Privacy Policy

DATA PROTECTION DECLARATION

 

1. INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER

1) 1 We are pleased that you are visiting our website and thank you for your interest. We would like to inform you about the processing of your personal data when using our website. Personal data is any data that can be used to identify you personally.

1) 2.The data controller on this website within the meaning of the General Data Protection Regulation (GDPR) is Dunedin Boutique, The personal data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1) 3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or requests to the person responsible), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the padlock symbol in your browser line.

 

DATA COLLECTION WHEN VISITING OUR WEBSITE

 

When you simply use our website for information purposes, i.e. when you do not register or send us information in any other way, we collect only the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary to enable us to display the website to you:

• Site visited
• Date and time of access Amount of data sent in bytes
• Source/reference from which you accessed the page Browser used
• Operating system used
• IP address used (if applicable: anonymized)

Processing is carried out in accordance with Article 6(1)(f) of the GDPR, on the basis of our legitimate interest in improving the stability and functionality of our website. Data is not passed on or used in any other way. However, we reserve the right to subsequently check server log files if there are concrete indications of illegal use.

 

COOKIES

To make your visit to our website more attractive and to enable you to use certain functions, we use cookies on various pages. These are small text files that are stored on your terminal. Some of the cookies we use are deleted at the end of the session.

The data is deleted at the end of the browsing session, i.e. when you close your browser (so-called “cookies”).

session cookies). Other cookies remain on your terminal and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit (persistent cookies). If cookies are installed, they collect and process certain user information such as navigation and location data, as well as IP address values, on an individual basis. Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie.

Cookies serve in part to simplify the ordering process by storing parameters (e.g. memorizing the contents of a virtual shopping cart for a subsequent visit to the website). If personal data is also processed by certain cookies implemented by us, processing takes place in accordance with Article 6, paragraph 1, point b) of the GDPR, either for the performance of the contract or for the processing of personal data.

in accordance with Article 6(1)(f) of the GDPR, in order to safeguard our legitimate interests in the best possible functionality of the website as well as a user-friendly and efficient design of the website visit.

In certain circumstances, we work with advertising partners who help us to make our Internet offering more interesting for you. For this purpose, cookies from partner companies are also stored on your hard disk when you visit our website (third-party cookies). If we collaborate with the above-mentioned advertising partners, you will be informed individually and separately about the use of these cookies and the extent of the information collected in the following paragraphs.

 

Please note that you can configure your browser so that you are informed when cookies are installed and can decide whether to accept them individually or not, in certain cases or in general. Each browser differs in the way it handles cookie settings. This is described in each browser's help menu, which explains how to modify your cookie settings. You can find them for each browser by clicking on the following links:

Internet Explorer :

https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manag e-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en Safari: https://support.apple.com/kb/ph21411?locale=de_DE

Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

 

4) CONTACT

Personal data is collected when you contact us (e.g. via the contact form or e-mail). The data collected in the case of a contact form is indicated in the corresponding contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contact and related technical administration. The legal basis for data processing is our legitimate interest in responding to your request in accordance with Article 6(1)(f) of the GDPR. If your contact is for the purpose of concluding a contract, the additional legal basis for processing is Art. 6(1)(b) of the GDPR. Your data will be deleted after the final processing of your request, which is the case when circumstances allow us to deduce that the facts concerned have been definitively clarified and insofar as there is no legal obligation to retain it.

 

DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PERFORMANCE

 

In accordance with Article 6(1)(b) of the GDPR, personal data is also collected and processed when you provide it to us for the performance of a contract or when opening a customer account. The data collected is indicated in the corresponding input forms. You may cancel your customer account at any time by sending a message to the above address. We store and use the data you provide for the purpose of fulfilling the contract. After completion of the contract or deletion of your customer account, your data will be blocked due to the retention periods stipulated by tax and commercial law and deleted on expiry of these periods, unless you have expressly consented to further use of your data or we have reserved the right to use your data in accordance with the law, which we inform you of below.

 

USE OF YOUR DATA FOR DIRECT ADVERTISING

 

6) 1) Subscription to our electronic newsletter

If you subscribe to our electronic newsletter, we will send you regular information about our offers. Your e-mail address is the only data required to send the newsletter. The provision of any other data is optional and is used to address you personally. We use the double opt-in procedure to send you the newsletter. This means that we will only send you a newsletter by e-mail if you have expressly confirmed that you agree to the newsletter being sent to you. We then send you a confirmation e-mail in which we ask you to confirm that you wish to receive the newsletter in future by clicking on a corresponding link.

