Data Protection

Information on the collection of personal data and contact details of the controller
Data collection when visiting our website
Cookies
Data processing for order processing
Data processing when opening a customer account and for contract processing
Contact us
Use of your data for direct marketing
Use of social media: social plugins
Web analysis services
Use of a live chat system
Tools and miscellaneous
Rights of the data subject
Duration of storage of personal data

1. Information on the collection of personal data and contact details of the controller

1.1. Thank you for visiting our website. In the following, we would like to inform you about how we handle your personal data when you use our website. Personal data is basically all data with which you can be personally identified.

1.2. The controller for the processing of data on our website within the meaning of the General Data Protection Regulation (GDPR) is:

whoislouis.com OHG
Rheinstr. 40-42
64283 Darmstadt
Deutschland
Tel.:+49 176 - 987 397 40
E-Mail: info@whoislouis.com

1.3. To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL or TSL) via HTTPS.

2. Data collection when visiting our website

Each time you visit our website, our system automatically collects data and information that your browser transmits to our server (so-called "server log files"). The following data, which is technically necessary for us, is collected:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you reached the page
Operating system used
Browser used
IP address used (if applicable: in anonymised form

The legal basis for the processing is Art. 6 para. 1 lit. f GDPR due to our legitimate interest in improving the stability and maintaining the functionality of our website. The data will not be passed on or used in any other way. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

We reserve the right to subsequently check the server log files if there are concrete indications of unlawful use. The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the accessing client. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

3. Cookies

Our website uses cookies.

Cookies are text files that are stored on the user's end device. When a user accesses a website, a cookie may be stored on the user's operating system. Some functions of our website cannot be offered without the use of cookies. This requires the browser to be recognised even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. Our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f) GDPR also lies in the above-mentioned purposes.

In addition, our website uses cookies that enable an analysis of the user's surfing behaviour (so-called third-party cookies). Further information on the scope, purpose, legal basis and objection options can be found in the relevant sections of the respective chapter of this privacy policy.

As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate, restrict or delete the transmission of cookies. If you deactivate cookies for our website, you may no longer be able to use all the functions of the website to their full extent. You can prevent the transmission of Flash cookies by changing the Flash Player settings.

You can find help on the settings in the respective help menu of your browser under the following links:

Some of the cookies used here are deleted again after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

The checkout solution used here from Klarna (Klarna Bank AB (publ.), Sveavägen 46, 111 34 Stockholm, Sweden) uses cookies to enable a smooth process when using the Klarna checkout.

You can find more information on the individual cookies and an explanation of their respective purpose for Germany and here for Austria.

4. Data processing for order processing

4.1. If you wish to place an order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we require for the processing of your order. We process the data you provide to process your order.

In some cases, we work together with external service providers to process your order. For this purpose, we must pass on the personal data required for this.

If we commission transport companies to deliver your goods, we will pass on your data required for the delivery of the goods to the respective transport company. For the processing of payments, we pass on your data to the commissioned credit institution as required. If we use payment service providers, you will also be informed of this below.

The legal basis for the transfer of your data is Art. 6 para. 1 lit. b GDPR.

4.2. Transfer of your personal data to shipping service providers

- DHL

If the goods are delivered to you by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery and within the scope of necessity in accordance with Art. 6 Para. 1 lit. b GDPR. Only if you have given your express consent during the ordering process will we pass on your e-mail address to DHL in accordance with Art. 6 para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification. Your consent can be revoked at any time with effect for the future vis-à-vis the controller named above or vis-à-vis the transport service provider DHL.

4.3. Use of payment service providers

- When paying by "credit card via Unzer", payment is processed by the payment service provider Unzer GmbH, Vangerowstraße 18, 69115 Heidelberg (hereinafter referred to as "Unzer").

We pass on your data to Unzer in accordance with Art. 6 para. 1 lit. b GDPR exclusively for the purpose of payment processing and only to the extent necessary. Unzer will pass on your data to HUELLEMANN & STRAUSS ONLINESERVICES S.A., 1, Place du Marché, 6755 Grevenmacher, Luxembourg, for the purpose of processing the payment and only to the extent necessary in accordance with Art. 6 para. 1 lit. b GDPR.

