Privacy Policy

A. Right to withdraw consent

Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to withdraw this consent at any time with effect for the future, pursuant to Art. 7(3) GDPR. The lawfulness of the data processing carried out up to the time of withdrawal remains unaffected. Storage of data for billing and accounting purposes is not affected by withdrawal.

B. Right of access

Pursuant to Art. 15 GDPR, you have the right to request confirmation from us as to whether we process your personal data. If so, you have the right to access this data, including the purposes of processing, categories of processed data, recipients or categories of recipients to whom the data has been or will be disclosed, the planned storage period or the criteria for determining it, the existence of the right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the origin of the data if it was not collected from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved as well as the significance and envisaged consequences of such processing for you, and your right to be informed of the safeguards pursuant to Art. 46 GDPR for transfers to third countries.

C. Right to rectification

You have the right, pursuant to Art. 16 GDPR, to request the correction of inaccurate personal data concerning you and/or the completion of incomplete data at any time.

D. Right to erasure

You have the right, pursuant to Art. 17 GDPR, to request the deletion of your personal data if one of the following reasons applies:

1. Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
2. You withdraw your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
3. You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for processing, or you object pursuant to Art. 21(2) GDPR.
4. The personal data has been processed unlawfully.
5. We are legally obliged to delete the personal data under Union law or the law of the Member State to which we are subject.
6. The personal data was collected in relation to the offer of information society services pursuant to Art. 8(1) GDPR.

This right may be restricted if processing is necessary:

1. to comply with a legal obligation under Union or Member State law, or to perform a task carried out in the public interest or in the exercise of official authority;
2. to comply with a legal obligation under Union or Member State law, or to perform a task in the public interest or in the exercise of official authority entrusted to us;
3. for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
4. for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR, insofar as this right would likely render impossible or seriously impair the achievement of the objectives of that processing; or
5. for the establishment, exercise, or defense of legal claims.

If we have made your personal data public and are obliged to delete it, we will take appropriate measures, taking into account available technology and implementation costs, to inform other controllers processing the data that you, as a data subject, have requested the deletion of all links to, or copies or replications of, such personal data.

E. Right to restriction of processing

Pursuant to Art. 18 GDPR, you have the right to request the restriction (blocking) of the processing of your personal data. To exercise this right, you can contact us at any time. The contact details can be found in the legal notice. Restriction of processing may be requested in the following cases:

1. If you contest the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request restriction of processing.
2. If the processing of your personal data was/is unlawful, you may request restriction of processing instead of deletion.
3. If we no longer need your personal data, but you need it for the establishment, exercise, or defense of legal claims, you have the right to request restriction instead of deletion.
4. If you have lodged an objection pursuant to Art. 21(1) GDPR, a balancing of interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request restriction.

After restriction, your personal data may generally only be processed with your consent. Exceptions apply in certain legally defined cases, such as for the establishment of legal claims or to protect public interests.

F. Right to be informed

If you have exercised your right to rectification, erasure, or restriction of processing, we are obliged pursuant to Art. 19 GDPR to inform all recipients to whom the data has been disclosed, unless this proves impossible or involves disproportionate effort. Upon request, we will inform you about these recipients.

G. Protection against automated decisions (profiling)

Pursuant to Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision:

1. is necessary for entering into or performance of a contract between you and us;
2. is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
3. is based on your explicit consent.

However, decisions in cases (a) to (c) may not be based on special categories of personal data within the meaning of Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) applies and suitable measures have been taken to safeguard your rights and freedoms and legitimate interests.

In cases (a) and (c), we take appropriate measures to safeguard your rights and freedoms and legitimate interests. This includes at least the right to obtain human intervention, to express your point of view, and to contest the decision.

H. Right to data portability

Where the processing of your personal data is based on your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, or on a contract pursuant to Art. 6(1)(b) GDPR, and the processing is carried out by automated means, you have the right pursuant to Art. 20 GDPR to receive the data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit it to another controller, or to have it transmitted by us to another controller where technically feasible.

I. Right to object

If we process your personal data on the basis of a balancing of interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis for processing can be found in this Privacy Policy.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (objection pursuant to Art. 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing for such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).

With regard to the use of information society services, notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.