Privacy Policy

Privacy Policy

We are pleased about your visit to our website growality.shop and your interest in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.

The purpose of this privacy policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practices are in line with the legal provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). The following data protection declaration serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in Art. 13 and Art. 14 ff. GDPR.

Person responsible

The controller within the meaning of Art. 4 No. 7 GDPR is the person who alone or jointly with others decides on the purposes and means of processing personal data.

With regard to our website, the controller is:

CDS Company for Innovative Control Technology Ltd.
Alfred-Nobel-Allee 49
66793 Saarwellingen
Germany
Email: info@growality.shop
Phone: 06838979550

Contact details of the data protection officer

We have appointed a data protection officer in accordance with Art. 37 GDPR. You can reach our data protection officer using the following contact details:

Andreas Maus
Alfred-Nobel-Allee 49
66793 Saarwellingen
Germany
Email: a.maus@cdsgmbh.com

Provision of the website and creation of log files

Each time you access our website, our system automatically records data and information from the device you are using (e.g. computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

(1) Information about the browser type and version used;
(2) The operating system of the retrieval device;
(3) Hostname of the accessing computer;
(4) The IP address of the access device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user’s system accessed our website (referrer tracking);
(8) Message indicating whether the retrieval was successful;
(9) Amount of data transferred

This data is stored in the log files of our system. This data is not stored together with personal data of a specific user, so that individual site visitors cannot be identified.

Legal basis for the processing of personal data

Art. 6 (1) (f) GDPR (legitimate interest). Our legitimate interest is to ensure the achievement of the purpose described below.

Purpose of data processing

The temporary (automated) storage of data is necessary for the completion of a website visit in order to enable the website to be delivered. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat misuse and eliminate malfunctions. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. We also use the data to optimize the website and to generally ensure the security of our information technology systems.

Duration of storage

The aforementioned technical data will be deleted as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.

Possibility of objection and deletion

You can object to the processing at any time in accordance with Art. 21 GDPR and request deletion of data in accordance with Art. 17 GDPR. You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy.

Special features of the website

Our site offers you various functions, the use of which involves us collecting, processing and storing personal data. Below we explain what happens to this data:

Order form

  • What personal data is collected and to what extent is it processed?

    The data you enter in the form fields, such as address, surname, first name, etc., will be processed by us to fulfill the purpose stated below.

  • Legal basis for the processing of personal data

    Art. 6 (1) (b) GDPR (implementation of (pre)contractual measures)

  • Purpose of data processing

    The purpose of data processing is to process your order so that we can process potential contractual relationships with you or carry out pre-contractual measures.

  • Duration of storage

    The data will be deleted as soon as it is no longer required to process the order and there are no longer any legal retention obligations. This will usually be after 10 years (cf. Section 147 Paragraph 3 in conjunction with Paragraph 1 Nos. 1, 4 and 4a AO, Section 14b Paragraph 1 UStG).

  • Possibility of objection and deletion

    You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy.

  • Necessity of providing personal data

    The information in the order form is neither contractually nor legally required, but is necessary to conclude a contract. If you do not fill in the mandatory fields or do not fill them out completely, your desired order cannot be completed.

Rating function

  • What personal data is collected and to what extent is it processed?

    We will process the data you enter in the fields of our evaluation form to fulfill the purpose stated below.

  • Legal basis for the processing of personal data

    Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent through a clear affirmative action or behavior or explicit consent)

  • Purpose of data processing

    The purpose of data processing is to accept and publish your review on our website and – if you explicitly agree – also on the internet platforms of our review service providers.

  • Duration of storage

    Your review will be saved and published indefinitely. We reserve the right to delete data without giving reasons and without prior or subsequent information.

  • Possibility of revocation and deletion

    You can revoke your consent to the publication of the review at any time in accordance with Art. 7 (3) GDPR. However, the processing carried out up to the time of revocation remains unaffected. With regard to further rights, we refer to the overview at the end of this data protection declaration.

  • Necessity of providing personal data

    The information provided in the rating function is voluntary and is neither contractually nor legally required. Furthermore, the information is not required to conclude a contract. If you do not fill out the required fields or do not fill them out completely, the review you requested cannot be published on our platform.

Contact form(s)

  • What personal data is collected and to what extent is it processed?

    We will process the data you enter in our contact forms, which you have entered in the input mask of the contact form, to fulfill the purpose stated below.

  • Legal basis for the processing of personal data

    Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent through a clear affirmative action or behavior or explicit consent)

  • Purpose of data processing

    We will only use the data collected via our contact form(s) to process the specific contact request received through the contact form.

