Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1
We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how your personal data is handled when using our website. Personal data refers to all data that can be used to personally identify you.

1.2
The controller responsible for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Immocado UG (haftungsbeschränkt), Friedrichstraße 171, 10117 Berlin, Germany, Tel.: +49 561 473 952 16, Fax: +49 561 473 952 17, Email: [email protected]. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3
For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the padlock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website

When you use our website purely for informational purposes, meaning you do not register or otherwise provide us with information, we only collect the data your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data that is technically necessary for us to display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (possibly in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are specific indications of unlawful use.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after your browser session ends, i.e., when you close your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (so-called persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values to a varying extent. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.

In some cases, cookies are used to simplify the order process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit). Where personal data is also processed by individual cookies implemented by us, processing is carried out either in accordance with Art. 6(1)(b) GDPR for the performance of a contract or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interest in the best possible functionality of the website and a user-friendly and effective design of the site visit.

We may work with advertising partners who help us make our website more interesting for you. For this purpose, cookies from partner companies (third-party cookies) may also be stored on your hard drive when you visit our website. If we cooperate with the aforementioned advertising partners, you will be individually and separately informed about the use of such cookies and the extent of the information collected within the following sections.

Please note that you can configure your browser to notify you when cookies are set and to decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find these for the respective browsers at the following links:

Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Chrome: https://support.google.com/chrome/answer/95647

Safari: https://support.apple.com/en-us/guide/safari/sfri11471/mac

Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

Cookies and Access Count Notifications

We use “session cookies” from VG Wort, Munich, to measure access to texts in order to determine the probability of their being copied. Session cookies are small pieces of information that a provider stores in the working memory of the visitor’s computer. A session cookie contains a randomly generated unique identification number, called a session ID. In addition, a cookie contains information about its origin and the storage period. Session cookies cannot store any other data. These measurements are carried out by Kantar Germany GmbH using the Scalable Central Measurement Method (SZM). They help determine the likelihood of texts being copied, which is used to remunerate authors and publishers under statutory claims. We do not collect any personal data via cookies.

Many of our pages are equipped with JavaScript calls that report access to VG Wort (Verwertungsgesellschaft Wort). This enables our authors to participate in VG Wort’s payouts, which provide legal remuneration for the use of copyrighted works in accordance with § 53 of the German Copyright Act (UrhG).

It is possible to use our services without cookies. Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or configure your browser to notify you whenever cookies are sent.

Privacy Policy for the Use of the Scalable Central Measurement Method

Our website and mobile web offering use the “Scalable Central Measurement Method” (SZM) provided by Kantar Germany GmbH to collect statistical metrics for determining the probability of text copies.

Anonymous metrics are collected during this process. Access count measurement uses either a session cookie or a signature created from various automatically transmitted information from your browser to recognize computer systems. IP addresses are only processed in anonymized form.

This method was developed with data protection in mind. Its sole purpose is to determine the likelihood that individual texts are copied.

At no time are individual users identified. Your identity remains protected at all times. You will not receive any advertising through this system.

4) Contacting Us

When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected through a contact form is indicated in the respective form. This data is stored and used solely for the purpose of responding to your inquiry and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted once your request has been conclusively dealt with, provided that there are no statutory retention obligations that require otherwise.

5) Data Processing When Opening a Customer Account and for Contract Execution

In accordance with Art. 6(1)(b) GDPR, personal data will also be collected and processed if you provide it to us for the purpose of executing a contract or when opening a customer account. The specific data collected is indicated in the respective input forms. You may delete your customer account at any time by sending a message to the controller at the address mentioned above. We store and use the data you provide for contract processing. Once the contract has been fully executed or your customer account has been deleted, your data will be blocked with regard to retention periods under tax and commercial law and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to use the data beyond this in a manner permitted by law.

6) Use of Your Data for Direct Marketing

6.1 Newsletter Subscription

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required information for sending the newsletter is your email address. Providing additional data is optional and is used to address you personally. We use the so-called double opt-in procedure for sending newsletters. This means we will only send you a newsletter by email if you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm, by clicking a corresponding link, that you wish to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When registering for the newsletter, we store your IP address as provided by your Internet Service Provider (ISP) as well as the date and time of registration to be able to trace any potential misuse of your email address at a later date. The data collected during the newsletter registration is used exclusively for promotional purposes through the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned above. After unsubscribing, your email address will be immediately removed from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use your data in a way permitted by law, as explained in this policy.

