Your contact person as controller within the meaning of the European General Data Protection Regulation ("EU-DSGVO") and other national data protection laws of the member states as well as other data protection regulations is:

MAHÖ Beteiligungs- und Vermögensverwaltungs GbR
Leopoldstrasse 112
80802 Munich

(hereinafter referred to as "we", "us" or "our")

The protection of your personal data is of particular importance to the MAHÖ Beteiligungs- und Vermögensverwaltungs GbR Munich. Please contact our data protection officer directly in all matters relating to data protection and data security:

Stefan Frank
Datenschutzbeauftragter | data security officer
Wachtelweg 19 | 83024 Rosenheim | Germany
datenschutz@mahoe.eu

1. Scope of processing personal data
   In principle, we process your personal data only insofar as this is necessary for the performance of our services. The processing of your personal data takes place regularly only on the basis of your consent. An exception applies to cases in which prior consent cannot be obtained for real reasons or the processing of your personal data by a legal permission is permitted.

2. Legal basis for the processing of personal data
   Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a EU GDPR as legal basis. In the processing of personal data required to fulfill a contract between you and us, Art. 6 para. 1 lit. b EU-GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual actions. Insofar as processing of personal data is required to fulfill a legal obligation to which we are subject, Art. 6 para. 1 lit. c EU GDPR as legal basis. In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 para. 1 lit. d EU-GDPR as legal basis. If the processing is necessary for the protection of a legitimate interest of us or a third party and if your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, then Art. 6 para. 1 lit. f EU-GDPR as legal basis for processing.

3. Data erasure and storage duration
   Your personal data will be deleted or blocked as soon as the purpose of the storage is removed. It may also be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

1. Legal basis for data processing
   Legal basis for the processing of your personal data in the context of the provision of the website and the creation of log files is Art. 6 para. 1 lit. f EU-GDPR.

2. Purpose of data processing
   The temporary storage of your personal data by us is necessary to enable delivery of the website to your computer. For this, your personal data must be stored for the duration of the session. The storage of your personal data in log files is done to ensure the functionality of the website. In addition, your personal information serves to optimize the website and to ensure the security of our information technology systems. An evaluation of your personal data for marketing purposes does not take place in this context. For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f EU-GDPR.

3. Duration of storage
   Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey. In the case of the collection of your personal data for the provision of the website, this is the case as soon as the respective session has ended. In the case of storing your personal data in log files, these will be deleted after seven days at the latest. An additional storage is possible. In this case, your personal data is deleted or alienated, so that an assignment of the calling client is no longer possible.

4. Opposition and removal possibility
   The collection of your personal data for the provision of the website and the storage of your personal data in log files is essential for the operation of the website. Consequently, there is no contradiction for you.

1. Legal basis for data processing
   Legal basis for the processing of your personal data in the context of the use of technically necessary cookies is Art. 6 para. 1 lit. f EU-GDPR.

2. Purpose of data processing
   The use of technically necessary cookies serves to simplify the use of our website. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that your Internet browser is recognized even after a page break. The user data collected through technically necessary cookies will not be used to create user profiles. Our legitimate interest in the processing of your personal data pursuant to Art. 6 para. 1 lit. f EU-GDPR.

3. Duration of storage
   Your personal information will be deleted as soon as it is no longer necessary to achieve the purpose of the survey; this is especially the case when cookies are deactivated.

4. Opposition and removal possibility
   Cookies are stored on your computer and transmitted by it to our website. Therefore, you also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full. The transmission of Flash cookies cannot be prevented by the settings of your Internet browser. This requires changes to the Adobe Flash Player setting.

1. Legal basis for data processing
   Legal basis for the processing of your personal data in the context of the newsletter dispatch is in the presence of a consent Art. 6 para. 1 lit. a EU-DSGVO or as a result of the sale of goods or services, the statutory permission of § 7 (3) UWG.

2. Purpose of data processing
   The collection of your personal data serves to send the newsletter to you. The purpose of the processing of your personal data by sending the newsletter is to promote the sale of goods or services.

3. Duration of storage
   Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey. Your personal data is therefore stored as long as the subscription to the newsletter is active.

4. Opposition and removal possibility
   You can cancel the subscription to the newsletter at any time. For this purpose, there is a corresponding link in each newsletter. Termination of the subscription also enables revocation of consent.

1. Legal basis for data processing
   The legal basis for the processing of your personal data in the context of the registration is Art. 6 para. 1 lit. b EU-GDPR.

2. Purpose of data processing
   Your registration allows for simplified signing of contracts between you and us. The processing of your personal data during the registration is therefore necessary to fulfill a contract between you and us or to carry out pre-contractual measures.

3. Duration of storage
   Your data will be deleted as soon as they are no longer necessary to achieve the purpose of their survey. This is the case during the registration process for the performance of a contract or for the performance of pre-contractual measures if your personal data are no longer required for the performance of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contracting party in order to comply with contractual or legal obligations.

4. Opposition and removal possibility
   You have the option to cancel the registration at any time. You can change the personal data stored about you at any time. If your personal data is required for the fulfillment of a contract or for the execution of pre-contractual measures, a premature deletion of your personal data is only possible, as long as there are no contractual or legal obligations to cancel the deletion.

1. Legal basis for data processing
   The legal basis for the processing of your personal data, which is transmitted in the event of contact via the contact form or by e-mail, is Art. 6 (1) lit. f EU-GDPR. If the establishment of contact via the contact form or by e-mail aims to conclude a contract, Art. 6 para. 1 lit. b EU-GDPR an additional legal basis for the processing.

2. Purpose of data processing
   The processing of your personal data in the case of contact via the contact form or by e-mail serves us only to process the contact.

