Below you will find information on which personal data we process, for what purpose, on what basis and for how long:

A.1 Name and contact details of the controller

Responsible within the meaning of data protection law for the collection and use of personal data is

emtrion GmbH
Am Hasenbiel 6
76297 Stutensee

represented by the management Ramona Maurer and Achmed Haddou

Telephone: +49 721 6 27 25-0
E-mail: mail@emtrion.de
Internet address: www.emtrion.de

Further information about our company can be found in the legal notice on our homepage at https://www.emtrion.de/de/impressum.html .

A.2 Contact details of the data protection officer of the controller

You can contact our data protection officer as follows:

Mr. Johann Berger
Berger Unternehmensberatung
Fachberater KMU
Rauentalerstr 22/1
76437 Rastatt
Phone: +49 7222 157 99 12
Email: j.berger@berger-kmu.com

A.3 Legal bases for the processing of personal data

In general, the following applies to the processing of personal data by us:

• Insofar as we obtain your consent for the processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
• When processing personal data that is necessary for the performance of a contract with you, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies if the processing is necessary for the performance of pre-contractual measures, e.g. orders, offers, contract negotiations.
• Insofar as the processing of personal data is necessary to fulfill a legal obligation to which we are subject, Art. 6 para. 1 letter c) GDPR serves as the legal basis.
• In the event that your vital interests or those of another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.
• If the processing of your personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, this is done on the legal basis of Art. 6 (1) (e) GDPR.
• If the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party and your interests, fundamental rights and freedoms do not override these interests, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.

A.4 General information on data erasure and storage duration

The personal data will generally be deleted or blocked by us as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which we as the controller are subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

Specifically, this means:
If we process the personal data on the basis of consent to data processing (Art. 6 (1) (a) General Data Protection Regulation, GDPR for short), the processing ends with your revocation, unless there is another legal basis for processing the data, which is the case, for example, if we are still entitled to process your data for the purpose of fulfilling the contract at the time of revocation (see below in each case).

If we process the data on the basis of our legitimate interests (Art. 6 (1) (f) GDPR) in the context of a prior assessment, we will store it until the legitimate interest no longer exists, the assessment comes to a different conclusion or you have effectively objected in accordance with Art. 21 GDPR (see the visually highlighted “Information on special right of objection” under C.).

If we process the data to fulfill the contract, we store the data until the contract has been finally fulfilled and processed and no more claims can be asserted from the contract, i.e. until the statute of limitations has expired. The general limitation period according to § 195 BGB is three (3) years. However, certain claims, such as claims for damages, only become time-barred after 30 years (see Section 197 BGB). If there is justified reason to assume that this is relevant in individual cases, we will store the personal data for this period. The aforementioned limitation periods begin at the end of the year (i.e. on December 31) in which the claim arose and the creditor becomes aware of the circumstances giving rise to the claim and the identity of the debtor or should have become aware of them without gross negligence.

We would like to point out that we are also subject to statutory retention obligations for commercial, tax and accounting reasons. These oblige us to retain certain data, which may also include personal data, for a period of six (6) to ten (10) years as proof of our proper business activities or accounting. These retention periods take precedence over the aforementioned deletion obligations. The retention periods also begin at the end of the relevant year, i.e. on December 31.

A.5 Source of the personal data

The personal data processed by us originates primarily from the data subjects themselves, for example by them

• as a user of our website via the web browser and your end device (e.g. a PC, smartphone, tablet or notebook) transmit information, such as the IP address, to us or our web server,
• interested parties can request information material or an offer from us,
• as customers place an order with us or conclude a contract with us,
• request information material, press releases, statements, etc. as a representative of the press,
• as suppliers supply us with goods as agreed or as business partners provide us with services and the like.

Only in very exceptional cases can the personal data processed by us also originate from third parties, for example if a person is acting on behalf of a third party.

A.6 Recipients or categories of recipients of the personal data

Your personal data will only be passed on or transmitted to third parties if this is absolutely necessary and permissible for the respective purpose. We explain to whom we pass on data and for what purpose in each case in connection with the data processing described below or, in the case of transfers to other EU countries, additionally at the end of section B. of this data protection notice.

Categories of recipients can generally be

• Service provider,
• Suppliers, business partners,
• Tax consultant.

A.7 Contact via e-mail and telephone call

You can contact us via various channels if you wish. You will also find an e-mail address and telephone number on the website. Even if you write us an e-mail or call us, we will inevitably process your personal data. This is because we or our systems store at least the personal data transmitted with the e-mail or your telephone.

The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.

Purposes of data processing: The processing of personal data when transmitted by e-mail or telephone serves us to process your contact and your request. We absolutely need your e-mail address or your telephone number in order to be able to reply at all. This is also the legitimate interest in processing the data.

