Privacy policy and information on any consents you may have given

As the controller within the meaning of the data protection regulations, we inform you below about the processing of your personal data by us.

Table of contents

I. The concept of personal data and other important terms

II. Name and contact details of the controller; contact details of the data protection officer

III. purposes of processing your personal data; legal bases for processing

IV. Transfer of your personal data to third parties; categories of recipients of your personal data

V. Data security

VI. scope of the processing of your personal data for the individual processing purposes

VII. duration for which your personal data will be stored or criteria for determining this duration

VIII. Your rights

IX. Information on the basis for the provision of your personal data

I. The concept of personal data and other important terms

In simple terms, personal data is any information that relates to you personally as a data subject. Provisions on what the term "personal data" means and what other terms important for the following data protection information mean can be found in Art. 4 of the GDPR (General Data Protection Regulation).

II. Name and contact details of the controller; contact details of the data protection officer

In simple terms, the controller is the person who alone or jointly with others decides on the purposes and means of processing personal data. The name and contact details of the controller (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our legal notice.

III Purposes of processing your personal data; legal bases for processing

We process your personal data as part of our activities for the purposes listed below in accordance with the legal bases stated in each case.

1. to take steps at your request prior to entering into a contract, your personal data will be processed on the basis of your consent pursuant to Article 6(1)(a) GDPR or on the basis of Article 6(1)(b) GDPR

2. in order to safeguard our legitimate interest in responding to inquiries and in carrying out other measures taken in response to an inquiry from you, your personal data will be processed on the basis of the consent you have given in accordance with Article 6(1)(a) GDPR or on the basis of Article 6(1)(f) GDPR

3. for the performance of a contract to which you are a party, your personal data will be processed on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (b) GDPR

4. for the implementation of measures for the purpose of advertising, the processing of your personal data takes place either on the basis of the consent given by you in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (f) GDPR.

5. in order to safeguard our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analyzing the use of our website, your personal data is processed on the basis of Article 6 (1) (f) GDPR.

6. in order to safeguard our legitimate interest in enforcing our rights and defending against claims made against us, your personal data is processed on the basis of Article 6 (1) (f) GDPR.

Our systems are secured by state-of-the-art technical and organizational measures to protect your personal data from access, modification or dissemination by unauthorized persons and from loss and destruction.

Information on the processing of your personal data for the individual processing purposes can be found in the corresponding further information in this privacy policy.

IV. Transfer of your personal data to third parties; categories of recipients of your personal data

Insofar as this is necessary to achieve the purposes of processing your personal data, we transfer your personal data to third parties within the framework of the legal requirements. Detailed information on the transfer of your personal data to third parties for the individual processing purposes can be found in the corresponding further information in this privacy policy. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum required.

V. Data security

The personal data collected and stored by us is treated confidentially and protected against loss, alteration and unauthorized access by third parties by means of suitable technical and organizational precautions. Transmissions of personal data via our website are SSL-encrypted

Protocol: TLS 1.2
Key Exchange: ECDHE_RSA
Key Exchange Group: P-256
Cipher: AES_256_GCM

VI Scope of the processing of your personal data for the individual processing purposes

In the following, we will inform you in detail about the processing of your personal data for the various processing purposes.

Your personal data will be deleted when it is no longer required for the respective processing purpose, unless we are permitted to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

1. use of our website for information purposes

If you visit our website without providing us with information, we only process the personal data that your browser transmits to our server. This is the following data, which is technically necessary to display our website to you and to ensure stability and security:

the page you have called up

Date and time of the request

• Volume of data transferred
• Source or reference from which you accessed the page
• the browser you are using
• the operating system you are using
• your IP address

Your personal data is processed on the basis of Article 6(1)(f) GDPR to protect our legitimate interest in maintaining the proper operation of our website.

Your personal data will be deleted after 6 months, unless it is still required for the assertion of rights or the enforcement of claims due to measures against the proper operation of our website. In this case, the deletion will take place immediately after completion of the corresponding procedure.