3. Duration of storage
   Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey.

4. Opposition and removal possibility
   At any time, you have the opportunity to object to the processing of your personal data in the context of contacting us via the contact form or by e-mail at any time in the future. In such a case, the conversation between you and us cannot continue. All personal data stored in the course of contacting will be deleted in this case.

1. Handling of processing
   This website uses Google Analytics, the web analysis service of Google Inc. (hereafter "Google"). Google Analytics uses so-called "cookies", text suggestion files, which are stored on your computer and which allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, in the event of activation of IP anonymisation on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.

2. Legal basis for data processing
   The legal basis for the processing of your personal data is Art. 6 para. 1 lit. f EU-GDPR.

3. Purpose of data processing
   The processing of your personal data enables us to analyze your surfing behavior. By analyzing the obtained data, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. For these purposes, our legitimate interest in the processing of your personal data pursuant to Art. 6 para. 1 lit. f EU-GDPR. By anonymizing your IP address, your interest in the protection of personal data will be adequately taken into account.

4. Duration of storage
   Your personal data will be deleted as soon as it is no longer needed for our aforementioned purposes.

5. Opposition and removal possibility
   Users of this website who do not want their data collected by Google Analytics can install the browser add-on to disable Google Analytics. This add-on instructs the Google Analytics JavaScript running on websites (ga.js, analytics.js, and dc.js) not to allow the sending of information to Google Analytics. If you want to disable Google Analytics, go to this page and install the Google Analytics opt-out add-on for your browser. Detailed information on installing and uninstalling the add-on can be found in the relevant help resources for your browser. Browser and operating system updates may cause the deactivation add-on to stop working as intended. Learn more about managing add-ons for Chrome here. If you're not using Chrome, check with the manufacturer of your browser to see if add-ons are working properly in the browser version you're using. The latest versions of Internet Explorer occasionally load the Google Analytics opt-out add-on after data has been sent to Google Analytics. Therefore, if you use Internet Explorer, the add-on will install cookies on your computer. These cookies ensure that any captured data is deleted immediately by the server that collected the data. Make sure that third-party cookies are not disabled for Internet Explorer. If you delete your cookies, these cookies will be reset by the add-on within a short period of time to ensure that your Google Analytics browser add-on continues to operate without restriction. The Google Analytics opt-out browser add-on does not prevent data from being sent to the website or other web analytics services. For more information about terms of service and privacy, visit https://support.google.com/analytics/answer/6004245?hl=de. IP anonymisation is activated on this website.
   
   In addition or as an alternative to the Browser-Add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. An opt-out cookie will be installed on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.

1. Legal basis for data processing
   The legal basis for the processing of your personal data in the context of direct marketing by mail is Art. 6 para. 1 lit. f EU-GDPR.

2. Purpose of data processing
   The purpose of processing your personal data in the context of direct marketing by mail is to promote the sale of goods or services. For this purpose, our legitimate interest in the processing of data pursuant to Art. 6 para. 1 lit. f EU-GDPR.

3. Duration of storage
   Your personal information will be deleted as soon as it is no longer necessary to achieve the purpose of the survey; this is the case in particular when the opposition is received.

4. Opposition and removal possibility
   You can object to the processing of your personal data in the context of direct marketing by mail at any time in the future.

1. Legal basis for data processing
   The legal basis for the processing of your personal data in the context of legal defense and enforcement is Art. 6 para. 1 lit. f EU-GDPR.

2. Purpose of data processing
   The purpose of the processing of your personal data in the context of legal defense and law enforcement is the defense against unauthorized use and the legal enforcement of claims and rights. For this purpose, our legitimate interest in the processing of data pursuant to Art. 6 para. 1 lit. f EU-GDPR.

3. Duration of storage
   Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey.

4. Opposition and removal possibility
   The processing of your personal data in the context of legal defense and law enforcement is imperative for legal defense and law enforcement. Consequently, there is no contradiction for you.

Within our company, those departments and departments receive personal data that they need to fulfill the purposes mentioned above. In addition, we sometimes use different service providers and transmit your personal data to other trusted recipients. These can be eg:

• Banking institutions
• Scanning Service
• Printers
• Lettershops
• IT service
• Lawyers and courts

If your personal data are processed by us, you are the person affected within the meaning of EU-DSGVO and you have the following rights towards us:

1. Right
   You may request confirmation from us as to whether personal information concerning you is processed by us. If such processing is available, you can request information from us via the following information:
   1. the purposes for which the personal data are processed;
   2. the categories of personal data that are processed;
   3. the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
   4. the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
   5. the existence of a right to rectification or deletion of your personal data, a right of restriction of our processing or a right to object to such processing;
   6. the existence of a right of appeal to a supervisory authority;
   7. all available information about the origin of the data, if the personal data is not collected from you;
   8. the existence of automated decision-making including profiling according to Article 22 (1) and (4) of the EU GDPR and - at least in these cases - meaningful information about the logic involved, and the scope and intended impact of such processing on you.
   You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 EU GDPR in connection with the transfer.
   
   
2. Right to rectification
   You have a right to rectification and / or completion to us if the personal data you process is incorrect or incomplete. We have to correct this immediately.
   
   
3. Right to restriction of processing
   You may request the restriction of the processing of your personal data under the following conditions:
   1. if you deny the accuracy of your personal information for a period that allows us to verify the accuracy of your personal information;
   2. the processing is unlawful, and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
   3. we no longer need your personal information for the purposes of processing, but you need it to assert, exercise or defend your rights, or
   4. if you have objected to the processing pursuant to Art. 21 (1) EU GDPR and it is not yet certain whether our legitimate reasons outweigh your reasons.
   
   If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
   
   
4. Right to delete
   i. Extinguishing duty
   You may require us to immediately delete your personal information and we shall promptly erase such personal information if one of the following is true:
   1. Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
   2. You revoke your consent to the processing gem. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for processing.
   3. In accordance with Art. 21 (1) of the EU GDPR, you object to the processing and there are no prior justifiable grounds for the processing, or you submit according to. Art. 21 (2) EU GDPR Opposition to processing.
   4. Your personal data has been processed unlawfully.
   5. The deletion of your personal data is required to fulfill a legal obligation under Union or national law to which we are subject.
   6. The personal data relating to you were collected in relation to information society services offered under Article 8 (1) EU GDPR.
   
   ii. Information to third parties
   Have we made the personal data concerning you public and we are acc. Article 17 (1) of the EU GDPR, we shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you, taking into account available technology and implementation costs if you have requested the deletion of any links to such personal data or copies or replications of such personal data. 
   
   iii. Exceptions
   The right to erasure does not exist if the processing is necessary
   1. to exercise the right to freedom of expression and information;
   2. to fulfill a legal obligation which requires the processing under the law of the Union or of the Member States to which we are subject or for the performance of a public-interest or public-authority task assigned to us;
   3. for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) EU GDPR;
   4. for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) EU GDPR, to the extent that the law referred to in (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
   5. to assert, exercise or defend legal claims.
      
      
5. Right to information
   If you have the right to rectify, delete or limit the processing to us, we are obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right of us to be informed about these recipients.
   
   
6. Right to data portability
   You have the right to receive personally identifiable information you provide us in a structured, common and machine-readable format. In addition, you have the right to transfer this personal information that has been provided to us to another person without hindrance, provided that
   
   1. the processing on a consent acc. Art. 6 para. 1 lit. a EU GDPR or Art. 9 para. 2 lit. a EU-DSGVO or on a contract acc. Art. 6 para. 1 lit. b EU-GDPR is based and
   2. the processing is done using automated procedures.
   
   In exercising this right, you also have the right to obtain that personal data relating to you are transmitted directly by us to another person responsible, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority that has been delegated to us.
   
   
7. Right of veto
   You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f EU-DSGVO takes an objection; this also applies to profiling based on these provisions. We no longer process your personal information about you unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
   
   
8. Right to revoke the data protection consent declaration
   You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
   
   
9. Automated decision on an individual basis including profiling
   You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision
   
   1. is required for the conclusion or performance of a contract between you and us,
   2. is permitted under Union or Member State legislation to which we are subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
   3. with your express consent.
   
   However, these decisions may not be based on special categories of personal data under Art. 9 (1) EU GDPR, unless Article 9 (2) lit. a or g EU-DSGVO and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests. With regard to the cases referred to in (1) and (3), we shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right of us to intervene on our part, and to express our own views Contesting the decision is one.
   
   
10. Right to complain to a supervisory authority
    Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the EU-GDPR violates.
    
    The responsible supervisory authority for us is:
    Aufsichtsbehörde für den Datenschutz im nicht-öffentlichen Bereich in Bayern
    Regierung von Mittelfranken
    Promenade 27
    91522 Ansbach
    Germany
    
    The supervisory authority to which you have lodged a complaint informs you of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 EU GDPR.
    
    For further questions our data protection officer is always at your disposal.

Your contact person as controller within the meaning of the European General Data Protection Regulation ("EU-DSGVO") and other national data protection laws of the member states as well as other data protection regulations is:

MAHÖ Beteiligungs- und Vermögensverwaltungs GbR
Leopoldstrasse 112
80802 Munich
Germany

(hereinafter referred to as "we", "us" or "our")

The protection of your personal data is of particular importance to the MAHÖ Beteiligungs- und Vermögensverwaltungs GbR Munich. Please contact our data protection officer directly in all matters relating to data protection and data security:

Stefan Frank
Datenschutzbeauftragter | data security officer
Wachtelweg 26b | 83024 Rosenheim | Germany
datenschutz@mahoe.eu

1. Legal basis for data processing
   
   1) Personal data
   Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a EU GDPR, Art. 88 (1) EU GDPR in conjunction with Section 26 (2) BDSG as the legal basis. In the processing of personal data, which is necessary for the establishment, implementation or termination of the employment contract, Art. 6 para. 1 lit. b EU-DSGVO, Art. 88 para. 1 EU-DSGVO in conjunction with § 26 (1) BDSG, § 611a BGB as legal basis. Insofar as processing of personal data is required to fulfill a legal obligation to which we are subject, Art. 6 para. 1 lit. c EU GDPR as legal basis. In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 para. 1 lit. d EU-GDPR as legal basis. If the processing is necessary for the protection of a legitimate interest of us or a third party and if your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, then Art. 6 para. 1 lit. f EU-GDPR as legal basis for processing.
   
   2) Special categories of personal data
   Insofar as we obtain your consent to the processing of special categories of personal data (Article 9 (1) of the EU GDPR), including religious affiliation, nationality and health data, Art. 9 (2) lit. a EU GDPR as legal basis. If the processing of special categories of personal data is necessary in order for us to exercise our rights under labor law and social security and social protection legislation and to fulfill our obligations in this regard, the legal basis for processing under Article 9 (2) lit. , b EU-DSGVO, Art. 88 (1) EU GDPR in conjunction with Section 26 (3) BDSG. If the processing of special categories of personal data is necessary to protect vital interests, the legal basis for processing under Art. 9 (2) lit. c EU GDPR. If the processing relates to special categories of personal data that have obviously been made public by you, the legal basis ensues from Art. 9 (2) lit. e EU GDPR. If the processing of special categories of personal data is required for the purposes of health care, occupational medicine or for the assessment of the ability to work, the legal basis follows from Art. 9 para. 2 lit. h EU-GDPR.
   
   
2. Purposes of data processing
   The processing of your personal data takes place for the purpose of establishing the employment relationship, in particular for the fulfillment of contractual, statutory, if applicable, collective bargaining and social security obligations.
   
