{"id":564,"date":"2024-09-10T08:20:03","date_gmt":"2024-09-10T06:20:03","guid":{"rendered":"https:\/\/carmaoac.zelantic.com\/?page_id=564"},"modified":"2024-12-20T15:10:32","modified_gmt":"2024-12-20T14:10:32","slug":"datasecurity","status":"publish","type":"page","link":"https:\/\/carmao.academy\/en\/datasecurity\/","title":{"rendered":"Datasecurity"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"564\" class=\"elementor elementor-564 elementor-220\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8d699c7 e-flex e-con-boxed e-con e-parent\" data-id=\"8d699c7\" data-element_type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-fc0ee57 e-flex e-con-boxed e-con e-child\" data-id=\"fc0ee57\" data-element_type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-6a05b23 e-con-full e-flex e-con e-child\" data-id=\"6a05b23\" data-element_type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-873abc2 elementor-widget elementor-widget-heading\" data-id=\"873abc2\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Datasecurity<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-12421aa elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"12421aa\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-f876545\" data-id=\"f876545\" data-element_type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;animation&quot;:&quot;none&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-69bfe50 elementor-widget-mobile__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"69bfe50\" data-element_type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Protecting<br> your data<br> is our priority<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-04b5812 elementor-widget__width-initial elementor-widget elementor-widget-text-editor\" data-id=\"04b5812\" data-element_type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Name and address of the controller<\/h2><p>The controller within the meaning of the General Data Protection Regulation and other<br \/>national data protection laws of the member states as well as other data protection<br \/>regulations is:<\/p><p>CARMAO GmbH<br \/>Walderdorffer Hof<br \/>Fahrgasse 5<br \/>65549 Limburg<br \/>Telefon: +49 6431 2196-0<br \/><a href=\"mailto:kontakt@carmao.de\">kontakt@carmao.de<\/a><br \/>www.carmao.de<\/p><h2>Name and address of the data protection officer<\/h2><p>The data protection officer of the controller is<\/p><p>Jens Gmerek<br \/>Telephone: +49 6431 2196-0<br \/>kontakt@carmao.de<\/p><h2>General information on data processing<\/h2><h3>Scope of the processing of personal data<\/h3><p>We only process our user&#8217;s personal data to the extent necessary to provide a functional<br \/>website and our content and services. The processing of our users&amp;#39; personal data only takes<br \/>place regularly with the user&#8217;s consent. An exception applies in cases where prior consent<br \/>cannot be obtained for factual reasons and the processing of the data is permitted by law.<\/p><h3>Legal basis for the processing of personal data<\/h3><p>Insofar as we obtain the consent of the data subject for the processing of personal data, Art.<br \/>6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.<br \/>When processing personal data that is necessary for the performance of a contract to which<br \/>the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also<br \/>applies to processing operations that are necessary to carry out pre-contractual measures.<\/p><p>Insofar as the processing of personal data is necessary to fulfill a legal obligation to which<br \/>our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.<br \/>In the event that vital interests of the data subject or another natural person require the<br \/>processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.<\/p><p>If the processing is necessary to safeguard a legitimate interest of our company or a third<br \/>party and if the interests, fundamental rights and freedoms of the data subject do not<br \/>outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for<br \/>the processing.<\/p><h3>Data erasure and storage duration<\/h3><p>The personal data of the data subject will be erased or blocked as soon as the purpose of<br \/>storage no longer applies. Data may also be stored if this has been provided for by the<br \/>European or national legislator in EU regulations, laws or other provisions to which the<br \/>controller is subject. The data will also be blocked or erased if a storage period prescribed by<br \/>the aforementioned standards expires, unless there is a need for further storage of the data<br \/>for the conclusion or fulfillment of a contract.<\/p><h3>Provision of the website and creation of log files<br \/>Description and scope of data processing<\/h3><p>Each time our website is accessed, our system automatically collects data and information<br \/>from the computer system of the accessing computer.