We, as operators of the website asp-stuttgart.de (also “website”) are responsible for the personal data of the user (“you”) of this website within the meaning of the applicable data protection law, especially the General Data Protection Regulation (“GDPR”).
In the following, we shall give an overview of which data is processed when you visit our website and on what legal basis this is carried out within the framework of our information obligations (article 13 ff of the GDPR). You will also receive information about how we protect your data both technically and organisationally and which rights you have against us and the supervisory authority.
1. Information about the party responsible
asp Architekten GmbH
Phone: +49 (0)711 223 38-0
Fax: +49 (0)711 223 38-88
2. Data Protection Officer
We have appointed a Data Protection Officer.
c/o DS Compliance GmbH
Phone: +49 (0)211 942 588 – 24
3. Processing of your personal data
Firstly, we would like to state that we appoint service providers for processing your personal data, if necessary, with whom we have signed order processing contracts. If the processors carry out data processing in a third country (not within the EU), we ensure that the safety level of your data guaranteed by the GDPR is not undermined (article 44 ff of the GDPR).
Informational use of our website
We you access our website to just visit it, so-called logfiles are processed by automatically acquiring them from our system.
The following logfiles are automatically processed:
• IP address of the requesting computer
• Type of Internet browser used
• Language of Internet browser used
• Pages accessed
• Access status/http status code
• Data quantity transferred
• Success or error in loading process
• Internet service provider of the user
(The logfiles contain your IP address and may also contain other personal data. Hence, an assignment to you is possible. However, we only save your data temporarily and, in particular, not together with other personal data.
It is necessary to process the aforementioned data for the provision of our website. We also save the data for the safety of our IT systems. Our legitimate interest in processing data on a legal basis of art. 6 (1) lit. f of the GDPR is also justified for these purposes. The logfiles containing your IP address are immediately deleted or anonymised after they are no longer necessary for the aforementioned purposes, but at the latest after one year.
Contact via e-mail, telephone or fax
You can contact us via email, telephone or fax. Your personal data transmitted in this way is stored with us. The data is solely processed for contacting you. The legal basis for processing your personal data is Art. 6 (1) lit. f of the GDPR. The data is stored until it is no longer necessary for the purpose of conversation with you and your concerns have been fully clarified.
If you are contacting in order to sign a contract with us, the legal basis for processing your personal data is Art. 6 (1) lit. b of the GDPR. This data is stored for as long as it is necessary to implement the contract. Furthermore, we store your data only to fulfil contractual or legal obligations (e.g. tax obligations) (art. 6 (1) lit. c of the GDPR).
In addition to the data that you disclose to us voluntarily, we receive the time (date and time) of your data transmission and your IP address. Processing your data is in our legitimate interest (Art. 6 (1) lit. f of the GDPR), to safeguard our systems and counter misuse. This data, which we additionally obtain after contacting you, is deleted as soon as it is no longer required, and at the latest after the issues of your approach have been fully clarified.
You can inform us at any time (see clause 1 above) that we should delete the data disclosed to us during the conversation. In this case, all the personal data of the conversion will be deleted, if permissible, and it will not be possible to continue the conversation.
Please note the following: You can make sure that cookies are not saved on your computer or that storage of only certain cookies is permitted. You can select this in your Internet browser settings. You can also view and delete the stored cookies there.
If you block all cookies, not all features of our website may be available to you.
We use our own cookies to ensure the functioning of our website. Some elements of our website necessarily require that your internet browser be recognized after a page break.
In the overview, you can understand the purposes for which your data is collected and the period over which it is stored:
Name Cookie Purpose of the cookie Storage time
wpml_referer_url Saves the last requested URL of the website and serves for setting the correct language 24 hours
For processing personal data in cookies, which we use on our website to ensure functioning of our website and our offer, the legal basis is art. 6 (1) lit. f of the GDPR.
Objection and removal option
As stated in the introductory part of this section, by changing the settings in your internet browser you can enable or restrict the transmission of cookies. Cookies that have already been saved by your Internet browser can be deleted from there at any time. If cookies are restricted or disabled for our website, it may not be possible to use all functionalities.
4. Application data
We inform about job vacancies in our team on our website or other platforms and you can send us your application via email. We process your data for processing your application, which means your application is reviewed by our employees, who are responsible for preselection. Your data is not passed on to third parties and we do not use your data for other purposes.
We store your application data. If we reject your application, we store the data only for as long as necessary, at the most for a period of six months, unless you consent to the storage of your application data for longer in order to be able to contact you after the end of this period.
The legal basis for processing your data is section 26 of the FDPA as well as article 88 of the GDPR.
5. Your rights
When we process your data, you are the “party concerned” within the meaning of the GDPR. You have the following rights: Right to information, right to correction, right to limitation of processing, right to deletion, right to consultation as well as right to data portability. Moreover, you have a right to object and a right of revocation and the right to complain to the supervisory authority.
