Privacy Statement

1 Declaration of BTC AG on Data Protection

Compliance with the legal requirements for data protection and information security of the data have a high priority for BTC AG. The protection of personal data is of particular importance in every business process and in IT operations. The following explains which data are processed under which conditions by visiting our website. However, the declaration does not apply to websites of other companies that contain a link to this BTC AG website or to which our website provides a link

Responsible for the web presence:
BTC AG 
Communication, Marketing & Sales Services 
Escherweg 5 
26121 Oldenburg 
Phone: +49 441 3612-0 
E-Mail: marketing@btc-ag.com

2 Overview of Data Processing when Visiting the Website

If you visit our website, so-called log data are processed. Log data on the web servers are processed to ensure our system security - this includes, for example, troubleshooting on our technical systems, programming our website, danger prevention and, if necessary, the provision for prosecution by investigating authorities in the event of a criminal act on our website, for example, by a hacker attack. The log data are deleted after 7 days. Through your visit to our website, the connection establishment by your browser is logged with so-called technical factual data, which have the following contents:

  • IP address (volatile storage)
  • Domain name (provider-dependent) / name of Internet Provider
  • Date and time of the retrieval
  • The content accessed on our website
  • Operating system and browser software used
  • If applicable, the website that has linked to our website
  • The URL from which the consent was sent by the Piwik PRO Consent Manager
  • An anonymous, random and encrypted key from the Piwik PRO Consent Manager
  • The status of your anonymous consent, which serves as purely technical proof of consent (from the Piwik PRO Consent Manager)

The data processing is based on the basis of Art. 6 para. 1 lit. f Data Protection Regulation (GDPR).

3 Security Measures

BTC uses extensive technical and organizational security measures to protect data against misuse, accidental or intentional manipulation or against access by unauthorized persons. Our security procedures are continuously improved in line with technological developments.

4 Contacting and Registration for Events

4.1 Contact Forms

If you contact us using the contact form or register for an event, the contact details you have provided will be stored for the purpose of processing the request and for answering possible follow-up questions. While contacting us, you can decide whether and about which of our services you would like to be informed in the future.  Our range of services is principally aimed at business customers. As a rule, it is therefore business contact details that have been provided to a person by their respective employer. We reserve the right to delete contact details if we discover that this is not the case. 

The following data is collected by BTC AG when contacting us and when registering for an event according to relevance, mandatory fields are marked accordingly in the form and include:

  • Salutation
  • First name
  • Last name
  • E-mail address
  • Company

The data will be processed for the purpose of handling and responding to your concern. The data deletion takes place depending on your request and the legal requirements of the GDPR – especially if you request us to do so (see passage Your Rights). The data processing is based on Art. 6 para. 1 lit. a GDPR.

4.2 Events with partners

At regular intervals, BTC AG organizes campaigns in cooperation with its partners, providing e.g. webinars, live formats and whitepapers. You can benefit from these events as a prospective or existing customer of BTC or our partners. In return, we would like to contact you to give you the opportunity to get to know our service portfolio and our contact persons. A transfer of your contact data to partners or the technical organizer takes place under the conditions of the organizer given for the individual event. For tracking measures for advertising purposes, a corresponding consent to the use of cookies and other tracking technologies is assumed and located in your own discretion.
You can revoke your consent at any time by clicking on a link in the e-mails we send you and resume contact with us yourself. The information from the forms, including the contact data you provide there, will be stored for a maximum of 180 days for the purpose of transmitting the requested information and in case of follow-up questions. Should we have aroused your interest and should you continue to remain actively in contact with us, we will only delete your contact data after the business purpose has ceased to exist or after statutory retention obligations have ceased to apply.
In the case of individual events or campaigns, we may deviate from this procedure if event-specific contact must be made by our partners or BTC if this is provided as a prerequisite for participation. In such cases, you will be made aware of the data collection by the partner and, if there is a prevailing interest on your part, you will consent to the data collection by our partners and BTC. Our partners process the collected data in accordance with their privacy statements.
The data processing is carried out in accordance with Art. 6 para. 1, lit. a and f GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

