Privacy policy

DATA PROTECTION DECLARATION

1) INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER

1.1 We are pleased that you have visited our website and thank you for your interest. Here we inform you about the processing of your personal data when using our website. Personal data is any information that can identify you personally.

1.2 The controller for processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Butik Navn. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential information (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the string "https://" and the padlock symbol in your browser bar.

2) COLLECTION OF DATA WHEN VISITING OUR WEBSITE

When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser sends to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary to display the website:

- Our most visited website
- Date and time of access
- The amount of data sent in bytes
- Source/reference where you got to the page
- Used browser
- Operating system used
- IP address used (possibly in anonymised form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. There will be no disclosure or other use of the data. However, we reserve the right to check the server log files later if there are concrete indications of illegal use.

3) COOKIES
To make the visit to our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the
the browser session, i.e. when you close your browser (session cookies). Other cookies remain on your device and enable us or our partners (third-party cookies) to recognise your browser on your next visit (persistent cookies). If cookies have been set, they collect and process certain user information such as browser and location data

as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a certain period of time, which may vary depending on the cookie.

Sometimes cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping basket for later visits to the website). If personal data is also processed by certain cookies that we have implemented, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the performance of the contract or pursuant to Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of the site visit.

We may cooperate with advertising partners who help us to make our internet offer more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with these advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the data collected in the following sections.

Please note that you can set your browser to inform you about the use of cookies and to decide individually on their acceptance or rejection, or you can generally exclude the acceptance of cookies for certain purposes or in general. Each browser handles cookie settings in different ways. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) CONTACT US
When contacting us (e.g. via contact form or e-mail), personal data is collected. The data that is collected in the case of a contact form is stated in the respective contact form. This data is stored and used solely for the purpose of responding to your enquiry or for contact and the related technical administration.
The legal basis for the data processing is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, a further legal basis for the processing is Article 6(1)(b) GDPR. Your data will be deleted after completion of the processing of your request, this is the case,

when it can be established from the circumstances that the matter in question has been resolved and if there are no legal retention obligations to the contrary.

5) DATA PROCESSING WHEN CREATING A CUSTOMER ACCOUNT
AND FOR CONTRACT PROCESSING
Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us to fulfil a contract or when creating a customer account. The data collected can be found in the respective input forms. Deletion of your customer account is always possible and can be done by sending a message to the above-mentioned address of the person responsible. We store and use the data you have provided for contract processing. After complete fulfilment of the contract or deletion of your customer account, your data will be blocked for tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or there is a legally permitted further data use by us, which we will inform you about below.

6) USE OF YOUR DATA FOR DIRECT MARKETING PURPOSES 6.1 Sign up for our email newsletter

When you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information to receive the newsletter is your
email address. The provision of any additional data is voluntary and is used to contact you personally. For sending the newsletter we use the so-called double opt-in procedure. This means that we will only send you a newsletter e-mail when you have clearly confirmed that you consent to receive newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive newsletters in the future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO. By subscribing to the newsletter, we will save your
IP address entered by the internet service provider (ISP) as well as the date and time of registration in order to track any misuse of your e-mail address at a later date. The data we collect when you subscribe to the newsletter is used exclusively for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time by using the link provided in the newsletter or by sending an appropriate message to the responsible person mentioned at the beginning. After unsubscribing, your email address will be deleted from our newsletter list immediately, unless you have expressly consented to further use of your data or we reserve the right to further data use in accordance with the law, which we will inform you about in this statement.

6.2 Sending email newsletters to existing customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers of similar goods or services to those you have already purchased from our range via e-mail. It is not necessary for us to obtain your separate consent for this. The data processing is thus based solely on our legitimate interest in personalised direct marketing in accordance with Article 6(1)(f) GDPR. If you have initially objected to the use of your e-mail address for this purpose, no e-mails will be sent from us. You have the right to object to the use of your

e-mail address for the aforementioned advertising purposes at any time with effect for the future by sending a message to the responsible person mentioned at the beginning. This will only incur costs for you according to the basic prices. Upon receipt of your objection, the use of your e-mail address for advertising purposes will be stopped immediately.

