Privacy Policy
We take the protection of your personal data very seriously and comply with the data protection provisions of the General Data Protection Regulation of the European Union (GDPR), which came into force on 25 May 2018. Below we inform you about how we handle your data.
This privacy policy explains the nature, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our website. With regard to the terms used, such as “processing” or “controller”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
Name and address of the controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is:
m-s Teststudios Herzog + Klein GmbH
Breite Gasse 58-60
90402 Nürnberg
Germany
Phone: +49 911 208867
Fax: +49 911 222875
Email: nuernberg@ms-teststudios.de
Represented by:
Mr Frank Herzog
Mr Hermann Klein
Contact details of the data protection officer
Our data protection officer can be reached as follows: muenchen@hg-teststudios.de
General information on data processing
Scope of the processing of personal data
As a matter of principle, we collect and use personal data of our users only to the extent necessary to provide a functioning website as well as our content and services. As a rule, personal data of our users is collected and used only with the user's consent. An exception applies in cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by statutory provisions.
Legal basis for the processing
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or of a third party, and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.
Erasure of data and storage period
The personal data of the data subject is erased or blocked in accordance with Art. 17 and 18 GDPR as soon as the purpose of storage no longer applies and no statutory retention obligations prevent its erasure. If the data is not erased because it is required for other, legally permissible purposes, its processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.
In accordance with statutory requirements in Germany, data is retained in particular for 6 years pursuant to Section 257 (1) HGB (German Commercial Code: books of account, inventories, opening balance sheets, annual financial statements, commercial letters, accounting records, etc.) and for 10 years pursuant to Section 147 (1) AO (German Fiscal Code: books, records, management reports, accounting records, commercial and business letters, documents relevant for taxation, etc.).
Data collection on our website
Provision of the website and creation of server log files
The hosting provider of these pages automatically collects and stores information in so-called server log files, which your browser transmits automatically.
The following data is collected in this process:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the data retrieved
- Volume of data transferred
- Notification of whether the retrieval was successful
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Website from which the request originates
- Browser
- Operating system and its interface
- Language and version of the browser software
This data is not merged with other data sources.
The data is stored in log files in order to ensure the functionality of the website. In addition, the data helps us to optimise the website and to ensure the security of our information technology systems. These purposes also constitute our legitimate interest in the data processing pursuant to Art. 6 (1) (f) GDPR. The data is not evaluated for marketing purposes in this context.
The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. Where data is collected to provide the website, this is the case when the respective session has ended. Where data is stored in log files, this is the case after 28 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are erased or anonymised so that it is no longer possible to identify the calling client.
The collection of data to provide the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no possibility to object.
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
Contact form
If you contact us by email or via the contact form, the information you provide is stored for the purpose of processing the enquiry and for possible follow-up questions.
Test persons / participants in surveys
When test persons/participants in surveys first make contact, data such as name, postal address, date of birth, industry, email addresses and telephone numbers is recorded.
This data is recorded for the following purposes:
Making contact regarding participation in surveys such as group discussions, telephone interviews, face-to-face interviews, etc.
Legal basis for recording this data:
The legal basis for processing and answering initial enquiries is Art. 6 (1) (a) and (b) GDPR.
Duration of storage:
The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. Following a withdrawal of consent, this personal data is erased without delay.
Applicants
When test persons/participants in surveys first make contact, contact details such as name, postal address, date of birth, industry, email addresses and telephone numbers are recorded.
This data is recorded for the following purposes:
Participation in application procedures.
Legal basis for recording this data:
The legal basis for processing and answering initial enquiries is Art. 6 (1) (a) and (b) GDPR.
Duration of storage:
The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. Following a withdrawal of consent, this personal data is erased without delay.
Collection, processing and use of personal data following express consent
Beyond this, personal data is only collected, processed and used if you have given your express consent, Art. 6 (1) (a) BDSG. It is not used for any further purpose or passed on to third parties. We ask for your consent in the following case:
Newsletter
If you would like to subscribe to our newsletter, we need at least your email address to which the newsletter is to be sent. Any further information about you is merely optional in connection with the sending of the newsletter.
For your registration for our newsletter service we use the so-called “double opt-in procedure”. This procedure requires the respective user to confirm their registration for our newsletter service by clicking on a link contained in an email that we send, after registration for our service, to the email address the user has provided for this purpose. The registration and the confirmation are logged. This is intended to prevent unauthorised persons from registering for our newsletter service using someone else's email address.
You can withdraw any consent you have given at any time with effect for the future. Please use the unsubscribe function in our newsletters to do so.
Cooperation with processors and third parties
Insofar as we disclose data to other persons and companies (processors or third parties) in the course of our processing, transmit it to them or otherwise grant them access to the data, this is done only on the basis of a legal permission (e.g. if a transmission of the data to third parties, such as payment service providers, is necessary for the performance of a contract pursuant to Art. 6 (1) (b) GDPR), if you have consented, if a legal obligation provides for this, or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). Insofar as we commission third parties to process data on the basis of a so-called “data processing agreement”, this is done on the basis of Art. 28 GDPR.
Transfers to third countries
Insofar as we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or this happens in the context of using third-party services or disclosing or transmitting data to third parties, this only takes place if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process the data, or have it processed, in a third country only if the special requirements of Art. 44 et seq. GDPR are met. This means that the processing takes place, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection equivalent to that of the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).
Right of access of the data subject
Pursuant to Art. 15 GDPR, you have the right to request confirmation as to whether data concerning you is being processed, and to access to this data as well as to further information and copies of the data.
Right to rectification
Pursuant to Art. 16 GDPR, you have the right to request the completion of the data concerning you or the rectification of inaccurate data concerning you.
Right to erasure (“right to be forgotten”)
Pursuant to Art. 17 GDPR, you have the right to request that data concerning you be erased without delay or, alternatively, to request a restriction of the processing of the data pursuant to Art. 18 GDPR.
Right to restriction of processing
Pursuant to Art. 18 GDPR, you have the right to restriction of the processing of your data.
Right to data portability
Pursuant to Art. 20 GDPR, you have the right to request that you receive the data concerning you that you have provided to us. Furthermore, you can request its transmission to other controllers.
Right to lodge a complaint with a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the competent supervisory authority.
Right to withdraw consent
You have the right to withdraw consent you have given pursuant to Art. 7 (3) GDPR with effect for the future.
Right to object
You can object at any time to the future processing of the data concerning you in accordance with Art. 21 GDPR.
Erasure or blocking of data
We adhere to the principles of data avoidance and data minimisation. We therefore store your personal data only for as long as is necessary to achieve the purposes stated here or as provided for by the various storage periods laid down by law. Once the respective purpose no longer applies or these periods have expired, the corresponding data is routinely blocked or erased in accordance with the statutory provisions.
Your rights of access, rectification, blocking, erasure and objection
You have the right to obtain information about your personal data stored by us at any time. You also have the right to rectification, blocking or, apart from the data storage prescribed for business transactions, erasure of your personal data. Please contact our data protection officer for this purpose. You will find the contact details at the very top.
To ensure that a block on data can be taken into account at any time, this data must be kept in a blocking file for control purposes. You can also request the erasure of the data, provided there is no statutory archiving obligation. Where such an obligation exists, we will block your data on request.
You can make changes to, or withdraw, your consent with effect for the future by notifying us accordingly.
Changes to our privacy policy
We reserve the right to adapt this privacy policy from time to time so that it always complies with current legal requirements, or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.