1) Introduction and contact details of the responsible person
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. In this context, personal data is all data with which you can be personally identified.
1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Florian Theisen, I & F German Trading, Walsroder Ring 30a, 21079 Hamburg, Germany, e-mail: info@dergermanhoney.com . The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the string “https://” and the lock symbol in your browser line.
2) Data collection when visiting our website
When you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymised form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
3) Cookies
In order to make visiting our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your terminal device. In some cases, these cookies are automatically deleted again after the browser is closed (so-called “session cookies”), in other cases, these cookies remain on your end device for longer and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.
You can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or can exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contacting us
Personal data is collected when contacting us (e.g. via contact form or e-mail). Which data is collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
5) Registration with the portal or forum
You can register on our website by providing personal data. The personal data processed for registration is specified in the input mask used for registration. We use the so-called double-opt-in procedure for registration, i.e. your registration is only completed once you have confirmed your registration by clicking on the link contained in a confirmation e-mail sent to you for this purpose. If your confirmation is not received within 24 hours, your registration will be automatically deleted from our database. The provision of the above-mentioned data is mandatory. You can provide all other information voluntarily by using our portal.
If you use our portal, we store your data required for the fulfilment of the contract, including any information on the method of payment, until you finally delete your access. Furthermore, we store the voluntary data you provide for the duration of your use of the portal, unless you delete it beforehand. You can manage and change all details in the protected customer area. The legal basis is Art. 6 para. 1 lit. f GDPR.
In addition, we store all content published by you (such as public posts, pinboard entries, guestbook entries, etc.) in order to operate the website. We have a legitimate interest in providing the website with the full user-generated content. The legal basis for this is Art. 6 para. 1 lit. f GDPR. If you delete your account, your public statements, especially in the forum, remain visible to all readers, but your account can no longer be accessed. All other data will be deleted in this case.
6) Comment function
Within the framework of the comment function on this website, in addition to your comment, details of the time at which the comment was created and the commentator name you have chosen will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is for security reasons and in case the person concerned infringes the rights of third parties by posting a comment or posts illegal content. We need your e-mail address in order to contact you in the event that a third party objects to your published content as being illegal. The legal basis for storing your data is Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.
7) Use of customer data for direct advertising
Registration for our e-mail newsletter
If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory data for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in future by clicking on an appropriate link.
By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter is used exclusively for the purpose of addressing you in an advertising manner by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your e-mail address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data in a way that goes beyond this, which is permitted by law and about which we inform you in this declaration.8) Web analytics services8.1 Google Analytics 4This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), to analyse the use of websites.When using Google Analytics 4, so-called “cookies” are used as standard. Cookies are text files that are stored on your terminal device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your terminal device, shortened by the last few digits, see below) is usually transmitted to a Google server and stored and processed there. This may also result in the transmission of information to the servers of Google LLC, a company based in the USA, where the information is further processed.When using Google Analytics 4, the IP address transmitted by your terminal device when you use the website is always collected and processed automatically and by default only in an anonymised manner, so that the information collected cannot be directly related to a person. This automatic anonymisation is carried out by shortening the IP address transmitted by your terminal device by Google within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA) by the last digits.
Google uses this and other information on our behalf to evaluate your use of the website, to compile reports about your website activities and usage behaviour and to provide us with other services related to your website and internet usage. In this context, the IP address transmitted and shortened by your terminal device within the scope of Google Analytics 4 will not be merged with other data from Google. The data collected in the context of the use of Google Analytics 4 will be stored for 2 months and then deleted.
Google Analytics 4 also enables the creation of statistics with statements about the age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the inclusion of third-party information via a special function, the so-called “demographic characteristics”. This makes it possible to determine and distinguish user groups of the website for the purpose of targeting marketing measures. However, data collected via the “demographic characteristics” cannot be assigned to a specific person and thus also not to you personally. This data collected via the “demographic characteristics” function is kept for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the end device used by you for the use of the website, only takes place if you have given us your express consent for this in accordance with Art. 6 Para. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your use of the website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service via the “Cookie Consent Tool” provided on the website.
