We would hereby like to inform you of the ways and scope in which your personal data is processed by BCG Baden-Baden Cosmetics Group GmbH and your rights in accordance with data protection legislation. 

 

1.      Who Is Responsible for Data Processing and How Do I Contact the Data Protection Officer?

 

The party responsible for data processing is:

 

BCG Baden-Baden Cosmetics Group GmbH

Data protection officer

Im Rosengarten 7

76532 Baden-Baden, Germany

Tel.: +49-(0)7221-688-100

Fax: +49-(0)7221-688-369

 

Represented by: Managing Director / CEO Hermann Crux 

You can contact our data protection officers via the contact data above or via email at datenschutz@bcg-cosmetics.de 

 

2.       What Are the Purposes of and Legal Basis for Processing Data?

 

We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (new FDPA) as well as all other relevant laws only insofar as this is required to provide information on this website as well as our services on this website. 

 

If you are using the website simply for information purposes, that is to say, if you are not logging in or registering to use the website or providing us with any other information, we will not collect any personal data, with the exception of the data that your browser transmits in order to enable you to visit the website. These are:

 

      IP address

     Date and time of query

      Time zone difference in relation to Greenwich Mean Time (GMT)

      Content of request (specific page)

      Access status/HTTP status code

      Transferred data quantity in each case

     Website issuing the request

      Browser

      Operating system and its interface

      Language and version of the browser software.

 

To ensure that the website functions, this information is saved in log files. Furthermore, this data is used for the purposes of ensuring that our information-technology systems are secure and optimizing our website.

 

Art. 6 (1) f) of the GDPR forms the legal basis for temporarily saving data and log files. 

 

If processing operations for personal data are based on acquiring the consent of the person affected, Art. 6 (1) a) of the GDPR serves as the legal basis. 

 

Art. 6 (1) b) of the GDPR forms the legal basis for processing personal data in order to fulfill contracts in the case that one of the contracting parties is the person concerned. The same applies to implementing pre-contractual measures that necessitate processing operations. 

 

If our company is subject to a legal obligation for which it is necessary to process personal data, Art. 6 (1) c) of the GDPR serves as the legal basis. 

 

Art. 6 (1) d) of the GDPR is the legal basis in cases where vital interests of the persons concerned or another natural person necessitate the processing of personal data. 

 

If personal data is processed in order to protect the legitimate interests of our company or a third party, the interests, basic rights and fundamental freedoms of the person concerned are of secondary importance. Art. 6 (1) f) of the GDPR is the legal basis for processing data in this instance. 

 

Personal data can be passed onto our IT service providers for the purposes of making this website available. 

 

3.      Data Security

 

We maintain up to date technical procedures to ensure data security, in particular in relation to the protection of your personal data against risks during data transfer and against third parties acquiring knowledge of these data. These procedures are continuously updated to reflect the current state of the art. 

 

4.       Cookies

 

Furthermore, cookies will be stored on your computer. Cookies are small text files that are stored on your hard drive, assigned to your browser, and through which certain information passes to the body responsible for setting the cookies (us, in this case).  Cookies cannot execute programs or transfer viruses to your computer. They are used to make our Internet services overall more user-friendly and effective.

 

As soon as our website is called up by a user, the respective user is notified of the use of cookies for analysis purposes. To process the personal data used in this context, the user’s consent is obtained.

 

This website uses cookies to the following extent: transient cookies (temporary use), persistent cookies (used for a specific period of time), third-party cookies (from third-party providers), flash cookies (permanent use).

 

a)     Transient cookies are automatically deleted once you close the browser. This includes in particular session cookies. These store a session ID with which various queries from your browser can be assigned to the same session. This enables your computer to be identified on a return visit to the website. The session cookies are deleted once you log out or close the browser.

 

b)     Persistent cookies are automatically deleted after a specific period of time, which may vary from cookie to cookie. You may delete the cookies at any time in the security settings of your browser.

 

c)     You may configure your browser settings as required and, for example, refuse to accept third-party cookies or all cookies. However, we would like to point out that if you do so, you may not be able to use all of the functions of this website.

 

d)     The flash cookies used are not collected by your browser but by your flash plug-in. They store the necessary data independently of the browser you use and have no automatic expiry date. If you do not wish the flash cookies to be processed, you will have to install an add-on, e.g. “Clear Flash Cookies” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/clear-flash-cookies/) or Adobe Flash Killer Cookie for Google Chrome.

