Digittrade HS256S, User Manual

Page: 91 / 100

English
91
2) Data reduction and data economy (Section 3a)
Personal data shall be collected, processed and used, and data processing systems
shall be chosen and organized in accordance with the aim of collecting, process-
ing and using as little personal data as possible. In particular, personal data shall
be rendered anonymous or aliased as allowed by the purpose for which they are
collected and/or further processed, and as far as the effort required is not dispro-
portionate to the desired purpose of protection.
Please consider this aspect during the creation of backup copies. The old back-
ups should be replaced with the current data regularly instead of providing new
ones. To delete the old data completely before creating a new backup, it is recom-
mended to change the cryptographic key and then fully format the hard drive with
the new key.
3) Transparency and purpose
The data subject is to be informed of collection, first-time storage or transmission
of the personal data according to §48 Para. 3, §19 and §33 of the Federal Data
Protection Act (BDSG). This is also regulated by Article 10 f. of the EU Data Protec-
tion Directive (95/46/EC). In addition to processing personal data the principle of
the purpose must be regarded (see in particular Article 6 (b) of EU Data Protection
Directive).
4) The processing of special categories of data Article 8:
Member States shall prohibit the processing of personal data revealing racial or
ethnic origin,
political opinions, religious or philosophical beliefs, trade-union membership, and
the processing of data concerning health or sex life.
Processing is only allowed if e.g. this is required for the employment relationship
or to protect the vital interests involved. Further processing of the data is allowed
if the data subject has published the data itself, it is required to assert claims in
court or processing the data in the context of medical care / health care is needed.
Appropriate regulations can be found in § 28 para. 6-9 BDSG
5) Inalienable rights of the data subject
According to §19, 20, 34 and 35 BDSG the data subject has the right of access,
rectification and erasure or blocking of the stored data concerning them.
The same also applies to Article 12 of the EC Data Protection Directive, in which
any interested party has the right to information and, as appropriate the rectifica-
tion, erasure or blocking of data the processing of which does not comply with the
provisions of this Directive.