  • Duration of storage

    After your request has been processed, the data collected will be deleted immediately, unless there are statutory retention periods.

  • Possibility of revocation and deletion

    The revocation and deletion options are based on the general provisions on the right of revocation and deletion under data protection law described below in this data protection declaration.

  • Necessity of providing personal data

    The use of the contact forms is voluntary and is neither contractually nor legally required. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our website. If you would like to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the required information in the contact form, you will either not be able to send the request or we will unfortunately not be able to process your request.

Login area

  • What personal data is collected and to what extent is it processed?

    We will process the registration and login data you provide to us to fulfill the purpose stated below.

  • Legal basis for the processing of personal data

    Art. 6 (1) (b) GDPR (implementation of (pre)contractual measures)

  • Purpose of data processing

    You have the option of using a separate login area on our website. In order for us to verify your authorization to use the protected area or the protected documents, you must enter your login data (email or user name and password) in the appropriate form.

  • Duration of storage

    The data collected will be stored as long as you maintain a user account with us.

  • Possibility of objection and deletion

    You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy.

  • Necessity of providing personal data

    The use of the login area on our website is contractually required for use of the protected area. The use of the content protected by the login area is not possible without entering personal data. If you wish to use our login area, you must fill in the mandatory fields (user name and password). Entering the data requires the existence of a user account. Registration is not possible if the data you entered is incorrect. If you enter incorrect data or do not enter it at all, you will not be able to use the protected area. However, the rest of the site can still be used without logging in.

Newsletter registration form

  • What personal data is collected and to what extent is it processed?

    By registering for the newsletter on our website, we receive the email address you entered in the registration field and, if applicable, other contact details, provided you provide them to us via the newsletter registration form.

  • Legal basis for the processing of personal data

    Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent through a clear affirmative action or behavior or explicit consent)

  • Purpose of data processing

    The data entered in the registration form for our newsletter will be used exclusively for sending our newsletter, in which we inform you about all our services and our latest news. After registration, we will send you a confirmation email containing a link that you must click to complete your registration for our newsletter (double opt-in).

  • Duration of storage

    You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link included in every newsletter. Your data will be deleted immediately after you unsubscribe. Likewise, if you do not complete your registration, your data will be deleted immediately. We reserve the right to delete data without giving reasons and without prior or subsequent information.

  • Possibility of revocation and removal

    You can revoke your consent at any time in accordance with Art. 7 (3) GDPR. However, the processing carried out up to the time of revocation remains unaffected. With regard to further rights, we refer to the overview at the end of this data protection declaration.

  • Necessity of providing personal data

    If you would like to receive our newsletter, you must fill in the mandatory fields and confirm your email address by clicking on the double opt-in link. The information provided for newsletter registration is neither necessary to enter into a contract with us nor legally binding. They are used exclusively to send our newsletter. If you do not fill in the necessary information, we will unfortunately not be able to provide you with our newsletter service.

Automated credit check / scoring

If you wish to enter into a contract with us, we reserve the right to process your personal data exclusively in an automated manner in order to check your creditworthiness. We are also entitled to make such an automated decision in accordance with Art. 22 (2) (a) GDPR. Whether the contract can be concluded or not depends on the result of the automated credit check. A credit check calculates statistical probabilities of default. The credit report may contain probability values ​​(score values) calculated based on scientifically recognized mathematical and statistical methods. A variety of characteristics, such as income, address data, occupation, marital status, and previous payment behavior, are used to determine the customer's future risk of default. The result is expressed in the form of a payment value (so-called score). The information obtained in this way forms the basis for our decision on the establishment, implementation or termination of a contractual relationship. If you believe that you have been wrongfully excluded from concluding a contract due to the credit check, please feel free to explain your point of view to us by email. We will then review the automated decision in the specific individual case in accordance with Art. 22 (3) GDPR. In order to carry out the credit check, we may store and process your personal data in accordance with Art. 6 (1) (b) GDPR.

Due to the impending contract, we will transmit your data to the following provider(s) in the following cases:

  • Automatic identity and credit check when selecting the payment method "PayPal"

    • What personal data is collected and to what extent is it processed?

      If you have selected "PayPal" as your payment method, we will forward your personal customer data collected as part of the order to PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") for the purpose of processing the payment. If you give your consent, the following data will be affected by the data transfer: First and last name, street, house number, postal code, city, date of birth, telephone number and the data related to your order.

