Data Privacy Declaration
Thank you for visiting our website, www.young-actuaries.eu, and for your interest in our association.
The protection of your personal data, such as your date of birth, name, phone number, address, etc. is very important to us.
The purpose of this Data Privacy Declaration is to inform you about the processing of your personal data which we collect from you when you visit our website. Our data protection practices comply with the statutory regulations of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following Data Privacy Declaration fulfils the informational obligations required under the GDPR. These are listed, for instance, in Art. 13 and Art. 14 et seqq. GDPR.
Controller
The controller in the sense of Art. 4 no. 7 GDPR is the individual who makes decisions either alone or jointly with others regarding the purposes and means of processing personal data.
The controller for our website is the:
Deutsche Aktuarvereinigung (DAV) e.V.
Hohenstaufenring 47 – 51
50674 Cologne
Germany
Email: contact@young-actuaries.eu
Tel.: +49 (0) 221 / 912 554-0
Fax: +49 (0) 221 / 912 554-44
Contact information for the Data Protection Officer
We have appointed a Data Protection Officer in accordance with Art. 37 GDPR. You can contact our Data Protection Officer at:
TÜV Rheinland i-sec GmbH
Dudweilerstraße 17
66117 Saarbrücken
Germany
Email: datenschutz@aktuar.de
Provision of the website and creation of log files
Each time our website is accessed, our system automatically collects data and information from the accessing device (such as a computer, cell phone, tablet, etc.).
What personal data is collected, and to what extent is it processed?
- Information regarding the browser type and version used;
- The operating system of the accessing device;
- Host name of the accessing computer;
- The IP address of the accessing device;
- The date and time of access;
- Websites and resources (images, files, other page content) that was accessed on our website;
- Websites from which the user’s system accessed our website (referrer tracking);
- Notification whether the access was successful;
- Transmitted quantity of data
This data is stored in our system log files. This data is not stored alongside personal data of a specific user, so it is not possible to identify individual page visitors.
Legal basis for processing personal data
Art. 6 para. 1 lit. f GDPR (legitimate interest). We have a legitimate interest in ensuring that the purpose described in the following is achieved.
Purpose of data processing
It is necessary to temporarily (automatically) store the data for the website processes, in order to make it possible to deliver the website. Personal data is also stored and processed for the purpose of maintaining the compatibility of our website for all visitors if possible, as well as to combat misuse and correct faults. To do so, it is necessary to log the technical data of the accessing computer, in order to react as quickly as possible to display errors, attacks against our IT systems and/or errors in the function of our website. In addition, we use the data to optimise the website and to ensure the general security of our information technology systems.
Duration of storage
The aforementioned technical data is deleted once it is no longer needed to ensure the compatibility of the website for all visitors; at the latest 3 months after our website is accessed.
Objection and deletion options
You can object to the processing at any time in accordance with Art. 21 GDPR and request that data be deleted according to Art. 17 GDPR. The bottom section of this Data Privacy Declaration provides information on the rights to which you are entitled and how to assert them.
Special functions of the website
Our website offers you a variety of functions; personal data is collected, processed, and saved if you use these functions. We explain what happens to this data in the following section:
Login area
- What personal data is collected, and to what extent is it processed?
We will process the registration and login data you enter on our page to fulfil the purpose indicated below.
- Legal basis for processing personal data
Art. 6 para. 1 lit. b GDPR (carrying out (pre)contractual measures)
- Purpose of data processing
You can use a separate login area on our website. You must enter your login details (email or user name and password0 in the relevant form so that we can review your authorization to use the protected area or the protected documents.
- Duration of storage
The collected data will be stored for as long as you maintain a user account with us.
- Objection and deletion options
The bottom section of this Data Privacy Declaration provides information on the rights to which you are entitled and how to assert them.