5 Newsletters

You have the option to register for the free newsletter on our website. We would like to point out that our range of services is basically aimed at existing and potential business customers and not at private individuals. Therefore, we reserve the right to prevent the inclusion in the addressee circle. For an effective registration we need a legally effective consent from you. In order to verify that the registration is actually made by the owner of the e-mail address, you will receive a confirmation e-mail during the registration process with a link that must be clicked by you in order to complete the registration. This contains a link to the present data protection declaration of our website, so that they can inform themselves again about data protection. To prove your consent, we log the registration of the newsletter subscription. In addition, we send newsletters to existing customers to inform you about our services and current topics. You have the option to revoke your consent to receive the newsletter or to object to receiving the newsletter at any time by clicking on the clearly visible link at the end of the respective newsletter and unsubscribing in the subscription center or contacting us by e-mail. This will result in you not receiving any further newsletters in the future, unless you request us to do so again. The newsletter is sent via the marketing automation software Microsoft Dynamics 365 Cloud for Marketing from the provider Microsoft Corporation (Microsoft Deutschland GmbH, Walter-Gropius-Straße 5, 80807 Munich, Germany) - hereinafter "Microsoft" - In our newsletters, we use pseudonymous e-mail tracking. The statistical surveys also include the determination of whether the newsletters are opened, when they are opened and which links are clicked. Although this information can technically be assigned to individual newsletter recipients, an analysis of personal data is disabled and information about newsletter recipients is only evaluated pseudonymously and cannot be decoded and assigned to individual persons. In the case of interested parties without a contractual relationship, data processing is based on Art. 6 para. 1 lit. a GDPR. The sending of newsletters to existing customers may be based on Section 7 (3) UWG in conjunction with Art. 6 (1) lit. f GDPR; tracking is also based on Art. 6 (1) lit. f GDPR. The storage of data to prove your consent is based on Art. 6 para. 1 lit. c GDPR. 

The dispatch of the newsletter and the use of the tracking pixel are generally carried out on the basis of Art. 6 Para. 1 lit. a GDPR. Sending newsletters to existing customers for direct mail takes place on the basis of § 7 Abs. 3 UWG in connection with Art. 6 Abs. 1lit.f GDPR. You have the right to object to data processing at any time for the future. The storage of the data to prove your consent takes place on the basis of Art. 6 Para. 1 lit. c GDPR.

6 Cookies, Advertising and Tracking on Our Websites

6.1 Cookies on Our Website

Our website uses cookie technology to provide you with convenient access to our information. It also gives us the opportunity to continuously optimize our website in your interest.

Cookies are small text files that are generated by a web server and stored in your web browser. In principle, you can prevent the storage of cookies by setting your browser software accordingly.
All technical measures that we use on our website for marketing and advertising purposes as well as to provide you with an optimal browsing experience are monitored via a so-called Piwik PRO Consent Manager.
This in turn uses cookies itself to monitor and control the status of your consent to the use of appropriate techniques.

When you visit our website, third-party cookies are stored on your computer for the purposes of interest-based advertising (retargeting) and web analysis, provided you have consented to the data processing.

The setting of cookies is generally based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation. You can revoke consent to the use of cookies by using the revocation link in section 12 Piwik PRO Consent Manager (see below) and subsequently refreshing the website in the browser.

If you no longer wish to use cookies on our website, you also have the option of deleting the cookies we have set in your browser.

6.2 Microsoft Dynamics 365 Marketing Cookies in Forms

On our website, we use Microsoft Dynamics 365 Marketing forms which enable us to transfer captured data in the forms for booking events or direct contact from the website directly to our Microsoft Dynamics 365 CRM system.

When using Microsoft Dynamics 365, we only use the marketing functions (tracking, cookies, etc.) that are necessary to implement the requested services or wishes for contacting you. Beyond that, we do not use any personal information that we assign to your contact, for example to generate a usage profile of our web presence - which would be technically possible.

