Insightful Science, LLC
Data Transfer and Sharing Agreement, incorporating Model Contractual Clauses
Each data subject shall have the right granted by the European legislator to obtain from the controller-free information about his or her personal data stored at any time and a copy of this information. Furthermore, the European directives and regulations grant the data subject access to the following information:
the categories of personal data concerned;
Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies:
If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by Statsols, he or she may at any time contact our Data Protection Officer or another employee of the controller. The Data Protection Officer of Statsols or another employee will arrange the restriction of the processing.F) Right to Data Portability
Statsols shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If Statsols processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to the processing of personal data concerning him or her for such marketing. This applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to Statsols to the processing for direct marketing purposes, Statsols will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by Statsols for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
In order to exercise the right to object, the data subject may directly contact the Data Protection Officer of Statsols or another employee. In addition, the data subject is free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to use his or her right to object by automated means using technical specifications.H) Automated individual decision-making, including profiling
1890 252 231
Data Protection Commission
Co. Laois, R32 AP23, Ireland
16L. Data Protection provisions about the application and use of VWO
On this website, the controller has integrated components of VWO.
The operating company of VWO is located at Heidenkampsweg 58, Hamburg, 20097, Germany.
Optimizely is an Indian company that makes progressive delivery and experimentation software for other companies. The VWO platform technology provides A/B testing and multivariate testing tools, website personalization, and feature toggle capabilities
Further information and the applicable data protection provisions of VWO https://vwo.com/privacy-policy/
16M. Data Protection provisions about the application and use of YouTube
On this website, the controller has integrated components of YouTube.
The operating company of YouTube is located at 901 Cherry Avenue, San Bruno, California, United States
YouTube is an American online video-sharing platform headquartered in San Bruno, California. The Company enables its users to upload, share, and watch various categories of videos, as well as provides news, sports, and entertainment content online in an easily searchable format.
Further information and the applicable data protection provisions of YouTube https://policies.google.com/privacy
16N. Data Protection provisions about the application and use of Cameyo
On this website, the controller has integrated components of Cameyo.
The operating company of Cameyo is located at 5000 Centre Green Way, Suite 500, Cary, NC 27513 United States
Vimeo, LLC operates as a video sharing site. The Company enables its users to upload, share, and watch various categories of videos, as well as provides news, sports, and entertainment content online in an easily searchable format. Vimeo serves customers in the United States.
Further information and the applicable data protection provisions of Cameyo https://cameyo.com/privacy/
Legal Basis for the Processing
Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. If our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR. Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).
The Legitimate Interests Pursued by the Controller or by the Third Party
Where the processing of personal data is based on Article 6(1) lit. for GDPR our legitimate interest is to carry out our business in favor of the well-being of all our employees and the shareholders.
Period for which the Personal Data Will be Stored
We will only retain personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of the personal data, the purposes for which we process the personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Provision of Personal Data as Statutory or Contractual Requirement: Requirement Necessary to Enter into a Contract; Obligation of the Data Subject to Provide the Personal Data; Possible Consequences of Failure to Provide Such Data.
We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary to conclude a contract that the data subject provides us with personal data, which must subsequently be processed by us.
The data subject is, for example, obliged to provide us with personal data when our company signs a contract with him or her. The non-provision of the personal data would have the consequence that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact our Data Protection Officer.
Our Data Protection Officer clarifies to the data subject whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of non-provision of the personal data.
Additions and changes
We may change or update this privacy notice at any time. We encourage you to review this privacy notice regularly for any changes.
In order to make a query, raise a concern, avail of your data protection rights or for any other reason related to this privacy notice, please contact us at firstname.lastname@example.org.