Skip to main content Skip to main navigation

Privacy Policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for entering into a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no different information is provided for the processing operations described below.
"Personal data" means any information relating to an identified or identifiable natural person.


Server log files
You can visit our website without providing any personal information. 
Each time you access our website, your internet browser transmits usage data to us or our web hosting provider / IT service provider, which is stored in log data (known as server log files). The stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the volume of data transferred and the requesting provider.
Processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in ensuring the smooth operation of our website and improving our services. 

 
Contact

Controller/Data Protection Officer
You may contact us if you wish. The controller responsible for data processing is: Hermann Kloiber, Heidemann Straße 31-41, 80939 München Germany, 0893603810, [email protected]

You can contact our Data Protection Officer directly at: [email protected]

Customer-initiated contact by email
If you contact us by email on your own initiative in connection with business matters, we collect your personal data (name, email address, message text) only to the extent that you provide it. The data is processed to handle and respond to your enquiry.
If you contact us for the purpose of taking steps prior to entering into a contract (e.g. advice regarding a potential purchase or preparation of a quotation), or in connection with a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR.
If you contact us for other reasons, this data processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Article 6(1)(f) GDPR.
We use your email address only to handle your enquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.


Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent that you provide it. The data is processed for the purpose of contacting you.

If you contact us for the purpose of taking steps prior to entering into a contract (e.g. advice regarding a potential purchase or preparation of a quotation), or in connection with a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR.
If you contact us for other reasons, this data processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Article 6(1)(f) GDPR.
We use your email address only to handle your enquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the withdrawal button 
If you have concluded a contract through our website, we provide a withdrawal function (withdrawal button) that allows you to submit your declaration of withdrawal directly. 
When you use the withdrawal function, we collect your personal data (name, email address, information identifying the contract or part of the contract from which you wish to withdraw, and the time (date and time) at which the declaration of withdrawal is submitted) only to the extent that you provide it. The data is processed to provide you with the legally required option of withdrawing from your contract and to process your withdrawal properly. 
If the contact relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR. Otherwise, the data processing is based on Article 6(1)(c) GDPR, in order to fulfil our legal obligation to provide you with a withdrawal function on our website. 
We use your email address only to process your declaration of withdrawal. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use. 
 
Your personal data is processed to ensure compliance with the legal requirements governing the design of the withdrawal function, on the basis of Article 6(1)(c) GDPR. This data processing is also based on Article 6(1)(f) GDPR and our overriding legitimate interest in providing you with a user-friendly withdrawal option. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Article 6(1)(f) GDPR.
 
Use of Endereco address validation
We use the address validation service provided by Endereco UG (haftungsbeschränkt) (Balthasar-Neumann-Str. 4b, 97236 Randersacker, Germany; “Endereco”) on our website.
The data is processed to check your entries in our address forms for input errors and spelling mistakes in real time and, where applicable, to add missing data. If data has been entered incorrectly, alternative suggestions are displayed to correct it.
The following information, among other things, may be transmitted to Endereco and processed there: postal addresses (country, town/city, postcode, street, house number), email address and telephone number.
Your personal data is processed on the basis of Article 6(1)(f) GDPR and our overriding legitimate interest in having accurate data to fulfil our contractual obligations. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
The provider processes the data separately and does not combine it with other data. The provider deletes it as soon as the status of the entered data has been determined, but no later than after 30 days.
Further information on data protection at Endereco can be found at: https://www.endereco.de/datenschutzerklaerung/.


Customer account      Orders      

Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data is processed to improve your shopping experience and simplify order processing. Processing is based on Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your customer account will then be deleted.


Collection, processing and disclosure of personal data when placing orders
When you place an order, we collect and process your personal data only insofar as necessary to fulfil and process your order and handle your enquiries. Providing the data is necessary to conclude the contract. If you do not provide it, no contract can be concluded. Processing is based on Article 6(1)(b) GDPR and is necessary for the performance of a contract with you. 
In this context, your data is disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, order processing service providers and IT service providers. In all cases, we strictly observe the statutory requirements. The scope of data transferred is kept to a minimum.
 
