Privacy Policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we provide information on how we handle your personal data when using our website. Personal data refers to all data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is iQ-Company AG, Am Klingenweg 12, 65396 Walluf, Germany, Tel.: +49 (6123) 9949-0, E-mail: info@iq-uv.com. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymised form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or otherwise used. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character sequence "https://" and the padlock symbol in your browser bar.

3) Hosting & Content Delivery Network

For hosting our website and displaying the page content, we use a provider that provides its services itself or through selected subcontractors exclusively on servers located within the European Union.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

4) Cookies

In order to make visits to our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for longer and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of your web browser's cookie settings.

If personal data is processed through individual cookies used by us, processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the event of consent being given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit.

You can configure your browser settings so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or in general.

Please note that refusing cookies may limit the functionality of our website.

5) Contacting us

5.1 Trusted Shops

For review reminders, we use the services of the following provider: Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne, Germany

Exclusively on the basis of your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, we transmit your e-mail address and, if applicable, further customer data to the provider so that they can contact you by e-mail with a review reminder.

You may withdraw your consent at any time with effect for the future, either towards us or towards the provider.

We are jointly responsible with the provider for the processing activities described above in accordance with Art. 26 GDPR. The agreement on joint responsibility can be viewed here: https://help.etrusted.com/hc/de/articles/4402587369105-Vertrag-%C3%BCber-die-gemeinsame-Verantwortlichkeit-nach-DSGVO

5.2 As part of contacting us (e.g. via contact form or e-mail), personal data is processed exclusively for the purpose of processing and responding to your enquiry and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your enquiry pursuant to Art. 6 para. 1 lit. f GDPR. If your contact request is aimed at concluding a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations preventing deletion.

6) Data processing when opening a customer account

In accordance with Art. 6 para. 1 lit. b GDPR, personal data shall continue to be collected and processed to the extent required if you provide us with this data when opening a customer account. The data required for opening an account can be found in the input form provided on our website.

Deletion of your customer account is possible at any time and can be requested by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted unless all contracts concluded through the account have been fully processed, statutory retention periods prevent deletion, or we have a legitimate interest in continuing to store the data.

7) Use of customer data for direct advertising

7.1 Registration for our e-mail newsletter

If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your e-mail address. Providing additional data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending newsletters, which ensures that you only receive newsletters once you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the e-mail address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In this context, we store your IP address assigned by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending an appropriate message to the controller named above. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope where permitted by law and about which we inform you in this privacy policy.

7.2 CleverReach

The dispatch of our e-mail newsletters and other promotional e-mail communications is carried out via this provider: CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany

Based on our legitimate interest in effective and user-friendly e-mail marketing, we forward the data you provide during registration to this provider in accordance with Art. 6 para. 1 lit. f GDPR so that they can handle the e-mail dispatch on our behalf.

Subject to your express consent pursuant to Art. 6 para. 1 lit. a GDPR, the provider also carries out a statistical analysis of the success of e-mail campaigns using web beacons or tracking pixels in the sent e-mails, which can measure opening rates and specific interactions with the newsletter content. Device information (e.g. time of access, IP address, browser type and operating system) is also collected and analysed, but is not combined with other data records.

You may withdraw your consent to e-mail tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.

7.3 Advertising by post
Based on our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information from you within the framework of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business designation pursuant to Art. 6 para. 1 lit. f GDPR and to use this data for sending interesting offers and information about our products by post.
You may object to the storage and use of your data for this purpose at any time by contacting us.

8) Data processing for order handling

8.1 To the extent required for the processing of the contract for delivery and payment purposes, the personal data collected by us shall be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.

If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details provided by you during the ordering process in order to personally inform you within the scope of our statutory information obligations pursuant to Art. 6 para. 1 lit. c GDPR. Your contact details are used strictly for the purpose of communicating information about updates owed by us and are processed by us only to the extent necessary for the respective information.