- Requirement to provide personal data
Use of the login area on our page is required by contract in order to use the secure area. The content protected by the login area cannot be used without entering personal data. If you would like to use our login area, you must complete the fields designated as mandatory fields (user name and password). You must have a user account in order to enter the data. You cannot log in if the data you enter is incorrect. If you do not enter data or if you enter incorrect data, you will not be able to use the secure area. However, you will be able to continue using the rest of the page without logging in.
Newsletter registration form
- What personal data is collected, and to what extent is it processed?
When you register for the newsletter on our website, we receive the email address you enter into the registration field, as well as any other contact information you share with us via the newsletter registration form.
- Legal basis for processing personal data
Art. 6 para. 1 lit. a GDPR (consent through action or conduct that indicates clear confirmation)
- Purpose of data processing
We only use the data collected in the registration screen for our newsletter in order to send our newsletter, through which we inform recipients about all of our services and new products. After you register, we will send you a confirmation email that contains a link you must click in order to complete your registration for our newsletter (double opt-in).
- Duration of storage
You can unsubscribe from our newsletter at any time by clicking the unsubscribe link which is contained in every newsletter. We will delete your data promptly after you unsubscribe. Likewise, we will promptly delete your data if you do not complete your registration. We reserve the right to delete data without providing grounds, and without informing you either in advance or subsequently.
- Rights of revocation and removal
You can revoke your consent at any time in accordance with Art. 7 para. 3 GDPR. However, any processing carried out before your revocation will remain unaffected. Please refer to the overview at the end of this Data Privacy Declaration for a description of further rights.
- Requirement to provide personal data
If you would like to take advantage of our newsletter, you must complete the fields indicated as required, and must confirm your e-mail address for us by clicking the double opt-in link. Information provided to register for the newsletter is not necessary to enter into a contract with us or required by law. It is used only to send the newsletter. If you do not provide the necessary information, unfortunately, we will not be able to provide you with our newsletter.
Statistical analysis of visits to this web page – web tracker
We collect, process, and store the following data when a user accesses this website or individual files on the website: the IP address, website from which the file was accessed, name of the file, date and time of access, quantity of data transmitted and notification that access was successful (so-called web log). We only use this access information in a non-personalised form in order to continuously improve our website, and for statistical purposes. We also use the following web tracker in order to analyse visits to this web page:
- Google Tag Manager
- What personal data is collected, and to what extent is it processed?
We use a service provided by the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google Tag Manager) on our page. Google Tag Manager provides a technical platform in order to implement and manage other web services and web tracking programs with so-called “tags” in a pooled manner. Google Tag Manager stores cookies on your computer in this context and analyses your surfing behaviour if web tracking tools are implemented using Google Tag Manager (so-called “tracking”). This data, transmitted by individual tags integrated into Google Tag Manager, is combined, stored, and processed by Google Tag Manager in a uniform user interface. All of the integrated “tags” are listed separately in this Data Privacy Declaration. Further information on data protection with respect to the tools integrated into Google Tag Manager is provided in these individual sections of this Data protection. If you use our website with active integration of tags from Google Tag Manager, data such as your IP address and information on your user activities is transmitted to a server belonging to the company Google Ireland Limited. The regulations in the respective section of this Data Privacy Declaration apply to the web services integrated via Google Tag Manager. The tracking tools used in Google Tag Manager ensure, through IP anonymisation of the source code, that the IP address of Google Tag Manager is anonymised before it is transmitted. This means that Google Tag Manager is only able to record IP addresses in anonymised form (so-called IP masking).
- Legal basis for processing personal data
In accordance with Art. 6 para. 1 lit. a GDPR, the legal basis for data processing is your consent to our notification banner on the use of cookies and web tracking (consent through clear confirmation or conduct).
- Purpose of data processing
Google will use the information collected using Google Tag Manager on our behalf in order to analyse your visit to this website, create reports on website activities, and provide other services associated with use of the website and use of the internet to us.
