Privacy policy

1. Information on the Collection of Personal Data and Contact Details of the Data Controller
2. Data Collection When Visiting Our Website
3. Cookies
4. Data Processing for Order Handling
5. Data Processing for Opening a Customer Account and for Contract Processing
6. Contacting Us
7. Comment Function
8. Use of Your Data for Direct Advertising
9. Use of Social Media: Videos
10. Online Marketing
11. Web Analytics Services
12. Retargeting / Remarketing / Recommendation Advertising
13.Tools and Miscellaneous
14. Rights of the Data Subject
15. Duration of Storage of Personal Data

1. Information on the Collection of Personal Data and Contact Details of the Data Controller

1.1 Thank you for visiting our website. Below, we would like to inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The data controller for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is:

Aiya Europe GmbH Am Sandtorkai 62 20457 Hamburg, Germany Tel.: +49 (0) 40 34 80 99 93 Fax: +49 (0) 40 34 80 99 94 Email: info@aiya-europe.com

1.3 The controller has appointed the following data protection officer:

Dr. Patrick Schweisthal Dachauer Str. 65 80335 Munich, Germany Tel: +49 89 740045840 Email: datenschutz@dataguard.de

1.4 To protect the security of your data during transmission, we use state-of-the-art encryption processes (e.g., SSL or TSL) over HTTPS.

2. Data Collection When Visiting Our Website

Each time our website is accessed, our system automatically collects data and information that your browser transmits to our server (so-called “server log files”). The following technically necessary data is collected:

• The visited website
• Date and time at the moment of access
• Amount of data sent in bytes
• Source/reference from which you came to the site
• Operating system used
• Browser used
• IP address used (if applicable: in anonymized form)

The legal basis for the processing is Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

We reserve the right to retrospectively check the server log files if specific indications point to illegal use. The data is deleted as soon as it is no longer needed for the purpose of its collection. In the case of data collection for the provision of the website, this occurs when the respective session has ended.

In the case of storing the data in log files, it is deleted after no more than seven days. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

3. Cookies

Our website uses cookies.

Cookies are text files that are stored on the user's device. When a user accesses a website, a cookie may be stored on the user's operating system. Some functions of our website cannot be offered without the use of cookies. It is necessary that the browser is recognized even after a page change. The user data collected by technically necessary cookies are not used to create user profiles. In the aforementioned purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f) GDPR.

In addition, our website uses cookies that allow an analysis of the surfing behavior of the users (so-called third-party cookies). More detailed information on the scope, purpose, legal basis, and options for objection can be found in the respective sections of the respective chapter of this privacy policy.

As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. If you disable cookies for our website, it may no longer be possible to fully use all functions of the website. The transmission of Flash cookies can be prevented by changing the settings of the Flash player.

You can find help with the settings in the respective help menu of your browser under the following links:

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647 Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Some of the cookies used here are deleted after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified duration, which may vary depending on the cookie.

4. Data Processing for Order Handling

4.1 If you would like to order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. We process the data provided by you to handle your order.

We sometimes work with external service providers to process your order. For this purpose, we must pass on the necessary personal data.

If we commission transport companies with the delivery of your goods, we pass on the data necessary for the delivery of the goods to the respective transport company. For payment processing, we pass on your data to the commissioned credit institute as required. If we use payment service providers, you will also be informed about this below. The legal basis for passing on your data is Art. 6 para. 1 lit. b GDPR.

4.2 Transfer of your personal data to shipping service providers

- DHL

If the goods are delivered to you by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery and within the framework of necessity in accordance with Art. 6 Para. 1 lit. b GDPR. Only if you have given your express consent during the ordering process do we pass on your email address to DHL before delivery of the goods for the purpose of coordinating a delivery date or for delivery announcements in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future to the person responsible above or to the transport service provider DHL.

4.3 Use of payment service providers

• Mollie

When selecting a payment method from the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam (hereinafter referred to as “Mollie”), the payment is processed via Mollie. We pass on your personal data together with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number) to Mollie exclusively for the purpose of payment processing and only within the framework of necessity in accordance with Art. 6 para. 1 lit. b GDPR.