In the case of payment on account "purchase on account via Unzer" or by "direct debit via Unzer", payment is also processed via Unzer. In order to safeguard our legitimate interest in determining the solvency of our customers, we pass on your data to Unzer for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR.

On the basis of the personal data provided by you and other data (such as shopping basket, invoice amount, order history, payment experience), Unzer checks whether the payment option you have selected can be granted with regard to payment and/or bad debt risks.

If necessary, identity or creditworthiness information from the following credit agencies may also be included for the decision in accordance with Art. 6 para. 1 lit. f GDPR:

- SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden
- CRIF Bürgel GmbH, Gasstraße 18, 22761 Hamburg
- Arvato Infoscore GmbH, Rheinstraße 99, 76532 Baden-Baden
- Deltavista GmbH, Kaiserstraße 217, 76133 Karlsruhe
- UNIVERSUM Business GmbH, Hugo-Junkers-Straße 3, 60386 Frankfurt am Main
- Bisnode International Group, Robert-Bosch-Straße 11, 64293 Darmstadt
- Regis24 GmbH, Wallstraße 58, 10179 Berlin
- Creditreform AG, Hellersbergstraße 12, 41460 Neuss

The credit report may contain probability values (so-called score values), the calculation of which includes, but is not limited to, address data. You can object to this processing of your data at any time by sending a message to the controller responsible for processing your data or to Unzerwidersprechen.

However, Unzer may still be authorised to process your personal data if this is necessary to process payments in accordance with the contract.

- iDEAL

When paying via "iDEAL", payment is processed via the payment service provider Currence iDEAL BV, Postbus 83073, 1080 AB Amsterdam, Netherlands (hereinafter referred to as "iDEAL").

We pass on the information you provide during the ordering process together with the information about your order to iDEAL in accordance with Art. 6 para. 1 lit. b GDPR exclusively for the purpose of payment processing and only to the extent necessary.

Details of iDEAL's privacy policy can be found here: https://www.ideal.nl/en/disclaimer-privacy-statement/

- Klarna

When paying via the following payment methods (if offered): - "Klarna invoice purchase" - "Klarna instalment purchase" - "Klarna direct debit" (a Klarna instant payment method) - "Klarna credit card payment" (a Klarna instant payment method), payment is processed via Klarna AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as "Klarna"). We pass on your personal data (first and last name, street, house number, postcode, city, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article, delivery method) to Klarna for the purpose of identity and credit checks if you have expressly consented to the transfer in accordance with Art. 6 para. 1 lit. a GDPR. Klarna may forward your data to one of the following credit agencies: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. You can revoke your consent at any time by sending a message to the controller responsible for processing your data or to Klarna. However, Klarna may continue to process your personal data if this is necessary for contractual payment processing. For data subjects based in Germany, the following data protection provisions of Klarna apply: https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf For data subjects based in Austria, the following data protection provisions of Klarna apply: https://cdn.klarna.com/1.0/shared/content/policy/data/de_at/data_protection.pdf

- Paypal

When selecting the payment method PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, payment is processed via PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").

We pass on your personal data to PayPal in accordance with Art. 6 para. 1 lit. b GDPR to the extent necessary. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal.

For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR due to PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method.

Which other data is collected by PayPal can be found in PayPal's privacy policy. This can be found at: https://www.paypal.com/uk/legalhub/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

- SOFORT

If the payment method "SOFORT" is selected, payment is processed via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter referred to as "SOFORT").

We pass on your personal data together with the information about your order to SOFORT in accordance with Art. 6 para. 1 lit. b GDPR exclusively for the purpose of payment processing and only to the extent necessary.

Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden).

