I. Person responsible, scope of application
The responsible party within the meaning of the relevant data protection regulations is AdStrive GmbH (hereinafter referred to as the "provider"). Please refer to the imprint for details of the summonable address and powers of representation.
For us, personal data protection is the highest priority. We would therefore like to inform you at this point about what data we collect and when, and how we handle your personal data. This data protection declaration describes the collection and use of personal data when visiting and using our website www.adstrive.com (hereinafter: "website").
This is purely a presentation page on which the services of the provider and associated references are presented. There is no possibility to conclude contracts via the website.
The provider also evaluates personal data for statistical and market analysis purposes. In this context, statistics on, for example, industry affiliation, location and market area of website visitors are compiled and evaluated in anonymised form. Details on this can be found in the respective sections of this data protection declaration. Additional data protection information may apply to special services (e.g. sending newsletters). We will inform you about these at the beginning of the use of the respective service.
II. General information on data processing
1. Scope of personal data processing
As a matter of principle, we only process personal data of our users to the extent that it is necessary to provide a functioning website and content. Personal data processing of our users is only carried out routinely with the consent of the user or on the basis of other legal provisions that permit data processing.
2 Legal basis for personal data processing
Consent
Insofar as we obtain the consent of the data subject for processing, operations of personal data, Art. 6 (1) lit. a EU Data Protection Regulation (DSGVO) serves as the legal basis.
Contract or pre-contractual measures
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Legal obligation
Insofar as processing of personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.
Legitimate Interest
If processing is necessary to protect a legitimate interest of our company or a third party and their interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.
3 Data Deletion and Storage Period
In principle and unless otherwise stated, your personal data will only be stored until the purpose for which it was collected and stored no longer applies. In accordance with your consent, data may also be stored for longer as long as you do not revoke your consent.
In principle and unless otherwise stated, your personal data will only be stored until the purpose for which it was collected and stored no longer applies. In accordance with your consent, data may also be stored for longer as long as you do not revoke your consent.
4. Transfer to Non-Member Countries
Unless otherwise stated, all data processing operations take place within the EU or EEA countries.
Data processing operations carried out via third party providers established outside the aforementioned geographical area may be carried out in part or in full in the countries of the respective establishment or in accordance with the respective data protection provisions.
Any transfer of personal data outside the EU or EEA will only be made on the basis of an adequacy decision of the European Commission, including the EU-US Privacy Shield adequacy decision, or in accordance with standard contractual clauses of the European Commission. A list of current adequacy decisions is available on the European Commission's website.
Information about the EU-US Privacy Shield, and in particular information about the participation of a particular company, can be found on the website of the US Department of Commerce.
III. General Data Use in the Provision of the Website and Creation of Log Files
When you access our website, we automatically store usage-related data about the usage process. This includes in particular the IP address, the URLs visited, the length of stay and the user's location.
We collect this data to ensure that our website is available to you. Furthermore, they are used to anonymously analyse, store and evaluate user behaviour and to continuously improve and develop our service. For more details on the systems used in this process, please refer to the sections on cookies and social media below.
We only store your IP address in the log files for a limited period of time, insofar as it is necessary for security purposes.
The aforementioned purposes are also our legitimate interest, which justifies the data processing pursuant to Art. 6 Par. 1 lit. f) DSGVO.
IV. Data Transmission when using the Comment Function
On our website, you have the option of leaving your own comments in connection with certain content. Your comment will be published with your specified user name with the post. We recommend that you use a pseudonym instead of your real name. You are required to provide your username and email address, all other information is voluntary. If you post a comment, we will continue to store your IP address. This storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your email address to contact you if a third party objects to your comment as illegal. The legal basis for this is Art. 6 para. 1 lit. b) and f) DS-GVO. Comments are not checked before publication. We reserve the right to delete comments if they are objected to by third parties as unlawful.
V. Data Transmission when using the Contact Form
If you write to us via the contact form on our website, we receive the personal data that you voluntarily provide, i.e. name, e-mail address, content of the message. We use this data exclusively to respond to your inquiry. No further processing takes place.
VI. Use of Cookies
a) Description and scope of data processing
In order to make visiting our website more attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (session cookies).
Other cookies remain on your terminal device and enable us or our partner companies to recognise your browser on your next visit (persistent cookies).
You can manage your browser settings so that you are informed about the setting of cookies and decide individually to accept or reject cookies for certain cases or in general. In addition, you can manually delete cookies from your end device at any time.
If you do not accept cookies, the functionality of our website may be limited.
We use cookies to monitor and evaluate user behaviour for market analysis purposes. These are third-party cookies that are applied when using our services. Please refer to the following sections for details. We use cookies to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our services and make them more interesting for you as a user. This is also our legitimate interest.