   
3. Duration of storage
   Your personal data will be deleted or blocked as soon as the purpose of the storage is removed. It may also be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract. Afterwards we store your data for the following periods: 
   • Application documents and application data, after decision on non-occupation, up to 6 months, proof of discrimination, period §§ 21 (5) and 22 AGG (General Equal Treatment Act)
   • Application documents otherwise: Upon dissolution, termination of employment
     
     
4. Opposition and removal possibility
   The processing of your personal data in the context of the application process is absolutely necessary for the establishment of the employment relationship. Consequently, there is no contradiction for you. If the processing of your personal data takes place on the basis of your consent, you have the option of revoking your consent at any time.

1. Legal basis for data processing
   The legal basis for the processing of your personal data in the context of legal defense and enforcement is Art. 6 para. 1 lit. f EU-DSGVO or Art. 9 para. 2 lit. f EU-GDPR.
   
   
2. Purpose of data processing
   The purpose of the processing of your personal data in the context of legal defense and law enforcement is the defense against unauthorized use and the legal enforcement of claims and rights. For this purpose, our legitimate interest in the processing of data pursuant to Art. 6 para. 1 lit. f EU-DSGVO or Art. 9 para. 2 lit. f EU-GDPR.
   
   
3. Duration of storage
   Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey.
   
   
4. Opposition and removal possibility
   The processing of your personal data in the context of legal defense and law enforcement is imperative for legal defense and law enforcement. Consequently, there is no contradiction for you.

• Personnel department
• Possible supervisor of the candidate concerned
• Departments
• Financial Accounting
• Data Protection Officer
• Equality Officer
• Controlling / Revision
• Employment Agency
• Integration Office in case of severe disability
• Banking institutions
• Insurance company
• External serviceprovider
• Paper shredder
• IT service
• Lawyers, courts, tax consultants

If your personal data are processed by us, you are the person affected within the meaning of EU-DSGVO and you have the following rights towards us:

1. Right
   You may request confirmation from us as to whether personal information concerning you is processed by us. If such processing is available, you can request information from us via the following information:
   1. the purposes for which the personal data are processed;
   2. the categories of personal data that are processed;
   3. the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
   4. the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
   5. the existence of a right to rectification or deletion of your personal data, a right of restriction of our processing or a right to object to such processing;
   6. the existence of a right of appeal to a supervisory authority;
   7. all available information about the origin of the data, if the personal data is not collected from you;
   8. the existence of automated decision-making including profiling according to Article 22 (1) and (4) of the EU GDPR and - at least in these cases - meaningful information about the logic involved, and the scope and intended impact of such processing on you.
   You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 EU GDPR in connection with the transfer. 
   
   
2. Right to rectification
   You have a right to rectification and / or completion to us if the personal data you process is incorrect or incomplete. We have to correct this immediately.
   
   
3. Right to restriction of processing
   You may request the restriction of the processing of your personal data under the following conditions:
   1. if you deny the accuracy of your personal information for a period that allows us to verify the accuracy of your personal information;
   2. the processing is unlawful, and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
   3. we no longer need your personal information for the purposes of processing, but you need it to assert, exercise or defend your rights, or
   4. if you have objected to the processing pursuant to Art. 21 (1) EU GDPR and it is not yet certain whether our legitimate reasons outweigh your reasons.
   
   If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
   
   
4. Right to delete
   
   i. Extinguishing duty
   You may require us to immediately delete your personal information and we shall promptly erase such personal information if one of the following is true:
   1. Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
   2. You revoke your consent to the processing gem. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for processing.
   3. In accordance with Art. 21 (1) of the EU GDPR, you object to the processing and there are no prior justifiable grounds for the processing, or you submit according to. Art. 21 (2) EU GDPR Opposition to processing.
   4. Your personal data has been processed unlawfully.
   5. The deletion of your personal data is required to fulfill a legal obligation under Union or national law to which we are subject.
   6. The personal data relating to you were collected in relation to information society services offered under Article 8 (1) EU GDPR.
   
   ii. Information to third parties
   Have we made the personal data concerning you public and we are acc. Article 17 (1) of the EU GDPR, we shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you, taking into account available technology and implementation costs if you have requested the deletion of any links to such personal data or copies or replications of such personal data.
   
   iii. Exceptions
   The right to erasure does not exist if the processing is necessary
   1. to exercise the right to freedom of expression and information;
   2. to fulfill a legal obligation which requires the processing under the law of the Union or of the Member States to which we are subject or for the performance of a public-interest or public-authority task assigned to us;
   3. for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) EU GDPR;
   4. for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) EU GDPR, to the extent that the law referred to in (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
   5. to assert, exercise or defend legal claims.
      
      
5. Right to information
   If you have the right to rectify, delete or limit the processing to us, we are obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right of us to be informed about these recipients.
   
   
6. Right to data portability
   You have the right to receive personally identifiable information you provide us in a structured, common and machine-readable format. In addition, you have the right to transfer this personal information that has been provided to us to another person without hindrance, provided that
   1. the processing on a consent acc. Art. 6 para. 1 lit. a EU GDPR or Art. 9 para. 2 lit. a EU-DSGVO or on a contract acc. Art. 6 para. 1 lit. b EU-GDPR is based and
   2. the processing is done using automated procedures.
   
   In exercising this right, you also have the right to obtain that personal data relating to you are transmitted directly by us to another person responsible, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority that has been delegated to us.
   
   
7. Right of veto
   You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f EU-DSGVO takes an objection; this also applies to profiling based on these provisions. We no longer process your personal information about you unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
   
   
8. Right to revoke the data protection consent declaration
   You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
   
   
9. Automated decision on an individual basis including profiling
   You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision
   1. is required for the conclusion or performance of a contract between you and us,
   2. is permitted under Union or Member State legislation to which we are subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
   3. with your express consent.
   