Legal basis for data processing: The legal basis for the processing of the data is in the presence of consent in accordance with Art. 6 para. 1 letter a) GDPR, which you have given by actively contacting us.
If the contact or your request is aimed at the conclusion of a contract, the legal basis for the processing is Art. 6 para. 1 letter b) GDPR (implementation of pre-contractual measures).

Duration of storage: The data is deleted as soon as it is no longer required for the purpose for which it was collected.

For personal data sent by email, this is the case when the respective conversation with you has ended, e.g. your request or concern has been clarified and we have then waited for a waiting period of up to 3 months to see whether we may need to refer back to your request or the details of the communication. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

When you make an incoming telephone call or an outgoing call to us, your telephone number or your name/company name stored with your telephone provider as well as the date and time of the call are stored in our telephone system in a so-called ring buffer, which overwrites the oldest data with new data. As a rule, this leads to automatic deletion of the data in the telephone system after approx. 3-4 months.

The communication may be subject to a retention obligation under commercial or tax law, which then takes precedence (see the explanations above under “A.4 General information on data erasure and storage duration”).

Possibility of objection and removal: You have the option at any time to revoke your consent to the processing of personal data or to object to further data processing due to legitimate interest (see the reference to the special right of objection under C. of this data protection information). In such a case, the conversation cannot be continued.
The revocation of consent or the objection to further data processing is made possible by informal notification to us (e.g. by e-mail).
All personal data stored in the course of establishing contact will be deleted in this case.

A.8 Handling of applicant data

We offer you the opportunity to apply to us (e.g. by e-mail or post). In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that your data will be collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.

Scope and purpose of data collection
If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-new under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application. If the application is successful, the data submitted by you
will be stored in our data processing systems on the basis of § 26 BDSG-new and Art. 6 para. 1 lit. b GDPR for the purpose of implementing the employment relationship.

Data retention period
If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. The retention serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies. Longer storage may also take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if statutory retention obligations prevent deletion.

Inclusion in the applicant pool
If we do not make you a job offer, you may have the option of being included in our applicant pool. If you are accepted, all documents and information from your application will be transferred to the applicant pool in order to contact you in the event of suitable vacancies. Inclusion in the applicant pool takes place exclusively on the basis of your express consent (Art. 6 para. 1 lit. a GDPR).
Giving consent is voluntary and is not related to the current application process. The data subject can withdraw their consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, provided there are no legal grounds for retention. The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given. 

A.9 Hosting

This website is hosted by an external service provider: Raidboxes, Hafenstraße 32, 48153 Münster. The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website. The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.

B.1 Provision of the website and creation of log files

For technical reasons, our system automatically collects data and information each time the website is accessed. This is stored in the server log files. These are

• Date and time of access,
• URL (address) of the referring website (referrer),
• Web pages that are accessed by the user’s system via our website,
• Screen type, screen resolution of the user,
• Retrieved file(s) and message about the success of the retrieval,
• the user’s Internet service provider,
• Browser type and browser version,
• Operating system and version,
• the anonymized IP address and the user’s Internet service provider.

This data is processed separately from other data. This data is not processed together with other personal data of the user. It is not possible for us to assign this data to a specific person.

Purposes of data processing: The temporary processing of the data by the system is necessary to enable the content of our website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
Data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimize our offer and the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

Legal basis for data processing: The temporary storage of the data and the log files takes place on the legal basis of Art. 6(1)(f) GDPR. Our overriding legitimate interest in this data processing lies in the aforementioned purposes.

Duration of storage: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

Possibility of objection and removal: The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object to this. However, the user can stop using the website at any time and thus prevent the further collection of the aforementioned data.

B.2 Contact forms and e-mail contact

Contact forms are available on our website for various purposes (contacting us, support, request for quotation), which can be used to contact us electronically. If you use this option, the data entered in the input mask will be transmitted to us and stored. The subsequent data processing generally relates to the respective topic linked to the contact form.

Mandatory fields are clearly marked with an asterisk. The data that we request as mandatory fields is required in order to process/respond to your request.

The following data is also stored at the time the message is sent:

• The IP address of the user,
• Date and time of dispatch.

As part of the sending process, you will be informed again about data processing and referred to this privacy policy.

Alternatively, you can contact us via the e-mail address provided. In this case, the personal data transmitted with the e-mail will be stored. The information under A.7 applies accordingly.

