In addition to our general data protection information, we will now inform you about the processing of your personal data when you use our website.
I. Name and Address of Representative
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection provisions is:
ACATO GmbH
Beta Str. 10A
85774 Unterföhring
Germany
II. Contact Details of Data Privacy Officer
You can contact our data protection officer as follows:
ACATO GmbH
c/o DSB
Ismaninger Str. 154
81675 Munich
Germany
E-mail: If your request is specifically addressed to ACATO GmbH as the responsible party, please write to us at the following e-mail address: dsb@acato.co.uk
If your request is addressed to one of our clients for whom we are appointed as external data protection officer, please write to us at the following email address: edsb@acato.co.uk and kindly mention the company name of our client in your email.
III. General information on data processing
1. Scope of processing of personal data
We generally only process our users’ personal data to the extent that this is necessary to provide a functional website and our content and services. Our users’ personal data is generally only processed with the user’s consent. An exception applies in cases where prior consent cannot be obtained for actual reasons and the processing of the data is required by law.
2. Legal basis for the processing of personal data
If we obtain the consent of the data subject for processing personal data, Art. 6 (1) sentence 1 lit. a GDPR serves as the legal basis.
If personal data is processed that is necessary to fulfill a contract to which the data subject is a party, Art. 6 (1) sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. If processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) sentence 1 lit. c GDPR serves as the legal basis.
If vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) sentence 1 lit. d GDPR serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) sentence 1 lit. f GDPR serves as the legal basis for processing.