Data Protection at glazeAR

In the following we will be informing you about the controller responsible for the processing of your personal data (Section A) as well as your rights regarding the processing of your personal data (Section B). Furthermore, we have detailed information below on the processing of your personal data (Section C).

The terminology applied throughout this privacy notice, such as ‘Controller’, has the meaning as attributed to it under Article 4 GDPR (REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)).



A. Name and contact details of the controller

Deborah Salcher
Leopoldstr. 173D
80804 Munich
Germany
Email: glazear.app@gmail.com
Telephone: +49 (0) 151 44352124



B. Information Regarding the Rights of Data Subjects

As the data subject, you have the following rights regarding the processing of your personal data:
• the right of access to information (Article 15 of the General Data Protection Regulation);
• the right to the correction of data (Article 16 of the General Data Protection Regulation);
• the right to erasure (‘right to be forgotten’ - Article 17 of the General Data Protection Regulation);
• the right to the restriction of processing (Article 18 of the General Data Protection Regulation);
• the right to data portability (Article 20 of the General Data Protection Regulation);
• the right to object (Article 21 of the General Data Protection Regulation);
• the right to withdraw a consent (Article 7 III of the General Data Protection Regulation);
• the right to lodge a complaint with a supervisory authority (Article 57 I lit. f) of the General Data Protection Regulation).

To exercise your rights, you may contact us (Section A).
Information regarding the specific modalities and mechanisms which facilitate the exercise of your rights, especially in relation to the exercise of your rights to data portability and to object, is available (where applicable) from the information on the processing of personal data in Section C of this privacy notice.
Below we provide you with detailed information of your rights regarding the processing of your personal data:

I. Right of Access to Information
As the data subject, you have a right of access to information subject to the prerequisites laid down in Article 15 of the General Data Protection Regulation.
This means in particular that you have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, you also have the right to be informed of these personal data and such information as specified under Article 15 I of the General Data Protection Regulation. This includes, but is not limited to, information pertaining to the purposes of the processing; the categories of personal data that are processed; and the recipients or categories of recipient(s) to whom personal data have been or will be disclosed (Article 15 I lit. a), b), and c) of the General Data Protection Regulation).
To view the full scope of your right of access to information, please refer to Article 15 of the General Data Protection Regulation which can be prompted with this link.

II. Right to Rectification
As the data subject, you have a right to the rectification of data subject to the prerequisites laid down in Article 16 of the General Data Protection Regulation. This means in particular that you have the right to request that we rectify incorrect personal data concerning you and complete any incomplete personal data without delay. To view the full scope of your right to rectification, please refer to Article 16 of the General Data Protection Regulation which can be prompted with this link.

IIII. Right to Erasure (‘right to be forgotten’)
As the data subject, you have a right to erasure (‘right to be forgotten’) subject to the prerequisites laid down in Article 17 of the General Data Protection Regulation.
This means that in principle, you have the right to request that we promptly erase the personal data concerning you and that we are obliged to erase these personal data without delay provided that one of the reasons as specified under Article 17 I of the General Data Protection Regulation applies. This may be the case, for example, if personal data are no longer required in relation to the purposes for which they were collected or otherwise processed (Article 17 I lit. a) of the General Data Protection Regulation).
Insofar as we made the personal data public and if we are obliged to erase them, we are equally obliged (subject to the available technology and cost of implementation) to take reasonable measures, even of technical nature, so as to inform other data controllers processing such personal data that a data subject requested that they erase all links to these personal data or copies or replications of said personal data (Article 17 II of the General Data Protection Regulation).
In the exceptional case, the right to erasure (‘right to be forgotten’) does not apply insofar as processing is necessary for reasons specified in Article 17 III of the General Data Protection Regulation. This may be the case, for example, if processing is necessary to comply with a legal obligation or to establish, exercise or defend legal claims (Article 17 III lit. a) and e) of the General Data Protection Regulation).
To view the full scope of your right to erasure / right to be forgotten, please refer to Article 17 of the General Data Protection Regulation which can be prompted with this link.

IV. Right to the Restriction of Processing
As the data subject, you have a right to the restriction of processing subject to the prerequisites laid down in Article 18 of the General Data Protection Regulation.
This means that you have the right to request that we restrict the processing provided that one of the reasons as specified under Article 18 I of the General Data Protection Regulation applies. This may be the case, for example, if you contest the accuracy of the personal data. In such a case, processing will be restricted for such period that we require to verify the accuracy of the personal data (Article 18 I lit. a) of the General Data Protection Regulation).
Restriction means the marking of stored personal data with the aim of limiting their processing in the future (Article 4 (3) of the General Data Protection Regulation).
To view the full scope of your right to the restriction of processing, please refer to Article 18 of the General Data Protection Regulation which can be prompted with this link.

