Transfer of personal data to third parties
As a rule, your personal data collected by our homepage will not be transferred to third parties unless permitted by law or set forth specifically below herein – on in any future amendment and update of this Privacy Notice – and in the context of our use of Google Analytics and Google Maps.
Exceptions to this rule permitted by law are:
• If the transfer is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract (Art. 6 (1), letter b) GDPR);
• If you have given us explicit consent to do so (Art. 6 (1), letter a) GDPR);
• If processing is necessary for the pursuit of our legitimate interests and there is no reason to assume that you have an overriding interest in the non-transfer of the data that require protection (Art. 6 (1), letter f) GDPR); or
• If the transfer is necessary for compliance with a legal obligation to which we are subject (Art. 6 (1), letter c) GDPR). Transfer to and processing by our IT service providers as our vicarious agents who make this homepage available on the Internet on our behalf is by law no transfer to “third parties”.
If data is transferred to organisations which are based in or whose data processing takes place in a jurisdiction which is not a member of the European Union or a member state of the European Economic Area (“EEA”), before transferring the data we will ensure that (unless a legally applicable exemption applies) that the recipient has an appropriate level of data protection in place (e.g. through a determination of adequacy by the European Commission, through appropriate guarantees such as the recipient being self-certified for the EU-US Privacy Shield, or an agreement in the form of the EU standard contractual clauses with the recipient).