- Duration of storage
Google will store the data relevant to the function of Google Tag Manager for as long as necessary to fulfil the booked web service. Data is collected and stored anonymously. If data is personal data, it will be deleted promptly if it is not subject to any statutory retention period. It will be deleted in any case after the end of the retention period.
- Objection and deletion options
You can prevent personal data from being collected and forwarded to Google (in particular your IP address), as well as prevent the processing of this data by Google by deactivating the execution of script code in your browser, installing a script blocker on your browser, or activating the “Do not track” setting on your browser. You can also prevent Google from collecting and processing the data generated by the Google cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link http://tools.google.com/dlpage/gaoptout?hl=de. Google’s security and data privacy policies are available at https://policies.google.com/privacy.
- Google Analytics
- Scope of processing of personal data
We use a web tracking service provided by the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google Analytics) on our website. In the course of web tracking, Google Analytics uses cookies that are saved on your computer and that facilitate analysis of your use of our website and your surfing behaviour (so-called tracking). We carry out this analysis based on the Google Analytics tracking service, in order to continuously optimise our website and improve its availability. If you use our website, data such as your IP address and information on your user activities is transmitted to a server belonging to the company Google Ireland Limited. We carry out this analysis based on the Google tracking service, in order to continuously optimise our website and improve its availability. We also require web tracking for security reasons. Web tracking makes it possible for us to track whether third parties are attacking our website. The information provided by the web tracker allows us to take effective counter-measures and protect personal data processed by us against these cyber attacks. Because IP anonymisation is activated in the Google Analytics tracking code on this website, Google Analytics anonymises your IP address before transmission. This website uses a Google Analytics tracking code with the extension gat._anonymizeIp(); in order to ensure IP addresses are always collected in an anonymised manner (so-called IP masking).
- Legal basis for processing personal data
In accordance with Art. 6 para. 1 lit. a GDPR, the legal basis for data processing is your consent to our notification banner on the use of cookies and web tracking (consent through clear confirmation or conduct).
- Purpose of data processing
Google will use this information on our behalf in order to analyse your visit to this website, create reports on website activities, and provide other services associated with use of the website and use of the internet to us. We also require web tracking for security reasons. Web tracking makes it possible for us to track whether third parties are attacking our website. The information provided by the web tracker allows us to take effective counter-measures and protect personal data processed by us against these cyber attacks.
- Duration of storage
Google will store the data relevant to the provision of web tracking for as long as necessary to fulfil the booked web service. Data is collected and stored anonymously. If data is personal data, it will be deleted promptly if it is not subject to any statutory retention period. It will be deleted in any case after the end of the retention period.
- Rights of objection and deletion
You can prevent personal data from being collected and forwarded to Google (in particular your IP address), as well as prevent the processing of this data by Google by deactivating the execution of script code in your browser or activating the “Do not track” setting on your browser. You can also prevent Google from collecting and processing the data generated by the Google cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de). Google’s security and data privacy policies are available at https://policies.google.com/privacy?hl=de.
- usercentrics
On our website, we use the usercentrics service provided by Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, email: contact@usercentrics.com, Website: https://usercentrics.com/. Personal data is transmitted and processed exclusively on servers within the European Union.
Art. 6 para. 1 lit. c GDPR is the legal basis for transmission and processing. Use of the service supports us in fulfilling our legal obligations.
By integrating usercentrics, we fulfil our legal obligation to carry out consent management, which is required when using cookies.
Please see the end of this Data Privacy Declaration for more information on the rights to which you are entitled with respect to this processing.
Further information on how the transmitted data is handled is available in the provider’s Data Privacy Declaration at https://usercentrics.com/de/datenschutzerklaerung/.
The provider also offers an opt-out option at https://usercentrics.com/de/datenschutzerklaerung/.
Integration of external web services and processing of data outside of the EU
We use active content from external providers on our website, so-called web services. When you access our website, these external providers may receive personal data on your visit to our page. It is possible that data may be processed outside of the EU. You can prevent such processing by installing a browser plug-in designed for this purpose, or by deactivating the execution of scripts on your browser. This may restrict the functions of websites you visit.
