Data protection

Legal basis for data processing

Consent: If your consent has been obtained for the processing of personal data, Article 6 paragraph 1 lit. a of the EU General Data Protection Regulation (GDPR) is the legal basis for the data processing.

Contract: When processing personal data that is necessary to fulfill a contract to which you are a party, Article 6 paragraph 1 lit. b GDPR is the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Legal obligation: If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 paragraph 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of you or another natural person require the processing of personal data, Article 6 paragraph 1 lit. d GDPR is the legal basis.

Legitimate interest: If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 paragraph 1 lit. f GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in carrying out our business activities.

Rights of those affected

As part of our data processing, your personal data is processed. You are entitled to the rights from the third chapter of the GDPR towards our company.

We respect the rights to information, correction, restriction of processing, deletion or portability of your personal data. You can exercise these rights as follows:

Right to information

You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have the right to access this personal data and the following information:

a) the processing purposes;
b) the categories of personal data processed;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
d) if possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria for determining that period;
e) the existence of a right to rectification or deletion of personal data concerning you or to restriction of processing by the controller or a right to object to such processing;
f) the existence of a right to lodge a complaint with a supervisory authority;
g) if the personal data are not collected from the data subject, any available information about the origin of the data;
(h) the existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

If personal data is transferred to a third country or to an international organization, you have the right to be informed about the appropriate safeguards in accordance with Article 46 GDPR in connection with the transfer.

We will provide you with a copy of the personal data that is the subject of processing. We may charge a reasonable fee based on administrative costs for any additional copies you request. If you submit the request for information electronically, we must provide the information in a common electronic format unless you specify otherwise.

The right to receive a copy must not prejudice the rights and freedoms of others.

Right to rectification

You also have the right to immediately request that incorrect personal data concerning you be corrected. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

Right to deletion

You also have the right to request that we delete personal data relating to you without delay, and we are obliged to delete personal data without delay if one of the following reasons applies:

a) The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
b) You revoke your consent

ng on which the processing was based in accordance with Article 6 I lit. a GDPR or Article 9 paragraph 2 letter a, and there is no other legal basis for the processing.
c) you object to the processing in accordance with Article 21(1) and there are no overriding legitimate grounds for the processing, or you object to the processing in accordance with Article 21(2).
d) The personal data was processed unlawfully.
e) The deletion of personal data is necessary to comply with a legal obligation under Union or Member State law to which we are subject.
f) The personal data were collected in relation to information society services offered in accordance with Article 8(1).

(2) If we have made the personal data public and we are obliged to delete it in accordance with paragraph 1, we will take appropriate measures, including technical measures, to those responsible for data processing who process the personal data, taking into account the available technology and the implementation costs , to inform you that you have requested the deletion of all links to, or copies or replications of, that personal data. This does not apply if the processing is necessary a) to exercise the right to freedom of expression and information; b) for compliance with a legal obligation requiring processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us; (c) for reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) and Article 9(3); d) for archival purposes in the public interest, scientific or historical research purposes or for statistical purposes referred to in Article 89(1), to the extent that the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or e) to assert, exercise or defense of legal claims.

Right to restriction of processing

(1) The data subject has the right to request that the controller restrict processing if

a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject refuses the deletion of the personal data and instead requests the restriction of the use of the personal data;
c) the controller no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims, or
d) the data subject has objected to the processing pursuant to Article 21(1), pending the verification whether the legitimate grounds of the controller override those of the data subject.

(2) If the processing has been restricted in accordance with paragraph 1, these personal data – with the exception of their storage – may only be used with the consent of the data subject or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person processed for reasons of important public interest of the Union or a Member State. 4.5.2016 L 119/44 Official Journal of the European Union EN

(3) A data subject who has obtained a restriction on processing in accordance with paragraph 1 shall be informed by the controller before the restriction is lifted.

Article 19 Obligation to notify in connection with the rectification or deletion of personal data or the restriction of processing

The controller shall notify all recipients to whom personal data have been disclosed of any rectification or deletion of the personal data or any restriction of processing pursuant to Article 16, Article 17(1) and Article 18, unless this proves impossible or is inconsistent with a disproportionate effort is involved. The controller informs the data subject about these recipients if the data subject requests this.

Article 20 Right to data portability

(1) The data subject has the right to receive the personal data concerning him or her that he or she has provided to a controller in a structured, common and machine-readable format and he or she has the right to pass on these data to another controller without hindrance

n to the person responsible to whom the personal data was provided, provided that

(a) the processing is based on consent in accordance with Article 6(1)(a) or Article 9(2)(a) or on a contract in accordance with Article 6(1)(b); and
b) the processing is carried out using automated procedures.

(2) When exercising their right to data portability in accordance with paragraph 1, the data subject has the right to have the personal data transmitted directly from one controller to another controller, to the extent that this is technically feasible.

(3)The exercise of the right referred to in paragraph 1 of this Article is without prejudice to Article 17. This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

(4) The right pursuant to paragraph 2 may not affect the rights and freedoms of other persons.

You also have the right to consult our data protection officer regarding the aforementioned rights and any questions related to the processing of your personal data.

Our customers can also assert their right to lodge a complaint with the relevant supervisory authorities.

Right to object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which is carried out on the basis of Article 6 Paragraph 1 Letters e or f; This also applies to profiling based on this provision. The person responsible will then no longer process the personal data unless he can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

2) If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; This also applies to profiling insofar as it is connected to such direct advertising

3) If you object to processing for direct advertising purposes, your personal data will no longer be processed for these purposes.

4) In connection with the use of information society services, notwithstanding Directive 2002/58/EC, you may exercise your right to object through automated procedures using technical specifications.

5) You have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you that is carried out for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1). , unless the processing is necessary to fulfill a task in the public interest.

contact form

As part of the contact form, you have the option of sending any data to us. The data is forwarded by our web server via email to our company’s email inbox. Please note that communication via the contact form is not encrypted. In your own interest, please use a secure communication channel for confidential communication.

Privacy Contact

Is responsible for data processing within the meaning of Article 4 No. 7 GDPR

Cowax GmbH

Benrodestr.127

40597 Düsseldorf

Germany

Mail: info (at) cowaxde.nabali.website

Data Protection Officer

Viktor Gladkov

Mail: info (at) cowaxde.nabali.website

Tel.: + 49 (0) 211 93678610