GENERAL
Your personal data in compliance with Art. 4 No. 1 GDPR (e.g. salutation, name, address, email address, payment information) will only be processed by us in accordance with the provisions of the Data Protection Act and taking into account the European General Data Protection Regulation (GDPR). The following regulations inform you about the type, scope and purpose of the collection, processing and use of personal data.
The processing of personal data in compliance with Art. 4 No. 2 GDPR is lawful in accordance with Art. 6 GDPR if one of the following conditions is met:
The data subject has given their consent to the processing of their personal data for one or more specific purposes;
The processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures that are carried out at the request of the data subject;
the processing is necessary to fulfill a legal obligation to which the person responsible is subject;
Processing is necessary to protect the vital interests of the data subject or another natural person;
The processing is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been assigned to the person responsible;
Processing is necessary to safeguard the legitimate interests of the person responsible or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, outweigh them, especially if the data subject is a child.
The processing of special personal data (e.g. health data) in compliance with Art. 9 Paragraph 1 GDPR is particularly lawful in accordance with Art. 9 Paragraph 2 GDPR if one of the following conditions is met:
The person has given their consent;
The processing is necessary for the establishment, exercise or defense of legal claims or for acts of the courts in the context of their judicial activity.
There is no automatic decision-making or profiling with regard to personal data in compliance with Art. 22 GDPR.
The operator ensures the security of the data in accordance with Art. 32 GDPR, taking into account the principle of proportionality, through suitable technical measures. If, contrary to expectations, there is a breach of data protection, the responsible supervisory authority will be notified in accordance with Art. 33 GDPR, as well as the person concerned in accordance with Art. 34 GDPR.
SCOPE
This data protection declaration only applies to our website. If you are forwarded to other pages via links on our pages, please inform yourself there about the respective handling of your data.
DURATION OF DATA STORAGE
The duration of the retention of the data transmitted by you is based on the legal retention requirements. As far as commercial and tax retention periods are to be observed, the duration of the storage of certain data can be up to 10 years.
DISCLOSURE OF DATA TO THIRD PARTIES
A transfer of data transmitted in the context of the contractual relationship to third parties (Art. 4 No. 10 GDPR) only takes place if you have expressly given your consent (Art. 4 No. 11 GDPR) or if the transfer is necessary to fulfill the contract. The consent can be revoked informally at any time. Data collected when you visit the website are only collected by third parties who are expressly mentioned below.
Responsible in terms of the GDPR
The person responsible within the meaning of the General Data Protection Regulation (GDPR), as well as other data protection laws applicable in the European Union and other provisions of a data protection nature is:
Mega-ratings:
info@mega-bewertungen.de
Kyriakouli Mavromixali 1
4006 Mesa Gitonia
Cyprus