Unless otherwise stated, the legal basis for the processing is Art. 6 para. 1 lit. f DSGVO.
Unless otherwise stated, the transfer of your data to third parties in the USA, whose cookies are used via our website, takes place within the framework of the EU-USA Privacy Shield.
GOOGLE ADWORDS
As an AdWords customer, we use Google Conversion Tracking. This is an analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). When you reach our website via a Google ad, Google Adwords sets a cookie on your device ("conversion cookie"). This cookie loses its validity after 30 days. It is not used for personal identification. If the cookie has not yet expired when you visit certain pages on our website, we and Google can recognise that someone has clicked on the ad and thus been redirected to our site. Each AdWords customer receives a different cookie. Cookies can therefore not be tracked across AdWords customers' websites. The information collected by the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The AdWords customers are aware of the total number of users who clicked on their ad and were redirected to a page marked with a conversion tracking tag. However, they do not receive any information that could personally identify users. If you do not wish to participate in the tracking process, you can also refuse the setting of a cookie required for this - for example, via your browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain "googleadservices.com".
For more information on how Google handles personal data, please refer to Google's privacy policy: https://policies.google.com/privacy?hl=de.
GOOGLE ANALYTICS
We work with "Google Analytics". This is a web analysis service of Google Inc. The information generated by the Google Analytics cookie about your use of our website is usually transmitted to a Google server in the USA and stored there. IP anonymisation has been activated on our websites so that the IP address of the user is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the unabbreviated IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of the website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data, by installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, you can click on the following link: Deactivate Google Analytics. An opt-out cookie will then be set, which prevents the future collection of your data when visiting this website. For more information on how Google handles personal data, please refer to Google's privacy policy: https://policies.google.com/privacy?hl=de.
GOOGLE ADWORDS CONVERSION
We use Google AdWords to draw attention to our deals and offers on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we aim to show you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be targeted) are usually stored as analysis values for this cookie.
These cookies enable Google to recognise your internet browser. If a user visits certain pages of an Adwords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user has clicked on the ad and been redirected to that page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. These evaluations enable us to recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have reached the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will obtain and store your IP address.
You can prevent participation in this tracking process in various ways: a) by adjusting your browser software accordingly, in particular the suppression of third-party cookies will result in you not receiving any third-party ads; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google. de/settings/ads, deleting this setting when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link http://www.aboutads.info/choices, deleting this setting when you delete your cookies; d) by permanently deactivating them in your browsers Firefox, Internetexplorer or Google Chrome under the link
http://www.google.com/settings/ads/ plugin. Please note that in this case you may not be able to use all the functions of this website to their full extent.
Further information on data protection at Google can be found here:
http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html.
GOOGLE REMARKETING
In addition to Adwords Conversion, we use the Google Remarketing application. This is a process we use in an attempt to appeal to you again. Through this application, you can be shown our advertisements when you continue to use the internet after visiting our website. This is done by means of cookies stored in your browser, which Google uses to record and evaluate your usage behaviour when you visit various websites. In this way, Google can determine your previous visit to our website. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymisation is used in remarketing.
BING ADS
We use the conversion tracking of Microsoft, Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). When you access our website via a Bing ad, Microsoft Bing Ads sets a cookie on your terminal device. This allows Microsoft Bing and us to recognise that someone has clicked on an ad and thus been redirected to our website. We only learn the total number of users who clicked on a Bing ad and were redirected. Personal information about the identity of the user is not disclosed. If you do not wish to participate in the tracking procedure, you can also refuse the setting of a cookie required for this - for example, via your browser setting, which generally deactivates the automatic setting of cookies, or via the means provided by Microsoft: https://account.microsoft.com/privacy/ad-settings/signedout?lang=de-DE.
For further information on the handling of personal data by Microsoft, please refer to Microsoft's privacy policy:
https://privacy.microsoft.com/de-de/privacystatement.
FACEBOOK CUSTOM AUDIENCES RETARGETING
We use the retargeting tool "Website Custom Audiences" of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA on our websites. In the event that you have a Facebook user account and this is recognisable by means of existing Facebook cookies, this tool generates a non-personal checksum which is transmitted to Facebook for analysis and marketing purposes. Secondly, we encrypt your email address and send it to Facebook in encrypted form. The cookie recognition and transmission of the encrypted information allows Facebook to display targeted product recommendations to you on our behalf as personalised banner ads on Facebook. You can object to the use of Facebook Website Custom Audiences at https://www.facebook.com/ads/website_custom_audiences/.