We use the following external web services:
- Doubleclick
On our website, we use the service Doubleclick, provided by the company Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: http://www.google.com/. In some cases, data is processed in a third country for which there is no Adequacy decision by the European Commission. Therefore, it is not possible to ensure the level of protection commonly provided under the GDPR during transmission, since it is possible that officials or other parties in the third country may access the collected data.
Your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, provided on this website, serves as the legal basis for transmitting the personal data.
DoubleClick is a service from Google used to offer and deliver digital advertisements online. It allows us to display customised advertisements to our page visitors.
Personal data may be transmitted to servers belonging to the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA in the course of contract processing.
You can revoke your consent at any time. Further information on how to revoke your consent is provided either at the time consent is granted, or at the end of this Data Privacy Declaration.
Further information on how the transmitted data is handled is available in the provider’s Data Privacy Declaration at https://policies.google.com/privacy.
On our website, we use the service Google, provided by the company Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: http://www.google.com/. In some cases, data is processed in a third country for which there is no Adequacy decision by the European Commission. Therefore, it is not possible to ensure the level of protection commonly provided under the GDPR during transmission, since it is possible that officials or other parties in the third country may access the collected data.
Your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, provided on this website, serves as the legal basis for transmitting the personal data.
We use Google in order to load other Google services on the website.
Personal data may be transmitted to servers belonging to the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA in the course of contract processing.
You can revoke your consent at any time. Further information on how to revoke your consent is provided either at the time consent is granted, or at the end of this Data Privacy Declaration.
Further information on how the transmitted data is handled is available in the provider’s Data Privacy Declaration at https://policies.google.com/privacy.
- Google APIs
On our website, we use the service Google APIs, provided by the company Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: http://www.google.com/. In some cases, data is processed in a third country for which there is no Adequacy decision by the European Commission. Therefore, it is not possible to ensure the level of protection commonly provided under the GDPR during transmission, since it is possible that officials or other parties in the third country may access the collected data.
Your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, provided on this website, serves as the legal basis for transmitting the personal data.
We use Google APIs in order to load other Google services on the website. Google APIs are a collection of interfaces for communication between the different Google services that are used on our website.
The service or we collect the following data for the purpose of processing itself: IP address
Personal data may be transmitted to servers belonging to the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA in the course of contract processing.
You can revoke your consent at any time. Further information on how to revoke your consent is provided either at the time consent is granted, or at the end of this Data Privacy Declaration.
Further information on how the transmitted data is handled is available in the provider’s Data Privacy Declaration at https://policies.google.com/privacy.
- Google Fonts
On our website, we use the service Google Fonts, provided by the company Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: http://www.google.com/. In some cases, data is processed in a third country for which there is no Adequacy decision by the European Commission. Therefore, it is not possible to ensure the level of protection commonly provided under the GDPR during transmission, since it is possible that officials or other parties in the third country may access the collected data.
Your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, provided on this website, serves as the legal basis for transmitting the personal data.
The service Google Fonts is used to load fonts to our website, in order to display a visually improved version of the page to you.
Personal data may be transmitted to servers belonging to the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA in the course of contract processing.
You can revoke your consent at any time. Further information on how to revoke your consent is provided either at the time consent is granted, or at the end of this Data Privacy Declaration.
Further information on how the transmitted data is handled is available in the provider’s Data Privacy Declaration at https://policies.google.com/privacy.
- Google Maps
- What personal data is collected, and to what extent is it processed?
We use a map service provided by the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google Maps) on our website. Google Maps is integrated on the website via the Google API, in order to visualise location data and display it in map form. For technical reasons, Google Maps must process your IP address in order to display the map. The regulations in the respective section of this Data Privacy Declaration apply to the other web services integrated via Google APIs.
- Legal basis for processing personal data
Art. 6 lit. f GDPR (legitimate interest). We have a legitimate interest in visualising and displaying location information to you in a manner customarily used online.
