PRIVACY

AUTOMATIC DATA PROCESSING ON THIS WEBSITE

When you access our web pages, information that is sent to us by your browser is automatically stored in our server log files. This information is:

• The browser type/version
• The operating system being used
• The referrer URL (the page that you visited before this site)
• The host name of the computer that is accessing the site (IP address)
• The time of the server request

This data cannot be linked to specific persons by our system. This data is not combined with other data sources (e.g. any registration data), we delete the data following statistical analysis, and the data is not stored as an individual data set.

RIGHTS OF THE DATA SUBJECT

1. Right to information

Any person (‘data subject’) affected by the processing of personal data has the right, as granted by the European legislature, to obtain information free of charge at any time regarding the personal data held in relation to them from the party responsible for processing (the ‘data controller’) and to receive a copy of this information. The European legislature also allows the data subject access to the following information:

• The purposes of the processing
• The categories of personal data that are processed
• The recipients or categories of recipient to whom the personal data has been or will be disclosed, in particular in the case of recipients in third countries or international organisations
• Where possible, the envisaged period for which the personal data will be stored, or, if this is not possible, the criteria used to determine this period
• The existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
• The right to lodge a complaint with a supervisory authority
• Where the personal data is not collected from the data subject: any available information as to its source
• The existence of automated decision-making, including profiling, as referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

The data subject also has the right to be informed if personal data is transferred to a third country or to an international organisation. If this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer.

2. Right to rectification

Any data subject affected by the processing of personal data has the right, as granted by the European legislature, to demand without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject also has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

3. Right to erasure (‘right to be forgotten’)

Any data subject affected by the processing of personal data has the right, as granted by the European legislature, to request from the data controller the erasure of personal data concerning him or her without undue delay where one of the following grounds applies and provided that the processing is not necessary:

• The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed
• The data subject withdraws consent on which the processing is based according to Article 6 para. 1 clause a) GDPR, or Article 9 para. 2 clause a) GDPR, and where there is no other legal ground for the processing
• The data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR
• The personal data has been unlawfully processed
• The personal data has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject
• The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR

If zetVisions has made the personal data publicly available and is, as the controller, obliged pursuant to Article 17(1) GDPR to erase the personal data, zetVisions, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers which are processing the published personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, that personal data insofar as the processing is not necessary.

4. Right to restriction of processing

Any data subject affected by the processing of personal data has the right, as granted by the European legislature, to obtain from the controller restriction of processing where one of the following applies:

• The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data
• The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead
• The controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defence of legal claims
• The data subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject

5. Data portability

Any data subject affected by the processing of personal data has the right, as granted by the European legislature, to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. He or she also has the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where the processing is based on consent pursuant to Article 6 para. 1 clause a) GDPR or Article 9 para. 2 clause a) GDPR or on a contract pursuant to Article 6 para. 1 clause b) GDPR and the processing is carried out by automated means, insofar as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

In exercising his or her right to data portability pursuant to Article 20(1) GDPR, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible and where this does not infringe on the rights and freedoms of other persons.

6. Right to object

Any data subject affected by the processing of personal data has the right, as granted by the European legislature, to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Article 6 para. 1 clause e) or f) GDPR, including profiling based on those provisions.

In the event of an objection, zetVisions shall no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Where zetVisions processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where the data subject raises an objection with zetVisions to processing for direct marketing purposes, zetVisions shall no longer process the personal data for such purposes.

7. Automated individual decision-making, including profiling

Any data subject affected by the processing of personal data has the right, as granted by the European legislature, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. This shall not apply if the decision (1) is necessary for entering into, or performance of, a contract between the data subject and a data controller, or (2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (3) is based on the data subject’s explicit consent.

8. Right to withdraw consent in relation to data privacy law

Any data subject affected by the processing of personal data has the right, as granted by the European legislature, to withdraw his or her consent at any time to the processing of personal data.

If you wish to invoke one of the aforementioned rights as the data subject, please contact the data controller responsible or its data security officer. The contact details can be found at the top of this page.