Data protection declaration according to DSG

This data protection declaration reveals how the KissSalis Betriebsgesellschaft mbH (following: KissSalis thermal spa) rises, uses, passes on and discloses the personal data of the visitors of the website and in which manner this occurs. Furthermore the declaration describes how the KissSalis thermal spa guarantees the safety of the processed personal data.

I. Name and address of the person in charge

The person in charge in the sense of the data protection declaration and other national data protection declarations of the member states as well as other data protection regulations is:

KissSalis Betriebsgesellschaft mbH
Heiligenfelder Allee 16
97688 Bad Kissingen
Telefon: +49 (0) 971 / 12 18 00–0
E-Mail: info@kisssalis.de
Website: www.kisssalis.de

II. Name and address of the data protection officer

The data protection officer of the person in charge is:

Kircher Datenschutz
Telegraphengasse 1
36037 Fulda
Telefon: +49 (0) 661 / 960 906-36
Website: www.datenschutz-kanzlei.com

III. General informations about the data processing

1. Extent of the processing of personal data

The KissSalis thermal spa processes person data about the user, when they

  • visit the KissSalis thermal spa website,
  • order online products or services by the KissSalis spa. Part of that is particular the registration for accessible only with personal login services as e.g. the wellness scheduling and the booking of courses.
  • take part in a contest
  • sign in for a newsletter

The KissSalis thermal spa processes those person data (e.g. name, address, e-mail address, telephone or fax number) which the user explicitly and actively provides. In addition the web server of the KissSalis thermal spa records details of the visit of the user automatically (e.g. IP address, browser type and version, used operating system, origin website, called pages, date, retention period).

The processing of personal data of our users occurs regularly and only with the consent of the user. An exception is valid in such cases in which a previous obtaining of a consent is not possible for actual reasons and the processing of the data is allowed by legal rules.

2. Legal foundation for the processing of personal data

As far as we obtain a consent of the affected person for parts of processing of personal data, Section 6(1a) of the data protection declaration (DSGVO) is used as a legal foundation. For the processing of personal data that is necessary to the fulfillment of a contract that contracting party is the affected person Section 6(1b) DSGVO is used as a legal foundation. This is valid therefore for parts of processing which are necessary to the realization of more measures.

As far as a processing of personal data is necessary to the fulfillment of a legal obligation, which succumbs to our enterprise, Section 6(1c) DSGVO is used as a legal foundation. For the case that vital interests of the affected person or another natural person require a processing of personal data Section 6(1d) DSGVO is used as a legal foundation.

If the processing of interest of our enterprise or a third party entitled to the protection of one is necessary and the interests, basic rights and basic freedoms of the person affected do not outweigh the first-mentioned interest, then Section 6(1f) DSGVO is used as a legal foundation for the processing.

3. Data erasure and storage duration

The personal data of the affected person are erased or blocked as soon as the purpose of the storage is dropped. A storage can occur in addition if this was planned through the european or national legislator in union-legal regulations, laws or other rules which the person in charge succumbs to. A blocking or deletion of the data occurs also if a storage period of time stipulated by the mentioned norms expires, unless a necessity of the further storage of the data exists for a contract conclusion or a contract performance.

IV. Preparation of the web site and creation of logging files

1. Description and extent of the data processing

With the case of every call on our website our system automatically captures data and information of the computer system of the calling computer.

Following data are raised here:

  • Information about the browser type and the used version
  • The operating system of the user
  • The internet service provider of the user
  • The IP address of the user
  • Date and time of the access
  • Websites from which the system of the user reaches onto our website
  • Websites which are called from the system of the user via our website

These data are also stored in the logging files of our system. A storage of these data together with other personal data of the user does not occur.

2. Legal foundation for the data processing

Legal foundation for the temporary storage of the data and the logging files is Section 6(1f) DSGVO.

3. Purpose of the data processing

The temporary storage of the IP address through the system is necessary in order to facilitate a delivery from the web site to the computer of the user. Therefor the IP address of the user must keep on being stored for the duration of the meeting.

The storage in logging files occurs in order to guarantee the effectiveness of the web site. Furthermore the data serve us for the optimization of the web site and to the backup of the security of our data processing systems. An evaluation of the data to marketing purposes does not occur in this connection.

In these purposes our entitled interest is also due to the data processing according to Section 6(1f) DSGVO.