- Purpose of data processing
Google will use the information collected via Google Maps on our behalf to display the map to you. You can use Google Maps to find us more easily and quickly than using a simple, non-interactive map.
- Duration of storage
Google will store the data relevant to the function of Google Maps for as long as necessary to fulfil the booked web service. Data is collected and stored anonymously. If data is personal data, it will be deleted promptly if it is not subject to any statutory retention period. It will be deleted in any case after the end of the retention period.
- Objection and deletion options
You can prevent personal data from being collected and forwarded to Google (in particular your IP address), as well as prevent the processing of this data by Google by deactivating the execution of script code in your browser, installing a script blocker on your browser, or activating the “Do not track” setting on your browser. Google’s security and data privacy policies are available at https://policies.google.com/privacy.
- Joint processing
We have concluded a contract for joint processing with Google with respect to Google Maps. The content of this contract is provided at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.
- Gstatic
On our website, we use the service Gstatic, provided by the company Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: http://www.google.com/. In some cases, data is processed in a third country for which there is no Adequacy decision by the European Commission. Therefore, it is not possible to ensure the level of protection commonly provided under the GDPR during transmission, since it is possible that officials or other parties in the third country may access the collected data.
Your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, provided on this website, serves as the legal basis for transmitting the personal data.
Gstatic is a service used by Google to access statistical content, in order to reduce bandwidth usage and load required catalogue files in advance.
Personal data may be transmitted to servers belonging to the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA in the course of contract processing.
You can revoke your consent at any time. Further information on how to revoke your consent is provided either at the time consent is granted, or at the end of this Data Privacy Declaration.
Further information on how the transmitted data is handled is available in the provider’s Data Privacy Declaration at https://policies.google.com/privacy.
- MyFonts Counter
We use the service MyFonts Counter on our website, which is provided by the company Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, 01801 Woburn, United States. In some cases, data is processed in a third country for which there is no Adequacy decision by the European Commission. Therefore, it is not possible to ensure the level of protection commonly provided under the GDPR during transmission, since it is possible that officials or other parties in the third country may access the collected data.
Your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, provided on this website, serves as the legal basis for transmitting the personal data.
This service is an analytic tool we can use to monitor surfing behaviour on our website.
You can revoke your consent at any time. Further information on how to revoke your consent is provided either at the time consent is granted, or at the end of this Data Privacy Declaration.
Further information on how the transmitted data is handled is available in the provider’s Data Privacy Declaration at http://www.myfonts.com/info/legal/#Privacy.
The provider also offers an opt-out option at http://www.myfonts.com/info/legal/#Privacy.
- Website Check Seal
We use the service Website Check Seal on our website, provided by the company Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, Email: support@website-check.de, Website: http://www.website-check.de/. Personal data is transmitted and processed exclusively on servers within the European Union.
According to Art. 6 para. 1 lit. f GDPR, our legitimate interest in processing is the legal basis for transmitting personal data. We have a legitimate interest in achieving the following purpose.
The script from Website-Check GmbH is used for technical integration of the Website Check Seal. We use this seal as a way to show we take the issue of data protection very seriously. Data is transmitted to Website-Check GmbH in order to deliver and display the seal on our website.
You have a right to object to the data processing as indicated in Art. 21. Further information is provided at the end of this Data Privacy Declaration.
Further information on how the transmitted data is handled is available in the provider’s Data Privacy Declaration at https://www.website-check.de/datenschutzerklaerung/.
- YouTube
On our website, we use the service YouTube, provided by the company Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: http://www.google.com/. In some cases, data is processed in a third country for which there is no Adequacy decision by the European Commission. Therefore, it is not possible to ensure the level of protection commonly provided under the GDPR during transmission, since it is possible that officials or other parties in the third country may access the collected data.
Your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, provided on this website, serves as the legal basis for transmitting the personal data.
