Data protection information
When you use it’s my data, your personal information is processed. Data is processed by it’s my data GmbH. An overview of the procedures involved is provided below.
1. Who is responsible for data processing?
1.1 Data processing is the responsibility of:
It’s my data GmbH
80539 Munich, Germany
it’s my data GmbH
81543 Munich, Germany
1.2 You can contact the data protection officer of it’s my data GmbH at:
it’s my data GmbH
81543 Munich, Germany
2. Why do we process your data (purpose of processing)?
It’s my data GmbH processes your data in order to deliver the service offered at www.itsmydata.de. We also process your data if you have granted it’s my data GmbH the usage right to sell your data.
it’s my data GmbH obtains the following data from you as part of the registration process:
- Your personal details (first name, last name, address, date of birth);
- Your email address;
- The it’s my data email address designated by you;
- Your login details (the user name and password chosen by you).
2.2 Using the data account
When you use the data account, data is processed as follows:
- In the data account, you can manage the data you entered during the registration process.
- You can add further information, e.g. telephone number, customer number. This data is necessary for subject access requests.
- If you use the data account to make a subject access request to a company in accordance with Article 15 of the GDPR, it’s my data GmbH processes this request and forwards your key personal data to this company. Your key personal data includes your customer number and telephone number,
if applicable, and the it’s my data email address chosen by you. it’s my data GmbH processes all the data contained in the access request and makes it available to you in processed form in the data account.
- If you make a rectification request, it’s my data GmbH forwards this request to the company concerned. The response is processed by it’s my data GmbH for your data account, where it is made available to you in processed form.
2.3 Sale of usage rights/use of partner services
If you have sold a usage right to your data, it’s my data GmbH forwards the data designated by you to the companies selected by you. This is subject to the condition that these companies use this data solely for the purposes you have specified and only within the period you have specified. The same applies to your use of partner services.
2.4 The website
Your personal data is not collected when you use the public areas of the website www.itsmydata.de.
When you visit this site, the web server automatically creates log files; these cannot be used to identify specific individuals. This information includes, for example, browser type and version, operating system used, referrer URL (previously visited page), IP address of the computer used, date and time of the server request and the client’s file request (file name and URL). This information is collected solely for the purpose of statistical analysis. It is not disclosed to third parties for commercial or non-commercial purposes.
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies” which are text files placed on your computer to enable an analysis of how you use the website. The information generated by the cookie about your use of the site (including your IP address) is transmitted to a Google server in the USA and stored there. Google uses this information to analyse your use of the website, to compile reports about your activities on the site for the website operators and to deliver other services associated with your use of the website and the Internet. Google also transmits this information to third parties, where applicable, if required to do so by law or if this data is processed by third parties on behalf of Google. Under no circumstances does Google link your IP address with other data held by Google. You can prevent the installation of cookies by selecting the appropriate settings on your browser. However, please note that if you do this you may not be able to make full use of all the functions of this website. By using this website, you consent to the processing of data collected about you by Google in the manner and for the purpose described above.
You can prevent cookies from being stored on your hard disk and the display of web beacons. To do this, select “Block cookies” in your browser settings (in Internet Explorer at Tools/Internet options/Privacy/Settings; in Firefox at “Options/Privacy & Security/Cookies and Site Data”). On these pages, we use “session cookies” to make it easier for you to use the website. These are small text files that are stored on your hard drive only for the duration of your visit to the website. They are deleted when you close your browser session, depending on the configuration of your browser program. These cookies do not retrieve any information about you that is saved on your hard drive and do not adversely affect your PC or files. Most browsers are configured to accept cookies automatically. However, you can disable the storage of cookies and configure your browser to alert you when cookies are transmitted.
3. Who receives your data?
it’s my data GmbH does not pass on your data to third parties without your knowledge. it’s my data GmbH also does not transmit your data to countries outside the European Union or to international organisations.
If you use your data account to make an access request or rectification request to another responsible party, we will send the data necessary for this (key personal data and the data to be rectified) to this company. Upon the instruction issued by you via the data account, we will forward the data specified by you to other responsible parties.
it’s my data GmbH forwards the data you select to the recipients chosen by you provided that you have sold a usage right to this effect.
4. How is your stored data made available to you?
In your data account, you can view all the personal data stored about you.
5. Do we use automated decision-making processes?
it’s my data GmbH does not use profiling techniques or automated decision-making processes.
6. On what legal basis is data processing carried out and how long is your data stored for?
Your data is processed for the performance of a contract in accordance with Article 6, 1 (b) of the GDPR. The subject of the contract is the management of your data account and the provision of this data in the data account. The sale of usage rights to your data initiated by you can also be the subject of contractual performance.
Data is also processed for compliance with a legal obligation (e.g. retention and documentation requirements) in accordance with Article 6, 1 (c) of the GDPR. This includes your key personal data in particular.
it’s my data GmbH processes and stores your personal data as long as you are registered for your data account. It should be noted that the contractual relationship is a continuing obligation that lasts for many years. In the event of a contract termination, all data in your personal data account will be deleted and can no longer be recovered if you later re-register. Data concerning your contract (e.g. payment data) must be kept for up to ten years for tax reasons.
If the data is no longer required to fulfil contractual or legal obligations, it is regularly deleted unless it is required for further processing during a limited period for the following purposes:
- Compliance with commercial and tax law retention requirements. These include the German Commercial Code (HGB) and the Fiscal Code (AO). The time periods prescribed in the codes for retention and documentation are two to ten years.
- Preservation of evidence as part of statutory limitation periods. According to sections 195 et seq of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the standard limitation period being three years.
7. What data protection rights do you have?
With regard to your personal data, you have the following rights:
- right of access under Article 15 of the GDPR;
- right to rectification under Article 16 of the GDPR;
- right to erasure under Article 17 of the GDPR;
- right to restriction of processing under Article 18 of the GDPR;
- right to data portability under Article 20 of the GDPR.
For the right of access and right to erasure, the restrictions referred to in sections 34 and 35 of the Federal Data Protection Act (BDSG) apply. There is also the right to lodge a complaint with a supervisory authority (Article 77 GDPR; section 40 BDSG).
You may correct your data yourself directly in your data account.