Privacy policy

The German version of this text is binding; the English version is a machine translation provided for information purposes only.

Privacy Policy

1. General information and principles of data processing

We are pleased that you are visiting our website. Protecting your privacy and protecting your personal data, i.e. so-called personenbezogene Daten, when using our website is an important concern for us.

According to Art. 4 No. 1 DS-GVO, personenbezogene Daten means all information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, but also your IP address.

Data that cannot be linked to your person, for example through anonymization, is not personenbezogene Daten. Processing (e.g. collection, storage, retrieval, consultation, use, disclosure, erasure, or destruction) pursuant to Art. 4 No. 2 DS-GVO always requires a legal basis or your consent. Processed personenbezogene Daten must be deleted as soon as the purpose of the processing has been achieved and no statutory retention obligations remain.

Here you will find information about how your personenbezogene Daten are handled when you visit our website. In order to provide the functions and services of our website, it is necessary for us to collect personenbezogene Daten about you.

We also explain the type and scope of the respective data processing, the purpose, the corresponding legal basis, and the respective storage period.

This Privacy Policy applies only to this website. It does not apply to other websites to which we merely refer via hyperlink. We cannot assume responsibility for the confidential handling of your personenbezogene Daten on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please inform yourself directly on those websites about how these companies handle your personenbezogene Daten.

2. Controller

The controller responsible for processing personenbezogene Daten on this website within the meaning of the Datenschutz-Grundverordnung (DSGVO) is:

Wein & Nielsen GmbH
55116 Mainz
Germany

Represented by the Managing Director: Bo Soevsoe Nielsen

Email: kontakt@weinundnielsen.de

3. Provision and use of the website / server log files

a) Type and scope of data processing

If you use this website without otherwise transmitting data to us (e.g. through registration or use of the contact form), we collect technically necessary data via server log files that are automatically transmitted to our server, including:

·       IP address
·       Date and time of the request
·       Name and URL of the retrieved file
·       Website from which access was made (referrer URL)
·       Access status / HTTP status code
·       Browser type
·       Language and version of the browser software
·       Operating system

b) Purpose and legal basis

This processing is technically necessary in order to display our website to you. We also use the data to ensure the security and stability of our website.

The legal basis for this processing is Art. 6 para. 1 lit. f) DS-GVO. The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.

c) Storage period

As soon as the aforementioned personenbezogene Daten are no longer required to display the website, they are deleted. The collection of data for the provision of the website and the storage of data in log files are absolutely necessary for the operation of the website. Consequently, the user has no option to object in this respect. Further storage may take place in individual cases if this is required by law.

4. Use of cookies

a) Type, scope, and purpose of data processing

We use cookies. Cookies are small files that are sent by us to the browser of your end device during your visit to our website and stored there.

Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to carry out various analyses. For example, some cookies can recognize the browser you use when you revisit our website and transmit various pieces of information to us. We use cookies to make the use of our website easier and better. Among other things, cookies enable us to make our internet offering more user-friendly and effective for you by, for example, tracking your use of our website and identifying your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly through your browser. However, cookies do not cause any harm to your end device. They cannot execute programs and do not contain viruses. Different types of cookies are used on our website, whose type and function are explained below.

Temporary cookies / session cookies

Our website uses so-called temporary cookies or session cookies, which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to collect your session ID. This allows various requests from your browser to be assigned to one common session and makes it possible to recognize your end device during later visits to the website.

Permanent cookies

Our website uses so-called permanent cookies. Permanent cookies are cookies that are stored in your browser for a longer period of time and can transmit information. The respective storage period varies depending on the cookie. You can delete permanent cookies yourself via your browser settings.

Third-party cookies

We use analytical cookies to observe anonymized user behavior on our website.

We also use advertising cookies. These cookies can be used to track user behavior for advertising and targeted marketing purposes.

Social media cookies make it possible to establish a connection to your social networks and share content from our website within your networks.

Tracking and analysis tools

An exact overview of the web analytics and social media tools we use can be found here: The website is based on the Shopify platform and uses the following cookies: https://www.shopify.com/ch/legal/cookies. For an integrated shopping experience, Shopify Network Intelligence is also used; Shopify's Consumer Privacy Policy forms the basis for this.

Configuration of browser settings

Most web browsers are preset to accept cookies automatically. However, you can configure your respective browser so that it accepts only certain cookies or no cookies at all. Please note, however, that you may then no longer be able to use all functions of our website.

