PRIVACY POLICY

Legal basis for processing

Bernreuter Research uses Art. 6 Par. 1 Letter a) of the European Union’s General Data Protection Regulation (GDPR) as the legal basis to process data for which we received permission for a specific processing purpose.

If personal data has to be processed in order to comply with a contract for which the contractual partner is the affected person, as is the case, for example, when processing the data is required to deliver goods or provide a service for compensation, this processing is based on Art. 6 Par. 1 Letter b) of the GDPR. This also applies for processing that is needed to perform pre-contractual activities, such as enquiries concerning our products or services.

If our company is subject to a legal obligation that makes processing personal data necessary, for example, to fulfill fiscal obligations, processing is based on Art. 6 Par. 1 Letter c) of the GDPR.

In rare cases, processing personal data may be required in order to protect vital interests of the affected person or another private individual, which is covered in Art. 6 Par. 1 Letter d) of the GDPR.

Finally, processing can also be based on Art. 6 Par. 1 Letter f) of the GDPR. This legal basis is used for processing that is not covered by any of the other legal bases if processing is required to uphold a justified interest of our company or of a third party to the extent that the affected party’s interests, basic rights and basic freedoms are not more important.

Passing on data

Your personal data will not be passed on to third parties for any purposes other than those listed below. We only pass on your personal data to third parties if:

• you have provided your express permission for this according to Art. 6 Par. 1 Letter a) of the GDPR;
• passing this data on according to Art. 6 Par. 1 Letter f) of the GDPR is required to assert, exercise or defend legal entitlements and there is no reason to assume that you have a more important interest that requires protection for your data not to be passed on;
• there is a legal obligation for passing data on according to Art. 6 Par. 1 Letter c) of the GDPR; and
• this is legally permissible and required for processing contractual relationships with you according to Art. 6 Par. 1 Letter b) of the GDPR.

Rights of affected parties

You have the right

• to demand information about your personal data which Bernreuter Research processes according to Art. 15 of the GDPR. In particular, you can demand information on the processing purpose, the category of the personal data, the categories of recipients to whom your data is or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to complain, the origin of your data to the extent that this was not collected by Bernreuter Research, and the existence of automated decision-making including profiling and, as the case may be, meaningful information on the details;
• to demand the immediate correction of incorrect personal data stored by Bernreuter Research or the completion of this data according to Art. 16 of the GDPR;
• to demand that your personal data Bernreuter Research has stored be deleted according to Art. 17 of the GDPR to the extent that processing is not required to exercise the right to freely express an opinion and the freedom of information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise or defend against legal claims;
• to demand that processing of your personal data is restricted according to Art. 18 of the GDPR to the extent that you dispute that your data is correct, processing is illegal, you reject the deletion of this data and we no longer require the data; however, you need this data to assert, exercise or defend against legal claims or you have filed an objection to processing according to Art. 21 of the GDPR;
• to receive your personal data, which you have provided Bernreuter Research with, in a structured, accessible and machine-readable format or demand that this is passed on to another responsible party according to Art. 20 of the GDPR;
• to revoke any permission you may have granted Bernreuter Research at any time according to Art. 7 Par. 3 of the GDPR. This entails that we may not continue to process the data that is based on this permission in the future; and
• to file a complaint with a supervisory authority irrespective of any other appeal under administrative law or a judicial remedy according to Art. 77 of the GDPR. As a rule, in this regard you can consult the supervisory body at your usual address or place of work, or the place at which the purported violation took place if you are of the opinion that processing your personal data violates the GDPR.

Right to information, right to correction, blocking, deletion, objection

We will provide you with information on the data we hold concerning your person upon written request. You are entitled to have this data corrected, blocked, deleted or to file an objection. The request must be sent to the address stated in our website’s Corporate Information.

Right of revocation

f your personal data is processed based on justified interests, you have the right to file an objection against your personal data being processed according to Art. 21 of the GDPR to the extent that there are reasons for this resulting from your specific situation or if the objection is based on direct advertising. In the latter case you have a general right of revocation which Bernreuter Research will implement without you stating a specific situation. If you wish to use your right of revocation or objection, send an e-mail to the address stated in our website’s Corporate Information.

General data collection

If you access our website or call up a file, data concerning this action is stored in a log file on our web server. The following individual items of data can be stored:

• IP address (if possible this is saved in a disguised version);
• domain name of the website from which you came;
• name of the files called up;
• date and time these were called up;
• name of your Internet service provider; and
• as the case may be, the operating system and browser version on your end device.