4. Duration of the storage

The data are deleted as soon as their elevation are no longer necessary for the reaching of the purpose. In the case of the gathering of the data for the preparation of the website this is the case if the respective meeting is ended.

In the case of the storage of the data in logging files this is the case after seven days at the latest. An additional storage is possible. In this case the IP addresses of the users become deleted or alienate so that an assignment of the calling client is not possible anymore.

5. Contradiction and elimination possibility

The gathering of the data for the preparation of the web site and the storage of the data in logging files is compellingly necessary for the company of the website. No contradiction possibility exists subsequently on the part of the user.

V. Use of cookies

1. Description and extent of the data processing

Our web page uses cookies. With the case of cookies it is a question of text files which are stored in the internet browser and/or of the internet browser on the computer system of the user. If a user calls a website, then a cookie can be stored on the operating system of the user. This cookie contains a characteristic character string which facilitates an unequivocal identification of the browser while calling renewed the web site.

We use cookies in order to arrange our web site more in a user-friendly way. Some elements of our website require it, that the calling browser can be identified also after a changeover. In the cookies following data are stored in this case and sent:

  • Language settings
  • Article in a market basket
  • Log-In-Informationen
  • Browser type/-version
  • Used operating system,
  • Websites from which the system of the user reaches onto our website
  • Hostname of the grasping computer (IP address),
  • Time of the server inquiry

We use cookies on our website in addition which facilitate an analysis of the surfing-behavior of the users. In this way following data can be sent:

  • Entered Search Keys
  • Frequency of side calls
  • demands of website functions

The data of the users raised in this way to become pseudonymized through technical precautions. Therefore an assignment of the data to the calling user is not possible anymore. The data are not stored together with other personal data of the users.

2. Legal foundation for the data processing

The legal foundation for the processing of personal data with cookies is Section 6 (1f) DSGVO.

3. Purpose of the data processing

The purpose of the use of technically necessary cookies is to simplify the use of web sites for the users. Some functions of our website cannot be offered without the use of cookies. Therefor it is necessary that the browser is recognized also after a changeover.

We need cookies for following applications:

  • Market basket
  • Takeover of language settings
  • Notice from search keys

The user data raised through technically necessary cookies are not used to the creation of user profiles.

The use of the analysis cookies occurs for the purpose, to correct the quality of our web site and their contents. With the analysis cookies we find out, how the website is used and are able to optimize our offer constantly.

In these purposes also our entitled interest lies in the processing of the personal data according to Section
6 (1f) DSGVO.

4. Duration of the storage, contradiction and elimination possibility
Cookies are stored on the computer of the user and sent to our page by the computer. Therefore you have also the full control of the use of cookies as a user. Through a change of the settings in your internet browser you can deactivate or restrict the transfer of cookies. Already stored cookies can be put out at any time. This can also occur automatically. If cookies are deactivated for our web site, possibly not all functions of the web site can be used anymore.

VI. Newsletter

1. Description and extent of the data processing

On our website it`s possible to subscibe a free newsletter. In this case the data are sent from the input mask to us (Name and e-mail address) during the registration for the newsletter.

Furthermore following data are raised during the registration

  • IP address of the calling computer
  • date and time of the registration

For the processing of the data your consent is obtained within the framework of the announcing-process and referred to this data protection declaration. The data are used exclusively for the dispatch of the newsletter.

2. Legal foundation for the data processing

Legal foundation for the processing of the data after registration to the newsletters through the user is with the case of presence of a consent of the user Section g (1a) DSGVO.

3. Purpose of the data processing

The elevation of the e-mail address of the user is used for delivering the newsletter. The elevation of other personal data within the framework of the announcing-process is used for preventing an abuse of the services or the used e-mail address.

4. Duration of the storage

The data are put out as soon as they are not their elevation anymore necessary for the reaching of the purpose. The e-mail address of the user is stored accordingly for so long as the subscription ticket of the newsletter is active.

5. Contradiction and elimination possibility

The subscription ticket of the newsletter can be canceled through the affected user at any time. For this purpose a corresponding link is found in every newsletter.

VII. Registration Online courses (kurse.kisssalis.de)

1.       We process inventory data (e.g. names and addresses as well as contact data of users), contract data (e.g. used services, names of contacts, payment information) for the purpose of fulfillment of our contractual obligations and services according to Section 6 (1b) DSGVO. The inputs characterized in online forms as binding are necessary for the contract end.

