Data protection

Valetta UG (limited liability) (hereinafter "we") processes users' personal data only to the extent that this is necessary to provide a functional website and our content and services. When you visit our websites, the following data is processed:

• User’s IP address

• browser used (type, version, language)

• operating system used

• User’s Internet service provider

• Date and time of access to our website

• files accessed on our website

• Website from which the user accessed our website

• Website that the user accesses via our website.

The processing and temporary storage of the IP address is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session. The log files contain IP addresses or other data that enable the user to be assigned. The data is stored in log files to ensure the functionality of the websites. The data is also used to optimize our websites, personalize and further develop our service, and to ensure the security of our information technology systems. Any processing of personal data is carried out exclusively for the purposes stated and to the extent necessary to achieve these purposes.

The processing of our users' personal data is usually carried out after the user has given their consent. An exception applies in cases where prior consent cannot be obtained for actual reasons and we are permitted to process the data by law. The data and log files are stored on the basis of Art. 6 (1) (f) GDPR.

We delete or block the personal data of the data subjects as soon as the purpose of storage no longer applies. In the case of data processing to provide the websites, deletion takes place when the respective session has ended. In the case of personal data stored in log files, deletion takes place after seven days at the latest. Storage beyond this is possible provided that the IP addresses of the users are deleted or altered beforehand so that it is no longer possible to assign the calling client.

To simplify the ordering process, we offer users the opportunity to register in our shop system. The data is entered into an input mask and sent to us and stored. The following data is collected:

• E-mail address

• Password

• First name

• Last name

• Address (billing and delivery address)

• Birth date

• Residence (country)

The user will then receive a registration email to the email address provided, which contains a link that the user can use to confirm their registration and complete the registration process. After registration, the user can open their user account and shop in our online shop by entering their email address and password. The legal basis for processing the data is Art. 6 Paragraph 1 Letter b of GDPR. The user has the option of revoking their consent to the processing of personal data at any time by deactivating their user account. We will then delete the data unless we are obliged to retain it for a longer period due to contractual and/or legal obligations. This includes, in particular, retention periods under tax and commercial law. According to Section 147 Paragraph 1 of the Fiscal Code (AO), these are 10 years for accounting documents and according to Section 257 Paragraph 1 of the Commercial Code (HGB), they are 6 years for business documents.

Depending on the item ordered, we process the order ourselves or outsource the order processing to an external fulfillment company (so-called dropshipping). When you shop in our online shop, we process the following personal data from you in order to process your order:

• Last name First Name

• Address (billing and delivery address)

• E-mail address

• Telephone number

• Customer number

• Payment details

We use the data for order processing and, if necessary, for communication with the user. Within the scope of what is legally permissible, we pass on the user's data to our partner companies who support us in the proper fulfillment of the contract.

We work with external partner companies (so-called fulfillment companies) to process the contract. We only pass on to the fulfillment company the personal data that is absolutely necessary for the delivery of the ordered product. The fulfillment company is not a contractor bound by instructions within the meaning of Art. 28 GDPR, but is itself responsible for the processing of your personal data. We have no influence on the further order processing by the executing company.

We transmit your personal data to the fulfillment company with the help of a Chinese data service provider: DSers All rights reserved . This company is in turn obliged to comply with the applicable data protection regulations, in particular this company may only process the data to fulfill its tasks on our behalf and only in accordance with our instructions.

We work with external shipping service providers (e.g. Post, DHL, etc.) to deliver orders. They only receive the data required to execute the respective order:

• your name,

• your delivery address,

• if applicable, your postal code (if you want your order to be delivered to a DHL Packstation)

• if applicable, your email address (if the shipping service provider would like to inform you by email about the expected delivery date)

These companies are obliged to comply with the applicable data protection regulations. If there is a delay in an order, we will inform you accordingly via service emails. Data processing in connection with the ordering process is carried out on the basis of Art. 6 Paragraph 1 Letter b of GDPR. We delete the data as soon as the order has been processed, unless we are obliged to retain it for a longer period due to contractual and/or legal obligations. This includes in particular retention periods under tax and commercial law. According to Section 147 Paragraph 1 of the Fiscal Code (AO), these are 10 years for accounting documents and according to Section 257 Paragraph 1 of the Commercial Code (HGB), 6 years for business documents.

