1. Contents of this notice
This Privacy Notice explains how your personal data is handled when you visit us at www.opinion.de/en/. It also informs you of your rights under the General Data Protection Regulation (GDPR).
2. Data controller and data protection officer
The data controller responsible for the processing of your data within the meaning of the GDPR is:
OPINION Market Research & Consulting GmbH
Rollnerstr. 8, 90408 Nuremberg, Germany
Phone: +49.911.393 64 0
Our data protection officer Dagmar Staudacher can be contacted as follows:
3. Analysis of website traffic (using Google Analytics)
It is important to us that our web pages have the best possible design so that they are attractive to our visitors. To achieve this, we need to know how our website is used.
For this reason, our website uses Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Analytics employs cookies, text files that are stored on your end device and make it possible to analyse how you use the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA. IP anonymisation has been activated on our website. This means that within the Member States of the European Union and in other states that are contracting parties to the Agreement on the European Economic Area Google will abbreviate your IP address beforehand. Your full IP address will only be transmitted to a Google server in the USA and abbreviated there in exceptional circumstances. Google uses this information on our behalf to evaluate how you use our website, to compile reports on website activities and to provide other services to us as the website operator relating to website and internet usage.
The IP address transmitted by your browser during the Google Analytics process will not be linked in any way to other data collected by Google.
You can object to this tracking:
To prevent Universal Analytics from collecting data on each of your devices, you must perform this opt-out procedure on all of the systems you use. Click here to create the opt-out cookie:Deactivate Google Analytics
- You can stop cookies from being stored by selecting the relevant setting in your browser software; please note, however, that in such cases you may not be able to make full use of all the features available on this website. You can also prevent Google from collecting and processing the data generated by the cookie and data about your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB
Google is certified under the EU-U.S. Privacy Shield. The EU-U.S. Privacy Shield is a data protection agreement that aims to ensure that data transfers to certified U.S. companies are adequately protected. The European Commission determined that the EU-U.S. Privacy Shield provides an adequate level of data protection in its Decision of 12 July 2016 (document C(2016) 4176).
You can read the European Commission’s decision here: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016D1250&from=DE.
Up-to-date information on Google’s certification under the EU-U.S. Privacy Shield is available at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.
Your data is processed on the legal basis referred to in Article 6, Paragraph 1 (f) GDPR (balancing of interests) and due to our interest in being able to evaluate how our website is used and in using the results of this analysis to adapt and optimise our website.
Your personal data collected during the Google Analytics process will be deleted after 26 months.
4. Data logged by our web server
Our server collects technical data each time you visit our website.
When you visit one of our web pages, our web server records the following data as standard in a log file: the address (URL) of the page you are visiting, the date and time of your visit to this web page, any error messages and, if applicable, the operating system and browser software of your end device and the web page from which you accessed our website. We also store your computer’s IP address in our log files. Your IP address is a number that your internet provider temporarily or permanently assigns to your end device. A full IP address could be used in particular cases to identify the owner of the connection if your internet provider were to disclose additional information.
We only use the log file data to ensure that our services are in full working order (e.g. in order to conduct error analysis, keep our systems secure and protect against misuse, i.e. illegal comments or comment spam). The data is deleted after seven days.
Our legitimate interests (error analysis, keeping our systems secure and protecting against misuse) pursuant to Article 6, Paragraph 1 (f) GDPR form the legal basis for the processing of log file data.
We are permitted to appoint technical service providers (hosting providers) headquartered in Germany and subject to legal directives for the technical operation of our website by using them to process data on our behalf. Our current provider is ALL-INKL.COM, Neue Medien Münnich, Hauptstr. 68, 02742 Friedersdorf, Germany.
6. Your rights under the General Data Protection Regulation
We are legally obliged to inform you of your rights under the GDPR. These rights are explained to you below. You are entitled to exercise these rights subject to the conditions laid down in the applicable data protection provisions. The following information does not entitle you to further rights.
You have the right to obtain from us confirmation as to whether or not we are processing your personal data; if this is the case, you have the right to obtain access to this personal data and to be told the information listed in Article 15 GDPR.
In accordance with Article 16 GDPR, you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, if applicable, the completion of incomplete personal data.
You have the right to obtain from us the erasure of your personal data without undue delay, provided that one of the grounds listed in Article 17 GDPR applies, e.g. the data is no longer required for the purposes being pursued.
d) Restriction of processing
You have the right to obtain from us restriction of processing, provided that one of the conditions listed in Article 18 GDPR applies, e.g. if you have objected to processing, we will restrict the processing of your data for the duration of our verification process.
In accordance with Article 77 GDPR, regardless of any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data by us infringes the GDPR. You can lodge your complaint with a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The contact details of the supervisory authorities in Germany are available at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
f) Data portability
In accordance with Article 20 GDPR, you have the right, in certain circumstances, to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller and, where technically feasible, to have this data transmitted to another controller on your behalf.
g) Withdrawal (of consent)
If you have consented to us processing your data, you are entitled to withdraw your consent at any time with effect for the future. This also applies if you gave us your consent to process your data before the GDPR entered into force.
h) Information on your right to object
You also have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data if this processing is based on Article 6, Paragraph 1 (e) or (f) GDPR. If you exercise your right to object, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or unless the processing is required for the establishment, exercise or defence of legal claims (Article 21 GDPR).
If we use your personal data for direct marketing (e.g. via email), you are entitled to object at any time to your data being used for these purposes. This also applies to profiling to the extent that it is related to direct marketing. Profiling means using personal data to analyse or predict certain personal matters (e.g. interests).