Purposes of data processing: The processing of the personal data from the input mask serves us to process the establishment of contact and to process your request. If you contact us, this also constitutes our legitimate interest in processing the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

Legal basis for data processing: The legal basis for the processing of the data is our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR. The legitimate interest lies in the fact that we need to process your data in order to be able to process and, if necessary, respond to your inquiry or contact.
If the contact or your inquiry is aimed at the conclusion of a contract, the legal basis for the processing is Art. 6 para. 1 letter b) GDPR (implementation of pre-contractual measures).
The legal basis for the processing of the other personal data processed during the sending process is our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR, which in this case is to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage: The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.
For the personal data from the input screen of the contact form and that sent by email, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The communication may be subject to a retention obligation under commercial or tax law, which then takes precedence (see above under “A.4 General information on data erasure and storage duration”).
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Possibility of objection and removal: You have the option to object to further data processing at any time on the grounds of legitimate interest (see reference to special right of objection under C. of this data protection notice). In such a case, the conversation cannot be continued.
The objection to further data processing is made possible by informal notification to us (e.g. by e-mail).
All personal data stored in the course of establishing contact will be deleted in this case.

B.3 Use of cookies by us and by third-party providers

When you access individual pages, we use so-called cookies. These are small text files that are stored on your end device (PC, smartphone, tablet, etc.). When you access a website, a cookie may be stored by your browser. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
In addition, third-party cookies may be used. These cookies may also enable an analysis of the user’s surfing behavior. If this is the case, we will inform you about this separately in this privacy policy under B. directly in the information about the respective third-party tools (such as analysis tools, plugins, etc.).
When you visit our website, you will be informed about the use of cookies for analysis purposes and your consent to the processing of the personal data used in this context will be obtained.

Cookies are used to make our website usable or to make it more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. The following data is temporarily stored in the cookies:

• Language settings

Our content management system Contao also uses technically necessary cookies to enable functions such as the shopping cart function, logging into the administrator area or, if applicable, writing and posting comments for registered visitors (if activated by us). The setting of cookies is technically necessary in these cases in order to recognize logged-in visitors.

Purpose of data processing: The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles.
Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer. We describe further details in connection with the description of the respective analysis tool at the bottom of this privacy policy.

Legal basis for data processing: The legal basis for the processing of personal data using technically necessary cookies is Art. 6(1)(f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.
The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 (1) (a) GDPR if the user has given consent to this, and otherwise a legitimate interest on our part based on the purposes mentioned in accordance with Art. 6 (1) (f) GDPR.

Duration of storage: The technically necessary cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). Analysis cookies generally remain on your end device and enable us or our service providers (third-party providers) to recognize your browser on your next visit (persistent cookies).

Objection and removal options: Cookies are stored on your computer and transmitted from it to our website. You therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. Such a “do-not-track” setting of your browser is understood by us as an objection to the further collection and use of your personal data. Note: If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

B.4 Use of the Stetic analysis tool

This website uses Stetic, a statistics and analysis service for websites. This software uses “cookies”, text files that are stored on your computer and enable us to analyze your use of the website.

The information collected by the cookie about your use of our website (including your anonymized IP address) is transferred to an external server, possibly abroad, and stored there. Stetic will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

Stetic may also transfer information to third parties where required to do so by law, or where such third parties process the information on Stetic’s behalf.
Stetic has undertaken not to associate your IP address with any other data held by the company. You can prevent the installation of cookies by selecting the appropriate settings in your browser software. However, please note that if you do this you may not be able to use the full functionality of this website.
The data collected by Stetic will not be used to personally identify the visitor to this website without the separate consent of the person concerned.

Purpose of data processing: The purpose of using the analysis tool or analysis cookies is to improve the quality of our website and its content. This enables us to find out how the website is used and to constantly optimize our offering.

Legal basis for data processing: The legal basis for the processing of personal data is the consent you have given in accordance with Art. 6 (1) (a) GDPR.

Duration of storage: The cookies are stored on the user’s computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Objection and removal option: You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can also prevent the storage and processing of your data for the future by objecting to the collection of your anonymized visitor data at the URL //www.stetic.com/optout.html?pid=79745 .

B.5 Use of YouTube videos on the website

Java script code from the company YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA (hereinafter YouTube) is loaded on our website. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA. YouTube is an Internet video portal that allows video clips to be posted free of charge and other users to view, rate and comment on them. We use YouTube to embed videos on our website. If you have activated JavaScript in your browser and have not installed a JavaScript blocker, your browser may transmit personal data to YouTube.

By accessing a page on which a YouTube video has been integrated, the user’s internet browser will automatically download the relevant video from YouTube and play it.
As part of this process, YouTube and therefore also Google receive information about which specific sub-page of our website is visited by the user. If the user is logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website the user is visiting when a subpage containing a YouTube video is accessed. This information is collected by YouTube and Google and assigned to the respective YouTube account of the user.
YouTube and Google always receive information that the respective user has visited our website if the user is logged in to YouTube at the same time as accessing our website; this takes place regardless of whether the person concerned clicks on a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google, you can prevent the transmission by logging out of your YouTube account before accessing our website.