On our website you have the option to subscribe to a free newsletter. We send this out regularly up to four times a week. If you subscribe to the newsletter, we will process the following personal data:

• Name first Name

• Birth date

• E-mail address

• IP address of the accessing computer

• Date and time of dispatch

The legal basis for the processing of personal data in this context is Art. 6 Paragraph 1 Letter a of GDPR. Consent can be revoked by clicking on the corresponding link contained in each newsletter or by sending an email to Valetta.info1@gmail.com.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with effect for the future, for example by e-mail to Valetta.info1@gmail.com . In case of revocation, you can no longer participate in the respective competition.

In connection with our services, we present you with information and offers from GDC based on your interests or send you customer satisfaction surveys. You will receive these individual product recommendations or customer satisfaction surveys from us regardless of whether you have subscribed to a newsletter. In accordance with the legal provisions, we primarily use your previous purchase data and interest data to select the individual product recommendations, from which we derive your product interests, taking into account the interests and preferences and profile data you have communicated to us.

If you no longer wish to receive individual product recommendations or customer satisfaction surveys from us, you can deactivate this service at any time:

• If you do not wish to receive individual product recommendations or customer satisfaction surveys from us by email, you can object to this at any time without any formalities, without incurring any costs other than the transmission costs according to the basic rates (e.g. internet connection costs, postage), e.g. by email to kundenservice@depot-online.com. Of course, you will also find an unsubscribe link in every email.

The legal basis for the use of the shipping service provider is Art. 6 (1) lit. f GDPR based on our legitimate interests. We have concluded a data processing agreement with Emarsys in accordance with Art. 28 (3) sentence 1 GDPR.

Emarsys can use the recipients' data in pseudonymous form, i.e. without assigning it to a user, to optimize or improve its own services, e.g. to technically optimize the sending and presentation of the newsletter or for statistical purposes. However, the shipping service provider will not use your data to write to you or to pass the data on to third parties.

If you have a customer account with us with your email address and you have not yet completed an order process, we will send you a shopping cart reminder email. You will receive this reminder email from us regardless of whether you have subscribed to a newsletter. If you no longer wish to receive reminders from us, you can object to this service at any time without any formalities, without incurring any costs other than the transmission costs according to the basic rates (e.g. internet connection costs, postage), e.g. by email to kundenservice@depot-online.com. Of course, you will also find an unsubscribe link in every email.

The legal basis for the use of the shipping service provider is Art. 6 (1) lit. f GDPR based on our legitimate interests.

7. Contact form

There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data he or she enters in the input mask will be transmitted to us and stored:

• First name

• Last name

• Email

• Order number

• Reference

• Text entered by the user in the free field provided

In addition, the following data is stored when the message is sent:

• User’s IP address

• Date and time of registration

The legal basis for the processing of the data is Art. 6 Paragraph 1 Letter f of GDPR. The data is used exclusively to process the contact and the subsequent communication. The data is not passed on to third parties in this context. If we use the data for other purposes, we obtain the user's consent in advance. The personal data from the input mask of the contact form and those sent by email are deleted when the respective communication with the user has ended, i.e. as soon as it can be inferred from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process are deleted after a period of seven days at the latest.

The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the contact request cannot be processed or communication cannot be continued. In this case, all personal data that was stored in the course of establishing contact will be deleted.

In addition, we reserve the right to store the following data or parts thereof in summarized lists and to use them for our own advertising purposes, e.g. to send interesting offers and information about our products by post:

• First and Last Name

• Postal address

• Title

• Academic degree

• Year of birth

• Job title, industry or business title

This is done on the basis of a balancing of interests to protect our legitimate interests, in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. These arise from the respective purposes and, unless otherwise stated, are of a competitive and economic nature.

You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.

We use internal applications to analyze and evaluate customer purchasing behavior more precisely. The aim is to be able to make you customized offers and to monitor and optimize our internal processes. The following data can be evaluated:

• Salutation/Gender

• Name first Name

• Address

• E-mail address

• Date of birth (if provided)

•Transaction data/purchase history

The legal basis for this is Art. 6 (1) lit. f GDPR.

If you choose Klarna's payment services, we will transmit the data necessary for processing the payment and an identity and credit check to Klarna. The legal basis for the credit check is Art. 6 Para. 1 lit. f. GDPR. The following of your data will be transmitted to the credit agency:

• First name

• Last name

• Address

• Birth date

• Telephone number

In Germany, the data protection regulations set out in Klarna’s privacy policy can be used for identity and credit checks. (https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy) You can revoke your consent to this use of personal data at any time by contacting Klarna.