• PayPal

When selecting the payment method PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal, the payment is processed via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).

We pass on your personal data to PayPal within the framework of necessity in accordance with Art. 6 Para. 1 lit. b GDPR. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – “purchase on account” or “installment payment” via PayPal.

For this purpose, your payment data may be passed on to credit agencies based on PayPal's legitimate interest in determining your solvency in accordance with Art. 6 Para. 1 lit. f GDPR. PayPal uses the result of the credit check concerning the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report can include probability values (so-called score values). To the extent that score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data, among other things, are included in the calculation of the score values. Further data collected by PayPal can be found in the respective privacy policy. This can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

• SOFORT

When selecting the payment method “SOFORT”, the payment is processed via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter referred to as “SOFORT”). We pass on your personal data together with the information about your order to SOFORT exclusively for the purpose of payment processing and only within the framework of necessity in accordance with Art. 6 Para. 1 lit. b GDPR.

SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden).

SOFORT's privacy policy can be viewed here: https://www.klarna.com/sofort/datenschutz

5. Data Processing for Opening a Customer Account and for Contract Processing

When you open a customer account with us, personal data is collected and processed in accordance with Art. 6 para. 1 lit. b GDPR. The scope of data is evident from the input form. The data you enter is stored and used by us for contract processing.

You can delete your customer account at any time. This can be done by sending a message to the controller's address or, if offered, directly in the customer account. In this case, we will also block your data with regard to tax and commercial retention periods and delete it after these periods have expired, unless you have consented to further storage or a legally permitted further data use on our part.

6. Contacting Us

When you contact us via the contact form, the data entered in the input mask is transmitted to us and stored. The data collected can be seen from the respective input mask. When contacting us by email, only the data entered there is transmitted to us.

The data is exclusively used for processing the conversation and your request. The legal basis for the processing of the data is Art. 6 para. 1 lit. a) GDPR if the user's consent is present. The legal basis for processing the data transmitted in the course of sending an email is Art. 6 para. 1 lit. f) GDPR. If the email contact aims at concluding a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR. The data is deleted as soon as it is no longer necessary for the purpose of its collection, provided there are no statutory retention obligations. For personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been conclusively clarified. The user has the option at any time to revoke their consent to the processing of personal data. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot continue.

7. Comment Function

If you use the comment function on our website, in addition to your comment content, information on the time of creation of the comment and the commentator name you have chosen will be stored and published on the website. Additionally, your IP address is logged and saved. The legal bases for storing your data are Art. 6 para. 1 lit.b and f GDPR. The storage of the IP address is done for security reasons and in case the person concerned violates the rights of third parties or publishes illegal content through a comment. Your email address is required to contact you if a third party should object to your published content as unlawful. We reserve the right to delete comments if they are objected to as unlawful by third parties.

8. Use of Your Data for Direct Advertising

8.1 Newsletter

There is the possibility to subscribe to a free newsletter on our website. When signing up for the newsletter, the data from the input mask is transmitted to us. Only your email address is mandatory. If you make further voluntary entries, these will only be used for personalized addressing.

The legal basis for processing your data after signing up for the newsletter is Art. 6 para. 1 lit. a GDPR, obtained by you receiving a confirmation email after signing up for the newsletter, which contains a confirmation link. When you click this link, you also give your consent to receive the newsletter. When sending the registration for the newsletter, we store your IP address as well as the date and time of the registration. This storage serves to trace a possible misuse of your email address.

We use the data collected by us when signing up for the newsletter exclusively for sending the newsletter.

You can cancel the subscription to the newsletter at any time. There is a corresponding link in each newsletter for this purpose. This also enables the revocation of the consent to store the personal data collected during the registration process.

8.2 Newsletter for existing customers

If you purchase goods or services on our website and deposit your email address, it can subsequently be used by us for sending a newsletter. In such a case, the newsletter will only send direct advertising for similar goods or services of our own.

