Privacy policy
1) Information about the collection of personal data and contact details of the
controller
1.1 Thank you for visiting our website and for your interest. In the following,
we inform you about the handling of your personal data when using our website.
Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website within the
meaning of the General Data Protection Regulation (GDPR) is IAMSTRONGER
Nutrition GmbH, Am Kaiserkai 31, 20457 Hamburg, Germany, tel.: 015224101001,
email: verwaltung@iamstronger-nutrition.de. The controller of personal data is
the natural or legal person who alone or jointly with others decides on the
purposes and means of processing personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect
the transmission of personal data and other confidential content (e.g. orders
or enquiries for the controller). You can recognise an encrypted connection by
the character string ‘https://’ and the padlock symbol in your browser address
bar.
2) Data collection when visiting our website
When using our website for information purposes only, i.e. if you do not
register or otherwise provide us with information, we only collect data that
your browser transmits to our server (known as ‘server log files’). When you
visit our website, we collect the following data, which is technically
necessary for us to display the website to you:
- Our website visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymous form)
The processing takes place pursuant to Art. 6, para. 1 (f) GDPR on the basis of
our legitimate interest in improving the stability and functionality of our
website. No transfer or other use of the data takes place. However, we reserve
the right to subsequently check the server log files if there are concrete
indications of illegal use.
3) Hosting
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited,
Victoria Buildings, 2nd floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland
(‘Shopify’), for the purpose of hosting and displaying the online shop on the
basis of processing on our behalf. All data collected on our website is
processed on Shopify’s servers. As part of Shopify’s aforementioned services,
data may also be transmitted for the purposes of further processing to Shopify
Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA)
Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. In the event of the
transfer of data to Shopify Inc. in Canada, the appropriate level of data
protection is guaranteed by an adequacy decision by the European Commission.
Further information on Shopify’s data protection can be found on the following
website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than the aforementioned Shopify servers
only takes place in the context explained below.
4) Cookies
In order to make your visit to our website enjoyable and to enable the use of
certain functions, we use what are known as cookies on various pages. These are
small text files that are stored on your device. Some of the cookies we use are
deleted after the end of the browser session, i.e. after closing your browser
(session cookies). Other cookies remain on your device and make it possible to
recognise your browser on your next visit (persistent cookies). If cookies are
set, they collect and process certain user information, such as browser and
location data and IP address values to an individual extent. Persistent cookies
are automatically deleted after a specified period of time, which varies
depending on the cookie. The duration of the respective cookie storage can be
found in the overview of the cookie settings of your web browser.
In some cases, the cookies are used to simplify the ordering process by storing
settings (e.g. remembering the contents of a virtual shopping basket for a
later visit to the website). If personal data is also processed by individual
cookies used by us, the processing either takes place pursuant to Art. 6, para.
1 (b) GDPR for the execution of the contract, pursuant to Art. 6, para. 1
(a) GDPR in the case of provided consent or pursuant to Art. 6, para. 1 (f)
GDPR to safeguard our legitimate interest in ensuring the best possible
functionality of the website and a customer-friendly and effective page design.
Please note that you can set your browser so that you are informed about the
setting of cookies and can decide individually on their acceptance or reject
cookies for certain cases or in general. Each browser differs in the way it
manages cookie settings. This is described in the help menu of each browser,
which explains how to change your cookie settings. These can be found for the
respective browsers via the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our website
may be limited.
5) Contact
Personal data is collected when contacting us (e.g. via contact form or email).
What data is collected in the case of a contact form can be seen in the
respective contact form. This data is stored and used exclusively for the
purpose of answering your request or for getting in contact and the associated
technical administration. The legal basis for the processing of this data is
our legitimate interest in answering your request pursuant to Art. 6, para. 1
(f) GDPR. If your contact is for the purpose of concluding a contract, the
additional legal basis for the processing is Art. 6, para. 1 (b) GDPR. Your
data will be deleted once your request has been processed. This is the case if
it can be inferred from the circumstances that the matters in question have
been conclusively clarified and provided that there are no statutory retention
obligations to the contrary.