7) PROCESSING OF YOUR DATA FOR ORDER PROCESSING
7.1 The personal data we collect will be disclosed to the transport company responsible for the delivery as part of the fulfilment of the contract to the extent necessary for the delivery of the goods. We disclose your payment data to the authorised credit institution as part of the payment processing if it is necessary for the payment processing. If payment service providers are used, we provide specific information on this below. The legal basis for the transfer of data in this case is Article 6(1)(b) GDPR.

7.2 Using payment services (payment providers)

- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if available - "Purchase on account" or "Interest payment" via PayPal, we forward your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The disclosure is made in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to perform a credit assessment for the payment methods credit card via PayPal, direct debit via PayPal or - if available - "Purchase on account" or "Interest payment" via PayPal. For this purpose, your payment data may be passed on to credit reference agencies in accordance with Article 6(1)(f) DSGVO based on PayPal's legitimate interest in establishing your ability to pay. The result of the credit assessment with regard to the statistical probability of default is used by PayPal to decide on the availability of the payment method in question. The credit rating may contain probability values (so-called score values). If score values are included in the result of the credit assessment, they are based on a scientifically recognised mathematical-statistical method. The calculation of score values includes, but is not limited to, address information. Further information on data protection, including information on the credit reference agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy- full. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal reserves the right to continue processing your personal data if this is necessary for the contractual payment processing.

- COMFORT
When choosing the payment method "SOFORT", the payment is processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we pass on your data provided during the ordering process together with the information about your order in accordance with Art. 6 para. 1 lit. b DSGVO. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The disclosure of your data is solely for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. Further information about

The SOFORT data protection regulations can be found at the following internet address:

https://www.klarna.com/sofort/datenschutz

8) CONTACT FOR EVALUATION REMINDER
Self-evaluation reminder (no sending via a customer rating system)

We use your email address for a single reminder to provide a rating of your order to the rating system we use if you have given us your explicit consent during or after your order in accordance with Article 6(1)(a) GDPR.
You can revoke your consent at any time by sending a message to the data controller.

9) SOCIAL MEDIA USAGE: SOCIAL PLUGINS
9.1 Facebook plugins with Shariff solution
Special additional customs duties and/or import taxes are not included in the price and will be charged to the customer.

Our website uses so-called social plugins ("plugins") from the social network Facebook, operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

To increase the protection of your data during visits to our website, these buttons are not unrestricted as plugins, but only integrated as HTML links on the page. This type of integration ensures that when you visit a page on our website that contains such buttons, a connection to Facebook's servers is not yet established. When you click on the button, a new browser window opens and the Facebook page appears, where you can interact with the corresponding plugins (possibly after entering your login details).

Facebook Inc, headquartered in the United States, is certified under the US-EU Privacy Shield Agreement, which ensures compliance with the level of personal data protection applicable in the EU.

The purpose and scope of data collection and further processing and use of the data by Facebook as well as your related rights and settings options for the protection of your privacy can be found in Facebook's data protection information: https://www.facebook.com/policy.php

9.2 Google+ plugins as Shariff solution
Our website uses so-called social plugins ("plugins") from the Google+ social network operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

To increase the protection of your data during visits to our website, these buttons are not unrestricted as plugins, but only integrated as HTML links on the page. This type of integration ensures that when you visit a page on our website that contains such buttons, a connection to Google servers is not yet established. When you click on the button, a new browser window opens and the Google+ page appears, where you can interact with the corresponding plugins (possibly after entering your login details).

Google LLC, headquartered in the United States, is certified under the US-EU Privacy Shield Agreement, which ensures compliance with the level of personal data protection applicable in the EU.

The purpose and scope of data collection and further processing and use of the data by Google as well as your related rights and settings options for protecting your privacy can be found in Google's data protection information: https://www.google.com/intl/de/policies/privacy/

9.3 Instagram plugin as Shariff solution
Our website uses so-called social plugins ("plugins") from the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

To increase the protection of your data during visits to our website, these buttons are not unrestricted as plugins, but only integrated as HTML links on the page. This type of integration ensures that when you visit a page on our website that contains such buttons, a connection to Instagram's servers is not yet established. When you click on the button, a new browser window opens and the page with Instagram appears, where (possibly after entering your login information) you can interact with the corresponding plugins there. Instagram LLC. with headquarters in the United States, is certified under the US-EU Privacy Shield Agreement "Privacy Shield", which ensures compliance with the level of personal data protection applicable in the EU.

