Privacy Policy/Cookies

Dear Visitor,

The protection of your privacy is important to us! We would therefore like to use the following information to inform you about how we handle your data that is collected when using our Internet offers as well as during usage of our mobile Werder applications.

I. The name and address of the person in charge of processing

1. The party responsible for our general Internet offers and the mobile Werder applications, and pertaining to the Basic Data Protection Regulation (GDPR) and other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature, is:

SV Werder Bremen GmbH & Co KG aA (WERDER)
Franz-Böhmert-Straße 1c
28205 Bremen
Telephone: +04 21 - 43 45 90
Fax: 04 21/49 35 55
E-Mail: info@werder.de
Internet: www.werder.de

 

2. Responsible parties for individual services:

Services Responsible Authority

WERDER.DE
TICKETING
WERDER.TV
NEWSLETTER (PROFI, TICKET, VIP, CSR)
Forum
Fixture Games

SV Werder Bremen GmbH & Co KG aA
Franz-Böhmert-Str. 1c
28205 Bremen

FANSHOP and NEWSLETTER (FANSHOP) Werder Bremen Fan-Service GmbH
Hoerneckestraße 11/13
28217 Bremen
WERDER CARD Werder Bremen Payment GmbH
Franz-Böhmert-Str. 1c
28205 Bremen
NEWSLETTER (Members, E-Paper)

Sport-Verein "Werder" v. 1899 e.V.
Franz-Böhmert-Straße 1c
28205 Bremen

 

II. Data Security Officer Name and address

Rechtsanwalt Bertold Frick,
Datenschutz-Metropol GmbH,
Baumwollbörse, Wachtstraße 17/24, 28195 Bremen
E-Mail: datenschutzbeauftragter@werder.de

A. General Information

1. Scope of personal data processing

We only collect and use personal data of our users insofar necessary to provide a functional website as well as our content and services. If this is not the case, personal data will only be used with the consent of the user on a regular basis. An exception applies in such cases where prior consent cannot possibly be obtained and the processing of the data is permitted by law.

2. Legal basis of processing

Insofar as we obtain the consent of personal data of the affected individual for the processing of personal data, Article 6(1)(a) of the Basic EU Data Protection Regulation (GDPR) will serve as the legal basis. For the processing of personal data necessary for the performance of a contract, of which the data subject is a part, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 paragraph 1 lit. c GDPR serves as the legal basis. In the event that the vital interests of the data subject or another individual requires the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis. If processing is necessary to protect a justified interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6(1)(f) GDPR serves as the legal basis for processing. The legitimate interest of our company lies in the performance of our business activities.

3. Routine deletion and blocking of personal data

WERDER processes and stores the personal data of the data subject only for as long as it is necessary for storage purposes. Furthermore, data may be stored insofar as this has been specified by the European or national legislator in EU regulations, laws or other rules to which the person responsible for the processing is subject. As soon as the storage purpose ceases to apply or a storage period prescribed by the aforementioned regulations expires, the personal data is routinely blocked or deleted.

4. Security of your data

We take all reasonable technical and organizational precautions to protect your information. All webpages that request sensitive information from you are encrypted before being transmitted to us. This provides the best possible protection against unauthorized access.

B. Usage data

1. Log Files

When you visit a page of our website, by default our web server collects the name of the retrieved file, the date and time of access, the amount of data transferred, and any error messages.

The following data may be collected:

  • Information about the browser type and version
  • The user’s operating system
  • The user’s internet service provider
  • The IP address of the user, and date and time of access
  • Websites from which the user’s system accessed our websites (referrer)
  • Websites accessed by the user’s system via our websites

The processing of data serves to deliver the content of our website, in order to guarantee the functionality of our information technology systems and to optimize our website. The data of the log files are always stored separately from other personal data of the users.

2. Cookies

Our website uses cookies. Cookies are small text files that are stored in your browser cache for the duration of your browser session ("session cookies") or on your hard drive for a certain amount of time ("permanent cookies"). Cookies allow us to recognize your browser so that, on future visits to our website, we can provide you more quickly with content tailored more precisely to your personal preferences. The cookies do not store any personal data.

