Data protection

Privacy Policy according to the General Data Protection Regulation (GDPR)

Name and contact details of the data controller

Controller within the meaning of the General Data Protection Regulation AL-RAHMA INTERNATIONAL GmbH Hövelstr. 214 45326 Essen

Represented by: Mustapha El Founti

Contact:

Telephone: +49 (0) 211 46 89 4014
Fax: +49 (0) 211 46 89 40 15
E-Mail: info@alrahma.eu

Type, Purpose, Duration, and Legal Basis of Data Processing

Type of data collected

In the event of contract initiation, conclusion of a funeral contract or funeral prearrangement contract, and its processing, we collect and process the following data:

Salutation, first name, last name, and if applicable, maiden name, date of birth, and civil status data of the principal.
Identity card information of the principal,
Email address,
Address,
Phone numbers, family relationships,
Contact details of an authorized representative,
Contact information of individuals in the mourning society, both domestically and internationally.

Purpose of Data Processing, Storage Duration, and Legal Basis

Purpose

Data collection and processing are carried out for the creation of an offer, contract conclusion and contract processing, as well as for the appropriate handling of a precautionary contract or a funeral order, to the extent necessary for the mutual fulfillment of obligations arising from the contractual relationship.

Storage Duration

Personal data will be deleted or blocked as soon as the purpose of the storage is no longer applicable. Storage may also take place if required by European or national legislatures in Union regulations, laws, or other provisions to which the data controller is subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a necessity for further data storage for the conclusion or fulfillment of a contract.

Legal basis for the processing of personal data

Where the processing of personal data requires the consent of the data subject, Article 6(1)(a), Article 9(2)(a) of the GDPR serves as the legal basis.

For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

To the extent that the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) of the General Data Protection Regulation (GDPR) serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.

If the processing is necessary to safeguard the legitimate interests of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

Transmission of data to third parties

The transmission of data to third parties only occurs to the extent necessary for the processing of the contract. Third parties may include courts, authorities, especially the civil registry office, the regulatory office, the cemetery administration, the health department, the public prosecutor's office, legal social insurance institutions, especially health insurance, pension insurance, accident insurance, life insurance, and other private insurance companies, the newspaper publisher for the obituary, the florist for funeral floristry, the stonemason, the funeral speaker, and religious communities.

Rights of the Data Subject

If personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights against the data controller:

Right to information

You can request confirmation from the data controller as to whether personal data concerning you is being processed by us.

If such processing is taking place, you can request the following information from the data controller:

the purposes for which personal data are processed;
the categories of personal data processed;
the recipients or categories of recipients to whom the relevant personal data concerning you have been or will be disclosed;
the planned duration of storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage period;
the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing;
the existence of a right to lodge a complaint with a supervisory authority;
all available information about the origin of the data if the personal data are not collected from the data subject.

Right to rectification

You have the right to correction and/or completion with regard to the controller, insofar as the processed personal data concerning you are incorrect or incomplete. The controller is obligated to make the correction promptly.

Right to restriction of processing

Under the following conditions, you can request the restriction of the processing of your personal data:

If you dispute the accuracy of the personal data concerning you for a period that allows the controller to verify the accuracy of the personal data;
if the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of the processing of personal data;
if the controller no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise, or defense of legal claims; or
if you have objected to processing pursuant to Article 21(1) of the GDPR, and it is not yet clear whether the legitimate grounds of the controller override your grounds.

If the processing of personal data concerning you has been restricted, these data may, apart from their storage, only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If the processing restriction has been restricted under the conditions mentioned above, you will be informed by the controller before the restriction is lifted.

Right to erasure

Deletion Obligation

You can request the data controller to immediately delete the personal data concerning you, and the data controller is obligated to delete this data immediately if one of the following reasons applies:

The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
You revoke your consent on which the processing according to Art. 6 para. 1 lit. a or Art. 9 para. 2 a) GDPR is based, and there is no other legal basis for the processing.
You object to the processing pursuant to Art. 21 para. 1 GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
The personal data concerning you has been processed unlawfully.
لا يتطلب حذف البيانات الشخصية المتعلقة بكم لتنفيذ التزام قانوني بموجب القانون الاتحادي أو قانون جمهورية ألمانيا الاتحادية.

The right to erasure does not exist insofar as processing is necessary:

– for exercising the right of freedom of expression and information;
– for compliance with a legal obligation that requires processing under the law of the Union or of the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
– for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
– for the establishment, exercise, or defense of legal claims.

Right to Information

If you have exercised the right to correction, deletion, or restriction of processing against the data controller, the controller is obligated to inform all recipients to whom the personal data concerning you has been disclosed about this correction or deletion of data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about these recipients from the data controller.

Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data has been provided, provided that:

The processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR, and
The processing is carried out by automated means.

In exercising this right, you also have the right to obtain that the personal data concerning you be transmitted directly from one controller to another controller, to the extent that this is technically feasible. This must not adversely affect the freedoms and rights of others.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which is based on Article 6(1)(e) or (f) of the GDPR.

The controller shall no longer process the personal data concerning you unless they demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.

Revocation of the Data Protection Consent Declaration

You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, your place of work, or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.