The purpose and scope of data collection and further processing and use of the data by Instagram as well as your related rights and settings options for the protection of your privacy can be found in Instagram's data protection information: https://help.instagram.com/155833707900388/

10) ONLINE MARKETING 10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to show users relevant adverts, improve campaign reports and prevent a user from seeing the same ads multiple times. By means of a cookie ID, Google recognises which ads are displayed in which browser and can thus prevent them from being shown repeatedly. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Article 6(1)(f) of the GDPR.

In addition, DoubleClick can use cookie IDs to recognise so-called conversions associated with ad requests. This happens, for example, when a user sees a
DoubleClick advert and later visit the advertiser's website with the same browser and make a purchase there. According to Google, DoubleClick cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our knowledge: By including DoubleClick, Google receives information that you have visited the relevant part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign your visit to your account. Even if you are not registered with Google or are not logged in, it is possible that the provider can find and store your IP address.

If you wish to oppose participation in this tracking, you can disable cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com, https://www.google.de/settings/ads, with this setting being deleted when you delete your cookies. Alternatively, you can inform yourself and make settings regarding cookies by visiting the Digital Advertising Alliance at www.aboutads.info. Finally, you can set your browser to inform you about the setting of cookies and decide individually whether to accept or reject cookies for specific purposes or generally. If you do not accept cookies, the functionality of our website may be limited.

Google LLC, headquartered in the United States, is certified under the US-EU Privacy Shield Agreement, which ensures compliance with the level of personal data protection applicable in the EU.

For more information about DoubleClick's privacy policy, please visit Google:

https://www.google.de/policies/privacy/

10.2 Using Google AdWords conversion tracking

This website uses the online advertising programme "Google AdWords" and as part of Google AdWords conversion tracking from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google's AdWords offer to publicise our attractive offers by means of advertising material (called Google AdWords) on external websites. We can determine the success of individual advertising measures based on the data from advertising campaigns. It is therefore in our interest to show you adverts that are interesting for you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on one of Google's AdWords ads. Cookies are small text files that are stored on your computer system. These cookies usually lose their validity after 30 days and do not serve for personal identification. If the user visits certain pages on this website and the cookie has not expired, Google and we can see that the user clicked on the advert and was taken to this page.

Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked on the websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customer is told the total number of users who clicked on their advert and were directed to a page with a conversion tracking tag. However, they will not receive any information that allows users to be personally identified. If you do not wish to participate in the tracking, you can block this use by deactivating Google's

conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics. We use Google AdWords due to our legitimate interest in targeted advertising pursuant to Article 6(1)(f) GDPR.

Google LLC, headquartered in the United States, is certified under the US-EU Privacy Shield Agreement, which ensures compliance with the level of personal data protection applicable in the EU.

You can find more information about Google's privacy policy at the following internet address:

https://www.google.de/policies/privacy/

You can permanently disable ad setting cookies by preventing them from being set using an appropriate setting of your browser software or by downloading and installing browser plugins available at the following link: https://www.google.com/settings/ads/plugin?hl=de

Please note that certain features of this website may not be usable or may only be usable to a limited extent if you have deactivated the use of cookies.

11) Web analytics services Google (Universal) Analytics

- Google Universal Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transferred to a Google server in the USA and stored there.

This website exclusively uses Google Analytics with the extension "_anonymizeIp()", which anonymises the IP address by shortening it and excludes direct identification of persons. Using the extension, your IP address is shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before it is transferred. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. In these exceptional cases, this processing is based on Article 6(1)(f) of the GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity and provide us with other services related to website and internet usage. The IP address transmitted to Google Analytics via your browser will not be merged with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly; however, please note that in this case you may not be able to fully utilise all functions of this website. You can also prevent Google from collecting the data generated by the cookie about your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser add-on to disable cookies.