How can I prevent the storage of cookies?

You can configure your browser so that it accepts cookies only with your permission. Any remaining cookies can be deleted. However, disabling cookies may limit the functionality of our website. Instructions on how to disable cookies are available at Link.

3. Google Services
(Google Analytics, Google Universal Analytics, and Google DoubleClick)

a) Google Tools for Analyzing Usage Behavior with Pseudonymous Identifiers

To make the use of our webpages more comfortable for our customers, our site uses the analytics and advertising tools Google Analytics (including the Universal Analytics features) and DoubleClick by Google, created by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 ("Google").

b) How Do the Tools Work?

Google Analytics uses "cookies" (see Section 1), which are stored on your computer. These cookies enable us to analyze your use of our website.

Universal Analytics allows us to analyze activities on our websites across devices (for example, if you access our site by computer and later by smartphone). It does so by assigning a pseudonym to the user, rather than to the device. The pseudonym is a "User ID," a unique sequence of numbers that is not personally identifiable. You are assigned a User ID when you register at werder.de or when you log into your existing customer account. Google only receives the User ID and the usage data associated with the User ID. As a result, it impossible to attribute the usage data to a specific person.

DoubleClick by Google uses cookies to show you advertisements that are relevant to you. Your browser is assigned an anonymous identification number (ID). This number is used to monitor which ads appear in your browser and which ads have been viewed. The cookies do not contain personal information. DoubleClick cookies only allow Google and its partner sites to display ads that are relevant to you based on your previous visits to our website or other online sites.

c) What Happens to My Information?

The information collected by these applications is transmitted to a Google server in the USA and stored there. Google uses this information on our behalf to evaluate your use of the website, to compile reports on website activities, and to provide us, as the website operator, with additional services related to website and Internet usage. Google does not merge the information transmitted from your browser in connection with these Google services with any other data. In order to enhance the protection of your information, we use Google Analytics and Universal Analytics with the extension “_anonymizeIp().” This extension processes IP addresses only in an abbreviated form to prevent any of your information from being traced directly to you.

d) How Can I Prevent My Information from Being Collected and Processed?

By using our website, you agree to have information collected and processed by Google in the manner and for the purposes described here. However, you may opt out of the collection and/or processing of your information at any time with future effect:

You can prevent cookies from being stored by adjusting the relevant settings on your browser. However, please be advised that if you opt out of using cookies, you may not be able to use all of the features of this website.

You can also prevent your information from being collected by Google Analytics and Universal Analytics and then transmitted to Google for processing. To do so, download and install the browser plugin available at  Link

You can deactivate DoubleClick cookies by downloading and installing the browser plugin available at Link in the section on the DoubleClick deactivation add-on. Alternatively, you can deactivate DoubleClick cookies on the Digital Advertising Alliance website, Link

For additional information on how Google uses cookies and the ways you can disable them, visit Link or Link zu den Google Werbeeinstellungen

4. Google AdWords Conversion Tracking

In order to evaluate and optimize our online advertising, our website uses the "conversion tracking" feature of the advertising program Google AdWords. This feature lets us identify whether users access our website through Google ads and, if so, how many users access us this way. When you click on a Google ad, Google places a "conversion cookie" on your device. This cookie has a 30-day "lifetime." If a user accesses one of our webpages through our Google ad within these 30 days, Google identifies which ad brought the visitor to our site and shares this information with us. Personal information that could be used to identify individual visitors is not collected. We only receive a statistical analysis of the total number of users who clicked on our ads and were directed to our site.

For more information on Google Conversion Tracking, visit Link

You can opt out of conversion cookies, and therefore prevent conversion tracking, by:

  • configuring your browser so that it does not accept cookies. However, doing so may limit the functionality of our website and services; or
  • deactivating Google's personalized advertising in the Google Ads Settings:
    adssettings.google.com

5. Google Ad Manager

On Werder.de we also generate advertising revenues. In order to use advertisements as specifically and successfully as possible for the advertising customer (for example by not repeatedly displaying the same advertisement to the same user), we use a so-called AdServer, which controls the delivery of the advertisements - for example through the use of cookies. Werder uses the Google Admanager for the delivery of advertising. Information about the service can be found here: Link. You can prevent the use of cookies by the Admanager by:

  • configuring your browser so that it does not accept cookies. However, doing so may limit the functionality of our website and services; or
  • deactivating Google's personalized advertising in the Google Ads Settings:
    adssettings.google.com

6. Facebook - Pixel

With the given consent, which you have confirmed by clicking the following button when visiting our website:

"We use cookies and marketing tools on our website and collect personal data. With 'OK' you agree to the use of cookies and marketing tools and accept our privacy policy. You can customize the settings under 'Privacy' at any time and receive further information."

