Datenschutz
Privacy Statement – Sibylle Reiter Coaching & Beratung respects your privacy
Information obligations pursuant to Art. 12, 13 ff. EU GDPR
Sibylle Reiter Coaching & Beratung respects your privacy and is committed to protecting the security of your personal information. This Privacy Statement informs you of our Privacy Policy and practices, and of the choices you can make about the way your information is collected online and how that information is used. I have structured my websites so that, in general, you can visit Sibylle Reiter on the Web without identifying yourself or revealing any personal information. This notice is made readily available by me and you find it at the bottom on my home page.
1. Name and address of the controller
Your contact partner as the controller within the meaning of the European General Data Protection Regulation (“EU GDPR”) and other national data protection laws of the member states and other data protection regulations is:
Sibylle Reiter Coaching & Beratung, Lehenstraße 31, 88250 Weingarten
(hereinafter referred to as “I” or “me”)
2. Name and address of the Data Protection Officer
Sibylle Reiter attaches great importance to the protection of your personal data.
Please contact directly dsb@sibyllereiter.com regarding any data protection and data security issues.
3. General information about data processing
a. Scope of processing of personal data
I only process your personal data insofar as this is necessary for the performance of my services. Your personal data will be processed regularly only on the basis of your consent. An exception is made in those cases in which it is not possible to obtain prior consent for practical reasons or the processing of your personal data is permitted by law.
b. Legal basis for the processing of personal data
If I obtain consent from you for the processing of personal data, Art. 6 Para. 1 Letter a EU GDPR will act as our legal basis.
When I process personal data which is necessary for the performance of a contract between you and me, Art. 6 Para. 1 Letter b EU GDPR will act as our legal basis. This also applies for processing operations which are necessary in order to take steps prior to entering into a contract.
If the processing of personal data is necessary for compliance with a legal obligation to which we are subject, Art. 6 Para. 1 Letter c EU GDPR will act as our legal basis.
If the processing of personal data is necessary in order to protect the vital interests of yourself or of another natural person, Art. 6 Para. 1 Letter d EU GDPR will act as our legal basis.
If the processing is necessary for the purposes of the legitimate interests pursued by me or by a third party and your interests, fundamental rights and freedoms do not override the first-mentioned interest, Art. 6 Para. 1 Letter f EU GDPR will act as the legal basis for the processing.
c. Deletion of data and storage period
Your personal data will be deleted or blocked as soon as the purpose for its storage no longer exists. It can also be stored if this is provided for by the European or national legislators in EU regulations, laws or other regulations to which we are subject. The data will also be blocked or deleted if a retention period prescribed by the aforementioned standards expires, unless the continued storage of the data is necessary for the conclusion or performance of a contract.
4. Use of cookies
a. Legal basis for the data processing
The legal basis for the processing of your personal data relating to the use of the technically necessary cookies is provided by Art. 6 Para. 1 Letter f EU GDPR.
b. Purpose of the data processing
Technically necessary cookies are used to simplify use of my website for you. Some functions of my website cannot be offered without the use of cookies. For these, it is necessary that your internet browser is recognised after a change of page. The user data collected by technically necessary cookies is not used to create user profiles.
In this purpose also lies our legitimate interest in the processing of your personal data pursuant to Art. 6 Para. 1 Letter f EU GDPR.
c. Length of time your personal data is stored
Your personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected; this is in particular the case when the cookies are deactivated.
d. Opt out and deletion
Cookies are stored on your computer and transmitted by your computer to my website. You therefore also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. You can delete cookies that have already been stored at any time. This can also be done automatically. If cookies are deactivated for my website, you may no longer have full use of all of the functions of this website.
e. Cookie settings
Necessary
These cookies are required to guarantee functions that are essential for the operation of the website. These cookies cannot, therefore, be deactivated. They are proprietary cookies that are used exclusively on this website. This means that the information stored in the cookies is only sent to this website.
5. Contact form and contact by e-mail
a. Legal basis for the data processing
The legal basis for the processing of your personal data transmitted when you contact me via the contact form or by e-mail is provided by Art. 6 Para. 1 Letter f EU GDPR. If you contact me via the contact form or by e-mail for the purpose of concluding a contract, Art. 6 Para. 1 Letter b EU GDPR will also provide a legal basis for the processing of your personal data.
b. Purpose of the data processing
If you contact us via the contact form or by e-mail, your personal data will be processed solely for the purpose of processing the contact.
c. Length of time your personal data is stored
Your personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent via the contact form or by e-mail, this will be the case when the respective conversation with you has finished. The conversation will be finished when it can be deduced from the circumstances that the issue concerned has been settled finally between you and me.
d. Opt out and deletion
You can opt out from the processing of your personal data collected when you contact me via the contact form or via e-mail at any time with effect for the future. In such a case the conversation between you and me will not be continued. All personal data stored in the course of the contact will in this case be deleted.