The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 para. 3 UWG and Art. 6 para. 1 lit. f GDPR. The data processing takes place solely based on our legitimate interest in personalized direct advertising.

If you have already objected to the use of your email address for the purpose of direct advertising, you will not receive this newsletter. However, you also have the option to object at any time to the use of your email address for the aforementioned advertising purpose with effect for the future by sending a message to us. After receiving your objection, the use of your email address for advertising purposes will be immediately discontinued.

8.3 Newsletter dispatch via MailChimp

We send our newsletter via The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/; hereinafter referred to as “Mailchimp”). We pass on the data you entered during the registration for the newsletter to Mailchimp based on Art. 6 para. 1 lit. f GDPR due to our legitimate interest in using an effective, secure, and user-friendly newsletter system.

MailChimp uses this data to send the newsletter to you on our behalf and to statistically evaluate the newsletter on our behalf. For this purpose, the emails contain so-called web beacons or tracking pixels, which represent one-pixel image files stored on our website. In this way, it can be determined whether a newsletter message has been opened and which links have been clicked on. MailChimp automatically creates general, non-personal statistics about the response behavior to newsletters.

We also have a legitimate interest in the statistical analysis of the newsletters to optimize our advertising communication. For this purpose, the web beacons also collect data of the individual newsletter recipients (e.g., email address, time of retrieval, IP address, browser type, and operating system) according to Art. 6 para. 1 lit. f GDPR and process it. Based on this data, conclusions about the individual newsletter recipient are possible. This data is processed by Mailchimp to automatically create a statistic that shows whether a particular recipient has opened a newsletter message.

To deactivate this data analysis, you must unsubscribe from the newsletter.

It is also possible for MailChimp to use the data according to Art. 6 para. 1 lit. f GDPR due to its own legitimate interest in the demand-oriented design and optimization of the service or for market research purposes to determine from which countries the newsletter recipients come. However, Mailchimp does not use your data to contact you or pass it on to third parties.

Typically, your data is transferred to a MailChimp server in the USA and stored there. To protect your data in the USA, there is a data processing agreement with MailChimp based on the standard contractual clauses of the European Commission. This data processing agreement can be viewed at the following internet address: http://mailchimp.com/legal/forms/data-processing-agreement/.

MailChimp's privacy policy can be viewed here: https://mailchimp.com/legal/privacy/

9. Use of Social Media: Videos

Use of Youtube Videos

On this website, we use the Youtube embedding function to display and play videos from the provider "Youtube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the extended privacy mode, which, according to the provider, starts storing user information only when the video(s) are played. When you start playback of embedded Youtube videos, the provider "Youtube" uses cookies to collect information about your user behavior. According to "Youtube", these serve, among other things, to collect video statistics, improve user-friendliness, and prevent abusive actions. If you are logged in to Google, your data will be directly assigned to your account.

If you do not want the assignment with your profile on YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular according to Art. 6 para. 1 lit.f GDPR on the basis of Google's legitimate interests in displaying personalized advertising, market research, and/or demand-oriented design of its website, as well as our legitimate interest in the integration of the videos according to Art. 6 Para. 1 lit. f GDPR in the analysis of user behavior, the design of our website according to user interest, and the exploitation of the financial potential of our website.

You have the right to object to the creation of these user profiles, and you must address YouTube to exercise this. Regardless of the playback of the embedded videos, a connection to the Google "DoubleClick" network is established each time this website is called up, which can trigger further data processing operations without our influence. Data may also be transmitted to the servers of Google LLC. come in the USA. Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://policies.google.com/privacy?hl=en Settings for personalized advertising are possible at: https://adssettings.google.com/authenticated.

10. Online Marketing

Use of Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, as part of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

In this context, advertising media (so-called Google Adwords) are used on external websites to advertise our offers. Our legitimate interest lies in displaying advertising that is of interest to you and in achieving a fair calculation of advertising costs. The legal basis is Art. 6 Para. 1 lit. f GDPR.