SOFORT's data protection regulations can be viewed here: https://www.klarna.com/sofort/datenschutz

5. Data processing when opening a customer account and for contract processing

If you open a customer account with us, personal data will be collected and processed in accordance with Art. 6 para. 1 lit. b GDPR. The scope of the data can be seen from the input form. The data you enter will be stored and used by us to process the contract. You can delete your customer account at any time. This can be done by sending a message to the address of the person responsible or, if offered, directly in the customer account. In this case, we will also block your data with regard to retention periods under tax and commercial law and delete it after these periods have expired. This can only be opposed by your consent to permanent storage or a legally permitted further use of data on our part.

6. Contact us

If you contact us via the contact form, the data entered in the input mask will be transmitted to us and stored. The data collected can be found in the respective input mask. If you contact us by e-mail, only the data you enter there will be transmitted to us.

The data will be used exclusively for processing the conversation and your request. The legal basis for the processing of the data is Art. 6 para. 1 lit. a) GDPR if the user has given consent. The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 (1) (f) GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and provided there are no statutory retention obligations to the contrary. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The user has the option to withdraw their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

7. Use of your data for direct marketing

7.1. Newsletter

You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input mask is transmitted to us. The only mandatory information is your email address. If you make further voluntary entries, these will only be used to address you personally.

The legal basis for the processing of your data after registration for the newsletter is Art. 6 para. 1 lit. a GDPR if the user has given consent. We obtain this consent by sending you a confirmation email containing a confirmation link after you have registered for the newsletter. If you click on this link, you also give your consent to receive the newsletter.

When you register for the newsletter, we store your IP address as well as the date and time of registration. The purpose of this storage is to be able to trace any possible misuse of your e-mail address.

We use the data collected by us when you register for the newsletter exclusively for the purpose of sending the newsletter.

You can cancel your subscription to the newsletter at any time. There is a corresponding link in every newsletter for this purpose. This also enables you to withdraw your consent to the storage of the personal data collected during the registration process.

7.2. Newsletter dispatch via MailChimp

We send our newsletter via The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (https://www.mailchimp.com/; hereinafter referred to as "Mailchimp").

We pass on the data you enter when registering for the newsletter to Mailchimp in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interest in using an effective, secure and user-friendly newsletter system.

MailChimp uses this data to send the newsletter to you on our behalf and to statistically analyze the newsletter on our behalf. For this purpose, the emails contain so-called web beacons or tracking pixels, which are one-pixel image files that are stored on our website. In this way, it is possible to track whether a newsletter message has been opened and which links have been clicked on. MailChimp thus automatically creates general, non-personal statistics on the response behavior to newsletters.

We also have a legitimate interest in the statistical analysis of the newsletter in order to optimize our advertising communication. For this purpose, the web beacons pursuant to Art. 6 para. 1 lit. f. GDPR (e.g. email address, time of retrieval, IP address, browser type and operating system) and processed. This data can be used to draw conclusions about the individual newsletter recipient. This data is processed by Mailchimp to automatically generate statistics that can be used to determine whether a particular recipient has opened a newsletter message.

To deactivate this data analysis, you must unsubscribe from the newsletter.

MailChimp may also use the data itself in accordance with Art. 6 para. 1 lit. f GDPR in order to determine the countries from which the recipients of the newsletter come for its own legitimate interest in the needs-based design and optimization of the service or for market research purposes.

However, Mailchimp will not use your data itself for the purpose of contacting you or pass it on to third parties. As a rule, your data is transferred to a MailChimp server in the USA and stored there. To protect your data in the USA, there is a data processing agreement with MailChimp based on the standard contractual clauses of the European Commission. This data processing agreement can be viewed at the following Internet address: https://mailchimp.com/legal/forms/data-processing-agreement/.

MailChimp's privacy policy can be viewed here: https://mailchimp.com/legal/privacy/

8. Use of Social Media: Social Plugins

8.1. Facebook plugins with 2-click solution

We use social plugins ("plugins") from the social network Facebook on our website
(Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA) (hereinafter referred to as "Facebook").

In order to increase the protection of your data when you visit our website, the plugins are integrated into our website using the so-called "2-click solution". This ensures that when you access a page on our website that contains these plugins, no connection is established with the Facebook servers and therefore no data is sent. Only when you click on a plugin and thereby give your consent to data transmission does your browser establish a direct connection to the Facebook servers. The content of the respective plugin is then transmitted directly to your browser and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the corresponding provider or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a Facebook server. If you are logged in to Facebook, the providers can directly associate your visit to our website with your Facebook profile. If you interact with the plugins, for example by clicking the "Like" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on the social network and displayed to your contacts there.

