Privacy policy

1) Information about the collection of personal data and contact details of the controller
1.1 Thank you for visiting our website and for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is IAMSTRONGER Nutrition GmbH, Am Kaiserkai 31, 20457 Hamburg, Germany, tel.: 015224101001, email: verwaltung@iamstronger-nutrition.de. The controller of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries for the controller). You can recognise an encrypted connection by the character string ‘https://’ and the padlock symbol in your browser address bar.

2) Data collection when visiting our website
When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (known as ‘server log files’). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our website visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymous form)
The processing takes place pursuant to Art. 6, para. 1 (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. No transfer or other use of the data takes place. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3) Hosting
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (‘Shopify’), for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify’s servers. As part of Shopify’s aforementioned services, data may also be transmitted for the purposes of further processing to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. In the event of the transfer of data to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by an adequacy decision by the European Commission. Further information on Shopify’s data protection can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than the aforementioned Shopify servers only takes place in the context explained below.

4) Cookies
In order to make your visit to our website enjoyable and to enable the use of certain functions, we use what are known as cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (session cookies). Other cookies remain on your device and make it possible to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information, such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which varies depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.
In some cases, the cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing either takes place pursuant to Art. 6, para. 1 (b) GDPR for the execution of the contract, pursuant to Art. 6, para. 1 (a) GDPR in the case of provided consent or pursuant to Art. 6, para. 1 (f) GDPR to safeguard our legitimate interest in ensuring the best possible functionality of the website and a customer-friendly and effective page design.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually on their acceptance or reject cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. These can be found for the respective browsers via the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact
Personal data is collected when contacting us (e.g. via contact form or email). What data is collected in the case of a contact form can be seen in the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for getting in contact and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your request pursuant to Art. 6, para. 1 (f) GDPR. If your contact is for the purpose of concluding a contract, the additional legal basis for the processing is Art. 6, para. 1 (b) GDPR. Your data will be deleted once your request has been processed. This is the case if it can be inferred from the circumstances that the matters in question have been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

6) Data processing when opening a customer account and for contract processing
Pursuant to Art. 6, para. 1 (b) GDPR, personal data will continue to be collected and processed if you provide us with it for the execution of a contract or when opening a customer account. What data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be requested by sending a message to the controller address listed above. We store and use the data provided by you for contract processing. After completion of the contract or deletion of your customer account, your data will be blocked pursuant to retention periods relating to tax law and commercial law and erased after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by us.

7) Use of customer data for direct marketing
7.1 Subscription to our email newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only information required for us to send the newsletter is your email address. The provision of further data is voluntary and will be used to address you personally. We use what is known as the double opt-in procedure for delivery of the newsletter. This means that we will only send you an email newsletter if you have expressly confirmed to us that you consent to receiving newsletters. We will then send you a confirmation email with which you will be asked to confirm by clicking on a corresponding link that you want to receive the newsletter in the future.
By activating the confirmation link, you give us your consent for the use of your personal data pursuant to Art. 6, para. 1 (a) GDPR. When you subscribe to the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of subscription in order to be able to trace a potential misuse of your email address at a later date. The data collected by us when you subscribe to the newsletter will be used exclusively for the purpose of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter for this purpose or by sending a corresponding message to the controller named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we have reserved the right to further use of your data, which is permitted by law and about which we inform you in this declaration.
7.2 Newsletter dispatch via KLICK-TIPP
The dispatch of our email newsletters takes place via the technical service provider KLICK-TIPP Limited, 15 Cambridge Court, 210 Shepherd’s Bush Road, London W6 7NJ, United Kingdom, to whom we pass on your data provided when subscribing to the newsletter. This transfer takes place pursuant to Art. 6, para. 1 (f) GDPR and serves our legitimate interest in the use of a promotionally effective, secure and user-friendly newsletter system. The data you enter for the purpose of subscribing to the newsletter (e.g. email address) is stored on KLICK-TIPP’s servers in the EU.
KLICK-TIPP uses this information to send and statistically evaluate the newsletter on our behalf. The emails sent contain what are known as web beacons or tracking pixels, which represent one-pixel image files that are stored on our website, for the purposes of this evaluation. This makes it possible to determine whether a newsletter message has been opened and which links have been clicked, if any. In addition, technical information is collected (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively in pseudonymised form and is not linked to your other personal data, and can therefore not be associated with a particular individual. This data is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients. If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
Furthermore, KLICK-TIPP may use this data itself pursuant to Art. 6, para. 1 (f) GDPR on the basis of its own legitimate interest in suitable design and optimisation of the service, as well as for market research purposes, for example to determine in which countries the recipients are based. However, KLICK-TIPP does not use the data of our newsletter recipients to write to them itself or pass it on to third parties.
We have concluded an order processing contract with KLICK-TIPP, with which we oblige KLICK-TIPP to protect the data of our customers and not to pass it on to third parties.
The data protection provisions of KLICK-TIPP can be viewed here: https://www.klick-tipp.com/datenschutzerkl%C3%A4rung

