logo-k.png

Visit us at the K Trade Fair!

19 – 26 October 2022 in Düsseldorf, Germany: Hall 10, Stand Number 10H07

Visit us at the K Trade Fair! 19 – 26 October 2022 in Düsseldorf, Germany: Hall 10, Stand Number 10H07

DATA PRIVACY

Privacy – website 

In the following passages, we have provided information on the collection of personal data when you use this website. Personal data is all data that can be related to you personally, for example your name, address, email addresses, and user behaviour.

1. Data processing controller and data protection officer

Controller as defined by the General Data Processing Regulation (GDPR)

IPT Institut für Prüftechnik Gerätebau GmbH & Co. KG

Schulstrasse 3

86447 Todtenweis, Germany

Tel.:     +49 8237 9660

Fax:     +49 8237 966 482

Email: iptsales [at] iptnet [dot] org

Represented by managing directors Sven Sommer and Amadou Ba (please see our Legals/Disclaimer section in this regard).

Data protection officer

Should you have any questions relating to data protection, our data protection officer can be contacted as follows:

By email:Datenschutz [at] iptnet [dot] org

By mail: at the above address, accompanied by “Data protection”

2. Your rights when using this website 

You have

  • the right, pursuant to Article 15 GDPR, to receive information on any personal data that we have stored about you and that was collected during your visit to our website.
  • the right, pursuant to Article 16 GDPR, to demand that we correct any inaccurate personal data that we have stored about you and to have any incomplete personal data completed
  • the right, pursuant to Article 17 GDPR, to demand that we erase the personal data that we have stored about you unless the processing of this data is necessary to comply with a legal obligation or to assert, exercise, or defend legal claims
  • the right, pursuant to Article 7 (3) GDPR, to revoke at any time the consent that you once gave us to process your data. As a result of this, we will no longer be permitted to continue any data processing based on this consent in future.  The legality of the data processing performed on the basis of this consent until the time of its revocation by the data subject remains unaffected.
  • the right, pursuant to Article 20 GDPR, to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format or to demand that this data be transmitted to another controller
  • the right, pursuant to Article 77 GDPR, to lodge a complaint with the competent data protection supervisory authority if you believe that your right to informational self-determination has been infringed through the processing of the personal data collected during your visit to our website. The Bavarian Data Protection Authority (Bayerische Landesamt für Datenschutzaufsicht – BayLDA) is the competent authority for IPT Institut für Prüftechnik Gerätebau GmbH & Co. KG.
  • the right, pursuant to Article 21 GDPR (if your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) f) GDPR), to object to the processing of your data if grounds for this exist in relation to your particular situation or if the objection is against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without details of a particular situation being provided.


3. Data security

We maintain current technical measures to ensure data security, and specifically to protect your personal data from hazards during data transmission and to prevent third parties obtaining knowledge of your personal data. These measures are adapted to the current state of the art, as appropriate.

4. Processing of personal data

4.1. Collection of personal data when you visit our website

General use of the website

When the website is used merely for informational purposes, i.e. if you don’t register or otherwise transmit information to us, we will only collect the personal data that your browser transmits to our server. If you would like to look at our website, we will collect the following data, which is necessary for us in order to display our website to you and to ensure its stability and security (legal basis is Article 6 (1) f) GDPR)

  • IP address
  • Date and time of the enquiry
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Quantity of data transmitted
  • Website that is the source of the request
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

Use of cookies

Our website uses cookies, which are stored by the browser on your device and which contain certain settings for the use of the website (e.g. for the current session). Cookies help make our offering more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. The legal basis for this is Article 6 (1) f) GDPR.

You can configure your browser settings according to your preferences, however please note that you may not then be able to use all of this website’s features.

  1. Additional functions and offerings on our website

In additional to the use of our website for purely informational purposes, we offer a range of services that you can use if interested. To do this, you must generally provide additional personal data, which we will use to render the service in question.

Option to contact us by email/contact form

When you contact us by email or via the contact form, the user’s details are stored for the purpose of processing the enquiry and in case any follow-up questions arise.

Data processing for the purpose of contacting us is carried out in accordance with Article 6 (1) a) GDPR on the basis of your freely given consent. 

We erase the data arising in this connection after storage is no longer required or restrict processing if there are legal storage obligations.

5. Integration of Google Maps

On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps is a web service for displaying interactive (country) maps to visually present geographical information. Using this service will show you our location, for example, and make it easier for you to find us.

These processing operations are only carried out if express consent is granted in accordance with Article 6 (1) a) GDPR.

