You have got round to this page via a link, because you want to catch up on how we deal with (your) personal data. In order to comply with our duties to inform pursuant to Art. 12 et seqq. of the General Data Protection Regulation (GDPR), we are pleased to present our information on data protection below:

Who is responsible for data processing?

The controller within the meaning of data protection law is

INBAS GmbH
Herrnstraße 53
63067 Offenbach
info@remove-this.inbas.com

You will find additional information on our company, details on the persons authorised to represent and also on further means to get in touch with us in the site notice on our website: https://en.inbas.com/legal-notice.html

Which of your data do we process? And for what purposes?

The data received from you will, as a matter of principle, only be processed for exactly the purposes for which we received or gathered them. Any data processing for other purposes will only come into consideration if legally required under Art. 6 (4) GDPR. We will in this case naturally observe any duties to inform pursuant to Art. 13 (3) GDPR and Art. 14 (4) GDPR.

What is the legal basis for this?

Generally, the legal basis for the processing of personal data is Art. 6 GDPR, provided that no additional specific legal provisions exist. Particularly the following options may in this respect come into consideration:

• Consent (Art. 6 (1) lit. a) GDPR)
• Data processing for the performance of contracts (Art. 6 (1) lit. b) GDPR)
• Data processing based on a balancing of interests (Art. 6 (1) lit. f) GDPR)
• Data processing for compliance with a legal obligation (Art. 6 (1) lit. c) GDPR)

If personal data are processed based on your consent, you have a right to withdraw your consent anytime with effect for the future. If data are processed based on a balancing of interests, you as the data subject are entitled to object to the processing of personal data, with due regard to the requirements of Art. 21 GDPR.

How long will the data be stored?

We will process the data as long as this is necessary for the respective purpose. Insofar as legal retention obligations exist – e.g. in commercial or tax law – the respective personal data are stored for the duration of the obligation to preserve. After expiration of the retention obligation, we check whether an ongoing requirement for processing exists. If processing is no longer required, the data are deleted. Certainly, you may anytime (see below) demand disclosure of the data stored by us about your person and request erasure of the data or restriction of processing if storage is no longer required.

Who will the data be passed on to?

Any transfer of your personal data to third parties will on principle only take place if this is necessary for performing the contract with you, transfer is admissible on the basis of a balancing of interests within the meaning of Art. 6 (1) lit. f) GDPR, we are obligated to such transfer by law or if you have in this respect given your consent.

Where are the data processed?

We process your personal data exclusively at data centres of the Federal Republic of Germany or the European Union.

Your rights as “data subjects”

You are entitled to demand information about the personal data we process concerning your person. In the case of a request for information which is not made in writing, we ask for your understanding that, if appropriate, we may ask you to provide evidence proving that you are the person you claim to be. Furthermore, you have a right to rectification or erasure of data or to restriction of processing to the extent that you are entitled to this. In addition, you have a right to object against processing within the scope of legal provisions. The lawfulness of any processing effected before the objection will not be affected by such objection. The same applies to a right to data portability; you may request the transmittal of data anytime under the prerequisites of Art. 20 GDPR.

You have a particular right under Art. 21 (1) and (2) GDPR to object to the processing of your data in connection with any direct marketing action, if this takes place on the basis of a balancing of interests.

Our data protection officer

We have appointed an external data protection officer. You may contact him as follows:

DSO Datenschutz Osnabrück GmbH
Björn Voitel
- Datenschutzbeauftragter -
Mercatorstr. 11
49080 Osnabrück
telephone: +49 541 60081631
e-mail: datenschutzbeauftragter@remove-this.inbas.com

Right of complaint

You have the right to complain about the processing of personal data by our company to a data protection supervisory authority. This may be the supervisory authority responsible for us, the Hessian Commissioner for Data Protection and Freedom of Information (https://datenschutz.hessen.de).
You may also address any other supervisory authority, for example the office competent for your place of residence.

Version of: 29 June 2020