8) Data processing for order processing
8.1 To process your order, we work together with the following service providers, who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned bank as part of the payment processing, insofar as this is necessary for that purpose. If payment service providers are used, we will expressly inform you of this below. The legal basis for the transfer of data is Art. 6, para. 1 (b) GDPR.
8.2 Use of special service providers for order processing and completion
- Shopify Order Printer
For the accounting and logistical organisation of orders, we use the ‘Order Printer’ service from Shopify International Limited, Victoria Buildings, 2nd floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (‘Shopify’), for the automated creation of invoices, receipts, shipping labels and other business documents. If personal order data is processed via the service for the preparation of these documents, the processing takes place pursuant to Art. 6, para. 1 (b) GDPR exclusively for the proper processing of online orders.

9) Use of social media: Social Plugins
Facebook as a standard plugin
On our website, Social Plugins (‘plugins’) from the social network Facebook, which is operated by facebook, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’), are used. The plugins are marked with a Facebook logo or the wording ‘Social Plugin from Facebook’ or ‘Facebook Social Plugin’. An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins
If you visit a page on our website that contains a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook, Inc. server in the USA and stored there.
If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plugins, for example by clicking the ‘Like’ button or posting a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.
The data processing operations described are carried out pursuant to Art. 6, para. 1 (f) GDPR on the basis of Facebook’s legitimate interest in the display of personalised advertising, in order to inform other users of the social network about your activities on our website, and for the suitable design of the Facebook service.
If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also object to the loading of the Facebook plugins and thus the data processing described above in future with add-ons for your browser, e.g. with the script blocker ‘NoScript’ (http://noscript.net/).
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options for the protection of your privacy can be found in Facebook’s Privacy Policy:
https://www.facebook.com/policy.php

