DATA PROTECTION
1. Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data includes all data with which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is SOIL & GREEN // Movers & Shakers, B7, 18, 68159 Mannheim, Germany, Email: hello@soilandgreen.shop. The controller for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (such as orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser bar.
2. Data Collection When Visiting Our Website
When you visit our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser sends to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website visited by you
- Date and time of the access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or otherwise used. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
3. Hosting & Content Delivery Network
Shopify
For hosting our website and displaying the website content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").
Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc.
All data collected on our website is processed on the provider's servers. We have concluded a contract for order processing with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
When transferring data to Canada, an adequate level of data protection is ensured by a European Commission adequacy decision.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
4. Cookies
In order to make the visit to our website attractive and enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for a longer period of time and allow the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the cookie settings of your web browser.
If personal data is processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the performance of a contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a user-friendly and effective design of the website visit.
You can set your browser to inform you about the setting of cookies and to decide on their acceptance individually or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5. Contact
5.1 Loox
For review reminders, we use the services of the following provider: Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel.
We only transmit your email address and, if applicable, other customer data to the provider based on your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, so that they can contact you by email with a review reminder.
You can revoke your consent at any time with effect for the future to us or to the provider.
We have concluded a contract for commissioned data processing with the provider, which ensures the protection of data of our website visitors and prohibits any unauthorized disclosure to third parties.
For data transfer to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
5.2 In the context of contacting us (e.g. via contact form or email), personal data is processed solely for the purpose of processing and answering your request and only to the extent necessary for this purpose.
The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted as soon as it can be inferred from the circumstances that the relevant matter has been finally clarified and unless there are statutory retention obligations.
6. Data processing when opening a customer account
In accordance with Art. 6 para. 1 lit. b GDPR, personal data is collected and processed to the extent necessary when you provide us with this information when opening a customer account. The data required to open an account can be found in the input mask of the corresponding form on our website.
You can delete your customer account at any time by sending a message to the address of the controller mentioned above. After your customer account has been deleted, your data will be deleted if all contracts concluded on it have been completely processed, there are no legal retention periods, and we have no legitimate interest in continuing to store the data.
7. Use of customer data for direct advertising
7.1 Registration for our email newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you receive the newsletter only after you have explicitly confirmed your consent to receive the newsletter by activating a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In doing so, we store the IP address registered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any potential misuse of your email address at a later point in time. The data collected by us during the registration for the newsletter is used strictly for the stated purposes.
You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond what is legally permitted and inform you about it in this statement.
7.2 Sendinblue
Our email newsletter is sent through this provider: Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.
Based on our legitimate interest in effective and user-friendly newsletter marketing, we share the data provided during newsletter registration according to Art. 6 para. 1 lit. f GDPR with this provider so that they can send the newsletter on our behalf.
Subject to your explicit consent according to Art. 6 para. 1 lit. a GDPR, the provider also carries out a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the content of the newsletter. Device information (e.g. time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a contract for order processing with the provider, which protects the data of our website visitors and prohibits the transfer of data to third parties.
7.3 In case you abandon your purchase with us before completing the order, you have the option to be reminded of the contents of your virtual shopping cart by email once.
The only mandatory information required for sending this reminder is your email address. Providing additional data is voluntary and may be used to address you personally. For sending the email, we use the so-called double opt-in procedure, which ensures that you only receive a notification once you have expressly confirmed your consent by clicking on a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR for sending a shopping cart reminder. In this context, we store the IP address registered by your Internet service provider (ISP) as well as the date and time of registration to be able to trace any potential misuse of your email address at a later point in time. The data collected during registration for our email notification service is used strictly for the intended purpose.
You can unsubscribe from the shopping cart reminders at any time by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your email address will be promptly deleted from our distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this extent, which is legally permitted and about which we inform you in this declaration.