Furthermore, we do not use any personal information that we assign to their contact, for example, to generate a usage profile of our websites - which would be technically possible.

Domain: www.btc-ag.com
Cookie (Lifetime): 79f08280-5c63-4331-b04d-fb6f39afda51 (2 years)
Description: Long-term behavioral analysis cookie: this cookie is necessary to evaluate their interaction with our website / forms. The cookie does not contain any personal information, but uniquely identifies a specific browser for a specific computer - this is technically necessary to uniquely associate the form to a registration. Without your consent, no tracking to your person takes place. In addition, a script is implemented that prevents the use of other technically possible marketing cookies from MS Dynamics.

Domain: www.btc-ag.com
Cookie (Lifetime): 319af4c0-e197-4de9-8a9b-fe98c8a2ca04 (30 minutes)
Description: Short-term single visit cookie: this cookie expires after 30 minutes. Dynamics 365 Marketing uses it to group a visitor´s loaded pages.These items are identified as a single "visit" to the website

7 Social Media

7.1 Facebook Pixel
On our website, we use the Facebook Pixel service of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook") for conversion measurement in order to display advertisements on Facebook and other websites to you and other interested users and to measure the impact of advertisements.
Through the Facebook Pixel, which we have implemented in our website, your browser establishes a connection with Facebook, whereby user data such as IP address or user ID can be matched. If you are registered with Facebook, Facebook can assign the visit to your account.
For this purpose, Facebook may use cookies, web beacons or other storage technologies and set a cookie for a maximum of 180 days with, among other things, the information that you have accessed our website or clicked on an ad of ours, once you have agreed to the use of cookies requiring consent.
The data processing, in particular the setting of cookies, is carried out with your consent based on Art. 6 para. 1 lit. a GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation. You can revoke consent to the use of this cookie by using the revocation link in section 12 Piwik PRO Consent Manager (see below) and subsequently refreshing the website in the browser. In addition, you can revoke your consent by setting your browser accordingly or as a logged-in user of the social network Facebook at "="" target="_blank">https://www.facebook.com/settings/?tab=ads#_.
Insofar as personal data is collected on our website using the mentioned tool and forwarded to Facebook, we and Facebook are joint controllers for this data processing on a limited basis. We have concluded a joint responsibility agreement with Facebook regarding the processing of your data pursuant to Art. 26 GDPR, the terms of which you can view here. According to this agreement, we are responsible for providing the data protection information and for implementing the tool on our website in a manner that is secure from a data protection perspective. Facebook is responsible for data security. Data subject rights regarding data processed by Facebook can be asserted directly with Facebook and will be forwarded to Facebook if asserted with us. For more information on what personal data is processed under shared responsibility, please visit https://www.facebook.com/legal/terms/businesstools_jointprocessing. The processing by Facebook that takes place after the forwarding does not take place under joint responsibility.
It cannot be ruled out that Facebook transfers data to the USA for the purpose of storage and further processing. If such a data transfer to the USA takes place, it is based on the standard contractual clauses of the EU Commission: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
You can find more information as well as Facebook's privacy policy at: https://www.facebook.com/about/privacy.

7.2 LinkedIn Pixel
On our website, we use the LinkedIn Pixel service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn") for conversion measurement, to show you and other interested users advertisements on Facebook and other websites, and to measure the impact of advertisements.
Through the LinkedIn pixel, which we have implemented in our website, your browser establishes a connection with LinkedIn, whereby user data such as IP address or user ID can be matched. If you are registered with LinkedIn, LinkedIn can assign the visit to your account.
For this purpose, LinkedIn may use cookies, web beacons or other storage technologies and set a cookie with, among other things, the information that you have accessed our website or clicked on an ad of ours, once you have agreed to the use of cookies requiring consent. Detailed information on the use of cookies can be found at https://www.linkedin.com/legal/cookie-policy.
If you are logged into LinkedIn, LinkedIn can associate your visit to our website with your LinkedIn profile. If you do not want LinkedIn to directly assign the data collected via our website to your LinkedIn profile, you can log out of LinkedIn before visiting our website. You can object to the analysis of usage behavior as well as targeted advertising by LinkedIn under the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
The data processing, in particular the setting of cookies, is carried out with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation. You can revoke consent to the use of this cookie by using the revocation link in section 12 Piwik PRO Consent Manager (see below) and subsequently refreshing the website in the browser. In addition, you can revoke your consent by setting your browser accordingly or via LinkedIn: https://www.linkedin.com/psettings/. Via the archive request function, you have the possibility to request information about the data processed about you by LinkedIn: https://www.linkedin.com/psettings/member-data.
It cannot be ruled out that LinkedIn transfers data to the USA for the purpose of storage and further processing. If such a data transfer to the USA takes place, it is based on the standard contractual clauses of the EU Commission: https://www.linkedin.com/legal/l/dpa.
You can find more information and LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy.