 

e)     Analysis cookies. We use analysis cookies to improve the content and quality of our website. Analysis cookies enable us to understand how our website is being used, which allows us to optimize our services on an ongoing basis. 

 

 

This stored information is stored separately from any other data submitted to us. The cookies data, in particular, are not associated with your other data. You can delete any currently saved cookies at any point in time. Automatic deletion is also an option. 

 

Processing personal data via the use of cookies required for technical purposes is based on the legal basis of Art. 6 (1) f) of the GDPR. If the respective user has consented to the processing of personal data via the use of cookies for analysis purposes, this consent forms the legal basis in accordance with Art. 6 (1) a) of the GDPR.

 

You may prevent cookies being stored by adjusting the settings in your browser software accordingly; however, we would like to point out that if you do so you may not be able to make full use of all of the functions of this website.

 

5.      Contact Form

 

We collect the personal data provided by you when you are completing the contact form. The data submitted will be processed and used solely for the purposes of providing you with the information you have requested. Any additional processing or use of your data for advertising or market research purposes will be carried out only with your express permission.

 

The following data is saved when a message is sent:

 

(1) IP address of the user

(2) Point in time of registration (date and time)

 

(3) First and last names

(4) Email address 

(5) Street

(6) Zip code

(7) City

(8) Country

(9) Optional: Data provided voluntarily, such as your first name, last name, company name, email, telephone number, fax number and skin type 

 

In order to be able to process your data within the framework of the sending progress, we request the consent of the user and refer the respective user to this privacy statement. 

 

Contact can also be made via an alternatively provided email address; in this case, the personal data of the user sent together with the email is saved by our company. 

If a user has given their consent, the legal basis for processing data is Art. 6 (1) a) of the GDPR. If the purpose of making contact via email is to conclude a contract, the legal basis for this is Art. 6 (1) b) of the GDPR. 

 

Our company processes personal data obtained from the input mask solely for the purposes of making contact and processing the data required in this process. This also constitutes our legitimate interest, which is required for processing operations when contact is made via email. Processing other personal data during the sending process is based on preventing any misuse of the contact form as well as ensuring the security of our information-technology systems.

 

As soon as data collected to achieve the original purpose is no longer required, it is deleted. Personal data obtained from the input mask of the contact form on the website or sent to us via email is no longer required if it is no longer necessary to communicate with the user. This is the case if, when looking at the particular circumstances, it becomes clear that the respective situation will not continue into the future and there will be no more communication. 

 

Additional personal information that we obtain during the sending progress is deleted within seven days. 

 

The user can withdraw their consent regarding their personal data being processed at any time. In the case of contact being made via email, the user can withdraw their consent regarding their personal data being processed at any time. However, no further communication can take place as all of the personal data that was saved as part of making contact will be deleted in this case.

 

6.      Google Analytics

 

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will generally be transmitted to and stored by Google on servers in the United States. If IP anonymization is activated on this website, Google will truncate your IP address within the Member States of the European Union or in other treaty States of the European Economic Area prior to transmitting it to the US.  Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. Google will use this information on behalf of the website provider for the purpose of evaluating your use of the website, compiling reports on website activity and providing the website provider with other services relating to website activity and Internet usage.

 

The IP address transmitted by your browser as part of Google Analytics will not be associated with any other data held by Google.

 

You may prevent the collection for Google of the data (incl. your IP address) generated by cookies and related to your use of the website, and the processing of such data, by downloading and installing the browser plug-in that can be accessed at: tools.google.com/dlpage/gaoptout. or by using Google Analytics OptOut on the basis of a cookie.

 

This website uses Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in truncated form, thereby preventing them from being traced to a specific person. If the data acquired about you can be attributed to a personal connection, this contact will be dismissed immediately and the personal data will be deleted without delay.

 

We use Google Analytics so that we can analyze the usage of our website and improve it on a continuous basis. Using the statistics obtained, we can improve our services and make these more interesting for you as a user. In exceptional cases in which personal data is transferred to the USA, Google has signed up to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework. The legal basis for using Google Analytics is Art. 6 (1) (1) f) of the GDPR. 

