1. Introduction

Your privacy as a user is very important to us. For your information, we will set out below to what extent we collect, process and use your data on our websites. All data collected here shall be treated as strictly confidential within our area of responsibility in accordance with the regulations of the EU General Data Protection Regulation (GDPR) and in compliance with the state-specific data protection provisions applicable to us, such as the Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG). Personal data refers to any information concerning the personal or circumstantial situation of an identified or identifiable natural person.

2. Collecting personal information

The Sächsischer Landeskontrollverband e.V. shall collect, store and use your personal information in order to process the services offered on the website incl. your orders, to carry out the associated internal processes. Furthermore, we store your data to ensure our association-specific retention obligation. When transferring your data, we use state-of-the-art encryption technologies (such as SSL) over HTTPS in order to protect it.

3. Use and disclosure of personal information

Your personal data (e.g. first and last name, address, email address, telephone number) that you provide us via this website shall only be processed for correspondence with you and only for the purpose for which you have provided us with the data. After you have consented, we will use this list data for occasional offers to you to inform you of other services and products that may interest you. You are of course entitled to object to this use of your data at any time.

The objection must be sent to:
Sächsischer Landeskontrollverband e.V.
August-Bebel-Str. 6
09577 Lichtenwalde
Phone (03 72 06) 87-0
Fax (03 72 06) 87-230
Email infoline@rizu.de

The data is not evaluated in any other way, except for statistical purposes and then always in anonymized form. Insofar as the Sächsischer Landeskontrollverband e.V. uses service providers to perform or fulfill tasks for it, the contractual relationships shall be governed in writing according to the regulations of the EU General Data Protection Regulation (GDPR) and in compliance with the state-specific data protection regulations of the Federal Data Protection Act (BDSG) applicable to us. In special cases, you will be asked to give your consent. In addition, the Sächsischer Landeskontrollverband e.V. may share anonymous data with partners in order to carry out statistical analyses. All these parties are prohibited from using your personal data except to provide the services of the Sächsischer Landeskontrollverband e.V. If presented with a court order, the Sächsischer Landeskontrollverband e.V. is entitled to pass your personal information on to the law enforcement agencies without informing you.

4. Newsletter

If you subscribe to our company's newsletter, the data in the respective input mask will be transmitted to our website's server and stored.  The data is processed based on your consent according to Art. 6.1 a GDPR. 

A double opt-in procedure is used for subscriptions to our newsletter. This means you will receive an email requesting confirmation of your subscription.  This confirmation is required to ensure that no one else can subscribe using your email address. When subscribing to the newsletter, the IP address of the user as well as the date and time of registration is stored. This serves to prevent misuse of the services or the e-mail address of the data subject.

Your data will not be disclosed to third parties. The data is only used for sending the newsletter.

The data subject can cancel their subscription to the newsletter at any time. For this purpose, a relevant link is provided in every newsletter. 

Likewise, consent to store the personal data can be revoked at any time (see 5. (4) of this privacy policy).

When you cancel the subscription, your data with regard to newsletter mailing will be deleted unless retention periods under commercial, tax or administrative law have to be observed. 

5. Rights as a data subject

(1) Right to confirmation

Any data subject has the right granted by the EU legislature and regulatory authority to demand confirmation from the controller as to whether their personal data is being processed. If a data subject wishes to exercise this right of confirmation, they may contact our data protection officer or another employee of the controller at any time.

(2) Right to information

Any data subject whose personal data is processed has the right granted by the EU legislature and regulatory authority to obtain at any time from the controller, free of charge, information on the personal data stored concerning them and a copy of this information. Furthermore, the European legislature and regulatory authority has granted the data subject access to the following information:

• the purpose of the processing
• the categories of personal data being processed
• the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organizations
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
• the right to rectification or deletion of your personal data or a restriction of the processing by the data controller or a right to object to such processing - the right to appeal to a supervisory authority
• if the personal data is not collected from the data subject: all available information on the origin of the data
• the existence of any automated decision-making processes, including profiling, as defined in Art. 22 para.1 and 4 GDPR and, at least in these cases, - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

Furthermore, the data subject has a right of access to whether their personal data has been sent to a third country or to an international organization. If this is the case, the data subject shall also have the right to obtain information on the appropriate safeguards in connection with the transfer. If a data subject wishes to exercise this right of access, they may contact our data protection officer or another employee of the controller at any time.