By activating the confirmation link, you are giving us your consent to use your personal data in accordance with Article 6, paragraph 1, point a) of the GDPR. When registering for the newsletter, we record your IP address as registered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any subsequent misuse of your e-mail address. The data we collect when you register for the newsletter is used exclusively for commercial prospecting via the newsletter. You can unsubscribe from the newsletter at any time by clicking on the link provided in the newsletter or by sending a corresponding message to the person responsible mentioned at the beginning. Once you have unsubscribed, your e-mail address will be immediately deleted from our newsletter mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data in ways that go beyond what is permitted by law and of which we hereby inform you.

 

6) 2.E-mail newsletter to existing customers.

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to send you regular e-mail offers concerning goods or services similar to those you have already purchased from our assortment. For this, we do not require any special consent from you.

from you. Data processing is then carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Article 6(1)(f) of the GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You have the right to object at any time, with effect for the future, to the use of your e-mail address for advertising purposes by sending a message to the person responsible mentioned at the beginning. To do so, you will only have to pay the transmission costs according to the basic rates. Upon receipt of your objection, the use of your e-mail address for advertising purposes.

 

DATA PROCESSING FOR ORDER PROCESSING

 

7) 1) In the course of fulfilling the contract, the personal data we collect will be passed on to the shipping company responsible for delivery, insofar as this is necessary for the delivery of the goods. As part of payment processing, we pass on your payment data to the credit institute appointed by you, insofar as this is necessary for payment processing. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of data here is Art. 6, para. 1, letter b of the RGPD.

7) 2.Use of payment providers

- PayPal

In the event of payment via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - “purchase on invoice” or “installment payment” via PayPal, we transmit your payment data as part of the payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). The transmission is carried out in accordance with art. 6, paragraph 1, letter b of the RGPD and only insofar as this is necessary for the processing of the payment.

PayPal reserves the right to carry out a credit check for payment methods by credit card via PayPal, by direct debit via PayPal or - if offered - “Purchase on invoice” or “Instalment payment” via PayPal. For this purpose, your payment data is, where applicable, passed on to credit bureaus in accordance with Article 6(1)(f) of the RGPD on the basis of PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the creditworthiness inquiry with regard to the statistical probability of payment default for the purpose of deciding whether to make the relevant payment method available. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the credit information result, they are based on a scientifically recognized mathematical and statistical procedure. The calculation of score values includes, but is not limited to, address data. For further information on data protection, in particular on the credit bureaus used, please consult PayPal's data protection declaration: https: //www.paypal.com/de/webapps/mpp/ua/privacy-full

You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal remains authorized, if necessary, to process your personal data insofar as this is necessary for the processing of payments in accordance with the contract.

- IMMEDIATELY

If you select the “SOFORT” payment method, payment processing is carried out by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “SOFORT”), to whom we pass on the information you have given us as part of the order process, as well as information relating to your order, in accordance with Article 6, paragraph 1, point b of the RGPD. Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The transmission of your data takes place exclusively for the purpose of processing the payment with the payment service provider SOFORT and only to the extent necessary for this purpose.

For further information on SOFORT's privacy policy, please consult the following Internet address: https: //www.klarna.com/sofort/datenschutz

CONTACT FOR EVALUATION REMINDER

Own evaluation reminder (not sent by a customer evaluation system)

We use your e-mail address to send you a one-time reminder to give an evaluation of your order for the evaluation system we use, insofar as you have given us your express consent to do so during or after your order, in accordance with Article 6(1)(a) of the GDPR.

You can revoke your consent at any time by sending a message to the data controller.

USE OF SOCIAL MEDIA: SOCIAL PLUGINS

 

9) 1 Facebook plugins with Shariff solution

Special additional customs clearance costs and/or import duties are not included in the price and are to be borne by the customer.

Our website uses so-called social plugins (“plugins”) from the Facebook social network, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).

In order to improve the protection of your data when you visit our website, these buttons are not integrated unrestrictedly as plugins, but only by means of an HTML link on the page. This type of integration ensures that no connection is established with Facebook's servers when a page on our website containing such buttons is accessed. When you click on the button, a new browser window opens and calls up the Facebook page, where you can interact with the plugins (if applicable, after entering your login data).