 

The legal basis for processing the personal data of users is Art. 6 (1) f) of the GDPR. Processing the personal data of users enables us to analyze the browsing behavior of our users. By analyzing the data acquired, we are able to compile information about the use of the individual components that make up our website, which helps us to improve our site and how user-friendly it is on a continuous basis. Our legitimate interest in processing data lies in these objectives in accordance with Art. 6 (1) f) of the GDPR. Anonymizing the IP address means that the user’s interest with regard to the protection of personal data is sufficiently taken into account.

 

The data is deleted as soon as it is no longer required for our recording purposes. 

 

Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, overview of data protection: www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy statement: http://www.google.de/intl/de/policies/privacy.

 

7.      Which Data Protection Rights Can I Enforce as a Concerned Party?

 

If professional provisions are not in conflict, you have the right:

·     To withdraw any consent given to us at any point in time in accordance with Art. 7 (3) of the GDPR. This results in us no longer being permitted to continue data processing operations based on this consent in the future. 

·     To request information on your personal data processed by us at any time in accordance with Art. 15 of the GDPR. In particular, you can request information on the purposes of processing the data, the category of personal data, as well as the source of the data, the categories of recipients to whom your data was or is disclosed, the purpose and intended storage period, the existence of a right to rectify incorrect data, erase data and restrict processing operations or object to data being processed, the existence of a right to lodge a complaint, the source of your data if it was not collected by us, as well as the existence of an automated decision-making function, including profiling and, where applicable, significant information regarding the profiling details; 

·     To request that incorrect or incomplete personal data saved by us is rectified or completed without delay in accordance with Art. 16 of the GDPR;

·     To request that personal data saved by us be erased in accordance with Art. 17 of the GDPR, provided that processing this data is not required for the purposes of exercising freedom of expression and information, fulfilling a legal obligation or for reasons relating to public interest or to establish, exercise or defend legal claims;

·     To request that the processing of your personal data is restricted in accordance with Art. 18 of the GDPR, insofar as you dispute the accuracy of the data, the processing operation is illegal but you refuse the erasure of the data and we no longer require the data, you need this data to establish, exercise or defend legal claims however or you have filed an objection to the processing of your personal data in accordance with Art. 21 of the GDPR;

·     To receive your personal data with which you provided us in a standard, structured format that can be processed by a computer in accordance with Art. 20 of the GDPR or to have this data transferred to another responsible party and

·     raise a complaint regarding data processing with a supervisory authority in accordance with Art. 77 of the GDPR. As a general rule, you can contact the supervisory authority in the area in which you normally live; alternatively, you can contact the supervisory authority of your workplace or our legal office.

 

Please direct any requests for information, or queries or objections to the processing of your data via email to datenschutz@bcg-cosmetics.de or to the address listed in our Legal Notice.

 

8.      Children

 

We do not collect the personal data of minors. In the event that such data are collected unwittingly, they will be deleted without delay.

 

9.       Can I Object to My Personal Data Being Processed?

 

You have the right to object to your personal data being processed for the purposes of direct advertising without having to specify your reasons for doing so. If we process your data to protect legitimate interests, you can object to your data being processed for this purpose for reasons relating to your particular situation. In this case, we no longer process your personal data, unless we can establish compelling and legitimate reasons for processing the data that outweigh your interests, rights and freedoms or if the data is processed for the purposes of establishing, exercising or defending legal claims. 

 

In order to make the website available to users and ensure that the website operates correctly, it is necessary to record data and save this data in log files. As a result of this, users do not have the option of objecting to data being processed in this manner.

 

If log files are saved, they are deleted after seven days at the latest and the respective data is not processed further. 

 

10.   Do I have the Option to Raise a Complaint? 

If you believe that we are processing your personal data in an illegal manner or that we are violating data protection legislation for other reasons, you can raise a complaint with the supervisory authority responsible for us:

 

State officer for data protection: 

Königsstraße 10a

70025 Stuttgart, Germany

 

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. On the following pages, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is 7Garden Cosmetics GmbH, Im Rosengarten 7, 76532 Baden-Baden, Deutschland, Tel.: +49 7221 688930, E-Mail: service@sanssoucis.de. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 The controller has designated a data protection officer for this website. He can be reached as follows: "Nicole Schmidt, SüdWest Datenschutz Rechtsanwaltsgesellschaft mbH, Ludwig-Erhard-Allee 10, 76131 Karlsruhe, +49 721 5099-8769, nicole.schmidt@suedwest-datenschutz.com"

1.4 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.