The processing is carried out on the basis of Art. 6 lit. a GDPR with your consent; you can revoke your consent by clicking on the activated plugin again and thus deactivating it. Data that has already been transmitted remains excluded from this.

Data protection information from Facebook https://www.facebook.com/policy.php

If you do not want Facebook to assign the data collected via our website directly to your profile, you must log out of Facebook before activating the plugin.

8.2. Google+ plugins with 2-click solution

We use social plugins ("plugins") from the social network Google+ (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) (hereinafter referred to as "Google+") on our website.

In order to increase the protection of your data when you visit our website, the plugins are integrated into our website by means of a so-called "2-click solution". This ensures that when you visit a page on our website that contains these plugins, no connection is established with the Google+ servers and therefore no data is sent. Your browser only establishes a direct connection to the Google+ servers when you click on a plugin and thereby give your consent to data transmission. The content of the respective plugin is then transmitted directly to your browser and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the corresponding provider or are not currently logged in. This information (including your IP address) is transferred directly from your browser to a Google+ server, whereby a transfer to the USA is also possible, and stored there. If you are logged in to Google+, the providers can directly associate your visit to our website with your Google+ profile. If you interact with the plugins, for example by clicking the "+1" button, the corresponding information is also transmitted directly to a Google+ server and stored there. The information is also published on the social network and shown to your contacts there.

Data protection information from Google+: https://www.google.com/intl/de/+/policy/+1button.html

If you do not want Google to assign the data collected via our website directly to your profile, you must log out of Google+ before activating the plugin.

8.3. Instagram plugins with 2-click solution

We use social plugins ("plugins") of the social network Instagram on our website (Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA) (hereinafter referred to as "Instagram").

In order to increase the protection of your data when you visit our website, the plugins are integrated into our website using the so-called "2-click solution". This ensures that when a page of our website containing these plugins is accessed, no connection is established with Instagram's servers and therefore no data is sent. Only when you click on a plugin and thereby give your consent to data transmission will your browser establish a direct connection to Instagram's servers. The content of the respective plugin is then transmitted directly to your browser and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the corresponding provider or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to an Instagram server. If you are logged in to Instagram, the providers can directly associate your visit to our website with your Instagram profile. If you interact with the plugins, for example by clicking on the "Instagram" button, the corresponding information is also transmitted directly to an Instagram server and stored there. The information is also published on the social network and displayed to your contacts there.

Data protection information from Instagram: https://help.instagram.com/155833707900388/

If you do not want Instagram to assign the data collected via our website directly to your profile, you must log out of Instagram before activating the plugin.

8.4. Twitter plugins with 2-click solution

On our website, we use social plugins ("plugins") from the microblogging service Twitter (Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA) (hereinafter referred to as "Twitter").

In order to increase the protection of your data when you visit our website, the plugins are integrated into our website by means of a so-called "2-click solution". This ensures that when you visit a page on our website that contains these plugins, no connection is established with the Twitter servers and therefore no data is sent. Your browser only establishes a direct connection to the Twitter servers when you click on a plugin and thereby give your consent to data transmission. The content of the respective plugin is then transmitted directly to your browser and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the corresponding provider or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a Twitter server. If you are logged in to Twitter, the providers can directly associate your visit to our website with your Twitter profile. If you interact with the plugins, for example by clicking on the "Twitter" button, the corresponding information is also transmitted directly to a Twitter server and stored there. The information is also published on the social network and displayed to your contacts there.

Data protection information from Twitter: https://twitter.com/privacy

If you do not want Twitter to assign the data collected via our website directly to your profile, you must log out of Twitter before activating the plugin.

9. Web analysis services

Google Analytics

We use the web analysis service Google Analytics (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) for this website.
Google Analytics uses "cookies". These are text files that are stored on your computer and enable your use of the website to be analyzed.