For processing your order, we also cooperate with the service provider(s) listed below, who support us in whole or in part in the fulfilment of concluded contracts. Certain personal data shall be transferred to these service providers in accordance with the following information.

8.2 FFN Connect

For order processing, we use the following provider: FFN Connect GmbH, Oberauer Straße 28, 01689 Niederau, Germany

Name, address and, where applicable, further personal data shall be transferred to the provider exclusively for the purpose of processing the online order in accordance with Art. 6 para. 1 lit. b GDPR. Your data shall only be transferred to the extent that this is actually necessary for processing the order.

8.3 JTL

For order processing, we use the following provider: JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven, Germany

8.4 Transfer of personal data to shipping service providers

- DHL

We use the following provider as our transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We transfer your e-mail address and/or telephone number to the provider before delivery of the goods for the purpose of coordinating a delivery date or notifying you of delivery, in accordance with Art. 6 para. 1 lit. a GDPR, provided that you have expressly given your consent to this during the ordering process. Otherwise, for the purpose of delivery, we only transfer the recipient's name and delivery address to the provider in accordance with Art. 6 para. 1 lit. b GDPR. The transfer only takes place to the extent required for delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Your consent may be withdrawn at any time with effect for the future, either towards the controller named above or towards the provider.
- GLS

We use the following provider as our transport service provider: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany

Your consent may be withdrawn at any time with effect for the future, either towards the controller named above or towards the provider.

8.5 Use of payment service providers (payment services)

- Openbank Pay

This website offers one or more online payment methods from the following provider: OPEN BANK, S.A., Plaza de Santa Bárbara 2, 28004 Madrid, Spain

If you select a payment method offered by the provider where you make an advance payment (e.g. credit card payment), your payment data provided during the ordering process (including your name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order shall be transferred to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data shall only be transferred for the purpose of processing payment with the provider and only to the extent necessary for this purpose.

If you select a payment method where the provider makes an advance payment (e.g. purchase on invoice, instalment payment or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, town/city, date of birth, e-mail address, telephone number and, if applicable, information regarding an alternative payment method).

In order to safeguard our legitimate interest in determining the payment capacity of our customers, this data shall be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR. The provider checks, based on the personal data provided by you as well as additional data (such as shopping basket, invoice amount, order history and payment experience), whether the selected payment method can be granted with regard to risks of payment default and/or non-payment.

For decisions within the scope of the application review, identity and creditworthiness information from the following credit agencies may also be included in addition to internal provider criteria pursuant to Art. 6 para. 1 lit. f GDPR:

CRIF GmbH, Leopoldstraße 244, 80807 Munich, Germany
SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Germany

The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of score values includes, among other things, but not exclusively, address data.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may continue to be entitled to process your personal data if this is necessary for the contractual processing of payments.
- Paypal

This website offers one or more online payment methods from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method offered by the provider where you make an advance payment, your payment data provided during the ordering process (including your name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order shall be transferred to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data shall only be transferred for the purpose of processing payment with the provider and only to the extent necessary for this purpose.

If you select a payment method where we make an advance payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, town/city, date of birth, e-mail address, telephone number and, if applicable, information regarding an alternative payment method).

In order to safeguard our legitimate interest in determining your payment capacity in such cases, this data shall be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR. The provider checks, based on the personal data provided by you as well as additional data (such as shopping basket, invoice amount, order history and payment experience), whether the selected payment method can be granted with regard to risks of payment default and/or non-payment.

This website offers one or more online payment methods from the following provider: Open Bank, S.A., Plaza de Santa Bárbara 1 y 2, 28004 Madrid, Spain

If you select a payment method where the provider makes an advance payment (e.g. "Buy now, pay later"), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, town/city, date of birth, e-mail address, telephone number and, if applicable, information regarding an alternative payment method).

- CRIF GmbH, Leopoldstraße 244, 80807 Munich, Germany
- SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Germany

9) Web analytics services

9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables us to analyse your use of our website.