Facebook Inc. is based in the USA and is certified by the “Privacy Shield” data protection agreement, which guarantees compliance with the level of data protection in force in the EU.

To find out more about the purpose and scope of data collection, further processing and use by Facebook, as well as your rights and options in this regard to protect your privacy, please consult Facebook's privacy policy: https://www.facebook.com/policy.php

 

9) 2 Google+ plugins as a Shariff solution

Our website uses social plugins (“plugins”) from the Google+ social network, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

In order to improve the protection of your data when you visit our website, these buttons are not integrated unrestrictedly as plug-ins, but only by means of an HTML link on the page. This type of integration ensures that no connection is established with Google+ servers when a page on our site containing such buttons is accessed. When you click on the button, a new browser window opens and calls up the Google+ page, where you can interact with the plugins (if applicable, after entering your login data).

Google LLC, headquartered in the USA, is responsible for the European Data Protection Convention.

“Privacy Shield”, which guarantees compliance with the level of data protection in force in the EU.

To find out more about the purpose and scope of data collection, further processing and use of data by Google, as well as your rights in this regard and the options you have for setting settings to protect your privacy, please see Google's data protection information: https: //www.google.com/intl/de/policies/privacy/

 

9) 3.Instagram plugin as a shariff solution

Our website uses social plugins (“plugins”) from the online service Instagram, which is operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”).

In order to improve the protection of your data when visiting our website, these buttons are not integrated unrestrictedly as plugins, but only by means of an HTML link on the page. This type of integration ensures that no connection is established with Instagram's servers when a page on our website containing such buttons is viewed. When you click on the button, a new browser window opens and calls up the Instagram page, on which you can interact with the plugins (if applicable, after entering your login data).

Instagram LLC. headquartered in the United States, is certified by the European data protection agreement “Privacy Shield”, which guarantees compliance with the level of data protection in force in the EU.

To find out about the purpose and scope of data collection, further processing and use of data by Instagram, as well as your rights in this regard and the options for setting settings to protect your privacy, please see Instagram's privacy policy: https://help.instagram.com/155833707900388/

 

ONLINE MARKETING

10) 1.DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google from the operator Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“DoubleClick”).

DoubleClick uses cookies to deliver ads that are relevant to users, to improve reporting on campaign performance or to prevent a user from

sees the same ads more than once. Thanks to a cookie ID, Google knows which ads are delivered to which browser, and can thus prevent them from being displayed more than once. Processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Article 6(1)(f) of the GDPR.

In addition, DoubleClick may, using cookie identifiers, record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and then visits the advertiser's website with the same browser and makes a purchase there. According to Google, the data includes

DoubleClick cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to the state of our knowledge: by integrating DoubleClick, Google receives the information that you have visited the corresponding part of our website or that you have clicked on an advert from us. If you are registered with a Google service, Google can attribute the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider discovers and records your IP address.

If you wish to object to participation in this tracking procedure, you can deactivate cookies for conversion tracking by configuring your browser so that cookies from the www.googleadservices.com domain are blocked , https://www.google.de/settings/ads, this setting being erased when you delete your cookies. You can also contact the Digital Advertising Alliance at  www.aboutads.info to find out more about cookie placement and make the appropriate settings. Finally, you can configure your browser so that you are informed when cookies are installed and can decide whether to accept them individually or not, in certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.

Google LLC, headquartered in the USA, is responsible for the European Data Protection Convention.

“Privacy Shield”, which guarantees compliance with the level of data protection in force in the EU.

For more information on DoubleClick by Google's privacy policy, please visit https://www.google.de/policies/privacy/.

10) 2.use of Google AdWords conversion tracking

This website uses the “Google AdWords” online advertising program and, as part of Google AdWords, conversion tracking from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google Adwords to draw attention to our attractive offers by means of advertising media (so-called Google Adwords) on external websites. We can determine the success of the various advertising measures in conjunction with advertising campaign data. This is in our interest to show you ads that interest you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

The conversion tracking cookie is activated when a user clicks on an AdWords ad served by Google. Cookies are small text files that are placed on your computer system. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user has clicked on the ad and been redirected to that page. Each Google AdWords client receives a different cookie. Cookies can therefore not be tracked on the websites of AdWords customers. The information obtained from the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of

Users who have clicked on their ad and reached a website containing a link to their ad. conversion tracking. However, they do not receive any personally identifiable information. If you do not wish to participate in tracking, you can block this use by deactivating the Google conversion tracking cookie via your Internet browser in the user settings. You will then not be included in conversion tracking statistics. We use Google Adwords because of our legitimate interest in targeted advertising in accordance with Article 6(1)(f) of the GDPR.