10) Online marketing
10.1 Facebook Pixel for the creation of Custom Audiences (with cookie consent tool)
Facebook Pixel from the social network Facebook, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (‘Facebook’), is used within our online offering.
If a user clicks on an advertisement placed by us that is displayed on Facebook, additional text is appended to the URL of our linked page by Facebook Pixel. Insofar as our site allows the sharing of data with Facebook via Pixel, this URL parameter is written into the user’s browser via a cookie, which our linked page itself sets. This cookie is then read by Facebook Pixel and allows the data to be forwarded to Facebook.
With the help of Facebook Pixel, Facebook is able to determine the visitors of our online offering as a target group for the presentation of advertisements (‘Facebook ads’). Accordingly, we use Facebook Pixel to only display Facebook ads placed by us to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interest in certain topics or products that are determined on the basis of websites visited) that we transmit to Facebook (‘Custom Audiences’). With the help of Facebook Pixel, we also want to ensure that our Facebook ads are potentially of interest to users and are not annoying. In this way, we can further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (‘conversion’).
The data collected is anonymous to us, so it does not allow us to draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, meaning that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, pursuant to the Facebook Privacy Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and off Facebook.
The data processing associated with the use of Facebook Pixel takes place exclusively with your express consent pursuant to Art. 6, para. 1 (a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal of consent, remove the check mark next to the setting for ‘Facebook Pixel’ in the ‘Cookie Consent Tool’ integrated into the website.
10.2 Google AdSense
This website uses Google AdSense, a web advertising service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). Google AdSense uses ‘cookies’, which are text files that are stored on your computer and that enable analysis of your use of the website. In addition, Google AdSense uses what are known as ‘web beacons’ (small invisible graphics) to collect information, through the use of which simple actions such as visitor traffic on the website can be recorded, collected and evaluated. The information gathered by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. Transmission to the servers of Google LLC. in the USA may also take place.
Google uses the information obtained in this way to evaluate your usage behaviour with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google.
The described processing of data takes place pursuant to Art. 6, para. 1 (f) GDPR for the purpose of targeting of advertising to the user by advertising third parties, whose advertisements are displayed on the basis of the evaluated user behaviour on this website. This processing also serves our financial interest in exploiting the economic potential of our website by displaying personalised third-party advertising content for a fee.
You can find further information about Google’s data protection provisions on the following website: https://www.google.de/policies/privacy/
You can permanently deactivate cookies for advertising specifications by preventing them with a corresponding setting in your browser software or you can download and install the browser plugin available via the following link:
https://www.google.com/settings/ads/plugin?hl=en
Please note that it may not be possible to use certain functions of this website or they may only be usable to a limited extent if you have deactivated the use of cookies.
Insofar as it is legally required, we have obtained your consent pursuant to Art. 6, para. 1 (a) GDPR for the processing of your data described above. You can withdraw your consent at any time with effect for the future. In order to exercise your withdrawal of consent, please use the above-mentioned method to make an objection.
10.3 Use of Google Ads conversion tracking
This website uses the online advertising program Google Ads and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). We use the service offered by Google Ads to draw attention to our attractive offers with the help of advertising media (Google Adwords) on external websites. We can determine how successful the individual advertising measures are on the basis of the data relating to the advertising campaigns. Our aim in this context is to show you advertising that is of interest to you, to make our website more interesting for you and to reach a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google Ads. Cookies are small text files that are stored on your device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, we and Google can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not wish to participate in tracking, you can block this use by deactivating the Google conversion tracking cookie via your internet browser under ‘User Settings’. You will then not be included in the conversion tracking statistics. We use Google Ads on the basis of our legitimate interest in targeted advertising pursuant to Art. 6, para. 1 (f) GDPR. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
You can find further information about Google’s data protection provisions on the following website: https://www.google.de/policies/privacy/
You can permanently deactivate cookies for Google Ads conversion tracking by downloading and installing the browser plugin available from Google via the following link:
https://www.google.com/settings/ads/plugin?hl=de
Please note that it may not be possible to use certain functions of this website or they may only be usable to a limited extent if you have deactivated the use of cookies.
Insofar as it is legally required, we have obtained your consent pursuant to Art. 6, para. 1 (a) GDPR for the processing of your data described above. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal of consent, deactivate this service in the ‘Cookie Consent Tool’ provided on the website or alternatively use the above-mentioned method to make an objection.

11) Tools and miscellaneous
11.1 Lexoffice
We use the service of the cloud-based accounting software ‘lexoffice’ from Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg to carry out accounting.
Lexoffice processes incoming and outgoing invoices as well as, if necessary, the bank transactions of our company in order to automatically record invoices, match them to the transactions and generate financial accounting in a semi-automated process.
Insofar as personal data is also processed in this context, the processing is carried out pursuant to Art. 6, para. 1 (f) GDPR on the basis of our legitimate interest in efficient organisation and documentation of our business processes.
Further information on lexoffice, the automated processing of data and the data protection provisions can be found on https://www.lexoffice.de/datenschutz/
11.2 Google web fonts
For the uniform presentation of fonts, this site uses web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google’s servers. In this context, transmission of personal data to the servers of Google LLC. in the USA may also take place. In this way, Google becomes aware that our website has been accessed via your IP address. The use of Google web fonts is in the interest of a uniform and appealing presentation of our online offering. This constitutes a legitimate interest within the meaning of Art. 6, para. 1 (f) GDPR. If your browser does not support web fonts, a standard font will be used by your computer.
Further information on Google web fonts can be found on https://developers.google.com/fonts/faq and in Google’s Privacy Policy: https://www.google.com/policies/privacy/
11.3 Google reCAPTCHA
On this website, we also use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). This function is primarily used to distinguish whether an input is made by a natural person or improperly by machine and automated processing. The service includes the sending to Google of the IP address and, if applicable, other data required by Google for the reCAPTCHA service and is carried out pursuant to Art. 6, para. 1 (f) GDPR on the basis of our legitimate interest in determining individual responsibility on the Internet and avoiding misuse and spam. As part of the use of Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. in the USA.
Further information on Google reCAPTCHA and Google’s Privacy Policy can be viewed at: https://www.google.com/intl/de/policies/privacy/
Insofar as it is legally required, we have obtained your consent pursuant to Art. 6, para. 1 (a) GDPR for the processing of your data described above. You can withdraw your consent at any time with effect for the future. In order to exercise your withdrawal of consent, please use the above-mentioned method to make an objection.
11.4 ShopSync for Shopify
This website uses the Shopify app ‘ShopSync’ from ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA.
With the help of ShopSync, the newsletter service Mailchimp is synchronised with our Shopify account in such a way that, on the one hand, updates in Mailchimp’s email lists (such as an opt-out by a newsletter recipient) are automatically stored on Shopify and, on the other hand, new contact data generated by contracts on Shopify is automatically transferred to Mailchimp’s email lists.
In the former case, data processing is carried out pursuant to Art. 6, para. 1 (f) GDPR on the basis of our legitimate interest in the effective and cross-system maintenance of advertising addressee files and the efficient observance of legally significant status changes.
In the latter case, exclusively on the basis of express user consent pursuant to Art. 6, para. 1 (a) GDPR, following conclusion of a contract on Shopify for integration into the Mailchimp list, users’ first and last name, address and email address together with transaction-related information (purchase amount, time and date of purchase) will be transmitted by ShopSync to Mailchimp.
Data transferred in this way will not be stored or retained by ShopSync after synchronisation. All information synchronised between Shopify and Mailchimp is transmitted via Secure Sockets Layer (SSL) technology, and all transmitted information remains encrypted during the sync process.
The synchronisation process requires the transmission of information via a secure connection to servers hosted by Amazon Web Services in the USA.
Further data protection information on ShopSync can be found here: https://shopsync.io/privacy-policy