8. Data processing for order processing
8.1 To the extent necessary for the fulfillment of the contract for delivery and payment purposes, the personal data collected by us will be transmitted to the contracted transport company and the contracted credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data (name, address, email address) transmitted by you when ordering in order to inform you personally via a suitable means of communication (e.g. postal or email) about upcoming updates within the legally prescribed period as part of our legal obligation under Art. 6 para. 1 lit. c GDPR. Your contact data will be strictly used for communication regarding the updates owed by us and will only be processed by us to the extent necessary for the respective information.
In order to process your order, we also work with the following service provider(s), who support us in the performance of closed contracts, either entirely or in part. Certain personal data is transmitted to these service providers in accordance with the following information.
8.2 In order to fulfill our contractual obligations to our customers, we work with external shipping partners. We only pass on your name and delivery address, and, if necessary for delivery, your telephone number, exclusively for the purpose of delivering the goods in accordance with Art. 6 para. 1 lit. b GDPR to a shipping partner selected by us.
8.3 Transfer of personal data to shipping service providers
8.4 Deutsche Post
As a transport service provider, we use the following provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany.
We will pass on your email address and/or telephone number in accordance with Art. 6 para. 1 lit. a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or announcing delivery to the provider, provided you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the recipient's name and delivery address to the provider in accordance with Art. 6 para. 1 lit. b GDPR. The transfer will only be made to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery announcement is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the data controller mentioned above or vis-à-vis the provider.
8.5 DHL
As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.
We will pass on your email address and/or telephone number in accordance with Art. 6 para. 1 lit. a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or announcing delivery to the provider, provided you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the recipient's name and delivery address to the provider in accordance with Art. 6 para. 1 lit. b GDPR. The transfer will only be made to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery announcement is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the data controller mentioned above or vis-à-vis the provider.
8.6 DPD
As a transport service provider, we use the following provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany.
In accordance with Art. 6 para. 1 lit. a GDPR, we will provide your email address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or to announce delivery, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we will only provide the recipient's name and delivery address to the provider in accordance with Art. 6 para. 1 lit. b GDPR. The data will only be passed on to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the provider or announce delivery in advance.
The consent can be revoked at any time with effect for the future vis-à-vis the controller mentioned above or vis-à-vis the provider.
8.7 Hermes
We use the following provider as a transport service provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany.
We will disclose your email address and/or phone number to the provider for the purpose of coordinating a delivery date or delivery announcement prior to delivery of the goods, pursuant to Art. 6 para. 1 lit. a GDPR, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we will only disclose the name of the recipient and the delivery address to the provider, in accordance with Art. 6 para. 1 lit. b GDPR. Disclosure will only be made to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate a delivery date with the provider or make a delivery announcement.
Consent may be revoked at any time with effect for the future to the person responsible referred to above or to the provider.
8.8 Austrian Post
As a transport service provider, we use the following provider: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany.
We will disclose your email address and/or phone number to the provider for the purpose of coordinating a delivery date or delivery announcement prior to delivery of the goods, pursuant to Art. 6 para. 1 lit. a GDPR, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we will only disclose the name of the recipient and the delivery address to the provider, in accordance with Art. 6 para. 1 lit. b GDPR. Disclosure will only be made to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate a delivery date with the provider or make a delivery announcement.
Consent may be revoked at any time with effect for the future to the person responsible referred to above or to the provider.
8.9 Post CH
As a transport service provider, we use the following provider: Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria.
We will disclose your email address and/or phone number to the provider for the purpose of coordinating a delivery date or delivery announcement prior to delivery of the goods, pursuant to Art. 6 para. 1 lit. a GDPR, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we will only disclose the name of the recipient and the delivery address to the provider, in accordance with Art. 6 para. 1 lit. b GDPR. Disclosure will only be made to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate a delivery date with the provider or make a delivery announcement.
Consent may be revoked at any time with effect for the future to the person responsible referred to above or to the provider.
8.10 UPS
As a transport service provider, we use the following provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany.
We will share your email address and/or telephone number with the provider for the purpose of coordinating a delivery date or providing delivery notifications before the delivery of the goods, in accordance with Art. 6 para. 1 lit. a GDPR, if you have given your express consent for this during the ordering process. Otherwise, we will only share the recipient's name and delivery address with the provider for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The transfer is only made to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate a delivery date with the provider or provide delivery notifications in advance.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible party named above or vis-à-vis the provider.