2. processing of inquiries

If you contact us with an inquiry or request, we will process the personal data and information/documents you provide. Irrespective of the way in which you send us your inquiry or request, this may include

• Date and time of contact
• name data
• contact details
• Data on the request/concern
• Information/documents transmitted

Your personal data and the information/documents transmitted are processed - depending on the content of your inquiry or request - on the basis of the consent you have given in accordance with Article 6(1)(a) GDPR to respond to your inquiry or on the basis of Article 6(1)(b) GDPR for the implementation of pre-contractual measures or on the basis of Article 6(1)(b) GDPR for the performance of a contract to which you are a party or on the basis of Article 6(1)(c) GDPR for the performance of a contract to which you are a party. 1(b) GDPR for the performance of a contract to which you are a party or on the basis of Article 6(1)(f) GDPR for the purposes of our legitimate interest in responding to enquiries/concerns and taking other measures in connection with the processing of enquiries/concerns.

If we provide a contact form and you contact us via this contact form, by sending your message you give your consent with the following content, about which you will be informed separately in the contact form:
"I consent to the processing of my e-mail address and the other personal data I have provided for the purpose of responding to my message. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out until the revocation remains unaffected in the event of revocation."

You can revoke your consent at any time and without giving reasons with effect for the future. All you need to do is send a corresponding message to the controller, whose contact details can be found in the information on the controller. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation.

Insofar as this is necessary for processing your enquiry/request, we will transfer your personal data to third parties in accordance with the statutory provisions. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum required.

Your personal data will be deleted once your query/request has been resolved, unless we are permitted to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

3. fulfillment of contracts

If you provide us with personal data for the purpose of concluding a contract, we will process the data you provide for the purpose of fulfilling the contract. This is your customer data (e.g. your name and address) and the contract data (e.g. details of the products covered by the contract as well as payment and delivery information).

Your personal data is processed on the basis of Article 6(1)(b) GDPR for the performance of a contract to which you are a party.

When you open a customer account, you consent to your inventory data such as name, address, e-mail address and bank details as well as your usage data (user name, password) being stored. This enables you to place orders with us using your e-mail address or customer number and your personal password. In doing so, we obtain the following consent:

"(...) I would like to create a customer account. Please save my data for this purpose. I can revoke my consent at any time, e.g. by e-mail. "Your data will then be processed on the basis of your consent in accordance with Art. 6 para. 1 a) GDPR."

Insofar as this is necessary for the fulfillment of the contract with you, we will transfer your personal data to third parties within the framework of the legal requirements. This transfer takes place to the service providers involved in the processing of the contract. These are the providers of the processing tools we use. These are also the companies commissioned with transportation. Otherwise, these are the payment service providers commissioned with payment matters.

If you use the payment service provider PayPal to process payment transactions, we expressly point out that the PayPal privacy policy applies to all PayPal transactions: https://www.paypal.com/us/legalhub/privacy-full

In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.

Your personal data will be deleted after expiry of the tax and commercial retention periods of 6 or 10 years, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

4. advertising via newsletter

If you register for our newsletter, we will process the email address you provide - and, if you provide further personal data, this too - in order to send you information about our offers by email. In this respect, only your email address is mandatory. If you voluntarily provide further personal data, we may process this data in order to address you personally in the newsletter.

When you register for our newsletter, you give your consent with the following content: "I agree to be informed by email about interesting offers and therefore consent to the processing of my email address and the other personal data provided by me for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out until the revocation remains unaffected in the event of revocation."

Registration for our newsletter takes place using the so-called double opt-in procedure. This means that after registering, you will first receive an email informing you that you have registered for the newsletter and asking you to confirm your registration. Your confirmation of the registration is necessary to document the required consent to the sending of the newsletter and to be able to recognize registrations to third-party e-mail addresses. In connection with the registrations for the newsletter and the confirmations, the IP address as well as the date and time are logged in order to be able to prove the granting of consent in accordance with the legal requirements if necessary.

Your personal data is processed on the basis of the consent you have given in accordance with Article 6(1)(a) GDPR.

You can revoke your consent at any time and without giving reasons with effect for the future. All you need to do is send a corresponding message to the controller, whose contact details can be found in the information on the controller. The legality of the processing carried out up to the point of revocation remains unaffected in the event of revocation.

If you revoke your consent or unsubscribe from our newsletter, your email address and any other data transmitted will be deleted immediately, unless we are permitted to continue processing the data for another purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

5. advertising by letter post

We may process the personal data you provide on your first name, surname and address for the purpose of sending you information about our offers by post.

In this respect, your personal data is processed on the basis of Article 6(1)(f) GDPR to safeguard our legitimate interest in carrying out advertising measures by letter post.

You can object to the processing of your personal data for the purpose of carrying out advertising measures by post at any time. All you need to do is send a corresponding message to the controller, whose contact details can be found in the information on the controller.

If you object to the processing of your personal data for the purpose of carrying out advertising measures by letter post, the personal data you have provided on your first name, surname and address will be deleted immediately, unless we are permitted to continue processing the data for another purpose within the framework of the legal requirements and in accordance with the information in this privacy policy.

 

 

6 Use of cookies

 

We use so-called cookies on our website. "A "cookie" is a small data file that we transfer to your computer when you browse our site. A cookie can only contain information that we ourselves send to your computer - it cannot be used to read private data. If you accept the cookies on our site, we do not have access to your personal information, but with the help of the cookies we can identify your computer."

Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device even after the end of the browser session, i.e. after you close your browser, and enable us or our partner companies (third-party cookies) to recognize you on your next visit to our website (so-called persistent cookies).

Some of the cookies we use are technically necessary to enable you to use certain functions. This is the case, for example, with regard to the storage of entries in connection with the use of the shopping cart function. In this respect, your personal data is processed on the basis of Article 6(1)(b) GDPR for the performance of pre-contractual measures taken at your request as the data subject or on the basis of Article 6(1)(b) GDPR for the performance of a contract to which you are a party or on the basis of Article 6(1)(f) GDPR to safeguard our legitimate interest in providing the most user-friendly functions possible. If we or our partner companies use cookies for reach measurement or marketing purposes, you can find detailed information on this in the corresponding further information in this privacy policy.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software. If necessary, please refer to the program help for the browser you are using to find out how to make the appropriate setting. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent. By way of example, we refer you to the information on the following common browsers

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Firefox: https://support.mozilla.org/en-US/products/firefox/privacy-and-security/tracking-protection

Opera: https://help.opera.com/en/latest/web-preferences/

Internet Explorer: https://support.microsoft.com/en-gb/topic/description-of-cookies-ad01aa7e-66c9-8ab2-7898-6652c100999d

Safari: https://help.apple.com/safari/mac/8.0/en.lproj/sfri11471.html

 

 

7. use of tracking tools

 

Our website uses a so-called "tracking tool" to collect and store data for marketing and optimization purposes. The data collected is used to create user profiles under a pseudonym. You can object to the collection and storage of data at any time with effect for the future.

We will not use tracking tools without your express consent,

to collect personal data about you unnoticed,

• transmit such data to third-party providers and marketing platforms
• link the data with your personal data (name, address, etc.).

List of partners and their personal data processing policies:
WPJ - https://shop.wpj.cz/zpracovani-osobnich-udaju

Bing - https://privacy.microsoft.com/en-us/privacystatement
Google - https://policies.google.com/
Meta, Facebook - https://www.facebook.com/privacy/policy/

IDEALO - https://www.idealo.de/legal/datenschutz
Geizhals - https://unternehmen.geizhals.at/datenschutzerklaerung/
Guenstiger - https://gruppe.guenstiger.de/Datenschutz.html

Hotjar - https://www.hotjar.com/legal/policies/privacy/
Incomaker - https://www.incomaker.com/cs/privacy

Daktela - https://daktela.com/legal/

DHL - https://www.dhl.com/content/dam/dhl/local/global/core/documents/pdf/MO-core-lela-local-pdp-policy.pdf

Instagram - https://privacycenter.instagram.com/policy

GoPay - https://help.gopay.com/en/knowledge-base/prices-terms-conditions/current-terms-and-conditions/privacy-policy
VISA - https://visa.vfsglobal.com/are/en/gbr/privacy-notice
Mastercard - https://mea.mastercard.com/en-region-mea/vision/privacy.html
PayPal - https://www.paypal.com/myaccount/privacy/privacyhub

Instinct - https://www.instinct.agency/privacy-policy

 

 

8. use of Google Analytics

 

We use Google Analytics, a web analysis service of Google Inc ("Google"), on our website.
In this respect, your personal data is processed on the basis of Article 6(1)(f) GDPR to protect our legitimate interest in analyzing the use of our website.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable us to analyze your use of our website. The information generated by the cookie about your use of our website is usually transmitted to a Google server in the USA and stored there. In this context, we would like to point out that the code "anonymizeIp" has been added to Google Analytics on our website. This ensures an anonymized collection of IP addresses (so-called IP masking), that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand in order to exclude a personal reference. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of our website, to compile reports on website activity and to provide us as the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software. Please refer to the program help for the browser you are using to find out how to make the appropriate setting. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of our website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link. The current link is https://tools.google.com/dlpage/gaoptout

Alternatively, you can prevent the future collection of your data by Google Analytics by setting an opt-out cookie. You can set this cookie by clicking on this link. Please note that the opt-out cookie only works in this browser and for this website. If you delete the cookies in your browser, you must click on the link again.

Further information on the terms of use between us and Google on data protection can be found at https://marketingplatform.google.com/about/analytics/terms/us/ and further information on Google's data protection can be found at https://policies.google.com.
Google is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection law.

 

 

9. use of the remarketing or "similar target groups" function of Google Inc.

 

We use the remarketing or "similar target groups" function of Google Inc ("Google") on the website. This function allows the provider to target visitors to the website with advertising by displaying personalized, interest-based ads to visitors to the provider's website when they visit other websites in the Google Display Network. Google uses cookies to analyze website usage, which forms the basis for the creation of interest-based advertisements. For this purpose, Google stores a small file with a sequence of numbers in the browsers of website visitors. This number is used to record visits to the website and anonymized data on the use of the website. No personal data of visitors to the website is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously accessed product and information areas. You can permanently deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin

Alternatively, you can deactivate the use of cookies by third-party providers by visiting the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/choices/ and implementing the further information on opt-out mentioned there. Further information on Google Remarketing and Google's privacy policy can be found at: http://www.google.com/privacy/ads/

 

 

10. use of Google Adwords conversion tracking

 

We use the online advertising program "Google AdWords" and conversion tracking as part of Google AdWords. Google Conversion Tracking is an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). When you click on an advertisement placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you have clicked on the ad and have been redirected to this page. Each Google AdWords customer receives a different cookie. It is therefore not possible for cookies to be tracked via the websites of AdWords customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. This tells customers the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to participate in tracking, you can object to this use by preventing the installation of cookies by setting your browser software accordingly (deactivation option). You will then not be included in the conversion tracking statistics. Further information and Google's privacy policy can be found at: http://www.google.de/policies/privacy/

 

 

11. integration of the Trusted Shops Trustbadge

 

The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and any collected reviews as well as to offer Trusted Shops products to buyers after an order.

This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in the optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. This access data is not analyzed and is automatically overwritten no later than seven days after the end of your visit to the site.

Further personal data is only transferred to Trusted Shops if you have consented to this, have decided to use Trusted Shops products after completing an order or have already registered to use them. In this case, the contractual agreement concluded between you and Trusted Shops applies.

 

 

12 EHI seal

 

We use the "EHI Geprüfter Online-Shop" seal on our website, a widget of the EHI Retail Institute GmbH, Spichernstraße 55, 50672 Cologne ("EHI"). When you visit our website, dynamic content (current store rating, certificate, etc.) is loaded into the widget from EHI servers. Your IP address, the previously visited website, the date and time of access, the amount of data transferred, the browser type and version, the operating system you are using and the requesting provider (referrer data) are transmitted to the EHI servers. The processing is based on our overriding legitimate interest in optimizing our offer in accordance with Art. 6 para. 1 f) GDPR.

 

 

13. partners idealo

 

The logo of our partner idealo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin) is integrated on our website. When you visit our website, the browser used on your device automatically sends information to the idealo server. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without any action on your part and stored until it is automatically deleted

IP address of the requesting computer,

• Date and time of access,
• Name and URL of the accessed file,
• the website from which access was made (referrer URL)
• browser used and, if applicable, the operating system of your computer and the name of your access provider.
   

Temporary storage of the IP address by the system is necessary to enable delivery of the website. For this purpose, the IP address must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of the information technology systems. This data is not stored together with other personal data. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

 

14 Use of the Facebook Custom Audiences Pixel

 

We use "Custom Audiences Pixel" from Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") to present interest-based advertisements to visitors to our website during their visit to Facebook. We have implemented a Facebook pixel on our website, which establishes a direct connection to the Facebook servers when you visit our website. This tells the Facebook server that you have visited our website and Facebook assigns this information to your personal Facebook user account. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). For more information on the collection and use of data by Facebook and your rights and options for protecting your privacy in this regard, please refer to Facebook's privacy policy at https://www.facebook.com/about/privacy/.

