–––––––––––––––––––– Privacy Policy ––––––––––––––––––––
1. Introduction and Contact Details of the Responsible Party
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The responsible party for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Oliver Wittekind, Stettiner Str. 21, 34560 Fritzlar, Germany, Tel.: 01742044460, Email: sowittekind@gmail.com. The responsible party for the processing of personal data is the natural or legal person who decides on the purposes and means of processing personal data alone or together with others.
2. Data Collection When Visiting Our Website
2.1 When using our website for information purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Website visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you reached the site
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
3. Cookies
To make the visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for longer and enable your settings to be saved (so-called "persistent cookies"). In the latter case, you can find out the duration of storage in the overview of the cookie settings of your web browser.
If individual cookies used by us also process personal data, processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Please note that if you do not accept cookies, the functionality of our website may be limited.
4. Contacting Us
4.1 Own Review Reminder Based exclusively on your explicit consent according to Art. 6 Para. 1 lit. a GDPR, we use your email address for a one-time reminder to submit a review of your order. You can revoke your consent at any time by sending a message to the responsible party for data processing.
4.2 WhatsApp Business
We offer visitors to our website the opportunity to contact us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business Version" of WhatsApp.
If you contact us via WhatsApp on the occasion of a specific transaction (e.g., a placed order), we store and use the mobile phone number used by you on WhatsApp as well as - if provided - your first and last name in accordance with Art. 6 Para. 1 lit. b GDPR for processing and answering your concern. On the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) to assign your request to a specific process.
If you use our WhatsApp contact for general inquiries (e.g., about the range of services, availability, or our Internet presence), we store and use the mobile phone number used by you on WhatsApp as well as - if provided - your first and last name in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in the efficient and timely provision of the requested information.
Your data is always used only to answer your concern via WhatsApp. There is no transfer to third parties.
Please note that WhatsApp Business has access to the address book of the mobile device used by us for this purpose and automatically transmits stored phone numbers in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device whose address book only stores the WhatsApp contact details of those users who have also contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transmission of his WhatsApp phone number from the address books of his chat contacts in accordance with Art. 6 Para. 1 lit. a GDPR when first using the app on his device by accepting the WhatsApp terms of use. The transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is thus excluded.
For information on the purpose and scope of data collection and the further processing and use of the data by WhatsApp, as well as your rights and settings options for protecting your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
In the course of the aforementioned processing, data transfers to servers of Meta Platforms Inc. in the USA may occur. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
4.3 In the context of contacting us (e.g., via contact form or email), personal data is processed – exclusively for the purpose of processing and answering your request and only to the extent necessary. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, then an additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations.
5. Data Processing for Order Processing
5.1 As far as necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the transport company commissioned and to the credit institution commissioned, in accordance with Art. 6 Para. 1 lit. b GDPR.
If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided at the time of ordering (name, address, email address) in order to personally inform you about upcoming updates within the legally prescribed period in a suitable way of communication (e.g., by post or email), in accordance with our legal information obligations under Art. 6 Para. 1 lit. c GDPR. Your contact details are used strictly for the purpose of notifications about updates we owe and are processed by us only to the extent necessary for the respective information.
Furthermore, for the processing of your order, we work with the following service provider(s), who support us entirely or partially in the execution of concluded contracts. Certain personal data is transmitted to these service providers according to the following information.
5.2 Use of Payment Service Providers (Payment Services)
-Paypal
On this website, one or more online payment methods from the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
When you choose a payment method of the provider where you pay in advance, your payment data communicated during the ordering process (including name, address, bank, and card information, currency, and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data in this case is exclusively for the purpose of payment processing with the provider and only to the extent necessary.
When you choose a payment method where we pay in advance, you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, possibly data for an alternative payment method) during the ordering process.
To safeguard our legitimate interest in determining your creditworthiness, these data will be transmitted by us to the provider for the purpose of a credit check, in accordance with Art. 6 Para. 1 lit. f GDPR. The provider checks, based on the personal data you provided and other data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you selected can be granted in view of payment and/or default risks.
The credit report may contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may continue to be entitled to process your personal data, insofar as this is necessary for contractual payment processing.
-Stripe
On this website, one or more online payment methods from the following provider are available: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
When you choose a payment method of the provider where you pay in advance (such as credit card payment), your payment data communicated during the ordering process (including name, address, bank, and card information, currency, and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data in this case is exclusively for the purpose of payment processing with the provider and only to the extent necessary.
When you choose a payment method where the provider pays in advance (such as invoice or installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, possibly data for an alternative payment method) during the ordering process.
To safeguard our legitimate interest in determining the creditworthiness of our customers, these data will be transmitted by us to the provider for the purpose of a credit check, in accordance with Art. 6 Para. 1 lit. f GDPR. The provider checks, based on the personal data you provided and other data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you selected can be granted in view of payment and/or default risks.
The credit report may contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may continue to be entitled to process your personal data, insofar as this is necessary for contractual payment processing.
5.3 We reserve the right to transfer your data to the debt collection service provider Creditreform Kassel Hedwigstraße 16 D-34117 Kassel if our payment claim has not been settled despite previous reminders. In this case, the claim will be collected directly by the debt collection service provider.