6) Data processing when opening a customer account and for contract processing
Pursuant to Art. 6, para. 1 (b) GDPR, personal data will continue to be
collected and processed if you provide us with it for the execution of a
contract or when opening a customer account. What data is collected can be seen
from the respective input forms. Deletion of your customer account is possible
at any time and can be requested by sending a message to the controller address
listed above. We store and use the data provided by you for contract
processing. After completion of the contract or deletion of your customer
account, your data will be blocked pursuant to retention periods relating to
tax law and commercial law and erased after expiry of these periods, unless you
have expressly consented to further use of your data or a legally permitted
further use of data has been reserved by us.
7) Use of customer data for direct marketing
7.1 Subscription to our email newsletter
If you subscribe to our email newsletter, we will regularly send you
information about our offers. The only information required for us to send the
newsletter is your email address. The provision of further data is voluntary
and will be used to address you personally. We use what is known as the double
opt-in procedure for delivery of the newsletter. This means that we will only
send you an email newsletter if you have expressly confirmed to us that you
consent to receiving newsletters. We will then send you a confirmation email
with which you will be asked to confirm by clicking on a corresponding link
that you want to receive the newsletter in the future.
By activating the confirmation link, you give us your consent for the use of
your personal data pursuant to Art. 6, para. 1 (a) GDPR. When you subscribe to
the newsletter, we store your IP address entered by the Internet Service
Provider (ISP) as well as the date and time of subscription in order to be able
to trace a potential misuse of your email address at a later date. The data
collected by us when you subscribe to the newsletter will be used exclusively
for the purpose of advertising by means of the newsletter. You can unsubscribe
from the newsletter at any time via the link provided in the newsletter for
this purpose or by sending a corresponding message to the controller named
above. After unsubscribing, your email address will be immediately deleted from
our newsletter distribution list, unless you have expressly consented to
further use of your data or we have reserved the right to further use of your
data, which is permitted by law and about which we inform you in this
declaration.
7.2 Newsletter dispatch via KLICK-TIPP
The dispatch of our email newsletters takes place via the technical service
provider KLICK-TIPP Limited, 15 Cambridge Court, 210 Shepherd’s Bush Road,
London W6 7NJ, United Kingdom, to whom we pass on your data provided when
subscribing to the newsletter. This transfer takes place pursuant to Art. 6,
para. 1 (f) GDPR and serves our legitimate interest in the use of a
promotionally effective, secure and user-friendly newsletter system. The data
you enter for the purpose of subscribing to the newsletter (e.g. email address)
is stored on KLICK-TIPP’s servers in the EU.
KLICK-TIPP uses this information to send and statistically evaluate the
newsletter on our behalf. The emails sent contain what are known as web beacons
or tracking pixels, which represent one-pixel image files that are stored on
our website, for the purposes of this evaluation. This makes it possible to
determine whether a newsletter message has been opened and which links have
been clicked, if any. In addition, technical information is collected (e.g.
time of access, IP address, browser type and operating system). The data is
collected exclusively in pseudonymised form and is not linked to your other
personal data, and can therefore not be associated with a particular
individual. This data is used exclusively for statistical analysis of
newsletter campaigns. The results of these analyses can be used to better adapt
future newsletters to the interests of the recipients. If you wish to object to
data analysis for statistical evaluation purposes, you must unsubscribe from
the newsletter.
Furthermore, KLICK-TIPP may use this data itself pursuant to Art. 6, para. 1
(f) GDPR on the basis of its own legitimate interest in suitable design and
optimisation of the service, as well as for market research purposes, for
example to determine in which countries the recipients are based. However, KLICK-TIPP
does not use the data of our newsletter recipients to write to them itself or
pass it on to third parties.
We have concluded an order processing contract with KLICK-TIPP, with which we
oblige KLICK-TIPP to protect the data of our customers and not to pass it on to
third parties.
The data protection provisions of KLICK-TIPP can be viewed here:
https://www.klick-tipp.com/datenschutzerkl%C3%A4rung
8) Data processing for order processing
8.1 To process your order, we work together with the following service providers,
who support us in whole or in part in the execution of concluded contracts.
Certain personal data will be transmitted to these service providers in
accordance with the following information.
The personal data collected by us will be passed on to the transport company
commissioned with the delivery as part of the contract processing, insofar as
this is necessary for the delivery of the goods. We pass on your payment data
to the commissioned bank as part of the payment processing, insofar as this is necessary
for that purpose. If payment service providers are used, we will expressly
inform you of this below. The legal basis for the transfer of data is Art. 6,
para. 1 (b) GDPR.