By default, Google Analytics 4 does not use cookies when you visit the website unless you expressly consent to the use of cookies. Instead, information about your usage behaviour is collected and processed using so-called pings (small data packets sent to the host of an end device). This information also includes your IP address, although Google shortens the last digits of the IP address in order to prevent direct identification of individuals.

The information is transmitted to Google servers and further processed there. This may also involve transfers to Google LLC, based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activities for us and provide other services related to website usage and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, including the transmission of data through "pings" and the possible setting of Google Analytics cookies, only takes place if you have given us your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further legal information regarding Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special "demographic characteristics" function and can create statistics that provide information about the age, gender and interests of website visitors. This is done through the analysis of advertising and information from third-party providers. This enables the identification of target groups for marketing activities. However, the collected data cannot be attributed to any specific individual and is deleted after being stored for a period of two months.

Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to create cross-device reports. If you have enabled personalised advertising and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6 para. 1 lit. a GDPR, analyse your usage behaviour across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, but only statistical information. If you wish to stop cross-device analysis, you can disable the "Personalised advertising" function in your Google account settings. Please follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information about Google Signals can be found here: https://support.google.com/analytics/answer/7532985?hl=de

User IDs
As an extension of Google Analytics 4, the "User IDs" function may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6 para. 1 lit. a GDPR, created an account on this website and log in to this account on different devices, your activities, including conversions, may be analysed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

9.2 Google Tag Manager

This website uses "Google Tag Manager", a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").

Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and managing, controlling and linking them to conditions via a unified user interface. Google Tag Manager itself does not store information on user devices or read such information. The service also does not perform independent data analyses. However, when a page is accessed, Google Tag Manager transfers your IP address to Google and this may be stored there. A transfer to servers of Google LLC in the USA is also possible.

This processing only takes place if you have given us your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. Without this consent, Google Tag Manager will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further legal information regarding Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de

9.3 Shopware Analytics

This website uses the web analytics service of the following provider: shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany

Based on joint responsibility between us and the service provider within the meaning of Art. 26 GDPR, the service collects and stores pseudonymised visitor data using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information). This data includes information about the device used, such as browser information, and is evaluated for statistical analyses of user behaviour on our website and for creating pseudonymised usage profiles. This also enables the analysis of movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). The pseudonymisation generally prevents direct identification of individuals. A combination with clear personal data collected in another way does not take place.

All processing described above, in particular the reading or storage of information on the device used, only takes place if you have given us your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

10) Retargeting/ Remarketing and Conversion Tracking

Google Ads Remarketing

This website uses retargeting technology provided by the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google places a cookie in the browser of your device, which enables interest-based advertising based on a pseudonymous cookie ID and the pages you have visited. Further data processing only takes place if you have given Google your consent that your internet and app browsing history may be linked to your Google account and that information from your Google account may be used to personalise advertisements that you view online. If you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define target groups for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to create target groups. When using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC in the USA.

All processing described above, in particular the setting of cookies for reading information from the device used, only takes place if you have given us your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. Without this consent, retargeting technology will not be used during your visit to our website.

You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the website.

Details regarding the processing initiated by Google and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11) Website functionalities

11.1 Trusted Shops Trustbadge

Our website integrates graphic elements provided by the following provider for displaying external customer reviews and/or an externally awarded trust mark: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany

When you access a page of our website containing such graphic elements, your browser establishes a direct connection to the provider's servers in order to load the elements correctly. Certain browser information, including your IP address, is transmitted to the provider.

If personal data is processed in this context, this processing takes place pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the optimal marketing of our offer and the attractive design of our website.

Further processing may take place in the event of an online order with us.

Depending on your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, after completion of an order, your order information (order value, order number and, where applicable, purchased product) as well as your email address will be transmitted in encrypted form via the Trustbadge to the provider in order to check whether you are already registered for the provider's services (in particular the "Buyer Protection") and, if necessary, to enable a new registration.