The information generated in this way about your use of this website (including the shortened IP address) is transmitted to a Google server and stored there, whereby a transfer to the USA is possible.

We use Google Analytics with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes a direct personal reference. Your IP address will therefore be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. In exceptional cases, the full IP address is transmitted to a Google server, including in the USA, and only shortened there.

In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR, namely your express consent.

Google uses this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. Your IP address collected in this context will not be merged with other Google data.

You can prevent the storage of cookies by selecting the appropriate settings in your browser.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the following browser plug-in:

https://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can set an out-out cookie:
Deactivate Google Analytics

This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click on this link again.

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".

10. Use of a live chat system

Tawk.to (SMS SIA)
We use the live chat system of SMS SIA, Tirgonu iela, 6, Riga, Latvia, LV1050, (www.tawk.to) on our website. Anonymized data is collected and stored for the purpose of web analysis and to operate the live chat system for answering live support requests. This anonymized data can be used to create user profiles under a pseudonym. Cookies may also be used for this purpose. These cookies make it possible to recognize the Internet browser. If the information collected in this way has a personal reference, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR.

Our legitimate interest lies in effective customer service and the statistical analysis of user behavior for optimization purposes, and the data will not be used to personally identify the visitor to this website without the consent of the person concerned. No data is merged with personal data about the bearer of the pseudonym.

You can prevent the storage of cookies by setting your Internet browser so that no more cookies can be stored on your computer in the future or cookies that have already been stored are deleted. However, this may mean that some functions on our website can no longer be executed.

You have the option to object to the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with effect for the future. Send us your objection informally by e-mail to the e-mail address given at the beginning of this privacy policy.

11. Tools and miscellaneous

Google reCAPTCHA

We use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") in accordance with Art. 6 para. 1 lit. f GDPR due to our legitimate interest in preventing abuse and spam.
reCAPTCHA is a function designed to ensure that an entry is made by a natural person.
The service sends your IP address and any other data required by Google for the reCAPTCHA service to Google.

When using Google reCAPTCHA, your personal data may also be transmitted to the servers of Google LLC. in the USA.

Details about Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/

12. Rights of the data subject

12.1. The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

- Right to information in accordance with Art. 15 GDPR:
You can request confirmation from the controller as to whether personal data concerning you is being processed by the controller. In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of other rights such as rectification of the data or the existence of a right of appeal to a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved. meaningful information about the logic involved and the significance and envisaged consequences of such processing for you, as well as your right to be informed of the safeguards pursuant to Art. 46 GDPR relating to the transfer of your data to third countries;

- Right to rectification pursuant to Art. 16 GDPR:
You have the right to immediate correction of incorrect data concerning you and/or the completion of your incomplete data stored by us; the correction or completion must take place immediately.

- Right to restriction of processing in accordance with Art. 18 GDPR:
If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted.

- Right to erasure pursuant to Art. 17 GDPR:
You have the right to obtain the erasure of your personal data without undue delay if the requirements of Art. 17 (1) GDPR are met. However, this right to erasure does not exist in particular - not conclusively - if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims

- Right to information in accordance with Art. 19 GDPR:
If you have exercised your right to rectification, erasure or restriction of processing, the controller is obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.

- Right to data portability pursuant to Art. 20 GDPR:

- Right to object pursuant to Art. 7 (3) GDPR:
You have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions. You also have the right to withdraw your declaration of consent under data protection law at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

- Right to lodge a complaint pursuant to Art. 77 GDPR:

12.2. Right of objection

You have the right to object to the processing of your data at any time with effect for the future if we process your data on the basis of our overriding legitimate interest after weighing up your interests.

If you make use of this right to object, we will stop processing your data unless there are demonstrably overriding compelling legitimate grounds for termination or if further processing serves the exercise or defense of legal claims.

13. Duration of storage of personal data

The duration of the storage of personal data depends on the statutory retention periods. After these periods have expired, we routinely delete the data if it is no longer required for the fulfillment or initiation of the contract and/or if we no longer have a legitimate interest in continuing to store it.