2.       Users must lay down a user account to see their orders in particular. Within the framework of the registration, the users are informed of the necessary mandatory entries. The user accounts are not public and cannot be indexed by search engines. If users have canceled their user account, their data with regard to the user account are erased except to which storage is necessary for trade or tax legal reasons according to Section 6 (1c) DSGVO. We are entitled, to put out all data of the user stored during the contract period irreparably.

3.       Within the framework of the registration and renewed registrations as well as demands of our online services, we store the IP address and the time of the respective user action. The storage occurs on basis of our entitled interests, as also the user at protection from abuse and other unauthorized use. A transmitting of these data to third parties does not occur fundamentally, except it is necessary to the pursuit of our claims or a statutory duty exists to that according to Section 6 (1c) DSGVO.

4.       The deletion occurs after more legal guarantee and comparison cash duties, the necessity of the storage of the data is checked every three years; in the case of the legal archiving duties the deletion occurs after their course (End trade (6 years) and fiscal (10 years) storage duty); Information in the customer account remain up to his deletion.

VIII. Purchase of vouchers (shop.kisssalis.de)

1.       We process inventory data (e.g. names and addresses as well as contact data of users), contract data (e.g. used services, names of contacts, payment information) for the purpose of fulfillment of our contractual obligations and services according to Section 6 (1b) DSGVO. The inputs characterized in online forms as binding are necessary for the contract end.

2.       The storage of the entered data occurs on basis of our entitled interests, as also the user at protection from abuse and other unauthorized use. A transmitting of these data to third parties does not occur fundamentally, except for it is necessary to the pursuit of our claims or a statutory duty exists to that according to Section 6 (1c) DSGVO.

IX. Booking of wellness-appointments (kisssaliswellness.km-it.de)

1.       We process inventory data (e.g. names and addresses as well as contact data of users), contract data (e.g. used services, names of contacts, payment information) for the purpose of fulfillment of our contractual obligations and services according to Section 6 (1b) DSGVO. The inputs characterized in online forms as binding, are necessary for the contract end.

2.       Users have to create a user account where they can see their orders. Within the framework of the registration, the users are informed of the necessary mandatory entries. The user accounts are not public and cannot be indexed by search engines. If users have canceled their user account, their data with regard to the user account are erased except to which storage is necessary for trade or tax legal reasons according to Section 6 (1c) DSGVO. We are entitled, to put out all data of the user stored during the contract period irreparably.

3.       Within the framework of the registration and renewed registrations as well as demands of our online services, we store the IP address and the time of the respective user action. The storage occurs on basis of our entitled interests, as also the user at protection from abuse and other unauthorized use. A transmitting of these data to third parties does not occur fundamentally, except for it is necessary to the pursuit of our claims or a statutory duty exists to that according to Section 6 (1c) DSGVO.

4.       The deletion occurs after more legal guarantee and comparison cash duties, the necessity of the storage of the data is checked every three years; in the case of the legal archiving duties the deletion occurs after their course (End trade (6 years) and fiscal (10 years) storage duty); Information in the customer account remain up to his deletion.

X. Google Analytics

1.       Based on our entitled interests (that is interest at the analysis, optimization and economical company of our online offer in the sense of Section 6 (1f) DSGVO) we use Google Analytics, a web analysis service of the Google LLC („Google“: Google Building Gordon House,4 Barrow St, Dublin, D04 E5W5, Irland). Google uses cookies. The information produced through the cookie about use of the online offer through the users are normally transmitted to a server by Google in the USA and stored there.

2.       Google is certified under the Privacy-Shield-descendant and offers a guarantee, to follow the European data protection right
(https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

3.       Google will use these information in our task in order to evaluate the use of our online offer through the users, in order to compile reports about the activities within this online offer and around services wider, combined with the use of this online offer and the internet use. In this case pseudonym subscription sets of the users can be created from the processed data.

4.       We employ Google Analytics to announce through within advertisements switched from advertising-services of Googles and his partners only to such users that showed also an interest at our online offer or show the certain features (e.g. interests at certain topics or products that are determined by means of the visited web pages), which we send at Google (so-called „Resale-“, and/or. „Google-Analytics-Audiences“). With the aid of the Remarketing Audiences we would also like to guarantee, that our advertisements correspond to the potential interest of the users and are not bothering work.