V. Right to Data Portability
As the data subject, you have a right to data portability subject to the prerequisites laid down in Article 20 of the General Data Protection Regulation.
This means that in principle, you have the right to receive the personal data concerning you and which you provided to us in a structured, commonly-used and machine-readable format and that you have the right to transmit these data to another controller without hindrance on our behalf, provided the data were processed based on a consent pursuant to Article 6 (I) lit. a) or Article 9 (II) lit. a) of the General Data Protection Regulation or for the performance of a contract pursuant to Article 6 (I) lit. b) of the General Data Protection Regulation and processing was conducted using automated means (Article 20 (I) of the General Data Protection Regulation).
Information as to whether processing is based on a consent pursuant to Article 6 (I) lit. a) or Article 9 (II) lit. a) of the General Data Protection Regulation or a contract pursuant to Article 6 (I) lit. b) of the General Data Protection Regulation is defined in the information regarding the legal basis for processing, Section C of this privacy notice.
In exercising your right to data portability, you also have the right in principle to request that we transmit the personal data directly to another controller insofar as is technically feasible (Article 20 II of the General Data Protection Regulation).
To view the full scope of your right to the restriction of processing, please refer to Article 20 of the General Data Protection Regulation which can be prompted with this link.

VI. Right to Object
As the data subject, you have a right to object subject to the prerequisites laid down in Article 21 of the General Data Protection Regulation. We expressly point out your right to object as a data subject at the time of our initial communication with you the latest.

Below we provide you with detailed information of this:

1. Right to object for reasons resulting from the specific situation of the data subject
As the data subject, you have the right to object at any time to the processing of personal data concerning you for reasons resulting from your personal situation by virtue of Article 6 (I) lit. e) or f) of the General Data Protection Regulation; this equally applies to any profiling based on this provision.
Information as to whether processing is based on Article 6 (I) lit. e) or f) of the General Data Protection Regulation is defined in the information regarding the legal basis for processing, Section C of this privacy notice.
If you object for reasons resulting from your specific situation, we will no longer process the personal data concerning you unless we can provide proof of compellingly legitimate grounds for such processing which override your interests, rights and freedoms, or such processing serves to establish, exercise or defend legal claims.
To view the full scope of your right to object, please refer to Article 21 of the General Data Protection Regulation which can be prompted with this link.

2. Right to object to direct marketing If the personal data concerning you are processed for direct marketing purposes, you have the right to object to the processing of personal data that concern you for the purposes of such marketing; this applies equally to profiling provided that it is tied to such direct marketing. Information as to whether and to which extent personal data are processed for purposes relating to direct marketing is defined in the information regarding the purposes of processing, Section C of this privacy notice. If you object to the processing for purposes relating to direct marketing, we will no longer process personal data concerning you for these purposes. To view the full scope of your right to object, please refer to Article 21 of the General Data Protection Regulation which can be prompted with this link.

VII. Right to Withdraw Consent
If processing is based on a consent issued pursuant to Article 6 I lit. a) or Article 9 II lit. a) of the General Data Protection Regulation, you as the data subject have the right according to Article 7 III of the General Data Protection Regulation to withdraw your consent at any time. Your withdrawal of the consent does not affect the lawfulness of any processing carried out by virtue of a consent that was issued prior to such withdrawal. We shall notify you accordingly prior to issuing such consent.
Information as to whether processing is based on a consent pursuant to Article 6 I lit. a) or Article 9 II lit. a) of the General Data Protection Regulation is defined in the information regarding the legal basis for processing, Section C of this privacy notice.

VIII. Right to Lodge a Complaint with a Supervisory Authority
As the data subject, you have a right to lodge a complaint with the competent supervisory authority subject to the prerequisites laid down in Article 57 lit. f) of the General Data Protection Regulation.



C. Right to Lodge a Complaint with a Supervisory Authority

We process your personal data in compliance with the provisions set forth in the General Data Protection Regulation (GDPR) as well as the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG) for various purposes. The specific purposes of data processing are primarily dependent on the individual request or the selected product glazeAR.

The processing of your personal data is based on one of the legal reasons specified below:

Contact us

If you contact us by e-mail, your details will be stored in order to process the request and in case of follow-up questions. We will not share this information without your consent. In order to be able to process your inquiries, we collect and process the respective voluntarily provided information. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b DSGVO or Art. 6 Abs. 1 p. 1 lit. f DSGVO.
A storage takes place only for the purpose of answering your inquiry. The data will be deleted afterwards.



Last update: 17.03.2019