The YouTube service is used to integrate videos from the YouTube platform on our website.
Personal data may be transmitted to servers belonging to the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, USA in the course of contract processing.
You can revoke your consent at any time. Further information on how to revoke your consent is provided either at the time consent is granted, or at the end of this Data Privacy Declaration.
Further information on how the transmitted data is handled is available in the provider’s Data Privacy Declaration at https://policies.google.com/privacy.
- cookiebot.com
We use the service cookiebot.com on our website, which is provided by the company Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. Personal data is transmitted and processed exclusively on servers within the European Union.
Art. 6 para. 1 lit. c GDPR is the legal basis for transmission and processing. Use of the service supports us in fulfilling our legal obligations.
By integrating Cookiebot, we fulfil our legal obligation to carry out consent management, which is required when using cookies.
Please see the end of this Data Privacy Declaration for more information on the rights to which you are entitled with respect to this processing.
Further information on how the transmitted data is handled is available in the provider’s Data Privacy Declaration at https://www.cookiebot.com/de/privacy-policy/.
Notification on the use of cookies
- What personal data is collected, and to what extent is it processed?
We integrate and use cookies on different pages, in order to facilitate certain functions of our website and integrate external web services. So-called “cookies” are small text files which your browser can store on your access device. These text files contain a characteristic character string that uniquely identifies your browser when you return to our website. The process for storing a cookie file is also called “setting a cookie”. Cookies can be set either by the website itself or by external web services. Our website or the external web services use the cookies in order to maintain the full functionality of our website, improve user-friendliness, or pursue the purpose associated with your consent. The cookie technology allows us to identify individual visitors based on pseudonyms, such as individual or random IDs, so that we can offer more customised services. For details, see the following table.
- Legal basis for processing personal data
If cookies are processed based on consent in accordance with Art. 6 para. 1 lit. a GDPR, this consent is also considered consent in the sense of Sec. 25 para. 1 TTDSG (Telecommunications and Telemedia Data Protection Act) for setting cookies on the user’s device. If another legal basis in accordance with the GDPR is indicated (such as to fulfil a contract or fulfil statutory obligations), then the cookie is stored or set based on an exception according to Sec. 25 para. 2 TTDSG. This is always the case “if the sole purpose of storing information in the end user’s device, or the sole purpose of access to information already stored in the end user’s device is to complete the transmission of a message via the public telecommunication network” or “if the storage of information in the end user’s device or access to information already stored in the end user’s device is absolutely necessary for the provider of a telemedia service to provide a telemedia service which has been expressly requested by the user”. The cookie table provided later in this section indicates which legal basis is relevant.
- Purpose of data processing
Our website or the external web services use the cookies in order to maintain the full functionality of our website, improve user-friendliness, or pursue the purpose associated with your consent. The cookie technology allows us to identify individual visitors based on pseudonyms, such as individual or random IDs, so that we can offer more customised services. For details, see the following table.
- Duration of storage
Our cookies are stored until they are deleted in your browser or, in the case of session cookies, until the end of the session. For details, see the following table.
- Right to object and right to remove cookies
You can change your browser settings so as to generally prevent cookies from being set. You can then decide whether to accept cookies in each individual case, or to generally accept all cookies. Cookies can be used for different purposes, for instance to detect whether your access device is already connected to our website (persistent cookies) or to store the last viewed pages (session cookies). If you have granted us your express permission to process your personal data, you can revoke this consent at any time. Please note that this will not affect the legality of processing carried out based on this consent before it was revoked.
Data security and data protection, communication via e-mail
Your personal data is protected through technical and organisational measures during collection, storage, and processing, so that it is not accessible to third parties. We are not able to ensure complete data security when data is transmitted to our IT systems using unencrypted email communication; we recommend using encrypted communication methods or regular mail to send information that is subject to high secrecy requirements.
