Loading...
Skandika Logo
shopping basket

Privacy policy

1. information on the collection of personal data and contact details of the controller

1.1 Thank you for visiting our website. In the following, we would like to inform you about how we handle your personal data when you use our website. Personal data is basically all data with which you can be personally identified.

1.2 The controller responsible for the processing of data on our website within the meaning of the General Data Protection Regulation (GDPR) is

MAX Trader GmbH Wilhelm-Beckmann-Straße 19 Essen Germany

1.3 The controller has appointed the following data protection officer:

PROLIANCE GmbH / www.datenschutzexperte.de

Data Protection Officer

Leopoldstr. 21

80802 Munich

Email: data protection officer (at) datenschutzexperte.de

1.4 In order to protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL or TSL) via HTTPS.

2. data collection when visiting our website

Each time you visit our website, our system automatically collects data and information that your browser transmits to our server (so-called "server log files"). The following data, which is technically necessary for us, is collected:

The website we visited Date and time at the time of access Amount of data sent in bytes Source/reference from which you reached the page Operating system used Browser used IP address used (if applicable: in anonymised form) The legal basis for the processing is Art. 6 para. 1 lit. f GDPR due to our legitimate interest in improving the stability and maintaining the functionality of our website. The data will not be passed on or used in any other way. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. We reserve the right to subsequently check the server log files if there are concrete indications of unlawful use. The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the accessing client. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

3. making contact

If you contact us via the contact form, the data entered in the input mask will be transmitted to us and stored. The data collected can be found in the respective input mask. If you contact us by e-mail, only the data you enter there will be transmitted to us. The data is used exclusively for processing the conversation and your request. The legal basis for the processing of the data is Art. 6 para. 1 lit. a) GDPR if the user has given consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f) GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR. The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected and provided there are no statutory retention obligations to the contrary. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The user has the option to withdraw their consent to the processing of personal data at any time. If the user contacts us by e-mail, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

4. cookies

Our website uses cookies.

Cookies are text files that are stored on the user's end device. When a user accesses a website, a cookie may be stored on the user's operating system. Some functions of our website cannot be offered without the use of cookies. This requires the browser to be recognised even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. Our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f) GDPR also lies in the above-mentioned purposes.

In addition, our website may use cookies that enable an analysis of the user's surfing behaviour (so-called third-party cookies). Further information on the scope, purpose, legal basis and objection options can be found in the relevant sections of the respective chapter of this privacy policy.

As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate, restrict or delete the transmission of cookies. If you deactivate cookies for our website, you may no longer be able to use all the functions of the website to their full extent. You can prevent the transmission of Flash cookies by changing the Flash Player settings.

You can find help on the settings in the respective help menu of your browser under the following links: Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647 Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac Opera: https://help.opera.com/en/latest/web-preferences/#cookies Some of the cookies used here are deleted again after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

5 Data processing for order processing

5.1 If you wish to place an order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. We process the data you provide to process your order.

In some cases, we work together with external service providers to process your order. For this purpose, we must pass on the personal data required for this.

If we commission transport companies to deliver your goods, we will pass on your data required for the delivery of the goods to the respective transport company. For the processing of payments, we pass on your data to the commissioned credit institution as required. If we use payment service providers, you will also be informed of this below. The legal basis for the transfer of your data is Art. 6 para. 1 lit. b GDPR.

5.2 Use of payment service providers

  • Easycredit instalment purchase

When selecting the payment method "instalment purchase" and granting the necessary data protection consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, personal data (first name, surname, address, email, telephone number, date of birth, IP address, gender) together with data required for transaction processing (article, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and order time) are transmitted to our partner TeamBank AG Nürnberg easyCredit, Beuthener Straße 25, 90471 Nuremberg, Germany, for the purpose of processing this payment method. To verify the identity or creditworthiness of the customer, our partner carries out enquiries and obtains information from publicly accessible databases and credit reference agencies. The providers from whom information and, if applicable, creditworthiness information is obtained on the basis of mathematical-statistical procedures, as well as further details on the processing of your data after transmission to our partner TeamBank AG Nürnberg easyCredit, can be found in their privacy policy, which you can find here: https://www.easycredit.de/datenschutz Our partner TeamBank AG Nürnberg easyCredit uses the information received on the statistical probability of a payment default to make a balanced decision on the establishment, execution or termination of the contractual relationship. You have the option of contacting our partner TeamBank AG Nürnberg easyCredit to explain your point of view and contest the decision. The consent to data transfer given during the ordering process can be revoked at any time, even without giving reasons, with effect for the future. However, TeamBank AG may still be authorised to process your personal data if this is necessary to process payments in accordance with the contract.