8.2 Use of special service providers for order processing and completion
- Shopify Order Printer
For the accounting and logistical organisation of orders, we use the ‘Order
Printer’ service from Shopify International Limited, Victoria Buildings, 2nd
floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (‘Shopify’), for the
automated creation of invoices, receipts, shipping labels and other business
documents. If personal order data is processed via the service for the
preparation of these documents, the processing takes place pursuant to Art. 6,
para. 1 (b) GDPR exclusively for the proper processing of online orders.
9) Use of social media: Social Plugins
Facebook as a standard plugin
On our website, Social Plugins (‘plugins’) from the social network Facebook,
which is operated by facebook, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
(‘Facebook’), are used. The plugins are marked with a Facebook logo or the
wording ‘Social Plugin from Facebook’ or ‘Facebook Social Plugin’. An overview
of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins
If you visit a page on our website that contains a plugin, your browser
establishes a direct connection to the Facebook servers. The content of the
plugin is transmitted by Facebook directly to your browser and integrated into
the page. Through this integration, Facebook receives the information that your
browser has accessed the corresponding page of our website, even if you do not
have a Facebook profile or are not currently logged in to Facebook. This
information (including your IP address) is transmitted directly from your
browser to a Facebook, Inc. server in the USA and stored there.
If you are logged in to Facebook, Facebook can directly associate your visit to
our website with your Facebook profile. If you interact with the plugins, for
example by clicking the ‘Like’ button or posting a comment, this information is
also transmitted directly to a Facebook server and stored there. The
information is also published on your Facebook profile and displayed to your
Facebook friends.
The data processing operations described are carried out pursuant to Art. 6,
para. 1 (f) GDPR on the basis of Facebook’s legitimate interest in the display
of personalised advertising, in order to inform other users of the social
network about your activities on our website, and for the suitable design of
the Facebook service.
If you do not want Facebook to assign the data collected via our website
directly to your Facebook profile, you must log out of Facebook before visiting
our website. You can also object to the loading of the Facebook plugins and
thus the data processing described above in future with add-ons for your
browser, e.g. with the script blocker ‘NoScript’ (http://noscript.net/).
The purpose and scope of the data collection and the further processing and use
of the data by Facebook as well as your rights in this regard and setting
options for the protection of your privacy can be found in Facebook’s Privacy
Policy:
https://www.facebook.com/policy.php
10) Online marketing
10.1 Facebook Pixel for the creation of Custom Audiences (with cookie consent
tool)
Facebook Pixel from the social network Facebook, which is operated by Facebook
Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (‘Facebook’), is used
within our online offering.
If a user clicks on an advertisement placed by us that is displayed on
Facebook, additional text is appended to the URL of our linked page by Facebook
Pixel. Insofar as our site allows the sharing of data with Facebook via Pixel,
this URL parameter is written into the user’s browser via a cookie, which our
linked page itself sets. This cookie is then read by Facebook Pixel and allows
the data to be forwarded to Facebook.
With the help of Facebook Pixel, Facebook is able to determine the visitors of our
online offering as a target group for the presentation of advertisements
(‘Facebook ads’). Accordingly, we use Facebook Pixel to only display Facebook
ads placed by us to those Facebook users who have also shown an interest in our
online offering or who have certain characteristics (e.g. interest in certain
topics or products that are determined on the basis of websites visited) that
we transmit to Facebook (‘Custom Audiences’). With the help of Facebook Pixel,
we also want to ensure that our Facebook ads are potentially of interest to
users and are not annoying. In this way, we can further evaluate the
effectiveness of Facebook ads for statistical and market research purposes by
tracking whether users were redirected to our website after clicking on a Facebook
ad (‘conversion’).
The data collected is anonymous to us, so it does not allow us to draw any
conclusions about the identity of the users. However, the data is stored and
processed by Facebook, meaning that a connection to the respective user profile
is possible and Facebook can use the data for its own advertising purposes,
pursuant to the Facebook Privacy Policy
(https://www.facebook.com/about/privacy/). The data may enable Facebook and its
partners to place advertisements on and off Facebook.
The data processing associated with the use of Facebook Pixel takes place
exclusively with your express consent pursuant to Art. 6, para. 1 (a) GDPR. You
can withdraw your consent at any time with effect for the future. To exercise
your withdrawal of consent, remove the check mark next to the setting for
‘Facebook Pixel’ in the ‘Cookie Consent Tool’ integrated into the website.
