Data protection

Information on the processing of your data pursuant to Article 13 of the General Data Protection Regulation (GDPR)

1. Controller and Data Protection Officer

The controller for this website is Dr. Wojciech Ganczarski, Im Mediapark 5, 50670 Cologne, Germany.
You can contact the Data Protection Officer via email at datenschutz@agnion.ai.

2. Data processed for providing the website and creating log files

a. What data do we collect?

The following data are collected:

Date and time of access
IP address
Hostname of the accessing device
Website from which our website was accessed (referrer)
Websites accessed via our website (outbound links)
Pages visited on our website
Retrieval status (e.g., success/failure message)
Amount of data transferred
Information about the browser type and version
Operating system

Temporary storage of these data is technically necessary to deliver the website. Further storage in log files is carried out to ensure the functionality of the website and the security of our IT systems. These purposes also constitute our legitimate interests in processing the data.

b. Legal basis for processing

Processing is based on Article 6(1) GDPR—in particular Article 6(1)(f) GDPR (legitimate interests) for security and technical delivery.

c. Hosting

The website is hosted externally. The hosting provider receives the data listed above as our processor in accordance with Article 28 GDPR.

d. Storage period

Data are deleted as soon as they are no longer necessary for the purpose of their collection. For the provision of the website, this is the case when the respective session ends. Log files are kept directly accessible to administrators for up to 24 hours only. Thereafter, they are only indirectly available via the reconstruction of backup tapes and are permanently deleted after a maximum of four weeks.

3. Rights of data subjects

a. Right of access

You may request information about your personal data processed by us pursuant to Article 15 GDPR.

b. Right to object

You have the right to object on grounds relating to your particular situation (see Section II below).

c. Right to rectification

If information concerning you is (no longer) accurate, you can request rectification pursuant to Article 16 GDPR. If your data are incomplete, you may request completion.

d. Right to erasure

You can request the erasure of your personal data pursuant to Article 17 GDPR.

e. Right to restriction of processing

You have the right to request restriction of processing pursuant to Article 18 GDPR.

f. Right to lodge a complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority pursuant to Article 77(1) GDPR. This includes the authority competent for the controller:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW) – https://www.ldi.nrw.de/kontakt/ihre-beschwerde

g. Right to data portability

Where the conditions of Article 20(1) GDPR are met, you have the right to have data that we process on the basis of your consent or in performance of a contract and by automated means transmitted to you or to a third party. The collection of data for providing the website and the storage of log files are technically necessary for operating the website. They are therefore not based on Article 6(1)(a) GDPR (consent) or Article 6(1)(b) GDPR (contract) but are justified under Article 6(1) GDPR, particularly (f). Consequently, the conditions of Article 20(1) GDPR are not fulfilled in this respect.

4. Data collection in connection with setting up newsfeeds (newsletter)

Your data are required and collected to set up a newsfeed and to send it to you by email at regular intervals.

Legal basis: Article 6(1)(a) GDPR (consent) and Article 6(1)(b) GDPR (performance of a contract).

Use of our offering is voluntary; however, without your personal data we cannot provide the newsfeed. We process the data you provide exclusively to set up and deliver your newsfeed. Your personal data will not be disclosed and not transferred to a third country or an international organization. A data processing agreement pursuant to Article 28 GDPR has been concluded.

Your data are stored only as long as necessary to fulfill the purpose. As a rule, this means we delete or anonymize your personal data after you unsubscribe from the newsfeed. Statutory retention obligations and periods are observed.

5. Information obligations for customers

When you order products or services from us, we collect personal data such as name, address, contact details, and payment information. We need these data for contract performance pursuant to Article 6(1)(b) GDPR and to fulfill legal obligations pursuant to Article 6(1)(c) GDPR. Your data are stored only as long as necessary for the stated purposes or as long as statutory retention periods apply.

6. Information obligations for applicants

When you apply to us, we collect data such as CV, cover letter, and certificates. Processing is based on your consent pursuant to Article 6(1)(a) GDPR and for pre-contractual measures pursuant to Article 6(1)(b) GDPR. If we do not offer you a position, your data will be deleted, unless you consent to a longer storage in our applicant pool.

7. Information obligations for prospects

When you visit our website, we may collect personal data via contact forms or newsletter subscriptions, based on your consent pursuant to Article 6(1)(a) GDPR. We use these data solely to process your inquiry or to send information.

II. Right to object pursuant to Article 21(1) GDPR

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data which is based on Article 6(1)(f) GDPR (legitimate interests). In such a case, the controller will no longer process your personal data unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.

The collection of data for providing the website and the storage of log files are strictly necessary for the operation of the website.