Privacy Policy

Deutsch

The use of this website may involve the processing of personal data. We would like to provide you with an overview of these processing operations in the following information so that they are comprehensible to you. In addition, we would like to inform you about your rights according to the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) in order to ensure fair processing.

The data controller is dpa-infocom GmbH Mittelweg 38, 20148 Hamburg (hereinafter also referred to as "we" or "us").

Table of content

  1. General information
    1. Contact
    2. General information on data processing
    3. Storage duration
    4. Technical service providers
  2. Processing of server log files
  3. Messages
  4. Cookies
  5. Fact check via WhatsApp (chatbot)
  6. Disclosure of your data
  7. Your rights
  8. Data processing when exercising your rights
  9. Right of objection
  10. Withdrawal of consent
  11. Data protection officer
  12. Complaint to a supervisory authority

1. General information

a. Contact

If you have any questions or suggestions regarding this information, or would like to contact us in order to assert your rights, please send your request to:

dpa-infocom GmbH
Mittelweg 38, 20148 Hamburg
Telephone: 040 4113-31000
E-mail: service@dpa-info.com

b. General information on data processing

The term "personal data" under data protection legislation refers to all information that relates to an identified or identifiable individual. The IP address can also be such a personal date. An IP address is assigned to any device connected to the Internet by the Internet provider so that it can send and receive information.

We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place on the basis of a legal permission. We process personal data only with your consent (Art. 6 (1) lit. a GDPR), for the performance of a contract to which you are a party, or at your request to carry out pre-contractual measures (Art. 6 (1) lit. b GDPR), to fulfill a legal obligation (Art. 6 (1) lit. c GDPR) or if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, override (Art. 6 (1) lit. f GDPR).

c. Storage duration

We store personal data only as long as it is necessary to achieve the purpose of processing or to fulfill our contractual or legal obligations. Such legal retention obligations may arise in particular from commercial or tax law regulations. In this case, we will restrict the processing of your personal data or no longer process it for other purposes.

d. Technical service providers

Insofar as nothing else arises from the following information, the processing of data takes place on the servers of technical service providers who have been commissioned by us for this purpose. These service providers process the data only in accordance with explicit instructions and are obliged to guarantee sufficient technical and organizational measures for data protection. Consequently, our service providers act for us as so-called order processors within the meaning of Art. 28 GDPR.

Specifically, we have contracted Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg ("AWS") to host this website.

2. Processing of server log files

When visiting the website, general information that your browser transmits to our server is automatically stored. This includes by default: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. We process this data to protect our legitimate interests in the security of our website and for technical administration, Art. 6 (1) lit. f GDPR. If there are no indications of abusive behavior, we delete this information after 14 days at the latest.

3. Messages

If you send us a message (e.g. by e-mail), we process the information you provide to process your request. The legal basis for data processing in this respect is Art. 6 (1) lit. b GDPR.

4. Cookies

No cookies are used on this website.

5. Fact check via WhatsApp (chatbot)

To use our fact check service, you need an account with the messenger provider WhatsApp. For users in the European Economic Area and the United Kingdom, WhatsApp is operated by WhatsApp Ireland Limited, 4 Grand Canal Quay, Dublin 2, D02 KH28, Ireland. For all other users, WhatsApp is operated by WhatsApp, Inc., 1601 Willow Road, Menlo Park, California 94025, USA ( collectively "WhatsApp"). For more information about how WhatsApp processes your personal data, please see WhatsApp's privacy policy at https://www.whatsapp.com/legal/privacy-policy-eea?lang=de. You can also access this and other information in your WhatsApp account in the help section under "Settings" at any time.

If you use our fact check service, we collect

  • your chosen profile name,
  • your mobile phone number,
  • the information you provided in your inquiry and in the chat history, as well as
  • time and date of your request and other messages sent in the chat history.

If you have indicated this in your WhatsApp profile, the following are also visible to us

  • your profile picture and
  • your profile information.

We process the aforementioned data to receive and process your request, in particular to check whether a fact check already exists for your request and to then provide you with a link to this fact check.

The legal basis for the processing is Art. 6 (1) lit. f GDPR. We have a legitimate interest in receiving the inquiry initiated by you and processing it accordingly.