<br \/>The following data is collected:<br \/>\uf0b7 Information about the browser type and version used<br \/>\uf0b7 The user&#8217;s operating system<br \/>\uf0b7 The user&#8217;s internet service provider<br \/>\uf0b7 The IP address of the user<br \/>\uf0b7 Date and time of access<br \/>\uf0b7 Websites from which the user&#8217;s system accesses our website<br \/>\uf0b7 Websites that are accessed by the user&#8217;s system via our website<br \/>The data is also stored in the log files of our system. This data is not stored together with<br \/>other personal data of the user.<\/p><h3>Legal basis for data processing<\/h3><p>The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.<\/p><h3>Purpose of the data processing<\/h3><p>The temporary storage of the IP address by the system is necessary to enable the website to<br \/>be delivered to the user&#8217;s computer. For this purpose, the user&#8217;s IP address must remain<br \/>stored for the duration of the session.<br \/>The data is stored in log files to ensure the functionality of the website. We also use the data<br \/>to optimize the website and to ensure the security of our information technology systems.<br \/>The data is not analyzed for marketing purposes in this context.<\/p><p>These purposes also constitute our legitimate interest in data processing in accordance with<br \/>Art. 6 para. 1 lit. f GDPR.<\/p><h3>Duration of storage<\/h3><p>The data is deleted as soon as it is no longer required to achieve the purpose for which it<br \/>was collected. In the case of the collection of data for the provision of the website, this is the<br \/>case when the respective session has ended.<br \/>If the data is stored in log files, this is the case after 30 days at the latest. Storage beyond<br \/>this period is possible. In this case, the IP addresses of the users are deleted or anonymized<br \/>so that it is no longer possible to identify the accessing client.<\/p><h3>Objection and removal options<\/h3><p>The collection of data for the provision of the website and the storage of data in log files is<br \/>absolutely necessary for the operation of the website. Consequently, the user has no option<br \/>to object.<\/p><h2>Use of cookies<\/h2><h4>a) Description and scope of data processing<\/h4><p>Our website uses cookies. Cookies are text files that are stored in the Internet browser or by<br \/>the Internet browser on the user&#8217;s computer system. When a user accesses a website, a<br \/>cookie may be stored on the user&#8217;s operating system. This cookie contains a characteristic<br \/>string of characters that enables the browser to be uniquely identified when the website is<br \/>called up again.<\/p><p>We also use cookies on our website that enable an analysis of the user&#8217;s surfing behavior.<br \/>The following data can be transmitted in this way<br \/>\uf0b7 Search terms entered<br \/>\uf0b7 Frequency of page views<br \/>\uf0b7 Use of website functions<br \/>The user data collected in this way is pseudonymized by technical precautions. It is therefore<br \/>no longer possible to assign the data to the accessing user. The data is not stored together<br \/>with other personal data of the user.<\/p><p>When accessing our website, users are informed by an info banner about the use of cookies<br \/>for analysis purposes and referred to this privacy policy. In this context, there is also a<br \/>reference to how the storage of cookies can be prevented in the browser settings. When<br \/>accessing our website, the user is informed about the use of cookies for analysis purposes<br \/>and his consent to the processing of the personal data used in this context is obtained. In this<br \/>context, reference is also made to this privacy policy.<\/p><h4>b) Legal basis for data processing<\/h4><p>The legal basis for the processing of personal data using technically necessary cookies is<br \/>Art. 6 para. 1 lit. f GDPR.<br \/>The legal basis for the processing of personal data using cookies for analysis purposes is<br \/>Art. 6 para. 1 lit. a GDPR if the user has given consent to this.<\/p><h4>c) Purpose of the data processing<\/h4><p>The purpose of using technically necessary cookies is to simplify the use of websites for<br \/>users. Some functions of our website cannot be offered without the use of cookies. For<br \/>these, it is necessary for the browser to be recognized even after a page change.<br \/>The user data collected by technically necessary cookies is not used to create user profiles.<br \/>The website uses analysis tools to collect general information about the usage behavior of<br \/>visitors. This includes, for example, pages viewed, length of visit, referring pages and general<br \/>information about your computer system such as operating system, screen resolution,<br \/>browser used, etc. All data collected is stored anonymously and cannot be traced back to<br \/>you personally. If you do not agree with this anonymized recording of your usage behavior,<br \/>you can prevent this by deactivating cookies in your browser.