If you have consented to the processing, your visit to the website will provide Google with information that you have accessed the relevant sub-page of our website. This happens regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in with Google, your data is assigned directly to your account.

If you do not wish to be associated with your profile on Google, you must log out of Google before activating the button. Google stores your data as user profiles and uses it for the purposes of advertising, market research, and/or tailoring its website to suit your needs. An evaluation of this kind is specifically carried out (even for users who are not logged in) in order to provide advertising tailored to your needs and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.

If you do not agree to your data being transmitted to Google in the future as part of your use of Google Maps, you also have the option of completely deactivating the Google Maps web service by turning off the JavaScript application in your browser. If you do this, you will no longer be able to use Google Maps or the map display function on this website.

These processing operations are only carried out if express consent is granted in accordance with Article 6 (1) a) GDPR.

You can view Google’s Terms of Service at https://www.google.de/intl/de/policies/terms/regional.html and the additional Terms of Service for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html

Detailed information on data privacy in connection with the use of Google Maps can be found on Google’s website (“Google Privacy Policy”): https://policies.google.com/privacy

6. Integration of Google reCAPTCHA

We also use the reCAPTCHA function from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on this website. This function is mainly used to distinguish whether an entry is made by a natural person or whether it is improperly made by machine or automated processing. The service also includes the transmission to Google of the IP address and any other data required by Google for the reCAPTCHA service.

These processing operations are only carried out if express consent is granted in accordance with Article 6 (1) a) GDPR.

Further information about Google reCAPTCHA and Google’s privacy policy can be found at: https://policies.google.com/privacy

7. Integration of Google Analytics

If you have given your consent, this website will use Google Analytics, a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Scope of processing

Google Analytics uses cookies that enable your use of our website to be analysed. The information collected via cookies about your use of this website is usually transferred to a Google server in the US and stored there.

We use the function ‘anonymizeIP’ (IP masking): As a result of the activation of IP anonymisation on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transferred to a Google server in the US and shortened there. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other Google data.

During your visit to the website, the data collected will include the following:

  • The pages you have accessed, your “click path”
  • Achievement of “website goals” (conversions, e.g. newsletter sign-ups, downloads, purchases)
  • Your user behavioue (for example clicks, dwell time, bounce rates)
  • Your approximate location (region)
  • Your IP address (in shortened form)
  • Technical information about your browser and the end devices you use (e.g. language settings, screen resolution)
  • Your internet service provider
  • The referrer URL (the website/advertising medium via which you came to this website)

Purposes of the processing

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your (pseudonymous) use of the website and compiling reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website. 

Recipient
 The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Transmission to third countries

The transmission of data to the US cannot be ruled out.

Storage period
 The data sent by us and linked to cookies will be automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (incl. your IP address), and from processing this data by

  • not giving your consent to the use of the cookie, or
  • downloading and installing the browser add-on to disable Google Analytics HERE.

You can also prevent cookies from being stored by setting your browser software accordingly. However, if you configure your browser to refuse all cookies, you may experience limitations in functionality on this and other websites.

Legal basis and option of revocation

The legal basis for this data processing is your consent, in accordance with Article 6 (1) a) GDPR. You can revoke your consent at any time with effect for the future by calling up the cookie settings [cookie_settings] and changing your selection there.

For more information on Google Analytics’ Terms of Service and Google’s Privacy Policy, please visit https://www.google.com/analytics/terms/gb.html and https://policies.google.com.

8. Integration of YouTube content 

We have integrated YouTube content into our online offering, which is stored at https://www.youtube.com/ and can be played directly from our website. The content has been integrated in “extended privacy mode”, which means that no data about you as a user will be transferred to YouTube if you do not play the content. Only when you play the content will the data mentioned in 4.1 be transferred. We have no control over this data transfer. The legal basis for this is Article 6 (1) f) GDPR. 

When you visit the website, YouTube is informed that you have called up the corresponding subpage of our website. The data mentioned under 4.1 of this privacy statement is also transmitted. This happens regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in with Google, your data is assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses it for the purposes of advertising, market research and/or tailoring its website to suit your needs. An evaluation of this kind is specifically carried out (even for users who are not logged in) in order to provide advertising tailored to your needs and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact YouTube to exercise this right. 

For further information on the purpose and scope of the collection and processing of data by YouTube, please refer to the privacy policy. You will also receive further information on your rights and on options for adjusting your settings to protect your privacy: https://policies.google.com/privacy 

9. iThemes Security

To protect against external attacks by hackers and bots, we use the WordPress plugin iThemes Security. This plugin stores the IP addresses of users who visit this page in order to initiate appropriate countermeasures in the event of any attacks. The IP addresses are only stored in the local WordPress database and are not transmitted to third parties.

iThemes Security is used in the interests of secure use of our website and also serves to protect users from malware, Trojans, etc. This constitutes a legitimate interest within the meaning of Art. 6 (1) f) GDPR. For further details on data protection, please see iThemes’ Privacy Policy (https://ithemes.com/privacy-policy/).