8.11 Use of Payment Service Providers (Payment Services)
8.12 Paypal
One or more online payment methods of the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If you select a payment method of the provider where you pay in advance (such as credit card payment), your payment data provided during the ordering process (including name, address, bank and credit card information, currency and transaction number) as well as information about the content of your order will be disclosed to the provider in accordance with Art. 6 para. 1 lit. b GDPR. Your data will only be disclosed to the extent necessary for payment processing with the provider.
If you select a payment method where the provider pays in advance (such as invoice or installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, if applicable, data on an alternative payment method).
To protect our legitimate interest in determining the payment capability of our customers, we will forward this data to the provider for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR. Based on the personal data you have provided as well as additional data (such as shopping cart, invoice amount, order history, payment experience), the provider will determine whether the payment method you have selected can be granted in terms of payment and/or default risk.
The credit report may contain probability values (so-called score values). To the extent score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, among other things, but is not limited to, address data.
You can object to the processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data to the extent necessary for the contractual payment processing.
8.13 Shopify Payments
One or more online payment methods of the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
If you select a payment method of the provider where you pay in advance (such as credit card payment), your payment data provided during the ordering process (including name, address, bank and credit card information, currency and transaction number) as well as information about the content of your order will be disclosed to the provider in accordance with Art. 6 para. 1 lit. b GDPR.
9. Online Marketing
Facebook Pixel for Creating Custom Audiences (with Cookie Consent Tool)
Within our online offering, the so-called "Facebook Pixel" of the social network Facebook is used, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook"). When a user clicks on an advertisement placed by us on Facebook, the URL of our linked page is appended with an additional parameter by Facebook Pixel. If our page allows data sharing with Facebook via Pixel, this URL parameter is written into the user's browser by a cookie that is set by our linked page. This cookie is then read by Facebook Pixel, allowing the data to be forwarded to Facebook.
With the help of Facebook Pixel, Facebook can determine the visitors of our online offering as a target group for displaying ads (so-called "Facebook Ads"). Accordingly, we use Facebook Pixel to show our Facebook Ads only to Facebook users who have shown an interest in our online offering or who have certain characteristics (such as interests in certain topics or products, which are determined based on the visited websites) that we transmit to Facebook (so-called "Custom Audiences"). With the help of Facebook Pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of the users and do not appear intrusive. This allows us to continue to evaluate the effectiveness of Facebook Ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook Ad (so-called "conversion").
The data collected is anonymous to us, meaning that we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with Facebook's data usage policy (https://www.facebook.com/about/privacy/). The data can enable Facebook and its partners to place advertisements on and outside of Facebook.
The data processing associated with the use of Facebook Pixel only takes place with your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
10. Page functionalities
10.1 Instagram Plugins
On our website, we use plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Instagram").
These plugins allow direct interaction with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially deactivated by means of a so-called "2-click" or "Shariff" solution integrated into the page.
This integration ensures that when a page of our website that contains such plugins is called up, no connection is made to the provider's servers.
Only when you activate the plugins and thereby give your consent to the transfer of data in accordance with Art. 6 para. 1 lit. a GDPR, does your browser establish a direct connection to the provider's servers. In this process, regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), your browser, and your page history is transmitted to the provider and may be processed there.
If you are logged into an existing user profile on the provider's social network, information about interactions performed via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking it again. However, revocation does not affect data that has already been transferred to the provider.
Data may also be transferred to: Meta Platforms Inc., USA
We have concluded a contract for commissioned data processing with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
For the transfer of data to the USA, the provider relies on standard contract clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
10.2 Youtube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA
When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. Certain information, including your IP address, is transmitted to the provider.
If playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.
If you are logged into a user account with the provider during your visit to our site, your data will be directly associated with your account when you click on a video. If you do not want this association with your account, you must log out before clicking the playback button.