<\/p><h4>d) Use of Google Analytics<\/h4><p>This website also uses Google Analytics, an internet analysis service from Google. Google<br \/>Analytics uses so-called cookies (small text files), which are stored on your computer and<br \/>enable your use of the website to be analyzed.<br \/>The information generated by the cookies about your use of this website (including your IP<br \/>address) will be transmitted to and stored by Google on servers in the United States. Google<br \/>will use this information for the purpose of evaluating your use of the website, compiling<br \/>reports on website activity for website operators and providing other services relating to<br \/>website activity and internet usage. Google may also transfer this information to third parties<br \/>where required to do so by law, or where such third parties process the information on<br \/>Google&#8217;s behalf. Google will not associate your IP address with any other data held by<br \/>Google. You may refuse the use of cookies by selecting the appropriate settings on your<br \/>browser, however please note that if you do this you may not be able to use the full<br \/>functionality of this website. By using this website, you consent to the processing of data<br \/>about you by Google in the manner and for the purposes set out above.<br \/>We would like to inform you that this website uses Google Analytics exclusively by means of<br \/>a deactivation add-on \u201c_anonymizeIp()\u201d. Your IP address is not stored in full. The<br \/>identification of the visitor to the website is excluded.<\/p><p>By installing the browser add-on to deactivate Google Analytics<br \/>(http:\/\/tools.google.com\/dlpage\/gaoptout?hl=de), you can object to its use. By doing so, you<br \/>inform Google Analytics that no information about the website visit should be transmitted to<br \/>Google Analytics. Without your express consent, we will not use tracking tools in order to<br \/>collect data unnoticed.<br \/>\uf0b7 collect personal data about you,<br \/>\uf0b7 transmit such data to third-party providers and marketing platforms or<br \/>\uf0b7 to link the data with your personal data (name, address, etc.).<\/p><p>These purposes also constitute our legitimate interest in the processing of personal data in<br \/>accordance with Art. 6 para. 1 lit. f GDPR.<\/p><h4>e) Duration of storage, objection and removal options\u00a0<\/h4><p>Cookies are stored on the user&#8217;s computer and transmitted by it to our website. As a user,<br \/>you therefore have full control over the use of cookies. You can deactivate or restrict the<br \/>transmission of cookies by changing the settings in your Internet browser. Cookies that have<br \/>already been saved can be deleted at any time. This can also be done automatically. If<br \/>cookies are deactivated for our website, it may no longer be possible to use all functions of<br \/>the website to their full extent.<\/p><h2>Training registrations<\/h2><p>Description and scope of data processing<br \/>On our website, we offer users the opportunity to register for training courses by providing<br \/>personal data. The data is entered into an input mask and transmitted to us and stored. The<br \/>data is not passed on to third parties unless explicitly stated in the respective training course.<br \/>The following data is collected as part of the registration process:<br \/>Salutation, title, first name, surname, company, street and house number, zip code, city,<br \/>telephone, e-mail and, if applicable, data for a different billing address.<\/p><p>The following data is also stored at the time of registration:<br \/>\uf0b7 The IP address of the user<br \/>\uf0b7 Date and time of registration<br \/>As part of the registration process, the user&amp;#39;s consent to the processing of this data is<br \/>obtained.<\/p><h3>Legal basis for data processing<\/h3><p>The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has<br \/>given consent.<br \/>Purpose of the data processing<br \/>User registration is required for the processing of training courses, including participant<br \/>planning, invitations and invoicing.<\/p><h3>Duration of storage<\/h3><p>The data will be deleted as soon as it is no longer required to achieve the purpose for which<br \/>it was collected.<br \/>Right of objection and removal<br \/>As a training participant, you have the option of ending the storage of your data at any time.<br \/>You can have the data stored about you amended at any time. To do so, please send us an<\/p><p>e-mail to kontakt@carmao.de. If necessary, we will request further information from you in<br \/>order to be able to identify you beyond doubt.