Privacy Policy
––––––––––––––––––––
Privacy Policy
––––––––––––––––––––
1) Introduction and Contact Information for the Data Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we provide information about how we handle your personal data when you use our website. Personal data refers to any data that can be used to personally identify you.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is atrain GmbH, Unterer Kaulberg 3, 96049 Bamberg, Germany, Tel.: +49171552 81 47, Email: products@atrain.com. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 The controller has appointed a data protection officer, who can be reached as follows: "Andreas Hein, ITs Hein GmbH, Kulmbacher Str. 27b, 95460 Bad Berneck, Phone: +499513020680, Email: datasecurity@atrain.com"
2) Data Collection When Visiting Our Website
2.1 When you use our website for informational purposes only—that is, if you do not register or otherwise provide us with information—we collect only the data that your browser transmits to the web server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website you visited
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you accessed the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the lock icon in your browser’s address bar.
3) Hosting & Content Delivery Network
3.1 Shopify
We use the system provided by the following provider to host our website and display its content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
All data collected on our website is processed on the provider’s servers. We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
3.2 Shopify
We use a content delivery network provided by the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)
Data may also be transferred to:
- Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
- Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA
This service enables us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR. We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
For data transfers to the U.S., the data recipient has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
4) Cookies
To make your visit to our website more enjoyable and to enable the use of certain features, we use cookies—small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.
If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6(1)(b) GDPR either for the performance of the contract, in accordance with Art. 6(1)(a) GDPR in the event of consent, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a user-friendly and effective design of the site visit.
You can configure your browser to be notified when cookies are set and to decide individually whether to accept them, or to exclude the acceptance of cookies in specific cases or generally.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contact
5.1 Trustpilot
We use the services of the following provider for review reminders: Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark
Based solely on your explicit consent pursuant to Art. 6(1)(a) GDPR, we transmit your email address and, if applicable, other customer data to the provider so that they can contact you via email with a review reminder.
You may revoke your consent at any time with future effect by contacting us or the provider.
We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
5.2 When you contact us (e.g., via the contact form or email), personal data is processed—exclusively for the purpose of handling and responding to your inquiry and only to the extent necessary for that purpose.
The legal basis for the processing of this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at entering into a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively resolved and provided that no statutory retention obligations preclude this.
6) Data Processing When Opening a Customer Account
In accordance with Article 6(1)(b) of the GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. You can find out which data is required to open an account by referring to the input fields of the corresponding form on our website.
You may delete your customer account at any time by sending a message to the above-mentioned address of the controller. After your customer account is deleted, your data will be deleted provided that all contracts concluded in connection with it have been fully settled, no statutory retention periods prevent this, and we no longer have a legitimate interest in continuing to store the data.
7) Use of Customer Data for Direct Marketing
7.1 Subscription to Our Email Newsletter
When you subscribe to our email newsletter, we will regularly send you information about our offers. The only required information for receiving the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For newsletter distribution, we use the so-called double opt-in procedure, which ensures that you only receive newsletters once you have explicitly confirmed your consent to receive them by clicking on a verification link sent to the email address you provided.
By activating the confirmation link, you grant us your consent to the use of your personal data in accordance with Art. 6(1)(a) GDPR. In doing so, we store your IP address as recorded by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller named at the beginning. Once you have unsubscribed, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this statement.
7.2 Zoho
Our email newsletters are sent via this provider: Zoho Corporation GmbH, Trinkausstr. 7, 40213 Düsseldorf
Data is also transferred to: Zoho Corp., USA
Based on our legitimate interest in effective and user-friendly newsletter marketing, we share the data you provided when subscribing to the newsletter with this provider in accordance with Art. 6(1)(f) GDPR so that they can handle the newsletter distribution on our behalf.
Subject to your express consent pursuant to Art. 6(1)(a) GDPR, the provider also conducts a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the newsletter’s content. In this process, device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed, but not merged with other data sets.
You may revoke your consent to newsletter tracking at any time with future effect.
We have entered into a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.
For data transfers to the U.S., the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
8) Data Processing for Order Fulfilment
To the extent necessary for the performance of the contract for delivery and payment purposes, the personal data we collect will be disclosed to the contracted shipping company and the contracted financial institution in accordance with Article 6(1)(b) of the GDPR.
If we are obligated to provide you with updates for goods containing digital elements or for digital products based on a corresponding contract, we process the contact information you provided when placing your order to personally inform you in accordance with our legal information obligations under Article 6(1)(c) of the GDPR. Your contact details will be used strictly for the specific purpose of communicating updates we are obligated to provide and will be processed by us for this purpose only to the extent necessary for the respective information.
