, company addresses and, where applicable, billing addresses, telephone number (landline, fax and / or mobile), email address).

a) We process your personal data as far as this is necessary for the establishment, execution or termination of a contractual relationship or a contract-like relationship. The legal basis is Art. 6 para. 1 sentence 1 b of the GDPR. This also applies to processing operations that are necessary to carry out pre-contractual measures. The personal data will be deleted after the termination of the contractual or contract-like conditions in compliance with the statutory data retention requirements.
Within the framework of the contractual relationships, your personal data may be transferred to third parties who process this data solely for the purpose of the contract fulfilment.

b) We process your personal data as far as you have given us your consent. These data are used only for the purpose and scope stated in the consent, e.g. information about our products and services.
The legal basis for this is Art. 6 para. 1 sentence 1 a GDPR. The consent can be revoked by you at any time. You can send the revocation by mail or email to the contact of the responsible organisation mentioned under point 1. The legality of the data processing carried out until the assertion of your rights remains unaffected. Your personal data will be deleted after completion of the purpose pursued with your consent or after your revocation in compliance with the legal data retention obligations.

c) We process your personal data as far as we are obliged to do so due to legal requirements. The legal basis for this is Art. 6 para. 1 sentence 1 c of the GDPR.

d) If necessary, we process your personal data as far as necessary to safeguard legitimate interests on our part. The legal basis for this is Art. 6 para. 1 sentence 1 f of the GDPR. Processing of your data to satisfy legitimate interest will take place only if and insofar as there is no overriding interest on your part.

Purpose of use and personal data concerned

The scope and nature of the collection, processing and use of your data depends upon whether you simply visit our website to retrieve information which is generally available or whether you wish to avail yourself of additional services:

a) Informative use

For the informative use of our website, it is not, as a basic principle, necessary for you to provide any personal data. On the contrary, in this case when our websites are called up, we only collect the data which your Internet browser automatically transmits to us, such as

• the IP address of your computer
• date and time when the page is called up
• your browser type, the browser version and your browser settings
• the operating system used (Windows, iOS, Linux etc.)
• the volume of data transferred and the status of transfers
• from which website our page was accessed
• other similar data and information which serves to avert danger in the case of attacks on our information technological systems.

In this connection, the IP address of your computer is only stored for the period of your use of the website and is immediately erased following this visit or is anonymized through abbreviation. The remaining data is stored for a limited period of time. We use this data for the operation of our website, in particular in order to discover any faults on the website and to make any adjustments or improvements.

b) Contact form

When using our online contact form, your details from the inquiry form will be stored and used by us exclusively for the purpose of processing the inquiry and for follow-up communication, should this be the case. We do not pass on this data without your consent.

The legal basis for processing this data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. Your data will be deleted once your request has been processed. This is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, and provided that there are no legal contrary obligations to keep the data in storage.

c) Our website does not contain functionalities that would require the input of personal data

Google Maps

This website uses Google Maps, a map service provided by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA in order to show an interactive map. Within the use of Google Maps, information about your use of this website (including your IP address) may be transmitted to a Google server in the USA and stored there. It is possible that Google will transfer the information gained to third parties where this is prescribed by law or in so far as third parties process this data on behalf of Google. It is only when you yourself actively click on the interactive map that your Internet browser establishes a connection to the Google servers. You can find further information about data processing by Google here: https://www.google.com/policies/privacy/

Privacy and Third Party Websites

The Website may contain hyperlinks to and from third party websites. If you follow a hyperlink to any of these websites, please note that we cannot accept responsibility or liability for third-party content or compliance with data protection conditions. Please make sure you are aware of the applicable privacy policy before submitting personally identifiable information to these websites.

Data security

All information which you communicate to us is stored on servers within the European Union. However, using technical and organisational measures, we secure our website and other systems against loss, destruction, access, alteration or dissemination of your data by unauthorized persons. In particular your personal data is transmitted at our company in encrypted form.

Transfer of personal data to third parties

Insofar as we disclose your personal data to other persons and companies (contracted data processors or third parties) as part of our processing, or otherwise grant access to the data, this will only be done on the basis of a legal permission (e.g. if the data transmission to third party is required to fulfil the contract), if you have consented, we are entitled or obliged by law and / or official or judicial orders to carry out a data transfer or based on our legitimate interests.
The commissioning of third parties for the processing of data takes place on the basis of a so-called „processing contract”, on the basis of Art. 28 of the GDPR.

Your rights

You have the right

• to receive information from us free of charge about the personal data stored by us concerning you (right to information)
• to demand from us confirmation as to whether we process personal data concerning you (right to confirmation)
• to demand from us that the personal data concerning you is erased by us without delay where the processing of the same is no longer necessary and the further conditions under the GDPR for erasure are also fulfilled (right to erasure)
• to demand from us the immediate rectification and augmentation of any incorrect personal data concerning you (right to rectification)
• to demand from us the restriction of the processing of your personal data (right to restriction of the processing)
• to receive from us the personal data concerning you in a structured, commonly used and machine-readable format (right to data portability)
• to object to the processing of your personal data (right to object)

Furthermore, you have the right at any time to revoke your consent to the processing of your personal data with effect for the future. For further information and in order to assert your rights, please contact our data protection officer.

Deletion and blocking of personal data after fulfilment of purpose

We only process and store personal data for as long as this is necessary to fulfil the purpose, but at the latest at the expiry of the legal storage and retention periods. Upon fulfilment of the purpose and expiry of the legal storage and retention periods, the personal data will be deleted or blocked in accordance with the data protection regulations. In addition, your data will be deleted at your request, provided there are no longer any legal obligations to process.

Obligation to provide the data

The provision of your personal information is partly the result of legal regulations (such as tax regulations) or contractual terms (such as details of the contracting party). For offer preparation, conclusion of contract, etc., it may also be necessary that you provide us with personal data, which must be further processed by us. Failure to provide your personal information would mean that the contract could not be concluded with you. If you do not wish to provide your personal information, you may contact the responsible department by mail or e-mail as described in point 1. We clarify on a case-by-case basis whether and why, for legal or contractual reasons, there is a need to provide your personal information and the consequences of not providing personal information.

Right to appeal

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisor, in particular in the Member State of your place of residence, employment or the place of alleged infringement, if you believe that the processing of your personal data concerns you the DSGVO violates.
The responsible supervisory authority for data protection according to Art. 56 GDPR for complaints is the Data Protection Authority of the Free State of Saxony:

Saxon Data Protection Officer
Sächsischer Datenschutzbeauftragter
Bernhard-von-Lindenau-Platz 1
01067 Dresden
Phone: 0351/493-5401
Telefax: 0351/493-5490
Email: saechsdsb@slt.sachsen.de
www.saechsdsb.de , www.datenschutz.sachsen.de