10. Duration of storage of personal data

We will process and store your data for as long as this is necessary to fulfil the above-mentioned purposes, particularly our contractual and legal obligations. If the data is no longer necessary for the fulfilment of these purposes and our obligations, it will be regularly erased, unless its – temporary – further processing is necessary for the following purposes: 

  • Compliance with retention obligations under commercial and tax law, in particular the German Commercial Code (HGB) and the German Fiscal Code (AO). The periods of retention or documentation prescribed in these Codes are six to ten years. 
  • Preservation of evidence within the framework of the legal statute of limitations. Under sections 195 et seqq. of the German Civil Code (BGB), these limitation periods may be up to 30 years, with the regular limitation period being three years.

11. Obligation to provide data

There is no obligation to provide data by law.

12. Amendment of the privacy statement

The further development of our website and offerings, or modifications to the statutory or regulatory requirements may render it necessary to change this privacy statement.

13. Automated decision on a case-by-case basis

At present, there is no automated decision making, including profiling.

14. Social media profile on LinkedIn

We maintain a profile on the LinkedIn social network to communicate with registered users and inform them about our products, services and news. 

When you use or access our profile on this network, the privacy policy and terms of use of the social media provider apply. The processing of your personal data when you visit our profile on LinkedIn is based on our legitimate interest in a diverse external presentation of our company and the use of an effective means of information and communication with you. The legal basis for this is Article 6 (1) f) GDPR. 

If you have given the controller of the social network your consent to process your personal data, the legal basis is Art. 6 (1) a) GDPR.

We have no control over the processing of personal data by the social media provider. 

When you visit our profile, the social media provider usually saves cookies on your browser, in which your usage behaviour or interests are stored for market research and advertising purposes. For detailed information on data processing when using our social media profile and on your rights, please refer to the social media provider’s privacy policy:

  • LinkedIn (provider: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) privacy policy: 

https://www.linkedin.com/legal/privacy-policy  

Cookie policy and opt-out:

https://www.linkedin.com/legal/cookie-policy

Information on the processing of personal data of applicants pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR)

1. Definitions
This information is based on the terminology used by the European regulator when adopting the General Data Protection Regulation (GDPR). We would therefore refer you to the definitions in Article 4 GDPR. These can be viewed at https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN.

2. Name and address of the data controller and the data protection officer
The controller as defined by the GDPR is:
IPT Institut für Prüftechnik Gerätebau GmbH & Co. KG
Schulstrasse 3
86447 Todtenweis, Germany
Phone: +49 8237 966-0
Fax: +49 8237 966-480
E-mail: iptsales [at] iptnet [dot] org

Represented by managing directors Sven Sommer and Amadou Ba


Our data protection officer can be contacted by

E-mail: datenschutz [at] iptnet [dot] org
Mail: at the above address, with the additional line ‘Data Protection Officer’

3. Information on data processing

3.1. Scope of the processing of personal data
In accordance with the principles of data protection law, we process personal data only to the extent that this is necessary, is permitted by applicable legal provisions, or if we are obliged to do so.

3.2.Data sources/data types
We process personal data that we receive from you in connection with your application documents and interviews.

This specifically includes:
  • general data about you personally (name, address, contact details)
  • information on knowledge and skills, such as training and work certificates, curriculum vitae and assessments


Other relevant personal data might also include the following:
  • health data, if relevant to your employment
  • data published by the applicant on professional social networks such as LinkedIn and XING


3.3. Purpose of the processing and legal basis
We process your personal data to decide on the creation of an employment relationship. The legal basis for this is Article 88(1) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).
If necessary, we also process your data to protect our legitimate interests in accordance with Article 6(1)(f) GDPR.

