Data protection declaration preamble
With the following data protection declaration we would like to inform you about which types of your personal data (hereinafter also referred to as “data”) we process, for what purposes and to what extent. The data protection declaration applies to all processing of personal data carried out by us, both in the context of providing our services and in particular on our websites, in mobile applications and within external online presences, such as: B. our social media profiles (hereinafter collectively referred to as “online offering”).
The terms used are not gender specific. As of: October 16, 2023
Table of contents
• Preamble
• Responsible person
• Contact data protection officer
• Overview of processing
• Relevant legal bases
• Safety measures
• Transfer of personal data
• International data transfers
• Use of cookies
• Business benefits
• Payment procedure
• Blogs and publication media
• Contact and inquiry management
• Newsletters and electronic notifications
• Advertising communication via email, post, fax or telephone
• Presences in social networks (social media)
• Plugins and embedded functions and content
Responsible person
Eddi email address: Eddi@miscus.eu
Contact data protection officer
Eddi@miscus.eu
Overview of processing
The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.
Types of data processed
• Inventory data.
• Payment details.
• Contact details.
• Content data.
• Contract data.
• Usage data.
• Meta, communication and procedural data.
Categories of data subjects
• Customers.
• Interested persons.
• Communication partner.
• Users.
• Business and contractual partners.
Purposes of processing
• Provision of contractual services and fulfillment of contractual obligations.
• Contact inquiries and communication.
• Safety measures.
• Direct marketing.
• Range measurement.
• Office and organizational procedures.
• Managing and responding to inquiries.
• Feedback.
• Marketing.
• Profiles with user-related information.
• Provision of our online offering and user-friendliness.
Relevant legal bases
Relevant legal bases according to the GDPR: Below you will find an overview of the legal bases of the GDPR on the basis of which we process personal data. Please note that in addition to the regulations of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. If more specific legal bases apply in individual cases, we will inform you of these in the data protection declaration.
• Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR) – The data subject has given his or her consent to the processing of personal data concerning him or her for a specific purpose or several specific purposes.
• Fulfillment of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR) – Processing is necessary for the performance of a contract to which the data subject is a party or to carry out pre-contractual measures at the request of the data subject person.
• Legal obligation (Art. 6 para. 1 sentence 1 lit. c) GDPR) – Processing is necessary to fulfill a legal obligation to which the controller is subject.
• Legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR) – Processing is necessary to protect the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject are protected requiring personal data predominate.
National data protection regulations in Germany: In addition to the data protection regulations of the GDPR, national data protection regulations apply in Germany. This includes in particular the law to protect against misuse of personal data during data processing (Federal Data Protection Act – BDSG). In particular, the BDSG contains special regulations on the right to information, the right to deletion, the right to object, the processing of special categories of personal data, processing for other purposes and transmission and automated decision-making in individual cases, including profiling. Furthermore, state data protection laws of the individual federal states may apply.
Safety measures
We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons to ensure a level of protection appropriate to the risk