easy web creator

Usability & Requirements Engineering

Usability Engineering - Requirements Engineering
Process Analysis

Dr. Michael Sprenger
Karl-Theodor-Str. 19
51429 Bergisch Gladbach

Tel.: +49 2204 589 369
Mobil: +49 176 510 898 24
Email: info at msprenger.de
PGP-Fingerprint: C235 BB35 82C8 40B2 DD94 54AC 3AC0 8A05 C5C2 F663

Responsible for content (§10 paragraph 3 MDStV): Michael Sprenger
Tax number: 204/5050/1233
© Michael Sprenger 2018


privacy statement

In the following we refer to the german version of the European "General Data Protection Regulation", called "DSGVO" (Datenschutz-Grundverordnung)

General information

This privacy policy explains to you the nature, scope and purpose of the processing of personal data within this website. The terms used (e.g. "personal data" or their "processing") are defined in Art. 4 of the Basic Data Protection Ordinance (DSGVO).

We take the protection of your personal data very seriously. We want you to know when we collect which data and how we use it. In the course of the further development of this website, changes to this data protection declaration may also become necessary. We therefore recommend that you read through this data protection declaration from time to time.

Name and address of the data controller

Responsible for the processing in the sense of the data protection basic regulation is:

Dr. Michael Sprenger
Karl-Theodor-Str. 19
51429 Bergisch Gladbach
Phone: 02204 589 369
Mobile: 0176 510 898 24
Email: info at msprenger.de

Collection of general data and information
Each time you access this website, it is stored in a log file for a limited period of time with the following data:
- Name of the web page accessed
- Date and time of retrieval
- transferred data volume
- Notification of successful retrieval
- Browser type and version
- previously visited page
- operating system of the user and
- IP address of the user

These data are evaluated for statistical and security purposes as well as for the optimisation of the Internet offer. There is no personal evaluation or profile formation.
Notwithstanding this, we reserve the right to evaluate your IP address in the event of attacks on our website.
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO.
The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object.

Dealing with contact data
If you should contact us through the contact options offered above, it is up to you to decide which personal data you want to communicate to us.
Your personal data will only be processed and stored for the purpose of processing and answering your enquiry. These data will not be passed on to third parties without your consent.
The legal basis for the processing of the data is Art. 6 Para. 1 lit. f DSGVO. If the purpose of establishing contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

Security measures
We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of the data protection laws are complied with and to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

Passing on data to third parties
Personal data will only be transmitted to third parties if we are obliged to do so by law or court order or if this is necessary for legal or criminal prosecution in the event of attacks on our Internet infrastructure.

Deletion of data
The data stored by us will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them. If the user's data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be stored for commercial or tax reasons.

Links to websites of other providers
This website contains links to websites of other providers. We have no influence on whether these providers comply with data protection regulations.

User rights
Right to confirmation
Any data subject shall have the right to obtain from the controller confirmation as to whether personal data concerning him or her are being processed. If a data subject wishes to exercise this right of confirmation, he or she may at any time contact the controller for this purpose.

Right of access
Any person concerned by the processing of personal data has the right to obtain, at any time and free of charge, from the controller, information concerning the personal data relating to him which have been stored and a copy of that information. Furthermore, the European Directive and Regulation Body has granted the data subject access to the following information:
- the purposes of the processing
- the categories of personal data processed
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
- if possible, the planned duration for which the personal data will be stored or, if that is not possible, the criteria for determining that duration
- the existence of a right to the rectification or erasure of personal data concerning him or her or to the limitation of the processing carried out by the controller or of a right to object to such processing
- the existence of a right of appeal to a supervisory authority. The competent complaints office is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (https://www.ldi.nrw.de).
- if the personal data are not collected from the data subject: All available information on the origin of the data
- the existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) of the DS Block Exemption Regulation and, at least in these cases, meaningful information on the logic involved, the scope and the intended effects of such processing on the data subject

The data subject shall also have a right of access to information as to whether personal data have been transferred to a third country or to an international organisation. If this is the case, the data subject shall also have the right to obtain information on the appropriate safeguards in connection with the transfer.
If a data subject wishes to exercise this right of access, he or she may at any time contact the controller for this purpose.

Right of rectification
Any person concerned by the processing of personal data has the right to obtain the rectification without delay of inaccurate personal data concerning him or her. Furthermore, the data subject shall have the right, having regard to the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary statement.
If a data subject wishes to exercise this right of rectification, he or she may at any time contact the controller for this purpose.