You can also use your browser settings to delete cookies that have already been stored in your browser. It is also possible to set your browser so that it notifies you before cookies are stored. Since different browsers may differ in their respective functionalities, we ask you to use the respective help menu of your browser for the corresponding configuration options.

Disabling the use of cookies may require the storage of a permanent cookie on your computer. If you subsequently delete this cookie, you will need to disable it again.

b) Legal basis

Due to the described purposes of use, the legal basis for the processing of personenbezogene Daten using cookies is Art. 6 para. 1 lit. f) DS-GVO. If you have given us your consent to the use of cookies on the basis of a notice provided by us on the website (“cookie banner”), the legal basis is additionally Art. 6 para. 1 lit. a) DS-GVO.

c) Storage period

As soon as the data transmitted to us via cookies is no longer required for the purposes described above, this information is deleted. Further storage may take place in individual cases if this is required by law.

5. Collection of data for carrying out pre-contractual measures and for contract performance

a) Type and scope of data processing

In the pre-contractual stage and when concluding a contract, we collect personenbezogene Daten about you. This includes, for example, first and last name, address, email address, telephone number, or bank details.

b) Purpose and legal basis of data processing

We collect and process these data exclusively for the purpose of contract performance or for fulfilling pre-contractual obligations.

The legal basis for this is Art. 6 para. 1 lit b) DS-GVO. If you have also given consent, the additional legal basis is Art. 6 para. 1 lit. a) DS-GVO.

c) Storage period

The data will be deleted as soon as they are no longer necessary for the purpose of their processing.

In addition, statutory retention obligations may exist, for example retention obligations under commercial or tax law pursuant to the Handelsgesetzbuch (HGB) or the Abgabenordnung (AO). If such retention obligations exist, we block or delete your data at the end of these retention obligations.

6. Order form

An order form is available on our website, which can be used for electronic pre-orders.

a) Type and scope of data processing

Our data collection is limited to the following data:

·       First and last name
· Address
·       Telephone number
·       Email address
·       Bank details
·       Name of the product

b) Purpose and legal basis

The purpose of data processing is to enable us to properly process your order.

The legal basis for this is Art. 6 para. 1 lit. b) DS-GVO. The processing of the data serves the performance of a contract or is necessary for the implementation of a pre-contractual measure carried out at the request of the data subject.

c) Storage period

The data are deleted as soon as they are no longer required to achieve the purpose of processing.

7. Registration option

a) Type and scope of data processing

You can register on our website. If you register, we collect and store the data that you enter into the input form (e.g. last name, first name, email address). No data will be passed on to third parties.

b) Purpose and legal basis of data processing

Your registration is necessary for the use of certain content and services on our website or for the performance of a contract or the implementation of pre-contractual measures. After registration, you are free to change the personenbezogene Daten provided during registration at any time or to have them completely deleted from the controller’s database.

The legal basis for processing in the event of consent is Art. 6 para. 1 lit. a) DS-GVO. If your registration serves to prepare the conclusion of a contract, Art. 6 para. 1 lit. b) DS-GVO is an additional legal basis.

c) Storage period

The data collected during registration are stored by us as long as you are registered on our website and are then deleted. Statutory retention periods remain unaffected.

8. Data transfer

We only pass on your personenbezogene Daten to third parties if:

a) you have given your express consent pursuant to Art. 6 para. 1 lit. a) DS-GVO.

b) this is legally permissible and necessary pursuant to Art. 6 para. 1 lit. b) DS-GVO for the performance of a contractual relationship with you or the implementation of pre-contractual measures.

c) there is a legal obligation for disclosure pursuant to Art. 6 para. 1 lit. c) DS-GVO.

We are legally obliged to transmit data to public authorities, e.g. tax authorities, social security institutions, health insurance funds, supervisory authorities, and law enforcement authorities.

d) the disclosure is necessary pursuant to Art. 6 para. 1 lit. f) DS-GVO to safeguard legitimate business interests, as well as for the assertion, exercise, or defense of legal claims, and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.

e) we use external service providers, so-called processors, pursuant to Art. 28 DS-GVO for processing, who have been obliged to handle your data with due care.