8 Video Use

8.1 YouTube Videos

Our website provides links to YouTube videos. If you click on them, the video starts in your browser and processes the data according to YouTube's privacy policy and terms of use. No data is transmitted from our website to YouTube. 

8.2 movingimage Videos

On our website, we use movingimage, a service provided by movingimage EVP GmbH Tempelhofer Ufer 1, 10961 Berlin (hereinafter: "movingimage"). When you call up the respective embedded video, your IP address and information about the terminal device you are using are transmitted to movinigmage's servers for optimal display and technical connection, so that the videos can be displayed on your terminal device in an optimized resolution. The information obtained in this way does not allow any conclusions to be drawn about you as a natural person. 

The legal basis for the processing is our legitimate interest in the optimized presentation of the videos according to Art. 6 para. 1 lit. f GDPR. You have the right to object to data processing at any time for the future. For further information, please refer to movingimage's privacy policy at: https://www.movingimage.com/de/agb/datenschutzerklarung-der-movingimage-evp-gmbh/.

9 Analysis of Our Website

9.1 Wiredminds

Our website uses the counting pixel technology of Wiredminds GmbH, Wiredminds GmbH, Lindenspürstrasse 32, 70176 Stuttgart (www.wiredminds.de) for statistical analysis of website usage. 
In the process, technical data is processed, from which an anonymous usage profile is created. 
No personal data about you will be stored. IP addresses are anonymized immediately after collection by deleting the last number block. You can revoke your consent to the use of this cookie by using the revocation link in section 12 Piwik PRO Consent Manager (see below) and subsequently refreshing the website in the browser. The data processing for the use of wiredminds is carried out according to Art. 6 para. 1 lit. a GDPR.

9.2 Google Analytics

This website uses Google Analytics of Google Inc. (Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA).
Google Analytics uses cookies that enable an analysis of the use of our website. The technical data is transmitted to Google in the USA and processed. We use the analysis services anonymously (without using an advertising ID , user ID or IP address). For this purpose, we use the addition „gat._anonymizelp“. Through this addition, the IP address is shortened by Google.

Google evaluates the technical data on our behalf (agreement on data protection Article 32 GDPR) to create reports on website activity. The cookies are deleted automatically after a period of 14 months. 
You can revoke consent to the use of this cookie by using the revocation link in section 12 Piwik PRO Consent Manager (see below) and then refreshing the website in the browser. The data processing for the use of Google Analytics is carried out according to Art. 6 para. 1 lit. a GDPR.

For more information on terms of use and data privacy, please visit http://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de.

 

9.3 Piwik PRO

Our website also uses the analytics service PIWIK PRO Analytics Suite from Piwik PRO SA, ul. Św. Antoniego 2/4, 50-073, Wrocław, Poland. The technical data is transmitted to Piwik PRO, processed and stored on servers of Piwik PRO or service providers commissioned by it in the EU. In addition to the IP address, Piwik PRO processes, among other things, meta and communication data (e.g. browser properties, type of operating system, device properties) and visit data (e.g. duration of visit, time stamp, pages viewed on the website). The IP address is anonymised immediately after processing and before it is stored.
Piwik PRO evaluates the technical data on our behalf (agreement on data protection Article 32 DSGVO) to create reports on website activity. The cookies are deleted automatically after a period of 14 months.