<\/p><h2>Quali-Pass orders<\/h2><h3>Description and scope of data processing<\/h3><p>On our website, we offer users the opportunity to purchase the Quali-Pass by providing<br \/>personal data. The data required to complete the order is entered into an input mask,<br \/>transmitted to us and stored. The data will not be passed on to third parties unless explicitly<br \/>stated in the respective order. Only the data required to process and fulfill the order is stored.<br \/>The following data is collected during the ordering process:<br \/>Title, first name, last name, company, street and house number, postal code, city, telephone,<br \/>e-mail and, if applicable, data for a different billing or delivery address.<br \/>The following data is also stored at the time of the order process:<br \/>1. the IP address of the user<br \/>2. date and time of the order<\/p><h3>Legal basis for data processing<\/h3><p>The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has<br \/>given consent, or Art. 6 para. 1 lit. b GDPR for the execution of the concluded contract.<\/p><h3>Purpose of the data processing<\/h3><p>According to Art. 6 para. 1 lit, b GDPR, the data is required for the execution and processing<br \/>of an order initiated by the customer (data subject). This concerns the processing of the<br \/>order, the sending of the Quali-Pass, as well as invoicing with all accounting processes. It is<br \/>not necessary for the user to register in order to process the order and issue the invoice.<\/p><h3>Duration of storage<\/h3><p>The data is deleted as soon as it is no longer required for the purpose for which it was<br \/>collected.<\/p><h3>Right of objection and removal<\/h3><p>As a customer, you have the option at any time to obtain information about your data stored<br \/>by us and to terminate the storage of your data. You can have the data stored about you<br \/>amended at any time and make use of your right to object. To do so, please send us an e-<br \/>mail to kontakt@carmao.de. If necessary, we will request further information from you in<br \/>order to be able to identify you beyond doubt.<br \/>Application form:<\/p><h3>Quali-Pass orders<br \/>Description and scope of data processing<\/h3><p>On our website, we offer users the opportunity to apply for job vacancies by providing<br \/>personal data. The data is entered into an input mask and transmitted to us and stored. The<br \/>data is not passed on to third parties. The following data is collected as part of the application<br \/>process:<\/p><p>Salutation, title, first name, surname, street and house number, zip code, city, telephone, e-<br \/>mail, CV and any additional information provided by the applicant.<br \/>The following data is also stored at the time of application:<br \/>1. The IP address of the user<br \/>2. Date and time of registration<br \/>As part of the application process, the user&amp;#39;s consent to the processing of this data is<br \/>obtained.<\/p><h3>Legal basis for data processing<\/h3><p>The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has<br \/>given consent.<\/p><h3>Purpose of the data processing<\/h3><p>The data transmitted as part of the application will be used to assess the applications and to<br \/>communicate with the respective applicant.<\/p><h3>Duration of storage<\/h3><p>The data is deleted as soon as it is no longer required to achieve the purpose for which it<br \/>was collected.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3ca2aea elementor-widget elementor-widget-shortcode\" data-id=\"3ca2aea\" data-element_type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\"><a  href=\"#consent-change\" id=\"rcb-sc-link-change\" data-success-message=\"\" class=\"rcb-sc-link rcb-sc-link-change \">Change privacy settings<\/a><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f6a5419 elementor-widget elementor-widget-shortcode\" data-id=\"f6a5419\" data-element_type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\"><a  href=\"#consent-history\" id=\"rcb-sc-link-history\" data-success-message=\"\" class=\"rcb-sc-link rcb-sc-link-history \">History of privacy settings<\/a><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d5b7ec3 elementor-widget elementor-widget-shortcode\" data-id=\"d5b7ec3\" data-element_type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\"><a  href=\"#consent-revoke\" id=\"rcb-sc-link-revoke\" data-success-message=\"Du hast die Einwilligung erfolgreich widerrufen. Die Seite wird nun neu geladen.\" class=\"rcb-sc-link rcb-sc-link-revoke \">Revoke consent<\/a><\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-3ea6523\" data-id=\"3ea6523\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-6c9ea90 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"6c9ea90\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-inner-column elementor-element elementor-element-e8e2477\" data-id=\"e8e2477\" data-element_type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f186cce elementor-widget elementor-widget-text-editor\" data-id=\"f186cce\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Right of objection and removal<\/h2><p><span style=\"font-weight: 400;\">As an applicant, you have the option of ending the storage of your data at any time. You can have the data stored about you amended at any time. To do so, please send us an e-mail to kontakt@carmao.de. If necessary, we will request further information from you in order to be able to identify you beyond doubt.