The transfer of your data serves the purpose of contract fulfillment according to Art. 6 Para. 1 S. 1 lit. b GDPR as well as the protection of our legitimate interests, which prevail in the context of a balancing of interests, in an effective assertion or enforcement of our payment claim according to Art. 6 Para. 1 S. 1 lit. f GDPR.
6.Web Analysis Services
6.1 Google (Universal) Analytics This website uses Google (Universal) Analytics, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.
By default, when visiting the website, Google (Universal) Analytics sets cookies, which are small text components stored on your device and collect certain information. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits to exclude direct personal reference.
The information is transferred to Google servers and further processed there. Transmissions to Google LLC located in the USA are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activities for us, and to provide other services related to website and internet usage. The IP address transmitted and shortened by your browser as part of Google Analytics will not be merged with other Google data. The data collected in the context of the use of Google (Universal) Analytics is stored for a duration of two months and then deleted.
All the above-described processing, in particular the setting of cookies on the used device, occurs only if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. Without your consent, Google (Universal) Analytics will not be used during your site visit. You can revoke your given consent at any time with future effect. To exercise your right of revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with Google, which ensures the protection of our site visitors' data and prohibits unauthorized transfer to third parties. Further legal information about Google (Universal) Analytics can be found at https://policies.google.com/privacy?hl=de&gl=de
and at https://policies.google.com/technologies/partner-sites.
Demographic Characteristics
Google (Universal) Analytics uses the special function "demographic characteristics" and can create statistics that make statements about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This can identify target groups for marketing activities. However, the collected data cannot be assigned to a specific person and is deleted after being stored for a duration of two months.
Google Signals
As an extension to Google (Universal) Analytics, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and have linked your devices with your Google account, Google can analyze your usage behavior across devices and create database models, including cross-device conversions, subject to your consent to the use of Google Analytics according to Art. 6 Para. 1 lit. a GDPR. We do not receive personal data from Google, only statistics. If you want to stop the cross-device analysis, you can deactivate the "Personalized Advertising" function in the settings of your Google account. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de. More information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de
UserIDs
As an extension to Google (Universal) Analytics, the "UserIDs" function can be used on this website. If you have consented to the use of Google (Universal) Analytics according to Art. 6 Para. 1 lit. a GDPR, have set up an account on this website, and log in on various devices with this account, your activities, including conversions, can be analyzed across devices. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
6.2 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables the analysis of your usage of our website.
By default, when visiting the website, Google Analytics 4 sets cookies, which are small text components stored on your device and collect certain information. This includes your IP address, which is truncated by Google to remove the last digits to prevent direct personal identification.
The information is transmitted to Google's servers and processed there. This may include transfers to Google LLC in the USA. Google uses the collected information on our behalf to evaluate your usage of the website, compile reports on website activities for us, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics and truncated is not merged with other Google data. The data collected by Google Analytics 4 is stored for a period of two months and then deleted. All described processing, especially the setting of cookies on the used device, only occurs if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your site visit. You can revoke your given consent at any time with future effect. To exercise your right of revocation, please deactivate this service using the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google, which ensures the protection of our site visitors' data and prohibits unauthorized transfer to third parties. Further legal information about Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites.
Demographic Characteristics
Google Analytics 4 uses the special function "demographic characteristics" to create statistics that provide information about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This can identify target groups for marketing activities. However, the collected data cannot be assigned to a specific person and is deleted after being stored for a duration of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and linked your devices with your Google account, Google can analyze your usage behavior across devices, subject to your consent to the use of Google Analytics according to Art. 6 Para. 1 lit. a GDPR, and create database models, including cross-device conversions. We receive no personal data from Google, only statistics. If you want to stop the cross-device analysis, you can deactivate the "Personalized Advertising" function in the settings of your Google account. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de. More information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de.
UserIDs
As an extension to Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to the use of Google Analytics 4 according to Art. 6 Para. 1 lit. a GDPR, have set up an account on this website, and log in on various devices with this account, your activities, including conversions, can be analyzed across devices. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
7. Page Functionalities
7.1 Google Maps
This website uses an online mapping service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive (land) maps to visually present geographical information. Using this service, our location is displayed to you, facilitating a possible route.
Already when accessing the subpages where the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also include transmission to the servers of Google LLC in the USA. This occurs regardless of whether Google provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish to be associated with your profile at Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.
The collection, storage, and evaluation are carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on Google's legitimate interest in displaying personalized advertising, market research, and/or demand-oriented design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree with the future transmission of your data to Google in the context of using Google Maps, you also have the option to completely deactivate the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus the map display on this website cannot then be used. As far as legally required, we have obtained your consent to the processing of your data as described above according to Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with future effect. To exercise your revocation, please follow the above-described option for making an objection. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
7.2 - Best Currency Converter
This website utilizes the "Best Currency Converter" service by Grizzly Apps SRL, Str. Muresului Nr. 7 Bloc E23, Scara B, Apartment 15, Brasov, Romania ("Best Currency Converter"). Based on our legitimate interest in displaying prices in your local currency, Best Currency Converter collects your IP address in accordance with Art. 6 Para. 1 lit. f GDPR and analyzes it to adjust the price displays on the website to your location. There is no permanent storage of the IP address. Furthermore, after the initial currency adjustment, Best Currency Converter sets a functional cookie in the browser of your device to save the currency setting for the duration of a session. This cookie is automatically deleted at the end of the session.