  • When paying by "credit card via Unzer", payment is processed by the payment service provider Unzer GmbH, Vangerowstraße 18, 69115 Heidelberg (hereinafter referred to as "Unzer").

We pass on your data to Unzer in accordance with Art. 6 para. 1 lit. b GDPR exclusively for the purpose of payment processing and only to the extent necessary. Unzer will pass on your data to HUELLEMANN & STRAUSS ONLINESERVICES S.A., 1, Place du Marché, 6755 Grevenmacher, Luxembourg, for the purpose of processing the payment and only to the extent necessary in accordance with Art. 6 para. 1 lit. b GDPR.

In the case of payment on account "purchase on account via Unzer" or by "direct debit via Unzer", payment is also processed via Unzer. In order to safeguard our legitimate interest in determining the solvency of our customers, we pass on your data to Unzer for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR.

On the basis of the personal data you provide and other data (such as shopping basket, invoice amount, order history, payment experience), Unzer checks whether the payment option you have selected can be granted with regard to payment and/or default risks.

If necessary, identity or creditworthiness information from the following credit agencies may also be included in the decision in accordance with Art. 6 para. 1 lit. f GDPR:

  • SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany
  • CRIF Bürgel GmbH, Gasstrasse 18, 22761 Hamburg, Germany
  • Arvato Infoscore GmbH, Rheinstraße 99, 76532 Baden-Baden
  • Deltavista GmbH, Kaiserstraße 217, 76133 Karlsruhe
  • UNIVERSUM Business GmbH, Hugo-Junkers-Straße 3, 60386 Frankfurt am Main
  • Bisnode International Group, Robert-Bosch-Straße 11, 64293 Darmstadt
  • Regis24 GmbH, Wallstraße 58, 10179 Berlin
  • Creditreform AG, Hellersbergstraße 12, 41460 Neuss

The credit report may contain probability values (so-called score values), the calculation of which includes, but is not limited to, address data. You can object to this processing of your data at any time by sending a message to the controller responsible for processing your data or to Unzerwidersprechen.

However, Unzer may still be authorised to process your personal data if this is necessary to process payments in accordance with the contract.

  • PayPal If you select the payment method PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, payment will be processed via PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"). We pass on your personal data to PayPal in accordance with Art. 6 para. 1 lit. b GDPR to the extent necessary. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR due to PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Which other data is collected by PayPal can be found in PayPal's privacy policy. This can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be authorised to process your personal data if this is necessary for contractual payment processing.

6. data processing when opening a customer account and for contract processing

If you open a customer account with us, personal data will be collected and processed in accordance with Art. 6 para. 1 lit. b GDPR. The scope of the data can be seen from the input form. The data you enter will be stored and used by us to process the contract. You can delete your customer account at any time. This can be done by sending a message to the address of the person responsible or, if offered, directly in the customer account. In this case, we will also block your data with regard to retention periods under tax and commercial law and delete it after these periods have expired. This can only be opposed by your consent to permanent storage or a legally permitted further use of data on our part.

7 Use of your data for direct advertising

7.1 Newsletter

You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input screen is transmitted to us. The only mandatory information is your email address. If you make further voluntary entries, these will only be used to address you personally.

The legal basis for the processing of your data after registration for the newsletter is Art. 6 para. 1 lit. a GDPR if the user has given consent. We obtain this consent by sending you a confirmation email containing a confirmation link after you have registered for the newsletter. If you click on this link, you also give your consent to receive the newsletter. When you register for the newsletter, we store your IP address and the date and time of registration. The purpose of this storage is to be able to trace any possible misuse of your e-mail address.