<\/span><\/p><h3>\u00a0<\/h3><h2>Contact form and e-mail contact<\/h2><h3>Description and scope of data processing<\/h3><p><span style=\"font-weight: 400;\">There are various contact forms on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. These data are:<\/span><\/p><p><span style=\"font-weight: 400;\">Mandatory fields are name and e-mail address to enable a personal response. Other fields, if any, are optional and are left to the user&#8217;s discretion.<\/span><\/p><p><span style=\"font-weight: 400;\">The following data is also stored when the message is sent:<\/span><\/p><ol><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The IP address of the user<\/span><\/li><li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Date and time of the message<\/span><\/li><\/ol><p><span style=\"font-weight: 400;\">Your consent is obtained for the processing of the data as part of the sending process and reference is made to this privacy policy.<\/span><\/p><p><span style=\"font-weight: 400;\">Alternatively, you can contact us via the e-mail address provided. In this case, the user&#8217;s personal data transmitted with the e-mail will be stored.<\/span><\/p><p><span style=\"font-weight: 400;\">The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.<\/span><\/p><h3>Legal basis for data processing<\/h3><p><span style=\"font-weight: 400;\">The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent.<\/span><\/p><p><span style=\"font-weight: 400;\">The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.<\/span><\/p><h3>\u00a0<\/h3><h3>Purpose of the data processing<\/h3><p><span style=\"font-weight: 400;\">The processing of the personal data from the input mask serves us solely to process the contact. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data.<\/span><\/p><p><span style=\"font-weight: 400;\">The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.<\/span><\/p><h3>Duration of storage<\/h3><p><span style=\"font-weight: 400;\">The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.<\/span><\/p><p><span style=\"font-weight: 400;\">The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.<\/span><\/p><h3>\u00a0<\/h3><h3>Right of objection and removal<\/h3><p><span style=\"font-weight: 400;\">The user has the option to revoke their consent to the processing of personal data at any time. If the user contacts us by e-mail, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.<\/span><\/p><p><i><span style=\"font-weight: 400;\">To do so, please send an informal e-mail to info@carmao.de to have your data deleted. If necessary, we will request further information from you in this context in order to identify you beyond doubt.<\/span><\/i><\/p><p><span style=\"font-weight: 400;\">All personal data stored in the course of making contact will be deleted in this case.<\/span><\/p><h3>Rights of the data subject<\/h3><p><i><span style=\"font-weight: 400;\">The following list includes all rights of data subjects under the GDPR. Rights that are not relevant to your own website do not need to be listed. In this respect, the list can be shortened.<\/span><\/i><\/p><p><i><span style=\"font-weight: 400;\">If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-\u00e0-vis the controller:<\/span><\/i><\/p><p><span style=\"font-weight: 400;\">Right to information<\/span><\/p><p><span style=\"font-weight: 400;\">You can request confirmation from the controller as to whether personal data concerning you is being processed by us.<\/span><\/p><p><span style=\"font-weight: 400;\">If such processing is taking place, you can request the following information from the controller:<\/span><\/p><p><span style=\"font-weight: 400;\">(1) the purposes for which the personal data are processed;<\/span><\/p><p><span style=\"font-weight: 400;\">(2) the categories of personal data being processed<\/span><\/p><p><span style=\"font-weight: 400;\">(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed<\/span><\/p><p><span style=\"font-weight: 400;\">(4) the envisaged period for which the personal data concerning you will be stored, or, if specific information on this is not possible, the criteria used to determine that period<\/span><\/p><p><span style=\"font-weight: 400;\">(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing<\/span><\/p><p><span style=\"font-weight: 400;\">(6) the existence of a right to lodge a complaint with a supervisory authority<\/span><\/p><p><span style=\"font-weight: 400;\">(7) all available information about the origin of the data if the personal data are not collected from the data subject<\/span><\/p><p><span style=\"font-weight: 400;\">(8) the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.