We use such service providers in the following areas:

· IT

o eCommerce platform: The services are hosted by Shopify in the EU, whereby Shopify collects and processes personenbezogene Daten relating to your access to and use of the services in order to provide and improve the services. Data that you submit to the services are transmitted to Shopify and to third parties who may be located in countries other than the country of your residence in order to provide and improve the services for you. To protect, expand, and improve our business, we also use certain enhanced Shopify features that incorporate data and information from your interactions with our shop, with other merchants, and with Shopify. In order to provide these enhanced features, Shopify may use personenbezogene Daten collected through your interactions with our shop, other merchants, and Shopify. Under these circumstances, Shopify is responsible for processing your personenbezogene Daten, including responding to your requests to exercise your rights regarding the use of your personenbezogene Daten for these purposes. For more information on how Shopify uses your personenbezogene Daten and what rights you have, please see the Shopify Consumer Privacy Policy. Depending on where you reside, you may exercise certain rights relating to your personenbezogene Daten listed here via the link to the Shopify privacy portal.

o B2B platform: SparkLayer: The B2B functions of our shop are provided via the SparkLayer platform. SparkLayer processes personenbezogene Daten arising in the context of using the B2B shop (e.g. customer and order data) in order to enable the provision and management of B2B functions such as pricing logic, customer groups, and ordering processes. In this context, data may be transferred to SparkLayer and to technical subprocessors, which may also be located in countries outside the EU. Processing is carried out exclusively for the purpose of providing and optimizing the B2B services. Further information on data processing by SparkLayer can be found in SparkLayer’s privacy policy: https://www.sparklayer.io/privacy/

o Invoicing: We use the Sufio service for the automated creation and management of invoices. In this context, Sufio processes personenbezogene Daten such as name, billing and delivery address, and order data in order to create and provide legally compliant invoice documents. Processing is carried out as commissioned processing in accordance with Art. 28 DSGVO. Further information on data processing and the data processing agreement of Sufio can be found at: https://sufio.com/legal/privacy-policy/dpa/

o VerifyID-MitID age verification for Danish customers: For the legally required age verification of customers from Denmark, we use the VerifyID – MitID Alderskontrol service. Age verification takes place exclusively directly between the data subject and VerifyID using the Danish identification system MitID. No personenbezogene Daten are transmitted to us or processed by us as part of this process. We receive only an anonymized verification notice confirming whether the legally required age limit has been reached. This notice contains no personenbezogene Daten and can only be decrypted or assigned by competent authorities. The processing of personenbezogene Daten in the context of age verification is carried out under VerifyID’s own responsibility and serves exclusively the purpose of age verification in compliance with applicable data protection regulations. Further information on data processing by VerifyID can be found in VerifyID’s privacy policy: https://verifyid.dk/gdpr/

· Accounting:

o Lexware Office: We use Lexware Office for our accounting and financial processes. In this context, personenbezogene Daten such as invoice, customer, and payment data are processed in order to fulfill statutory bookkeeping and retention obligations. Processing is carried out on the basis of a data processing agreement pursuant to Art. 28 DSGVO. Further information on data processing by Lexware Office can be found at: https://office.lexware.de/auftragsverarbeitung/

· Logistics:

o UPS: Our goods are shipped via the shipping service provider UPS. For this purpose, personenbezogene Daten such as name, delivery address, and, where applicable, contact details are transmitted to UPS in order to enable delivery of the order. The processing of the data takes place within the framework of contract performance. Further information on data processing by UPS can be found in UPS’s privacy policy: https://www.ups.com/de/en/support/shipping-support/legal-terms-conditions/privacy-notice

o Storage, picking, and shipping: These are partly handled by our logistics partner StepoVino Logistik OHG, D-63654 Büdingen. In this context, personenbezogene Daten such as name, delivery address, and order data are processed to the extent necessary for shipping execution. Data processing is carried out on the basis of a processor relationship and exclusively for the purpose of logistics and shipping handling.

· Marketing

o Google Ads

We use Google Adwords to show you advertising on websites of Google and other third parties. Google Adwords Conversion Tracking is a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com (“Google”).

With conversion tracking, we can determine how successful individual advertising measures are.

Advertising is delivered by Google via so-called “ad servers.”

For this purpose, we use cookies by means of which certain parameters for success measurement, such as the display of ads or clicks by users, can be measured. If you reach our website via a Google ad, Google Adwords stores a cookie on your PC. These cookies generally expire after 30 days and are not intended to personally identify you. The analysis values usually stored for this cookie are the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (marking that the user no longer wishes to be addressed).