If you choose PayPal's (PayPal (Europe) S.Ã rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg) payment services, we will transmit the data necessary for processing the payment and an identity and credit check to PayPal. The legal basis for the credit check is Art. 6 Para. 1 lit. f. GDPR. For the use of payment services via PayPal, the legal basis for processing is Art. 6 Para. 1 lit. b GDPR. The following data may be transmitted to PayPal:

• Name

• Birth date

• Address

• Telephone number

• E-mail address

• Data for payment processing, e.g. bank account details

In Germany, the identity and credit checks in PayPal’s Privacy Policy You can revoke your consent to this use of personal data at any time by contacting PayPal.

If you choose to pay by credit card through the payment service provider ConCardis (ConCardis GmbH, Helfmann-Park 7, 65760 Eschborn), we will transmit the data necessary to process the payment to ConCardis. The legal basis for using payment services via ConCardis is Art. 6 Para. 1 lit. b GDPR. The following data may be transmitted to ConCardis:

• Name

• Birth date

• Address

• Telephone number

• E-mail address

• Data for payment processing, e.g. bank account details, credit card information
13. Data processing when using Amazon Pay

If you choose Amazon Pay as your payment service provider, you can use your existing Amazon account and the payment methods stored there without this data being transmitted to us. You can find more information about paying via Amazon Pay at https://pay.amazon.de . When paying via Amazon Pay, the payment data is communicated or processed by Amazon Pay (Amazon Payments Europe SCA 5, Rue Plaetis - 2138 Luxembourg and Amazon EU SARL, Amazon Services Europe SARL, Amazon Media EU SARL, all three located at 5, Rue Plaetis L 2138, Luxembourg). The legal basis for the use of payment services via Amazon Pay is Art. 6 Para. 1 lit. b GDPR. Further information on data processing by Amazon Pay can be found in the Amazon Pay privacy policy: https://pay.amazon.com/at/help/201751600

We use cookies on our websites. Cookies are stored on your computer and transmitted from there to our websites. A cookie contains a characteristic string of characters that enables your web browser to be uniquely identified when you visit our websites again.

We differentiate between essential cookies (section 14.1), functional and analytical cookies (section 14.2) and marketing cookies (section 14.3).

You can change your cookie settings here configure yourself.

You can also configure how cookies are handled in your browser. You can deactivate or restrict the transfer of cookies by changing the settings in your browser. You can delete cookies that have already been saved at any time. This can also be done automatically. If cookies are deactivated for our websites, it may no longer be possible to use all functions to their full extent. You can find more information on the websites of your respective browser provider:

Necessary cookies are technically required for the proper operation of our websites. Some necessary cookies ensure the technical stability of our websites and enable security-relevant functionalities. The use of certain functions, such as our shopping cart or our contact form, is only possible with necessary cookies. There is no way to use our websites without such processing of data, i.e. you have no option to object.

We use this type of cookies to increase the security and functionality of our websites and web applications. Necessary cookies do not contain any personal data, i.e. no IP address or other information is recorded that could be traced back to you.

The processing of personal data using necessary cookies is based on Art. 6 (1) lit. f GDPR.
By using technically necessary cookies, we aim to make it easier for you to use our websites. Some functions of our websites cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after changing pages. Our legitimate interest also lies in these purposes.

We do not use your user data collected through technically necessary cookies to create user profiles.

Cookies for reach measurement enable us to obtain anonymous statistical information about the use of our websites and to understand how visitors interact with our websites. With the help of these cookies, we can, for example, determine the number of visitors to our websites and optimize our website content. Here you will find an overview of the cookies we use and the option to adjust your cookie settings accordingly: Home page

The legal basis for the processing of personal data using cookies for reach measurement is your consent in accordance with Art. 6 (1) (a) GDPR.

We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our websites. Google Tag Manager implements tags and triggers other tags. When a tag is triggered, Google may process personal data about you. It cannot be ruled out that Google will also transmit the personal data to a US server. You can find more information at https://policies.google.com/privacy/frameworks?gl=de

In particular, the following personal data is processed by the Google Tag Manager:

• Online identifiers (including cookie identifiers)

• IP address.

For more information on how Google uses data from websites that include Google services, see https://policies.google.com/technologies/partner-sites?hl=de .
The purpose of using Google Tag Manager is to simplify and clearly integrate various codes and services and to optimize the loading times of various services. If you have deactivated individual tracking services, the deactivation will remain in place for all affected tracking tags that are integrated by the Google Tag Manager.

For further information on data processing by Google as well as your rights and setting options to protect your privacy, please refer to Google’s privacy policy at https://policies.google.com/privacy?hl=de . Information about your privacy settings can be found at https://safety.google/privacy/privacy-controls/ .