We use another conversion - tracking - tool, Facebook - pixels, a service of the,

Facebook Inc.
1601 S. California Ave,
Palo Alto,
CA 94304,
USA.

With this service, we as well as Facebook can keep track of the user’s actions after they have clicked on a Facebook advertisement. This way, we can analyze the effectiveness of Facebook advertisements for statistical and marketing research purposes with the aim of optimizing advertisement activities.

The collected data is kept anonymously which means we cannot trace the identity of the user. However, the data will be saved by Facebook, so Facebook can bring a connection between the advertisement and the user profile. Facebook will use this information for their advertisement purposes, according to the Facebook record usage policy (https://www.facebook.com/about/privacy)/). You can allow Facebook as well as their partner organizations the display of advertisements on and off of the Facebook page. A cookie can be installed on your computer for this purpose.

We only implement a Facebook pixel with your personal consent. This consent for implementing the custom audience pixel can only be given by users who are older than 13 years. In case you are younger than 13 years, we kindly request you to ask your legal guardian for their consent. You can revoke your consent any time.

Please click the following button if you want to revoke your consent.

loading

7. Using Facebook Insights

Facebook uses its "Facebook Insights" service on our Facebook pages. If you consent to tracking on our website by opting in, your data will be collected for our Facebook fan page. You may exercise your rights towards Facebook Ireland and WERDER. The primary responsibility according to DS-GVO for the processing of Insights data lies with Facebook. Facebook fulfils all obligations under the DS-GVO with regard to the processing of Insights data and makes the essence of Page Insights available to individuals concerned with their data. WERDER makes no decisions regarding the processing of Insights data and other information resulting from Art. 13 DSGVO, including legal basis, identity of the person responsible and storage period of cookies on user terminals.

For more information about the Page Insights additions regarding the responsible party at Facebook please click this link.

 

8. AddThis

Our website uses "AddThis" plugins to make it easier for you to add bookmarks. AddThis is a service provided by AddThis LLC, 8000 West Park Drive, Suite 625, McLean, VA 22102, USA. It uses cookies (see Section 2) to transmit information (for example, time of use and browser language) to AddThis in the USA, where the information is processed. For more information on the scope and purpose of data collection and use, visit www.addthis.com/privacy. We do not collect or process the information. You may prevent the use of your information at any time by accepting an "opt-out cookie." For help, please visit the above URL.

C. Your Personal Information (Inventory Data)

1. What is “personal data”?

Personal data is information about you which allows conclusions to be drawn about your identity or which directly or indirectly refers to you, e.g. your name, your address or your telephone number. Information which does not allow conclusions to be drawn about a specific or identifiable person is not included.

2. Your registration with WERDER

If you register on the WERDER website by providing personal data, the data will be transmitted to WERDER in the respective input form. The data is stored exclusively for the purpose of internal use at WERDER. During registration, the IP address of the user and the date and time of registration are stored in addition to the data mentioned below. This serves to prevent misuse of services.  The data will not be passed on to third parties. An exception applies if there is a legal obligation to disclose.

Registered persons have the possibility to delete or modify the stored data at any time.  The affected person will receive information about the personal data stored about him or her at any time. Registration is based on our legitimate interests. With the possibility to register, we can offer our visitors the comfort to log in again regularly and to store the data permanently.

a) What Information Do We Collect and How Do We Use It?

