1.1 We are pleased that you are using our online services and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our online services. Personal data are all data which can be used to personally identify you.
1.2 The party responsible for data processing on this website (data controller) within the meaning of the General Data Protection Regulation (GDPR) is
Elanders GmbH,
represented by Managing Director Sven Burkhard
Anton-Schmidt-Str. 15,
71332 Waiblingen,
Germany,
Phone: +49 71 51 . 95 63-0,
Email: info.germany@elanders.com
The data controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 We as the data controller have appointed a data protection officer, who can be contacted as follows: datenschutz@elanders-germany.com
1.4 For security reasons and to protect the transmission of personal data and other confidential contents (e.g. orders or inquiries to the data controller), our online services use SSL encryption. If your connection is encrypted, your browser’s address bar will display “https://” and your browser status bar will show a padlock symbol.
2) Data collection during the use of our online services
If you use our online services for informational purposes only, i.e. if you do not register or otherwise provide us with information, we will only collect data that your browser sends to our server and store some of these data in so-called “server log files”. When you visit our website, we will collect the following data, which is a technical requirement to enable us to display the website to you:
- The document called up on our website
- The date and time of the access
- Amount of transmitted data in bytes
- Source/referer from which you reached the site
- Your browser
- Your operating system
- Your IP address
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in maintaining and improving the stability and functionality of our website as well as ensuring the security of its operation. The data will not be passed on or used in any other way. However, we reserve the right and are also obligated under data protection law to subsequently review the server log files if there are specific indications of illegal use.
3) Cookies
In order to provide you with an attractive experience when you visit our website, and to enable the use of certain functions, we use so-called “cookies” on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the conclusion of the browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit (persistent cookies). If cookies are placed, these will collect and process certain user information such as browser data and IP addresses will be collected and processed, the scope of such collection and processing varying on an individual basis. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g. by remembering the contents of a virtual shopping cart for a later visit to the website). To the extent that personal data are also processed through individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the implementation of the contract or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
Please note that you can configure your browser to inform you about the placement of cookies, allowing you to accept cookies on a case-by-case basis, or you can block the placement of cookies for certain cases or in general. Browsers differ in how they manage cookie settings. For more details, please consult the help menu of your browser, where you will find information about how to change your cookie settings.
Please note, however, that the refusal to accept cookies may limit the functionality of our website.
The use of cookies required for technical reasons and similar techniques in the “Essential” category is based on § 25 (2) no. 2 TTDSG. Subsequent data processing is based on legitimate interests in accordance with Art. 6 para. 1 p. 1 lit. f GDPR. The use of optional cookies and similar techniques in the “Media” category is based on § 25 (1) TTDSG. Subsequent data processing is based on your consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR.
| Name | Description | Retention period | Type |
| _icl_current_language | Stores your selected language | 1 day | Essential |
| wt-dv-settings | Storage of the cookie settings chosen by you | 1 year | Essential |
4) Making contact
Personal data are collected when you make contact with us (for example via contact form or email). Which data are collected in the case of a contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of answering your inquiry or for contacting you and the associated technical administration. The legal basis for the data processing is your consent, actively given by contacting us, pursuant to Article 6 para. 1 lit. a GDPR. Your data will be erased after the processing of your inquiry has been concluded. This is the case if it can be inferred from the circumstances that the relevant subject matter has been fully resolved and provided that there are no statutory retention obligations to the contrary.
5) Data processing when opening a customer account and for the implementation of contracts
In accordance with Art. 6 para. 1 lit. b GDPR, personal data will also be collected and processed if you provide us with such data for the purpose of implementing a contract. When you open a customer account, the data will be collected and processed in accordance with Art. 6 para. 1 lit. a GDPR. Which data are collected can be seen from the respective entry forms. You can delete your customer account at any time by sending a message to the above-mentioned address of the data controller. We store and use the data you provide to carry out the contract and to maintain your customer account. After the contract has been fully carried out or your customer account deleted, your data will be blocked and erased after the retention period prescribed under tax and commercial law expire, unless you have expressly consented to the further use of your data or if we have reserved the right for further (legally permissible) use of the data, about which we inform you below.