If an existing registration is identified or if you register for the provider's services (in particular the Buyer Protection), your order information (order value, order number, purchased product) and your email address will be transmitted to the provider and further processed on the basis of the contractual agreement with the provider pursuant to Art. 6 para. 1 lit. b GDPR in order to provide the services (in particular Buyer Protection).

We are jointly responsible with the provider for the processing described above pursuant to Art. 26 GDPR. The agreement on joint responsibility can be viewed here: https://help.etrusted.com/hc/de/articles/23970817960082

11.2 Google Web Fonts

This website uses so-called web fonts provided by the following provider for the consistent display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When a page is accessed, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly and establishes a direct connection to the provider's servers. Certain browser information, including your IP address, is transmitted to the provider.

Data may also be transferred to: Google LLC, USA

The processing of personal data in connection with establishing a connection to the font provider only takes place if you have given us your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

Further information regarding Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

11.3 Google Customer Reviews (formerly Google Certified Shops Programme)

We cooperate with Google as part of the "Google Customer Reviews" programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This programme gives us the opportunity to collect customer reviews from users of our website. After using our services, you will be asked on our website whether you would like to participate in an email survey from Google.

If you give your consent pursuant to Art. 6 para. 1 lit. a GDPR, we will transfer your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchase experience on our website. The rating you provide will then be combined with our other reviews and displayed in our Google Customer Reviews logo and our Merchant Center dashboard. Your review will also be used for Google seller ratings. When using Google Customer Reviews, personal data may also be transferred to the servers of Google LLC in the USA.

You can revoke your consent at any time by sending a message to the controller responsible for data processing or directly to Google.

Further information regarding Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

12) Tools and other services

12.1 DATEV

For carrying out accounting tasks, we use the cloud-based accounting software service provided by the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany

The provider processes incoming and outgoing invoices as well as, where applicable, our company's bank transactions in order to automatically record invoices, match them with transactions and create financial accounting records in a partially automated process.

If personal data is processed in this context, the processing is carried out on the basis of our legitimate interest in the efficient organisation and documentation of our business processes pursuant to Art. 6 para. 1 lit. f GDPR.

12.2 weclapp

For carrying out accounting tasks, we use the cloud-based accounting software service provided by the following provider: weclapp GmbH, Friedrich-Ebert-Straße 28, 97318 Kitzingen, Germany

12.3 Cookie Consent Tool

This website uses a so-called "Cookie Consent Tool" to obtain valid user consent for cookies requiring consent and cookie-based applications. The "Cookie Consent Tool" is displayed to users when they access the website in the form of an interactive user interface, through which consent for specific cookies and/or cookie-based applications can be granted by selecting checkboxes. By using the tool, all cookies/services requiring consent are only loaded if the respective user has provided the relevant consent by selecting the checkbox. This ensures that such cookies are only placed on the user's device if consent has been granted.

The tool uses technically necessary cookies in order to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this processing is carried out pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and therefore in ensuring that our website complies with legal requirements.

A further legal basis for processing is Art. 6 para. 1 lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.

Where required, we have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further information about the operator and the settings options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

13) Rights of the data subject

13.1 The applicable data protection law grants you the following rights as a data subject in relation to the processing of your personal data by the controller (rights of access and intervention). The relevant legal basis for exercising these rights is listed below:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING MAY STILL TAKE PLACE IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Duration of storage of personal data

The duration for which personal data is stored depends on the respective legal basis, the purpose of processing and – where applicable – additionally on the relevant statutory retention periods (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the affected data will be stored until you withdraw your consent.

If statutory retention periods apply to data processed within the scope of contractual or contract-like obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for contract fulfilment or contract initiation and/or we no longer have a legitimate interest in continuing to store it.

When personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

When personal data is processed for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21 para. 2 GDPR.

Unless otherwise stated in the other information contained in this privacy policy regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.