For your registration, we need certain information from you, such as your name, address, date of birth, email address, and a username. The fields that must be filled out for registration are marked as mandatory in the login menu. Other information (such as your cell phone number) is optional. We store and use the information you provide only to render the services requested by you, such as for ticket sales, WerderTV subscriptions, or purchases in our store.

b) Bank and Credit Card Information

For certain paid services, we also require bank or credit card data.  We only store your bank details if payment is made by direct debit. If you choose to pay with a credit card, we need your credit card information. Credit card information is not collected by us. It is collected directly and exclusively by the payment service providers commissioned by us, which specialize in online transactions. This way, you can shop with confidence.

c) Can I Buy Something from the Fanshop Without Registering?

You must register before you can purchase anything in our Fanshop. The information we collect to process the purchase is not stored in the central database (see Section 3). It is only collected and stored in the store system.

d) Use of Verimi

You can also register on our website by entering your Verimi service registration details. By registering with this service, your registration data will be transmitted to us.

Registration with Verimi requires that you have set up a Verimi user account.

Verimi and Werder have mutually committed to comply with data protection regulations and to maintain a high level of security.

For further information on how Verimi processes your data, please refer to the Verimi Privacy Policy.

3. Storage of Personal Information in a Central Database

a) Central Storage

When you register with us, we store the information that we collect in a central database, which is operated by SV Werder Bremen GmbH & Co KG aA. All companies in the WERDER BREMEN Group use the database to provide services.

Companies in the WERDER BREMEN Group Currently Include:

Sport - Verein „WERDER" von 1899 e.V.
SV WERDER BREMEN GmbH & Co KG aA
WERDER BREMEN Fan - Service GmbH
WERDER BREMEN Payment GmbH

b) Why Is the Information Stored Centrally?

Our online services are based on a client system that is used by all companies of the WERDER BREMEN Group, which can access the central database through the system. This system enables us to render services more economically and more effectively, provide better data protection from third parties, and avoid duplicate records. It also makes our system more user-friendly for you. You only need one user account to access all WERDER services. When you create one profile with a username and password, you can also use it for other types of services.

4. Fanshop

If you would like to purchase products or services from WERDER in the fan shop, you must provide certain details. We require your name, your address, your e-mail address and your date of birth to process the contracts you have entered into with WERDER. Further information is voluntary.

You can only pay for services in the fan shop by credit card, therefore we need your credit card

information. However, this credit card data is not collected by us, but directly and exclusively via the payment service providers commissioned by us and specialized in online transactions. This also applies to payment providers such as PayPal and direct deposit. As soon as you select this, you will be redirected to the respective page, where other data protection regulations may apply. These can be found in the specific respective data protection regulations of each provider.

A purchase in our fanshop is possible with or without registration. The data collected by us to process purchases is not stored in the central database (see section 3), but only recorded and stored in the shop system in order to fulfil our contract with you.

If you ordered goods from WERDER that are to be delivered to you, we will pass on your name and address to the respective delivery service. This is done so that the product arrives safely with you and the contract between you and Werder can be fulfilled.

5. Newsletter

If you subscribe to the WERDER newsletter, the data will be transmitted in the corresponding input page to the person responsible for processing. When registering for the newsletter, the IP address of the user and the date as well as time of registration are stored. This serves to prevent misuse of the services or the e-mail address of the person concerned. The data will not be passed on to third parties. An exception exists if there is a legal obligation to disclose the information. The data will be used exclusively for sending the newsletter.  The newsletter will be sent on the basis of your consent (Art. 6 para. 1 sentence 1 lit. a) DS-GMO).

By registering for the newsletter you agree that we send a newsletter to your e-mail address. By registering you agree to the following text of consent:

"Herewith I agree that one of the organizations of Werder Bremen will send me e-mails to the e-mail address given by me for the purpose of sending me information about SV Werder Bremen.  The organizations of Werder Bremen are: Sports-Verein "WERDER" of 1899 e.V., SV Werder Bremen GmbH & Co KG aA, Werder Bremen Fan-Service GmbH. I have the right to revoke this consent at any time with effect for the future.  I have taken note of the data protection declaration with further information on data processing."

You can revoke this consent at any time in the future by unsubscribing from the newsletter. To do this, go to www.werder.de after signing on with your user profile to "My data" and unsubscribe from the newsletter or click on the unsubscribe link "Unsubscribe from this newsletter" at the bottom of the newsletter. You will then be automatically removed from the mailing list.