Advertising      


Use of your email address to send newsletters
We use your email address to send you information and offers by newsletter if you have expressly consented to this. The data is processed exclusively for marketing purposes. For this purpose, we process your email address and, where applicable, any other data you voluntarily provided when subscribing to our newsletter.
Processing is based on Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Even after removal from the mailing list, we may continue to store your email address on a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Article 6(1)(f) GDPR and our and your legitimate interest in preventing your email address from being used again to send our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.


Use of rapidmail
We use the service provided by rapidmail GmbH (Wentzingerstraße 21
79106 Freiburg im Breisgau; “rapidmail”) to send newsletters, with rapidmail acting as a processor on our behalf.
We pass the information you provide when subscribing to the newsletter (email address and, where applicable, first and last name) to rapidmail. The data is processed for sending newsletters and statistically evaluating them.
To evaluate newsletter campaigns, the newsletters sent contain a 1x1-pixel image (tracking pixel) or a tracking link. This enables us to determine whether you have opened the newsletter and whether you have clicked any embedded links. In this context, we collect personal data such as your IP address, browser type and device, and the time. This data may be used to create usage profiles under a pseudonym. The data collected is not used to identify you personally. It is used solely for statistical evaluation to improve newsletter campaigns.
Your personal data is processed on the basis of Article 6(1)(f) GDPR and our overriding legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
Further information and rapidmail's privacy policy can be found at: https://www.rapidmail.de/datenschutz and https://www.rapidmail.de/hilfe/kategorie/statistiken.


Use of your email address for availability notifications
We offer a product availability notification service on our website. If an item is temporarily unavailable, you can enter your email address for the relevant item and, provided you have consented, we will notify you by email when it becomes available. You will receive a single email notification when the respective item is available. Processing is based on Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from availability notifications at any time by notifying us. Your email address will then be removed from the mailing list.

 
Shipping service providers       Inventory management      

Disclosure of your email address to shipping companies for shipping status information
As part of contract performance, we pass your email address to the transport company if you have expressly consented to this during the ordering process. This disclosure enables the transport company to inform you of the shipping status by email. Processing is based on Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of processing based on consent before its withdrawal.


Use of an external inventory management system
We use an inventory management system to perform the contract, with the service provider acting as a processor on our behalf. For this purpose, your personal data collected when you place an order is transmitted to

Intex EDV-Software GmbH, Taubfeld 8, 66121 Saarbrücken 
for processing.

Your personal data is processed for the purpose of performing the contract concluded with you, on the basis of Article 6(1)(b) GDPR.


Payment service providers      

Use of the payment service provider Mollie
We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE Amsterdam, Netherlands; “Mollie”) to process payments on our website. The data is processed to enable us to offer you various payment methods through payment processing by Mollie. If you choose one of the payment options offered by Mollie, the data required to process the payment will be transmitted to Mollie. This includes your payment details (for example, bank account number or credit card number), your IP address, your internet browser and device type and, in some cases, your first and last name, address details and information about the product or service you purchased from us. This data processing is based on Article 6(1)(b) GDPR. Further information on data processing when using the payment service provider Mollie can be found in the relevant privacy policy https://www.mollie.com/de/legal/privacy
 

Cookies

Our website uses cookies. Cookies are small text files stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a distinctive string of characters that enables the browser to be uniquely identified when the website is accessed again.
 
Cookies are stored on your computer. You therefore have full control over their use. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set, decide individually whether to accept them, and prevent cookies from being stored and the data they contain from being transmitted. Cookies already stored can be deleted at any time. Please note, however, that you may then be unable to use all the functions of this website to their full extent.
 
