Data Privacy

1. General information on your rights

‘Data subject’ within the meaning of the EU General Data Protection Regulation (GDPR) is any natural person whose data is processed by the company or by a person authorised by the company.

As a data subject, you have the following rights when submitting a request:

• the right to give your consent as to whether data concerning you is being processed and, if so, the right to information about the data we have stored about you as well as further supplementary information about the processing purposes, data categories, recipients of data, storage period, origin of the data, existence of automated decision-making and, if the data is transferred outside the European Union, information about the appropriate guarantees and a free copy of the stored data (Art. 15 GDPR) 
• the right to rectification of inaccurate data (Art. 16 GDPR)
• the right to erasure of the data if there is no legal basis for further storage (Art. 17 GDPR)
• the right to restrict the processing of data to specific purposes (Art. 18 GDPR)
• the right to data portability (Art. 20 GDPR) and
• the right to object to the processing of your data (Art. 21 GDPR).
  
  

Any data processing is only lawful if it is legally authorised and the conditions of the law are met. These are determined by the EU General Data Protection Regulation and additionally by national laws. We will inform you of the respective legal basis when you make an enquiry. We expressly point out that cases are conceivable in which processing can be based on multiple, coexisting legal bases.

If the processing of your data is based on consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

2. Separate information on the right to object pursuant to Article 21 GDPR

Pursuant to Article 21(1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (processing for the purposes of the legitimate interests pursued by the controller or by a third party).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If the processing is carried out for the purpose of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising in accordance with Art. 21 para. 2 GDPR. 

3. Right to file a complaint

Finally, you have the right to contact our data protection officer at any time free of charge with a request for support or with information. This officer is obliged to maintain confidentiality with regard to your enquiry, insofar as it concerns the processing of your data and as long as you have not released them from their duty of confidentiality.

You can reach our data protection officer using the contact details above.

You also have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR if you believe that the processing of data concerning you violates data protection regulations. You can contact the data protection supervisory authority in your home country or, in Germany, the competent supervisory authority of the federal state in which you live. You can find a current overview of the contact details here: https://www.datenschutzkonferenz-online.de/datenschutzaufsichtsbehoerden.html

You can also contact the supervisory authority responsible for us directly:

Bavarian State Office for Data Protection Supervision
Promenade 18
915222 Ansbach
Tel.: 0981/180093-0
Fax: 0981/180093-800
E-Mail: poststelle@lda.bayern.de

4. Transfer and foreign reference

thriveGEO GmbH uses so-called processors within the meaning of Art. 4 No. 10 GDPR in compliance with the legal regulations for the processing of personal data in some areas. Forwarding and processing of the data by you therefore does not constitute a transfer within the meaning of Art. 4 No. 2 GDPR. Any other transfer to third parties will only take place for the purposes provided for by law.

5. Duration of data storage

The personal data collected by us will be stored until the expiry of the statutory retention obligation and then deleted, in particular if there is an obligation to store the data for a longer period of time in accordance with Article 6 para. 1 sentence 1 lit. c GDPR due to tax and commercial law retention and documentation obligations (from HGB, StGB or AO) or professional regulations or if you have consented to further storage in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

Subject to such retention obligations, data will be deleted when the purpose for which it was collected no longer applies.