Google LLC, headquartered in the United States, is responsible for the European Data Protection Convention.

“Privacy Shield”, which guarantees compliance with the level of data protection in force in the EU.

For more information on Google's privacy policy, please visit https://www.google.de/policies/privacy/.

You can permanently disable cookies for advertising preferences by preventing their use through a corresponding setting in your browser software or by downloading and installing the browser plug-in available under the following link:

https://www.google.com/settings/ads/plugin?hl=de

Please note that if you have deactivated the use of cookies, some functions of this website may not be accessible or may be accessible only to a limited extent.

WEB ANALYTICS SERVICES

 

Google (universal) Analytics

- Google Universal Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your IP address) will usually be transmitted to and stored by Google on servers in the United States.

This website uses Google Analytics exclusively with the “_anonymizeIp()” extension, which guarantees the anonymization of the IP address by shortening it and excludes any direct link with a person. With this extension, your IP address is abbreviated beforehand by Google within the member states of the European Union or in other signatory states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity and provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the data generated by the cookie relating to your use of the website (including your IP address) from being collected and processed by Google by downloading and installing the browser plug-in available at the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in, or for browsers on mobile devices, please click on the following link to install an opt-out cookie that will prevent Google Analytics from collecting data on this website in the future (this will prevent Google Analytics from collecting data on you).

The opt-out cookie only works in this browser and for this domain.

your cookies in this browser, you need to click on this link again) : Disable Google Analytics

Google LLC, headquartered in the United States, is responsible for the European Data Protection Convention.

“Privacy Shield”, which guarantees compliance with the level of data protection in force in the EU.

This site also uses Google Analytics for an analysis of visitor flows across all devices, which is carried out using a user ID. When a page is accessed for the first time, the user is assigned a unique, permanent and anonymous ID, which is defined for all devices. This enables interaction data from different devices and sessions to be attributed to a single user. The user ID does not contain any personal data, nor does it transmit any such data to Google.

It is possible to object at any time to the collection and storage of data via the User ID, with effect for the future. To do this, you need to deactivate Google Analytics on all the systems you use, for example in a different browser or on your mobile device.

This can be done using a Google browser plug-in (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to

or in browsers for mobile devices, please click on the following link to install an opt-out cookie that will prevent data collection by Google Analytics on this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click on this link again): Deactivate Google Analytics

Further information on Universal Analytics can be found here: https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

 

RETARGETING/ REMARKETING/ RECOMMENDATION ADVERTISING

Facebook Custom Audience via the pixel process

This site uses the “Facebook pixel” from Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). If explicitly agreed, this makes it possible to track user behavior after

if they have seen or clicked on a Facebook ad. This procedure is used to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and may help to optimize future advertising measures.

The data collected is anonymous to us and therefore does not allow us to identify users. However, the data is stored and processed by Facebook, so that it is possible to establish a link with the profile of the user concerned, and Facebook can use the data for its own advertising purposes, in accordance with Facebook's data usage policy (https://www.facebook.com/about/privacy/). You may allow Facebook and its partners to serve ads on and off Facebook. A cookie may also be stored on your computer for this purpose. These processing operations are only carried out if you have given your explicit consent in accordance with Article 6(1)(a) of the GDPR.

Only users over the age of 13 can give their consent to the use of the Facebook pixel. If you are younger, please ask your parent or guardian for permission.

Facebook Inc, headquartered in the USA, is certified by the “Privacy Shield” data protection agreement, which guarantees compliance with the level of data protection in force in the EU.

To disable the use of cookies on your computer, you can configure your Internet browser so that no cookies can be deposited on your computer in the future, or so that cookies already deposited are deleted. However, if you disable all cookies, you may not be able to use certain functions on our web pages. You can also deactivate the use of cookies by third-party providers, such as Facebook, on the Digital Advertising Alliance website: https: //www.aboutads.info/choices/.

 

Google AdWords Remarketing

 

Our website uses the remarketing features of Google AdWords, through which we advertise this website in Google search results and on third-party websites.