   However, these decisions may not be based on special categories of personal data under Art. 9 (1) EU GDPR, unless Article 9 (2) lit. a or g EU-DSGVO and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests. With regard to the cases referred to in (1) and (3), we shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right of us to intervene on our part, and to express our own views Contesting the decision is one.
   
   
10. Right to complain to a supervisory authority
    Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the EU-GDPR violates.
    
    The responsible supervisory authority for us is:
    Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
    Promenade 27
    91522 Ansbach
    Germany
    
    The supervisory authority to which you have lodged a complaint informs you of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 EU GDPR.
    
    For further questions our data protection officer is always at your disposal.

Your contact person as controller within the meaning of the European General Data Protection Regulation ("EU-DSGVO") and other national data protection laws of the member states as well as other data protection regulations is:

MAHÖ Beteiligungs- und Vermögensverwaltungs GbR
Leopoldstrasse 112
80802 Munich
Germany

(hereinafter referred to as "we", "us" or "our")

The protection of your personal data is of particular importance to the MAHÖ Beteiligungs- und Vermögensverwaltungs GbR Munich. Please contact our data protection officer directly in all matters relating to data protection and data security:

Stefan Frank
Datenschutzbeauftragter | data security officer
Wachtelweg 26b | 83024 Rosenheim | Germany
datenschutz@mahoe.eu

1. Legal basis for data processing
   
   1) Personal data
   Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a EU GDPR, Art. 88 (1) EU GDPR in conjunction with Section 26 (2) BDSG as the legal basis. In the processing of personal data, which is necessary for the establishment, implementation or termination of the employment contract, Art. 6 para. 1 lit. b EU-DSGVO, Art. 88 para. 1 EU-DSGVO in conjunction with § 26 (1) BDSG, § 611a BGB as legal basis. Insofar as processing of personal data is required to fulfill a legal obligation to which we are subject, Art. 6 para. 1 lit. c EU GDPR as legal basis. Among other things, we are subject to the following legal obligations:
   
   • Section 28a SGB (Social Code) IV; §198 ff SGB V; § 190 ff., § 281c SGB VI DEÜV (Data Collection and Transmission Regulation), for reporting to the authorities
   • § 829 para. 2 sentence 1 ZPO (Code of Civil Procedure) with regard to salary garnishments
   • § 16 Abs. 2 ArbZG (Working Hours Act) and § 7d Abs. 1 Sentence 1 SGB IV, for the documentation of working time accounts
   • §§ 16, 17 MiLoG (Minimum Wage Act), for the documentation of working hours as well as for the fulfillment of the obligation to report to the authorities
   • §§ 49, 50 JArbSchG (Youth Employment Protection Act), for the fulfillment of the information and documentation obligations to the authorities
   • §§ 7, 17 b AÜG (Temporary Employment Act), for the fulfillment of the documentation and information obligations to the authorities
   • §§ 76, 88, 101 BBiG (Vocational Training Act), to fulfill the obligation to provide documentation and information to the authorities
   • § 163 SGB IX (Rehabilitation and participation of people with disabilities at work) to implement the interaction between employer, employment agency and integration offices
   • § 312 SGB III on the issue of the work certificate to the Employment Agency
   • § 27 MuSchG, for the fulfillment of the duties of notification and retention to the authorities
   
   In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 para. 1 lit. d EU-GDPR as legal basis. If the processing is necessary for the protection of a legitimate interest of us or a third party and if your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, then Art. 6 para. 1 lit. f EU-GDPR as legal basis for processing.
   
   2) Special categories of personal data
   Insofar as we obtain your consent to the processing of special categories of personal data (Art. 9 (1) EU GDPR), such as religious affiliation, nationality and health data, Art. 9 (2) lit. a EU GDPR as legal basis. If the processing of special categories of personal data is necessary in order for us to exercise our rights under labor law and social security and social protection legislation and to fulfill our obligations in this regard, the legal basis for processing under Article 9 (2) lit. , b EU-DSGVO, Art. 88 (1) EU GDPR in conjunction with Section 26 (3) BDSG. Among other things, we are subject to the following legal obligations:
   • Section 28a SGB (Social Code) IV; §198 ff SGB V; § 190 ff., § 281c SGB VI DEÜV (Data Collection and Transmission Regulation), for reporting to the authorities
   • § 829 para. 2 sentence 1 ZPO (Code of Civil Procedure) with regard to salary garnishments
   • § 16 Abs. 2 ArbZG (Working Hours Act) and § 7d Abs. 1 Sentence 1 SGB IV, for the documentation of working time accounts
   • §§ 16, 17 MiLoG (Minimum Wage Act), for the documentation of working hours as well as for the fulfillment of the obligation to report to the authorities
   • §§ 49, 50 JArbSchG (Youth Employment Protection Act), for the fulfillment of the information and documentation obligations to the authorities
   • §§ 7, 17 b AÜG (Temporary Employment Act), for the fulfillment of the documentation and information obligations to the authorities
   • §§ 76, 88, 101 BBiG (Vocational Training Act), to fulfill the obligation to provide documentation and information to the authorities
   • § 163 SGB IX (Rehabilitation and participation of people with disabilities at work) to implement the interaction between employer, employment agency and integration offices
   • § 312 SGB III on the issue of the work certificate to the Employment Agency
   • § 27 MuSchG, for the fulfillment of the duties of notification and retention to the authorities
   
   If the processing of special categories of personal data is necessary to protect vital interests, the legal basis for processing under Art. 9 (2) lit. c EU GDPR. If the processing relates to special categories of personal data that have obviously been made public by you, the legal basis ensues from Art. 9 (2) lit. e EU GDPR. If the processing of special categories of personal data is required for the purposes of health care, occupational medicine or for the assessment of the ability to work, the legal basis follows from Art. 9 para. 2 lit. h EU-GDPR.
   