The registration for our newsletter occurs with a so-called ‘’double opt-in’’ procedure. This means that after registration you will receive an e-mail asking you to confirm your registration. The time of registration and confirmation as well as the IP address are stored as proof of registration for the newsletter.

The statistical survey, analysis and recording of the notification procedure is based on justified interest (Art. 6 para. 1 sentence 1 lit. f DS-GMO). The legitimate interest here is in the proper and correct execution of dispatching e-mails.

We only store the e-mail address you have provided when subscribing to the newsletter for as long as you have subscribed to the newsletter. As soon as you have unsubscribed from the newsletter, we will delete your e-mail address.

6. Advertising

If you have expressly consented to the use of your personal information (especially including your email address) by the companies of the WERDER BREMEN Group for advertising and marketing purposes, your information may also be transmitted within the WERDER BREMEN Group (see above, Section 3 a) and used to provide information on membership and promotions, as well as for offers by WERDER sponsors. Your information is not disclosed to third parties outside of the WERDER BREMEN Group. You can revoke your consent at any time. In each of our marketing materials, we include a specific notice reminding you that you may choose to opt out.

7. Disclosure of data to third parties

Soccer is and will remain our primary area of activity. As a result, we leave the technical implementation and maintenance of our Internet service to professionals who are more familiar with these tasks. Our external service providers are obligated to comply with our Privacy Policy.

WERDER has commissioned third parties for individual data processing processes to handle the data on behalf of WERDER. Data is therefore passed on to third parties in order to fulfil the service contracts. WERDER carries through the conclusion of agreements for the processing of data on behalf for the fact that the service providers keep to the regulations to the data security.  Service providers are used for the following data processing operations:

  • Conducting sales in the online shop (payment systems, logistics service providers)
  • Sending mail by post
  • Sending newsletters
  • Holding sweepstakes
  • Sales and shipment of tickets
  • Providing IT service

Your data will not be passed on to third parties for advertising purposes of third parties, unless you have given your consent in accordance with section 7.

8. Information on the Werder Payment Card (WERDER CARD)

  • No personal information is collected when the WERDER CARD is issued. The card is issued "anonymously."
  • Your personal information is not collected if you pay cash to load funds onto your card. The chip on the card only stores information on the amount paid to load the card. This amount is applied as credit to the card with the specified card number.
  • If you use your EC or credit card to load funds onto your WERDER CARD at one of our recharging points, the information from your card is sent directly to the relevant payment service provider. We do not store card information. If the amount applied to the card is accepted, it is stored on the chip of your WERDER CARD.
  • If you reload your WERDER CARD online at werder.de, the information provided by you is not stored by us. It is sent directly to the relevant payment service provider.

The purchases made with the WERDER CARD cannot be traced to any specific person.

9. Social Media Plugins

Parts of our website may include Share buttons for the social networking sites Facebook, Twitter, and Google+ ("networks"). The Share buttons can be identified by the Share icon, which is displayed next to the word "SHARE." When you click on this button, icons for the three networks appear.

In order to protect your personal information as well as possible, the Share buttons integrated into our site are only activated when you click on the icon for one of the networks. A connection to a social networking server is established only after you have clicked on the corresponding network icon. If you simply access or visit our site, none of your information is transferred.

When you click on a button, your browser establishes a direct connection to the server of the network operator. The operator transfers the content of the Share button directly to your browser and embeds it on the website. This informs the network operator that you have accessed a specific page of our website. If you are logged into the relevant network at the same time, the visit to our website can be associated with your account. If you want to prevent this association, you should log out of the network before clicking on the Share button.

By clicking on the respective share button you agree that your user data and, if applicable, your profile data of the respective social network (if you are logged in at that time) will be transmitted and will be forwarded to the USA [RBF6].