5.       We employ Google Analytics only with activated IP-anonymization. That means, the IP address of the users is abbreviated by Google within member states of the European Union or in other contract states of the agreement about the European Market. Only in exceptions the full IP address is transmitted to a server by Google in the USA and abbreviated there.

6.       The IP address sent from the browser of the user is not combined with other data by Google. The users can prevent the storage of the cookies through a corresponding attitude of their browser-software; the users can in addition prevent the gathering of the data produced through the cookie and related to their use of the online offer to Google as well as the processing of these data through Google, when they download the browser plug-in available under following link and install: tools.google.com/dlpage/gaoptout.

7.       Further information on the data use through Google, setting and contradiction possibilities from Google can be found on the web pages: www.google.com/intl/de/policies/privacy/partners („Data use through Google during your use of web sites or applications of our partners“), policies.google.com/technologies/ads („Data use to advertising-purposes“), adssettings.google.com/authenticated („Information that Google uses administer around you advertising insert).

8.       By the way the personal data are anonymized after a course of 14 months or erased.

XI. External Links

1. Description and extent of the data processing

The web sites of the KissSalis thermal spa can contain hyperlinks to other web sites which are not practiced by the KissSalis thermal spa or controlled. Web sites of third parties are not subjected to the present declaration. The KissSalis thermal spa is not responsible for their contents or contact with personal data.

XII. Contact sheet and e-mail-contact

1. Description and extent of the data processing

On our website a contact sheet which can be used for the electronic establishing of contact is available. If a user perceives this possibility, then those data which are entered in the input mask are sent to us and stored. These data are: Name and e-mail address as well as in the case of applications a telephone number.

In the moment of the dispatch of the information following data are also stored:

  • The IP address of the user
  • date and time of the registration

For the processing of the data your consent is obtained within the framework of the sending-process and referred to this data protection declaration.

An establishing of contact is alternative possible about the provided e-mail address. In this case the personal data of the user sent with the E-Mail are stored.

No transmitting of the data at third occurs in this connection. The data are used exclusively for the processing of the conversation.

2. Right basis for the data processing

Right basis for the processing of the data with the case of presence of a consent of the user is Section 6 (1a) DSGVO.

Right basis for the processing of the data which are sent in the course of a sending of an E-Mail is Section 6 (1f) DSGVO. If the e-mail-contact is aimed at the end of a contract, then additional right basis for the processing is Section 6 (1b) DSGVO.

3. Purpose of the data processing

The processing of the personal data from the input mask only serves us to the processing of the establishing of contact. In the case of an establishing of contact by E-Mail also the necessary entitled interest is due at that to the processing of the data.
The other personal data processed during the sending-process are used for preventing an abuse of the contact sheet and guaranteeing the security of our data processing systems.

4. Duration of the storage

The data are erased as soon as they are not necessary for the reaching of the purpose anymore. For the personal data from the input mask of the contact sheet and those ones which were sent by E-Mail this is the case if the respective conversation is ended with the user. The conversation is ended if the affected facts of affairs are definitively clarified.

The personal data during the sending-process besides addition raised are erased at the latest after a period of time of seven days.

5. Contradiction and elimination possibility

The user has the possibility to revoke his consent to the processing of the personal data at any time. If the user contacts us by E-Mail, he can contradict the storage of his personal data at any time. In such a case the conversation cannot be continued.

All personal data which were stored in the course of the establishing of contact are put out in this case.

XIII. Transmitting of the data to third parties

We divide your data to third parties under certain circumstances:

  • third service provider:

We access to service providers in order to process your personal data in our name. This can be used for various purposes, as for example the preparation of booking platforms or the administration of the vouchers (cash box system). All third service providers succumb to confidentiality agreements, they are not entitle to use your personal data to other purposes than the one set by the KissSalis Thermal Spa.

  • payment provider and (other) finance institutions:

If a moving booking demand is recommended for your booking by you or the holder of the credit card which was used for the booking, we have to share certain booking details with the payment provider and the respective finance institution in order to adapt the moving booking demand. These details can cover a copy of your booking confirmation or the IP address which was used for your booking. We can divide information with the respective finance institutions if this is indispensable according to our opinion in order to uncover fraudulent activities or to prevent.

  • Responsible Authorities:

We disclose personal data for the right enforcement if this is required by the law or urgently necessary for the prevention, exposure or prosecution of criminal actions or fraud or we are obliged to that by law for other reasons.