As an extension of Google Analytics 4, the Google Signals service can also be used on this website. With Google Signals, we can have Google create cross-device reports (so-called “cross-device tracking”). If you have activated “personalised ads” in your Google account settings and linked your internet-enabled end devices to your Google account, Google can analyse usage behaviour across devices and create database models based on this if you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 (1) lit. a GDPR. This takes into account the logins and device types of all website users who were logged into a Google account and performed a conversion. The data shows, among other things, on which device you clicked on an ad for the first time and on which device the relevant conversion took place. In the case of the use of Google Signals, we do not receive any personal data from Google, but only statistics compiled on the basis of Google Signals. You have the option of deactivating the “personalised ads” function in the settings of your Google account and thus turning off the cross-device analysis in connection with Google Signals. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de
Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de
As an extension of Google Analytics, the “UserIDs” function can also be used on this website. By assigning individual UserIDs, we can have Google create cross-device reports (so-called “cross-device tracking”). This means that your usage behaviour can also be analysed across devices if you have given your corresponding consent to the use of Google Analytics 4 in accordance with Art. 6 (1) lit. a GDPR, if you have set up a personal account by registering on this website and are logged into your personal account on different end devices with your relevant login data. The data collected in this way shows, among other things, on which end device you clicked on an ad for the first time and on which end device the relevant conversion took place.
We have concluded a so-called order processing agreement with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties.
To ensure compliance with the European level of data protection, even in the event of any transfer of data from the EU or EEA to the USA and possible further processing there, Google refers to the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.
Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites.
8.2 – Google Optimize
This website uses “Google Optimize”, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Based on “Google Analytics”, the service enables a statistical evaluation of the use of new functions and contents of the website by playing out test variants to certain user groups. In the interest of improving the attractiveness of our website, it is thus possible to determine which variants are preferred by users.
Google Optimize uses cookies, i.e. small text files that are stored on your terminal device and enable an analysis of your use of a website. The information collected by cookies about your use of the website is usually transmitted to a Google server and stored and processed there. This may also involve the transmission of information to the servers of Google LLC, a company based in the USA, where the information may be further processed.
All processing described above, in particular the setting of cookies for the storage and reading of information on the terminal device used by you for the use of the website, only takes place if you have given us your express consent for this in accordance with Art. 6 (1) lit. a GDPR. Without your consent, Google Optimize will not be used during your use of the website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service via the “Cookie Consent Tool” provided on the website.
We have concluded a so-called order processing agreement with Google for our use of Google Optimize, which obliges Google to protect the data of our website users and not to pass it on to third parties.
To ensure compliance with the European level of data protection, also in the event of any transfer of data from the EU or EEA to the USA and possible further processing there, Google refers to the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.
Further legal information on Google Optimize, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com/privacy?hl=de&gl=de.
Details of the processing triggered by Google Optimize and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
- This website uses the “Google Tag Manager”, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”). The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and for calibrating, controlling and attaching conditions to them via a uniform user interface.
The Google Tag Manager itself does not store any information on user devices or read them out. The service also does not carry out any independent data analyses.
However, the Google Tag Manager transmits your IP address to Google when you access a page and may store it there. Transmission to Google LLC. servers in the USA is also possible. in the USA is possible.
This processing is only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, Google Tag Manager will not be used during your visit to the site. - You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “Cookie Consent Tool” provided on the website. We have concluded an order processing agreement with Google, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.
- For the transfer of data from the EU to the USA, Google invokes so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
- Further data protection information on Google Tag Manager can be found here: https://support.google.com/tagmanager/answer/9323295?hl=de
- For data protection-relevant services and applications that have been merged in the Google Tag Manager, you will receive separate information in the corresponding sections of this privacy policy.
9) Page functionalities
9.1 Use of Youtube videos
This website uses the Youtube embedding function to display and play videos from the provider “Youtube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. If the playback of embedded Youtube videos is started, the provider “Youtube” uses cookies to collect information about user behaviour. According to information from “Youtube”, these are used, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive behaviour. If you are logged in to Google, your data will be directly assigned to your account when you click on a video. If you do not wish to have your data associated with your YouTube profile, you must log out before activating the button. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. The use of YouTube may also result in the transmission of personal data to the servers of Google LLC. in the USA.