The links below provide information on how to manage (including disable) cookies in the main browsers:
 
Technically necessary cookies
Unless otherwise stated below in this privacy policy, we use only these technically necessary cookies to make our services more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser after you move to a different page and to offer you services. Some functions of our website cannot be provided without cookies. These functions require the browser to be recognised after you move to a different page.
 
Cookies or comparable technologies are used on the basis of section 25(2) TDDDG. Your personal data is processed on the basis of Article 6(1)(f) GDPR and our overriding legitimate interest in ensuring the optimal functionality of the website and making our services user-friendly and effective.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
 
Use of the CCM19 Cookie Consent Manager
We use the CCM19 Cookie Consent Manager provided by Papoo Software & Media GmbH (Auguststr. 4, 53229 Bonn; “CCM19”) on our website.
The plug-in enables you to consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given. The data is processed to obtain and document the necessary consent to data processing and thereby comply with legal obligations.
Cookies are used for this purpose. The following information, among other things, may be collected, stored and, where applicable, transmitted to CCM19: a randomly assigned ID, consent status, and the date and time of acceptance/refusal. The data is stored for 1 year and one month and then deleted. This data is not disclosed to any other third parties.
The data is processed to fulfil a legal obligation on the basis of Article 6(1)(c) GDPR.
Further information on data protection at CCM19 can be found at: https://www.ccm19.de/datenschutzerklaerung.html.



Analytics      Advertising tracking      Affiliate marketing      


Use of Google Analytics 4
We use the Google Analytics web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data is processed to analyse this website and its visitors and for marketing and advertising purposes. On behalf of the operator of this website, Google uses the information collected to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website and internet use. 
The following information, among other things, may be collected: IP address, date and time of page access, click path, information about your browser and device, pages visited, referrer URL (the website from which you accessed our website), location data and purchasing activity. Google may link your data with other data, such as your search history, personal accounts, usage data from other devices and any other data Google holds about you.

Google first truncates your IP address within Member States of the European Union or other states party to the Agreement on the European Economic Area.

Google uses technologies such as cookies, browser web storage and tracking pixels to analyse your use of the website. Cookies or comparable technologies are used with your consent on the basis of section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. 

Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

In this context, we also use the Google Signals service. Google Signals enables cross-device tracking. Your data can therefore be analysed across devices if you have enabled “personalised advertising” in your account settings and your devices are linked to your Google account. This makes it possible to identify the device on which you search for products and subsequently return to complete purchases on another device, such as a tablet.
 
The cross-device reports created in this context contain only aggregated data. We therefore receive only statistics generated using Google Signals. To prevent Google Signals from collecting and storing data across devices, you can disable “personalised ads” in your Google account settings. Further information can be found at https://support.google.com/ads/answer/2662922?hl=de. 
Further information on data processing and data protection in connection with Google Signals can be found at https://support.google.com/analytics/answer/7532985?hl=de. 
 
We use the advanced implementation of consent mode (Advanced Consent Mode). Even if consent has not been given, user data is transmitted to Google in the form of “pings”. These pings may contain information including: the IP address to derive the country associated with it (the IP address is not logged), the date and time of page access, URLs of the pages visited, user agent, referrer URL (the website from which our website was accessed) or information about website events being triggered, such as a conversion. Google uses this information to model usage data so that comprehensive usage analysis can be performed even where consent has been refused.

The information generated in this way about your use of this website is generally transmitted to a Google server in the USA and stored there. The European Commission has adopted an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under the TADPF and has thereby committed to complying with European data protection principles. Both Google and US government authorities have access to your data.

Further information on the terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.