YouTube’s privacy policy provides information about the collection, processing and use of personal data by YouTube and Google and can be accessed here: http://www.google.de/intl/de/policies/privacy

Purpose of data processing: The purpose of embedding YouTube videos is to be able to present multimedia content to the user on the website and thereby enhance and improve the user experience on the website. As this makes our website more attractive, the use of YouTube also serves our marketing and advertising purposes.

Legal basis for data processing: The legal basis for the processing of personal data is Art. 6 (1) (f) GDPR, i.e. a legitimate interest on our part. Our legitimate interest lies in the above-mentioned purposes.

Duration of storage: As a user, you can decide for yourself about the execution of the Java Script code required for the tool via your browser settings. By changing the settings in your Internet browser, you can deactivate or restrict the execution of Java Script. Note: If the execution of Java Script is deactivated, it may no longer be possible to use all the functions of the website to their full extent.

Objection and removal option: You can prevent the execution of the Java Script code required for the tool by setting your browser software accordingly; we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
To prevent the execution of Java Script code altogether, you can also install a Java Script blocker, such as the browser plug-in NoScript (e.g. www.noscript.net or www.ghostery.com).
Note: If the execution of Java Script is deactivated, it may no longer be possible to use all the functions of the website to their full extent.

B.6 Encryption of the website and communication

The website and thus the data transmissions via it are encrypted using the https protocol with TLSv1.2 or TLSv1.1.

E-mail communication between the web server and our internal mail servers takes place exclusively with TLSv1.2 transport encryption.

B.7 Transfer of personal data to a third country (other EU countries)

There is an intention to transfer personal data to the United States of America (USA). There is an adequacy decision of the EU Commission, which states that personal data may be transferred to the USA if the recipient has acceded to the “EU-U.S. Privacy Shield”. Personal data is therefore only transferred to recipients in the USA who have demonstrably acceded to the EU-U.S. Privacy Shield.

The intention relates specifically to the transfer of data to the following companies:

• YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA as the provider of an Internet video portal from which videos are integrated on our website. YouTube, LLC is a subsidiary of Google, Inc.

The aforementioned companies have joined the EU-U.S. Privacy Shield and have submitted to a level of regulation comparable to the EU level of data protection. The transfer of data to these companies is therefore generally permitted. Furthermore, in the case of order processing, corresponding order processing contracts have been concluded with these companies to secure the data and our rights to issue instructions.

C. Rights of data subjects

If your personal data is processed, you are the “data subject” and you have the following rights vis-à-vis us as the controller:

C.1 Right to information

You have the right to obtain confirmation from us free of charge as to whether we are processing personal data concerning you. If this is the case, you have a right to information about this personal data and to further information, which you can find in Art. 15 GDPR. You can contact us by post or email for this purpose.

C.2 Right to rectification

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. You also have the right – taking into account the above-mentioned purposes of processing – to request the completion of incomplete personal data, including by means of a supplementary declaration. You can contact us by post or e-mail for this purpose.

C.3 Right to erasure

You have the right to demand the immediate deletion of personal data concerning you if one of the conditions of Art. 17 GDPR is met. You can contact us by post or email to exercise this right.

C.4 Right to restriction of processing

You have the right to demand that we restrict processing if one of the requirements of Art. 18 GDPR applies. You can contact us by post or email to do this.

C.5 Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed of these recipients by the controller.

C.6 Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where the requirements of Art. 20 GDPR are met. You can contact us by post or email for this purpose.

C.7 Right to object to processing based on legitimate interest and to direct marketing

If, in exceptional cases, we process personal data on the basis of Art. 6(1)(f) GDPR (i.e. on the basis of legitimate interests), you have the right to object to the processing of your personal data by us at any time on grounds relating to your particular situation. If we cannot demonstrate compelling legitimate grounds for further processing which override your interests, rights and freedoms, or if we process your data for direct marketing purposes, we will no longer process your data (see Art. 21 GDPR). You can contact us by post or by e-mail for this purpose.

A technical procedure that you use, e.g. clear technical information that your web browser transmits to us (“do-not-track” message), is also considered an objection in this sense.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

C.8 Right of withdrawal in the case of consent given

You have the right to revoke your consent to the collection and use of personal data at any time with effect for the future. To do so, you can contact us by post or e-mail. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

C.9 Automated decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Unless the decision is necessary for entering into, or the performance of, a contract between you and us, it is authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or it is based on your explicit consent.
We do not carry out any such automated decision-making.

C.10 Voluntary nature of the provision of data

If the provision of personal data is required by law or contract, we will always point this out when collecting the data. In some cases, the data we collect is required for the conclusion of a contract, namely if we would otherwise not be able to fulfill our contractual obligation to you, or not sufficiently. You are under no obligation to provide the personal data. However, failure to provide this data may mean that we are unable to provide or offer a service, action, measure or similar requested by you or that it is not possible to conclude a contract with you.