The data processing for the use of Piwik PRO and the setting of cookies is based on your consent pursuant to Art. 6 para. 1 lit. a DSGVO.

You can revoke your consent at any time by using the revocation link in section 12 Piwik PRO Consent Manager (see below) and subsequently refreshing the website in the browser.

You can find more information on the terms of use and data protection at https://piwikpro.de/datenschutz/.

10 Google Ads

We use Google Ads, an online advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"), which enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be played on the basis of user data available at Google (e.g. location data and interests) (target group targeting). We can evaluate this data quantitatively by analyzing, for example, which search terms led to the playout of our advertisements and how many ads resulted in corresponding clicks.

The data processing, in particular the setting of cookies, is carried out with your consent on the basis of Art. 6 (1) a) GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. You can revoke consent to the use of this cookie by using the revocation link in section 12 Piwik PRO Consent Manager (see below) and subsequently refreshing the website in the browser.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found at https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

10.1 Use of Google Ads conversion tracking

We use the online advertising program "Google Ads" on our website and in this context conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Accordingly, Google Ireland Limited is the company affiliated with Google that is responsible for processing your data and complying with applicable data protection laws.

If you have accessed our website via a Google ad placed by us, Google will store cookies in your web browser.

These cookies have a limited validity, do not contain personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Thus, there is no way that cookies can be tracked across Ads customers' websites. The information obtained with the help of the conversion cookie is used for the purpose of creating conversion statistics. Here, we learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which users can be personally identified. Your data may be transferred to the USA.

The data processing, in particular the setting of cookies, is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. You can revoke consent to the use of this cookie by using the revocation link in section 12 Piwik PRO Consent Manager (see below) and subsequently refreshing the website in the browser.

You can find more information and Google's privacy policy at: https://www.google.de/policies/privacy/.

11 Piwik PRO Tag Manager

Our websites use the Piwik PRO Tag Manager of Piwik PRO SA, ul. Św. Antoniego 2/4, 50-073, Wrocław, Poland, to control a website by means of so-called website tags. They are used to dynamically control the content of our website.
Our tracking tools are controlled via the Piwik PRO Tag Manager. It organises that the tags of Google Analytics, Piwik PRO and Wiredminds are only set depending on your respective consent in the Piwik PRO Consent Manager.
No personal data is processed through the Tag Manager or transmitted to Piwik PRO.

12 Piwik PRO Consent Manager

We use the Piwik PRO Consent Manager of Piwik PRO SA, ul. Św. Antoniego 2/4, 50-073, Wrocław, Poland, to request and document your consent to the setting of cookies and the processing of your data. Your consent preferences are stored in a cookie, which is placed on your terminal device. This cookie is automatically deleted after 12 months.

privacy settings

The legal basis for requesting and documenting your consent to the processing of your personal data is Art. 6 para. 1 p. 1 lit. c in the sense of obtaining legally required consent and Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest lies in the legally secure documentation and verifiability of consents. You can find more information on the terms of use and data protection at https://piwikpro.de/datenschutz/.

13 Data Transmission

BTC AG only transmits data to the following named processors and other third parties within the legal framework and in accordance with the instructions of BTC AG pursuant to Art. 28 GDPR. BTC AG is responsible for data processing in the case of commissioned processing.

In certain cases, we are generally entitled to transfer existing data to official bodies (e.g. damage defense), to fulfill legal requirements we are obliged to do so (e.g. law enforcement).

14 Existence of Automated Decision Making in Individual Cases

We do not use any automated decision-making procedures pursuant to Article 22 GDPR. We thus safeguard their right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning them or similarly significantly affects them. 
 

15 Applicant Selection Process

In the applicant selection process (recruiting), we collect, process and use personal data to process the application. This requires informed consent, which is given during the applicant process.

