Data protection
Information on the collection of personal data
Data protection is very important to us!
We take the protection of your personal data very seriously when you use our website or otherwise contact us. In the following, we provide information about the collection, processing and use of your personal data within our group of companies.
Responsible for data processing:
MEDIUM Werbeagentur GmbH
Am Lenkwerk 5 / 33609 Bielefeld
Tel.: +49 521 933 000 0
Fax: +49 521 933 000 55
Email: info@medium.ag
Any data subject can contact the data protection team free of charge as a single point of contact for all data protection-related questions and requests by emailing: datenschutz@medium.ag.
You can reach our external Data Protection Officer as follows:
ECOVIS Keller Rechtsanwälte PartG mbB
Lawyer Axel Keller / Senior Associate Karsten Neumann
Am Campus 1 – 11, 18182 Rostock-Bentwisch
Tel.: +49 381 12 88 49-0
Fax: +49 381 12 88 49-69
Email: dsb-nord@ecovis.com
Web: www.ecovis.com/datenschutzberater
Information on the collection of personal data in accordance with GDPR specifically for...
Our business partners and suppliers
1. General information about your rights
“Data subject” within the meaning of the EU General Data Protection Regulation (GDPR) is any natural person whose data is processed by the company or by a person authorised by the company.
As the data subject, when you make an application, you have the following rights:
the Right to obtain confirmation whether data concerning you is being processed and, if so, the Right to information about the data we have stored about you as well as further supplementary information about the processing purposes, data categories, recipients of data, storage period, origin of the data, existence of an automated decision-making process and, if the data is transferred outside the European Union, information about the appropriate guarantees and a free copy of the stored data (Art. 15 GDPR)
the Right to rectification of incorrect data (Art. 16 GDPR)
the Right to erasure of the data if there is no legal basis for further storage (Art. 17 GDPR)
the Right to restriction of the processing of the data to specific purposes (Art. 18 GDPR)
the Right to data portability (Art. 20 GDPR) and
the Right to object to the processing of your data (Art. 21 GDPR).
Any data processing is only lawful if it is legally authorised and the conditions of the law are met. These are determined by the EU General Data Protection Regulation and additionally by national laws. We will inform you of the respective legal basis in the event of an enquiry. We expressly point out that cases are conceivable in which processing can be based on several, coexisting legal bases.
If the processing of your data is based on consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
2. Separate information on the right to object according to Article 21 GDPR
In accordance with Art. 21(1) GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you that is based on point f of Art. 6(1) GDPR (Processing of data for the legitimate interests of the controller or a third party).
If you object, we will no longer process your personal data, unless we are able to demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
If the processing is carried out for the purposes of direct advertising, you have the right according to Art. 21(2) GDPR to submit an objection to the processing of your personal data for such advertising purposes.
3. Right to lodge a complaint
Finally, you have the right to contact our external Data Protection Officer with a request for support or with information. They are obliged to maintain confidentiality with regard to your enquiry as far as the processing of your data is concerned and as long as you have not released them from their duty of confidentiality.
You can reach our data protection officer using the contact details above.
In addition, according to Art. 77, GDPR, you have the right to lodge a complaint with a supervisory authority if you consider the processing of the data concerning your person to infringe data protection regulations. You can contact the data protection supervisory authority in your home country or, in Germany, the competent supervisory authority of the federal state in which you live. You can find a current overview of the contact data here: https://www.datenschutzkonferenz-online.de/datenschutzaufsichtsbehoerden.html
However, you can also contact the supervisory authority responsible for us directly:
Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Tel.: 0211/38424-0
Fax: 0211/38424-10
Email: poststelle@ldi.nrw.de
4. Transfer and international elements
Medium Werbeagentur GmbH uses so-called data processors within the meaning of Art. 4(10) GDPR in compliance with the statutory provisions for the processing of personal data in some areas. Forwarding and processing of the data by you therefore does not constitute a transfer within the meaning of Art. 4(2) GDPR. Any other transfer to third parties will only take place for the purposes provided for by law.
An order processing contract has been concluded with each of the processors working for Medium Werbeagentur, which fulfils the requirements of Art. 28 GDPR.
5. Duration of data storage
The personal data collected by us will be stored until the statutory retention obligation has expired and will then be deleted, in particular if we are obliged to store data for longer periods as per point c of Art. 6(1) GDPR due to tax-related and commercial archiving and documentation obligations (as per German Commercial Code, Criminal Code or Fiscal Code) or you have given your consent to longer storage periods as per point a of Art. 6(1) GDPR.
Subject to such retention obligations, data will be deleted when the purpose for which it was collected no longer applies.