This includes:
  • identification of multiple applications
  • assertion and defence of legal claims asserted within the context of the application procedure


If you have given us your consent to process your personal data in accordance with Article 6(1)(a) and Article 88(1) GDPR in conjunction with Section 26(2) BDSG, we will use your data to the extent and for the purpose described in the declaration of consent.
We process special categories of personal data in accordance with Article 9(1) GDPR for employment purposes if this is necessary for the exercising of rights or the fulfilment of legal obligations under labour law, social security and social protection legislation. The legal basis for this is Article 88(1) GDPR in conjunction with Section 26(3) BDSG. In addition, special categories of personal data may be processed on the basis of consent pursuant to Article 9(2)(a) GDPR in conjunction with Section 26 BDSG.
3.4. Recipients of the personal data
Within our company, the persons and departments that are involved in the decision on the creation of an employment relationship with you or that need access to your data to implement our legitimate interests, such as the human resources department, management, line managers, etc., have access to your data.
Personal data may also be transmitted for the above-mentioned purposes to the service providers and agents employed by us if this is necessary for the execution of their respective services, e.g. IT service companies. Where necessary, agreements have been concluded pursuant to Article 28 GDPR.
Data is also passed on to recipients outside the company, provided this is permitted or required by law or with your consent. Under these conditions, recipients of personal data may include the following, for example:
  • lawyer
  • service providers within the context of contract processing relationships


We do not transfer any personal data to entities in third countries (countries outside the European Economic Area).

3.5. Data storage period
Personal data of rejected applicants will be deleted or in individual cases returned six months after completion of the application procedure.
Where the storage of applications has been agreed for positions that may be filled at a later date, they will be stored for a maximum of 24 months.
Personal data processed by us on the basis of a legitimate interest will be erased as soon as a legitimate interest in the data processing no longer exists or as soon as you have effectively objected to it.
Personal data of successful applicants is transferred to the personnel file.
4. Automated decision making in individual cases
We do not use automated decision making or profiling to decide on the creation of employment relationships.

5. Obligation to provide data
As part of the application process, you are only required to provide personal data that is necessary for the decision on the creation of an employment relationship. Besides your name and contact details, this data is usually information about your knowledge and skills, such as training and work certificates, curriculum vitae and assessments. Without this information we cannot assess whether you have the necessary knowledge and skills for the position for which you have applied, and you will not be considered in the selection process.

6. Rights of data subjects
You are entitled to extensive rights with regard to the processing of your personal data. In the following we would like to familiarise you with these rights:

  • Right to be informed You have the right to be informed about the data stored with us, in particular the purpose for which the data is processed and how long the data is stored (Article 15 GDPR).
  • Right to rectification You have the right to ask us to rectify any personal data concerning you without undue delay if it is incorrect (Article 16 GDPR).
  • Right of withdrawal You have the right to withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal. (Article 7(3) GDPR).
  • Right to erasure You have the right to ask us to erase the personal data concerning you. The conditions stipulate that you can request the erasure of your data if, for example, we no longer need the personal data for the purposes for which it was collected or otherwise processed, if we have processed the data unlawfully, you have legitimately objected to its processing, or if there is a legal obligation to erase it (Article 17 GDPR).
  • Right to data portability You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format (Article 20 GDPR), provided that it has not already been erased and the relevant requirements of Article 20 GDPR are met.
  • Right to object You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation (Article 21 GDPR). We will cease processing your personal data unless we can demonstrate compelling legitimate grounds for this that override your interests, rights and freedoms, or unless the processing is being used to establish, exercise or defend legal claims.
  • Right to lodge a complaint with the authorities You have the right to appeal to the above-mentioned data protection officer or to a data protection supervisory authority if you believe that the processing of personal data concerning you is in breach of the General Data Protection Regulation. (Article 77 GDPR) The competent data protection supervisory authority for us is:
    The Bavarian Data Protection Authority (Bayerische Landesamt für Datenschutzaufsicht – BayLDA)
    Promenade 18
    91522 Ansbach, Germany
Information on the processing of personal data of business customers pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR)

1. Definitions
This information is based on the terminology used by the European regulator when adopting the General Data Protection Regulation (GDPR). We would therefore refer you to the definitions in Article 4 GDPR. These can be viewed at https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679&from=EN.

2. Name and address of the data controller and the data protection officer
The controller as defined by the GDPR is:
IPT Institut für Prüftechnik Gerätebau GmbH & Co. KG
Schulstrasse 3
86447 Todtenweis, Germany
Phone: +49 8237 966-0
Fax: +49 8237 966-480
E-mail: iptsales [at] iptnet [dot] org

Represented by managing directors Sven Sommer and Amadou Ba


Our data protection officer can be contacted by

E-mail: datenschutz [at] iptnet [dot] org
Mail: at the above address, with the additional line ‘Data Protection Officer’

3. Information on data processing

3.1. Scope of the processing of personal data
In accordance with the principles of data protection law, we process personal data only to the extent that this is necessary, is permitted by applicable legal provisions, or if we are obliged to do so.

3.2.Data sources/data types
We process personal data that we receive from you in connection with your application documents and interviews.