   
2. Purposes of data processing
   The processing of your personal data takes place for the purpose of justification, implementation and termination of the employment relationship, in particular for the fulfillment of contractual, statutory, if applicable collective bargaining and social security obligations.
   
   
3. Duration of storage
   Your personal data will be deleted or blocked as soon as the purpose of the storage is removed. It may also be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract. Afterwards we store your data for the following periods:
   • Vouchers to the payroll account up to 10 years according to § 147 para. 1 no. 4.5 in conjunction with para. 3 AO (Tax Code); Section 41 (1) sentence 9 of the Income Tax Act (Einkommensteuergesetz); Section 257 (1) No. 1, 4 in conjunction with Section 238 (1) HGB (Commercial Code)
   • Warnings to 2.5 years (according to case law)
   • Application documents otherwise: Upon dissolution, termination of employment
   • Application documents otherwise: Upon dissolution, termination of employment
   • Time sheets 2 years according to § 16 Abs. 2 ArbZG (Arbeitszeitgesetz)
   • Time sheets 2 years according to § 50 JArbSchG (Youth Employment Protection Act)
   • Time sheets 2 years according to § 17 Abs. 1 MiLoG (Minimum Wage Act)
   • Other time sheets 6 years, § 147 para. 1 no. 5, para. 3 AO
     
     
4. Opposition and removal possibility
   The processing of your personal data in the employment relationship is mandatory for the creation, implementation and termination of the employment relationship. Consequently, there is no contradiction for you. If the processing of your personal data takes place on the basis of your consent, you have the option of revoking your consent at any time.

1. Legal basis for data processing
   The legal basis for the processing of your personal data in the context of legal defense and enforcement is Art. 6 para. 1 lit. f EU-DSGVO or Art. 9 para. 2 lit. f EU-GDPR.
   
   
2. Purpose of data processing
   The purpose of the processing of your personal data in the context of legal defense and law enforcement is the defense against unauthorized use and the legal enforcement of claims and rights. For this purpose, our legitimate interest in the processing of data pursuant to Art. 6 para. 1 lit. f EU-DSGVO or Art. 9 para. 2 lit. f EU-GDPR.
   
   
3. Duration of storage
   Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey.
   
   
4. Opposition and removal possibility
   The processing of your personal data in the context of legal defense and law enforcement is imperative for legal defense and law enforcement. Consequently, there is no contradiction for you.

• Personnel department
• Supervisor of the affected employee
• Payroll
• Financial Accounting
• Data Protection Officer
• Controlling / Revision
• Social insurance institutions: health insurance, health insurance funds, pension insurance
• Employment Agency
• Supervisory and safety authorities
• Tax office
• Integration Office in case of severe disability
• Professional association
• Banking institutions
• Insurance company
• External serviceprovider
• Paper shredder
• Creditors, in wages and salaries
• IT service
• Lawyers, courts, tax consultants

If your personal data are processed by us, you are the person affected within the meaning of EU-DSGVO and you have the following rights towards us:

1. Right
   You may request confirmation from us as to whether personal information concerning you is processed by us. If such processing is available, you can request information from us via the following information:
   1. the purposes for which the personal data are processed;
   2. the categories of personal data that are processed;
   3. the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
   4. the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
   5. the existence of a right to rectification or deletion of your personal data, a right of restriction of our processing or a right to object to such processing;
   6. the existence of a right of appeal to a supervisory authority;
   7. all available information about the origin of the data, if the personal data is not collected from you;
   8. the existence of automated decision-making including profiling according to Article 22 (1) and (4) of the EU GDPR and - at least in these cases - meaningful information about the logic involved, and the scope and intended impact of such processing on you.
   You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 EU GDPR in connection with the transfer.
   
   
2. Right to rectification
   You have a right to rectification and / or completion to us if the personal data you process is incorrect or incomplete. We have to correct this immediately.
   
   
3. Right to restriction of processing
   You may request the restriction of the processing of your personal data under the following conditions:
   1. if you deny the accuracy of your personal information for a period that allows us to verify the accuracy of your personal information;
   2. the processing is unlawful, and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
   3. We no longer need your personal information for the purposes of processing, but you need it to assert, exercise or defend your rights, or
   4. if you have objected to the processing pursuant to Art. 21 (1) EU GDPR and it is not yet certain whether our legitimate reasons outweigh your reasons.
   
   If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
   
   
4. Right to delete
   
   i. Extinguishing duty
   You may require us to immediately delete your personal information and we shall promptly erase such personal information if one of the following is true:
   1. Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
   2. You revoke your consent to the processing gem. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for processing.
   3. In accordance with Art. 21 (1) of the EU GDPR, you object to the processing and there are no prior justifiable grounds for the processing, or you submit according to. Art. 21 (2) EU GDPR Opposition to processing.
   4. Your personal data has been processed unlawfully.
   5. The deletion of your personal data is required to fulfill a legal obligation under Union or national law to which we are subject.
   6. The personal data relating to you were collected in relation to information society services offered under Article 8 (1) EU GDPR.
   
   ii. Information to third parties
   Have we made the personal data concerning you public and we are acc. Article 17 (1) of the EU GDPR, we shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you, taking into account available technology and implementation costs if you have requested the deletion of any links to such personal data or copies or replications of such personal data.
   
   iii. Exceptions
   The right to erasure does not exist if the processing is necessary
   1. to exercise the right to freedom of expression and information;
   2. to fulfill a legal obligation which requires the processing under the law of the Union or of the Member States to which we are subject or for the performance of a public-interest or public-authority task assigned to us;
   3. for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) EU GDPR;
   4. for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) EU GDPR, to the extent that the law referred to in (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
   5. to assert, exercise or defend legal claims.
      