Use of shopware Analytics
We use the “shopware Analytics” analytics tool provided by shopware AG (Ebbinghoff 10, 48624 Schöppingen; “shopware”) on our website.
Shopware and we are joint controllers for the collection of your data and its transmission to shopware when the service is used. This is based on an agreement between us and shopware on the joint processing of personal data, which defines the respective responsibilities. Under this agreement, shopware is responsible for all obligations except obtaining your consent to the use of cookies or comparable technologies and fulfilling these information obligations. This applies in particular to ensuring data subject rights under Articles 15–21 GDPR. You may also exercise your data subject rights against us; we will then forward your request to shopware accordingly.
The data is processed to analyse this website and its visitors. For this purpose, data is stored for marketing and optimisation purposes and made available in reports, analyses and statistics. The following information, among other things, may be collected and processed: customer group, pages visited, click paths, date and time of the visit, information about the device used (resolution, pixel density, operating system), referrer URL, information about the browser used, locale, search queries and time zone.
Cookies or comparable technologies are used for this purpose.
Cookies or comparable technologies are used with your consent on the basis of section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on shopware Analytics can be found at https://docs.shopware.com/de/shopware-6-de/erweiterungen/shopware-analytics.



Use of the Meta Pixel
We use the Meta Pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “Meta”) on our website.
Meta and we are joint controllers for the collection of your data and its transmission to Meta when the service is integrated. This is based on an agreement between us and Meta on the joint processing of personal data, which defines the respective responsibilities. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools Under this agreement, we are responsible in particular for fulfilling the information obligations under Articles 13 and 14 GDPR, complying with the security requirements of Article 32 GDPR with regard to the correct technical implementation and configuration of the service, and complying with the obligations under Articles 33 and 34 GDPR insofar as a personal data breach concerns our obligations under the joint processing agreement. Meta is responsible for enabling data subject rights under Articles 15–20 GDPR, complying with the security requirements of Article 32 GDPR with regard to the security of the service, and complying with the obligations under Articles 33 and 34 GDPR insofar as a personal data breach concerns Meta's obligations under the joint processing agreement.
The application is used to target website visitors with interest-based advertising on the social networks Facebook and Instagram. For this purpose, Meta's remarketing tag has been implemented on the website. When you visit the website, this tag establishes a direct connection to Meta's servers. This informs the Meta server which of our pages you have visited. Meta associates this information with your personal Facebook and/or Instagram user account. When you visit Facebook or Instagram, you will then be shown personalised, interest-based ads.
The application is also used to compile conversion statistics. This tells us the total number of users who clicked one of our ads and were redirected to a page containing a conversion tracking tag, as well as the actions taken after being redirected to that website. However, we do not receive any information that could personally identify users.
Your data may be transferred to the USA. The European Commission has adopted an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified under the TADPF and has thereby committed to complying with European data protection principles.
Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You can disable the “Custom Audiences” remarketing function here. Further information on the collection and use of data by Meta, your related rights and options for protecting your privacy can be found in Meta's privacy policy at https://www.facebook.com/about/privacy/.

Use of Google Ads conversion tracking
We use the “Google Ads” online advertising programme and, within this programme, conversion tracking (analysis of visitor actions) on our website. Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click an ad placed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity period, do not contain personal data and therefore do not identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked the ad and were redirected to that page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Ads customers.
The information obtained using the conversion cookie is used to compile conversion statistics. This tells us the total number of users who clicked one of our ads and were redirected to a page containing a conversion tracking tag. However, we do not receive any information that could personally identify users. 
We use the advanced implementation of consent mode (Advanced Consent Mode). Even if consent has not been given, user data is transmitted to Google in the form of “pings”. These pings may contain information including: the IP address to derive the country associated with it (the IP address is not logged), the date and time of page access, URLs of the pages visited, user agent, referrer URL (the website from which our website was accessed) or information about website events being triggered, such as a conversion. Google uses this information to model usage data so that comprehensive usage analysis can be performed even where consent has been refused. 
Your data may be transmitted to Google LLC servers in the USA. The European Commission has adopted an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under the TADPF and has thereby committed to complying with European data protection principles.
Cookies or comparable technologies are used with your consent on the basis of section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/

