Responsible data controller in the meaning of Art. 4 No. 7 GDPR is:
You can contact the data protection officer via email at:firstname.lastname@example.org
During the course of carrying out our business and performing our services, andamp collects personal data to conduct our business, provide and market our services, and meet our legal obligations. Likewise, we may also collect personal data for other purposes, which we would describe in more detail to you at the point we collect the personal data.
You may refuse to provide us with some or all of your personal data; however, this may limit the ways in which we can interact with you, including providing you with our services.
We collect personal data through our internet access logs. When you access our website, your internet address is automatically collected and is placed in our internet access logs (i.e., log files on server). We also record the URLs of the websites and pages you visit, the times and dates of such visits, information about the computer hardware and software you use.
This information may include Internet protocol (IP) addresses, browser type and version, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data, number of visits, websites from which you accessed our site (Referrer), and websites that are accessed by your system via our site.
The processing of this data is necessary for the provision and the security of our website. The legal basis for this processing is Art. 6(1)(f) GDPR. We do not link these data to certain individuals. After the processing for the mentioned purposes, the data will be deleted.
On our website we use several contact forms which can be used to get in contact with us electronically. To handle your request it is necessary to provide us with a valid email address, and, in addition, we store your IP address and the time of your request to prevent any misuse of our contact forms. Alternatively, you may contact us via the e-mail addresses cited above (Section 1). If you use one of these channels, the personal data transmitted will be stored automatically by andamp as data controller to handle our contact with you. The legal basis for this processing is Art. 6(1)(f) GDPR.
In some cases we may ask you for further information, such as name, occupation, address or telephone number. Regarding the processing of this personal data you will be asked to grant your explicit consent. The legal basis for this processing is Art. 6(1)(a) GDPR.
We do not generally seek to collect special categories of personal data through this site.
“Special categories of personal data” includes the various categories of personal information and data identified by privacy laws of United States, European and other jurisdictions as requiring special treatment, including in some circumstances the need to obtain explicit consent. These categories may include personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning sexual orientation (Art. 9 GDPR).
Therefore, we advise you not to provide any unsolicited sensitive personal data. andamp applies HTTPS or other appropriate technical and organizational measures to secure the personal data transmitted over its website.
andamp shares your personal data with third parties, in particular non-andamp parties, only with your express consent or under another lawful basis for processing under the applicable law.
Categories of non-andamp parties with which we share your personal data include vendors such as host and cloud service providers, marketing and mailing agencies, and sub-contractors involved in the fulfilment of our contractual obligations towards our clients. The legal basis for this processing is Art. 6(1)(f) GDPR.
Our website uses Google Analytics, a web analysis service of Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA,www.google.com (“Google Analytics” or “Google”). Google Analytics employs cookies that are stored to your computer in order to facilitate an analysis of your use of the site. The information generated by these cookies, such as time, place and frequency of your visits to our site, including your IP address, is transmitted to Google’s location in the US and stored there.
In using Google Analytics our website employs the extension to anonymize IPs. In doing so, Google abbreviates and thereby anonymizes your IP address before transferring it from EU/EEA member states. Google uses this information to analyze your use of our site, to compile reports for us on internet activity and to provide other services relating to our website.
Google Analytics also uses electronic images known as web beacons (sometimes called single pixel gifs) and are used along with cookies to compile aggregated statistics to analyze how our site is used.
You can find additional information on how to install the browser add-on referenced above at the following link:https://tools.google.com/dlpage/gaoptout?hl=en.
For the cases in which personal data is transferred to the US, Google has self-certified pursuant to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).
As soon as the purpose for data storage is achieved, or the appropriate term of storage provided for by any applicable laws or regulations expires, your personal data will be deleted consistent with this and any other applicable andamp policies unless your personal data are required for the formation of or performance under a contract.
You have the following rights:
Right of access (Art. 15 GDPR)
In principle, you have the right to receive information on the points mentioned in Art. 15 GDPR. You also have the right to request a copy of your personal data in accordance with Art. 15 (3) GDPR.
Right to rectification or erasure (Art. 16 and 17 GDPR)
You have the right to have incorrect personal data corrected. In addition, you have the right to demand that your personal data is deleted if further processing is no longer necessary, if processing is unlawful or if you have withdrawn your consent.
Right to restriction of processing (Art. 18 GDPR)
If the conditions in Art. 18 GDPR are met, you have the right to have the processing of your personal data restricted, i.e. to prevent further processing for the time being.
Right to object (Art. 21 GDPR)
If the processing of your personal data is based on Art. 6 (1)e or f GDPR, you have the right to object to the processing if the further requirements of Art. 21 GDPR are met.
Right to data portability (Art. 20 GDPR)
Within the limits of Art. 20 GDPR, you have the right to receive your personal data in a machine-readable format in order to forward it or have it forwarded to another controller.
You can require this by sending us an email at email@example.com.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the location of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the applicable data protection laws and regulations.