Independently of a playback of the embedded videos, a connection to the Google network is established each time this website is called up, which may trigger further data processing operations without our influence.
All processing described above, in particular the reading of information on the end device used via the tracking pixel, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, Youtube videos will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please deactivate this service in the “Cookie Consent Tool” provided on the website via alternative options communicated to you on the website.
Further information on data protection at “Youtube” can be found in the Youtube terms of use at https://www.youtube.com/static?template=terms and in Google’s data protection declaration at https://www.google.de/intl/de/policies/privacy.
9.2 Trusted Shops Trustbadge
The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and to offer Trusted Shops membership to buyers after they have placed an order.
This serves to protect our legitimate interests in the optimal marketing of our offer, which outweigh our interests in the context of a balancing of interests, Art. 6 (1) lit. f GDPR. The trust badge and the services advertised with it are an offer of Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne.
When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and documents the call-up. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site.
Further personal data is only transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. In this case, the contractual agreement between you and Trusted Shops applies.
9.3 TrustedSite Badge
On our website we use badges from TrustedSite, a service of TrustedSite, LLC, 16 Maiden Lane, 4th floor, San Francisco, California, 94108, USA, which certifies certain processes and designs and provides corresponding seals.
When visiting our website, the user’s IP address is collected for the correct display of the seals and the associated functions, transmitted to TrustedSite, LLC, stored there for a maximum of 24 hours and then deleted. This processing does not serve to personally identify the respective user and is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the optimal marketing of our offer and the appealing design of our website. Further information on data protection in connection with the seals can be found at: https://www.trustedsite.com/privacy
9.4 EHI test seal widget
On our website we use the seal “EHI Geprüfter Online-Shop”, a widget of the EHI Retail Institute GmbH, Spichernstraße 55, 50672 Cologne (“EHI”). When you visit our website, dynamic content (current rating of the shop, certificate, etc.) is loaded into the widget by EHI servers. In the process, your IP address, the previously visited website, the date and time of the retrieval, the amount of data transferred, the type of browser used, the operating system you are using and the requesting provider (referrer data) are transmitted to EHI’s servers. The processing is based on our overriding legitimate interest in optimising our offer according to Art. 6 para. 1 f GDPR.
Further information on data protection at EHI can be found at: www.ehi-siegel.de/datenschutz
9.5 – SurveyMonkey
We use the “SurveyMonkey” service of Momentive Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland (“SurveyMonkey”) to conduct surveys or for online forms. SurveyMonkey enables us to design and analyse surveys and online forms. In addition to the respective personal data that you enter into the forms, information on your operating system, browser, date and time of your visit, referrer URL and your IP address is also collected, transmitted to SurveyMonkey and stored on SurveyMonkey servers. This may also involve transmission to Momentive Inc. based in the USA.
The information you enter in the forms is stored under password protection to ensure that third party access is excluded and that only we can evaluate the data for the purpose stated in the form.
When processing personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the implementation of pre-contractual measures), Art. 6 (1) lit. b GDPR serves as the legal basis. If you have given us your consent for the processing of your data, the processing is based on Art. 6 (1) a GDPR. Consent given can be revoked at any time with effect for the future.
We have concluded an order processing contract with SurveyMonkey for the use of the above-mentioned services, which obliges SurveyMonkey to protect the data of our site visitors and not to pass it on to third parties, and you can find SurveyMonkey’s data protection policy at: https://www.surveymonkey.de/mp/legal/privacy/
9.6 – Yumpu
We use the “Yumpu” service of the provider i-magazine AG (“Yumpu”), Gewerbestrasse 3, 9444 Diepoldsau, Switzerland, to display PDF files on our website. By means of Yumpu, the content of pdf files is displayed as a so-called flip catalogue, freely accessible and easy to read for everyone directly in the web browser, without the files having to be downloaded first. To run the service, your web browser retrieves the content directly from Yumpu. Yumpu receives information about your web browser and the operating system used as well as your IP address. Yumpu uses this data exclusively for the purpose of displaying the files concerned online. Insofar as personal data is collected and transmitted to Yumpu, this is done in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the user-friendly retrieval and optimal integration of PDF files on our website. In the event that data is transferred to Yumpu in Switzerland, the appropriate level of data protection is guaranteed by the adequacy decision of the European Commission. Further information can be found in the Yumpu privacy policy at https://www.yumpu.com/de/info/privacy_policy.