      
5. Right to information
   If you have the right to rectify, delete or limit the processing to us, we are obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right of us to be informed about these recipients.
   
   
6. Right to data portability
   You have the right to receive personally identifiable information you provide us in a structured, common and machine-readable format. In addition, you have the right to transfer this personal information that has been provided to us to another person without hindrance, provided that
   1. the processing on a consent acc. Art. 6 para. 1 lit. a EU GDPR or Art. 9 para. 2 lit. a EU-DSGVO or on a contract acc. Art. 6 para. 1 lit. b EU-GDPR is based an
   2. the processing is done using automated procedures.
   In exercising this right, you also have the right to obtain that personal data relating to you are transmitted directly by us to another person responsible, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority that has been delegated to us.
   
   
7. Right of veto
   You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f EU-DSGVO takes an objection; this also applies to profiling based on these provisions. We no longer process your personal information about you unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
   
   
8. Right to revoke the data protection consent declaration
   You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
   
   
9. Automated decision on an individual basis including profiling
   You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision
   1. is required for the conclusion or performance of a contract between you and us,
   2. is permitted under Union or Member State legislation to which we are subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
   3. with your express consent.
   
   However, these decisions may not be based on special categories of personal data under Art. 9 (1) EU GDPR, unless Article 9 (2) lit. a or g EU-DSGVO and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests. With regard to the cases referred to in (1) and (3), we shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right of us to intervene on our part, and to express our own views Contesting the decision is one.
   
   
10. Right to complain to a supervisory authority
    Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the EU-GDPR violates.
    
    The responsible supervisory authority for us is:
    Aufsichtsbehörde für den Datenschutz im nicht-öffentlichen Bereich in BayernRegierung von Mittelfranken
    Promenade 27
    91522 Ansbach
    Germany
    
    The supervisory authority to which you have lodged a complaint informs you of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 EU GDPR.
    
    For further questions our data protection officer is always at your disposal.

Your contact person as controller within the meaning of the European General Data Protection Regulation ("EU-DSGVO") and other national data protection laws of the member states as well as other data protection regulations is:

MAHÖ Beteiligungs- und Vermögensverwaltungs GbR
Leopoldstrasse 112
80802 Munich

(hereinafter referred to as "we", "us" or "our")

The protection of your personal data is of particular importance to the MAHÖ Beteiligungs- und Vermögensverwaltungs GbR Munich. Please contact our data protection officer directly in all matters relating to data protection and data security:

Stefan Frank
Datenschutzbeauftragter | data security officer
Wachtelweg 26b | 83024 Rosenheim | Germany
datenschutz@mahoe.eu

1. Scope of processing personal data
   In principle, we process your personal data only insofar as this is necessary for the performance of our services. The processing of your personal data takes place regularly only on the basis of the fulfillment of a contract or for the execution of a pre-contractual measure.
   
   
2. Legal basis for the processing of personal data
   Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU GDPR as legal basis. In the processing of personal data required to fulfill a contract between you and us, Art. 6 para. 1 lit. b EU-GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual actions. Insofar as processing of personal data is required to fulfill a legal obligation to which we are subject, Art. 6 para. 1 lit. c EU GDPR as legal basis. In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 para. 1 lit. d EU-GDPR as legal basis. If the processing is necessary for the protection of a legitimate interest of us or a third party and if your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, then Art. 6 para. 1 lit. f EU-GDPR as legal basis for processing.
   
   
3. Data erasure and storage duration
   Your personal data will be deleted or blocked as soon as the purpose of the storage is removed. It may also be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

1. Legal basis for data processing
   The legal basis for the processing of your personal data in the context of direct marketing by mail is Art. 6 para. 1 lit. f EU-GDPR.
   
   
2. Purpose of data processing
   The purpose of processing your personal data in the context of direct marketing by mail is to promote the sale of goods or services. For this purpose, our legitimate interest in the processing of data pursuant to Art. 6 para. 1 lit. f EU-GDPR.
   
   
3. Duration of storage
   Your personal information will be deleted as soon as it is no longer necessary to achieve the purpose of the survey; this is the case in particular when the opposition is received.
   
   
4. Opposition and removal possibility
   You can object to the processing of your personal data in the context of direct marketing by mail at any time in the future.

1. Legal basis for data processing
   Legal basis for the processing of your personal data in the context of the newsletter dispatch is in the presence of a consent Art. 6 para. 1 lit. a EU-DSGVO or as a result of the sale of goods or services, the statutory permission of § 7 (3) UWG.
   
   
2. Purpose of data processing
   The collection of your personal data serves to send the newsletter to you. The purpose of the processing of your personal data in the course of sending the newsletter is the promotion of lottery proceeds. Much of our revenue is used to fund social projects and education. These serve to improve the living conditions and inclusion of people with disabilities, children and adolescents.
   
   
3. Duration of storage
   Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey. Your personal data is therefore stored as long as the subscription to the newsletter is active.
   
   
4. Opposition and removal possibility
   You can cancel the subscription to the newsletter at any time. For this purpose, there is a corresponding link in each newsletter. Termination of the subscription also enables revocation of consent.

1. Legal basis for data processing
   Legal basis for the processing of your personal data, which are transmitted in the course of sending an e-mail, is Art. 6 para. 1 lit. f EU-GDPR. If the e-mail contact aims to conclude a contract, Art. 6 para. 1 lit. b EU-DSGVO additional legal basis for the processing of your personal data.
   
   
2. Purpose of data processing
   The processing of your personal data in the event of contact via e-mail serves us only to process the contact.
   
   
3. Duration of storage
   Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey. For the personal data sent by e-mail, this is the case when the conversation with you has ended. The conversation ends when it can be inferred from the circumstances that the matter in question has finally been clarified between you and us.
   