6) Use of your data for direct marketing
6.1 Registration for our email newsletter
If you register for our email newsletter, we will send you information about our offers on a regular basis. Your email address is the only mandatory information for the newsletter. The provision of any other data is voluntary; we use it to be able to address you personally. For the newsletter we use the so-called double opt-in procedure. This means that we will not send you an email newsletter until you have expressly confirmed to us that you consent to receiving newsletters. We will then send you a confirmation email asking you to click on a link to confirm that you wish to receive newsletters in the future.
By clicking the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you subscribe to the newsletter, we will store your IP address and the date and time of your registration, in order to be able to trace a possible misuse of your email address at a later date. The data we collect when you subscribe to the newsletter will be used exclusively for the purpose of advertising via the newsletter. You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a message to the data controller indicated in the beginning. After you unsubscribe, your email address will be deleted from our newsletter distributor, unless you have expressly consented to the further use of your data or if we have reserved the right for a different (legally permissible) use of your data about which we inform you in this data privacy statement.
6.2 Sending the email newsletter to existing customers
If you have provided us with your email address in the context of the purchase of goods or services, we reserve the right to send you regular emails with offers for goods or services from our range of products which are similar to those you have already purchased. In accordance with § 7 para. 3 German Act against Unfair Competition (UWG), we do not need to obtain your separate consent for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Art. 6 para. 1 lit. f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send any emails or process any data for this purpose. You have the right to object to the use of your email address for the above-mentioned advertising purpose at any time with effect for the future by notifying the data controller named at the beginning of this document. After receipt of your objection, the use of your email address for advertising purposes will be discontinued without undue delay.
7) Data processing in the performance of contracts with service providers (in particular freelancers)
Personal data of the service providers (including name, status as entrepreneur, postal and email address, bank details) with whom we enter into contracts are collected, stored, processed and used by us on the basis of Art. 6 para. 1 lit. b GDPR if, to the extent and for as long as this is required for the establishment, performance or termination of this contract. Any further collection, storage, processing and use of the service providers’ personal data shall only take place to the extent that this is required or permitted by law or if the service provider has consented thereto.
8) Data processing for the performance of contracts including invoicing for the purchase of services or products by customers
8.1 In order to process your order, we work together with the following service provider(s), who support us in whole or in part with carrying out concluded contracts. Certain required personal data are transmitted to these service providers in accordance with the following information.
In the context of carrying out the contract, the personal data collected by us are passed on to the transport company commissioned to perform the delivery, to the extent that this is necessary to deliver the goods. In the context of payment processing, we will pass on your payment data to the relevant credit institute, to the extent that this is necessary for payment processing. The legal basis for passing on the data is Article 6 para. 1 lit. b GDPR.
Where the collection of the claim necessitates it, the data may be passed on to the following categories of recipients: Credit agencies, service providers, third-party debtors, registration offices for residents, courts, bailiffs, lawyers.
8.2 Transfer of personal data to shipping providers
Deutsche Post
If the goods are delivered by the transport service provider Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we will pass on your email address to Deutsche Post, prior to delivery of the goods, in accordance with Art. 6 para. 1 lit. a GDPR, for the purpose of coordinating a delivery date or to announce delivery, provided that you have given us your express consent to do so during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to Deutsche Post for the purpose of delivery pursuant to Art. 6 para. 1 lit. b GDPR. Data will only be passed on to the extent that this is necessary for delivery of goods. In this case, it will not be possible to coordinate the date of delivery with Deutsche Post in advance or to give advance notice of the delivery.
The consent can be revoked at any time with effect for the future by making a declaration to the above-mentioned data controller or the transport provider Deutsche Post.
DHL Express
If the goods are delivered by the transport service provider DHL Express (DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany), we will pass on your email address to DHL Express, prior to delivery of the goods, in accordance with Art. 6 para. 1 lit. a GDPR, for the purpose of coordinating a delivery date or to announce delivery, provided that you have given us your express consent to do so during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL Express for the purpose of delivery pursuant to Art. 6 para. 1 lit. b GDPR. Data will only be passed on to the extent that this is necessary for delivery of goods. In this case, it will not be possible to coordinate the date of delivery with DHL Express in advance or to give advance notice of the delivery.
The consent can be revoked at any time with effect for the future by making a declaration to the above-mentioned data controller or the transport provider DHL Express.