<\/span><\/p><h3>Right to restriction of processing<\/h3><p><span style=\"font-weight: 400;\">Under the following conditions, you may request the restriction of the processing of your personal data:<\/span><\/p><p><span style=\"font-weight: 400;\">(1) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;<\/span><\/p><p><span style=\"font-weight: 400;\">(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead<\/span><\/p><p><span style=\"font-weight: 400;\">(3) the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; or<\/span><\/p><p><span style=\"font-weight: 400;\">(4) if you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds.<\/span><\/p><p><span style=\"font-weight: 400;\">If the processing of personal data concerning you has been restricted, this data &#8211; apart from its storage &#8211; may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.<\/span><\/p><p><span style=\"font-weight: 400;\">If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.<\/span><\/p><h3>\u00a0<\/h3><h3>Right to erasure<\/h3><h3>Obligation to erase<\/h3><p><span style=\"font-weight: 400;\">You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:<\/span><\/p><p><span style=\"font-weight: 400;\">(1) The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.<\/span><\/p><p><span style=\"font-weight: 400;\">(2) You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.<\/span><\/p><p><span style=\"font-weight: 400;\">(3) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.<\/span><\/p><p><span style=\"font-weight: 400;\">(4) The personal data concerning you has been processed unlawfully.<\/span><\/p><p><span style=\"font-weight: 400;\">(5) The deletion of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.<\/span><\/p><p><span style=\"font-weight: 400;\">(6) The personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.<\/span><\/p><h3><br \/><br \/><br \/><\/h3><h3>Information to third parties<\/h3><p><span style=\"font-weight: 400;\">If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) GDPR, it shall take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.<\/span><\/p><h3>Exceptions<\/h3><p><span style=\"font-weight: 400;\">The right to erasure does not exist if the processing is necessary<\/span><\/p><p><span style=\"font-weight: 400;\">(1) for exercising the right of freedom of expression and information;<\/span><\/p><p><span style=\"font-weight: 400;\">(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller<\/span><\/p><p><span style=\"font-weight: 400;\">(3) for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;<\/span><\/p><p><span style=\"font-weight: 400;\">(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or<\/span><\/p><p><span style=\"font-weight: 400;\">(5) for the establishment, exercise or defense of legal claims.<\/span><\/p><h3>Right to information<\/h3><p><span style=\"font-weight: 400;\">If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.<\/span><\/p><p><span style=\"font-weight: 400;\">You have the right to be informed of these recipients by the controller.<\/span><\/p><h3>\u00a0<\/h3><h3>Right to data portability<\/h3><p><span style=\"font-weight: 400;\">You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where<\/span><\/p><p><span style=\"font-weight: 400;\">(1) the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and<\/span><\/p><p><span style=\"font-weight: 400;\">(2) the processing is carried out by automated means.<\/span><\/p><p><span style=\"font-weight: 400;\">In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be affected by this.<\/span><\/p><p><span style=\"font-weight: 400;\">The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.<\/span><\/p><h3>Right to object<\/h3><p><span style=\"font-weight: 400;\">You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.<\/span><\/p><p><span style=\"font-weight: 400;\">The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.<\/span><\/p><p><span style=\"font-weight: 400;\">If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.<\/span><\/p><p><span style=\"font-weight: 400;\">If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.<\/span><\/p><p><span style=\"font-weight: 400;\">You have the option, in connection with the use of information society services &#8211; notwithstanding Directive 2002\/58\/EC &#8211; to exercise your right to object by means of automated procedures that use technical specifications.<\/span><\/p><h3>Right to revoke the declaration of consent under data protection law<\/h3><p><span style=\"font-weight: 400;\">You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.<\/span><\/p><h3>Subscription to our newsletter \/ information on the content, dispatch and evaluation of our newsletter<\/h3><p><span style=\"font-weight: 400;\">CARMAO GmbH informs you free of charge about current developments in the field of IT security (topics such as information security, business continuity, IT service management, IT service continuity management, data center, compliance and data protection), company news or special promotions as well as upcoming events of the CARMAO Academy (seminars, webinars, conferences, etc.).