Details about individual rights are given below:
a. Right to information
You have the right to ask us to confirm that we process your personal data. If we process your personal data, you have the right to receive information about the following:
• processing purpose
• the categories of personal data that are processed;
• the ecipients or the categories of recipients to whom your personal information has been or will be disclosed, in particular to recipients in third countries or to international organisations;
• if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining that duration;
• the existence of a right to correction or deletion of personal data concerning you, or restriction of our processing, or right of objection to such processing;
• the existence of a right to complain to a supervisory authority;
• if the personal data was not collected directly from you, all available information about the source of the data;
• the existence of automated decision-making including profiling as per article 22 (1) and (4) of the GDPR and – at least in these cases – meaningful information about the logic involved and the implications and effects of such processing on you.
If we transmit your data to an international organisation or to a third country, you also have the right to ask for information as to whether there are suitable guarantees as per article 46 of the GDPR in connection with the transfer.
b. Right of rectification
You have the right to correct and / or complete the information that we have stored about you if such information is incorrect or incomplete. We will make the correction or completion immediately.
c. Right to restrict processing
Under certain conditions, you have the right to demand that we restrict the processing of your personal data. For this, at least one of the following prerequisites must be fulfilled:
• You deny the accuracy of your personal information for a period of time that enables us to verify the accuracy of your personal information,
• The processing is unlawful and you refuse the deletion of the personal data and instead require the restriction of the use of personal data;
• We no longer need your personal information for processing purposes, but you do need it to enforce, exercise or defend your rights, or
• You have objected to the processing as per article 21 (1) of the GDPR as long as it is not certain that our legitimate reasons outweigh your interests.
d. Right to cancellation
You have the right to demand that we delete your personal information immediately if we are required to do so. This is the case if one of the following conditions is met:
• Your personal information is no longer necessary for the purposes for which it was collected or otherwise processed.
• You revoke your consent on which the processing was based as per article 6 (1) lit. a or article 9 (2) lit. a of the GDPR and there is no other legal basis for the processing.
• You object to the processing as per article 21 (1) of the GDPR and there are no high-level legitimate grounds for processing, or you object to the processing as per article 21 (2) of the GDPR.
• Your personal data has been processed unlawfully.
• The deletion of personal data is required to fulfil a legal obligation under Union or National Law to which we are subject.
• Your personal data has been collected in relation to information society services offered as per article 8 (1) of GDPR.
If we have made your personal data public and we are required to delete it in accordance with the above conditions, taking into account the technologies and implementation costs available to us, we will take appropriate measures, including technical, to inform other parties responsible for data processing, who process personal data, that you have requested deletion of any links to this personal data or copies or replications of such personal data.
However, your right to delete does not exist if processing is required for the following reasons (exceptions):
• To exercise the right to freedom of expression and information;
• to fulfil a legal obligation required by the law of the Union or of the Member States to which we are subject, or to carry out a task of public interest or in the exercise of official authority which has been delegated to us;
• for reasons of public interest in the field of public health as per article 9 (2) lit. h and i as well as article 9 (3) of the GDPR;
• for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes as per article 89 (1) of the GDPR, where the law referred to in (1) is likely to render impossible or seriously affect the achievement of the objectives of such processing, or
• to assert, exercise or defend legal claims.
e. Right to consultation
If you have asserted your right to correct, delete, or limit us, we are required to notify all recipients to whom we have disclosed your personal data about the correction, deletion or restriction of processing of your data unless it proves impossible or involves a disproportionate effort.
f. Right of data portability
You have the right, under the following conditions, to receive the personal information you have provided to us in a structured, popular and machine-readable format and the right to have this information transmitted to another person in charge:
• The processing is based on consent according to article 6 (1) lit. a or article 9 (2) lit. a of the GDPR or on a contract as per article 6 (1) lit. b and
• the data is processed using automated procedures.
You have the right to effect that we transfer your personal data directly to another person responsible, as far as this is technically feasible and the liberties and rights of other persons are not affected thereby.
This right to data portability does not apply if the processing is necessary for the performance of a task that is in the public interest or in the exercise of public authority that has been delegated to us.
g. Right to object
You have the right to object to the processing of your personal data, which is based on article 6 (1) lit. e or lit. f of the GDPR, at any time for reasons that arise from your particular situation. This also applies to profiling referred to by these provisions.
We will not process your personal information in the event of a dispute unless we can demonstrate compelling legitimate grounds for processing which outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.
When we process your personal data for direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with direct advertising.
If you object to the processing of your personal data for purposes of direct advertising, we will no longer process it for these purposes.
You have the opportunity, in connection with the use of information society services – regardless of RL 2002/58/EC (Directive on privacy and electronic communications) – to exercise your objection through automated procedures that use technical specifications.
h. Right of revocation
According to article 7 (3) of the GDPR, you have the right to revoke your consent at any time. The revocation of consent does not invalidate the lawfulness of the processing retrospectively.
i. Right to complain to a supervisory authority
You have the right to complain to a supervisory authority, without prejudice to any other administrative or judicial remedy. In particular, in the Member State of your place of residence, your place of work or the place of the alleged infringement, you can exercise your right to complain if you believe that the processing of your personal data violates the GDPR.
An overview of the respective national data protection officers of the countries as well as their contact data can be found under the following link:
6. Updating and changing these data protection regulations
As of: May 2019. Customised data protection. www.datenschutz-stuttgart.com