I. Name and address of the controller
The controller for purposes of the general data protection regulation (GDPR) and other data protection laws applicable in member countries and other regulations regarding data protection is
Tel.: +49 8157 9036-0
II. Personal data
Personal data are information which is used for identifying you. This includes your name, postal address or E-Mail address, for example.
With every access of our website the following data are stored to logfiles:
- your browser type and version
- operating system and version of your device
- your IP address
- time and date of the request
- the referrer from which you came to our site
You can delete these Cookies from your computer at any time you like but then you might have to choose your language again.
VI. Contact form and communications by E-Mail
Our website features a contact form you may use to get in touch with us. If you use that form, you will provide us with the following data:
- postal code
- phone number
- E-Mail adress
- subject of your request
- content of your request
If you like you can also enter your
- christian name
- facsimile number
Additionally your IP address and time and date will be recorded.
Alternatively you can write us under the mail adress provided. In this case the data transferred along your mail will be recorded, but not shared with third parties. Your data will only be used to communicate with you.
VII. Rights of the “data subject” (you)
If your personal data is processed, you are a “data subject” in the sense of GDPR and you are granted the following rights by the controller (Indyon GmbH):
1. Right to be informed
You may require confirmation from Indyon GmbH whether or not we process data concerning you.
If we do, you can expect information regarding:
- what we use your data for,
- categories of personal data,
- recipients or categories of recipients your personal data was or will be disclosed to,
- planned storage time or at least criteria for deletion of your personal data,
- existence of the right to insist on correction or deletion of your personal data, a right to require limitation of processing or a right to object against processing your personal data,
- existence of the right to file a complaint at the supervising authority,
- sources of your personal data if these were not provided by yourself,
- the existence of automated decision-making including profiling according Art. 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.
You have the right to request information if your personal data are transferred into a third country or to an international organisation.
2. Right to rectification
If you find the personal data we process is incomplete or wrong, please make us aware of that issue. We will correct it as quick as possible.
3. Right of restriction of processing
If one of the following applies, you can require us to restrict processing of your personal data:
- you contest the accuracy of your personal data for a time period where we are able to verify the accuracy of the personal data,
- processing is unlawful and you oppose the erasure of your personal data but instead you request the restriction of their use,
- we do no longer need the personal data for the purposes of processing, but you require them for establishment, exercise of defence of legal claims,
- you have objected against processing pursuant to Article 21(1) of GDPR, pending the verification whether our legitimate reasons override yours.
If at least one of these conditions applies and you request the restriction of the processing of personal data stored by Indyon GmbH, please notify us. We will then arrange for restriction of processing.
4. Right to be forgotten (Right to erasure)
You can require us to delete your personal data if:
- your personal data is no longer necessary,
- you revoke your consent to processing your personal data and there is no other legal reason for processing,
- you object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate reasons for the processing, or you object against processing pursuant to Article 21(2) GDPR.
- your personal data were processed unlawfully
- your personal data must be erased to comply with legal obligations,
- your personal data ave been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
Should we have made your personal data public and we are obliged to erase them pursuant to Article 17(1) GDPR, Indyon GmbH, taking into account the available technologies and cost of implementation, will take reasonable steps, including technical measures, to inform other controllers processing your personal data that you have requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required.
The right to erasure is limited if processing is necessary, for example:
- for compliance with legal obligations
- for establishment, exercise or defence of legal claims
5. Right for notification
If you have made use of the right to erasure, rectification or restriction, we will notify all recipients your personal data was shared with, to erase or correct your personal data resp. to restrict processing unless this is impossible or disproportionate.
You have the right to be informed about these recipients.
6. Right for data portability
You have the right to request your personal data from us in machine-readable format.
7. Right to object
You have the right to object for reasons relating to your particular situation to processing your personal data.
8. Right to withdraw your data protection consent
You have the right to withdraw your consent to data processing at any time. By withdrawal the lawfulness of processing up to the withdrawal of consent remains intact.
9. Automated individual decision-making (including profiling)
You have the right not to be subject to a decision based solely on automated processing, including profiling if such a decision leads to legal effects for you or seriously affects you in a similar way.
This does not apply if such a decision
- is necessary for entering into or fulfillment of a contract between you and Indyon GmbH,
- is authorised by EU or member state law and which contains measures suitable for safeguarding your rights, freedoms and legitimate interest
- is based on your explicit consent.
However, these decisions must not be based on special categories of personal data under Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g DSGVO applies and reasonable measures have been taken to protect the rights and freedoms as well as your legitimate interests.
With regard to the cases referred to in (1) and (3), the person responsible shall take appropriate measures to uphold the rights and freedoms and their legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and heard on challenge of the decision.
10. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is against the DSGVO violates.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.