Data protection policy

Cookie Policy
of
lastseen.org
Privacy Policy of lastseen.org

This application collects personal data from its users.

This document can be printed for reference using the browser’s “Print” command.

Provider and Data Controller
International Tracing Service (ITS)
Große Allee 5 – 9
34454 Bad Arolsen
Germany

Phone: +49 5691 629-0
Fax: +49 5691 629-501

Email: info@arolsen-archives.org
Website: arolsen-archives.org

Provider’s email address: info@arolsen-archives.org

Types of Data Collected

The types of personal data that this application collects, either independently or through third parties, include: trackers.

Detailed information on each type of personal data collected is provided in the dedicated sections of this privacy policy or by specific explanatory texts displayed prior to data collection. Personal data may be freely provided by the user, or, in the case of usage data, collected automatically when using this application. Unless otherwise specified, all data requested by this application is mandatory. If the user refuses to provide the data, this application may not be able to provide its services. In cases where this application specifically states that some data is optional, users are free to refrain from providing this data without affecting the availability or functioning of the service. Users unsure about which personal data is mandatory can contact the provider. Any use of cookies – or other tracking tools – by this application or by the providers of third-party services used by this application serves the purpose of providing the service requested by the user and for other purposes described in this document and, if available, in the Cookie Policy.

Users are responsible for any third-party personal data obtained, published, or shared through this application and confirm that they have the third party's consent to provide the data to the provider.

Type and location of data processing

Processing methods

The provider processes the user data in a proper manner and takes appropriate security measures to prevent unauthorized access and the unauthorized forwarding, modification or destruction of data.
Data processing is carried out using computers or IT-based systems in accordance with organizational procedures and practices that are specific to the purposes indicated. In addition to the Data Controller, other parties may operate this Application and have access to the Data, either internally (Human Resources, Sales, Marketing, Legal Department, System Administrators) or externally (such as providers of technical services, delivery companies, hosting providers, IT companies or communication agencies), appointed by the Data Controller as Data Processors where necessary. An up-to-date list of these parties can be requested from the provider at any time.
Legal bases of the processing

The provider may only process users personal data if one of the following applies:

    Users have given their consent for one or more specific purposes. Note: In some jurisdictions, the provider may be permitted to process personal data until the user objects to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. However, this does not apply if the processing of personal data is subject to European data protection law;
    the collection of data is necessary for the performance of a contract with the user and/or for pre-contractual measures arising therefrom
    the processing is necessary for compliance with a legal obligation to which the provider is subject
    the processing is related to a task carried out in the public interest or in the exercise of official authority vested in the provider
    the processing is necessary for the purposes of the legitimate interests pursued by the provider or by a third party.

In any case, the provider will be happy to provide information about the specific legal basis on which the processing is based, in particular whether the provision of personal data is a legal or contractual obligation or a prerequisite for the conclusion of a contract.
Location

The data is processed at the providers branch and at all other locations where the offices involved in the data processing are located.

Depending on the location of the users, data transfers may involve the transfer of the users data to a country other than their own. To find out more about the place of processing of the transferred data, users can consult the section detailing the processing of personal data.

The data is processed at the providers branch and at all other locations where the entities involved in the data processing are located.

Depending on the location of the users, data transfers may involve the transfer of the users data to a country other than their own. To find out more about the place of processing of the transferred data, users can consult the section detailing the processing of personal data.

Users also have the right to obtain information about the legal basis for the transfer of Data to a country outside the European Union or to an international organization governed by public international law or established by two or more countries, such as the UN, as well as about the security measures taken by the Owner to protect their Data.

If such a transfer takes place, the User can find out more by checking the relevant sections of this document or by contacting the Owner using the information provided in the contact section.
Storage period

Personal data is processed and stored for as long as required by the purpose for which it was collected.

The following therefore applies:

    Personal data collected for the purpose of fulfilling a contract concluded between the provider and the user will be stored until this contract has been completely fulfilled.
    Personal data collected to protect the legitimate interests of the provider will be retained for as long as necessary to fulfill these purposes. Users can obtain more information about the legitimate interests of the Owner in the relevant sections of this document or by contacting the Owner.

In addition, the Owner may retain Personal Data for longer periods of time if the User has consented to such processing, as long as the consent is not withdrawn. Furthermore, the provider may be obliged to store personal data for a longer period of time if this is necessary to fulfill a legal obligation or by order of an authority.

After the retention period has expired, personal data will be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be asserted after the retention period has expired.

Purposes of the processing

Personal data about the User is collected to enable the Provider to provide the Service and also to comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of Users or third parties), detect malicious or fraudulent activity. In addition, data is collected for the following purposes: Analytics and tag management.

Users can find more detailed information on these processing purposes and the Personal Data used for each purpose in the “Detailed information on the processing of Personal Data” section of this document.
Detailed information on the processing of personal data

Personal data is collected for the following purposes using the following services:

    Analytics

    The services listed in this section allow the Owner to monitor and analyze traffic and track User behavior.
    Google Analytics 4 (Google Ireland Limited)

    Google Analytics 4 is a web analytics service provided by Google Ireland Limited (“Google”).
    Google uses the Data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services.
    Google may use the data collected to contextualize and personalize the ads of its own advertising network. In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is stored in a data center or on a server. Users can find out more by consulting Googles official documentation.