The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google places a cookie in the browser of your device, which automatically enables interest-based advertising through a pseudonymous cookie ID and based on the pages you have visited. Processing is carried out based on our legitimate interest in optimally marketing our website in accordance with Article 6(1)(f) of the GDPR.

Further data processing will only occur if you have consented to Google linking your internet and app browsing history to your Google account and allowing information from your Google account to be used to personalize the ads you view on the web. In this case, if you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for remarketing across devices. For this purpose, Google temporarily associates your personal data with Google Analytics data to form target groups.

You can permanently disable the placement of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/

You can also learn more about cookie placement and adjust settings through the Digital Advertising Alliance at www.aboutads.info. Finally, you can configure your browser to inform you about cookie placement and decide individually whether to accept them or exclude cookie acceptance in specific cases or in general. If you do not accept cookies, the functionality of our website may be limited.

Google LLC, based in the United States, is responsible under the European data protection agreement.

"Privacy Shield" ensures compliance with the data protection level in effect within the EU.

For additional information and data protection terms regarding advertising and Google, please visit:

https://www.google.com/policies/technologies/ads/

 

RIGHTS OF THE PERSON CONCERNED

 

13. 1. The data protection legislation in force grants you extensive rights vis-à-vis the data controller regarding the processing of your personal data.

Rights of Data Subjects (Rights of Access and Intervention), of which we inform you below:

• Right of Access pursuant to Article 15 of the GDPR: You have the right, in particular, to obtain information on the personal data we process, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned retention period or the criteria for determining the retention period, the existence of the right to rectification, deletion, restriction of processing, objection to processing, the right to file a complaint with a supervisory authority, the origin of your data if we did not collect it from you, the existence of automated decision-making, including profiling, and, if applicable, relevant information on the logic involved and the expected scope and impact of such processing concerning you, as well as your right to be informed of the safeguards provided by Article 46 of the GDPR in case your data is transferred to third countries.

• Right to Rectification pursuant to Article 16 of the GDPR: You have the right to request the rectification of inaccurate data concerning you without undue delay and/or to have incomplete data we hold completed.

• Right to Erasure pursuant to Article 17 of the GDPR: You have the right to demand the deletion of your personal data if the conditions of Article 17, Paragraph 1 of the GDPR are met. However, this right does not exist, in particular, where processing is necessary for exercising the right to freedom of expression and information, compliance with a legal obligation, reasons of public interest, or for the establishment, exercise, or defense of legal claims.

• Right to Restriction of Processing pursuant to Article 18 of the GDPR: You have the right to request the restriction of processing of your personal data while the accuracy of your contested data is verified, if you oppose the deletion of your data due to unlawful processing and instead request a restriction on its use, if you need your data for establishing, exercising, or defending legal claims after we no longer require it for our purposes, or if you have objected based on your particular situation, pending verification of whether our legitimate grounds override yours.

• Right to Information pursuant to Article 19 of the GDPR: If you have exercised your right to rectification, erasure, or restriction of processing with the controller, the controller is obligated to communicate this rectification, erasure, or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

• Right to Data Portability pursuant to Article 20 of the GDPR: You have the right to receive the personal data you have provided us in a structured, commonly used, and machine-readable format or to request its transmission to another controller, where technically feasible.

• Right to Withdraw Consent given pursuant to Article 7, Paragraph 3 of the GDPR: You have the right to withdraw, at any time and with future effect, any consent to data processing that you have previously given. In case of withdrawal, we will delete the affected data immediately unless further processing can be based on a legal basis allowing processing without consent. Withdrawal of consent does not affect the legality of the processing carried out based on consent prior to the withdrawal.

• Right to Lodge a Complaint pursuant to Article 77 of the GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right—without prejudice to any other administrative or judicial remedy—to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace, or the place of the alleged infringement.

13. 2. RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA WITHIN A BALANCING OF INTERESTS BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS RELATING TO YOUR PARTICULAR SITUATION, WITH FUTURE EFFECT.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE TO PROCESS THE AFFECTED DATA. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF PROCESSING SERVES TO ESTABLISH, EXERCISE, OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH DIRECT MARKETING PURPOSES. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

 

PERSONAL DATA STORAGE DURATION

The retention period for personal data is determined by the legal retention period (e.g., commercial and tax retention periods). Once this period expires, the relevant data is routinely deleted, provided it is no longer needed for contract performance or preparation, and/or there is no legitimate interest on our part in continuing to store it.