For details on the purpose and scope of data collection by the networks, as well as the further processing and use of the data, and for information on your rights and options for configuring your settings to protect your privacy, please refer to the privacy policy of the relevant network operator:

10. Ways to contact us

On the website www.werder.de there is a contact form that can be used for electronic contact. To use the contact form, enter your name, e-mail address, subject and message so that we can process and respond to your inquiry accordingly. You can also optionally enter your membership number so that we can better assign you to an existing account.  The provision of a contact form serves our interests, as it gives us more opportunities to get in touch with you. Alternatively, you can contact us via the e-mail address provided. If the data subject contacts the security officer through one of these channels, the personal data transmitted by the data subject shall be stored automatically. This data is stored solely for the purpose of processing or contacting the person concerned. The data will not be passed on to third parties. The data is used on the basis of our legitimate interests (Art. 6 Par. 1 S. 1 lit f. DS-GMO). We are interested in providing our visitors with as many contact channels as possible and answering them quickly.

11. Redirection to Other Websites

In order to extend our range of services, our websites may contain links to external websites. Other providers are responsible for the content of these external sites. Please refer to the privacy policies of our advertising partners for information on how they collect your personal data. You will know you are being redirected to another website when a new browser window opens and a new URL is displayed in the address line of your browser.

12. Online Job Applications

It is possible to apply online at www.werder.de/de/der-svw/jobs-bei-werder/info for currently advertised job openings at Werder Bremen. To use the specified link, click on it to send us a message via the e-mail program.  You can attach your application documents to the message. It is also possible to send applications to Werder Bremen Fan-Service GmbH by mail or e-mail (e-mail address: personal@werder-fanwelt.de). You can use the e-mail address to send your application to Werder Bremen Fan-Service GmbH, here you can also attach application documents.

The use of these e-mail addresses for applications serves our legitimate interests to create another way of submitting applications and to address a broader field of potential applicants. Alternatively, you can also send us your written application by mail. The storage of the data collected serves solely to conduct the application process. The maximum storage period is 6 months from the end of the application process. The data will only be passed on to third parties within the framework as described in section 8. Unsolicited applications received electronically (by e-mail) will be deleted immediately upon receipt. However, we reserve the right to save application documents for possible contact for up to 12 months if our legitimate interests indicate that a position may be considered for the specific application within this period. By sending the unsolicited application, you also declare your consent to this storage. You are entitled to revoke your consent to the storage at any time at the e-mail address personal@werder.de. Applications sent by mail to Werder Bremen Fan-Service GmbH will be returned to the applicants at the end of the application process.

13. Your rights as a data subject

If WERDER processes personal data from you, you are subject to basic data protection regulation and you have the following rights vis-à-vis WERDER as the person responsible:

13.1 Right to information

You can ask the person responsible to confirm whether personal data concerning you will be processed by us. If such processing has taken place, you can request the following information from the person responsible:

  1. the purposes for which the personal data are processed;
  2. the categories of personal data processed;
  3. the recipients or categories of recipients to whom the personal data concerning you have been or are still being disclosed;
  4. the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
  5. the existence of a right to have your personal data concerning you corrected or deleted, a right to have processing restricted by the controller or a right to object to such processing;
  6. the existence of a right of appeal to a supervisory authority;
  7. any available information on the origin of the data if the personal data are not collected from the data subject;
  8. the existence of automated decision-making, including profiling in accordance with Article 22(1) and (4) DS-GMO and - at least in these cases - relevant information on the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees in accordance with Art. 46 DS-GMO in connection with the transmission of such data.

13.2 Right to correction

You have a right of correction and/or completion vis-à-vis the responsible party if the personal data processed concerning you is incorrect or incomplete. WERDER will make the correction without delay.

13.3 Right to limitation of processing

Under the following conditions, you may request that the processing of your personal data be restricted:

  1. if you dispute the accuracy of the personal data concerning yourself for a period of time, this enables the person responsible to verify the accuracy of the personal data;
  2. if the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
  3. WERDER no longer requires the personal data for the purposes of processing, but you need it for the purpose of assertion, to exercise or defend legal claims
  4. if you have lodged an appeal against the processing pursuant to Art. 21 para. 1 DS-GMO and it is not yet clear whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another individual or legal person or on grounds of an important public interest of the Union or of a Member State.

If the processing restriction has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.