DHL Paket
If the goods are delivered by the transport service provider DHL Paket (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany), we will pass on your email address to DHL Paket, prior to delivery of the goods, in accordance with Art. 6 para. 1 lit. a GDPR, for the purpose of coordinating a delivery date or to announce delivery, provided that you have given us your express consent to do so during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL Paket for the purpose of delivery pursuant to Art. 6 para. 1 lit. b GDPR. Data will only be passed on to the extent that this is necessary for delivery of goods. In this case, it will not be possible to coordinate the date of delivery with DHL Paket in advance or to give advance notice of the delivery.
The consent can be revoked at any time with effect for the future by making a declaration to the above-mentioned data controller or the transport provider DHL Paket.
DPD
If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany), we will pass on your email address and/or your telephone number to DPD, prior to delivery of the goods, in accordance with Art. 6 para. 1 lit. a GDPR, for the purpose of coordinating a delivery date or to announce delivery, provided that you have given us your express consent to do so during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DPD for the purpose of delivery pursuant to Art. 6 para. 1 lit. b GDPR. Data will only be passed on to the extent that this is necessary for delivery of goods. In this case, it will not be possible to coordinate the date of delivery with DPD in advance or to give advance notice of the delivery.
The consent can be revoked at any time with effect for the future by making a declaration to the above-mentioned data controller or the transport provider DPD.
FedEx
If the goods are delivered by the transport service provider FedEx (FedEx Express Germany GmbH, Langer Kornweg 34K, 65451 Kelsterbach), we will pass on your email address and/or your telephone number to FedEx, prior to delivery of the goods, in accordance with Art. 6 para. 1 lit. a GDPR, for the purpose of coordinating a delivery date or to announce delivery, provided that you have given us your express consent to do so during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to FedEx for the purpose of delivery pursuant to Art. 6 para. 1 lit. b GDPR. Data will only be passed on to the extent that this is necessary for delivery of goods. In this case, it will not be possible to coordinate the date of delivery with FedEx in advance or to give advance notice of the delivery.
The consent can be revoked at any time with effect for the future by making a declaration to the above-mentioned data controller or the transport provider FedEx.
GLS
If the goods are delivered by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany), we will pass on your email address to GLS, prior to delivery of the goods, in accordance with Art. 6 para. 1 lit. a GDPR, for the purpose of coordinating a delivery date or to announce delivery, provided that you have given us your express consent to do so during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to GLS for the purpose of delivery pursuant to Art. 6 para. 1 lit. b GDPR. Data will only be passed on to the extent that this is necessary for delivery of goods. In this case, it will not be possible to coordinate the date of delivery with GLS in advance or to provide status updates about the delivery.
The consent can be revoked at any time with effect for the future by making a declaration to the above-mentioned data controller or the transport provider GLS.
UPS
If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany), we will pass on your email address to UPS, prior to delivery of the goods, in accordance with Art. 6 para. 1 lit. a GDPR, for the purpose of coordinating a delivery date or to announce delivery, provided that you have given us your express consent to do so during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to UPS for the purpose of delivery pursuant to Art. 6 para. 1 lit. b GDPR. Data will only be passed on to the extent that this is necessary for delivery of goods. In this case, it will not be possible to coordinate the date of delivery with UPS in advance or to provide status updates about the delivery.
The consent can be revoked at any time with effect for the future by making a declaration to the above-mentioned data controller or the transport provider UPS.
9) Recipients/disclosure of personal data to third parties outside of contracts with customers for the purchase of products or services
To the extent that we disclose, pass on or otherwise grant access to data to other persons or companies (data processors or third parties) in the context of data processing, this will be done exclusively on the basis of a statutory permission. If we commission third parties to process data on the basis of a so-called “data processing agreement”, this is done on the basis of Art. 28 GDPR. We may use external service providers to process the contract. These are for example companies from the following categories: IT support, waste disposal and accounting as well as complaint management.
If we disclose, pass on or otherwise grant access to data to other companies in our group of companies, this is done in particular for administrative purposes as a legitimate interest and on the basis of a data-processing agreement.
We may be required to pass on all your data to third parties in order to fulfil statutory obligations. No data are transmitted to countries outside the EU or EEA or Switzerland (safe third countries) and no such transmission is planned. Nevertheless, we cannot exclude the possibility that data are routed via Internet servers located outside the EU or outside of EEA states or Switzerland. However, the data are encrypted during their transmission over the Internet and thus protected against unauthorized access by third parties.