2) Data Collection When You Visit Our Website

When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.

3) Hosting & Content Delivery Network

Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop on the basis of processing on our instructions. All data collected on our website is processed on Shopify's servers. Within the scope of the aforementioned Shopify services, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. for further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.
For more information on Shopify's privacy policy, please visit the following website: https://www.shopify.com/legal/privacy
Further processing on servers other than the aforementioned servers of Shopify will only take place within the scope of the following information.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your terminal and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values according to individual requirements. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can check the duration of the respective cookie storage in the overview of the cookie settings of your web browser.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the content of a virtual shopping basket for a later visit to the website). If personal data are also processed by individual cookies set by us, the processing is carried out in accordance with Art. 6 (1) point b GDPR either for the execution of the contract or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

Please note that you can set your browser in such a way that you are informed about the setting of cookies and you can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find these for the respective browsers under the following links:

- Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/temporarily-allow-cookies-and-site-data-in-microsoft-edge-597f04f2-c0ce-f08c-7c2b-541086362bd2

- Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop

- Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en

- Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac

- Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that the functionality of our website may be limited if cookies are not accepted.

5) Contacting Us

When you contact us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration. The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided there are no legal storage obligations to the contrary.

6) Data Processing When Opening a Customer Account and for Contract Processing

Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide us with this data when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods are opposed and no legitimate interest on our part in the continued storage exists.

7) Use of Client Data for Direct Advertising

Subscribe to our e-mail newsletter

If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory data for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in future by clicking on an appropriate link.

By activating the confirmation link, you give us your consent for the use of your personal data pursuant to Art. 6 (1) point a GPPR. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration for the purpose of tracing any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter is used exclusively for the promotional purposes by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data, or we reserve the right to a more extensive use your data which is permitted by law and about which we inform you in this declaration.

8) Processing of Data for the Purpose of Order Handling

8.1 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you personally by suitable means of communication (e.g. by post or e-mail) about upcoming updates within the legally stipulated period of time within the framework of our statutory duty to inform pursuant to Art. 6 (1) lit. c GDPR. Your contact details will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.

In order to process your order, we also work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2 Passing on Personal Data to Shipping Service Providers

- DHL
If delivery of goods takes place by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will pass on your e-mail address to DHL in accordance with Art. 6 (1) point a GDPR, prior to delivery of the goods, for the purpose of coordinating a date of delivery or of a notice about the shipment status, only if you have given your express consent during the ordering process. Otherwise, only the name of the recipient and the delivery address will be passed on to DHL for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior agreement on the delivery date with DHL or transmission of status information for shipment delivery is not possible.
The consent can be revoked for future deliveries at any time, either with the controller or with the transport service provider DHL.