6. Legal defence and enforcement
a. Legal basis for the data processing
The legal basis for the processing of your personal data relating to legal defence and enforcement is provided by Art. 6 Para. 1 Letter f EU GDPR.
b. Purpose of the data processing
The purpose of processing your personal data in the course of legal defence and enforcement is to defend against unwarranted claims and the legal enforcement of claims and rights. In this purpose lies our legitimate interest in data processing pursuant to Art. 6 Para. 1 Letter f EU GDPR.
c. Length of time your personal data is stored
Your personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.
d. Opt out and deletion
The processing of your personal data in the course of legal defence and enforcement is essential for the legal defence and enforcement. As a consequence you cannot opt out.
7. Social networking
Data processing by social networks
We maintain publicly accessible profiles on social networks. The individual social networks used by us can be found below.
Social networks such as LinkedIn can generally comprehensively analyse your user behaviour when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners).
By visiting my social media presences, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.
Please also note that I cannot track all processing operations on the social media portals. Depending on the provider, further processing procedures may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals (e.g. in their privacy policy, see below)
a. Legal basis
My social media presences are intended to ensure the most comprehensive presence possible on the internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO.
The analysis processes initiated by the social networks may be based on different legal bases, which are to be stated by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a DSGVO).
b. Responsible party and assertion of rights
If you visit my social media profile (e.g. LinkedIn), I´m jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint).
Please note that despite the joint responsibility with the social media portal operators, I do not have full influence on the data processing procedures of the social media portals.
My options are largely determined by the corporate policy of the respective provider.
c. Period of storage
The data collected directly by me via the social media presence is deleted from my systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.
I have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes.
For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
d. Social networks in use
LinkedIn
Sibylle Reiter uses a LinkedIn profile owned by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. I would like to point out that you use the LinkedIn link offered here and its functions on your own responsibility.
Information on which data is processed by LinkedIn and for which purposes can be found in LinkedIn’s data protection statement:
https://de.linkedin.com/legal/privacy-policy?
8. Rights of the data subject
If your personal data is processed by me, you are the data subject within the meaning of EU GDPR and you may demand from me the following rights:
a. Right to information
You can demand to receive confirmation from me about whether personal data concerning yourself is processed by us.
If such processing takes place, you can demand from me the following information:
(1) the purposes for which the personal data is processed;
(2) the categories of personal data which are processed;
(3) the recipients or categories of recipients to whom the personal data has been disclosed or is yet to be disclosed;
(4) the planned length of time the personal data concerning yourself will be stored or, if it is not possible to provide precise information concerning this, criteria for determining the length of storage time;
(5) the existence of a right to correction or deletion of the personal data concerning yourself, a right to the restriction of processing by us or a right to object to this processing;
(6) the existence of a right to complain to a supervisory authority;
(7) all available information about the origin of the data, if the personal data is not collected from you;
(8) the existence of automated decision-making including profiling according to Art. 22 Paras. 1 and 4 EU GDPR and – at least in these cases– meaningful information on the logic involved and the consequences and intended effect of such processing for you.
You have the right to demand information about whether the personal data concerning yourself is transferred to a third country or an international organisation. In this connection, you can demand to be informed of the appropriate safeguards relating to the transfer pursuant to Art. 46 EU GDPR.
b. Right to correction
You have the right to demand that I correct and/or complete data, if the processed personal data concerning yourself is incorrect or incomplete. I have to correct the data immediately.
c. Right to restrict the processing
In the following circumstances you can demand that I restrict the processing of the personal data concerning yourself:
(1) if the accuracy of the personal data concerning yourself is contested by you, for a period enabling us to verify the accuracy of the personal data;
(2) if the processing is unlawful and you reject the deletion of the personal data and instead demand the restriction of use of the personal data;
(3) if I no longer need the personal data for processing purposes, but you need this to enforce, exercise or defend legal rights, or
(4) if you have objected to the processing pursuant to Art. 21 Para. 1 EU GDPR and it is not yet clear our legitimate reasons override your own reasons.
If the processing of the personal data concerning yourself has been restricted, this data will, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the processing has been restricted in the above circumstances, you will be informed by me before the restriction is lifted.
d. Right to deletion
i. Obligation to delete
You can demand that we delete immediately the personal data concerning yourself, and I have to delete personal data immediately, if one of the following reasons applies:
(1) The personal data concerning yourself is no longer required for the purposes for which it was collected or otherwise processed.