    • Legal basis for the processing of personal data

      Art. 6 (1) (b) GDPR (implementation of (pre)contractual measures)

    • Purpose of data processing

      If you select the “PayPal” payment method, PayPal will conduct a credit check. Mathematical-statistical methods are used to calculate a rating regarding the probability of a payment default (so-called calculation of a scoring value). PayPal bases its decision on the provision of the respective payment methods on the calculated scoring value. The calculation of a scoring value is carried out according to recognized scientific methods. Please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

    • Duration of storage

      We will store the relevant data for processing the payment for as long as it is necessary to complete the transaction. If the data is subject to statutory retention periods, it will be deleted after the retention period has expired. The duration of data storage by PayPal is set out in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

    • Possibility of objection and deletion

      You can object to the processing at any time in accordance with Art. 21 GDPR and request deletion of the data in accordance with Art. 17 GDPR. You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy.

  • Automatic identity and credit check when selecting Klarna payment methods

    • What personal data is collected and to what extent is it processed?

      If you choose to pay by invoice with Klarna invoice purchase or by installment purchase via Klarna installment purchase or Klarna Sofort, you will be asked during the ordering process to consent to the transmission of the data required for processing the payment and for an identity and credit check to Klarna AB, Sveavägen 46, 11134 Stockholm, Sweden (hereinafter: Klarna). If you give your consent, Klarna will receive the following data from us: First and last name, street, house number, postal code, city, date of birth, telephone number and the data related to your order.

    • Legal basis for the processing of personal data

      Art. 6 (1) (b) GDPR (implementation of (pre)contractual measures)

    • Purpose of data processing

      For the purpose of identity and credit checks, Klarna transmits data to credit agencies (credit agencies) and receives information from them, as well as creditworthiness information based on mathematical-statistical procedures, the calculation of which includes, among other things, address data (so-called score values). This provides Klarna with information about the statistical probability of a payment default, which forms the basis for the decision on the establishment, implementation or termination of the contractual relationship. However, the option to select one of the payment methods offered before concluding the contract does not depend on such information.

      The credit agencies are the following companies:

      • Bürgel Business Information GmbH & Co. KG, PO Box 5001 66, 22701 Hamburg
      • Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss
      • Deltavista GmbH, Freisinger Landstr. 74, 80939 Munich
      • Arvato Infoscore Consumer Data GmbH / Infoscore Consumer Data GmbH, Rheinstrasse 99, 76532 Baden-Baden
      • SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden

      Detailed information can be found in Klarna's privacy policy ( https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf ) and terms of use ( https://klarna.com/de/AGB ).

    • Duration of storage

      We will store the relevant data for processing the payment for as long as it is necessary to complete the transaction. If the data is subject to statutory retention periods, it will be deleted after the retention period has expired. The duration of data storage by Klarna is set out in Klarna's privacy policy: https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf

    • Possibility of objection and deletion

      You can object to the processing at any time in accordance with Art. 21 GDPR and request deletion of the data in accordance with Art. 17 GDPR. You can find out what rights you are entitled to and how you can assert them at the bottom of this privacy policy.

Integration of external web services and processing of data outside the EU

On our website we use active content from external providers, so-called web services. By accessing our website, these external providers may receive personal information about your visit to our website. In this case, data may be processed outside the EU. You can prevent this by installing an appropriate browser plug-in or by disabling the execution of scripts in your browser. This may result in functional limitations on the websites you visit.

We use the following external web services:

  • Legal text snippet and modules

    We use the legal text snippet service and modules from Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, email: support@website-check.de , website: https://www.website-check.de/ . Personal data is transmitted exclusively to servers in the European Union.

    The legal basis for the processing is Art. 6 (1) (c) GDPR. The use of the service helps us to comply with our legal obligations.

    This service is used to reload the content of our legal texts onto our website. The integration on our site reloads the most current legal texts. This integration may also be used to reload additional technical modules related to the legal texts or legally required elements.

    You will find your rights with regard to processing at the end of this privacy policy.

    Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/ .

  • Shopify

    We use the Shopify service of the company Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, D04 XN32 Dublin, Ireland, email: hilfe@shopify.de , website: https://www.shopify.de/ . The transfer also takes place to a third country outside the EU. There is a Commission adequacy decision for this third country. You can find a current list of all adequacy decisions on the EU Commission website (link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de ).

    The legal basis for the processing of personal data is, in accordance with Art. 6 (1) (b) GDPR, the contract already concluded or still to be concluded between you and us.

    Shopify’s CRM allows us to operate our store and make it available to you.

    You will find your rights with regard to processing at the end of this privacy policy.