8.3 Use of Payment Service Providers

- Apple Pay
If you choose the payment method "Apple Pay" of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your terminal device operated with iOS, watchOS or macOS by debiting a payment card deposited with "Apple Pay". Apple Pay uses security features built into the hardware and software of your device to protect your transactions. In order to release a payment, it is therefore necessary to enter a code previously defined by you and to verify it using the "Face ID" or "Touch ID" function of your terminal.
For the purpose of payment processing, your information provided during the ordering process, along with information about your order, will be transmitted to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for payment processing. The encryption ensures that only the website from which the purchase was made can access the payment information. After the payment is made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the payment.
If personal data is processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
Apple retains anonymised transaction data, including the approximate amount of the purchase, the approximate date and time and whether the transaction was completed successfully. Anonymisation completely excludes any personal reference. Apple uses the anonymised data to improve Apple Pay and other Apple products and services.
When you use Apple Pay on iPhone or the Apple Watch to complete a purchase made through Safari on Mac, the Mac and the authorization device communicate through an encrypted channel on Apple's servers. Apple does not process or store this information in any format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone preferences. Go to "Wallet & Apple Pay" and disable "Allow payments on Mac".
For more information about Apple Pay privacy, please visit the following web address: https://support.apple.com/en-gb/HT203027
- Google Pay
If you choose the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment processing is carried out via the "Google Pay" application of your mobile device running at least Android 4.4 ("KitKat") and having an NFC function by charging a payment card deposited at Google Pay or a payment system verified there (e.g. PayPal). For the release of a payment via Google Pay in the amount of more than 25,- € the prior unlocking of your mobile device by the respective verification measure (e.g. face recognition, password, fingerprint or pattern) is required.
For the purpose of payment processing, your information provided during the ordering process, together with the information about your order, will be forwarded to Google. Google then transmits your payment information stored in Google Pay in the form of a unique transaction number to the source website, which is used to verify a payment. This transaction number does not contain any information about the real payment data of your means of payment deposited with Google Pay, but is created and transmitted as a uniquely valid numeric token. For all transactions via Google Pay, Google acts merely as an intermediary to process the payment transaction. The transaction is carried out exclusively in the relationship between the user and the source website by debiting the means of payment deposited with Google Pay.
If personal data are processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Google reserves the right to collect, store and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time and amount of the transaction, the merchant's location and description, a description provided by the merchant of the goods or services purchased, photos that you have attached to the transaction, the name and email address of the seller and buyer or the sender and recipient, the payment method used, your description of the reason for the transaction and, if applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, verification of transaction data and optimisation and maintenance of the functionality of the Google Pay service.
Google also reserves the right to combine the processed transaction data with other information which is collected and stored by Google when using other Google services.
The terms of use of Google Pay can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en
Further information on data protection at Google Pay can be found at the following Internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en
- Paypal
When you pay via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 (1) point b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to carry out credit checks for the payment methods credit card via PayPal, direct debit via PayPal or, if offered, "purchase on account" or "payment by installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies on the basis of PayPal's legitimate interest in determining your solvency pursuant to Art. 6 (1) point f GDPR. PayPal uses the result of the credit assessment in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including the credit agencies used, please refer to PayPal's data protection declaration at: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europe House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment is processed by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will forward the information you have provided in connection with your order (name, address, account number, sort code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) point f GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary. You can view Shopify Payments' privacy policy at: https://www.shopify.com/legal/privacy.
You can view more information about the privacy policy of Stripe Payments Europe Ltd. at: https://stripe.com/en-de/privacy.

9) Online Marketing

Facebook pixel for creating custom audiences (with Cookie Consent Tool)
Within our online offer, the so-called "Facebook pixel" of the social network Facebook is applied. It is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quay, Square, Dublin 2, Ireland (hereinafter "Facebook").
If a user clicks on an advertisement placed by us, which is displayed on Facebook, an addition is added to the URL of our linked page by Facebook pixels. If our page allows data to be shared with Facebook via pixels, this URL parameter is written into the user's browser via a cookie, which is set by the linked page itself. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook pixel, Facebook is able to determine visitors of our online offer as a target group for the presentation of ads (so-called "Facebook ads"). Accordingly, the Facebook pixel to display Facebook ads placed by us will be presented only to Facebook users who have shown an interest in our online offer or who demonstrate certain characteristics (e.g., interest in certain topics or products determined by means of the websites visited) which we will transmit to Facebook (so-called "custom audiences"). When using Facebook pixels, we also want to ensure that our Facebook ads match the potential interest of users and are not annoying. This allows us to evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were forwarded to our website after clicking on a Facebook ad ("conversion").
The collected data is anonymous and does not provide us with any information about the user’s identity. However, the data is stored and processed by Facebook to enable a connection to the respective user profile and to allow Facebook to use the data for its own advertising purposes in accordance with the Facebook Data Usage Guidelines (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to serve advertisements on and off Facebook.
The data processing associated with the use of the Facebook Pixel is only carried out with your express consent in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, remove the tick next to the setting for the "Facebook Pixel" in the "Cookie Consent Tool" embedded on the website.

10) Web Analysis Services

10.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transferred to a Google server and stored there and may also be transferred to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes the possibility of direct personal reference. Through the extension, your IP address will be shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transferred to a server of Google LLC. in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide us with further services related to the use of the website and the Internet. The IP address transmitted by your browser within the framework of Google (Universal) Analytics is not combined with other Google data.
Via a special function called "Demographics", Google Analytics also enables the compilation of statistics with statements about the age, gender and interests of site visitors based on an evaluation of interest-related advertising and with the use of third-party information. This allows the definition and differentiation of user groups of the website for the purpose of target-group-optimized marketing measures. However, data sets collected via "Demographics" cannot be assigned to a specific person.
Details on the processing operations initiated and on Google's handling of data collected from websites can be found here: https://policies.google.com/technologies/partner-sites?hl=en
All the processing described above, in particular the setting of Google Analytics cookies for reading information on the terminal device used, is only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 letter a GDPR. Without this consent, the use of Google Analytics during your visit to our website will not take place.
You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal of consent, please deactivate this service in the "Cookie-Consent-Tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.
For the transmission of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA.
Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=en