All of the aforementioned processing, particularly the setting of cookies to read information on the device used, only occurs if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website.
For the transfer of data to the USA, the provider relies on standard contract clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
10.3 Google Maps API
To enable real-time verification of certain entries in the address form of the ordering process in our webshop for input errors, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA
The provider validates the entered address, verifies the spelling, and possibly supplements missing data. In case of non-unambiguous addresses, correct alternative suggestions are displayed. For this purpose, the address data entered by you is transmitted to the provider, stored and evaluated there.
This processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the proper collection of correct customer address data for conscientious fulfillment of our contractual delivery obligations and to prevent contract performance problems.
The provider processes the affected data separately and does not combine it with other data stocks and deletes them as soon as their status or correctness has been confirmed, but at the latest after 30 days.
For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
10.4 Google Translate
This page uses the translation service "Google Translate" from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") via an API integration. To display the automated translation in the language of your choice, the browser you are using connects to Google's servers. Google uses so-called "cookies" for this purpose, which are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transmitted to a Google server and stored there, and may also be transferred to the servers of Google LLC. in the USA.
Further information on Google Translate as well as Google's privacy policy can be found at: https://www.google.com/policies/privacy/
You can revoke your consent at any time with effect for the future. To exercise your revocation, disable this service in the "Cookie Consent Tool" provided on the website.
11. Tools and Miscellaneous
11.1 sevDesk
For the accounting of our company, we use the cloud-based accounting software service of the following provider: sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany.
The provider processes incoming and outgoing invoices as well as potentially the bank transactions of our company in order to automatically capture invoices, match them to transactions, and create the financial accounting in a partially automated process.
If personal data is processed in this process, the processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in an efficient organization and documentation of our business transactions.
11.2 Cookie Consent Tool
This website uses a so-called "Cookie Consent Tool" to obtain effective user consent for consent-required cookies and cookie-based applications. The "Cookie Consent Tool" is displayed to users in the form of an interactive user interface when the page is accessed, on which consent can be given for certain cookies and/or cookie-based applications by checking a box. With the use of the tool, all consent-required cookies/services are only loaded if the respective user has given consent by checking a box. This ensures that such cookies are only set on the respective user's device if consent has been given.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is not generally processed in this process.
If personal data (such as the IP address) is processed in individual cases for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in a legally compliant, user-specific and user-friendly cookie consent management and thus in a legally compliant design of our website.
Another legal basis for processing is Art. 6 (1) lit. c GDPR. As the controller, we are legally obligated to make the use of technically unnecessary cookies dependent on the respective user's consent.
We have concluded a contract for order processing with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
Further information about the operator and the settings options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.
12. Rights of the Data Subject
12.1 Under applicable data protection law, you have the following rights (rights of the data subject) with regard to the processing of your personal data by the controller, whereby the respective legal basis is referred to for the exercise requirements:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent granted pursuant to Art. 7 (3) GDPR;
- Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.
12.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA SUBJECT TO YOUR OBJECTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING THE DATA IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU CAN EXERCISE THIS RIGHT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA SUBJECT TO YOUR OBJECTION FOR DIRECT MARKETING PURPOSES.
13. Duration of storage of personal data
The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and - if applicable - additionally by the respective legal retention period (e.g. commercial and tax retention periods).
When processing personal data based on explicit consent according to Art. 6 para. 1 lit. a GDPR, the affected data will be stored until you revoke your consent.
If there are legal retention periods for data processed on the basis of Art. 6 para. 1 lit. b GDPR in the context of contractual or contract-like obligations, these data will be routinely deleted after the retention periods have expired, unless they are no longer necessary for the fulfillment or initiation of a contract and/or there is no legitimate interest on our part to continue storing them.
When processing personal data based on Art. 6 para. 1 lit. f GDPR, these data will be stored until you exercise your right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing based on Art. 6 para. 1 lit. f GDPR, these data will be stored until you exercise your right to object under Art. 21 para. 2 GDPR.
Unless otherwise specified in the other information provided in this statement regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.