These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Adwords customer’s website and the cookie stored on the user’s computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Adwords customer. Cookies therefore cannot be tracked via the websites of Adwords customers. We ourselves do not collect or process personenbezogene Daten in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media, and in particular we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s servers. We have no influence on the scope and further use of the data collected by Google and therefore inform you according to our current level of knowledge: by integrating AdWords Conversion Tracking, Google receives the information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will obtain and store your IP address.

We pursue the purpose of showing you advertising that is of interest to you and making our website more interesting for you.

The legal basis for processing your data is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest lies in the analysis, optimization, and economical operation of our website.

The stored data are deleted as soon as they are no longer required for our purposes.

You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, please note that in this case you may not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing these data by downloading and installing the browser plugin available at the following link: http://www.google.com/settings/ads/plugin

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy

o Google Analytics

We use the tracking tool Google Analytics on our website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com ("Google").

Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website.

The information generated by the cookie about your use of this website is usually transmitted to and stored on a Google server in the USA.

On behalf of the operator of this website, Google will use this information to systematically evaluate your use of the website, to compile reports on website activity, and to provide other services related to website use and internet use to the website operator.

When individual pages of our website are accessed, the following data are stored:

• Three bytes of the IP address of the user’s accessing system (anonymized IP address)
• The website accessed
• The website from which the user reached the accessed page of our website (referral URL)
• The subpages accessed from the accessed page
• The time spent on the website
• The frequency of access to the website

We use Google Analytics with IP anonymization activated. This means that the IP addresses are shortened by the last octet (e.g. 192.168.79.***; so-called IP masking). It is no longer possible to assign the shortened IP address to the accessing computer or the user’s end device.

The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is your consent pursuant to Art. 6 para. 1 lit. a) DS-GVO.

The stored data are deleted by us as soon as they are no longer required for our recording purposes. In our case, the storage period is a maximum of 24 months.

Further information on the Google Analytics terms of use: https://www.google.com/analytics/terms/de.html

Further information on Google Analytics data protection: https://support.google.com/analytics/answer/6004245?hl=de

o Klaviyo

For sending newsletters and for analyzing and optimizing marketing measures, we use the service "Klaviyo", a service of Klaviyo Inc., 125 Summer Street, Boston, MA 02111, USA. As part of newsletter registration and where consent for tracking has been given, Klaviyo processes personenbezogene Daten such as email address, order data, and interaction data (e.g. pages visited, click and open behavior). Cookies or comparable technologies are used for this purpose in order to assign your user behavior to our newsletter profile and personalize content.

Newsletter described.

A transfer to the USA cannot be ruled out and takes place on the basis of appropriate safeguards pursuant to Art. 44 ff. DSGVO (in particular Standardvertragsklauseln - where applicable - EU-U.S. Data Privacy Network).

Further information on Klaviyo data protection: https://www.klaviyo.com/de/legal/data-processing-agreement

o Trusted Shops

For our Trusted Shops membership, we use the service "Trusted Shops", a service provided by Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany. As part of the membership for online shops, Trusted Shops processes personal data such as order and contact information (e.g. name, email address, order number) in order to provide the trustmark, enable buyer protection, and collect customer reviews. Information on the processing of personal data in connection with the Trusted Shops membership for online shops can be found in the privacy notices at: https://business.trustedshops.de/impressum#datenschutz

· Telecommunications

o Vodafone: We use Vodafone as a service provider for telecommunications services. In this context, Vodafone processes personenbezogene Daten insofar as this is necessary for the provision of telecommunications services and for the fulfillment of legal obligations. The processing of personenbezogene Daten is carried out by Vodafone under its own data protection responsibility in accordance with the applicable data protection and telecommunications regulations. No processing of personenbezogene Daten takes place in our shop in this regard. Further information on data processing by Vodafone can be found in Vodafone’s privacy policy: https://www.vodafone.de/datenschutz.html

When transferring to external entities in third countries, i.e. outside the EU or the EEA, we ensure that these entities treat your personenbezogene Daten with the same care as within the EU or EEA. We transfer personenbezogene Daten only to third countries for which the EU Commission has confirmed an adequate level of protection or where we ensure careful handling of personenbezogene Daten through contractual agreements or other appropriate safeguards.