To process your order, we also work with the following service provider(s), who assist us in whole or in part with the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
9) Online Marketing
Zoho
This website uses the software-based marketing service of the following provider to deliver and synchronize various customer management services: Zoho Corporation GmbH, Trinkausstr. 7, 40213 Düsseldorf
The service enables the automated processing of feed activities, the management of advertising in marketing channels, and the analysis of marketing campaign performance, as well as centralized email marketing and contact management.
Cookies are used to perform various functions; these are small text files stored locally in your web browser’s cache on your device and enable us to analyze your use of the website. In doing so, the cookies collect certain information, such as the IP address, location, and time of page visit.
Data may also be transferred to: Zoho Corp., USA.
All processing described above, in particular the setting of cookies to read information on the device used, is carried out only if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
Other legal bases for data processing that apply within the scope of specific service functions (such as the requirement for explicit consent pursuant to Art. 6(1)(a) GDPR when sending newsletters) remain unaffected by this.
We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the United States, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
10) Web Analytics Services
Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.
By default, when you visit the website, Google (Universal) Analytics sets cookies, which are small text files stored on your device and collect certain information. This information includes your IP address, although Google truncates the last digits to prevent direct personal identification.
The information is transmitted to Google’s servers and processed there. This may also involve transfers to Google LLC, based in the United States.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The truncated IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. The data collected through the use of Google (Universal) Analytics is stored for a period of two months and then deleted.
All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit to the site. You may revoke your consent at any time with future effect. To exercise your right of revocation, please deactivate this service using the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further legal information regarding Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites
Demographic Features
Google (Universal) Analytics uses the special “demographic features” function and can generate statistics that provide insights into the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups for marketing activities to be identified. However, the collected data cannot be attributed to a specific individual and is deleted after being stored for a period of two months.
Google Signals
As an extension to Google (Universal) Analytics, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including those related to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalized ads" feature in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
For more information about Google Signals, please visit the following link: https://support.google.com/analytics/answer/7532985?hl=de
UserIDs
As an extension to Google (Universal) Analytics, the "UserIDs" feature may be used on this website. If you have consented to the use of Google (Universal) Analytics pursuant to Art. 6(1)(a) GDPR, have created an account on this website, and log in to this account on various devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the United States, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
11) Retargeting/ Remarketing und Conversion-Tracking
11.1 Meta Pixel mit erweitertem Datenabgleich
Innerhalb unseres Online-Angebots verwenden wir im Modus des erweiterten Datenabgleichs den Dienst "Meta Pixel" des folgenden Anbieters: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Irland ("Meta")
Klickt ein Nutzer auf eine von uns auf Facebook oder Instagram geschaltete Werbeanzeige, wird mithilfe von "Meta Pixel" die URL unserer verlinkten Seite um einen Parameter erweitert. Dieser URL-Parameter wird dann nach der Weiterleitung durch ein Cookie, das unsere verlinkte Seite selbst setzt, in den Browser des Nutzers eingetragen. Darüber hinaus erfasst dieses Cookie spezifische Kundendaten wie z.B. die E-Mail-Adresse, die wir auf unserer mit der Facebook- oder Instagram-Anzeige verknüpften Webseite bei Vorgängen wie Kaufabschlüssen, Kontoanmeldungen oder Registrierungen erheben (erweiterter Datenabgleich). Das Cookie wird dann ausgelesen und ermöglicht die Übermittlung der Daten einschließlich der spezifischen Kundendaten an Meta.
Wir verwenden "Meta Pixel" mit erweitertem Datenabgleich, um unsere Werbeanzeigen (sog. "Ads") auf Facebook und/oder Instagram effektiver zu gestalten und sicherzustellen, dass sie den Interessen der Nutzer entsprechen oder bestimmte Merkmale aufweisen (z.B. Interessen an bestimmten Themen oder Produkten, die anhand der besuchten Webseiten ermittelt werden), die wir an Meta übermitteln (sog. "Custom Audiences").
Darüber hinaus analysieren wir die Wirksamkeit unserer Werbeanzeigen, indem wir verfolgen, ob Nutzer nach dem Anklicken einer Werbeanzeige auf unsere Webseite weitergeleitet wurden (Conversion). Im Vergleich zur Standardvariante von "Meta Pixel" hilft uns die Funktion des erweiterten Datenabgleichs, die Wirksamkeit unserer Werbekampagnen besser zu messen, indem mehr zugeordnete Conversions erfasst werden.
