Privacy Notice pursuant to Art. 13 GDPR

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

Legal Basis for the Processing of Personal Data

In accordance with Art. 13 GDPR, we inform you of the legal bases for our data processing. Unless the legal basis is specifically stated in this privacy notice, the following applies:

The legal basis for obtaining consent is Art. 6 (1) lit. a in conjunction with Art. 7 GDPR. The legal basis for processing to fulfill our services and carry out contractual measures, as well as to respond to inquiries, is Art. 6 (1) lit. b GDPR. The legal basis for processing to fulfill our legal obligations is Art. 6 (1) lit. c GDPR. If the processing of your data is necessary to protect a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override the aforementioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis for processing. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR serves as the legal basis.

We adhere to the principles of data minimization pursuant to Art. 5 (1) lit. c GDPR and storage limitation pursuant to Art. 5 (1) lit. e GDPR. We store your personal data only for as long as is necessary to achieve the purposes stated herein or as provided for by the legally mandated retention periods. After the respective purpose ceases to apply or after the expiration of these retention periods, the corresponding data will be deleted as soon as possible.

Our website also integrates tools from companies based in third countries. When these tools are active, your personal data may be transmitted to the servers of the respective companies. The level of data protection in third countries generally does not correspond to EU data protection law. This means there is a risk that your data may be disclosed to authorities in those countries. We have no influence on these processing activities.

This website may contain links to third-party websites or to other websites under our responsibility. If you follow a link to a website outside our responsibility, please note that these websites have their own privacy notices. We accept no responsibility or liability for these third-party websites and their privacy notices. Therefore, please check whether you agree with the respective privacy policies before using these websites.

You can recognize external links either by their slightly different color from the rest of the text or by their underlined formatting. Your cursor indicates external links when you hover over such a link. Only when you click on an external link will your personal data be transmitted to the link destination. The operator of the other website will receive in particular your IP address, the time at which you clicked the link, the page on which you clicked the link, and other information that you can find in the privacy notices of the respective provider.

Please also note that individual links may lead to data transmission outside the European Economic Area. This could allow foreign authorities to access your data. You may have no legal remedies against such data access. If you do not wish your personal data to be transmitted to the link destination or to be exposed to unwanted access by foreign authorities, please do not click on any links.

As a data subject within the meaning of the GDPR, you have the option to exercise various rights. The data subject rights arising from the GDPR are the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority, and the right to data portability (Article 20).

Right of Revocation

Some data processing can only take place with your express consent. You have the option to revoke your consent at any time. However, the lawfulness of data processing carried out prior to the revocation is not affected by the revocation.

Right to Object

If the processing is based on Art. 6 (1) lit. e or f GDPR, you as a data subject may, for reasons arising from your particular situation, object at any time to the processing of personal data concerning you. This right also applies to profiling based on these provisions within the meaning of Art. 4 (4) GDPR. Unless we can demonstrate a legitimate interest for the processing that overrides your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims, we will refrain from processing your data following the objection.

If the processing of personal data is for the purpose of direct marketing, you also have the right to object at any time. The same applies to profiling associated with direct marketing. In this case as well, we will no longer process personal data once you object.

Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of personal data concerning you violates the GDPR, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

Right to Data Portability

If your data is processed automatically on the basis of consent or fulfillment of a contract, you have the right to receive this data in a structured, commonly used, and machine-readable format. You also have the right to request the transfer and provision of the data to another controller, insofar as this is technically feasible.

Right of Access, Rectification and Erasure

You have the right to obtain information about your processed personal data regarding the purpose of data processing, the categories, the recipients, and the duration of storage. If you have questions on this topic or other topics regarding personal data, you are of course welcome to contact us using the contact details provided in the legal notice.

Right to Restriction of Processing

You may assert the restriction of processing of your personal data at any time. To do so, you must meet one of the following conditions:

• You contest the accuracy of the personal data. For the duration of the verification of accuracy, you have the right to request a restriction of processing.
• If processing is unlawful, you may request the restriction of data use as an alternative to erasure.
• If we no longer need your personal data for the purposes of processing, but you need the data for the assertion, exercise, or defense of legal claims, you may request the restriction of processing as an alternative to erasure.
• If you have objected to processing pursuant to Art. 21 (1) GDPR, a balancing of your and our interests will be carried out. Until this balancing has taken place, you have the right to request the restriction of processing.

A restriction of processing means that the personal data, apart from storage, may only be processed with your consent or for the assertion, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.