(2) You withdraw your consent upon which the processing is based pursuant to Art. 6 Para. 1 Letter a GDPR or Art. 9 Para. 2 Letter a EU GDPR, and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Art. 21 Para. 1 EU GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Art. 21 Para. 2 EU GDPR.
(4) The personal data concerning yourself was processed unlawfully.
(5) The deletion of the personal data concerning yourself is required to meet a legal obligation under Union law or the law of the member states which we are subject to.
(6) The personal data was collected in relation to information society services pursuant to Art. 8 Para. 1 EU GDPR.
ii. Informing third parties
If I have published personal data concerning yourself and are accordingly required to delete it pursuant to Art. 17 Para. 1 EU GDPR, we will take appropriate measures, including of a technical nature, taking into account the available technology and implementation costs, to inform the persons responsible for the data processing that you as the data subject have asked them to delete all links to this personal data or copies or replications of this personal data.
iii. Exceptions
The right to deletion does not exist if the processing is necessary:
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
(3) for reasons of public interest in the area of public health pursuant to Art. 9 Para. 2 Letters h and i and Art. 9 Para. 3 EU GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 Para. 1 EU GDPR in so far as the right referred to in Para. a is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(5) for the establishment, exercise or defence of legal claims.
e. Right to be informed
If you have exercised the right to correction, deletion or restriction of processing against me, I have to inform all recipients of the personal data concerning yourself of this correction or deletion of the data or the restriction of processing, unless this proves to be impossible or involves unreasonable expense.
You have the right to demand that I inform you of these recipients.
f. Right to data portability
You have the right to receive the personal data concerning yourself that you have provided me in a structured, common and machine-readable format. You have the right to transfer this personal data that you have provided me to another controller without any hindrance from me, if
(1) the processing is based on consent pursuant to Art. 6 Para. 1 Letter a EU GDPR or Art. 9 Para. 2 Letter a EU GDPR or a contract pursuant to Art. 6 Para. 1 Letter b EU GDPR and
(2) the processing is performed with the help of automated processes.
In exercising this right, you also have the right to have the personal data concerning yourself transferred directly from me to another controller, where technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability will not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercising of official authority vested in me.
g. Right to object
You have the right to object at any time for reasons relating to your particular situation to the processing of personal data concerning yourself which is performed on the basis of Art. 6 Para. 1 Letters e or f EU GDPR; this also applies to profiling based on these provisions.
I will no longer process the personal data concerning yourself, unless I can provide proof of compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the enforcement, exercising or defence of legal rights.
If personal data concerning yourself is processed for direct advertising purposes, you have the right to object at any time to the processing of personal data concerning yourself for the purpose of such advertising; this also applies to profiling, if it is related to such direct advertising.
If you object to processing for direct marketing purposes, the personal data concerning yourself will no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you can exercise your right to object by automated means using technical specifications.
h. Right to withdraw the declaration of consent required under data protection law
You have the right to withdraw your declaration of consent required under data protection law at any time. The lawfulness of the processing that has taken place based on the consent up until the withdrawal will not be affected by the withdrawal.
i. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning yourself or similarly significantly affects you. This will not apply if the decision:
(1) is necessary for entering into, or performance of, a contract between you and me,
(2) is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests, or
(3) is based on your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 Para. 1 EU GDPR, unless Art. 9 Para. 2 Letter a or g EU GDPR applies and suitable measures to safeguard the rights and freedoms and your legitimate interests have been taken.
Regarding the cases stated in (1) and (3), we will take suitable measures to safeguard your rights and freedoms and your legitimate interests, at least the right to obtain human intervention on our part, to express your point of view and to contest the decision.
j. Right to complain to a supervisory authority
Without prejudice to any other administrative or non-judicial remedy, you have the right to complain to a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged breach, if you are of the view that the processing of the personal data concerning yourself is in breach of the EU GDPR.
The supervisory authority responsible for us is:
The State Data Protection and Freedom of Information Officer for Baden-Württemberg (Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg)
Königstrasse 10 a
70173 Stuttgart
poststelle[at]ldi.bwl.de
https://www.ldi.nrw.de
Phone: +49 (0) 711 615541-0
Fax: +49 (0) 711 615541-15
The supervisory authority with whom you have filed a complaint will inform you of the progress and results of the complaint including the possibility of judicial remedy pursuant to Art. 78 EU GDPR.
If you have any questions, please do not hesitate to contact dsb@sibyllereiter.com