Alle übermittelten Daten werden von Meta gespeichert und verarbeitet, so dass eine Zuordnung zum jeweiligen Nutzerprofil möglich ist und Meta die Daten für eigene Werbezwecke gemäß den Datenverwendungsrichtlinien von Meta (https://www.facebook.com/about/privacy/) verwenden kann. Die Daten können es Meta sowie seinen Partnern ermöglichen, Anzeigen auf und außerhalb von Facebook zu schalten.
Alle oben beschriebenen Verarbeitungen, insbesondere das Setzen von Cookies für das Auslesen von Informationen auf dem verwendeten Endgerät, werden nur dann vollzogen, wenn Sie uns gemäß Art. 6 Abs. 1 lit. a DSGVO dazu Ihre ausdrückliche Einwilligung erteilt haben. Sie können Ihre erteilte Einwilligung jederzeit mit Wirkung für die Zukunft widerrufen, indem Sie diesen Dienst in dem auf der Webseite bereitgestellten „Cookie-Consent-Tool“ deaktivieren.
Wir haben mit dem Anbieter einen Auftragsverarbeitungsvertrag geschlossen, der den Schutz der Daten unserer Seitenbesucher sicherstellt und eine unberechtigte Weitergabe an Dritte untersagt.
Die durch Meta erzeugten Informationen werden in der Regel an einen Server von Meta übertragen und dort gespeichert; in diesem Zusammenhang kann es auch zu einer Übertragung an Server von Meta Platforms Inc. in den USA kommen.
Für Datenübermittlungen in die USA hat sich der Anbieter dem EU-US-Datenschutzrahmen (EU-US Data Privacy Framework) angeschlossen, das auf Basis eines Angemessenheitsbeschlusses der Europäischen Kommission die Einhaltung des europäischen Datenschutzniveaus sicherstellt.
11.2 Google Ads Conversion-Tracking
Diese Website nutzt das Online-Werbeprogramm "Google Ads" und im Rahmen von Google Ads das Conversion-Tracking der Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland („Google“).
Wir nutzen das Angebot von Google Ads, um mit Hilfe von Werbemitteln (sogenannten Google Adwords) auf externen Webseiten auf unsere attraktiven Angebote aufmerksam zu machen. Wir können in Bezug zu den Daten der Werbekampagnen ermitteln, wie erfolgreich die einzelnen Werbemaßnahmen sind. Wir verfolgen damit das Anliegen, Ihnen Werbung anzuzeigen, die für Sie von Interesse ist, unsere Website für Sie interessanter zu gestalten und eine faire Berechnung der anfallenden Werbekosten zu erreichen.
Das Cookie für Conversion-Tracking wird gesetzt, wenn ein Nutzer auf eine von Google geschaltete Ads-Anzeige klickt. Bei Cookies handelt es sich um kleine Textdateien, die auf Ihrem Endgerät abgelegt werden. Diese Cookies verlieren in der Regel nach 30 Tagen ihre Gültigkeit und dienen nicht der persönlichen Identifizierung. Besucht der Nutzer bestimmte Seiten dieser Website und ist das Cookie noch nicht abgelaufen, können Google und wir erkennen, dass der Nutzer auf die Anzeige geklickt hat und zu dieser Seite weitergeleitet wurde. Jeder Google Ads-Kunde erhält ein anderes Cookie. Cookies können somit nicht über die Websites von Google Ads-Kunden nachverfolgt werden. Die mithilfe des Conversion-Cookies eingeholten Informationen dienen dazu, Conversion-Statistiken für Google Ads-Kunden zu erstellen, die sich für Conversion-Tracking entschieden haben. Die Kunden erfahren die Gesamtanzahl der Nutzer, die auf ihre Anzeige geklickt haben und zu einer mit einem Conversion-Tracking-Tag versehenen Seite weitergeleitet wurden. Sie erhalten jedoch keine Informationen, mit denen sich Nutzer persönlich identifizieren lassen.
Im Rahmen der Nutzung von Google Ads kann es auch zu einer Übermittlung von personenbezogenen Daten an die Server der Google LLC. in den USA kommen.
Details zu den durch Google Ads Conversion Tracking angestoßenen Verarbeitungen und zum Umgang Googles mit Daten von Websites finden Sie hier: https://policies.google.com/technologies/partner-sites
Alle oben beschriebenen Verarbeitungen, insbesondere das Setzen von Cookies für das Auslesen von Informationen auf dem verwendeten Endgerät, werden nur dann vollzogen, wenn Sie uns gemäß Art. 6 Abs. 1 lit. a DSGVO dazu Ihre ausdrückliche Einwilligung erteilt haben. Sie können Ihre erteilte Einwilligung jederzeit mit Wirkung für die Zukunft widerrufen, indem Sie diesen Dienst in dem auf der Webseite bereitgestellten „Cookie-Consent-Tool“ deaktivieren.