Einwilligung Bewerberauswahlprozess

16 Chatbot

The chatbot "Questy" is integrated on our careers page at btc-ag.com/careers. We use the "Azure Bot Services" service from Microsoft Ireland Operations Limited, One Microsoft Place, Dublin 18, Ireland. Our chatbot supports applicants with questions on the topics of training, careers and working at BTC. The chatbot only serves as an additional communication channel, its use is not required for an application at BTC .

When using the chatbot, information on the data streams, any error messages and the content of the chats are processed. These are only used to process the request as well as to improve the chatbot. Nevertheless, please avoid entering sensitive personal data in the chat. The data processing for the use of the chatbot is carried out in accordance with Art. 6 para. 1 lit. b as well as lit. f GDPR.

If the data processing is based on legitimate interests, you have the right to object to the data processing at any time for the future.

17 SAP Campaigns

At regular intervals, SAP Germany SE & Co. KG, Hasso-Plattner-Ring 7, 69190 Walldorf, Germany (hereinafter: "SAP") organizes various campaigns in which, for example, webinars, live formats, and white papers are provided. You can benefit from these events as a prospective customer or as an existing customer of BTC. In return, we would like to contact you to give you the opportunity to get to know our service portfolio and our contact persons. As a rule, no information is passed on to SAP or the technical organizer (see below). When using the campaign infrastructure provided by SAP and its service provider (Evalanche / sc-networks.de), in which we participate as an SAP partner, no tracking measures are used. You can revoke your consent at any time by clicking on a link in the e-mails we send you and resuming contact with us yourself. The information from the forms, including the contact data you provide there, will be stored for a maximum of 180 days for the purpose of transmitting the requested information and in case of follow-up questions. Should we have aroused your interest and should you continue to remain actively in contact with us, we will only delete your contact data after the business purpose has ceased to exist or after statutory retention obligations have ceased to apply.

For individual events / campaigns, this procedure may be deviated from if an event-specific contact must be made by SAP or BTC, if this is specified as a prerequisite for participation on the part of SAP. In such cases, you will be explicitly informed of the additional collection of data by SAP and, if you are interested, you will consent to the collection of data by SAP and BTC. SAP processes the collected data in accordance with the privacy policy: https://www.sap.com/corporate/de/legal/privacy.html.

The data processing is carried out in accordance with Art. 6 para. 1, lit. a and b GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. 

18 Your Rights

When processing personal data, the GDPR grants you as a website user the following rights:

Right of access (Art. 15 GDPR): 
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to be informed about this personal data and to receive the information listed in detail in Art. 15 GDPR.

Right to rectification and deletion (Art. 16 and 17 GDPR): 
You have the right to request without undue delay the rectification of any inaccurate personal data / information concerning you and, where applicable, the completion of any incomplete personal data / information. You also have the right to request that personal data concerning you be deleted without delay, provided that one of the reasons listed in detail in Art. 17 of the GDPR applies, e.g. if the data is no longer required for the purposes pursued.

Right to restriction of processing (Art. 18 GDPR): 
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to the processing, for the duration of any review.

Right to data portability (Art. 20 GDPR):
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.

Right of objection (Art. 21 GDPR): 
If data is collected on the basis of Art. 6 (1) p. 1 lit. f (data processing for the protection of legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

Right of withdrawal (Art. 7 GDPR): 
You have the right to revoke your consent to data processing on our website at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You were informed of this before giving your consent by the link to this privacy policy.

Right of complaint to a supervisory authority (Art. 77 GDPR) 
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you violates data protection law. The right of complaint may be asserted in particular before a supervisory authority in the Member State of your residence, your place of work or the place of the alleged infringement. The supervisory authority for data protection in Lower Saxony (State Commissioner for Data Protection of Lower Saxony) is responsible. 
You also have the right to contact the data protection officer of BTC AG directly in this regard.

19 Company Data Protection Officer:

BTC AG
Data protection officer 
Escherweg 5
26121 Oldenburg
Phone: +49 441 3612-0
Fax: +49 441 3612-3999
E-Mail: datenschutz@btc-ag.com