6.2 Sending Email Newsletters to Existing Customers

If you have provided us with your email address in connection with the purchase of goods or services, we reserve the right to regularly send you offers for similar goods or services from our product range by email. According to § 7(3) of the German Unfair Competition Act (UWG), we do not need to obtain separate consent from you for this purpose. The data processing in this context is based solely on our legitimate interest in personalized direct advertising pursuant to Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You have the right to object to the use of your email address for advertising purposes at any time with effect for the future by notifying the controller named at the beginning. For this, you only incur transmission costs according to the base rates. After receiving your objection, the use of your email address for advertising purposes will be stopped immediately.

7) Data Processing for Order Fulfillment

7.1
To fulfill your order, we work with the following service providers who support us in whole or in part in executing concluded contracts. In accordance with the following information, certain personal data is transferred to these service providers.

The personal data collected by us will be passed on to the transport company commissioned with the delivery, as necessary for the delivery of the goods. Your payment data will be passed on to the credit institution commissioned with payment processing, insofar as this is required to process the payment. If we use payment service providers, you will be explicitly informed of this below. The legal basis for the transfer of data is Art. 6(1)(b) GDPR.

7.2
Use of Payment Service Providers

Klarna

If you choose a Klarna payment method, payment is processed by Klarna Bank AB (publ) [https://www.klarna.com], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”). To enable the payment process, your personal data (first and last name, street, house number, postal code, city, gender, email address, phone number, and IP address), as well as data related to the order (e.g. invoice amount, items, delivery method), will be transmitted to Klarna for the purpose of identity and credit checks, provided you have given your explicit consent for this in accordance with Art. 6(1)(a) GDPR during the order process. You can view which credit agencies Klarna may forward your data to here:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). If score values are included in the credit report result, they are based on a scientifically recognized mathematical-statistical method. Address data, among other things, is included in the calculation of the score values. Klarna uses the information obtained on the statistical probability of a payment default to make a balanced decision about the establishment, execution, or termination of the contractual relationship.

You may withdraw your consent at any time by notifying the data controller or Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.

Your personal information is handled in accordance with applicable data protection regulations and in accordance with Klarna’s privacy policies for data subjects based in Germany:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for those based in Austria:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy

PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or — if offered — “purchase on account” or “installment payment” via PayPal, we share your payment data with PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of the payment process. This transfer is carried out pursuant to Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal, or — if offered — “purchase on account” or “installment payment” via PayPal, PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be forwarded to credit agencies in accordance with Art. 6(1)(f) GDPR, based on PayPal’s legitimate interest in assessing your creditworthiness. The result of the credit check with respect to the statistical probability of default is used by PayPal to decide whether to offer the respective payment method. The credit report may include probability values (so-called score values). If score values are part of the result, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, address data may be included in the calculation of the score values. Further information on PayPal’s data protection practices, including the credit agencies used, can be found in PayPal’s privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by contacting PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

SOFORT

If you choose the “SOFORT” payment method, payment is processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “SOFORT”), to whom we transmit the information you provided during the ordering process along with information about your order in accordance with Art. 6(1)(b) GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is transferred exclusively for the purpose of payment processing with SOFORT and only to the extent necessary for this. More information on SOFORT’s privacy policy can be found at:
https://www.klarna.com/sofort/datenschutz

Stripe

If you choose a payment method provided by the payment service provider Stripe, payment processing is carried out via Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. We transmit the information you provided during the order process along with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number) to Stripe in accordance with Art. 6(1)(b) GDPR. Your data is transferred solely for the purpose of payment processing with Stripe and only to the extent necessary. More information on Stripe’s privacy practices can be found at:
https://stripe.com/de/privacy#translation

8) Use of Rating and Seal Graphics

Trusted Shops Trustbadge

To display our Trusted Shops trustmark and offer Trusted Shops membership to buyers after placing an order, the Trusted Shops Trustbadge is integrated into this website.

This serves to protect our predominant legitimate interests in the optimal marketing of our offering in accordance with Art. 6(1)(f) GDPR. The Trustbadge and related services are provided by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.

When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which contains your IP address, date and time of access, data volume transferred, and the requesting provider (access data), and documents the retrieval. These access data are not evaluated and are automatically overwritten no later than seven days after your visit ends.

Further personal data will only be transferred to Trusted Shops if, after completing an order, you decide to use Trusted Shops products or have already registered for their use. In that case, the contractual agreement between you and Trusted Shops applies.