We use the data collected by us when you register for the newsletter exclusively for the purpose of sending the newsletter.

You can cancel your subscription to the newsletter at any time. There is a corresponding link in every newsletter for this purpose. This also enables you to withdraw your consent to the storage of the personal data collected during the registration process.

7.2 Sendinblue We send our newsletters via Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin (hereinafter referred to as "Sendinblue"). We pass on the data you enter when registering for the newsletter to Sendinblue in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interest in using an effective, secure and user-friendly newsletter system. The data entered when ordering the newsletter (e.g. email address) is stored on Sendinblue's servers in Germany. Your data will be used by Sendinblue to send and statistically analyse the newsletter on our behalf. For this purpose, the newsletter emails contain so-called web beacons or tracking pixels, which are one-pixel image files that are stored on our website. This allows us to track whether a newsletter email has been opened and which links have been clicked on. With the help of this conversion tracking, it is also possible to track whether an action (such as the purchase of an item from our shop) has been taken after opening a link from the newsletter. Technical information is also collected (e.g. the time of access, your IP address, browser type and/or operating system). This data is only collected in pseudonymised form and is not linked to your other personal data. If you do not want the data analysis described here, you must unsubscribe from the newsletter. There is an order processing contract with Sendinblue.

Details on Sendinblue's data protection can be found at https://de.sendinblue.com/legal/privacypolicy/

8. contact for the evaluation reminder

8.1 Rating reminder by ausgezeichnet.org

Based on your express consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your e-mail address to the rating platform ausgezeichnet.org (AUBII GmbH, Alsterufer 34, 20354 Hamburg (www.ausgezeichnet.org)). You will receive a review reminder from ausgezeichnet.org by email. You can revoke your consent at any time by sending a message to the controller responsible for processing your data or to ausgezeichnet.org.

8.2 Review reminder by Trusted Shops

You can revoke your consent at any time by sending a message to the data controller or to the rating platform. Based on your express consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your e-mail address to the Trusted Shops rating platform (Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de)). You will receive a review reminder from Trusted Shops by email. You can revoke your consent at any time by sending a message to the controller responsible for processing your data or to Trusted Shops.

8.3 Reviews.io

We use "reviews.io" (REVIEWS.io Limited, 29 St Nicholas Place, Leicester, LE1 4LD UK) for product reviews. We can use reviews.io to collect customer reviews and publish them on our website. The personal data provided there will be processed on the basis of your consent (Art. 6 para. 1 lit. a GDPR). For the United Kingdom, there is an adequacy decision by the European Commission, which certifies compliance with the level of data protection applicable in the EU.

Reviews can be submitted in such a way that it is not possible for other website users to identify you personally.

We have concluded an order processing contract with reviews.io. Further information on data processing by reviews.io can be found in the privacy policy of reviews.io: https://www.reviews.io/front/data-protection.

9. online marketing

Use of Google Ads conversion tracking

This website uses the online advertising programme "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Here, advertising material (so-called Google Adwords) is used to advertise our offers on external websites. Our legitimate interest lies in displaying adverts that are of interest to you and in achieving a fair calculation of advertising costs. The legal basis is Art. 6 para. 1 lit. f GDPR.

Google Ads uses cookies for conversion tracking, which are set when you click on an AdWords advert placed by Google.

These cookies generally lose their validity after 30 days and are not used for personal identification. Each Google Ads customer receives a different cookie, which is why cookies cannot be tracked via the websites of Ads customers.

The information obtained in this way is used to generate conversion statistics for Ads customers about the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag.

You cannot be personally identified in this way.

If you wish to prevent tracking, you can deactivate the Google Conversion Tracking cookie via your Internet browser under user settings.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/. You can find information about Google's privacy policy here: http://www.google.de/policies/privacy/ You can permanently deactivate the conversion cookies by adjusting your browser settings accordingly or by downloading and installing the browser plug-in available at the following link http://www.google.com/settings/ads/plugin?hl=de

In this case, you may not be able to use certain functions of this website or may only be able to use them to a limited extent.