10.2 Google (Universal) Analytics without cookies
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
This website uses Google (Universal) Analytics exclusively without the use of cookies, which means that the service does not set cookies on your end device at any time.
Instead, the local memory of your browser is used to store an individual ID assigned by Google (Universal) Analytics, which enables an analysis of your use of the website. For this purpose, the ID is used to process certain user information.
The information generated by the ID about your use of this website (including the abbreviated IP address) is usually transferred to a Google server and stored there, and may also be transferred to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes any direct personal reference. Through the extension, your IP address will be shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transferred to a Google LLC. server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide us with further services related to the use of the website and the Internet. The IP address transmitted by your browser within the framework of Google (Universal) Analytics is combined with other Google data.
Via a special function called "Demographics", Google Analytics also enables the compilation of statistics with statements about the age, gender and interests of site visitors based on an evaluation of interest-related advertising and with the use of third-party information. This allows the definition and differentiation of user groups of the website for the purpose of target-group-optimized marketing measures. However, data sets collected via "Demographics" cannot be assigned to a specific person.
Details on the processing operations initiated and on Google's handling of data collected from websites can be found here: https://policies.google.com/technologies/partner-sites?hl=en
All processing described above will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 letter a GDPR. Without this consent, the use of Google Analytics during your visit to our website will be omitted.
You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal of consent, you can download and install the browser plugin available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en
As an alternative to the browser plugin or within browsers on mobile devices, you can revoke your consent by clicking on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will need to click this link again):
Disable Google Analytics
We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.
For the transmission of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA.
Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=en

11) Retargeting/Remarketing/ Referral Advertising

Google Ads Remarketing
This website uses the online advertising program "Google Ads" and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the concern of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize if the user has clicked on the ad and has been directed to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across Google Ads customers’ websites. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have chosen conversion tracking. Customers learn the total number of users who clicked on their ad and who were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. The use of Google Ads may also result in the transmission of personal data to the servers of Google LLC. in the USA.
Details on the processing operations initiated by Google Ads conversion tracking and on Google's handling of data collected from websites can be found here: https://policies.google.com/technologies/partner-sites?hl=en
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. Without this consent, Google Conversion Tracking will not be used during your visit to the website.
You can permanently disable the setting of cookies by Google Ads Conversion Tracking for advertising preferences. You may download and install the browser plug-in available at the following link: https://support.google.com/ads/answer/7395996?
Please note that certain functions of this website may not be available or may be restricted if you have deactivated the use of cookies.
Further information about Google’s privacy policy can be viewed at:
http://www.google.com/policies/technologies/ads/

Pinterest-Tag Conversion-Tracking
This website uses the conversion tracking technology "Pinterest Tag" of Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").
If you have reached our website from a pin on Pinterest, we set a cookie on your computer which interacts with an implemented "tag" in the form of a JavaScript code from Pinterest. Cookies are small text files that are stored on your terminal device. These cookies lose their validity after 180 days and are not used for personal identification.
If the user is forwarded from a pin to Pinterest on pages of this website and the cookie has not yet expired, the tag records certain user actions predefined by us and can track them (e.g., completed transactions, leads, search queries on the website, calls to product pages). When such an action is performed, your browser sends an HTTP request from the cookie to the Pinterest server via the Pinterest tag, which contains certain information about the action (including type of action, time, browser type of device).
Through this transmission, Pinterest can generate statistics about the usage behavior on our website after forwarding a Pinterest Pin, which serve to optimize our offer.
However, we do not receive any information that personally identifies users. All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. Without this consent, Pinterest Tag will not be used during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
For more information about Pinterest's privacy policy, please visit the following Web address: https://policy.pinterest.com/en-gb/privacy-policy