(3) Right to rectification

Any data subject whose personal data is processed has the right granted by the EU legislature and regulatory authority to request the immediate correction of any inaccurate personal data. Furthermore, taking into account the purposes of the processing, the data subject has the right to request that incomplete personal data be completed, including by means of a supplementary declaration. If a data subject wishes to exercise this right to rectification, they may contact our data protection officer or another employee of the controller at any time.

(4) Right to deletion (right to be forgotten)

Any data subject whose personal data is processed has the right granted by the EU legislature and regulatory authority to request from the controller that their personal data be deleted immediately, provided that one of the following reasons applies and insofar as the processing is not necessary:

• the personal data has been collected for purposes or processed in ways that are no longer necessary.
•   The data subject withdraws their consent on which the processing in accordance with Art. 6 para. 1 a) GDPR or Art. 9 para. 2 a) GDPR is based and there is no other legal basis for the processing.
•   The data subject objects to the processing in accordance with Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing or the data subject objects to the processing in accordance with Art. 21 para. 2 GDPR.
• The personal data have been unlawfully processed.
• The personal data must be deleted to comply with a legal obligation under European Union or Member State law to which the data controller is subject.
•  The personal data has been collected in relation to information society services offered according to Art. 8 para. 1 GDPR.

If one of the abovementioned reasons applies and a data subject wishes to have their personal data deleted, they may contact our data protection officer or another employee of the controller at any time. The data protection officer or another employee will arrange for the deletion request to be fulfilled immediately.

(5) Right to restrict processing

Any data subject whose personal data is processed has the right granted by the EU legislature and regulatory authority to demand that the data controller restrict processing where one of the following conditions applies:

• The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
• The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of the use of the personal data.
• The controller no longer needs the personal data for the purposes of the processing, but the data subject requires it for the assertion, exercise or defense of legal claims.
•   The data subject has objected to the processing in accordance with Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the data controller outweigh those of the data subject.

If one of the abovementioned conditions applies and a data subject wishes to request the restriction of personal data, they may contact our data protection officer or another employee of the controller at any time. The data protection officer or another employee will then initiate the restriction of the processing.

(6) Right to data portability

Any data subject whose personal data is processed has the right granted by the EU legislature and regulatory authority to receive their personal data, which has been provided by the data subject to a controller, in a structured, commonly used and machine-readable format. They also have the right to transmit this data to another data controller without hindrance from the data controller to whom the personal data was originally provided, provided that the processing is based on the consent provided for in Art. 6 para. 1 a) GDPR or Art. 9 para. 2 a) GDPR or on a contract according to Art. 6 para. 1 b) GDPR and processing is carried out by means of automated procedures, except where such processing is necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller. Furthermore, in exercising their right to data portability pursuant to Art. 20 para. 1 GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another as far as this is technically feasible and provided that this does not affect the rights and freedoms of others. To assert the right to data portability, the data controller can contact the appointed data protection officer or another employee at any time.

(7) Right to object

Any data subject whose personal data is processed has the right granted by the EU legislature and regulatory authority, for reasons arising from their particular situation, to oppose the processing of their personal data at any time which is undertaken on the basis of Art. 6 para. 1 e) or f) GDPR. Personal data will no longer be processed in the event of an objection unless we can demonstrate compelling legitimate grounds for the processing, which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. If personal data is processed in order to carry out direct advertising, the data subject has the right to object at any time to the processing of the personal data for the purpose of such advertising. If the data subject objects to the processing for direct advertising purposes, the personal data will no longer be processed for these purposes. In order to exercise the right to object, the data subject can contact the data protection officer or another employee directly.

