Privacy Policy
PRIVACY POLICY
I.
Information on the processing of your data in accordance with Art. 13 of the
General Data Protection Regulation (GDPR)
1. Controller and Data Protection Officer
The controller responsible for this website is
Udo Tessari, info@rorotomaso.com, Breitenäckerliweg 32b, 8280 Kreuzlingen, Switzerland.
You can contact the Data Protection Officer by email at info@rorotomaso.com
or at
Breitenäckerliweg 32b, 8280 Kreuzlingen, Switzerland.
2. Data processed for the provision of the website and the creation of log files
a. Which data is processed for what purpose?
Each time you access content on the website, data is temporarily stored that
may allow identification. The following data is collected:
Date and time of access
IP address
Hostname of the accessing computer
Website from which the website was accessed
Websites accessed via the website
Page visited on our website
Notification whether the retrieval was successful
Amount of data transferred
Information about the browser type and version used
Operating system
The temporary storage of data is necessary for the process of a website visit
to enable delivery of the website. Further storage in log files occurs to ensure the functionality of the website and the security of the information technology systems. These purposes also constitute our legitimate interest in data processing.
On what legal basis is this data processed?
The data is processed on the basis of Art. 6 (1) (f) GDPR.
[If necessary] Are there other recipients of the personal data besides the controller?
The website is hosted by [name, postal address, email address of the host]. The host receives the above-mentioned data as a processor.
LDI NRW – Sample data protection notice for websites of non-public bodies
2 d.
How long is the data stored?
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
When the website is made available, this is the case when the respective session ends. The log files are stored [..., up to a maximum of 24 hours] and are accessible directly and exclusively to administrators. After that,
they will only be available indirectly via reconstruction from backup tapes and
will be permanently deleted after [..., a maximum of four weeks].
Rights of data subjects
Right to information
You can request information about your personal data that we process in accordance with Art. 15 GDPR.
Right to object
You have the right to object for specific reasons (see point II).
Right to rectification
If the information concerning you is no longer correct, you can request rectification in accordance with Art.
16 GDPR. If your data is incomplete, you can
request its completion.
Right to erasure
You can request the erasure of your personal data in accordance with Art. 17 GDPR.
Right to restriction of processing
You have the right to request restriction of the processing of your personal data in accordance with Art. 18 GDPR.
Right to lodge a complaint
If you believe that the processing of your personal data violates data protection law, you have the right to object to the processing of your personal data in accordance with Art. Article 77 (1) GDPR grants you the right to lodge a complaint with a data protection supervisory authority of your choice. This includes the data protection supervisory authority responsible for the controller: the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia,
https://www.ldi.nrw.de/kontakt/ihre-beschwerde.
Right to data portability
If the requirements of Art. 20 (1) GDPR are met, you have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to third parties. The collection of data for providing the website and the storage of log files are essential for the operation of the website. Therefore, they are not based on consent under Art. 6 (1) (a) GDPR or on a contract under Art. 6 (1) (b) GDPR, but are justified under Art. 6 (1) (f) GDPR. The requirements of Art. 20 (1) GDPR are therefore not met in this respect.
LDI NRW – Sample data protection notices for websites of non-public bodies
3 II.
Right to object pursuant to Art. 21 (1) GDPR
You have the right to object at any time to the processing of your personal data based on Article 6 (1) (f) GDPR, for reasons related to your particular situation. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves to assert, exercise, or defend legal claims. The collection of data for providing the website and the storage of log files are essential for the operation of the website.