Sie können dem Setzen von Cookies durch Google Ads Conversion-Tracking darüber hinaus dauerhaft widersprechen, indem Sie das unter folgendem Link verfügbare Browser-Plug-in von Google herunterladen und installieren:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de
Um Nutzern, deren Daten wir im Rahmen von geschäftlichen oder geschäftsähnlichen Beziehungen erhalten haben, noch interessengerechter werblich anzusprechen, nutzen wir im Rahmen von Google Ads eine Funktion zum Kundenabgleich. Hierzu übermitteln wir eine oder mehrere Dateien mit aggregierten Kundendaten (vor allem Mailadressen und Telefonnummern) auf elektronischem Weg an Google. Google erhält hierbei keinen Zugriff auf Klardaten, sondern verschlüsselt die Informationen in den Kundendateien im Wege des Übermittlungsprozesses automatisch mittels eines speziellen Algorithmus. Die verschlüsselten Informationen können von Google sodann lediglich verwendet werden, um sie bestehenden Google-Konten zuzuordnen, die die Betroffenen eingerichtet haben. Dies ermöglicht ein Ausspielen von personalisierter Werbung über alle mit dem jeweiligen Google-Konto verknüpften Google-Dienste.
Die Übermittlung von Kundendaten an Google erfolgt ausschließlich, wenn Sie uns hierzu eine ausdrückliche Einwilligung gemäß Art. 6 Abs. 1 lit. a DSGVO erteilt haben. Diese Einwilligung können Sie uns gegenüber jederzeit mit Wirkung für die Zukunft widerrufen. Weitere Informationen zu den Datenschutzmaßnahmen von Google in Bezug auf die Kundenabgleichs-Funktion finden sich hier: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Googles Datenschutzbestimmungen sind hier einsehbar: https://business.safety.google/intl/de/privacy/ und https://www.google.de/policies/privacy/
Für Datenübermittlungen in die USA hat sich der Anbieter dem EU-US-Datenschutzrahmen (EU-US Data Privacy Framework) angeschlossen, das auf Basis eines Angemessenheitsbeschlusses der Europäischen Kommission die Einhaltung des europäischen Datenschutzniveaus sicherstellt.
12) Site features
Google Web Fonts
This site uses so-called web fonts from the following provider to ensure consistent font display: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
When you visit a page, your browser loads the required web fonts into its cache to display text and fonts correctly and establishes a direct connection to the provider’s servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.
Data may also be transmitted to: Google LLC, USA
The processing of personal data in connection with establishing a connection with the font provider is only carried out if you have given us your explicit consent to do so in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect by deactivating this service via the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For data transfers to the U.S., the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/
13) Tools and Miscellaneous
Cookie Consent Tool
This website uses a so-called “Cookie Consent Tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when they visit the page in the form of an interactive user interface, where consent for specific cookies and/or cookie-based applications can be granted by checking boxes. When using the tool, all cookies/services requiring consent are loaded only if the respective user grants the corresponding consent by checking the boxes. This ensures that such cookies are set on the user’s respective device only if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context.
If, in individual cases, the storage, classification, or logging of cookie settings does result in the processing of personal data (such as the IP address), this is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and, consequently, in the legally compliant design of our website.
Another legal basis for the processing is Art. 6(1)(c) GDPR. As the controller, we are subject to the legal obligation to make the use of technically non-essential cookies contingent upon the user’s consent.
Where necessary, we have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further information about the operator and the settings options for the cookie consent tool can be found directly in the corresponding user interface on our website.
14) Rights of the Data Subject
14.1 Under applicable data protection law, you have the following rights as a data subject (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data; please refer to the cited legal basis for the respective conditions for exercising these rights:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to be informed pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent pursuant to Art. 7(3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
14.2 RIGHT TO OBJECT
IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.
15) Duration of storage of personal data
The duration of storage of personal data is determined based on the respective legal basis, the purpose of processing, and—where applicable—the relevant statutory retention period (e.g., retention periods under commercial and tax law).
When processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, the data in question will be stored until you withdraw your consent.
If statutory retention periods exist for data processed within the scope of contractual or quasi-contractual obligations based on Article 6(1)(b) of the GDPR, this data is routinely deleted upon expiration of the retention periods, provided they are no longer necessary for the performance of the contract or for entering into a contract and/or we no longer have a legitimate interest in further storage.
When processing personal data based on Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
When processing personal data for the purpose of direct marketing based on Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(2) of the GDPR.
Unless otherwise specified in the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.