This specifically includes:
  • general data about you personally (name, address, contact details)
  • information on knowledge and skills, such as training and work certificates, curriculum vitae and assessments


Other relevant personal data might also include the following:
  • health data, if relevant to your employment
  • data published by the applicant on professional social networks such as LinkedIn and XING


3.3. Purpose of the processing and legal basis
We process your personal data to decide on the creation of an employment relationship. The legal basis for this is Article 88(1) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).
If necessary, we also process your data to protect our legitimate interests in accordance with Article 6(1)(f) GDPR.

This includes:
  • identification of multiple applications
  • assertion and defence of legal claims asserted within the context of the application procedure


If you have given us your consent to process your personal data in accordance with Article 6(1)(a) and Article 88(1) GDPR in conjunction with Section 26(2) BDSG, we will use your data to the extent and for the purpose described in the declaration of consent.
We process special categories of personal data in accordance with Article 9(1) GDPR for employment purposes if this is necessary for the exercising of rights or the fulfilment of legal obligations under labour law, social security and social protection legislation. The legal basis for this is Article 88(1) GDPR in conjunction with Section 26(3) BDSG. In addition, special categories of personal data may be processed on the basis of consent pursuant to Article 9(2)(a) GDPR in conjunction with Section 26 BDSG.
3.4. Recipients of the personal data
Within our company, the persons and departments that are involved in the decision on the creation of an employment relationship with you or that need access to your data to implement our legitimate interests, such as the human resources department, management, line managers, etc., have access to your data.
Personal data may also be transmitted for the above-mentioned purposes to the service providers and agents employed by us if this is necessary for the execution of their respective services, e.g. IT service companies. Where necessary, agreements have been concluded pursuant to Article 28 GDPR.
Data is also passed on to recipients outside the company, provided this is permitted or required by law or with your consent. Under these conditions, recipients of personal data may include the following, for example:
  • lawyer
  • service providers within the context of contract processing relationships


We do not transfer any personal data to entities in third countries (countries outside the European Economic Area).

3.5. Data storage period
Personal data of rejected applicants will be deleted or in individual cases returned six months after completion of the application procedure.
Where the storage of applications has been agreed for positions that may be filled at a later date, they will be stored for a maximum of 24 months.
Personal data processed by us on the basis of a legitimate interest will be erased as soon as a legitimate interest in the data processing no longer exists or as soon as you have effectively objected to it.
Personal data of successful applicants is transferred to the personnel file.
4. Automated decision making in individual cases
We do not use automated decision making or profiling to decide on the creation of employment relationships.

5. Obligation to provide data
As part of the application process, you are only required to provide personal data that is necessary for the decision on the creation of an employment relationship. Besides your name and contact details, this data is usually information about your knowledge and skills, such as training and work certificates, curriculum vitae and assessments. Without this information we cannot assess whether you have the necessary knowledge and skills for the position for which you have applied, and you will not be considered in the selection process.

6. Rights of data subjects
You are entitled to extensive rights with regard to the processing of your personal data. In the following we would like to familiarise you with these rights:

  • Right to be informed You have the right to be informed about the data stored with us, in particular the purpose for which the data is processed and how long the data is stored (Article 15 GDPR).
  • Right to rectification You have the right to ask us to rectify any personal data concerning you without undue delay if it is incorrect (Article 16 GDPR).
  • Right of withdrawal You have the right to withdraw any consent you have given at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until withdrawal. (Article 7(3) GDPR).
  • Right to erasure You have the right to ask us to erase the personal data concerning you. The conditions stipulate that you can request the erasure of your data if, for example, we no longer need the personal data for the purposes for which it was collected or otherwise processed, if we have processed the data unlawfully, you have legitimately objected to its processing, or if there is a legal obligation to erase it (Article 17 GDPR).
  • Right to data portability You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format (Article 20 GDPR), provided that it has not already been erased and the relevant requirements of Article 20 GDPR are met.
  • Right to object You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation (Article 21 GDPR). We will cease processing your personal data unless we can demonstrate compelling legitimate grounds for this that override your interests, rights and freedoms, or unless the processing is being used to establish, exercise or defend legal claims.
  • Right to lodge a complaint with the authorities You have the right to appeal to the above-mentioned data protection officer or to a data protection supervisory authority if you believe that the processing of personal data concerning you is in breach of the General Data Protection Regulation. (Article 77 GDPR) The competent data protection supervisory authority for us is:
    The Bavarian Data Protection Authority (Bayerische Landesamt für Datenschutzaufsicht – BayLDA)
    Promenade 18
    91522 Ansbach, Germany