10) Use of social media
Use of YouTube videos
This website uses the YouTube embedding feature to display and play videos from the provider “YouTube”, which belongs to Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Its parent company is: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
In this context, privacy-enhanced is used, which (according to the provider), only starts storing user information when the video(s) is/are played. When embedded YouTube videos are started, the provider “YouTube” uses cookies to collect information about user behaviour. According to information provided by “YouTube”, these are used, among other things, to collect video statistics, improve user-friendliness and to prevent abuse. If you’re logged in to Google, your information is associated directly with your account when you click on a video. If you do not want the association with your profile on YouTube, you have to log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Google’s legitimate interests in showing personalised advertising, market research and/or the tailoring of its website in line with user requirements. You have the right to object to the creation of these user profiles, whereby you must turn to YouTube to exercise this right.
Regardless of any playback of the embedded videos, each time this website is accessed, a connection to the Google network “DoubleClick” is established, which may trigger further data processing operations without any influence on our part.
For more information on data privacy at “YouTube”, please refer to the provider’s privacy policy at https://policies.google.com/privacy?hl=en&gl=en
Facebook plugins
This website uses plugins of the social network www.facebook.com, which is operated by the company Facebook Inc. 1601 S. California AVE, Palo Alto, CA 94304, USA (Facebook). If you visit Internet pages on our website which feature such a plugin and give your consent to their activation, a connection to the Facebook servers is established and the plugin is displayed on the Internet page through a message to your browser. This will inform the Facebook server that you have visited our website. If you are logged in on Facebook as a registered member, you will be automatically linked in your Facebook account. When using the plugin function, such as the “Like” or “Send” button, submitting a comment or reply or recommendation, this information is also included into your associated Facebook account. You can avoid this by logging out before use.
For more detailed information on the collection and use of data by Facebook, visit www.facebook.com directly. There you will also find Facebook’s current Data Policy.
Twitter plugins
This website includes Twitter features. If you visit Internet pages on our website which feature such a plugin and give your consent to their activation, a connection to the Twitter servers is established and the plugin is displayed on the Internet page through a message to your browser. These features are provided by Twitter, Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the function “retweet”, the websites you use will be linked with your Twitter account and disclosed to other users. In this context, data are transferred to Twitter.
Please note that we – as the provider of the website – have no knowledge of the content of the transferred data or of its use by Twitter. Further information can be found in Twitter’s data privacy statement at https://twitter.com/privacy. You can change your Twitter data privacy settings in your account under https://twitter.com/account/settings.
11) Web analytics services
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Its parent company is: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies” (text files) stored on your computer. This enables Google to analyse how you use the website. This website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymization of the IP address by means of truncation and precludes them from being directly traced to any specific person. The extension causes Google to first truncate your IP address if you are located in a Member State of the European Union or any other states party to the Agreement on the European Economic Area. Google will use this information at our behest in order to analyse your use of the website, prepare reports about website activities and to provide us with other services relating to website and Internet use. Google will not associate the IP address transmitted by your browser in the context of Google Analytics with other data.
You may refuse the use of cookies by selecting the appropriate settings in your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can prevent information generated by cookies about your use of the website (including your IP address) from being sent to and processed by Google by downloading and installing the following browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en
This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “personal data”.
For details relating to Google Analytics handling of user data, please consult the Google data privacy policy:
https://support.google.com/analytics/answer/6004245?hl=en
12) Tools and miscellaneous
Google Maps
On our website, we use Google Maps (API) provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Its parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps is a web service for displaying interactive (land) maps to visually present geographical information. When you use this service, you will be shown our location, to facilitate your journey there.
After activation of the service, information relating to your use of our website (such as your IP address) is transmitted to Google servers in the EU and stored there. This happens regardless of whether Google is providing a user account through which you are logged in, or if there is no user account. If you’re logged in to Google, your information is associated directly with your account. If you do not want the association with your profile at Google, you have to log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Google’s legitimate interests in showing personalised advertising, market research and/or the tailoring of its website in line with user requirements. You have the right to object to the creation of these user profiles; this right must be exercised vis-à-vis Google.