10.2 Google AdSense
This website uses Google AdSense, a web advertising service from Google Ireland
Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’).
Google AdSense uses ‘cookies’, which are text files that are stored on your
computer and that enable analysis of your use of the website. In addition,
Google AdSense uses what are known as ‘web beacons’ (small invisible graphics)
to collect information, through the use of which simple actions such as visitor
traffic on the website can be recorded, collected and evaluated. The
information gathered by the cookie and/or web beacon (including your IP
address) about your use of this website is usually transmitted to a Google
server and stored there. Transmission to the servers of Google LLC. in the USA
may also take place.
Google uses the information obtained in this way to evaluate your usage
behaviour with regard to the AdSense ads. The IP address transmitted by your
browser as part of Google AdSense will not be merged with other Google data.
The information collected by Google may be transferred to third parties if this
is required by law and/or if third parties process this data on behalf of
Google.
The described processing of data takes place pursuant to Art. 6, para. 1 (f)
GDPR for the purpose of targeting of advertising to the user by advertising
third parties, whose advertisements are displayed on the basis of the evaluated
user behaviour on this website. This processing also serves our financial
interest in exploiting the economic potential of our website by displaying
personalised third-party advertising content for a fee.
You can find further information about Google’s data protection provisions on
the following website: https://www.google.de/policies/privacy/
You can permanently deactivate cookies for advertising specifications by
preventing them with a corresponding setting in your browser software or you
can download and install the browser plugin available via the following link:
https://www.google.com/settings/ads/plugin?hl=en
Please note that it may not be possible to use certain functions of this
website or they may only be usable to a limited extent if you have deactivated
the use of cookies.
Insofar as it is legally required, we have obtained your consent pursuant to
Art. 6, para. 1 (a) GDPR for the processing of your data described above. You
can withdraw your consent at any time with effect for the future. In order to
exercise your withdrawal of consent, please use the above-mentioned method to
make an objection.
10.3 Use of Google Ads conversion tracking
This website uses the online advertising program Google Ads and, within the
framework of Google Ads, the conversion tracking of Google Ireland Limited,
Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). We use the
service offered by Google Ads to draw attention to our attractive offers with
the help of advertising media (Google Adwords) on external websites. We can
determine how successful the individual advertising measures are on the basis
of the data relating to the advertising campaigns. Our aim in this context is
to show you advertising that is of interest to you, to make our website more interesting
for you and to reach a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by
Google Ads. Cookies are small text files that are stored on your device. These
cookies usually lose their validity after 30 days and are not used for personal
identification. If the user visits certain pages of this website and the cookie
has not yet expired, we and Google can recognise that the user clicked on the
ad and was redirected to this page. Each Google Ads customer receives a
different cookie. Cookies can therefore not be tracked via the websites of
Google Ads customers. The information collected using the conversion cookie is
used to create conversion statistics for Google Ads customers who have opted
for conversion tracking. Customers learn the total number of users who clicked
on their ad and were redirected to a page with a conversion tracking tag.
However, they do not receive any information that personally identifies users.
If you do not wish to participate in tracking, you can block this use by
deactivating the Google conversion tracking cookie via your internet browser
under ‘User Settings’. You will then not be included in the conversion tracking
statistics. We use Google Ads on the basis of our legitimate interest in
targeted advertising pursuant to Art. 6, para. 1 (f) GDPR. As part of the use
of Google Ads, personal data may also be transmitted to the servers of Google
LLC. in the USA.
You can find further information about Google’s data protection provisions on
the following website: https://www.google.de/policies/privacy/
You can permanently deactivate cookies for Google Ads conversion tracking by
downloading and installing the browser plugin available from Google via the
following link:
https://www.google.com/settings/ads/plugin?hl=de
Please note that it may not be possible to use certain functions of this
website or they may only be usable to a limited extent if you have deactivated
the use of cookies.
Insofar as it is legally required, we have obtained your consent pursuant to
Art. 6, para. 1 (a) GDPR for the processing of your data described above. You
can withdraw your consent at any time with effect for the future. To exercise
your withdrawal of consent, deactivate this service in the ‘Cookie Consent
Tool’ provided on the website or alternatively use the above-mentioned method
to make an objection.