CRITEO AND MEDIAPLEX
On our websites, information about the surfing behaviour of website visitors is collected and stored in anonymous form for marketing purposes by the technologies of the providers Criteo GmbH and Conversant Inc. This data is stored on your computer using so-called "cookie" text files. Criteo and Conversant use algorithms to analyse surfing behaviour and can then display targeted product recommendations as personalised advertising banners on other websites (“publishers”). Under no circumstances can this data be used to personally identify visitors to this website.
The collected data is only used to improve the offer. It will not be used in any other way or passed on to third parties. You can object to the completely anonymous analysis of your surfing behaviour by clicking on this link for Criteo http://www.criteo.com/de/privacy/ to unsubscribe and for Conversant at http://www.conversantmedia.com/opt-out.
Weitere Informationen zu der Technologie von Criteo erhalten Sie in den Datenschutzbestimmungen von Criteo (http://www.criteo.com/de/datenschutzrichtlinie) und Conversant (http://www.conversantmedia.com/mediaplex/).
SOCIOMANTIC
We use the advertising service Sociomantic of dunnhumby Germany GmbH, Paul-Lincke-Ufer 39/40, 10999 Berlin. When you access our website, a cookie is stored on your terminal device by Sociomantic. This enables Sociomantic to analyse your surfing behaviour using algorithms and then display targeted product recommendations as personalised advertising banners on other websites (“publishers”).
Further information on how Sociomantic works, as well as the possibility to object to the processing of your personal data by Sociomantic, can be found at https://www.sociomantic.com/privacy/en/.
b) Duration of Storage, Possibility of Objection and Removal Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.
VII. Newsletter
You can register to receive our newsletter by entering your e-mail address in the form provided. You can also enter your first and last name, gender and place of residence on a voluntary basis. You will then receive an automatic confirmation email containing a link to the address you have given. The registration process is complete only after clicking on this link.
With your consent to receive our newsletter, we will use your email address to send you advertising and offers of interest to you regarding our own services and those of partner companies. Your data will not be passed on to third parties.
You can withdraw your consent to receive newsletters at any time with no need for explanation by objecting to the receipt of newsletters.
We will inform you about the right to object when collecting the email address and in the respective newsletter.
The newsletter is sent using the dispatch service provider "MailChimp", a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the mailing service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The shipping service provider is used on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO and an order processing agreement pursuant to Art. 28 para. 3 p. 1 DSGVO.
The dispatch service provider may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimise or improve its own services, e.g. to technically optimise the dispatch and presentation of the newsletter or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.
VIII. Social Media Plugins
We use social media plugins from various providers on our website to improve our offers and make them more personalised to you. The basis of the associated processing of personal data is therefore Art. 6 (1) lit. f DSGVO.
We currently use the following social media plug-ins:
FACEBOOK, TWITTER, XING, LINKEDIN, INSTAGRAM, SNAPCHAT.
We use the “two-click solution”. This means that when you visit our site, no personal data is passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by the marking on the box above its initial letter or logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, the plug-in provider receives the information that you have activated the corresponding website of our online offer. In addition, the data mentioned under § 3 of this declaration is transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the greyed-out box. We have no influence on the data collected and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, or storage periods. We also have no information on the deletion of the collected data by the plug-in provider. The plug-in provider stores the data collected about you as a usage profile and uses this for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the particular social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user. The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you to avoid a classification of your profile with the plug-in provider.
For the purpose and scope of the data collection and the further processing and use of the data by the providers on their pages, as well as a contact option and your rights and setting options in this regard to protect your privacy, please refer to the data protection notices of the providers.
https://www.facebook.com/policy.php
https://twitter.com/privacy
https://help.instagram.com/155833707900388
https://www.xing.com/privacy
http://www.linkedin.com/legal/privacy-policy
https://www.snap.com/de-DE/privacy/privacy-center/
https://soundcloud.com/pages/privacy
VIMEO
We embed videos on our website via the Vimeo.com portal of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA ("Vimeo"). When you activate a page that embeds videos via Vimeo, only embedded video windows with a "Play" symbol are initially loaded. When you click on the "Play" function, an information text is displayed explaining how your data is processed by playing the Vimeo video. Only when you then confirm this by clicking "Ok" will a connection be established to the Vimeo servers in the USA. In the process, information about your visit and your IP address will be stored there. Interactions with the Vimeo plugins such as clicking the start button are collected directly by Vimeo and stored there. If you have a Vimeo user account and are logged in to Vimeo, Vimeo can associate your viewing of the video with your user account. If you do not want this, you must log out of Vimeo before visiting our website. Vimeo enables further interactive functions in relation to the videos integrated with us, for example rating or sharing the videos. To use these functions, it may be necessary for you to log in with your user account at Vimeo or other providers (such as Facebook or Twitter). The privacy policy for Vimeo with more detailed information on the collection and use of your data by Vimeo can be found at http://vimeo.com/privacy.