If you do not agree with the future transmission of your data to Google in the context of the use of Google Maps, you also have the option to deactivate the Google Maps web service altogether by switching off the application JavaScript in your browser. If you do this, Google Maps and thus the map function on this website will be unusable.
You can view the Google terms of service at https://www.google.de/intl/de/policies/terms/regional.html and the additional terms of service for Google Maps can be found at https://www.google.com/intl/en_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website (“Google Privacy Policy”) https://www.google.de/intl/de/policies/privacy/
Google reCAPTCHA
On this website, we also use the reCAPTCHA service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). “). Its parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This function is mainly used to differentiate whether an action is performed by a natural person or whether it is performed improperly by machine or automated processing. The service includes sending to Google the IP address and possibly other data required by Google for the service reCAPTCHA and is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining whether actions performed on the Internet are a product of individual will and the prevention of abuse and spam.
Further information about Google reCAPTCHA as well as the Google’s privacy policy can be found at https://www.google.com/intl/en/policies/privacy/
13) Rights of data subjects
13.1 Applicable data protection law grants you comprehensive rights as a data subject (rights of information and intervention) vis-à-vis the data controller, about which we inform you below:
Access right pursuant to Art. 15 GDPR: In particular, you have the right to be informed about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage duration or the criteria for determining the storage duration, the fact that you have a right to rectification, erasure, restriction of processing, a right to object to processing, to lodge a complaint with a supervisory authority, to demand information about the origin of your data if they have not been collected by us from you, to demand information about the existence of automated decision, including profiling and, if applicable, meaningful information on the logic involved and the significance and the envisaged consequences of such processing, as well as your right to be informed of the guarantees provided under Art. 46 GPDR when your data are transferred to third countries.
Right to rectification under Art. 16 GDPR: You have a right to have incorrect data concerning you rectified without undue delay and/or to have incomplete data we are storing about you completed.
Right to erasure under Art. 17 GDPR: You have the right to have your personal data erased if the requirements of Art. 17 para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
Right to restriction of processing under Art. 18 GDPR: You have the right to demand the restriction of the processing of your personal data as long as the accuracy of your data which you contested is verified, if you refuse to have your data erased due to unlawful data processing and demand instead the restriction of the processing of your data, if you require your data for the establishment, exercise or defence of legal claims, once we no longer require this data after the purpose has been achieved, or if you have lodged an objection for reasons of your particular situation, pending the verification whether our legitimate grounds override your interests.
Right to notification under Art. 19 GDPR: If you have exercised your right to rectification, erasure or restriction of processing towards the controller, the controller shall be obligated to notify all recipients to whom personal data concerning you have been disclosed, of the rectification or erasure of the data or the restriction of processing, unless this proves impossible or would involve disproportionate effort. You are entitled to be informed about these recipients.
Right to data portability under Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly-used and machine-readable format or to request that they be transmitted to another data controller, insofar as this is technically feasible.
Right to withdraw granted consent under Art. 7 para. 3 GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of a withdrawal, we will delete the data concerned without undue delay, unless further processing can rely on a legal basis allowing processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
13.2 RIGHT TO OBJECTION
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS IN THE CONTEXT OF A CONSIDERATION OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CARRY OUT FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
14) Duration of storage of personal data
The duration of the storage of personal data is determined by the relevant legal statutory period (e.g. retention periods under commercial and tax law). After the expiration of the retention period, the corresponding data are routinely erased if they are no longer required for the fulfilment or preparation of the contract and/or if we have no legitimate grounds for further storage.
15) The right to lodge a complaint with the competent supervisory authority
If you are of the opinion that the processing of personal data relating to you is in breach of the GDPR, you can lodge a complaint with a supervisory authority (Art. 77 GDPR in conjunction with § 19 German Federal Data Protection Law (BDSG) as amended). For this purpose, you contact the supervisory authority with jurisdiction for your place of residence or your German federal state or the supervisory authority with jurisdiction for us. This is: The Commissioner for Data Protection and Freedom of Information of the Federal State of Baden-Württemberg, https://www.baden-wuerttemberg.datenschutz.de.
16) General note
We reserve the right to amend this Privacy Statement in future. You should therefore always review the Privacy Statement when you visit our website.
Version: 07 December 2022