    Further information on the handling of the transferred data can be found in the provider's privacy policy at https://www.shopify.de/legal/datenschutz .

Information about the use of cookies

  • What personal data is collected and to what extent is it processed?

    We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. So-called "cookies" are small text files that your browser can store on your access device. These text files contain a characteristic string of characters that uniquely identifies the browser when you return to our website. The process of storing a cookie file is also called "setting a cookie". Cookies can be set both by the website itself and by external web services. Cookies are set by our website or external web services to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose specified with your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, e.g. a unique or random ID, so that we can offer more personalized services. Details are listed in the table below.

  • Legal basis for the processing of personal data

    If the cookies are processed on the basis of consent in accordance with Art. 6 (1) (a) GDPR, this consent also counts as consent within the meaning of Section 25 (1) TDDDG for the setting of the cookie on the user’s device. If another legal basis is mentioned under the GDPR (e.g. for the performance of a contract or to fulfil legal obligations), the storage or setting is based on an exception in accordance with Section 25 (2) TDDDG. This is the case “when the sole purpose of storing information in the end-user’s terminal equipment or the sole purpose of accessing information already stored in the end-user’s terminal equipment is to carry out the transmission of a communication over a public telecommunications network.” or “where the storage of information in the end-user’s terminal equipment or access to information already stored in the end-user’s terminal equipment is strictly necessary to enable the provider of a digital service to provide a digital service explicitly requested by the user”. The applicable legal basis is set out in the cookie table listed later in this section.

  • Purpose of data processing

    Cookies are set by our website or external web services to maintain the full functionality of our website, to improve user-friendliness or to pursue the purpose specified with your consent. Cookie technology also allows us to recognize individual visitors using pseudonyms, e.g. unique or random IDs, so that we can offer more personalized services. Details are listed in the table below.

  • Duration of storage

    Our cookies are stored until they are deleted in your browser or, in the case of a session cookie, until the session has expired. Details are listed in the table below.

  • Possibility of objection and removal

    You can set your browser to generally prevent cookies from being set. You can then decide on a case-by-case basis whether to accept cookies or accept cookies in general. Cookies can be used for various purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to save recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can revoke this consent at any time. Please note that this does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Cookie name server Provider Purpose Legal basis Storage period type
_landing_page growality.shop Website operator This cookie collects information about how you use our websites. It tracks the landing pages users first arrive on our website. Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent) approx. 14 days Analytics
_orig_referrer growality.shop Website operator This cookie collects information about how you use our websites. It tracks the landing pages users first arrive on our website. Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent) approx. 14 days Analytics
_pay_session shop.app Shopify The cookie sends your payment information to our CRM behind the website and processes it there. Art. 6 (1) (b) GDPR ((pre-)contractual performance) meeting configuration
_shopify_country growality.shop Website operator This cookie allows us to save individual comfort settings you have selected and keep them for your current and future visits to the site. Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent) approx. 30 minutes configuration
_shopify_s .growality.shop, growality.shop, .shop Shopify This cookie is used to collect data on user behavior and to display personalized advertising to site visitors. Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent) approx. 30 minutes marketing
_shopify_sa_p .growality.shop Shopify This cookie is used to show personalized advertising and recommendations to site visitors and to measure advertising effectiveness. Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent) approx. 30 minutes marketing
_shopify_sa_t .growality.shop Shopify This cookie is used to show personalized advertising and recommendations to site visitors and to measure advertising effectiveness. Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent) approx. 30 minutes marketing
_shopify_y growality.shop Shopify This cookie is used to track the user in Shopify stores and to summarize the user's interactions under one ID. Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent) approx. 12 months marketing
_tracking_consent growality.shop Website operator This cookie stores the cookie consent status of the site visitor regarding the use of web tracking on the current domain. Art. 6 (1) (c) GDPR (fulfilment of legal obligation) approx. 12 months Cookie banner
cart_currency growality.shop Website operator The cookie stores the selected currency for display on the website and in the shopping cart. Art. 6 (1) (f) GDPR (legitimate interests) approx. 14 days configuration
keep_alive growality.shop Website operator This cookie is set so that we can store information regarding your site usage. In particular, individual settings are determined and stored. Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent) approx. 30 minutes configuration
localization growality.shop Website operator This cookie is set in connection with the Shopify shopping cart system. It stores the website visitor's location and is used in connection with the checkout process. Art. 6 (1) (f) GDPR (legitimate interests) approx. 12 months configuration
m-recently-viewed-products growality.shop Website operator This cookie allows us to save individual comfort settings you have selected and keep them for your current and future visits to the site. Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent) meeting configuration
secure_customer_sig growality.shop Website operator This cookie allows the comfort settings selected by the visitor to be saved and retained for future site visits. Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent) approx. 12 months comfort
shopify_pay_redirect growality.shop Shopify This cookie is used for purchase processing Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent) approx. 60 minutes configuration
wpm-test-cookie shop, growality.shop Website operator The cookie is used to ensure the proper functioning of our systems. Art. 6 (1) (f) GDPR (legitimate interests) meeting configuration

