1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data means any data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Stephen Sacht, S8IS - CGE-BASED IMPACT STUDIES, c/o COCENTER, Koppoldstr. 1, 86551 Aichach, Germany, email: contact@s8is.com. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When You Visit Our Website

2.1 If you use our website for information purposes only, meaning that you do not register or otherwise provide us with information, we collect only the data that your browser transmits to the website server (so-called “server log files”). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

• The page visited on our website
• Date and time of access
• Amount of data sent, in bytes
• Source/referrer from which you accessed the page
• Browser used
• Operating system used
• IP address used (where applicable, in anonymised form)

Processing is carried out pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data are not disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries addressed to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.

3) Hosting & Content Delivery Network

To host our website and display its content, we use a provider that supplies its services, either itself or through selected subcontractors, exclusively on servers located within the European Union.

All data collected on our website are processed on these servers, unless different data recipients are specified below for particular processing activities.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

4) Contacting Us

Personal data are collected when you contact us (e.g. via a contact form or email). The data collected when you use a contact form are apparent from the relevant contact form. These data are stored and used exclusively for the purpose of responding to your enquiry or contacting you and for the associated technical administration.

The legal basis for processing these data is our legitimate interest in responding to your enquiry pursuant to Article 6(1)(f) GDPR. If you contact us with a view to entering into a contract, Article 6(1)(b) GDPR provides an additional legal basis for processing. Your data will be erased once your enquiry has been fully dealt with. This is the case when it is apparent from the circumstances that the matter concerned has been conclusively resolved, provided that no statutory retention obligations prevent erasure.

5) Tools and Miscellaneous

5.1 Cookie Consent Tool

This website uses a so-called “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users when they access the website in the form of an interactive user interface, on which consent to certain cookies and/or cookie-based applications can be given by selecting checkboxes. Through the use of this tool, all cookies and services requiring consent are loaded only if the respective user has given the corresponding consent by selecting the relevant checkboxes. This ensures that such cookies are placed on the user’s device only where consent has been given.

The tool uses technically necessary cookies to store your cookie preferences. As a rule, no personal user data are processed in this connection.

If, in an individual case, personal data (such as an IP address) are nevertheless processed for the purpose of storing, assigning or recording cookie settings, this processing is carried out pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly cookie consent management and, consequently, in operating our website in a legally compliant manner.

Article 6(1)(c) GDPR provides an additional legal basis for processing. As the controller, we are subject to the legal obligation to make the use of technically non-essential cookies conditional upon the respective user’s consent.

Where necessary, we have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further information about the operator of the cookie consent tool and the available settings can be found directly in the relevant user interface on our website.

6) Rights of the Data Subject

6.1 The applicable data protection legislation grants you the following rights as a data subject against the controller in relation to the processing of your personal data (rights of information and intervention). The conditions for exercising each right are set out in the legal provisions cited below:

• Right of access pursuant to Article 15 GDPR;
• Right to rectification pursuant to Article 16 GDPR;
• Right to erasure pursuant to Article 17 GDPR;
• Right to restriction of processing pursuant to Article 18 GDPR;
• Right to be informed pursuant to Article 19 GDPR;
• Right to data portability pursuant to Article 20 GDPR;
• Right to withdraw consent previously given pursuant to Article 7(3) GDPR;
• Right to lodge a complaint pursuant to Article 77 GDPR.

6.2 RIGHT TO OBJECT

IF, FOLLOWING A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE PERSONAL DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE PERSONAL DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

7) Retention Period for Personal Data

The period for which personal data are stored is determined by the respective legal basis, the purpose of processing and, where applicable, the relevant statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data are processed on the basis of explicit consent pursuant to Article 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with obligations arising from legal transactions or similar legal relationships on the basis of Article 6(1)(b) GDPR, these data will be routinely erased after the retention periods have expired, provided that they are no longer necessary for the performance of a contract or for taking steps prior to entering into a contract and/or we no longer have a legitimate interest in their continued storage.

Where personal data are processed on the basis of Article 6(1)(f) GDPR, these data will be stored until you exercise your right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes on the basis of Article 6(1)(f) GDPR, these data will be stored until you exercise your right to object pursuant to Article 21(2) GDPR.

Unless otherwise stated in the other information in this policy concerning specific processing situations, stored personal data will otherwise be erased when they are no longer necessary for the purposes for which they were collected or otherwise processed.