11) Tools and miscellaneous
11.1 Lexoffice
We use the service of the cloud-based accounting software ‘lexoffice’ from
Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg to carry
out accounting.
Lexoffice processes incoming and outgoing invoices as well as, if necessary,
the bank transactions of our company in order to automatically record invoices,
match them to the transactions and generate financial accounting in a
semi-automated process.
Insofar as personal data is also processed in this context, the processing is
carried out pursuant to Art. 6, para. 1 (f) GDPR on the basis of our legitimate
interest in efficient organisation and documentation of our business processes.
Further information on lexoffice, the automated processing of data and the data
protection provisions can be found on https://www.lexoffice.de/datenschutz/
11.2 Google web fonts
For the uniform presentation of fonts, this site uses web fonts provided by
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
(‘Google’). When you access a page, your browser loads the required web fonts
into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google’s servers.
In this context, transmission of personal data to the servers of Google LLC. in
the USA may also take place. In this way, Google becomes aware that our website
has been accessed via your IP address. The use of Google web fonts is in the
interest of a uniform and appealing presentation of our online offering. This
constitutes a legitimate interest within the meaning of Art. 6, para. 1 (f)
GDPR. If your browser does not support web fonts, a standard font will be used
by your computer.
Further information on Google web fonts can be found on
https://developers.google.com/fonts/faq and in Google’s Privacy Policy:
https://www.google.com/policies/privacy/
11.3 Google reCAPTCHA
On this website, we also use the reCAPTCHA function from Google Ireland
Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). This
function is primarily used to distinguish whether an input is made by a natural
person or improperly by machine and automated processing. The service includes
the sending to Google of the IP address and, if applicable, other data required
by Google for the reCAPTCHA service and is carried out pursuant to Art. 6,
para. 1 (f) GDPR on the basis of our legitimate interest in determining
individual responsibility on the Internet and avoiding misuse and spam. As part
of the use of Google reCAPTCHA, personal data may also be transmitted to the
servers of Google LLC. in the USA.
Further information on Google reCAPTCHA and Google’s Privacy Policy can be
viewed at: https://www.google.com/intl/de/policies/privacy/
Insofar as it is legally required, we have obtained your consent pursuant to
Art. 6, para. 1 (a) GDPR for the processing of your data described above. You
can withdraw your consent at any time with effect for the future. In order to
exercise your withdrawal of consent, please use the above-mentioned method to
make an objection.
11.4 ShopSync for Shopify
This website uses the Shopify app ‘ShopSync’ from ShopSync LLC, PO Box 252,
Jefferson City, TN 37760, USA.
With the help of ShopSync, the newsletter service Mailchimp is synchronised
with our Shopify account in such a way that, on the one hand, updates in
Mailchimp’s email lists (such as an opt-out by a newsletter recipient) are
automatically stored on Shopify and, on the other hand, new contact data
generated by contracts on Shopify is automatically transferred to Mailchimp’s
email lists.
In the former case, data processing is carried out pursuant to Art. 6, para. 1
(f) GDPR on the basis of our legitimate interest in the effective and
cross-system maintenance of advertising addressee files and the efficient
observance of legally significant status changes.
In the latter case, exclusively on the basis of express user consent pursuant
to Art. 6, para. 1 (a) GDPR, following conclusion of a contract on Shopify for
integration into the Mailchimp list, users’ first and last name, address and
email address together with transaction-related information (purchase amount,
time and date of purchase) will be transmitted by ShopSync to Mailchimp.
Data transferred in this way will not be stored or retained by ShopSync after
synchronisation. All information synchronised between Shopify and Mailchimp is
transmitted via Secure Sockets Layer (SSL) technology, and all transmitted
information remains encrypted during the sync process.
The synchronisation process requires the transmission of information via a
secure connection to servers hosted by Amazon Web Services in the USA.