We only save IP addresses for reasons of data security in order to ensure the stability and security of our system (legal basis: Art. 6 Par. 1 Letter f) of the GDPR). We reserve the right to analyze statistics for disguised data records.

Cookies

Our website uses cookies. A cookie is a text file which is created when a website is visited and stored on the hard drive of the website user. If the website user calls up our website’s server again, the user’s browser sends the cookie previously received from the website back to the server. This allows the server to evaluate information thus received.

Cookies control, for example, certain advertising being shown or can make it easier to navigate a website. In addition, cookies are required to make it possible to operate our website. The legal basis for this is Art. 6 Par. 1 Letter f) of the GDPR, upholding the website operator’s justified interests; we only use cookies in agreement with Art. 5 Par. 1 Letter a of the GDPR, that means in line with the principles of ‘lawfulness, fairness and transparency.’

If you would like to prevent cookies from being used, you can do this by changing the local settings in your Internet browser (for example Internet Explorer, Mozilla Firefox, Opera or Safari).

Contact form

If you send us enquiries using our contact form, your information on the contact form including the contact data you state therein is saved so that we can process your enquiry and use it for any subsequent questions. Your data is exclusively used to reply to and process your enquiry. In this case, data is processed according to Article 6 Par. 1 Letter a of the GDPR based on permission voluntarily issued. You can object to this at any time (right of revocation).

Comments function

There are voluntary comment functions on some pages or for some contributions, which allow you to communicate your opinion on the respective page or contribution. The comment is released after receiving a positive review and becomes publicly visible on the page to which you sent your comment. There is no entitlement to have a comment released.

You must state your name, which can also be a pseudonym. In addition, you must also state your e-mail address. This is used to inform you of the status of your comment, in particular if a question is included in the comment for which a response is expected. The e-mail address is not publicly displayed and not passed on to third parties. The e-mail address you provide with the comment is only saved for the purpose of sending you a message in the event that there is a response to your comment. Your IP address is only saved in a disguised form.

The comment is permanently saved until it is deleted again by you (or an administrator). Other data which you pass on with your comment will be published with your comment if this data is provided.

Newsletter

We only send newsletters with advertising information if the recipient has provided his/her permission or if the newsletter is based on a legal authorization. By subscribing to our newsletter, you accept that we will send you information on topics we deal with on our website and that we will use the data input by you in this regard.

Subscribers register for our newsletter using a double opt-in: After registering they receive an e-mail in which they confirm their registration. This confirmation is required to verify that this is your e-mail address.

Records are kept of registrations for our newsletter in order to be able to verify that registrations comply with legal requirements. This includes saving the date of registration and confirmation as well as your IP address. In addition, other information that you provided when registering for the newsletter is also saved. We only use your information provided in addition to your e-mail address to personalize the newsletter. This includes, for example, your name.

You can unsubscribe from our newsletter at any time (right of revocation). You can find a link to unsubscribe from our newsletter in each newsletter mail.

Links to other websites

References to third-party websites are offered on our website as so-called links. Data for the target link is only passed on when you click on such a link. This is a technical prerequisite. The data transferred include, in particular: your IP address, the time at which you clicked on the link, the page on which you clicked on the link, and information on your Internet browser. If you do not want this data to be passed on to the target link, do not click on the link.

If you follow a link to one of these websites, please note that these websites have their own data protection policies and that we do not accept any responsibility or liability for these policies. Please check these data protection policies before you pass on personal data to these websites.

Security notice

We secure our website and other IT systems using suitable technical and organizational activities to prevent loss, destruction, unauthorized access, unauthorized changes and the unauthorized processing of your data. However, it is practically impossible to fully protect your data from all risks in all cases despite the greatest of care.

Because we cannot guarantee full data security for e-mail communication, we recommend that confidential information is sent by post.

Changes to this data protection declaration

We reserve the right to change this data protection declaration if the legal situation or this online offering or the type of data collection changes. However, this only applies to declarations for data processing. To the extent that the user’s permission is required or if parts of the data protection declaration include regulations for a contractual relationship with users, the data protection declaration will only be changed with a user’s permission.

As a result, if required, please obtain information on this data protection declaration, in particular if you pass on personal data.