Right to deletion (right to be forgotten)
Any person data subject to the processing of personal data shall have the right to obtain from the controller the erasure without delay of the personal data concerning him or her where one of the following reasons applies and where the processing is not necessary:
- Personal data have been collected or otherwise processed for purposes for which they are no longer necessary.
- The data subject withdraws his consent on which the processing was based pursuant to Art. 6 para. 1 letter a DSGVO or Art. 9 para. 2 letter a DSGVO and there is no other legal basis for the processing.
- The data subject objects to the processing pursuant to Art. 21 para. 1 DS Block Exemption Regulation and there are no overriding legitimate reasons for the processing or the data subject objects to the processing pursuant to Art. 21 para. 2 DS Block Exemption Regulation.
- The personal data have been processed unlawfully.
- The deletion of the personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
- The personal data were collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO.

If one of the aforementioned reasons applies and a data subject wishes to have personal data stored by us deleted, he or she can contact the data controller at any time for this purpose. The data controller will ensure that the request for deletion is complied with immediately.

If we have made the personal data public and if our company, as the person responsible, is obliged to delete the personal data pursuant to Art. 17 (1) DSGVO, we shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform other persons responsible for data processing who process the published personal data that the data subject has requested the deletion of all links to this personal data or copies or replications of this personal data from these other persons responsible for data processing, insofar as the processing is not necessary. We will take the necessary steps in individual cases.

Right to limitation of processing
Any person concerned by the processing of personal data has the right to request the controller to limit the processing if one of the following conditions is met:
- The accuracy of the personal data shall be contested by the data subject for a period of time which allows the controller to verify the accuracy of the personal data.
- The processing is unlawful and the data subject refuses to erase the personal data and instead requests that the use of the personal data be restricted.
- The controller no longer needs the personal data for the purposes of processing, but the data subject needs them for the assertion, exercise or defence of legal rights.
- The data subject has lodged an objection to the processing pursuant to Art. 21 para. 1 DS-GVO and it is not yet clear whether the legitimate reasons of the data controller outweigh those of the data subject.

If one of the above conditions is met and a data subject wishes to request the restriction of personal data stored by us, he or she can contact our data controller at any time for this purpose. We will arrange for the processing to be restricted.

Right to data transferability

Any person concerned by the processing of personal data shall have the right to receive the personal data concerning him provided to a controller by the data subject in a structured, common and machine-readable format. It also has the right to communicate this data to another data controller without being hindered by the controller to whom the personal data have been provided, provided that the processing is based on the consent pursuant to Art. 6 para. 1 letter a DSGVO or Art. 9 para. 2 letter a DSGVO or on a contract pursuant to Art. 6 para. 1 letter b DSGVO and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task in the public interest or in the exercise of official authority entrusted to the controller.
Furthermore, when exercising his right to data transferability pursuant to Art. 20 para. 1 DSGVO, the data subject shall have the right to obtain that the personal data be transferred directly from one responsible party to another responsible party, insofar as this is technically feasible and insofar as this does not impair the rights and freedoms of other persons.
In order to assert the right to data transferability, the data subject may contact the data controller at any time.

Right of opposition
Any person concerned by the processing of personal data has the right to object at any time, for reasons relating to his particular situation, to the processing of personal data concerning him on the basis of Article 6(1)(e) or (f) of the DS Block Exemption Regulation. This also applies to profiling based on these provisions.
In the event of objection, we will no longer process the personal data unless we can prove compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the person concerned, or the processing serves to assert, exercise or defend legal claims.
In order to exercise the right to object, the data subject may contact us directly. The data subject shall also be free to exercise his right of objection in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

Automated decisions on a case-by-case basis, including profiling
Any data subject who processes personal data shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects upon him or her or significantly affects him or her in a similar manner, unless the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is authorised by legislation of the Union or of the Member States to which the data controller is subject and which provides for adequate measures to safeguard the rights and freedoms and the legitimate interests of the data subject or (3) is taken with the express consent of the data subject.
Where the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the data controller or (2) is taken with the express consent of the data subject, we shall take appropriate measures to safeguard the rights and freedoms and the legitimate interests of the data subject, including at least the right to have the data controller intervene, to present his or her point of view and to contest the decision.
If the data subject wishes to exercise rights relating to automated decisions, he or she may at any time contact the controller for this purpose.

Right to revoke consent under data protection law
Any person concerned by the processing of personal data has the right to withdraw consent to the processing of personal data at any time.
If the data subject wishes to exercise his/her right to revoke his/her consent, he/she can contact the data controller at any time.

Note: This data protection declaration was partly created with the data protection declaration generator of the DGD Deutsche Gesellschaft für Datenschutz GmbH.

© www.msprenger.de