The transmission of personal data represented in this data protection declaration can include a transmission of personal data into other countries whose Data Protection Acts are not so comprehensive as in the countries of the European Union. As far as it requires European right, we will send personal data only to such receivers which show an adequate data protection level. In these cases we will reach contractual agreements as far as it is necessary in order to guarantee that your personal data are protected in agreement with European rules. You can contact us in order to see a copy of these contractual agreements. Please use the below indicated contact data for that.

XIV. Rights of the affected person

If personal data are processed by you, you are an affected person in the meaning of the DSGVO and you are entitled to following rights with respect to the responsible person in charge:

1. Access right to be informed

You can demand a confirmation from the person in charge over whether personal data which affect you are processed by us.

If there is such a processing, you can demand information from the person in charge about following information:

(1)   the purposes to which the personal data are processed;

(2)   the categories of personal data which are processed;

(3)   the receivers and/or the categories of receivers, opposite that the personal data affecting you were disclosed or be still disclosed;

(4)  the planned duration of the storage of the personal data affecting you or, if concrete information to that are not possible, criteria for the determination of the storage duration;

(5)   the existence of a right to adjustment or deletion of the personal data affecting you, a right to restriction of the processing through the person in charge or a contradiction right against this processing;

(6)   the existence of a complaint right near an inspectorate;

(7)    all available information about the origin of the data, if the personal data are not raised with the affected person;

(8)  the existence of an automatized decision - including profiling according to Section 22 (1+4)  DSGVO and – at least in these cases – expressive information about the involved logic as well as the range and the targeted effects of such a processing for the affected person.

You are entitled to the right to demand information about whether the personal data affecting you into a third country or to an international organization are sent. In this case you can demand, about the suitable guarantees according to Section 46 DSGVO in connection with the transmission.

2. Right on adjustment

You have the right to adjustment and/or completion with respect to the person in charge provided that the processed personal data which affect you are false or incomplete. The person in charge has to carry out the adjustment immediately.

3. Right on restriction of the processing

Under the following conditions you can demand the restriction of the processing of the personal data which are affecting you:

(1)     if you deny the correctness of those personal date that are affecting you for a duration that makes it possible for the person in charge to check the correctness of the personal data;

(2)     if the processing is illegal and you refuse the deletion of the personal data and demand the restriction of the use of the personal data instead of this;

(3)     if the person in charge does not longer require the personal data for the purposes of the processing, you however need these for the assertion, practice or defense of legal claims, or

(4)     when you contradict with the processing according to Section 21 (1) DSGVO and it`s not certain yet, whether the entitled reasons of the person in charge predominate in respect to your reasons.

If the processing of the personal data affecting you was restricted, these data – foreseen from their storage – may be processed only with your consent or to the assertion, practice or defense of legal claims or to the protection of the rights of another natural or juridical person or for reasons of an important public interest of the union or a member state.
The restriction of the processing became after the above mentioned conditions restricted, be taught by the person in charge before the restriction is canceled.

4. Right on deletion

a) Deletion duty

You can demand that the personal data affecting you are put out immediately of the person in charge, and the person in charge is obliged to put out these data immediately provided that one of the following reasons applies:

(1)     The personal data affecting you are not necessary anymore for the purposes for which they were raised or processed in other way.

(2)     You revoke your consent, onto which the processing according to Section 6 (1a) or 9 (2a) DSGVO supported, and an other right basis is missing for the processing

(3)     You contradict against the processing one according to Section 21 (1) DSGVO and there are no major entitled reasons for the processing, or you contradict against the processing one according to Section 21 (2) DSGVO.

(4)     The personal data affecting you were processed illegally.

(5)      The deletion of personal data concerning you shall be required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject

(6)     The personal data affecting you became raised with respect to offered services according to the information society according to Section 8 (1) DSGVO.

b) Information to third parties

If the person in charge made the personal data affecting you public and he is obliged to their deletion according to Section 17 (1) DSGVO, so it hits considering the available technology and the implementation costs of adequate measures, also technical kind, in order for the data processing to inform persons in charge that process the personal data of your demanding the deletion of all links for these personal data or of copies or replications of these personal data from them as an affected person

c) Exceptions

The right to deletion does not exist as far as the processing is necessary

(1)  for the practice of the right to freedom of expression and information;

(2)  for the fulfillment of a legal obligation which requires the processing according to the right of the union or the member states which the person in charge succumbs to, or for the perception of a task which lies in the public interest or occurs in practice of public power which was assigned to the person in charge;

(3)   for reasons of the public interest in the field of the public health according to Section 9 (2h + 2i) and 9 (3) DSGVO;

(4)  for archive purposes lying in the public interest, scientific or historical research purposes or for statistical purposes according to Section 89 (1) DSGVO, so far that under section a) mentioned right probable the realization of the objectives of this processing impossible does or seriously influences, or

(5)  to the assertion, practice or defense of legal claims.