10. web analysis services

Google Analytics

We use the web analysis service Google Analytics (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) for this website. Google Analytics uses "cookies". These are text files that are stored on your computer and enable your use of the website to be analysed.

The information generated in this way about your use of this website (including the shortened IP address) is transferred to a Google server and stored there, whereby a transfer to the USA is possible.

We use Google Analytics with the extension "_anonymizeIp()", which ensures anonymisation of the IP address by shortening it and excludes a direct personal reference. Your IP address is therefore truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. In exceptional cases, the full IP address is transmitted to a Google server, including in the USA, and only truncated there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the statistical analysis of user behaviour for optimisation and marketing purposes.

Google uses this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. Your IP address collected in this context will not be merged with other Google data.

You can prevent the storage of cookies by selecting the appropriate settings in your browser.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the following browser plugin:

http://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can set an out-out cookie: Deactivate Google Analytics

This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click on this link again.

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data". Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/. Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

11 Retargeting / remarketing / recommendation advertising

11.1 Criteo (Criteo SA) On this website, we use the service of Criteo SA, 32 Rue Blanche, 75009 Paris, France ("Criteo") Our legitimate interest lies in targeting customers with personalised, interest-based advertising and thus also in exploiting the financial potential of our website. The legal basis is in accordance with Art. 6 para. 1 lit. f GDPR.

For this purpose, cookies are set to collect pseudonymised data about your interests and thus adapt the advertising individually to the stored information. As a result, you will be shown adverts that are highly likely to match your product and information interests.

You can generally deactivate the use of cookies on your computer by making the appropriate browser settings. In this case, you will no longer participate in this retargeting. However, switching off all cookies may also mean that some functions on our website can no longer be fully utilised. You can also use the opt-out cookie: Criteo opt-out (http://www.criteo.com/de/privacy/)

Privacy policy of Criteo: http://www.criteo.com/de/privacy/

11.2 Facebook Custom Audience via the pixel method

On this website, we use the "Facebook pixel" of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"), which can be used to track the behaviour of users after they have seen or clicked on a Facebook ad if they have given their express consent. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help to optimise future advertising measures. The data collected is anonymous to us, so we cannot draw any conclusions about the identity of the user. However, data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/).

You can enable Facebook and its partners to place adverts on and off Facebook. A cookie may be stored on your device for these purposes. These processing operations are only carried out with your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Consent to the use of the Facebook pixel may only be given by users over the age of 13. If you are younger, we ask you to ask your legal guardian for permission. You can deactivate the use of cookies on your computer by making the appropriate browser settings. However, this may mean that some functions on our website can no longer be fully utilised. You can also deactivate the use of cookies by third-party providers such as Facebook on the following website of the Digital Advertising Alliance: http://www.aboutads.info/choices/

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here:https://www.facebook.com/legal/EUdatatransfer_addendum.

11.3 Facebook Custom Audience via the pixel method

On this website, we use "Facebook Conversion API" from Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). If you have given your express consent, your data about the behaviour of users can be transmitted to Facebook for evaluation. This allows advertisements to be displayed to users based on their user behaviour.

The data used are: Email address, telephone number, gender, date of birth, first and last name, city, state and country, postcode, user IDs, IP addresses, client user agent (the browser you use and your operating system), click IDs, browser ID, product IDs, advertising ID, Facebook login ID

The data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/).

You can deactivate the use of cookies on your computer by making the appropriate browser settings. However, this may mean that some functions on our website can no longer be fully utilised. You can also deactivate the use of cookies by third-party providers such as Facebook on the following website of the Digital Advertising Alliance: http://www.aboutads.info/choices/

The data transfer to the USA, if carried out by Facebook, is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.facebook.com/legal/EUdatatransfer_addendum.

12. Use of rating and seal of approval graphics

12.1 Trusted Shops Trustbadge

We integrate the Trusted Shops Trustbadge on our website to display the Trusted Shops seal of approval (Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany) and any collected reviews as well as to offer Trusted Shops products to buyers after an order. Our legitimate interest lies in the optimal marketing of our offer. The legal basis is Art. 6 para. 1 lit. f GDPR. When the Trustbadge is called up, the web server automatically saves a server log file that contains, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider, as well as documenting the call. This access data is not analysed by us and is automatically overwritten no later than seven days after the end of your visit to the site.