Pinterest retargeting pixel
A pixel (Pinterest tag) of Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest") is integrated on this website. With the help of the pixel, information about the surfing behavior of website visitors can be collected, stored, and evaluated in pseudonymized form. The information can be assigned to the user with the help of further information that Pinterest has stored about the user, e.g., due to the ownership of an account on the social network "Pinterest". Pinterest uses an algorithm to analyze the surfing behavior and can then display targeted product recommendations as personalized advertising banners on the user's Pinterest account. Pinterest may also combine the information collected via the pixel with other information that Pinterest has collected via other websites and / or in connection with the use of the social network "Pinterest", and thus create pseudonymized usage profiles. In no case, however, may this information collected be used to personally identify visitors to this website.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GPDR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

TikTok Pixel
This website uses the "TikTok Pixel", a tracking technology operated by the social network "TikTok" of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok").
With the help of cookies (small text files that are stored on the end device used), information about the surfing behaviour on our website is collected in pseudonymised form, transmitted to TikTok, stored there, and evaluated in order to subsequently enable the display of interest-based and personalized product recommendations on TikTok. Subject of the information collected and processed pseudonymously in this way is basically the device ID, the device type, time stamp, the operating system used and the IP address. The information can be assigned to the person of the user with the help of further information that TikTok has stored about the user, e.g., due to the ownership of an account with the " TikTok " social network. TikTok may also combine the information collected via the pixel with other information that TikTok has collected via other websites and/or in connection with the use of the social network "TikTok", and thus create pseudonymized usage profiles. In no case may the information collected be used to personally identify visitors to this website.
The TikTok Pixel further enables us to track the effectiveness of advertisements on TikTok. If the user is redirected from an ad on TikTok to pages on this website and the cookies have not yet expired, the pixel captures and can track certain user actions predefined by us (e.g., completed transactions, leads, searches on the website, views of product pages). When such an action is performed, your browser sends an HTTP request from the cookie to the TikTok server via the TikTok pixel, transmitting certain information about the action. This transmission enables TikTok to compile statistics about the usage behavior on our website after being forwarded from a TikTok ad, which we use to optimize our offer.
All processing described above, in particular the setting of cookies for the reading of information on the end device used, is only carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 point a GDPR. You can revoke your consent at any time with future effect by deactivating this service using the "Cookie Consent Tool" provided on the website. We have concluded an order processing agreement with TikTok for the use of the TikTok Pixel, requiring TikTok to protect the data of our site visitors and not to pass it on to third parties. TikTok generally transfers collected information outside the European Economic Area and relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

12) Site Functionalities

12.1 Facebook with 2-Click Solution
Our website uses so-called social plugins ("plugins") of the social network Facebook operated by Meta Platforms Ireland Limited, 4 Grand Canal Quay, Square, Dublin 2, Ireland ("Facebook").
If you wish to increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page by means of a so-called "2-click" solution. Deactivated plug-ins are highlighted in gray. This integration ensures that no connection to the Facebook servers is established when a page of our website containing such plug-ins is called up. Your browser only establishes a direct connection to Facebook's servers when you activate the plug-ins and thus give your consent to the transfer of data in accordance with Art. 6 (1) point a GDPR. The content of the respective plugin is directly transmitted to your browser and integrated into the page. The plugin then sends data (including your IP address) to Facebook. We have no control over the amount of data Facebook collects using those plugins. As far as we know, Facebook will in any case be informed about our websites you have visited currently and in the past. By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in. The information collected (including your IP address) is directly transmitted from your browser to a server of Facebook in the USA and stored there. When you interact with the plugins, the relevant information is also directly transmitted to a server of Facebook and stored there. The information is also published on Facebook and signaled to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking the button again. However, the revocation has no influence on the data that has already been transmitted to Facebook.
The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights and setting options for the protection of your privacy, can be found in the Facebook data protection declaration at: https://www.facebook.com/policy.php

12.2 Facebook with Shariff Solution
Our website uses so-called social plugins ("plugins") of the social network Facebook operated by Facebook Ireland Limited, 4 Grand Canal Quay, Square, Dublin 2, Ireland ("Facebook").
If you wish to increase the protection of your data when visiting our website, these buttons are not fully integrated into the page as plug-ins and only fully operational when using an HTML link. This type of integration ensures that no connection to servers of Facebook is established when a page of our website containing such buttons is called up. When you click on the button, a new browser window opens and calls up the Facebook page, where you can interact (if necessary, after entering your login data) with the plugins contained there.
The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights and setting options for the protection of your privacy, can be found in the Facebook data protection declaration at: https://www.facebook.com/policy.php