5. Right on information

You asserted the right to adjustment, deletion or restriction of the processing in respect to the person in charge, it is obliged to this to inform all receivers to whom the personal data affecting you were disclosed of this adjustment or deletion of the data or restriction of the processing unless, this proves as impossible or is united with a disproportionate expenditure.

You are entitled to the right to be informed about these receivers in respect to the person in charge.

6. Right on data transferability

You have the right to receive the personal data affecting you which you provided for the person in charge in a structured, usual and machine-readable format. In addition you have the right to send these data to another person in charge without hindrance you through the person in charge who the personal data were provided for, provided that

(1)  the processing on a consent according to Section 6 (1a) DSGVO or Section 9 (2a) DSGVO or on a contract according to Section 6 (1b) DSGVO is based and

(2)  the processing with the aid of automatized procedures occurs.

In practice of this right you have further the right to obtain that the personal data affecting you are sent to another person in charge directly by a person in charge as far as this is technically feasible. Freedoms and rights of other persons must not be influenced by that.

The right to data transferability is not valid for a processing of personal data which is necessary for the perception of a task which lies in the public interest or occurs in practice of public power which was assigned to person in charge.

7. Contradiction right

You have the right to insert contradiction at any time, for reasons that result from their special situation against the processing of the personal data affecting you according to Section 6 (1e + 1f) DSGVO; this is valid also for a profiling based on these regulations.

The person in charge does not process the personal data affecting you anymore, unless, it can prove compelling reasons worth being protected for the processing that outweigh your interests, rights and freedoms, or the assertion, practice or defense of legal claims use the processing.

If the personal data affecting you are processed in order to practice direct advertising, you have the right to insert contradiction at any time with the processing of the personal data affecting you for the purpose of such advertising; this is also valid for the profiling as far as it is connected to such direct advertising.

If you contradict the processing for purposes of the direct advertising, then the personal data affecting you are not processed anymore for these purposes.
You carried out the possibility, in connection with the use of services of the information society – despite the guideline 2002/58/EC – your contradiction right by means of automatized procedures with the case of which technical specifications are used.

8. Right on withdrawal of the data protection legal consent declaration

You have the right to revoke your data protection legal consent declaration at any time. The legality of the processing occurred due to the consent up to the withdrawal is not affected by the withdrawal of the consent.

9. Automatized decision on an individual basis including profiling

You have the right not to be subjected to a decision being based exclusively on an automatized processing – including profiling – which unfolds legal effect opposite you or restricts you in similar manner considerably.

This is not valid, when the decision

(1)  is necessary for the end or the fulfillment of a contract between you and the person in charge,

(2)  is due to right rules of the union or the member states, by which the person in charge is defeated, is permissible and adequate measures for the protection of your rights and freedoms as well as their entitled these right rules contained interests or

(3)  occurs with your explicit consent.

However these decisions may not based on special categories of personal data according to Section 9 (1) DSGVO, provided that not Section 9 (2a + 2g) DSGVO is valid and adequate measures to the protection of the rights and freedoms as well as theirs entitled interests were hit.

With regard to the cases mentioned in (1) and (3) the person in charge hits adequate measures, in order to preserve the rights and freedoms as well as your entitled interests which at least the right belongs to on optaining of the intervention of a person on the part of the person in charge, on explanation of the own point of view and on contestation of the decision.

10. Right on complaint near an inspectorate

Regardless of an other administration-legal or judicial legal remedy you are entitled to the right to complaint near an inspectorate, in particular in the member state of their whereabouts, their job or the place of the probable violation, if you think that the processing of the personal data affecting you offends against the DSGVO.

The inspectorate which the complaint was submitted to informs the complaint leader about the state and the results of the complaint including the possibility of a judicial legal remedy according to Section 78 DSGVO.