Data security and data protection, communication via email

Your personal data is protected by technical and organizational measures during collection, storage and processing so that it is not accessible to third parties. If communication is carried out unencrypted via email, we cannot guarantee complete data security during transmission to our IT systems. Therefore, we recommend encrypted communication or sending information with a high level of confidentiality by post.

Right to information and requests for correction – Deletion & restriction of data – Revocation of consent – ​​Right of objection

Right to information

You have the right to request confirmation as to whether we process your personal data. If this is the case, you have the right to information about the information specified in Art. 15 (1) GDPR, provided that the rights and freedoms of other persons are not affected (cf. Art. 15 (4) GDPR). We would be happy to provide you with a copy of the data.

Right to rectification

According to Art. 16 GDPR, you have the right to have any personal data we have stored about you (such as address, name, etc.) corrected at any time. You can also request that the data we have stored about you be completed at any time. A corresponding adjustment will be made immediately.

Right to erasure

According to Art. 17 (1) GDPR, you have the right to have us delete the personal data collected about you if

  • the data is either no longer needed;
  • due to the withdrawal of your consent, the legal basis for processing no longer applies;
  • you have objected to the processing and there are no legitimate grounds for the processing;
  • your data is processed unlawfully;
  • a legal obligation requires this or a collection has taken place in accordance with Art. 8 (1) GDPR.

According to Art. 17 (3) GDPR, this right does not exist if

  • processing is necessary for the exercise of the right to freedom of expression and information;
  • Your data has been collected on the basis of a legal obligation;
  • processing is necessary for reasons of public interest;
  • the data is necessary to assert, exercise or defend legal claims.

Right to restriction of processing

According to Art. 18 Para. 1 GDPR, you have the right to request the restriction of the processing of your personal data in individual cases.

This is the case when

  • you contest the accuracy of the personal data;
  • the processing is unlawful and you do not consent to erasure;
  • the data are no longer required for the purpose of processing, but the data collected serve to assert, exercise or defend legal claims;
  • an objection to the processing has been lodged pursuant to Art. 21 (1) GDPR and it is still unclear which interests prevail.

Right of withdrawal

If you have given us your express consent to the processing of your personal data (Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR), you can revoke this consent at any time. Please note that this does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Right to object

According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you which has been collected on the basis of Art. 6 (1) (f) (within the scope of a legitimate interest). You are only entitled to this right if there are special circumstances that speak against the storage and processing.

How do you exercise your rights?

You can exercise your rights at any time by contacting us using the contact details below:

CDS Company for Innovative Control Technology Ltd.
Alfred-Nobel-Allee 49
66793 Saarwellingen
Germany
Email: info@growality.shop
Phone: 06838979550

Right to data portability

According to Art. 20 GDPR, you have the right to have the personal data concerning you transferred to us. We provide the data in a structured, common and machine-readable format. The data can be sent either to you or to a responsible person designated by you.

We will provide you with the following data upon request in accordance with Art. 20 (1) GDPR:

  • Data collected on the basis of express consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR;
  • Data that we have received from you in accordance with Art. 6 (1) (b) GDPR within the framework of existing contracts;
  • Data that has been processed as part of an automated procedure.

We will transfer the personal data directly to a responsible party of your choice, provided this is technically feasible. Please note that we are not permitted to transfer data that interferes with the freedoms and rights of other persons in accordance with Art. 20 (4) GDPR.

Right to lodge a complaint with the supervisory authority pursuant to Art. 77 (1) GDPR

If you suspect that your data is being processed unlawfully on our website, you can of course seek legal clarification of the issue at any time. In addition, any other legal options are open to you. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Art. 77 (1) GDPR. You have the right to lodge a complaint pursuant to Art. 77 GDPR in the EU Member State of your residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you wish to address your complaint from the locations mentioned above. The supervisory authority to which the complaint was submitted will then inform you of the status and results of your submission, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Created by:

© DURY LEGAL Attorneys at Law – www.dury.de

© Website-Check GmbH – www.website-check.de