Google Analytics available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de Alternatively to the browser add-on or within browsers on mobile devices, you can click on the following link to set a
opt-out cookie that prevents the collection of data by Google Analytics on this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, please click this link again): Disable Google Analytics Google LLC based in the USA is certified under the EU-US Privacy Shield Framework, which guarantees compliance with data protection standards applicable in the EU.
This website also uses Google Analytics to analyse visitor flows across devices, which is done via a user ID. On the first visit to a page, the user is assigned a unique, permanent and anonymised ID that is set across devices. This makes it possible to assign interaction data from different devices and sessions to a single user.
The user ID does not contain any personal information and does not transmit any personal information to Google.
The collection and storage of data via the user ID can be objected to at any time with effect for the future. To do this, you must deactivate Google Analytics on all systems you use, e.g. in another browser or on your mobile device. You can deactivate this using a browser plugin from Google (https://tools.google.com/dlpage/gaoptout?hl=de). Alternatively, you can click on the following link to set an opt-out cookie that will prevent the collection of data by Google Analytics on this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, please click on this link again): Disable Google Analytics
More information about Universal Analytics can be found here: https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

12) Retargeting/ Remarketing/ Recommended advertising Facebook Custom Audience via pixel method

This website uses the "Facebook pixel" of Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). If explicit permission is granted, user behaviour can be tracked after they have seen or clicked on a Facebook advertisement. This purpose is to evaluate the effectiveness of Facebook advertising for statistical and marketing purposes and may help to optimise future advertising campaigns.

The data collected is anonymous to us and therefore gives us no indication of the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile can be established and Facebook can use the data for its own advertising purposes in accordance with Facebook's data usage policy (https://www.facebook.com/about/privacy/).

You can authorise Facebook and its partners to show advertisements on and outside Facebook. A cookie may also be stored on your computer for this purpose. These processing operations are only carried out with explicit authorisation pursuant to Article 6(1)(a) GDPR.

Permission to use the Facebook pixel can only be granted by users older than 13 years of age. If you are younger, please ask your parents for permission.

Facebook Inc. headquartered in the United States is certified under the EU-US Privacy Shield Framework, which guarantees compliance with data protection standards applicable in the EU.

To disable the use of cookies on your computer, you can set your internet browser to no longer allow cookies or delete already stored cookies. However, disabling all cookies may result in certain functions on our website no longer working. You can also deactivate the use of third-party cookies, e.g. Facebook, on the following website of the Digital Advertising Alliance: https://www.aboutads.info/choices/

Google AdWords Remarketing

Our website uses the functions of Google AdWords Remarketing, with which we advertise this website in Google search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google places a cookie on your browser device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. The processing is carried out on the basis of our legitimate interest in the optimal marketing of our website pursuant to Art. 6(1)(f) DSGVO.

Further data processing will only take place if you have authorised Google to link your internet and app browsing history with your Google Account and to use information from your Google Account to personalise ads you see on the internet. If you are logged into your Google Account while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for television remarketing.
In addition, your personal data will be temporarily linked to Google Analytics data to create target groups.

You can permanently disable ad personalisation cookies by downloading and installing the Google Ads disabler browser add-on, available via the following link: https://www.google.com/settings/ads/onweb/

Alternatively, you can inform yourself about the use of cookies and make settings regarding this on the website of the Digital Advertising Alliance: www.aboutads.info. Finally, you can set your browser to inform you about the use of cookies and decide individually whether to accept or reject cookies for specific purposes or generally. If you reject cookies, the functionality of our website may be limited.

Google LLC, headquartered in the United States, is certified under the EU-US Privacy Shield Framework, which guarantees compliance with data protection standards applicable in the EU.

Further information and privacy policy regarding advertising and Google can be found here:

https://www.google.com/policies/technologies/ads/

13) RIGHTS OF THE PERSON CONCERNED

13.1 The applicable data protection law grants you extensive rights as the affected party vis-à-vis the controller regarding the processing of your personal data (information and intervention rights), which we inform you about below:

Right to information pursuant to Article 15 of the GDPR: In particular, you have the right to obtain information about your personal data that we process, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of the right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision- making, including profiling, and, where applicable, meaningful information about the logic involved and the consequences for you and the intended effects of such processing, as well as your right to be informed about which guarantees pursuant to Article 46 GDPR are present when transferring your data to third countries;