9) Use of Social Media: Videos

Use of YouTube Videos

This website uses the YouTube embedding function to display and play videos from the provider “YouTube,” which is part of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

In doing so, the extended data protection mode is used, which, according to YouTube, ensures that no user information is stored unless the video(s) are played. When you start playback of embedded YouTube videos, YouTube sets cookies to collect information about user behavior. According to YouTube, these cookies are used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive behavior. If you are logged into Google, your data will be directly associated with your account when you click on a video. If you do not want this association with your YouTube profile, you must log out before activating the button. Google stores your data (even for users not logged in) as user profiles and evaluates them. This evaluation is carried out in particular according to Art. 6(1)(f) GDPR based on Google’s legitimate interests in displaying personalized advertising, market research, and/or customizing its website to meet user needs. You have the right to object to the creation of these user profiles; to do so, you must contact YouTube directly.

As part of using YouTube, personal data may also be transmitted to Google LLC servers in the USA.

Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations beyond our control.

In the event that personal data is transferred to Google LLC, located in the USA, Google LLC is certified under the EU-U.S. Privacy Shield, which ensures compliance with the level of data protection applicable in the EU. You can view a current certificate here:
https://www.privacyshield.gov/list

Further information about data protection at YouTube can be found in the provider’s privacy policy:
https://www.google.de/intl/en/policies/privacy

10) Web Analytics Services

Google (Universal) Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics uses so-called cookies—text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transmitted to and stored on a Google server, which may also involve transmission to Google LLC servers in the USA.

This website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymization of the IP address by truncation and excludes direct personal reference. As a result, your IP address will be shortened by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area before any transmission. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. In these exceptional cases, processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website usage and internet usage to us. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by adjusting your browser settings accordingly. However, please note that in this case, you may not be able to use all functions of this website to their full extent. Additionally, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link:

https://tools.google.com/dlpage/gaoptout?hl=en

Alternatively to the browser plugin or within browsers on mobile devices, please click the following link to set an opt-out cookie that will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you will need to click the link again):
Deactivate Google Analytics

In the event that personal data is transferred to Google LLC, based in the USA, Google LLC is certified under the EU-U.S. Privacy Shield Framework, which ensures compliance with the data protection standards applicable in the EU. A current certificate can be viewed here:
https://www.privacyshield.gov/list

This website also uses Google Analytics for a cross-device analysis of visitor traffic conducted via a user ID. When a user accesses a page for the first time, they are assigned a unique, permanent, and anonymized ID, which is set across devices. This allows interaction data from different devices and sessions to be linked to a single user. The user ID does not contain any personal data and does not transmit such data to Google.

You can object to the collection and storage of data via the user ID at any time with effect for the future. To do so, you must deactivate Google Analytics on all systems you use, for example, in a different browser or on a mobile device.

You can deactivate it using the Google browser plugin (https://tools.google.com/dlpage/gaoptout?hl=en).
Alternatively, to the browser plugin or within browsers on mobile devices, please click the following link to set an opt-out cookie that will prevent data collection by Google Analytics on this website in the future (this opt-out cookie works only in this browser and only for this domain; if you delete your cookies in this browser, you must click this link again):
Deactivate Google Analytics

Further information on Google (Universal) Analytics can be found here:
https://support.google.com/analytics/answer/2838718?hl=en&ref_topic=6010376

11) Tools and Miscellaneous

11.1 Google reCAPTCHA

This website also uses the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is primarily used to determine whether input is made by a natural person or abusively through automated, machine processing. The service includes sending the IP address and, if necessary, other data required by Google for the reCAPTCHA service to Google. This is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in determining individual responsibility on the Internet and preventing abuse and spam. In the context of using Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC in the USA.

Further information on Google reCAPTCHA and Google’s privacy policy can be found at:
https://www.google.com/intl/en/policies/privacy/

11.2 Google Maps

We use Google Maps (API) on our website, provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service used for displaying interactive maps to visually present geographic information. By using this service, our location is displayed and directions to our premises may be made easier.

When you access subpages in which Google Maps is integrated, information about your use of our website (such as your IP address) is transmitted to Google’s servers and stored there. This may also result in a transmission to the servers of Google LLC in the USA. This happens regardless of whether Google provides a user account that you are logged into or whether no user account exists. If you are logged into Google, your data is directly associated with your account. If you do not wish to be associated with your Google profile, you must log out before activating the map. Google stores your data (even for users not logged in) as usage profiles and evaluates them. The collection, storage, and evaluation are based on Art. 6(1)(f) GDPR, on the basis of Google’s legitimate interests in displaying personalized advertising, market research, and/or customizing its services to suit user needs. You have a right to object to the creation of these user profiles, and to exercise this right, you must contact Google.