 
Use of the ADCELL affiliate programme
We use the “ADCELL” affiliate programme provided by Firstlead GmbH (Rosenfelder Str. 15-16, 10315 Berlin; “ADCELL”).
ADCELL and we are joint controllers for the collection of your data and its transmission to ADCELL when the service is integrated. This is based on an agreement between us and ADCELL on the joint processing of personal data. The agreement is available at https://www.adcell.de/datenverarbeitung Under this agreement, we and ADCELL are equally responsible for fulfilling the obligations under the GDPR, in particular the information obligations under Articles 13 and 14 GDPR and ensuring data subject rights under Articles 15–21 GDPR.
When you click an ad containing an affiliate link, ADCELL stores a conversion tracking cookie on your computer. The cookies are used to ensure correct accounting within the affiliate programme by recording the success of an advertising medium. The cookies recognise that you clicked the ad and make it possible to trace the source of the order placed with the advertiser. ADCELL also uses so-called tracking pixels. These enable information such as visitor traffic on the pages to be analysed.
The information generated by cookies and tracking pixels about the use of this website (including the IP address) and the delivery of advertising formats is transmitted to an ADCELL server and stored there. Among other things, ADCELL can recognise that the affiliate link on this website was clicked. Under certain circumstances, ADCELL may pass this (anonymised) information to contractual partners; however, data such as the IP address is not combined with other stored data.
Cookies or comparable technologies are used with your consent on the basis of section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.



Plug-ins and other services

Use of Google Tag Manager
We use Google Tag Manager provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. 
This application manages JavaScript and HTML tags used in particular to implement tracking and analytics tools. The data is processed to tailor our website to users' needs and optimise it.
Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables other tags to be triggered that may collect and process personal data.
Further information on the terms of use and data protection can be found here.

 
Use of Google Maps
We use the function for embedding Google Maps provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
This function enables the visual display of geographical information and interactive maps. When pages containing embedded Google Maps are accessed, Google also collects, processes and uses data about website visitors.
Your data may also be transferred to the USA in this context. The European Commission has adopted an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google 
has certified under the TADPF and has thereby committed to complying with European data protection principles.
Cookies or comparable technologies are used with your consent on the basis of section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on Google's collection and use of data can be found in Google's privacy policy at https://www.google.com/privacypolicy.html. In the Privacy Centre, you can also change your settings to manage and protect the data processed by Google.


Use of Google Fonts
We use Google Fonts provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data is processed to ensure the consistent display of fonts on our website. When a page is accessed, a connection to Google's servers is established to load the fonts. Cookies may be used in this process. Among other things, your IP address and information about the browser you use are processed and transmitted to Google. This data is not linked to your Google account.

Your data may be transferred to the USA. The European Commission has adopted an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under the TADPF and has thereby committed to complying with European data protection principles.
Cookies or comparable technologies are used with your consent on the basis of section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.

Data subject rights and retention periods

Retention period
Once the contract has been fully performed, the data is initially stored for the duration of the statutory warranty period and subsequently in accordance with statutory retention periods, particularly those under tax and commercial law. It is then deleted after those periods expire, unless you have consented to further processing and use.


Rights of the data subject
Where the statutory requirements are met, you have the following rights under Articles 15–20 GDPR: the right of access, rectification, erasure, restriction of processing and data portability.
You also have the right under Article 21(1) GDPR to object to processing based on Article 6(1)(f) GDPR, as well as to processing for direct marketing purposes.


Right to lodge a complaint with the supervisory authority
Under Article 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you consider that your personal data is not being processed lawfully.


You may lodge a complaint, among others, with the supervisory authority responsible for us, which you can contact using the following details:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
Email: [email protected]


Right to object
Where the processing of personal data described here is based on our legitimate interest under Article 6(1)(f) GDPR, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.
Following your objection, processing of the data concerned will cease unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.


Last updated: October 2026