<\/span><\/p><p><span style=\"font-weight: 400;\">The newsletter is sent out approximately once a month. The frequency depends on current topics and developments as well as the events offered by the CARMAO Academy.<\/span><\/p><p><span style=\"font-weight: 400;\">The newsletter is sent out with the help of the Cleverreach software tool. The tool stores the e-mail addresses and other information for sending and analyzing the newsletter. The data you enter here will only be used to personalize the newsletter and will not be passed on to third parties. CARMAO GmbH has concluded an order data processing contract with Cleverreach, so that EU GDPR-compliant handling of your data is guaranteed.<\/span><\/p><p><span style=\"font-weight: 400;\">After sending your newsletter registration, you will receive a so-called double opt-in e-mail in which you will be asked to confirm your registration. You can object to receiving the newsletter at any time (so-called opt-out). You will find an unsubscribe link in every newsletter or the double opt-in email. You can also revoke your consent at any time by sending an email to kontakt@carmao.de.<\/span><\/p><h3>\u00a0<\/h3><p><span style=\"font-weight: 400;\">Your data will be deleted within 1 month after you stop receiving the newsletter, provided that there are no legal obligations to retain the data. By submitting the data you have entered, you consent to the data processing and confirm our privacy policy. In order to optimize the newsletter for you, CARMAO GmbH carries out evaluations to measure how often the newsletter is opened and which links you click on as a reader.<\/span><\/p><p><span style=\"font-weight: 400;\">We use the Google service reCaptcha to determine whether a human or a computer is making a certain entry in our contact or newsletter form. Google uses the following data to check whether you are a human or a computer IP address of the end device used, the website that you visit on our site and on which the captcha is integrated, the date and duration of the visit, the identification data of the browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks in which you have to identify images. The legal basis for the data processing described is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in this data processing to ensure the security of our website and to protect us from automated entries (attacks).<\/span><\/p><h3>\u00a0<\/h3><h3>Right to lodge a complaint with a supervisory authority<\/h3><p><span style=\"font-weight: 400;\">Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.<\/span><\/p><p><span style=\"font-weight: 400;\">The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 77 GDPR.<\/span><\/p><p><span style=\"font-weight: 400;\">The supervisory authority responsible for us is the Hessische Datenschutzbeauftragte, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Tel. 0611\/ 1408 0; Internet: https:\/\/datenschutz.hessen.de\/service\/beschwerde; E-Mail: poststelle@datenschutz.hessen.de.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Datasecurity Protecting your data is our priority Name and address of the controller The controller within the meaning of the General Data Protection Regulation and othernational data protection laws of the member states as well as other data protectionregulations is: CARMAO GmbHWalderdorffer HofFahrgasse 565549 LimburgTelefon: +49 6431 2196-0kontakt@carmao.dewww.carmao.de Name and address of the data protection [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-564","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Datasecurity - Academy for Organizational Resilience<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/carmao.academy\/en\/datasecurity\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Datasecurity - Academy for Organizational Resilience\" \/>\n<meta property=\"og:description\" content=\"Datasecurity Protecting your data is our priority Name and address of the controller The controller within the meaning of the General Data Protection Regulation and othernational data protection laws of the member states as well as other data protectionregulations is: CARMAO GmbHWalderdorffer HofFahrgasse 565549 LimburgTelefon: +49 6431 2196-0kontakt@carmao.dewww.carmao.de Name and address of the data protection [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/carmao.academy\/en\/datasecurity\/\" \/>\n<meta property=\"og:site_name\" content=\"Academy for Organizational Resilience\" \/>\n<meta property=\"article:modified_time\" content=\"2024-12-20T14:10:32+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"23 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/carmao.academy\/en\/datasecurity\/\",\"url\":\"https:\/\/carmao.academy\/en\/datasecurity\/\",\"name\":\"Datasecurity - Academy