Right to information and requests for rectification – deletion & restriction of data – revocation of consent – right to object
Right to information
You have the right to request a confirmation as to whether we process your personal data. If this is the case, you have a right to receive confirmation regarding the information indicated in Art. 15 para. 1 GDPR, as long as this would not negatively impact the rights and freedoms of others (cf. Art. 15 para. 4 GDPR). We would also be happy to provide a copy of the data to you.
Right to rectification
According to Art. 16 GDPR, you have the right to have any personal data we may have saved incorrectly (such as your address, name, etc.) corrected at any time. You can also request that we add information to complete the data we have saved at any time. The data will promptly be adjusted accordingly.
Right to deletion
According to Art. 17 para. 1 GDPR, you have the right for us to delete your personal data we have collected if
- the data is either no longer required;
- the legal basis of processing has lapsed without replacement because you have revoked your consent;
- you have lodged an objection against the processing and there are no legitimate reasons for processing;
- your data has been processed illegally;
- a legal obligation requires us to delete the data, or the data was collected according to Art. 8 para. 1 GDPR.
The right shall not exist according to Art. 17 para. 3 GDPR if
- the processing is required to exercise your right to freedom of expression and information;
- your data was collected based on a legal obligation;
- the processing is necessary for reasons in the public interest;
- the data is required to assert, exercise, or defend against legal claims.
Right to restrict processing
According to Art. 18 para. 1 GDPR, in some cases you have the right to request that the processing of your personal data be restricted.
This is the case if
- you dispute the correctness of the personal data;
- the processing is illegal and you do not agree to deletion;
- the data is no longer required for the purpose of processing, however, the collected data is being used to assert, exercise, or defend against legal claims;
- an objection has been lodged against the processing according to Art. 21 para. 1 GDPR, but it is still unclear which party’s interests take precedence.
Right to revocation
If you have granted us your express consent to process your personal data (Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR), you can revoke this consent at any time. Please note that this will not affect the legality of processing carried out based on your consent before it was revoked.
Right to object
According to Art. 21 GDPR, you have the right to object to the processing of your personal data which has been collected based on Art. 6 para. 1 lit. f (within the framework of our legitimate interest) at any time. You only have this right if there are special circumstances that speak against the storage and processing.
How can you exercise your rights?
You can exercise your rights at any time by contacting us at:
Deutsche Aktuarvereinigung (DAV) e.V.
Hohenstaufenring 47 – 51
50674 Cologne
Germany
Email: contact@young-actuaries.eu
Tel.: +49 (0) 221 / 912 554-0
Fax: +49 (0) 221 / 912 554-44
Right to data portability
According to Art. 20 GDPR, you have the right to have your personal data transmitted by us. We will provide the data in a structured, commonly used and machine readable format. You can have the data transmitted either to yourself or to a controller named by you.
Upon request, we will provide the following data to you in accordance with Art. 20 para. 1 GDPR.
- Data collected based on express consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR;
- Data we received from you according to Art. 6 para. 1 lit. b GDPR in the framework of existing agreements;
- Data processed through an automated procedure.
We will transmit personal data directly to a controller named by you if it is technically feasible to do so. Please note that we are not permitted to transmit data that would interfere with the rights and freedoms of others according to Art. 20 para. 4 GDPR.
Right to submit complaints to a supervisory authority according to Art. 77 para. 1 GDPR
If you suspect that your data is being processed illegally on our website, you are certainly welcome to bring the matter before a court at any time. Other legal options are also available to you. Regardless of this, according to Art. 77 para. 1 GDPR, you are also entitled to contact a supervisory authority. According to Art. 77 GDPR, you have the right to submit complaints in the EU member state in which you live, work, or where the alleged violation took place. This means that you can select which supervisory authority to contact from the locations indicated above. The supervisory authority to which the complaint is submitted will then inform you regarding the status and results of your submission, including your options for legal remedy according to Art. 78 GDPR.
Prepared by:
© DURY LEGAL Rechtsanwälte – www.dury.de
© Website-Check GmbH – www.website-check.de