The following privacy policy applies to the use of the website www.ilaeurope.de (hereinafter the “website”).
We attach great importance to data protection. The collection and processing of your personal data takes place in compliance with the applicable data protection provisions, in particular the EU General Data Protection Regulation (GDPR). We collect and process your personal data in order to be able to offer you the portal named above. This policy describes how and for what purpose your data is collected and used, and what choices you have in relation to personal data.
By using this website you consent to the collection, use and transfer of your data in accordance with this privacy policy.
Controller
The controller responsible for the collection, processing and use of your personal data within the meaning of the GDPR is
International Liability Association Europe e.V.
Canisiusstr. 21a
55122 Mainz, Germany
If you wish to object to the collection, processing or use of your data by us under this privacy policy, either in whole or in respect of individual measures, you may address your objection to the controller named above.
You can save and print this privacy policy at any time.
General use of the website
Access data
We collect information about you when you use this website. We automatically record information about your usage behaviour and your interaction with us, and register data relating to your computer or mobile device. We collect, store and use data about every access to our online offering (so-called server log files). Access data includes the name and URL of the file retrieved, the date and time of retrieval, the volume of data transferred, notification of successful retrieval (HTTP response code), browser type and browser version, operating system, referrer URL (i.e. the previously visited page), IP address and the requesting provider.
We use this log data without attributing it to you personally and without any other profiling, for statistical evaluations for the purpose of the operation, security and optimisation of our online offering, but also for the anonymous recording of the number of visitors to our website (traffic) as well as the extent and manner of use of our website and services, and likewise for billing purposes, in order to measure the number of clicks received from cooperation partners. On the basis of this information we are able to make personalised and location-related content available and to analyse traffic, find and fix errors and improve our services. We reserve the right to review the log data subsequently where there is reasonable suspicion of unlawful use based on specific
indications. We store IP addresses in the log files for a limited period where this is necessary for security purposes or required for the provision of a service or the billing of a service, for example when you use one of our offerings. After an order process is abandoned or after payment has been received, we delete the IP address if it is no longer required for security purposes. We also store IP addresses where we have specific suspicion of a criminal offence in connection with the use of our website. In addition, as part of your account we store the date of your last visit (e.g. on registration, login, clicking of links, etc.).
Email contact
If you contact us (e.g. via the contact form or by email), we store your details in order to process the enquiry and in case follow-up questions arise. We only store and use further personal data if you consent to this or if it is legally permissible without specific consent.
Legal bases and retention period
The legal basis for the data processing described in the preceding sections is Article 6(1)(f) GDPR. Our interests in the data processing are in particular ensuring the operation and security of the website, examining the manner in which visitors use the website, and making the website easier to use.
Unless specifically stated otherwise, we store personal data only for as long as is necessary to fulfil the purposes pursued.
Your rights as a data subject
Under the applicable laws you have various rights regarding your personal data. If you wish to assert these rights, please address your request by email or by post, clearly identifying yourself, to the address given in section 1.
Below you will find an overview of your rights.
Right to confirmation and access
You have the right at any time to obtain confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to obtain from us free information about the personal data stored about you, together with a copy of that data. There is further a right to the following information:
1. the purposes of the processing;
2. the categories of personal data being processed;
3. the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations;
4. where possible, the envisaged period for which the personal data will be stored, or, if this is not possible, the criteria used to determine that period;
5. the existence of a right to rectification or erasure of the personal data concerning you, or to restriction of processing by the controller, or of a right to object to such processing;
6. the existence of a right to lodge a complaint with a supervisory authority;
7. where the personal data is not collected from you, all available information about the origin of the data;
8. the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR and — at least in those cases — meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
Where personal data is transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.
Right to rectification
You have the right to obtain from us, without undue delay, the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of a supplementary statement.
Right to erasure (“right to be forgotten”)
You have the right to obtain from us the erasure of personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay where one of the following grounds applies:
1. The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
2. You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal basis for the processing.
3. You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
4. The personal data has been processed unlawfully.
5. The erasure of the personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which we are subject.
6. The personal data was collected in relation to the offer of information society services pursuant to Article 8(1) GDPR.
Where we have made the personal data public and are obliged to erase it, we take reasonable steps, including technical measures, taking account of available technology and the cost of implementation, to inform controllers which are processing the personal data that the data subject has requested from them the erasure of any links to, or copies or replications of, that personal data.
Right to restriction of processing
You have the right to obtain from us restriction of processing where one of the following conditions applies:
1. the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;
2. the processing is unlawful and you have refused the erasure of the personal data and instead requested the restriction of the use of the personal data;
3. we no longer need the personal data for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims; or
4. you have objected to the processing pursuant to Article 21(1) GDPR, pending the verification of whether the legitimate grounds of our association override yours.
Right to data portability
You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit that data to another controller without hindrance from us, where
1. the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR, and
2. the processing is carried out by automated means.
In exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly by us to another controller, where technically feasible.
Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on those provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.
Automated decisions including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Right to withdraw consent under data protection law
You have the right to withdraw consent to the processing of personal data at any time.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you is unlawful.
Data security
We make every effort to ensure the security of your data within the framework of the applicable data protection laws and technical possibilities.
Your personal data is transmitted to us in encrypted form. This applies to your orders and also to the customer login. We use the SSL (Secure Socket Layer) encryption system, but point out that data transmission on the internet (for example when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
To secure your data we maintain technical and organisational security measures, which we adapt again and again to the state of the art.
We also do not guarantee that our offering will be available at particular times; disruptions, interruptions or outages cannot be ruled out. The servers we use are regularly and carefully backed up.
Automated decision-making
Automated decision-making on the basis of the personal data collected does not take place.
Disclosure of data to third parties, no data transfer outside the EU
As a matter of principle we use your personal data only within our association.
If and insofar as we involve third parties in the performance of contracts (such as logistics service providers), they receive personal data only to the extent that the transfer is necessary for the corresponding service.
In the event that we outsource certain parts of the data processing (“processing on behalf of a controller”), we contractually oblige processors to use personal data only in accordance with the requirements of the data protection laws and to ensure the protection of the rights of the data subject.
A transfer of data to bodies or persons outside the EU does not take place and is not planned.
Data protection officer
Should you have any further questions or concerns about data protection, please contact our data protection officer: