Privacy and Protection of Your Data
1) Introduction and Contact Details of the Controller
1.1
We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our website. Personal data is all data that can be used to identify you personally.
1.2
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Cyberrights, LTD 128 City Road, London, United Kingdom, EC1V 2NX
Email: [email protected]
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1
When you use our website purely for informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser sends to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website you visit on our domain
- Date and time of the access
- Amount of data sent in bytes
- Source/referrer from which you came to the page
- Browser used
- Operating system used
- IP address used (where applicable, in anonymized form)
Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is neither passed on to third parties nor used in any other way. However, we reserve the right to subsequently check the server log files if there are specific indications of unlawful use.
2.2
For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption.
You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.
3) Hosting & Content Delivery Network
Cloudflare
We use a content delivery network from the following provider:
Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA.
This service enables us to deliver large media files, such as graphics, page content, or scripts, more quickly via a network of regionally distributed servers.
Processing takes place in order to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR. We have concluded a data processing agreement (DPA) with the provider, which ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU–US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European data protection level.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for a longer period of time and allow us to save your page settings (so-called “persistent cookies”).
You can find the storage duration of persistent cookies in the overview of your browser’s cookie settings.
If personal data is also processed by individual cookies used by us, processing is carried out either in accordance with Art. 6(1)(b) GDPR for the performance of a contract, in accordance with Art. 6(1)(a) GDPR in the event of consent having been given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the visit to our pages.
You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, accept cookies for specific cases, or exclude them in general.
Please note that if you do not accept cookies, the functionality of our website may be restricted.
5) Contact
5.1 Tidio
This website uses a live chat system from the following provider:
Tidio Poland Sp. z o.o., Wojska Polskiego 81, 70-481 Szczecin, Poland.
The processing of personal data transmitted via the chat is carried out either in accordance with Art. 6(1)(b) GDPR, because it is necessary for the initiation or performance of a contract, or in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in the effective support of our website visitors.
The data you provide in this way will be deleted, subject to legal retention periods, once the matter concerned has been conclusively resolved.
In addition, further information may be collected and evaluated for the purpose of creating pseudonymized usage profiles using cookies; however, this information does not serve to identify you personally and is not merged with any other data sets. Where this information has a personal reference, processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization purposes.
The setting of cookies can be prevented by appropriate browser settings. However, this may result in limitations in the functionality of our website.
You may object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with effect for the future.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
5.2 TidioChat (Tidio Ltd.)
On this website, anonymized data is collected and stored using technologies from the following provider for the purpose of web analysis and operation of the live chat system to respond to live support inquiries:
Tidio Ltd., 220C Blythe Road, W14 0HH, London, United Kingdom (www.tidiochat.com).
From this anonymized data, usage profiles can be created under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the site visitor’s internet browser. The cookies enable the recognition of the internet browser.
The data collected using TidioChat technologies will not be used to personally identify the visitor to this website without the separate consent of the data subject and will not be merged with personal data relating to the bearer of the pseudonym.
To prevent the storage of TidioChat cookies, you can configure your internet browser so that no cookies are stored on your computer in the future or cookies that have already been stored are deleted. However, deactivating all cookies may mean that some functions on our websites can no longer be executed.
You may object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with effect for the future by sending your informal objection by email to the email address stated in the legal notice (Impressum).
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
5.3 General Contact (Contact Form / Email)
When you contact us (e.g. via contact form or email), personal data is collected. Which data is collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry and for the associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once your inquiry has been conclusively dealt with. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and no statutory retention obligations prevent deletion.
6) Use of Customer Data for Direct Advertising
Klaviyo
The sending of our email newsletters is carried out via the following provider:
Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA.
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provide when registering for the newsletter to this provider in accordance with Art. 6(1)(f) GDPR so that they can send the newsletter on our behalf.
Subject to your explicit consent in accordance with Art. 6(1)(a) GDPR, the provider also carries out statistical performance analysis of newsletter campaigns using web beacons and tracking pixels in the emails sent, which can measure open rates and specific interactions with newsletter content. Device information (e.g. time of access, IP address, browser type, operating system) is also collected and evaluated, but not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU–US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European data protection level.
7) Web Analytics Services
7.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.
Google (Universal) Analytics is used on this website without the use of cookies, which means that the service does not place cookies on your device at any time.
Instead, your browser’s local storage is used to store an individual ID assigned by Google (Universal) Analytics, which enables analysis of your website usage. Certain user information is processed via this ID. This includes your IP address, which is, however, shortened by Google by the last digits in order to exclude direct personal reference.
The information is transmitted to Google’s servers and processed there. Transfers to Google LLC, based in the USA, are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted by your browser in the context of Google Analytics and shortened as described will not be merged with other Google data. The data collected in the context of the use of Google (Universal) Analytics is stored for a period of two months and then deleted.
All processing described above, including the storage of information in the form of the ID on your device, only takes place if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit to our website. You can revoke your consent at any time with effect for the future.
To exercise your right of withdrawal, you can download and install the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
Alternatively, within browsers on mobile devices, you can revoke your consent by clicking the following link to set an opt-out cookie that will prevent future collection by Google Analytics on this website (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click this link again):
Deactivate Google Analytics
We have concluded a data processing agreement with Google, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further legal information on Google (Universal) Analytics can be found at:
https://business.safety.google/intl/de/privacy/
https://policies.google.com/privacy?hl=de&gl=de
https://policies.google.com/technologies/partner-sites
Demographic Features
Google (Universal) Analytics uses the special “demographic features” function to create statistics containing information about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This makes it possible to identify target groups for marketing activities. The collected data cannot be assigned to a specific person and is deleted after a storage period of two months.
Google Signals
As an extension of Google (Universal) Analytics, Google Signals can be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices with your Google account, Google can, subject to your consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics.
If you wish to stop cross-device analysis, you can deactivate “Personalized advertising” in your Google account settings. Follow the instructions here:
https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals can be found here:
https://support.google.com/analytics/answer/7532985?hl=de
User IDs
As an extension of Google (Universal) Analytics, the “User-ID” function may be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6(1)(a) GDPR, created an account on this website, and log in to this account on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider is certified under the EU–US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European data protection level.
7.2 Google Analytics 4
This website uses Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.
By default, when you visit the website, Google Analytics 4 sets cookies, which are stored as small text modules on your device and collect certain information. This includes your IP address, which is, however, shortened by Google by the last digits to exclude a direct personal reference.
The information is transmitted to Google’s servers and processed there. Transfers to Google LLC, based in the USA, are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted by your browser in the context of Google Analytics and shortened as described will not be merged with other Google data. The data collected in the context of the use of Google Analytics 4 is stored for a period of two months and then deleted.
All processing described above, in particular the setting of cookies on your device, takes place only if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. Without your consent, Google Analytics 4 will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with Google, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further legal information on Google Analytics 4 can be found at:
https://business.safety.google/intl/en/privacy/
https://policies.google.com/privacy?hl=en&gl=en
https://policies.google.com/technologies/partner-sites
Demographic Features
Google Analytics 4 uses the “demographic features” function to create statistics containing information about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This makes it possible to identify target groups for marketing activities. The collected data cannot be assigned to a specific person and is deleted after a storage period of two months.
Google Signals
As an extension of Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices with your Google account, Google can, subject to your consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics.
If you wish to stop cross-device analysis, you can deactivate “Personalized advertising” in your Google account settings. Follow the instructions here:
https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en
Further information on Google Signals can be found here:
https://support.google.com/analytics/answer/7532985?hl=en
User IDs
As an extension of Google Analytics 4, the “User-ID” function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6(1)(a) GDPR, created an account on this website, and log in to this account on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider is certified under the EU–US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European data protection level.
7.3 Google Tag Manager
This website uses “Google Tag Manager”, a service provided by:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
Google Tag Manager provides a technical framework for bundling various web applications, including tracking and analytics services, and for calibrating, controlling, and linking them to conditions via a unified user interface. Google Tag Manager itself does not store or read information on user devices. Nor does the service perform its own data analyses. However, when Google Tag Manager is used, your IP address is transmitted to Google when a page is loaded and may be stored there. Data may also be transferred to servers of Google LLC in the USA.
This processing is only carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. Without this consent, Google Tag Manager will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU–US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European data protection level.
Further legal information on Google Tag Manager can be found at:
https://business.safety.google/intl/de/privacy/
https://policies.google.com/privacy?hl=de&gl=en
7.4 Hotjar
This website uses a web analytics service from the following provider:
Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta.
Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as IP address and browser information, to evaluate it for statistical analyses of usage behavior on our website and to create pseudonymized usage profiles. This allows, among other things, the evaluation of movement patterns (so-called heatmaps), which show the duration of visits to pages as well as interactions with page content (e.g. text entries, scrolling, clicks, and mouse-overs). Pseudonymization generally excludes direct personal reference. There is no merging with clear data collected in other ways about your person.
All processing described above, in particular the reading or storage of information on the device used, is only carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
8) Retargeting / Remarketing and Conversion Tracking
Meta Pixel
Within our online offering, we use the “Meta Pixel” service from the following provider:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).
When a user clicks on an advertisement placed by us on Facebook and/or Instagram, the URL of our linked page is extended by a parameter using “Meta Pixel”. This URL parameter is then entered into the user’s browser via a cookie that our linked page sets.
This enables Meta, on the one hand, to determine the visitors of our online offering as a target group for the display of advertisements (so-called “Ads”). Accordingly, we use this service to display the Facebook and/or Instagram ads placed by us only to those users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interest in certain topics or products, determined based on visited websites) that we transmit to Meta (so-called “Custom Audiences”).
On the other hand, with “Meta Pixel” it is possible to track whether users are redirected to our website after clicking on an advertisement and which actions they carry out there (so-called “conversion tracking”).
The data collected is anonymous to us and does not allow us to draw any conclusions about the identity of the users. However, the data is stored and processed by Meta, making a connection to the respective user profile possible, and Meta can use the data for its own advertising purposes.
All processing described above, in particular the setting of cookies to read information on the device used, only takes place if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
The information generated by Meta is usually transmitted to a Meta server and stored there; in this context, a transfer to servers of Meta Platforms Inc. in the USA may also occur.
For data transfers to the USA, the provider is certified under the EU–US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European data protection level.
9) Website Features
9.1 ProvenExpert Widget
To display external customer reviews and/or an externally awarded quality seal, graphic elements from the following provider are integrated on our website:
Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin, Germany.
When you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider’s servers in order to load the elements correctly. Certain browser information, including your IP address, is transmitted to the provider in the process.
If personal data is processed in this context, this is done in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the optimal marketing of our offering and the appealing design of our online presence.
9.2 Trusted Shops Trustbadge
To display external customer reviews and/or an externally awarded quality seal, graphic elements from the following provider are integrated on our website:
Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany.
When you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider’s servers in order to load the elements correctly. Certain browser information, including your IP address, is transmitted to the provider in the process.
If personal data is processed in this context, this is done in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the optimal marketing of our offering and the appealing design of our online presence.
In the case of an online order placed with us, further processing may occur.
Depending on your explicit consent in accordance with Art. 6(1)(a) GDPR, after the completion of an order your order information (order total, order number, purchased product if applicable) and your email address may be transmitted in encrypted form to the provider via the Trustbadge in order to check whether there is an existing registration for the provider’s services (in particular “Buyer Protection”) and, if necessary, to enable new registration.
If an existing registration is found or if you register for the provider’s services (in particular Buyer Protection), your order information (order total, order number, purchased product) and your email address will be transmitted to the provider based on the contractual relationship with the provider in accordance with Art. 6(1)(b) GDPR and processed there in order to provide the services (especially Buyer Protection).
We are jointly responsible with the provider for the processing described above in accordance with Art. 26 GDPR. The agreement on joint responsibility can be viewed here:
https://help.etrusted.com/hc/de/articles/4402587369105-Vertrag-%C3%BCber-die-gemeinsame-Verantwortlichkeit-nach-DSGVO
9.3 Google Maps
This website uses an online map service from the following provider:
Google Maps (API) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Maps is a web service for displaying interactive maps to visually present geographic information. Using this service enables us to show you our location and facilitate your travel planning.
As soon as you access a page on which a Google Maps map is integrated, information about your use of our website (e.g. your IP address) is transmitted to Google servers and stored there. This may also involve transmission to servers of Google LLC in the USA. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want this to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.
Collection, storage, and evaluation are carried out in accordance with Art. 6(1)(f) GDPR on the basis of Google’s legitimate interest in displaying personalized advertising, market research, and/or needs-based design of Google websites. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.
If you do not agree to the future transmission of your data to Google within the scope of using Google Maps, you also have the option to deactivate the Google Maps web service completely by turning off JavaScript in your browser. Google Maps and therefore the map display on this website can then no longer be used.
Where legally required, we have obtained your consent for the above-described processing of your data in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the objection procedure described above.
For data transfers to the USA, the provider is certified under the EU–US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European data protection level.
Further information on Google’s data protection can be found here:
https://business.safety.google/intl/de/privacy/
10) Tools and Miscellaneous
Cookie Consent Tool
This website uses a “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users in the form of an interactive user interface when they access the site, where they can give consent for certain cookies and/or cookie-based applications by ticking boxes. All cookies/services that require consent are only loaded if the respective user has given consent by ticking the corresponding box. This ensures that such cookies are only set on the user’s device if consent has been given.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and therefore in a legally compliant design of our online presence.
Another legal basis for processing is Art. 6(1)(c) GDPR. As controllers, we are legally obligated to make the use of technically unnecessary cookies dependent on the respective user’s consent.
Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further information about the operator and the settings of the cookie consent tool can be found directly in the corresponding user interface on our website.
11) Data Subject Rights
11.1
Applicable data protection law grants you the following rights with respect to the controller regarding the processing of your personal data (data subject rights), whereby the requirements for exercising these rights can be found in the cited legal basis:
- Right of access in accordance with Art. 15 GDPR;
- Right to rectification in accordance with Art. 16 GDPR;
- Right to erasure in accordance with Art. 17 GDPR;
- Right to restriction of processing in accordance with Art. 18 GDPR;
- Right to notification in accordance with Art. 19 GDPR;
- Right to data portability in accordance with Art. 20 GDPR;
- Right to withdraw consent granted in accordance with Art. 7(3) GDPR;
- Right to lodge a complaint in accordance with Art. 77 GDPR.
11.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING.
YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
12) Duration of Storage of Personal Data
The duration of storage of personal data is determined based on the respective legal basis, the processing purpose, and—if applicable—additionally based on statutory retention periods (e.g. commercial and tax law retention periods).
When personal data is processed on the basis of explicit consent in accordance with Art. 6(1)(a) GDPR, this data is stored until you revoke your consent.
If there are statutory retention periods for data processed within the scope of legal or quasi-legal obligations on the basis of Art. 6(1)(b) GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer required for contract fulfillment or contract initiation and/or there is no legitimate interest on our part in further storage.
When personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object in accordance with Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
When personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object in accordance with Art. 21(2) GDPR.
Unless otherwise indicated in the other information in this declaration regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