9.7 hCaptcha
On this website we use the service “hCaptcha” of Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA.
The service checks whether an entry is made by a natural person or improperly by machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. HCaptcha ensures, among other things by setting cookies, that an action is performed by a human being and not by an automated bot by means of the following data: IP address of the end device used, identification data of the browser and operating system type used, date and duration of the visit as well as user behaviour, e.g. mouse movements or other queries. The procedure serves exclusively to defend against spam, DDoS attacks and similar automated malicious access.
All processing described above, in particular the reading of information on the end device used, is only carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, hCaprcha will not be used during your visit to the site.
The use of hCaptcha may also result in the transfer of your data to the USA. We have concluded an order processing agreement with Intuition Machines, Inc. which obliges the company to protect the data of our site visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Intuition Machines, Inc. invokes so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
You can find more information on the use of your data by hCaptcha here: https://www.hcaptcha.com/privacy
10) Tools and miscellaneous
10.1 Cookie consent tool
This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications requiring consent. The “cookie consent tool” is displayed to users in the form of an interactive user interface when they access the page, on which consent for certain cookies and/or cookie-based applications can be given by ticking the appropriate box. Through the use of the tool, all cookies/services requiring consent are only loaded if the respective user gives the corresponding consent by ticking the corresponding box. This ensures that such cookies are only set on the respective end device of the user if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Further legal basis for the processing is Art. 6 para. 1 lit. c GDPR. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
We have concluded an order processing contract with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorised disclosure to third parties.
Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.
10.2 – Fraud0
For security purposes, this website uses the service “Fraud0” fraud0 GmbH, Sendlinger Straße 7,
80331 Munich. Fraud0 protects the website and the associated IT infrastructure from unauthorised third-party access and from robotised invalid data traffic. Fraud0 collects the IP addresses of users, browser information and, if necessary, further data on your behaviour on our website (in particular URLs called up and header information) via a Java script pixel in order to recognise illegitimate page accesses and automatically exclude them from usage statistics and other analysis results.
The described data processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interests in protecting the website, the marketing structure set up and in maintaining structural and data integrity and security.
We have concluded an order processing contract with fraud0 GmbH, with which we oblige the company to protect the data of site visitors and not to pass it on to third parties. For more information on Fraud0’s data protection, please visit https://fraud0.com/de/privacy-policy/.
10.3 – Data Dog
Our platform integrates the functions of the “Datadog” service of Datadog, Inc, 620 8th Ave, 45th Floor, New York, NY 10018 USA. The system notifies our development team of possible technical complications or functionality impairments in connection with the operation of our website. For this purpose, server information as well as usage parameters such as the IP address, the browser used, time stamps and the URL accessed may be transmitted to Datadog. Insofar as the information transmitted in this way also includes personal data, the processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPRon the basis of our legitimate interest in an efficient error cause analysis to improve the reliability and functionality of our website. Further information on the collection and use of data by Datadog, Inc. can be found at: www.datadoghq.com/legal/privacy/
11) Rights of the data subject
11.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective prerequisites for exercising these rights:
- Right to information pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to information pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent granted pursuant to Art. 7(3) GDPR;
- Right to lodge a complaint pursuant to Article 77 of the GDPR.
11.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE AT ANY TIME ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSES OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
12) Duration of the storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if relevant – additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).
When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you revoke your consent.
If there are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 Para. 1 lit. b GDPR, this data will be routinely deleted after expiry of the retention periods, insofar as it is no longer required for the fulfilment of a contract or the initiation of a contract and/or there is no further justified interest on our part in continuing to store it.
When processing personal data on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct marketing based on Art. 6 (1) lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.
Unless otherwise stated in the other information in this statement on specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.