Privacy policy

1. INFORMATION ON THE COLLECTION OF PERSONAL DATA

AND CONTACT DETAILS OF THE PERSON RESPONSIBLE

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.

1.2 The controller of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is des FILLES désir, Adrian-Constantin Stoica, Windscheidstrasse 21, 40239 Düsseldorf, Germany, e-mail: mail@desfillesdesir.com. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the person responsible). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

2. DATA COLLECTION WHEN VISITING OUR WEBSITE

When you use our website for information purposes only, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website

• Date and time at the time of access

• Amount of data sent in bytes

• Source/reference from which you reached the page

• Browser used

• Operating system used

• IP address used (if applicable: in anonymised form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3. HOSTING

Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of Shopify's aforementioned services, data may also be transferred to Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc as part of further processing on our behalf. In case of transfer of data to Shopify Inc. in Canada, the adequate level of data protection is guaranteed by adequacy decision of the European Commission. Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. and Shopify (USA) Inc. in the USA are certified for the us-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

For more information about Shopify's privacy practices, please visit the following website: https://www.shopify.de/legal/datenschutz.
Further processing on servers other than the aforementioned of Shopify will only take place within the framework communicated below.

4. COOKIES

To make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit us (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

In part, the cookies serve to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. b DSGVO either for the execution of the contract or in accordance with Art. 6 Para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs.

Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or can exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains

how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/windows/l%C3%B6schen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

5. CONTACTING

When contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f DSGVO. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO. Your data will be deleted after final processing of your request. This is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and if there are no statutory retention obligations to the contrary.

6. DATA PROCESSING FOR ORDER HANDLING

6.1 In order to process your order, we work together with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 (1) lit. b DSGVO.

You can place orders via our website as a guest without registering. Your personal data will be entered into an input mask and transmitted to us and stored. If you place an order via our website, we collect the following data:

• Form of address, first name, last name,

• a valid email address,

• Address,

• telephone number.

The collection of this data takes place,

• to be able to identify you as our customer;

• in order to process, fulfill and complete your order;

• to correspond with you;

• for billing purposes;

• for the settlement of any existing liability claims, as well as the assertion of any claims against you;

• to ensure the technical administration of our website;

• to manage our client data.

As part of the ordering process, consent is obtained from you for the processing of this data. Data processing is carried out in response to your order and/or registration and is necessary for the purposes in accordance with Art. 6 Para. 1 lit1. b DSGVO for the appropriate processing of your order and for the mutual fulfillment of obligations arising from the purchase contract.

The personal data collected by us for the processing of your order will be stored until the expiry of the statutory storage obligation and then deleted, unless we are obliged to store data for a longer period of time in accordance with Article 6 (1) c of the German Data Protection Act (DSGVO) due to tax and commercial storage and documentation obligations (from the German Commercial Code (HGB), the German Criminal Code (StGB) or the German Tax Code (AO)) or you have consented to additional storage in accordance with Article 6 (1) a of the German Data Protection Act (DSGVO).

6. 2 Passing on personal data to shipping service providers

- DHL
If the goods are delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we will pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 lit. a DSGVO prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification if you have given your express consent to this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b DSGVO. The disclosure is made only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider DHL.

6.3 Use of payment services

- Klarna
If you choose a Klarna payment service, the payment will be processed by Klarna Bank AB (publ) [https://www.klarna.com], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable the processing of the payment, your personal data (first name and surname, street, house number, post code, town, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article, delivery type) will be passed on to Klarna for the purpose of checking your identity and creditworthiness, provided that you have expressly consented to this in accordance with Art. 6 Para. 1 lit. a DSGVO during the ordering process. You can see which credit agencies your data may be forwarded to here: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Klarna uses the information received about the statistical probability of a payment default for a weighed decision about the establishment, implementation, or termination of the contractual relationship.
You can withdraw your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for the processing of payments in accordance with the contract.
Your personal information will be processed in accordance with applicable data protection laws and as described in Klarna's Privacy Policy for Data Subjects Located in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy or for affected persons domiciled in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy treated.

- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by installments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") within the framework of payment processing. The transfer takes place in accordance with Art. 6 Para. 1 lit. b DSGVO and only insofar as this is necessary for the payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f DSGVO based on PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, the payment processing is carried out by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process, together with information about your order (name, address, account number, bank code, any credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b DSGVO. Your data will only be passed on for the purpose of processing payments with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. You can find more information on the data protection of Shopify Payments at the following Internet address: https://www.shopify.com/legal/privacy

Data protection information on Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy

7. USE OF SOCIAL MEDIA: SOCIAL PLUGINS

7.1 Facebook plugins with 2-click solution

Our website uses so-called social plugins ("plugins") of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

To increase the protection of your data when visiting our website, the plugins are initially deactivated by means of a so-called "2-click" solution integrated into the page. You can recognize deactivated plugins by the fact that they are greyed out. This integration ensures that when you call up a page of our website that contains such plugins, no connection is established with the Facebook servers. Only when you activate the plugins and thus give your consent to the data transfer in accordance with Art. 6 (1) lit. a DSGVO, your browser establishes a direct connection to the Facebook servers. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Facebook. We have no influence on the scope of the data that Facebook collects with the help of the plugins. According to our knowledge, Facebook in any case receives information about which of our websites you have currently and previously accessed. By integrating the plugins, Facebook also receives the information that your browser has accessed the corresponding page of our website if you do not have a profile on Facebook or are not currently logged in. The information collected (including your IP address) is transmitted from your browser directly to a Facebook server in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed there to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to Facebook.

Facebook Inc. with headquarters in the USA is certified for the us-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php

7.2 Facebook plugins with Shariff solution

Our website uses so-called social plugins ("plugins") of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

To increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins, but only using an HTML link on the page. This type of integration ensures that when you call up a page of our website that contains such buttons, no connection is yet established with Facebook's servers. When you click on the button, a new browser window opens and calls up the Facebook page, where you can interact with the plugins there (possibly after entering your login data).

7.3 Instagram as default plugin

Our website uses so-called social plugins ("plugins") of the online service Instagram, which is operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera". An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Instagram. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted from your browser directly to an Instagram server in the USA and stored there.

If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by clicking the "Instagram camera" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts.

The described data processing operations are carried out in accordance with Art. 6 (1) lit. f DSGVO based on Instagram's legitimate interests in displaying personalized advertising to inform other users of the social network about your activities on our website and for the needs-based design of the Instagram service.

If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. You can also object to the loading of the Instagram plugins and thus the data processing operations described above for the future with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).

Instagram LLC. with headquarters in the USA is certified for the us-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

For the purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and setting options for protecting your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/

7.4 Instagram plugin as Shariff solution

Our website uses so-called social plugins ("plugins") of the online service Instagram, which is operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

To increase the protection of your data when visiting our website, these buttons are not unrestricted plugins, but are only integrated into the page using an HTML link. This type of integration ensures that when you call up a page of our website that contains such buttons, no connection is yet established with the servers of Instagram. When you click on the button, a new browser window opens and calls up the Instagram page, where you can interact with the plugins there (possibly after entering your login data).
Instagram LLC. with headquarters in the USA is certified for the us-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

8. ONLINE MARKETING

Facebook Pixel for the creation of Custom Audiences
Within our online offer, the so-called "Facebook pixel" of the social network Facebook is used, which is operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
If a user clicks on an ad placed by us that is played on Facebook, an addition is added to the URL of our linked page by Facebook Pixel. If our site allows data to be shared with Facebook via Pixel, this URL parameter is inscribed in the user's browser via a cookie that our linked site sets itself. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook pixel, it is possible for Facebook to determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined based on the websites visited), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not have a harassing effect. This allows us to further evaluate the effectiveness of the Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so- called "conversion").
The collected data is anonymous for us, so we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, according to the Facebook data usage policy (https://www.facebook.com/about/privacy/). The data can enable Facebook and its partners to place advertisements on and outside of Facebook.The data processing associated with the use of the Facebook Pixel is carried out based on our overriding legitimate interest in the evaluation, optimization and economic operation of our online offering and our advertising measures in accordance with Art. 6 (1) lit. f DSGVO.

The information generated by Facebook is usually transmitted to a Facebook server and stored there; this may also involve transmission to the servers of Facebook Inc. in the USA. Facebook Inc. with headquarters in the USA is certified for the us-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

To object to the collection by the Facebook pixel and the use of your data to display Facebook ads altogether, you can set an opt-out cookie that disables Facebook pixel tracking by clicking on the link below:
Disable Facebook Pixel

This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click the link above again.