In the event that personal data is transferred to Google LLC, located in the USA, Google LLC is certified under the EU-U.S. Privacy Shield Framework, ensuring compliance with the data protection standards applicable in the EU. A current certificate can be viewed here:
https://www.privacyshield.gov/list

If you do not agree to the future transmission of your data to Google in connection with the use of Google Maps, you also have the option to completely deactivate the Google Maps web service by disabling JavaScript in your browser. Google Maps and the map display on this website will then no longer function.

You can view Google’s Terms of Service at:
https://www.google.de/intl/en/policies/terms/regional.html
The additional Terms of Service for Google Maps can be found at:
https://www.google.com/intl/en_US/help/terms_maps.html

Detailed information on data protection in connection with the use of Google Maps is available in Google’s Privacy Policy:
https://www.google.de/intl/en/policies/privacy/

11.3 Google Web Fonts

This website uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) for the uniform display of fonts. When you open a page, your browser loads the required web fonts into its cache to display text and fonts correctly.

To do so, the browser you use must connect to Google’s servers. This may also result in the transmission of personal data to the servers of Google LLC in the USA. This allows Google to know that your IP address accessed our website. The use of Google Web Fonts is in the interest of a consistent and visually appealing presentation of our online offerings. This constitutes a legitimate interest under Art. 6(1)(f) GDPR. If your browser does not support web fonts, a default font from your computer will be used.

Further information on Google Web Fonts can be found at:
https://developers.google.com/fonts/faq
and in Google’s privacy policy:
https://www.google.com/policies/privacy/

12) Rights of the Data Subject

12.1
Under applicable data protection law, you have the following comprehensive rights vis-à-vis the controller regarding the processing of your personal data (data subject rights). We inform you about these rights below:

Right of access pursuant to Art. 15 GDPR: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and information such as the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the data has been or will be disclosed, the intended storage period or the criteria used to determine that period, the existence of the right to rectification, erasure, restriction of processing, or to object, the right to lodge a complaint with a supervisory authority, the source of your data if not collected by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the significance and envisaged consequences of such processing, as well as your right to be informed about the safeguards pursuant to Art. 46 GDPR if your data is transferred to third countries.
Right to rectification pursuant to Art. 16 GDPR: You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and/or the completion of incomplete data stored by us.
Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data where the grounds set out in Art. 17(1) GDPR apply. This right does not apply, in particular, if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of processing of your personal data where the accuracy of the data is contested by you, for a period enabling the controller to verify the accuracy of the data; if you oppose the erasure of your data due to unlawful processing and instead request the restriction of their use; if we no longer need the data for the purposes of processing, but you require them for the establishment, exercise, or defense of legal claims; or if you have objected to processing pending the verification whether our legitimate grounds override yours.
Right to notification pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to inform each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.
Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, or to request the transmission of those data to another controller, where technically feasible.
Right to withdraw consent pursuant to Art. 7(3) GDPR: You have the right to withdraw any consent given at any time with effect for the future. In the event of withdrawal, we will delete the affected data without delay, unless further processing can be based on a legal basis that does not require consent. The withdrawal of consent does not affect the lawfulness of processing carried out based on the consent before its withdrawal.
Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your personal data infringes the GDPR, you have the right—without prejudice to any other administrative or judicial remedy—to lodge a complaint with a supervisory authority, in particular in the member state of your residence, place of work, or the place of the alleged infringement.

12.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING MAY BE CARRIED OUT IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

13) Duration of Storage of Personal Data

The duration for which personal data is stored depends on the respective legal basis, the purpose of processing, and—if applicable—the statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data based on explicit consent in accordance with Art. 6(1)(a) GDPR, such data will be stored until the data subject revokes their consent.

If there are statutory retention periods for data that are processed on the basis of Art. 6(1)(b) GDPR within the framework of contractual or pre-contractual obligations, such data will be routinely deleted after the expiry of the retention periods, provided they are no longer required for contract fulfillment or initiation and/or there is no legitimate interest on our part in continuing to store the data.

When processing personal data based on Art. 6(1)(f) GDPR, such data will be stored until the data subject exercises their right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims.

When processing personal data for direct marketing purposes based on Art. 6(1)(f) GDPR, such data will be stored until the data subject exercises their right to object pursuant to Art. 21(2) GDPR.

Unless otherwise specified in this policy regarding specific processing situations, personal data that has been stored will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.