Data protection declaration according to the GDPR
We are pleased that you are interested in our website. The protection of your personal data has a high priority for our company. In the following, you will find information on how we handle your data that is collected through your use of our website. Your data will be processed in accordance with the legal regulations on data protection. As for links to other websites that are provided on our website, we neither have influence on nor control over the contents linked to and the data protection regulations governing the respective website.
We recommend that you check the data protection declarations on the webpages to which our website is linked in order to determine whether and to what extent personal data is collected, processed, used or made available to third parties by these websites.
Controller in the sense of data protection law
Trium Analysis Online GmbH
Hohenlindener Str. 1
Phone: +49 (0)89 2060 269 0
Fax: +49 (0)89 2060 269 11
How to contact the Data Protection Officer
Data processing due to visiting our website
When you visit our webpages, data is transmitted to our web server via your Internet browser for technical reasons. During an active connection for the communication between your Internet browser and our web server, the following data is recorded:
- Visited domain
- Date and time of the request
- Webpage from which the file was requested
- Access status (file transmitted, file not found, etc.)
- Web browser used and operating system used
- IP address of the requesting computer
- Data volume transmitted
We collect the data listed above to ensure that the connection to our website is successfully established and to enable the users to conveniently browse our webpages.
Further, the log file is used to evaluate system security and stability, and also serves administrative purposes.
The legal basis for the temporary storage of data or log files is Art. 6 Par. 1 lit. f. GDPR.
For reasons of technical security, in particular in order to prevent attempts to attack our web server, we may temporarily store these data. We are not able to draw conclusions about individual users on the basis of this data. Within seven days at the latest, the stored data is anonymised by shortening the IP address to the domain level, so that it is no longer possible to make a reference to an individual user.
We do not evaluate this data except for statistical purposes in an anonymised form. This data is not amalgamated with data from other data sources.
General data processing on the website
We only process our users' personal data insofar as this is necessary for providing a functional website and for providing our contents and services. According to the regulations, a user's personal data is only processed with the user's prior consent. An exception applies in those cases where prior consent cannot be obtained for factual reasons and the processing of the data is therefore permitted by legal provisions.
If you contact us by e-mail
If you send us an inquiry by e-mail, your details contained in your e-mail, including the contact data you provided there, will be stored for the purpose of processing your inquiry and in the event of follow-up questions. Under no circumstances will we transfer this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR, provided that you made your request for the purpose of concluding a contract. Your data will be erased after completion of your inquiry, provided that no applicable retention regulations require us to retain the data.
Data transfer and recipient(s)
Your personal data will not be transferred to third parties unless
- We have explicitly informed you about it in the description of the respective data processing;
- You have given your express consent to such transfer pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR;
- Data transfer pursuant to Art. 6 Para. 1 S.1 lit. f DSGVO is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not transferring your data;
- A statutory obligation exists for such data transfer pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR; and
- Such data transfer is required under Art. 6 para. 1 sentence 1 lit. b GDPR for the performance of contracts to which you are or will become a party.
Period of storage of your personal data
The period of storage of your personal data is determined in compliance with the applicable retention periods (e.g. according to commercial law and tax law). After expiry of the respective period, the corresponding data will be erased as a matter of routine. If the data is needed for the initiation, negotiation or fulfilment of a contract, or if we have a legitimate interest in further storage, this data will be erased as soon as it is no longer needed for these purposes, or if you have made use of your right of revocation or objection.
In the following, you will find information on your rights as a data subject that the applicable data protection law grants to you vis-à-vis the Controller with regard to the processing of your personal data:
Art. 15 GDPR grants to you the right to obtain information about your personal data processed by us.
In particular, you shall have the right to obtain from us information about the purposes of the processing, the category of the personal data concerned, the categories of recipients to whom your data have been or will be disclosed, the envisaged storage period, the existence of a right to request rectification, erasure, restriction of processing or to object such processing, the existence of a right to lodge a complaint with a supervisory authority the source from which your data originate, if these were not collected by us, and the existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the logic involved.
Art. 16 GDPR grants to you the right to obtain from us without undue delay rectification of your inaccurate personal data or the completion of your incomplete data stored by us.
Art. 17 GDPR grants to you the right to obtain from us the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for the compliance with a legal obligation, or for reasons in the public interest, or for the establishment, exercise or defence of legal claims.
Art. 18 GDPR grants to you the right to obtain from us the restriction of processing your personal data, if you contest the accuracy of your personal data, if the processing is unlawful, but if you oppose the erasure of your personal data, and we no longer need the data for the purposes of processing, but if you require the data for the establishment, exercise or defence of legal claims, or if you have objected the processing of the data according to Art. 21 GDPR.
Art. 20 DSGVO grants to you the right to receive your personal data you have provided to us, in a structured, commonly used and machine-readable format or to require from us the transmission of those data to another controller.
Art. 77 GDPR grants to you the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of the state (within the Federal Republic of Germany, ¿Bundesland¿) where we have our above-mentioned headquarters or, if applicable, that of your usual place of residence or work.
Art. 7 Abs. 3 DSGVO grants to you the right to withdraw your consent: You shall have the right to withdraw your consent at any time for any future processing of your data. If you withdraw your consent, we will erase the data concerned without undue delay, unless further processing can be justified on a legal basis for data processing without prior consent by the data subject.
The withdrawal of consent shall not affect the lawfulness of the data processing based on the consent prior to its withdrawal.
Right to object
Where the processing of your personal data is based on Article 1(1) lit. f GDPR due to our legitimate interest, you shall have the right granted by Article 21 GDPR to object, on grounds relating to your particular situation, to the processing of your personal data. In case your personal data is processed for direct marketing purposes and you object to such processing, you shall have the general right of objection without the need to specify your particular situation.
If you wish to make use of your right of withdrawal or objection, you only need to send an e-mail to info(at)trium(dot)de
Changes to our Data Protection Declaration
We reserve the right to adapt or update, if necessary, this data protection declaration in compliance with the applicable data protection regulations. In this way, we can adapt it to new legal requirements, and can take changes in our services into account, e.g. in case we offer new services. To your visit on our website, the latest version shall apply.
This data protection declaration was last updated on: 25 May 2018