    Personal data processed: Tracker.

    Processing location: Ireland - Privacy Policy - Opt Out.
    Tag management

    This type of service helps the Owner to centrally manage the tags or scripts required by this Application.
    This results in the users data flowing through these services and possibly being stored.
    Google Tag Manager (Google Ireland Limited)

    Google Tag Manager is a tag management service provided by Google Ireland Limited.

    Processed personal data: Tracker.

    Processing location: Ireland - Privacy Policy.

The rights of users

Users may exercise certain rights in relation to their data processed by the Provider.

In particular, users have the right to do the following:

    Withdraw consent at any time. If the user has previously consented to the processing of personal data, they may withdraw their consent at any time.
    Object to the processing of their data. The user has the right to object to the processing of their data if the processing takes place on a legal basis other than consent. Further information on this is provided below.
    Obtain information about their data. The user has the right to know whether the data is being processed by the provider, to receive information about individual aspects of the processing and to receive a copy of the data.
    Verification and rectification. The user has the right to verify the accuracy of their data and to request that it be updated or corrected.
    Request restriction of the processing of their data. Users have the right to restrict the processing of their data under certain circumstances. In this case, the provider will not process the data for any purpose other than storage.
    Request erasure or other removal of personal data. Under certain circumstances, users have the right to request that the provider erase their data.
    Receive their data and have it transferred to another controller. Users have the right to receive their data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance. This provision applies where the data is processed by automated means and the processing is based on the users consent, on a contract to which the user is party or on pre-contractual obligations.
    Lodge a complaint. Users have the right to lodge a complaint with the competent supervisory authority.

Details on the right to object to processing

If personal data is processed in the public interest, in the exercise of an official authority vested in the provider or to protect the legitimate interests of the provider, the user may object to this processing by providing a justification relating to their particular situation.

Users are informed that they can object to the processing of personal data for direct marketing purposes at any time without giving reasons. Users can find out whether the provider processes personal data for direct marketing purposes in the relevant sections of this document.
How the rights can be exercised

All requests to exercise User rights may be addressed to the Owner using the contact details provided in this document. Requests can be exercised free of charge and will be processed by the Provider as soon as possible, at the latest within one month.
Cookie Policy

This Application uses Trackers. Further information can be found in the Cookie Policy.
Further information on the collection and processing of data
Legal measures

The Users Personal Data may be processed by the Owner for the purposes of law enforcement within or in preparation for legal proceedings arising from improper use of this Application or related services.
The User declares to be aware that the Provider may be required by the authorities to disclose personal data.
Further information about the Users personal data

In addition to the information contained in this privacy policy, this Application may provide the User with additional contextual information concerning particular Services or the collection and processing of Personal Data upon request.
System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs) or use other Personal Data (such as the IP Address) for this purpose.
Information not included in this privacy policy

Further information about the collection or processing of Personal Data may be requested from the Owner at any time using the contact details provided.
How “Do Not Track” requests are handled

This Application does not support “Do Not Track” requests through web browsers.
Users can find information on whether integrated third-party services support the Do Not Track protocol in the privacy policy of the respective service.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Application and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. Users are therefore advised to visit this page regularly and in particular to check the date of the last change indicated at the bottom of the page.

If changes affect the use of data based on the users consent, the provider will - if necessary - obtain new consent.
Definitions and legal information
Personal data (or data)

All information by which the identity of a natural person is or can be determined, either directly or in conjunction with other information.
Usage data

Information that this Application (or third-party services used by this Application) collects automatically, such as: the IP addresses or domain names of the computers of users who use this Application, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the servers response (successful outcome, error, etc.), the country of origin, the functions performed, the date and time of the request, the date and time of the request, and the date and time of the request. This information includes the country of origin, the functions of the browser and operating system used by the user, the various time details per request (e.g. how much time was spent on each page of the application) and details of the path followed within an application, in particular the sequence of pages visited, as well as other information about the operating system of the device and/or the users IT environment.
User

The person using this Application who, unless otherwise specified, corresponds to the Data Subject.
Data Subject

The natural person to whom the personal data relates.
Processor (or data processor)

Natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller, as described in this privacy policy.
Controller (or provider, sometimes also owner)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this Application. Unless otherwise specified, the controller is the natural or legal person through whom this Application is offered.

This application

The hardware or software tool with which the users personal data is collected and processed.
Service

The service provided by this Application as described in the relevant terms and conditions (if any) and on this Website/Application.
European Union (or EU)

Unless otherwise specified, all references in this document to the European Union refer to all current Member States of the European Union and the European Economic Area (EEA).
Cookie

Cookies are trackers that consist of a small set of data stored in the users browser.
Tracker

The term tracker refers to any technology - e.g. cookies, unique identifiers, web beacons, embedded scripts, e-tags or fingerprinting - that can track users, e.g. by enabling access to or storage of information on the users device.
Legal notice

This Privacy Policy has been drafted on the basis of provisions of various legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

This privacy policy relates solely to this Application, if not stated otherwise within this document.

Last updated: March 3, 2023