Furthermore, Vimeo also activates the Google Analytics service via the iFrame in which the video is embedded on our website. For more information on how Google Analytics works and your opt-out options, please refer to the relevant section of this privacy policy.
YOUTUBE
Content from third party providers is integrated on our website. This content is provided by Google LLC via the YouTube video service. YouTube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
For videos from YouTube that are embedded on our site, the extended data protection setting is activated. This means that no information from website visitors is collected and stored by Youtube unless they play the video. The integration of the videos serves to protect our legitimate interests in the optimal marketing of our offer, which outweigh our interests in the context of a balancing of interests.
For the purpose and scope of the data collection and the further processing and use of the data by the providers, as well as your rights in this respect and setting options for protecting your privacy, please refer to the data protection information of Google http://www.google.com/intl/de/+/policy/+1button.html.
IX. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the responsible party:
1. Right of access
You may request confirmation from the responsible party as to whether personal data concerning you is being processed by us.
If there is such processing, you may request information from the responsible party about the following:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data which are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the envisaged duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
(5) the existence of a right to obtain the rectification or erasure of personal data concerning you, a right to obtain the restriction of processing by the responsible party or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information on the origin of the data, if the personal data are not collected from the data subject;
(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information on whether personal data concerning you are transferred to a non-member country or to an international organisation. In this context, you may request to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.
2. Right of rectification
You have a right to rectification and/or completion vis-à-vis the responsible party if the personal data processed concerning you are inaccurate or incomplete. The responsible party must make the rectification without undue delay.
3. Right to restriction of processing
You may request the restriction of the processing of personal data concerning you under the following conditions:
(1) if you contest the accuracy of the personal data concerning you for a period enabling the responsible party to verify the accuracy of the personal data;
(2) the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
(3) the responsible party no longer needs the personal data for the purposes of the processing but you need it for the establishment, exercise or defence of legal claims; or
(4) if you have objected to the processing pursuant to Article 21(1) of the GDPR and it has not yet been determined whether the legitimate grounds of the responsible party override your grounds.
Where the processing of personal data relating to you has been restricted, such data may only be processed - apart from being stored - with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the responsible party before the restriction is lifted.
4. Right to erasure
a) Obligation to erase
You may request the responsible party to erase the personal data concerning you without undue delay and the responsible party is obliged to erase such data without undue delay if one of the following reasons applies:
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing was based pursuant to Art. 6 (1) a or Art. 9 (2) a DSGVO and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
(4) The personal data concerning you have been processed unlawfully.
(5) The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the responsible party is subject.
(6) The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.
b) Information to third parties
If the responsible party has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers that process the personal data that you, as the data subject, have requested them to erase all links to, or copies or replications of, that personal data.
c) Exceptions
The right to erasure does not apply insofar as the processing is necessary to.
(1) for the exercise of the right to freedom of expression and information;
(2) for compliance with a legal obligation which requires processing under Union or Member State law to which the responsible party is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the responsible party;
(3) for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in section (a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
(5) to assert, exercise or defend legal claims.
5. Right to information
If you have asserted the right to rectification, erasure or restriction of processing against the responsible party, the responsible party is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed of these recipients by the responsible party.
6. Right to data portability
You have the right to receive the personal data concerning you that you have provided to the responsible party in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another responsible party without hindrance from the responsible party to whom the personal data has been provided, provided that:
(1) the processing is based on consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to Art. 6 para. 1 lit. b DSGVO and
(2) the processing is carried out with the aid of automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transferred directly from one responsible party to another responsible party, insofar as this is technically feasible. This must not affect the freedoms and rights of other persons.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the responsible party.
7. Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.
The responsible party shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time, without explanation, to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
8. Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
9. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
X. Changes to this data protection declaration
Due to the dynamic development of the Internet, new technologies and possibilities are constantly evolving. In order to allow you to benefit from these possibilities and technologies, we reserve the right to amend this data protection declaration in the future if new or additional services are introduced or if existing services or service elements are changed or extended.
To the extent that the change to the Privacy Policy only affects data use in general and/or data use for orders and not also data use in the context of a user account, the new Privacy Policy will apply from the date of its update on the Website.
A change to the data protection declaration that relates to the use of data already collected and stored for the purpose of sending newsletters will only be made if this is reasonable for you. If and insofar as changes to the data protection declaration relate to the use of the data already collected and used for sending newsletters, we will notify you within reasonable time by email, on our website or in another form. If you do not object within the aforementioned period, you will be deemed to have accepted the amended data protection statement. We will inform you of your right to object and the significance of the objection period in the notification.