9. WEB ANALYTICS SERVICES Google (Universal) Analytics

Google Analytics with demographic characteristics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening and excludes a direct personal reference. Through this extension, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC.server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent the collection by Google Analytics within this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again): Disable Google Analytics

If personal data is transferred to Google LLC., which is based in the USA, Google LLC. has certified itself for the us-European data protection agreement "Privacy Shield", which guarantees compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

This website also uses the "demographic characteristics" function of Google Analytics. This allows reports to be generated that include demographic information such as age, gender, and interests of site visitors. This data comes from Google's interest-based advertising, the Google Display Network, and third-party visitor data. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown below.

You can deactivate this by using a browser plugin from Google (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent the collection by Google Analytics within this website in the future (this opt- out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again): Google Analytics deactivate

Further information on Google (Universal) Analytics can be found here: https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

10. TOOLS AND OTHER Shopsync for Shopify

This website uses the Shopify app "Shopsync" by ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA.
With the help of ShopSync, the newsletter service "Mailchimp" is synchronized with our Shopify account in such a way that, on the one hand, updates in Mailchimp email lists (such as a newsletter recipient opting out) are also automatically stored on Shopify and, on the other hand, new contact data generated via contracts on Shopify are automatically transferred to the Mailchimp email lists.

In the former case, data processing is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO based on our legitimate interest in the effective and cross-system maintenance of the files of advertising addressees and the efficient observance of legally significant status changes.

In the second case, exclusively based on an explicit consent of the user pursuant to Art. 6 para. 1 lit. a DSGVO, after a contract has been concluded on Shopify for inclusion in the Mailchimp list, the user's first and last name, address, and email address together with transaction-related information (purchase amount, time, and date of purchase) are transmitted to Mailchimp by ShopSync.

Data transferred in this way is not stored or retained by ShopSync after synchronization. All information synced between Shopify and Mailchimp is transferred using Secure Socket Layer (SSL) technology, and all information transferred remains encrypted during the sync process.

The synchronization process requires the transmission of information via a secure connection to servers hosted by Amazon Web Services in the USA. Amazon Web Services, based in the USA, is certified for the us-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4

You can find further data protection information on ShopSync here: https://shopsync.io/privacy-policy

11. RIGHTS OF THE PERSON CONCERNED

11.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller about the processing of your personal data, which we inform you about below:

Right to information pursuant to Art. 15 DSGVO: You have in particular the right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it is not processed by us. the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected by us from you, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and the intended effects of such processing concerning you, as well as your right to be informed which guarantees exist in accordance with Article 46 of the GDPR in the event of forwarding of your data to third countries;

Right to rectification in accordance with Art. 16 DSGVO: You have a right to the immediate rectification of incorrect data relating to you and/or completion of your incomplete data stored by us;
Right to erasure in accordance with Art. 17 DSGVO: You have the right to request the erasure of your personal data if the conditions of Art. 17 (1) DSGVO are met. However, this right does not exist if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.

Right to restriction of processing pursuant to Art. 18 DSGVO: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse the deletion of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you require your data for the assertion, exercise or defense of legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons relating to your particular situation, as long as it has not yet been determined whether our legitimate reasons prevail;

Right to information pursuant to Article 19 of the GDPR: If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

Right to data portability pursuant to Art. 20 DSGVO: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine- readable format or to request that it be transferred to another controller, insofar as this is technically feasible.

Right to revoke consent granted in accordance with Art. 7 (3) DSGVO: You have the right to revoke consent to the processing of data once granted at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation.

Right to lodge a complaint under Article 77 GDPR: If you consider that the processing of personal data concerning you infringes the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in the Member State of your residence, workplace or the place of the alleged infringement.

11.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

12. DURATION OF STORAGE OF PERSONAL DATA

The duration of the storage of personal data is determined based on the respective legal basis, the purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed based on explicit consent pursuant to Art. 6 (1) a DSGVO, this data is stored until the person concerned revokes his or her consent.

If there are legal retention periods for data that is processed within the framework of legal business or similar obligations based on Art. 6 Para. 1 lit. b DSGVO, this data will be routinely deleted after expiry of the retention periods if it is no longer required for the fulfilment of the contract or the initiation of the contract and/or there is no justified interest on our part in the continued storage.

When processing personal data based on Art. 6(1)(f) DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21(1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing based on Art. 6 (1) f DSGVO, this data is stored until the data subject exercises his right to object in accordance with Art. 21 (2) DSGVO.

Moreover, unless otherwise specified in the other information on specific processing situations in this statement, stored personal data are deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.