The following privacy policy describes the collection, storage and processing of personal data in connection with the use of the website www.newpark.de and the measures taken to protect personal data.

Data protection information in accordance with Article 13 of the General Data Protection Regulation (GDPR)

The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States and other data protection provisions is:

newPark Planungs- und Entwicklungsgesellschaft mbH
Genthiner Straße
D-45711 Datteln
Tel: +49 2363 107 322
E-mail: a.taeuber@kreis-re.de
Management: Andreas Täuber

Data Protection Officer

Andreas Täuber
Executive Director
newPark Planungs- und Entwicklungsgesellschaft mbH
Genthiner Straße
D-45711 Datteln
Tel: +49 2363 107 322
E-mail: a.taeuber@kreis-re.de

Overview

• General information on data processing
• Provision of the website and creation of log files
• Use of cookies
• Right to information
• Right to rectification
• Right to deletion
• Right to restriction of processing
• Right to data portability
• Right of appeal
• Regulator

General information on data processing

Scope of the processing of personal data
Personal data is only collected to the extent necessary for the provision of a functional website and the use of content and services.

Data transmission on www.newpark.de is SSL-encrypted throughout.

Legal basis for the processing of personal data
Insofar as the consent of the data subject is obtained for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) is the legal basis.
When processing personal data that is necessary for the performance of a service, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) lit. d GDPR serves as the legal basis.

Where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller, Article 6(1)(e) GDPR serves as the legal basis for the processing.

Data deletion and storage duration
The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the data controller is subject. Blocking or deletion of data also takes place when a storage period prescribed by the above standards expires, unless further storage of the data is necessary for the conclusion or fulfillment of a contract.

Cooperation with processors and third parties
If, in the course of our processing, we disclose data to other people and companies (processors or third parties), transmit it to them or otherwise grant them access to the data, this shall only be done on the basis of a legal permission (e.g. if a transmission of the data to third parties is necessary for the performance of a contract under Art. 6 (1) lit. b GDPR), you have consented or a legal obligation provides for this. If we commission third parties with the processing of data on the basis of a so-called “order processing agreement”, this is done on the basis of Art. 28 GDPR.

Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using third-party services or disclosing or transferring data to third parties, this is only done if it is necessary for the fulfillment of our (pre-)contractual obligations, on the basis of your consent or due to a legal obligation. Subject to legal or contractual permissions, we process or permit the processing of data in a third country only if the specific requirements of Article 44 ff. GDPR are met. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g., for the USA by the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).

Provision of the website and creation of log files

Description, scope and duration of data processing
When calling up the website of newPark Datteln, no data, log files and information of the calling computer are recorded by the system. Also, the IP addresses that clearly identify the inquirer are not stored.

Use of cookies

Description and scope of data processing
Only technically necessary cookies are used and stored. Other cookies are not used and not stored.

Right to information

Data protection rights are regulated in Chapter 3 (Art. 12 ff.) of the GDPR. On this basis, users have the right to obtain information about the personal data stored, about the purposes of processing, about any transfer to other bodies and about the duration of storage. To exercise the right to information, extracts or copies can be provided.

Right to rectification

Under Art. 16 of the GDPR, users have the right to request that inaccurate personal data concerning them be corrected.

Right to deletion

If the conditions of Art. 17 (1) a-f GDPR are met, users have the right to have the personal data concerning them deleted.

Right to restriction of processing

If the conditions of Art. 18 (1) a-d GDPR are met, users have the right to demand the restriction of processing.

Right to data portability

According to Art. 20 GDPR, users have the right to receive the personal data concerning them in a structured, common and machine-readable format. In addition, the users’ personal data may be transferred to other data controllers, provided that they have been collected within the meaning of Art. 6 (1) a GDPR and the further processing is carried out electronically.

Right of appeal

Under Art. 21 GDPR, users have the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them which is carried out on the basis of Art. 6 (1) (e). The personal data will then only be processed if compelling legitimate grounds for the processing can be demonstrated which override the interests, rights and freedoms of the users, or for the establishment, exercise or defence of legal claims.

Regulator

State Commissioner for Data Protection and Freedom of Information NRW
Kavalleriestr. 2-4
40213 Düsseldorf
Tel.:  +49 211/38424-0
Fax: +49 211/38424-10
E-mail: poststelle@ldi.nrw.de
Internet: www.ldi.nrw.de