You are neither contractually nor legally obligated to provide your personal data, nor is the provision necessary for the conclusion of a contract. However, the provision of your data is necessary so that we can receive and process your request. If you do not provide us with your personal data, we cannot actually or technically accept and process your request.

We delete your data when we have finally processed your request, usually after 180 days at the latest. If special circumstances mean that it is not possible to complete the process after 180 days, deletion may also take place later in individual cases. Further storage only takes place if this is necessary in the case of concrete indications of criminal acts for criminal prosecution, averting of danger or legal prosecution. The data will be deleted after the respective facts have been clarified or after the facts have been finally closed. In this case, the processing is based on our aforementioned legitimate interests, Art. 6 (1) lit. f GDPR.

You can object to the processing of your personal data at any time by contacting the contact details mentioned in section 1 a. or by sending your objection via WhatsApp message to the number of the fact check.

For the provision of the fact check, we use our processor (cf. Art. 4 No. 8, 28 GDPR) MessengerPeople GmbH (MP), Herzog-Heinrich-Str. 9, 80336 Munich. MP processes your personal data on our behalf and according to our instructions.

6. Disclosure of your data

Unless otherwise stated in this privacy policy, your data will be disclosed beyond the cases described only to the following extent:

If it is necessary for the clarification of an illegal use of our website or services or for legal prosecution, personal data will be forwarded to law enforcement authorities and external advisors, e.g. lawyers, and if necessary to injured third parties. However, this only happens if there are concrete indications of unlawful or abusive behavior. A transfer may also take place if this serves the enforcement of claims. We are also legally obligated to provide information to certain public authorities upon request. These are law enforcement agencies, authorities that prosecute administrative offenses subject to fines and the tax authorities.

In addition, your personal data may also be disclosed if we are subject to other claims by third parties, which may include a request for information about your data. These may be, in particular, claims of data subjects in the context of the exercise of your rights under Chapter III GDPR.

The disclosure of this data is based on our legitimate interest in combating abuse, prosecuting criminal offences and asserting, exercising or defending claims, Art. 6 (1) lit. f GDPR or on the basis of a legal obligation pursuant to Art. 6 (1) lit. c GDPR.

7. Your rights

As the person concerned, you are entitled to the rights set out below. To assert these rights, you can contact one of the above-mentioned contact addresses.

  • In accordance with Art. 15 GDPR and § 34 BDSG, you have the right to request information about the processing of your personal data by us.
  • In accordance with Art. 16 GDPR, you have the right to demand that we correct your personal data.
  • In accordance with Art. 17 GDPR and § 35 BDSG, you have the right to demand that we delete your personal data.
  • In accordance with Art. 18 GDPR, you have the right to have the processing of your personal data restricted.
  • In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format.
  • In accordance with Art. 21 GDPR, you have the right to object to any processing based on the legal basis of Art. 6 (1) lit. e or f GDPR.

You may revoke any consent given in accordance with Art. 7 (3) GDPR. Such a revocation shall not affect the lawfulness of the processing that was carried out on the basis of the consent until the revocation.

You have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.

8. Data processing when exercising your rights

Finally, we would like to point out that the personal data provided by you when exercising your rights will be processed for the purpose of implementing these rights and in order to be able to provide proof thereof, Art. 6 (1) lit. c GDPR.

9. Right of objection

In accordance with Art. 21 GDPR, you have the right to object to any processing based on the legal basis of Art. 6 (1) lit. e or f GDPR. Insofar as personal data concerning you for the purpose of direct marketing including profiling is processed by us, you may object to this processing in accordance with Art. 21 (2) and (3) GDPR.

10. Withdrawal of consent

In accordance with Art. 7 (3) GDPR, you may with draw consent previously given. The legality of the processing that has taken place up to the withdrawal on the basis of the consent is not affected by a withdrawal of this kind.

11. Data protection officer

You can reach our data protection officer at the following contact details:

datenschutz@dpa.com
dpa-infocom GmbH
Data Protection Officer
Mittelweg 38
20148 Hamburg

12. Complaint to a supervisory authority

If you are of the opinion that any processing personal data related to you infringes the provisions of the GDPR, you have the right in accordance with Art. 77 GDPR to lodge a complaint with a supervisory authority.