You entered this page via a link to get more information about how we handle (your) personal data. In order to fulfill our information obligations according Art. 12 etc. of the General Data Protection Regulation (DSGVO), we would like to present you our information about data protection:

Responsible in terms of data protection law is:
CS Service Management GmbH
Promenade 9
52076 Aachen

You will find more information about our company, information about the persons that are authorized to represent and further contact options in the imprint of our website: https://www.css-aachen.de/impressum

If we have received personal data from you, we will only process it for the purposes for which we received or collected it. Data processing for other purposes is only considered if the legal obligations under Article 6 (4) DSGVO are met. In that case, of course, we will observe any information obligation according to Art. 13) Abs. 3 DSGVO and Art. 14) Abs. 4 DSGVO.

The legal basis for the processing of personal data is in principle - as far as there are no specific legal obligations - Art. 6 DSGVO. Here are the following options in particular:

• Consent (Art. 6) Par. 1 lit. a) DSGVO)
• Data processing for the fulfillment of contracts (Art. 6) para. 1 lit. b) DSGVO
• Data processing on the basis of a balance of interests (Art. 6) para. 1 lit. f) DSGVO)
• Data processing to fulfill a legal obligation (Art. 6) Para. 1 lit. c) DSGVO)

You have the right to revoke your consent to us at any time with future effect. If we process data on the basis of a balance of interests, you have the right to object the processing of your personal data, taking into account the requirements of Art. 21 DSGVO.

We process the data as long as this is necessary for the purpose they had been requested for. As far as statutory storage obligations exist - e.g. in commercial or tax law - the personal data are stored for the duration of the retention obligation. After expiry of the retention obligation, it is checked whether there is a further need for processing. If there is no further need, the data will be deleted. Basically, towards the end of a calendar year, we are reviewing data for further processing. Due to the amount of data, this check is done for specific types of data or purposes of processing. Of course you can at any time request information about the stored personal information and require in case of non-existent necessity, a deletion of the data or restriction of processing.

A transmission of your personal data to third parties will only take place if this is necessary for the execution of the contract and/or the transmission on the basis of a balance of interests is permitted due to Art. 6) Para. 1 lit. f) DSGVO and/or we are legally obliged to transmit them and/or you have given consent to do so.

Your personal data will be processed in data processing service centers of the Federal Republic of Germany only.

You have the right to get closer information about the personal data we process about you. We ask for your understanding that we may request proof from you that you are the person whom you are claiming to be. Furthermore, you have the right of deletion or restriction of processing, as far as you are legally entitled. Furthermore, you have a right to object the processing within the scope of the legal requirements. The same applies to a right to data portability. In particular, you have a right of objection under Art. 21 (1) and (2) DSGVO against the processing of your data in connection with direct mail, if this is done on the basis of a balance of interests.

Our external data protection officer is:
Ralf Meschke
datenschutz@css-aachen.de

You have the right to complain about the processing of personal data by us at a data protection supervisory authority.

Date: 30.08.2018