9. Application option

a) Type and scope of data processing

You can apply via our website or by email. If you apply, we collect and store the data that you enter into the input form or send to us by email.

b) Purpose and legal basis

We process your data only for the purpose of handling your application. No disclosure to third parties takes place. The legal basis for processing is Art. 88 para. 1 DS-GVO in conjunction with § 26 BDSG and additionally Art. 6 para. 1 lit. b) DS-GVO.

If you give us your consent to be included in our applicant pool, the legal basis is Art. 6 para. 1 lit. a) DS-GVO.

c) Storage period

If we are unable to offer you a position, we store your data for a maximum of six months after the end of the application process, taking into account § 61b para. 1 ArbGG in conjunction with § 15 AGG. The period begins upon receipt of the rejection letter.

If you have given us your consent to be included in our applicant pool, we store your data for a maximum of two years.

d) Data disclosure

Your data are received only by those bodies involved in the decision (responsible HR departments or specialist departments, management, works council).

In addition, we are obliged to transmit your data to public bodies and institutions (e.g. public prosecutor’s office, police, supervisory authorities, tax office, social insurance institutions, etc.).

Further recipients of data may be those bodies for which you have given us your consent to data transmission.

10. Chat function

a) Type and scope of data processing

We provide on our website an AI-based chatbot from Flyweight GmbH, Jungbuschstraße 28, 68159 Mannheim, Germany (https://www.flyweight.io/legal-notice / https://www.flyweight.io/privacy-statement) in order to answer your inquiries.

When using the chatbot, your inquiries are processed using a database created from information read from our own website as well as a large language model, in order to provide you with suitable answers to your inquiry. The chatbot is configured so that it does not request personenbezogene Daten.

Note: If, as a result of your inquiry, separate forms are displayed in which you can enter personenbezogene Daten depending on your inquiry, these details are processed separately and are not transmitted to the AI.

b) Categories of processed data

The categories of data processed result from your inquiries, insofar as you enter personenbezogene Daten within your inquiry or in the displayed forms.

Examples:

If you ask: “Where is my order?”, a form appears in which you can enter your order number and your postal code.
If you would like further information about a product and would like corresponding advice, a form appears in which you can enter relevant details (e.g. name, telephone number, email address, etc.).

c) Purpose of processing

Processing of the information provided by you in order to answer your inquiries using the chatbot.

Examples:

If you ask: “Where is my order?” and enter your order number and postal code in the form, this information will be used to make a direct request to the shop system (Shopify) so that shipping information can be transmitted to you and you can be informed about the status of your order.
If you would like product advice, your inquiry (including the data entered in the form and the entire chat history) will be forwarded to the shop operator so that they can contact you.

d) Data source

The data are collected directly from you when you enter text in the chat window or complete a form displayed in connection with the chatbot. Only the information you provide is processed.

e) Legal basis

Processing is carried out for the performance of contractual or pre-contractual measures pursuant to Art. 6 para. 1 lit. b DSGVO.

f) Storage period

The data are stored until your inquiry has been conclusively processed or for the duration of the contractual relationship and beyond that in accordance with statutory retention periods (6 to 10 years).

g) Recipients / place of processing

Recipients are located in the EU as well as in third countries.

h) Safeguards for third-country transfers

EU Standardvertragsklauseln (SCC) and adequacy decisions of the EU Commission.

11. Contact options by email

Our website provides you with a contact option by email.

a) Type and scope of data processing

You can contact us by email. Our data collection in this respect is limited to the email address of the email account you use to contact us and the personenbezogene Daten you voluntarily provide in the course of contacting us.

b) Purpose and legal basis

The purpose of data processing is to be able to properly respond to your inquiry. The legal basis for this is Art. 6 para. 1 lit. f) DS-GVO. There is a legitimate interest in processing the aforementioned personenbezogene Daten in order to properly handle your inquiry.

c) Storage period

The duration of storage of the above-mentioned data depends on the background of your contact. Your personenbezogene Daten are regularly deleted once the purpose of the communication has ceased to apply and storage is no longer necessary. This may result, for example, from the completion of handling your inquiry.

12. Newsletter

a) Type and scope of data processing

There is an option on our website to subscribe to a free regular email newsletter. In order to send you the newsletter regularly, we require your email address.

For sending the newsletter, we use the so-called double opt-in procedure.

This means that we will only send you an email newsletter once you have expressly confirmed to us that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm by clicking an appropriate link that you wish to receive newsletters from us in the future.