Rectification according to Art. 16 GDPR: You have the right to immediate rectification of your incorrect data and/or completion of your incomplete data stored with us;
Erasure pursuant to Art. 17 GDPR: You have the right to demand the erasure of your personal data when the conditions of Art. 17(1) GDPR are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, on grounds of public interest or for the establishment, exercise or defence of legal claims;

Restriction of processing pursuant to Article 18 of the GDPR: You have the right to request the restriction of the processing of your personal data while the validity of your contested data is verified, if you refuse the erasure of your data due to unauthorised data processing and instead request the restriction of the processing of your data, if you need your data for the establishment, exercise or defence of legal claims after we no longer need this data for the original purpose or if you have objected on grounds relating to your particular situation until it is established whether our legitimate grounds prevail;
Notification pursuant to Article 19 GDPR: If you have made a claim for rectification, erasure or restriction of processing to the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
Right to data portability under Article 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller to the extent technically feasible;
Right to revoke consents given pursuant to Art. 7(3) GDPR: You have the right to revoke a previously given consent to the processing of data at any time with effect for the future.
Upon revocation of the consent, we will delete the affected data immediately, unless further processing can be based on a legal basis without consent.
Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent before the withdrawal;
Complaint under Article 77 of the GDPR: If you believe that the processing of the personal data concerning you infringes the GDPR, you have the right - without prejudice to any other administrative or judicial remedy - to lodge a complaint with a supervisory authority, in particular in

the Member State of your residence, place of work or the place where the alleged breach took place.

13) RIGHTS OF THOSE AFFECTED
13.1 The applicable data protection law grants you extensive rights vis-à-vis the controller regarding the processing of your personal data (information and intervention rights), which we inform you about below:

Right of access pursuant to Article 15 of the General Data Protection Regulation (GDPR): In particular, you have the right to obtain information about your personal data that we process, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of the right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if not collected by us from you, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the consequences for you and the intended effects of such processing, as well as your right to be informed about the safeguards pursuant to Article 46 GDPR for the transfer of your data to third countries; Rectification pursuant to Article 16 of the GDPR: You have the right to immediate rectification of your inaccurate data and/or completion of your incomplete data stored with us;

Right to erasure pursuant to Article 17 GDPR: You have the right to demand the erasure of your personal data when the conditions of Article 17(1) GDPR are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, on grounds of public interest or for the establishment, exercise or defence of legal claims;

Right to restriction of processing according to Article 18 GDPR: You have the right to request the restriction of the processing of your personal data while the validity of your contested data is verified, if you refuse the erasure of your data due to unauthorised data processing and instead request the restriction of the processing of your data, if you need your data for the establishment, exercise or defence of legal claims after we no longer need this data for the original purpose or if you have objected on grounds relating to your particular situation until it is established whether our legitimate grounds prevail;

Right to information under Article 19 GDPR: If you have exercised your right to demand rectification, erasure or restriction of processing from the controller, the controller is obliged to inform all recipients to whom the personal data concerned have been disclosed of this rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
Right to data portability according to Article 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine- readable format or to request its transfer to another controller, as far as technically feasible; Right to withdraw consent pursuant to Art. 7(3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the affected data immediately, unless further

processing can be based on a legal basis without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent until the withdrawal;
Right of appeal under Article 77 of the GDPR: If you believe that the processing of your personal data infringes the GDPR, you have the right - without prejudice to any other administrative or judicial remedy - to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, place of work or place where the alleged infringement took place.

13.2 RIGHT TO LODGE AN OBJECTION

IF WE PROCESS YOUR PERSONAL DATA BASED ON A BALANCING OF INTERESTS AND OUR LEGITIMATE INTERESTS PREVAIL, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.

IF YOU MAKE USE OF YOUR OBJECTION, WE WILL STOP THE PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING AT ANY TIME. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

MAKE USE OF YOUR OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) THE DURATION OF THE STORAGE OF PERSONAL DATA
The duration of the storage of personal data is determined according to the relevant statutory retention periods (e.g. commercial and tax law retention periods). After expiry of the period, the corresponding data is routinely deleted, unless it is no longer necessary for the fulfilment or conclusion of a contract and/or unless there is no longer a legitimate interest on our part to continue storage.