for Organizational Resilience\",\"isPartOf\":{\"@id\":\"https:\/\/carmao.academy\/en\/#website\"},\"datePublished\":\"2024-09-10T06:20:03+00:00\",\"dateModified\":\"2024-12-20T14:10:32+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/carmao.academy\/en\/datasecurity\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/carmao.academy\/en\/datasecurity\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/carmao.academy\/en\/datasecurity\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\/\/carmao.academy\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Datasecurity\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/carmao.academy\/en\/#website\",\"url\":\"https:\/\/carmao.academy\/en\/\",\"name\":\"Academy for Organizational Resilience\",\"description\":\"Zielgerichtete Fach- und F\u00fchrungskr\u00e4fte-Entwicklung\",\"publisher\":{\"@id\":\"https:\/\/carmao.academy\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/carmao.academy\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/carmao.academy\/en\/#organization\",\"name\":\"Academy for Organizational Resilience\",\"url\":\"https:\/\/carmao.academy\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/carmao.academy\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/carmao.academy\/wp-content\/uploads\/2024\/09\/carmao_academy_logo.jpg\",\"contentUrl\":\"https:\/\/carmao.academy\/wp-content\/uploads\/2024\/09\/carmao_academy_logo.jpg\",\"width\":300,\"height\":100,\"caption\":\"Academy for Organizational Resilience\"},\"image\":{\"@id\":\"https:\/\/carmao.academy\/en\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Datasecurity - Academy for Organizational Resilience","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/carmao.academy\/en\/datasecurity\/","og_locale":"en_US","og_type":"article","og_title":"Datasecurity - Academy for Organizational Resilience","og_description":"Datasecurity Protecting your data is our priority Name and address of the controller The controller within the meaning of the General Data Protection Regulation and othernational data protection laws of the member states as well as other data protectionregulations is: CARMAO GmbHWalderdorffer HofFahrgasse 565549 LimburgTelefon: +49 6431 2196-0kontakt@carmao.dewww.carmao.de Name and address of the data protection [&hellip;]","og_url":"https:\/\/carmao.academy\/en\/datasecurity\/","og_site_name":"Academy for Organizational Resilience","article_modified_time":"2024-12-20T14:10:32+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"23 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/carmao.academy\/en\/datasecurity\/","url":"https:\/\/carmao.academy\/en\/datasecurity\/","name":"Datasecurity - Academy for Organizational Resilience","isPartOf":{"@id":"https:\/\/carmao.academy\/en\/#website"},"datePublished":"2024-09-10T06:20:03+00:00","dateModified":"2024-12-20T14:10:32+00:00","breadcrumb":{"@id":"https:\/\/carmao.academy\/en\/datasecurity\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/carmao.academy\/en\/datasecurity\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/carmao.academy\/en\/datasecurity\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/carmao.academy\/en\/"},{"@type":"ListItem","position":2,"name":"Datasecurity"}]},{"@type":"WebSite","@id":"https:\/\/carmao.academy\/en\/#website","url":"https:\/\/carmao.academy\/en\/","name":"Academy for Organizational Resilience","description":"Zielgerichtete Fach- und F\u00fchrungskr\u00e4fte-Entwicklung","publisher":{"@id":"https:\/\/carmao.academy\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/carmao.academy\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/carmao.academy\/en\/#organization","name":"Academy for Organizational Resilience","url":"https:\/\/carmao.academy\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/carmao.academy\/en\/#\/schema\/logo\/image\/","url":"https:\/\/carmao.academy\/wp-content\/uploads\/2024\/09\/carmao_academy_logo.jpg","contentUrl":"https:\/\/carmao.academy\/wp-content\/uploads\/2024\/09\/carmao_academy_logo.jpg","width":300,"height":100,"caption":"Academy for Organizational Resilience"},"image":{"@id":"https:\/\/carmao.academy\/en\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/carmao.academy\/en\/wp-json\/wp\/v2\/pages\/564","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/carmao.academy\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/carmao.academy\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/carmao.academy\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/carmao.academy\/en\/wp-json\/wp\/v2\/comments?post=564"}],"version-history":[{"count":11,"href":"https:\/\/carmao.academy\/en\/wp-json\/wp\/v2\/pages\/564\/revisions"}],"predecessor-version":[{"id":644,"href":"https:\/\/carmao.academy\/en\/wp-json\/wp\/v2\/pages\/564\/revisions\/644"}],"wp:attachment":[{"href":"https:\/\/carmao.academy\/en\/wp-json\/wp\/v2\/media?parent=564"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}