7.3 Adobe Fonts (Typekit)
This site uses so-called web fonts provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA for uniform font presentation. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly and establishes a direct connection to the provider's servers. In this process, certain browser information, including your IP address, is transmitted to the provider. The processing of personal data in the course of establishing a connection with the font provider is only carried out if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with future effect by deactivating this service through the "Cookie-Consent-Tool" provided on the website. If your browser does not support web fonts, a default font from your computer will be used. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
7.4 FontAwesome
This site uses so-called web fonts provided by Fonticons, Inc., 710 Blackhorn Dr, Carl Junction, 64834, MO, USA for uniform font presentation. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly and establishes a direct connection to the provider's servers. In this process, certain browser information, including your IP address, is transmitted to the provider. The processing of personal data in the course of establishing a connection with the font provider is only carried out if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with future effect by deactivating this service through the "Cookie-Consent-Tool" provided on the website. If your browser does not support web fonts, a default font from your computer will be used. For data transfers to the USA, the provider relies on the Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
7.5 Fonts.com
This site uses so-called web fonts provided by Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA for uniform font presentation. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly and establishes a direct connection to the provider's servers. In this process, certain browser information, including your IP address, is transmitted to the provider. The processing of personal data in the course of establishing a connection with the font provider is only carried out if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with future effect by deactivating this service through the "Cookie-Consent-Tool" provided on the website. If your browser does not support web fonts, a default font from your computer will be used. For data transfers to the USA, the provider relies on the Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
7.6 Google Web Fonts
This page uses web fonts from the following provider for consistent font display: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. When you visit a page, your browser downloads the necessary web fonts to your browser cache to display text and fonts correctly and establishes a direct connection to the provider's servers. Certain browser information, including your IP address, is transmitted to the provider. Data may also be transmitted to Google LLC, USA. The processing of personal data in connection with the font provider is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service through the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a default font from your computer will be used. For data transfers to the USA, the provider relies on the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
7.7 Monotype Web Fonts
This page uses web fonts from the following provider for consistent font display: Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA. When you visit a page, your browser downloads the necessary web fonts to your browser cache to display text and fonts correctly and establishes a direct connection to the provider's servers. Certain browser information, including your IP address, is transmitted to the provider. The processing of personal data in connection with the font provider is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service through the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a default font from your computer will be used. For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with European data protection standards.
7.8 MyFonts
This page uses web fonts from the following provider for consistent font display: Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA. When you visit a page, your browser downloads the necessary web fonts to your browser cache to display text and fonts correctly and establishes a direct connection to the provider's servers. Certain browser information, including your IP address, is transmitted to the provider. The processing of personal data in connection with the font provider is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service through the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a default font from your computer will be used. For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with European data protection standards.
7.9 Google Customer Reviews (formerly Google Certified Merchant Program)
We collaborate with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program allows us to collect customer reviews from users of our website. After making a purchase on our website, you may be asked if you would like to participate in a Google email survey. If you provide your consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. The rating you provide will then be aggregated with our other reviews and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Additionally, your rating will be used for Google Seller Ratings. In the course of using Google Customer Reviews, personal data may also be transferred to the servers of Google LLC. in the USA. You can revoke your consent at any time by sending a message to the data controller or directly to Google. For data transfers to the USA, the provider relies on the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
8. Tools and Miscellaneous
-DATEV
For the completion of our accounting tasks, we use the cloud-based accounting software service provided by the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany. The provider processes incoming and outgoing invoices, as well as possibly our company's bank transactions, to automatically capture invoices, match them to transactions, and generate financial accounting in a partially automated process. If personal data is processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in efficiently organizing and documenting our business transactions.
9.Rights of the Data Subject
9.1 The applicable data protection law grants you, as the data subject, the following rights with regard to the processing of your personal data by the data controller (rights to information and intervention), with reference to the legal basis mentioned for each right:
- Right to information pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
9.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTEREST PURSUANT TO A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING AT ANY TIME. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE. IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
10.Duration of Personal Data Storage
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and, if applicable, by the respective statutory retention period (e.g., commercial and tax retention periods). If personal data is processed based on explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the data is stored until you revoke your consent. If there are legal retention periods for data processed within the framework of contractual or quasi-contractual obligations based on Art. 6 para. 1 lit. b GDPR, these data are routinely deleted after the retention periods have expired, provided they are no longer necessary for the fulfillment of the contract or the initiation of a contract, and if there is no longer a legitimate interest on our part in further storage. When personal data is processed based on Art. 6 para. 1 lit. f GDPR, it is stored until you exercise your right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims. When personal data is processed for direct marketing purposes based on Art. 6 para. 1 lit. f GDPR, it is stored until you exercise your right to object under Art. 21 para. 2 GDPR. Unless otherwise indicated in specific processing situations within the scope of this declaration, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