12.3 Pinterest with Shariff Solution
We use so-called social plugins ("plugins") of the social network Pinterest operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA, 94103, USA ("Pinterest").
If you wish to increase the protection of your data when visiting our website, these buttons are not fully integrated into the page as plug-ins and only fully operational when using an HTML link. This type of integration ensures that no connection to Pinterest's servers is established when a page of our website containing such buttons is accessed. When you click on the button, a new browser window opens and calls up the Pinterest page, where you can interact with the plug-ins there (if necessary, after entering your login data).
Please refer to Pinterest's privacy policy for the purpose and scope of data collection and the further processing and use of the data by Pinterest and your rights and setting options for protecting your privacy at: https://policy.pinterest.com/en-gb/privacy-policy

On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is mainly used to distinguish whether an entry is made by a natural person or misused by automatic and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. The use of Google reCAPTCHA may also result in the transmission of personal data to the servers of Google LLC. in the USA and is carried out in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in determining the individual willingness of actions on the Internet and avoiding misuse and spam.

Further information about Google reCAPTCHA and Google's privacy policy can be found at: https://policies.google.com/privacy?hl=en-GB

13) Tools and Miscellaneous

This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users in the form of an interactive user interface when they access the page, on which consent for certain cookies and/or cookie-based applications can be given by ticking the appropriate box. Using the tool, all cookies/services requiring consent are only loaded if the respective user provides the corresponding consent by ticking the corresponding box. This ensures that such cookies are only set on the respective end device of the user if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) point GDPR based on our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Further legal basis for the processing is Art. 6 (1) point c GDPR. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

14) Rights of the Data Subject

14.1 The applicable data protection law grants you the following comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data:

- Right of access by the data subject pursuant to Art. 15 GDPR: You shall have the right to receive the following information: The personal data processed by us; the purposes of the processing; the categories of processed personal data; the recipients or categories of recipients to whom the personal data have been or will be disclosed; the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing personal data concerning the data subject or to object to such processing; the right to lodge a complaint with a supervisory authority; where the personal are not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling and at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject; the appropriate safeguards pursuant to Article 46 when personal data is transferred to a third country.

- Right to rectification pursuant to Art. 16 GDPR: You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you and/or the right to have incomplete personal data completed which are stored by us.

- Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR: You have the right to obtain from the controller the erasure of personal data concerning you if the conditions of Art. 17 (2) GDPR are fulfilled. However, this right will not apply for exercising the freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.

- Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to obtain from the controller restriction of processing your personal data for the following reasons: As long as the accuracy of your personal data contested by you will be verified. If you oppose the erasure of your personal data because of unlawful processing and you request the restriction of their use instead. If you require the personal data for the establishment, exercise or defense of legal claims, once we no longer need those data for the purposes of the processing. If you have objected to processing on grounds relating to your personal situation pending the verification whether our legitimate grounds override your grounds.

- Right to be informed pursuant to Art. 19 GDPR: If you have asserted the right of rectification, erasure or restriction of processing against the controller, he is obliged to communicate to each recipient to whom the personal date has been disclosed any rectification or erasure of personal data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.

- Right to data portability pursuant to Art. 20 GDPR: You shall have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to require that those data be transmitted to another controller, where technically feasible.

- Right to withdraw a given consent pursuant to Art. 7 (3) GDPR: You have the right to withdraw your consent for the processing of personal data at any time with effect for the future. In the event of withdrawal, we will immediately erase the data concerned, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

- Right to lodge a complaint pursuant to Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

14.2 RIGHT TO OBJECT

IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

15) Duration of Storage of Personal Data

The duration of the storage of personal data is based on the respective legal basis, the purpose of processing and - if relevant – on the respective legal retention period (e.g. commercial and tax retention periods).

If personal data is processed on the basis of an express consent pursuant to Art. 6 (1) point a GDPR, this data is stored until the data subject revokes his consent.

If there are legal storage periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 (1) point b GDPR, this data will be routinely deleted after expiry of the storage periods if it is no longer necessary for the fulfillment of the contract or the initiation of the contract and/or if we no longer have a justified interest in further storage.

When processing personal data on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection in accordance with Art. 21 (1) GDPR, unless we can provide compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

If personal data is processed for the purpose of direct marketing on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the information contained in this declaration on specific processing situations, stored personal data will be deleted if it is no longer necessary for the purposes for which it was collected or otherwise processed.