If you wish to object to the described connection with Facebook, you can do so by clicking on this link : Deactivate https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

 

 

15 Hotjar/ New Relic

 

Hotjar

We use the Hotjar software(http://www.hotjar.com, Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta) to improve the user experience on our website.

Hotjar enables us to measure and evaluate user behavior (mouse movements, clicks, scroll height, etc.) on our website. For this purpose, Hotjar sets cookies on users' end devices and can store user data such as browser information, operating system, JavaScript activation, Java on/off, time spent on the page, etc.

You can find out more about data processing by Hotjar here.

Without your express consent, we will not use the tracking tools to collect personal data about you unnoticed:
- collect personal data about you
- transmit such data to third-party providers and marketing platforms

 

New Relic

On this website we use a plugin of the web analysis service from New Relic. It enables us to record statistical evaluations of the speed of the website. This service is operated by New Relic Inc, 188 Spear Street, Suite 1200 San Francisco, CA 94105, USA ("New Relic").

When a user accesses a website of this offer that contains such a plugin, their browser establishes a direct connection with the New Relic servers. The provider therefore has no influence on the scope of the data that New Relic collects with the help of this plugin and therefore informs users according to its level of knowledge:

By integrating the plugin, New Relic receives the information that a user has accessed the corresponding page of the offer. If the user is logged in to New Relic, New Relic can assign the visit to the user's New Relic account. If a user is not a member of New Relic, it is still possible for New Relic to find out and store their IP address.

The purpose and scope of the data collection and the further processing and use of the data by New Relic as well as the relevant rights and setting options to protect the privacy of users can be found in New Relic's data protection information: https://newrelic.com/privacy.

If a user is a member of New Relic and does not want New Relic to collect data about him via this offer and link it to his membership data stored at New Relic, he must log out of New Relic before visiting the website.

 

 

16. enforcement of our rights and defense against claims directed against us

 

We may process your personal data to protect our legitimate interest in enforcing our rights and defending against claims made against us.

In this case, your personal data will be processed on the basis of Article 6(1)(f) GDPR.

If this is necessary to safeguard our legitimate interests, we will transfer your personal data to third parties in accordance with the legal requirements. This transfer takes place to the providers of debt collection services involved or our lawyers.

In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.

Your personal data will be deleted after completion of the procedure, but at the earliest after expiry of the tax and commercial retention periods of 6 or 10 years, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

 

 

VII Duration for which your personal data is stored or criteria for determining this duration

 

Your personal data will be deleted when it is no longer required for the respective processing purpose, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this privacy policy. Information on the duration for which your personal data is stored or the criteria for determining this duration can be found in the information on the processing of your personal data for the individual processing purposes in this privacy policy.

 

 

VIII. Your rights

 

1. overview

Upon request, we will provide you with information free of charge about the data stored about you or your pseudonym. If you wish to do so, please send a message to [email address]. We are also obliged to correct, block or delete the data stored about you upon request."

In order to ensure fair and transparent processing of personal data, you as the data subject have the following rights in accordance with data protection legislation

the right of access under Article 15 GDPR,

• the right to rectification in accordance with Article 16 GDPR,
• the right to erasure in accordance with Article 17 GDPR,
• the right to restriction of processing under Article 18 GDPR,
• the right to data portability pursuant to Article 20 GDPR
• the right to withdraw consent at any time in accordance with Article 7(3) GDPR
• the right to object to processing in accordance with Article 21 GDPR, about which we will inform you separately below
• and the right to lodge a complaint with the supervisory authority in accordance with Art. 77 GDPR, about which we will inform you separately below.

 

2. your right to object to the processing

The processing of personal data is permitted if the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child, Art. 6 (1) (f) GDPR.

As the data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR, including profiling based on those provisions.

If you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as the data subject or for the establishment, exercise or defense of legal claims.

If we process your personal data for direct marketing purposes, you as the data subject have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you, as the data subject, object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

 

3. your right to lodge a complaint with the supervisory authority

As a data subject, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the provisions of the GDPR.

 

 

IX. Information on the basis for the provision of your personal data

 

If you wish to conclude a contract with us or contact us with an inquiry, the provision of your personal data is necessary for the conclusion of a contract or the processing of your inquiry. You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we would not be able to conclude a contract with you or process your request.