Google Ads uses cookies for conversion tracking, which are set when you click on an AdWords ad placed by Google.

These cookies usually expire after 30 days and are not used for personal identification. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of Ads customers.

The information obtained is used to create conversion statistics for Ads customers about the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag.

You cannot be personally identified.

If you want to prevent tracking, you can disable the Google Conversion Tracking cookie via your internet browser under user settings.

Here you get information about Google's privacy policy: http://www.google.de/policies/privacy/

You can permanently deactivate the conversion cookies by setting your browser accordingly or downloading and installing the browser plugin available under the following link: http://www.google.com/settings/ads/plugin?hl=de

In this case, certain functions of this website may not be used or only to a limited extent.

11. Web Analytics Services

Google Universal Analytics

We use the web analytics service Google Analytics for this website (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).

Google Analytics uses "cookies". These are text files that are stored on your computer and that enable an analysis of your use of the website.

The information generated about your use of this website (including the truncated IP address) is transmitted to a Google server and stored there, with transmission to the USA being possible.

We use Google Analytics with the extension "_anonymizeIp()", which ensures the anonymization of the IP address by truncation and excludes direct personal reference. Therefore, Google will truncate your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. In exceptional cases, the full IP address will be transmitted to a Google server, also in the USA, and truncated there. In these exceptional cases, this processing takes place according to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google uses this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website and internet use. There is no merging of your IP address collected in this context with other data from Google.

You can prevent the storage of cookies by setting your browser software accordingly. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by downloading and installing the following browser plugin: http://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can set an out-out cookie:

This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click this link again.

This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your use in your customer account under "My data", "personal data".

Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

12. Retargeting / Remarketing / Recommendation Advertising

Facebook Custom Audience via the pixel method

On this website, we use the "Facebook pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). If explicit consent has been given, this allows the behavior of users to be tracked after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and can help optimize future advertising measures. The collected data is anonymous to us, so we cannot draw conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, according to the Facebook data usage policy (https://www.facebook.com/about/privacy/).

You can enable Facebook and its partners to place ads on and off Facebook. For these purposes, a cookie may be stored on your device. These processing operations are carried out exclusively when you have given your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Consent to the use of the Facebook pixel may only be declared by users who are older than 13 years old. If you are younger, we ask you to ask your legal guardians for permission. You can disable the use of cookies on your computer by setting your browser accordingly. However, this may mean that some functions on our websites can no longer be used to their full extent. You can also deactivate the use of cookies by third-party providers such as Facebook on the following Digital Advertising Alliance website: http://www.aboutads.info/choices/

13. Tools and Miscellaneous

13.1 Google Maps

We use "Google Maps" (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Maps is used to display interactive maps and create driving directions. By using Google Maps, information about the use of this website, including your IP address and the (start) address entered in the route planner function, may be transmitted to Google. When you visit a page of our website that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser and integrated into the website. Therefore, we have no influence on the extent of the data collected by Google in this way. According to our knowledge, these are at least the following data:

• Date and time of the visit to the relevant website,
• Internet address or URL of the accessed website,
• IP address, (start) address entered as part of the route planning.

We have no control over the further processing and use of the data by Google and can therefore not accept any responsibility for this. If you are logged in to Google, your data will be directly assigned to your Google account. If you do not want this assignment, you must log out of Google. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular according to Art. 6 para. 1 lit.f GDPR on the basis of Google's legitimate interests in displaying personalized advertising, market research, and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles, and you must address this objection to Google. If you do not want Google to collect, process, or use data about you via our website, you can also deactivate JavaScript in your browser settings. In this case, however, you cannot use the map display. The purpose and scope of data collection and the further processing and use of data by Google, as well as your rights in this regard and setting options for protecting your privacy, can be found in Google's privacy policy (https://policies.google.com/privacy?hl=de).