   
4. Opposition and removal possibility
   At any time, you have the opportunity to object to the processing of your personal data in the context of contacting us by e-mail at any time for the future. In such a case, the conversation between you and us cannot continue. All personal data stored in the course of contacting will be deleted in this case.

1. Legal basis for data processing
   The legal basis for the processing of your personal data in the context of legal defense and enforcement is Art. 6 para. 1 lit. f EU-GDPR.
   
   
2. Purpose of data processing
   The purpose of the processing of your personal data in the context of legal defense and law enforcement is the defense against unauthorized use and the legal enforcement of claims and rights. For this purpose, our legitimate interest in the processing of data pursuant to Art. 6 para. 1 lit. f EU-GDPR.
   
   
3. Duration of storage
   Your personal information will be erased as soon as it is no longer necessary to achieve the purpose of the survey.
   
   
4. Opposition and removal possibility
   The processing of your personal data in the context of legal defense and law enforcement is imperative for legal defense and law enforcement. Consequently, there is no contradiction for you.

• Banking Institutions
• Scanning Service
• Printers
• Lettershops
• IT service
• Lawyers and courts
  
  

1. Right
   You may request confirmation from us as to whether personal information concerning you is processed by us. If such processing is available, you can request information from us via the following information:
   1. the purposes for which the personal data are processed;
   2. the categories of personal data that are processed;
   3. the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
   4. the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
   5. the existence of a right to rectification or deletion of your personal data, a right of restriction of our processing or a right to object to such processing;
   6. the existence of a right of appeal to a supervisory authority;
   7. all available information about the origin of the data, if the personal data is not collected from you;
   8. the existence of automated decision-making including profiling according to Article 22 (1) and (4) of the EU GDPR and - at least in these cases - meaningful information about the logic involved, and the scope and intended impact of such processing on you.
   
   You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 EU GDPR in connection with the transfer.
   
   
2. Right to rectification
   You have a right to rectification and / or completion to us if the personal data you process is incorrect or incomplete. We have to correct this immediately.
   
   
3. Right to restriction of processing
   You may request the restriction of the processing of your personal data under the following conditions:
   1. if you deny the accuracy of your personal information for a period that allows us to verify the accuracy of your personal information;
   2. the processing is unlawful, and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
   3. We no longer need your personal information for the purposes of processing, but you need it to assert, exercise or defend your rights, or
   4. if you have objected to the processing pursuant to Art. 21 (1) EU GDPR and it is not yet certain whether our legitimate reasons outweigh your reasons.
   
   If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
   
   
4. Right to delete
   
   i. Extinguishing duty
   You may require us to immediately delete your personal information and we shall promptly erase such personal information if one of the following is true:
   1. Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
   2. You revoke your consent to the processing gem. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for processing.
   3. You gem Art. 21 para. 1 EU-DSGVO objection to the processing and there are no prior justifiable reasons for the processing, or you lay gem. Art. 21 (2) EU GDPR Opposition to processing.
   4. Your personal data has been processed unlawfully.
   5. The deletion of your personal data is required to fulfill a legal obligation under Union or national law to which we are subject.
   6. The personal data relating to you were collected in relation to information society services offered under Article 8 (1) EU GDPR.
   
   ii. Information to third parties
   Have we made the personal data concerning you public and we are acc. Article 17 (1) of the EU GDPR, we shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you, taking into account available technology and implementation costs if you have requested the deletion of any links to such personal data or copies or replications of such personal data.
   
   iii. Exceptions
   The right to erasure does not exist if the processing is necessary
   1. to exercise the right to freedom of expression and information;
   2. to fulfill a legal obligation which requires the processing under the law of the Union or of the Member States to which we are subject or for the performance of a public-interest or public-authority task assigned to us;
   3. for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) EU GDPR;
   4. for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) EU GDPR, to the extent that the law referred to in (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
   5. to assert, exercise or defend legal claims.
      
      
5. Right to information
   If you have the right to rectify, delete or limit the processing to us, we are obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right of us to be informed about these recipients.
   
   
6. Right to data portability
   You have the right to receive personally identifiable information you provide us in a structured, common and machine-readable format. In addition, you have the right to transfer this personal information that has been provided to us to another person without hindrance, provided that
   1. the processing on a consent acc. Art. 6 para. 1 lit. a EU GDPR or Art. 9 para. 2 lit. a EU-DSGVO or on a contract acc. Art. 6 para. 1 lit. b EU-GDPR is based and
   2. the processing is done using automated procedures.
   In exercising this right, you also have the right to obtain that personal data relating to you are transmitted directly by us to another person responsible, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority that has been delegated to us.
   
   
7. Right of veto
   You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f EU-DSGVO takes an objection; this also applies to profiling based on these provisions. We no longer process your personal information about you unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
   
   
8. Right to revoke the data protection consent declaration
   You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
   
   
9. Automated decision on an individual basis including profiling
   You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision
   1. is required for the conclusion or performance of a contract between you and us,
   2. is permitted under Union or Member State legislation to which we are subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
   3. with your express consent.
   However, these decisions may not be based on special categories of personal data under Art. 9 (1) EU GDPR, unless Article 9 (2) lit. a or g EU-DSGVO and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests. With regard to the cases referred to in (1) and (3), we shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right of us to intervene on our part, and to express our own views Contesting the decision is one.
   
   
10. Right to complain to a supervisory authority
    Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the EU-GDPR violates.
    
    The responsible supervisory authority for us is:
    Aufsichtsbehörde für den Datenschutz im nicht-öffentlichen Bereich in Bayern
    Regierung von Mittelfranken
    Promenade 27
    91522 Ansbach
    Germany
    
    The supervisory authority to which you have lodged a complaint informs you of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 EU GDPR.
    
    For further questions our data protection officer is always at your disposal.