This serves to ensure that only you yourself, as the owner of the specified email address, can register for the newsletter. Your confirmation must be made promptly after receipt of the confirmation email, otherwise your newsletter registration will be automatically deleted from our database.

If you subscribe to the newsletter, we collect and store the data that you enter into the input form (e.g. last name, first name, email address).

When you register for the newsletter, we also store the IP address entered by your internet service provider (ISP) as well as the date and time of registration, in order to be able to trace possible misuse of your email address at a later time. In the confirmation email sent for control purposes (double opt-in in the email), we also store the date and time of the click on the confirmation link and the IP address entered by the internet service provider (ISP).

b) Purpose and legal basis

The data collected by us when you register for the newsletter are used exclusively for advertising communication by means of the newsletter.

The processing of your email address for sending the newsletter is based, pursuant to Art. 6 para. 1 lit. a) DS-GVO and § 7 para. 2 no. 3 UWG, on the declaration of consent voluntarily given by you below and revocable at any time for the future.

In addition, processing is based on Art. 6 para. 1 lit f) DS-GVO due to our legitimate interests in documenting proof of the required consent.

c) Storage period

Your email address is stored as long as you are subscribed to the newsletter. After unsubscribing from the newsletter, your email address will be deleted unless you have expressly consented to further use of your data.

13. Data security and security measures

We are committed to protecting your privacy and treating your personenbezogene Daten confidentially. For this purpose, we take extensive technical and organizational security precautions, which are regularly reviewed and adapted to technological progress.

This includes, among other things, the use of recognized encryption procedures (SSL or TLS). However, data disclosed unencrypted, for example if this is done by unencrypted email, may possibly be read by third parties. We have no influence over this. It is the responsibility of the respective user to protect the data made available by them against misuse by means of encryption or in some other way.

14. Changes to the Privacy Policy

We reserve the right to update this statement at any time if necessary.

15. Your rights

Here you will find your rights in relation to your personenbezogene Daten. Details result from Articles 7, 15-22 and 77 DS-GVO. In this regard, you may contact the controller (Section 2).

Right to withdraw your data protection consent pursuant to Art. 7 para. 3 sentence 1 DS-GVO

You may withdraw consent to the processing of your personenbezogene Daten at any time with effect for the future. The lawfulness of the processing carried out up to the withdrawal remains unaffected by this.

a) Right of access pursuant to Art. 15 DS-GVO

You have the right to request confirmation as to whether we process personenbezogene Daten concerning you. If this is the case, you have the right to information about these personenbezogene Daten and to further information, e.g. the purposes of processing, the categories of personenbezogene Daten processed, the recipients, and the planned duration of storage or the criteria for determining the duration.

b) Right to rectification and completion pursuant to Art. 16 DS-GVO

You have the right to request the immediate rectification of inaccurate data. Taking into account the purposes of the processing, you have the right to request completion of incomplete data.

c) Right to erasure (“right to be forgotten”) pursuant to Art. 17 DS-GVO

You have a right to erasure insofar as the processing is not necessary.
This is the case, for example, if your data are no longer necessary for the original purposes, if you have withdrawn your data protection consent, or if the data were processed unlawfully.

d) Right to restriction of processing pursuant to Art. 18 DS-GVO

You have a right to restriction of processing, for example if you believe that the personenbezogene Daten are inaccurate.

e) Right to data portability pursuant to Art. 20 DS-GVO

You have the right to receive the personenbezogene Daten concerning you in a structured, commonly used, and machine-readable format.

f) Right to object pursuant to Art. 21 DS-GVO

You have the right, at any time, on grounds relating to your particular situation, to object to the processing of certain personenbezogene Daten concerning you.

In the case of direct advertising, you as the data subject have the right to object at any time to the processing of personenbezogene Daten concerning you for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.

g) Automated decision-making in individual cases including profiling pursuant to Art. 22 DS-GVO

You have the right not to be subject to a decision based solely on automated processing – including profiling – except in the exceptional cases mentioned in Art. 22 DS-GVO.

No decision-making based solely on automated processing – including profiling – takes place.

h) Complaint to a data protection supervisory authority pursuant to Art. 77 DS-GVO

In addition, you may lodge a complaint at any time with a data protection supervisory authority, for example if you believe that data processing is not in compliance with data protection regulations.