12.2 Rating seal from Ausgezeichnet.org

On our website, we integrate the Ausgezeichnet.org rating seal (AUBII GmbH, Alsterufer 34, 20354 Hamburg, Germany) to display any collected ratings and to enable users to rate the website themselves. Our legitimate interest lies in the optimal marketing of our offer. The legal basis is Art. 6 para. 1 lit. f GDPR. When the rating seal is called up, a technically necessary session cookie is set, which is automatically deleted after the session and is used for server allocation. No personal data is transmitted in the process.

12.3 Trustami trust seal

To display the collected reviews and social media feedback on this website, we integrate the Trustami trust seal, an offer from Trustami GmbH, Schröderstraße 5, 12103 Berlin. Our legitimate interest lies in the optimal marketing of our offer. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

When you access the Trustami trust seal, the web server automatically saves access data in the form of a server log file, which contains, for example, the date and time of access, your IP address in abbreviated form and the requesting provider. This data is not analysed by us and is automatically overwritten no later than seven days after the end of your visit to the site.

13. tools and other

Google Web Fonts

We use so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the standardised display of fonts. As soon as you access our website, your browser loads the required web fonts into your browser cache.

To do this, your browser must establish a connection to Google's servers, whereby Google will transmit your IP address. In this case, your personal data may also be transferred to the servers of Google LLC. in the USA. The legal basis is in accordance with Art. 6 para. 1 lit. a GDPR, namely your express consent.

If your browser does not support web fonts or you refuse to use them, a standard font will be used by your computer.

Details on Google Web Fonts can be viewed here: https://developers.google.com/fonts/faq Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/ as well as in Google's privacy policy:https://www.google.com/policies/privacy/Weitere Information on data protection can be found here:http://www.google.de/intl/de/policies/privacy/

14 Rights of the data subject

14.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

  • Right to information in accordance with Art. 15 GDPR: You can request confirmation from the controller as to whether personal data concerning you is being processed by the controller. In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of further rights such as rectification of the data or the existence of a right of appeal to a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved. meaningful information about the logic involved and the significance and envisaged consequences of such processing for you, as well as your right to be informed of the safeguards pursuant to Art. 46 GDPR relating to the transfer of your data to third countries;

  • Right to rectification pursuant to Art. 16 GDPR: You have a right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored by us; the rectification or completion must take place immediately.

  • Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data for as long as the accuracy of your data, which you dispute, is being verified, if you refuse to have your data erased due to unauthorised data processing and instead request the restriction of the processing of your data, if you require your data for the establishment, exercise or defence of legal claims after we no longer require this data after the purpose has been achieved or if you have lodged an objection for reasons relating to your particular situation, as long as it is not yet clear whether our legitimate reasons prevail; If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted.

  • Right to erasure pursuant to Art. 17 GDPR: You have the right to obtain the erasure of your personal data without undue delay if the requirements of Art. 17 para. 1 GDPR are met. However, this right to erasure does not exist in particular - not conclusively - if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims

  • Right to information in accordance with Art. 19 GDPR: If you have exercised your right to rectification, erasure or restriction of processing, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this is impossible or involves a disproportionate effort. You also have the right to be informed about these recipients.

  • Right to data portability in accordance with Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller, where technically feasible;

  • Right to cancellation pursuant to Art. 7 para. 3 GDPR: You have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions. You also have the right to revoke your declaration of consent under data protection law at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

  • Right to lodge a complaint pursuant to Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

14.2 Right to object

You have the right to object to the processing of your data at any time with effect for the future if we process your data on the basis of our overriding legitimate interest after weighing up your interests. If you make use of this right to object, we will stop processing your data unless there are demonstrably overriding compelling legitimate grounds for termination or if further processing serves the exercise or defence of legal claims.

15 Duration of the storage of personal data

The duration of the storage of personal data depends on the statutory retention periods. After these periods have expired, we routinely delete the data if it is no longer required for the fulfilment or initiation of a contract and/or if we no longer have a legitimate interest in continuing to store it.