12) Rights of the data subject
12.1 The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:
- Right of access pursuant to Art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the envisaged storage period or criteria used to determine the storage period, the existence of a right to rectification, erasure or restriction of processing, the right to objection to processing, the right to lodge a complaint with a supervisory authority, the source of your data if it was not collected from you by us, the existence of automated decision-making, including profiling and, if applicable, meaningful information about the logic involved and the significance and the envisaged consequences of such processing, as well as your right to be informed of the safeguards pursuant to Art. 46 GDPR if your data is transferred to a third country;
- Right to rectification pursuant to Art. 16 GDPR: You have a right to rectification without undue delay of inaccurate data concerning you and/or completion of incomplete data concerning you stored by us;
- Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17, para. 1 GDPR are met. However, this right does not exist if the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- Right to restriction of processing pursuant to Article 18 GDPR: You have the right to request the restriction of the processing of your personal data while the accuracy of your data contested by you is verified, if you oppose the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you require your data to establish, exercise or defend legal claims, after we no longer need this data once its purpose has been achieved, or if you have objected for reasons relating to your particular situation, pending the verification whether our legitimate grounds override yours;
- Right to notification pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller, where this is technically feasible;
- Right to withdraw granted consent pursuant to Art. 7, para. 3 GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal of consent, we will erase the affected data without undue delay, unless further processing can take place on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal;
- Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of personal data concerning you infringes the GDPR, you have – without prejudice to any other administrative or judicial remedy – the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of habitual residence, place of work or the place of the alleged infringement.
12.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

13) Duration of storage of personal data
The duration of the storage of personal data is based on the respective legal basis, the purpose of the processing and – if relevant – additionally on the basis of the respective statutory retention period (e.g. commercial and tax law retention periods).
When processing personal data on the basis of express consent in accordance with Art. 6, para. 1 (a) GDPR, this data will be stored until the data subject withdraws their consent.
If there are statutory retention periods for data that is processed within the framework of contractual or quasi-contractual obligations on the basis of Art. 6, para. 1 (b) GDPR, this data will be routinely erased after expiry of the retention periods, provided that it is no longer required for the fulfilment or initiation of the contract and/or there is no legitimate interest on our part in further storage.
When processing personal data on the basis of Art. 6, para. 1 (f) GDPR, this data will be stored until the data subject exercises their right to object pursuant to Art. 21, para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to establish, exercise or defend legal claims.
When processing personal data for direct marketing purposes on the basis of Art. 6, para. 1 (f) GDPR, this data will be stored until the data subject exercises their right to object pursuant to Art. 21, para. 2 GDPR.
Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be erased when it is no longer necessary for the purposes for which it was collected or otherwise processed.