Further data protection information on ShopSync can be found here:
https://shopsync.io/privacy-policy
12) Rights of the data subject
12.1 The applicable data protection law grants you comprehensive data subject
rights (rights of information and intervention) vis-à-vis the controller with
regard to the processing of your personal data, about which we inform you
below:
- Right of access pursuant to Art. 15 GDPR: In particular, you have a right to
information about your personal data processed by us, the purposes of the
processing, the categories of personal data processed, the recipients or
categories of recipients to whom your data has been or will be disclosed, the
envisaged storage period or criteria used to determine the storage period, the
existence of a right to rectification, erasure or restriction of processing,
the right to objection to processing, the right to lodge a complaint with a
supervisory authority, the source of your data if it was not collected from you
by us, the existence of automated decision-making, including profiling and, if
applicable, meaningful information about the logic involved and the
significance and the envisaged consequences of such processing, as well as your
right to be informed of the safeguards pursuant to Art. 46 GDPR if your data is
transferred to a third country;
- Right to rectification pursuant to Art. 16 GDPR: You have a right to
rectification without undue delay of inaccurate data concerning you and/or
completion of incomplete data concerning you stored by us;
- Right to erasure pursuant to Art. 17 GDPR: You have the right to request the
erasure of your personal data if the requirements of Art. 17, para. 1 GDPR are
met. However, this right does not exist if the processing is necessary for
exercising the right to freedom of expression and information, for compliance
with a legal obligation, for reasons of public interest or for the
establishment, exercise or defence of legal claims;
- Right to restriction of processing pursuant to Article 18 GDPR: You have the
right to request the restriction of the processing of your personal data while
the accuracy of your data contested by you is verified, if you oppose the
erasure of your data due to unlawful data processing and instead request the
restriction of the processing of your data, if you require your data to
establish, exercise or defend legal claims, after we no longer need this data
once its purpose has been achieved, or if you have objected for reasons
relating to your particular situation, pending the verification whether our
legitimate grounds override yours;
- Right to notification pursuant to Art. 19 GDPR: If you have asserted the
right to rectification, erasure or restriction of processing against the
controller, the controller is obliged to inform all recipients to whom the
personal data concerning you has been disclosed of this rectification or
deletion of the data or restriction of processing, unless this proves
impossible or involves disproportionate effort. You have the right to be
informed about these recipients.
- Right to data portability pursuant to Art. 20 GDPR: You have the right to
receive your personal data that you have provided to us in a structured,
commonly used and machine-readable format or to request transmission to another
controller, where this is technically feasible;
- Right to withdraw granted consent pursuant to Art. 7, para. 3 GDPR: You have
the right to withdraw your consent to the processing of data at any time with
effect for the future. In the event of withdrawal of consent, we will erase the
affected data without undue delay, unless further processing can take place on
a legal basis for processing without consent. The withdrawal of consent shall
not affect the lawfulness of processing carried out on the basis of the consent
before its withdrawal;
- Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the
processing of personal data concerning you infringes the GDPR, you have –
without prejudice to any other administrative or judicial remedy – the right to
lodge a complaint with a supervisory authority, in particular in the Member
State of your place of habitual residence, place of work or the place of the
alleged infringement.
12.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS ON
THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME
TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO
YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA
CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN
DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE
YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO
ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU
HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA
CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE
OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA
CONCERNED FOR DIRECT MARKETING PURPOSES.
13) Duration of storage of personal data
The duration of the storage of personal data is based on the respective legal basis,
the purpose of the processing and – if relevant – additionally on the basis of
the respective statutory retention period (e.g. commercial and tax law
retention periods).
When processing personal data on the basis of express consent in accordance
with Art. 6, para. 1 (a) GDPR, this data will be stored until the data subject
withdraws their consent.
If there are statutory retention periods for data that is processed within the
framework of contractual or quasi-contractual obligations on the basis of Art.
6, para. 1 (b) GDPR, this data will be routinely erased after expiry of the
retention periods, provided that it is no longer required for the fulfilment or
initiation of the contract and/or there is no legitimate interest on our part
in further storage.
When processing personal data on the basis of Art. 6, para. 1 (f) GDPR, this
data will be stored until the data subject exercises their right to object
pursuant to Art. 21, para. 1 GDPR, unless we can demonstrate compelling
legitimate grounds for the processing which override the interests, rights and
freedoms of the data subject, or the processing serves to establish, exercise
or defend legal claims.
When processing personal data for direct marketing purposes on the basis of
Art. 6, para. 1 (f) GDPR, this data will be stored until the data subject
exercises their right to object pursuant to Art. 21, para. 2 GDPR.
Unless otherwise stated in the other information in this declaration on
specific processing situations, stored personal data will be erased when it is
no longer necessary for the purposes for which it was collected or otherwise
processed.