Google's terms of use can be accessed here: http://www.google.de/intl/de/policies/terms/regional.html the terms of use for Google Maps can be accessed here: https://www.google.com/intl/de_US/help/terms_maps.html Further information on data protection can be found here: http://www.google.de/intl/de/policies/privacy/

13.2 Google Web Fonts

We use so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When you call up our website, your browser loads the required web fonts into your browser cache.

For this, your browser must establish a connection to Google's servers, whereby Google will be transmitted your IP address. In this case, your personal data may also be transferred to the servers of Google LLC. in the USA. Our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR lies in the uniform and attractive presentation of our online offers.

If your browser does not support web fonts, a standard font from your computer will be used.

Details on Google Web Fonts can be found here: https://developers.google.com/fonts/faq

and in Google's privacy policy: https://www.google.com/policies/privacy/

13.3 Fonts.net Web Fonts

We use so-called web fonts provided by Monotype GmbH, Werner-Reimers-Straße 2–4, 61352 Bad Homburg ("Fonts.net") for the uniform display of fonts. When you call up our website, your browser loads the required web fonts into your browser cache.

For this, your browser must establish a connection to the servers of Fonts.net, whereby Monotype will be transmitted your IP address. Our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR lies in the uniform and attractive presentation of our online offers.

If your browser does not support web fonts, a standard font from your computer will be used.

Details on data protection at Fonts.net can be found here: https://www.fonts.com/info/legal

14. Rights of the Data Subject

14.1 The applicable data protection law grants you comprehensive rights of access and intervention to the data controller regarding the processing of your personal data, which we inform you about below:

• Right of access by the data subject according to Art. 15 GDPR: You may demand confirmation from the controller as to whether personal data concerning you is processed by the controller. In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage, and about the existence of further rights such as the correction of the data or the existence of a right of complaint to a supervisory authority, the origin of your data if it was not collected from us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed, which guarantees according to Art. 46 GDPR when your data is forwarded to third countries;

• Right to rectification according to Art. 16 GDPR: You have a right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored by us; the rectification or completion must be done immediately.

• Right to restriction of processing according to Art. 18 GDPR: You have the right to demand the restriction of the processing of your personal data as long as the accuracy of your data disputed by you is checked, if you refuse deletion of your data due to unauthorized data processing and instead request the restriction of the processing of your data if you need your data for the establishment, exercise, or defense of legal claims, after we no longer need this data after achieving the purpose, or if you have lodged an objection for reasons of your particular situation, as long as it is not yet determined whether our legitimate reasons prevail; If the processing of the personal data concerning you has been restricted, this data may – with the exception of their storage – only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted.

• Right to erasure according to Art. 17 GDPR: You have the right to the immediate deletion of your personal data if the requirements of Art. 17 para. 1 GDPR are met. However, this right to deletion does not exist, in particular – not conclusively – if the processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;

• Right to information according to Art. 19 GDPR: If you have exercised your right to have the controller correct, delete, or limit the processing, the controller is obliged to inform all recipients to whom your personal data has been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You also have the right to be informed about these recipients.

• Right to data portability according to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common, and machine-readable format or to request the transmission to another controller, as far as this is technically feasible;

• Right to withdraw consent according to Art. 7 para. 3 GDPR: You have the right to withdraw your consent to the processing of the personal data concerning you at any time with effect for the future if the processing is based on Art. 6 para. 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions. You also have the right to withdraw your data protection consent declaration at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

• Right to lodge a complaint according to Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or place of the alleged infringement, if you believe that the processing of personal data relating to you infringes the GDPR.

14.2 Right to object

You have the right to object at any time to the processing of your data with effect for the future if we process your data after weighing our legitimate interests. If you make use of this right of objection, we will terminate the processing of your data unless there are demonstrably compelling legitimate grounds for the termination that outweigh your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

15. Duration of Storage of Personal Data

The duration of storage of personal data depends on the respective legal retention periods. After these periods have expired, we routinely delete the data if they are no longer necessary for the performance or initiation of a contract and/or there is no longer any legitimate interest on our part in further storage.

Date: April 1, 2021