4. Cookies

The website of the Sächsischer Landeskontrollverband e.V. uses cookies to make it easier to use. A cookie is a text file that is stored on your hard disk by the server. Cookies cannot be used to run programs or spread a virus. Cookies are personally attributed to you and can only be read by a web server in the domain that you have created yourself. One of the main reasons for using cookies is to enable you to use the website comfortably and save time. The purpose of a cookie is to report to the web server that you have returned to a particular page. This applies, for example, when you register on the website of the Sächsischer Landeskontrollverband e.V. The online cookie helps "http://www.lkvsachsen.de" to re-use specific information on future visits. This is intended to support you when entering your personal information, such as billing and delivery address. When you return to the same website “http://www.lkvsachsen.de”, your information is at hand and available again. In this way, the features of “http://www.lkvsachsen.de” can be adapted to the user’s wishes. You have the option of accepting or rejecting cookies. Most web browsers accept cookies automatically but you can set your browser so that it only stores the cookies of your preferred websites. If you decide to reject cookies, it may be the case that you cannot use interactive services of “http://www.lkvsachsen.de”.

5. Use of Google Analytics

(1) This website uses Google Analytics, a web analysis service provided by Google LLC ("Google"). Google Analytics uses so-called “cookies”, text files that are stored on your computer and which enable an analysis of how you use the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is enabled on this website, your IP address will first be truncated by Google within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services related to the use of the website and the internet.

(2) The IP address transmitted by your browser as part of Google Analytics is not conflated with other Google data.

(3)You can prevent cookies from being stored by selecting an appropriate setting on your browser software; however, we would like to point out that if you do this, you may not be able to fully access all functions provided on this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of such data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

(4) This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are only processed in truncated form in order to prevent Google from identifying specific individuals. If the data collected about you is personally identifiable, it will be blocked immediately and the personal data deleted as soon as possible.

(5) We use Google Analytics to analyze and regularly improve the use of our website. With the statistics thus gained, we can improve our site and make it more interesting for you as a user. For exceptional cases in which personal data is transferred to the USA, Google has agreed to comply with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 clause 1 lit. f GDPR.

(6) Information about the third party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: www.google.com/analytics/terms/de.html, Data protection overview: www.google.com/intl/de/analytics/learn/privacy.html, as well as the Privacy Policy: 

6. Google Maps

We integrate the maps provided by the "Google Maps" service of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Processed data may include in particular IP address and user location data; this data will not, however, be collected without the users’ consent (usually completed within the settings of their mobile devices). The data may be processed in the USA. Privacy Policy: www.google.com/policies/privacy/, Opt-Out: 

7. Google Fonts

We embed the fonts ("Google Fonts") of the provider Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Privacy Policy: www.google.com/policies/privacy/, Opt-Out: 

8. Disclaimer

We occasionally refer to the websites of affiliated companies and third parties. Although we select these third parties carefully, we cannot take any responsibility or assume any liability for the accuracy or completeness of the contents and data security of third-party websites. Nor does this privacy policy apply to linked third-party websites. All information contained on this website was checked with great care. However, we do not guarantee that the contents of our own websites are correct, complete and up to date at all times. Substantial modifications to this Privacy Policy are updated online here in good time.

9. Data protection information in accordance with the EU General Data Protection Regulation

In addition to this website-specific data protection information, the data protection information according to the EU General Data Protection Regulation shall also apply.

10. Contact, questions and comments

Contact with the provider of this website:
Sächsischer Landeskontrollverband e.V.
August-Bebel-Str. 6
09577 Lichtenwalde
Phone (03 72 06) 87-0
Fax (03 72 06) 87-230
Email infoline@rizu.de

Please contact our data protection officer with any questions, suggestions or comments related to data protection:
Kerstin Herschel, PRODATIS CONSULTING AG, Landhausstraße 8, 01067 Dresden, email: k.herschel@prodatis.com, tel. no. 0351-2662330
Last updated: May 2021