13.4 Right to cancellation

13.4.1 You may request WERDER to delete personal data concerning you immediately, and WERDER is obliged to delete such data immediately if one of the following reasons applies:

  1. The personal data concerning you is no longer necessary for the purposes for which they were collected or otherwise processed.
  2. You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DS-GMO, and there is no other legal basis for the processing.
  3. You file an objection against the processing pursuant to Art. 21 para. 1 DS-GMO and there are no overriding legitimate grounds for processing or you file an objection against the processing pursuant to Art. 21 para. 2 DS-GMO.
  4. The personal data concerning you has been processed unlawfully.
  5. The deletion of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.
  6. The personal data concerning you has been collected in relation to information society services offered in accordance with Art. 8 para. 1 DS-GMO.

13.4.2 If WERDER has made the personal data concerning you public, then WERDER is obliged to delete it in accordance with Art. 17 Para. 1 DS-GMO, WERDER, taking into account the available technology, and measures appropriate to the implementation costs, including technical measures, to inform data processors who process the personal data that you, as the data subject, have requested the deletion of all links to this personal data or of copies or replications of this personal data.

13.4.3. The right to cancellation does not exist insofar as the processing is necessary

  1. to exercise freedom of expression and information;
  2. for fulfillment of a legal obligation required for processing under the law of the Union or of the Member States to which the responsible person is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller;
  3. on grounds of public interest in the field of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) DS-GMO;
  4. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DS-GMO, insofar as the right referred to in para. 1 is likely to make it impossible or seriously impair the attainment of the objectives of such processing, or
  5. to assert, exercise or defend legal claims.

13.5 Right to information

If you have exercised your right to have the data controller correct, delete or limit the processing, the person responsible is obliged to inform all recipients with whom the personal data concerns or has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.

You have the right, vis-à-vis WERDER, to be informed about these recipients.

13.6 Right to data transferability

You have the right to receive the personal data concerning you that you have provided to WERDER in a structured, common and machine-readable format. In addition, you have the right to pass this data on to another person in charge without obstruction by the person in charge to whom the personal data was provided, provided that

  1. processing is based on consent in accordance with Art. 6 para. 1 lit. a DS GMO or Art. 9 para. 2 lit. a DS GMO or on a contract in accordance with Art. 6 para. 1 lit. b DS GMO and
  2. processing is carried out using automated methods.

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the responsible person.

13.7 Right of objection

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you on the basis of Article 6(1)(e) or (f) DS-GMO; this also applies to profiling based on these provisions. WERDER will no longer process personal data concerning you, unless WERDER can prove compelling reasons worthy of protection for the processing which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.  If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling in so far as it is connected with such direct advertising. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the option to exercise your right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.

13.8 Right to revoke the consent of data protection

You have the right to revoke your data protection declaration of consent at any time. The revocation of consent will not affect the legality of the processing carried out on the basis of the consent until revocation.

13.9 Automated individual decisions, including profiling

You have the right not to be subject to a decision based exclusively on automated processing, including profiling, which has legal effect against it or significantly affects it in a similar manner. This does not apply if the decision

  1. is necessary for the conclusion or performance of a contract between you and WERDER,
  2. is admissible by law of the Union or of the Member States to which the person responsible is subject and that law contains appropriate measures to safeguard your rights, freedoms and legitimate interests, or
  3. occurs with your explicit consent

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 DS-GMO, unless Art. 9 para. 2 lit. a or g applies and appropriate measures have been met to protect your rights and freedoms and your legitimate interests.

With regard to the cases mentioned in a. and c., WERDER will take appropriate measures to protect the rights and freedoms as well as your legitimate interests, including at a minimum the right to obtain the intervention of a person by the person responsible, to state his own position and to challenge the decision.

13.10 Right of appeal to a regulatory authority

Regardless of any other administrative or judicial assistance, you have the right of appeal to a regulatory authority, in particular in the member state in which you reside, your location of work or the location of possible infringement, should you believe that the processing of personal data concerning you violates the GDPR.

The regulatory authority to which the complaint has been submitted shall inform the person who filed the complaint of the status and results of the complaint, including the possibility of a judicial assistance under Article 78 GDPR.

V 3.6 Bremen in November 2018