The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons and with effect for the future.
If you do not agree to the future transmission of your data to Google when using our websites, you have the option of deactivating Google Tag Manager in your browser settings (see section 2 above). In this case, not all functions of our websites may be fully available to you.

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them to their full extent.

You can revoke your consent to data processing using our Manage consent management service here

Cookies for usage analysis enable us to analyze how you use our websites. With the help of these cookies, we can test the effectiveness of our websites and discover errors. In addition, these cookies provide insights to optimize our services and for web analytics.

The legal basis for the processing of personal data using cookies for usage analysis is your consent in accordance with Art. 6 (1) (a) GDPR.

Our websites use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies, which enable an evaluation of your use of our websites (including your IP address). The information generated by the cookies is transferred to a Google server, possibly in the USA or in another third country, and stored there. You can find more information at https://policies.google.com/privacy/frameworks?gl=de

We have activated the IP anonymization function on our websites. This means that your IP address will be shortened by Google before it is transmitted to the USA, so that personal reference can be excluded.

The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons and with effect for the future.

If you do not agree to the future transmission of your data to Google when using our websites, you have the option of deactivating Google Analytics completely in your browser settings (see section 2). Data processing by Google can also be prevented by using a browser add-on to deactivate Google Analytics. Further information and the add-on can be found at https://tools.google.com/dlpage/gaoptout?hl=de .

In this case, you may no longer have full access to all functions of our website.

Further information on Google Analytics privacy policy can be found at https://www.google.de/intl/de/policies/ .

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them to their full extent.


You can revoke your consent to data processing using our Manage consent management service here

Our websites use Google Ads and, as part of Google AdWords, conversion tracking, an analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

We do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify you based on this information. Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server.

As part of Google Conversion Tracking, our websites use the extension Google Enhanced Conversion, an analysis service provided by Google. Google Enhanced Conversion may collect personal data such as your email address, name, home address or telephone number. This data is anonymized in our conversion tracking tags and sent to Google as hash data in order to improve our conversion evaluations. Using these evaluations, we can better measure sales and events on our website in order to optimize our offers for you.
The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with effect for the future.

If you do not agree to the future transmission of your data to Google when using our websites, you have the option of completely deactivating Google Ads in your browser settings (see section 2). You also have the option of objecting to interest-based advertising by Google by clicking on www.google.de/settings/ads make the settings you want.

In this case, you may no longer have full access to all functions of our website.

Further information on Google’s privacy policy can be found at https://www.google.de/intl/de/policies/ .

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them in full.

You can revoke your consent to data processing using our Manage consent management service here

Our websites use Google Double Click from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). By using Google Double Click, we aim to optimize our marketing and our websites. Google DoubleClick records so-called conversions that are related to ad requests, for example when you see a DoubleClick ad and later visit our websites with the same web browser and buy something there. Google DoubleClick uses cookies to prevent ads from being displayed multiple times. The information generated by the cookies is transferred to a Google server, possibly in the USA or in another third country, and stored there. You can find more information at https://policies.google.com/privacy/frameworks?gl=de .

The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons and with effect for the future.

If you do not agree to the future transmission of your data to Google when using our websites, you have the option of completely deactivating Google Double Click in your browser settings (see section 2). You also have the option of objecting to interest-based advertising by Google by clicking www.google.de/settings/ads make the settings you want.

In this case, you may no longer have full access to all functions of our website.

Further information on Google’s privacy policy can be found at https://www.google.de/intl/de/policies/ .

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them in full.


You can revoke your consent to data processing using our Manage consent management service here

Our websites use Google Remarketing from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Remarketing enables us to display our advertisements to you after you have visited our websites when you continue to use the Internet. This is done using cookies stored in your browser, which Google uses to record and evaluate your usage behavior when you visit various websites. This allows Google to determine your previous visit to our websites. According to Google, the data collected as part of remarketing is not merged with your personal data that may be stored by Google. In particular, according to Google, pseudonymization is used in remarketing. The information generated by the cookies is transferred to a Google server, possibly in the USA or in another third country, and stored there. You can find more information at https://policies.google.com/privacy/frameworks?gl=de .

We use Google Remarketing for marketing and optimization purposes, in particular to display ads that are relevant and interesting to you and to improve campaign performance reports.

The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons and with effect for the future.

If you do not agree to the future transmission of your data to Google when using our websites, you have the option of completely deactivating Google Remarketing in your browser settings (see section 2). You also have the option of objecting to interest-based advertising by Google by clicking on www.google.de/settings/ads make the settings you want.

In this case, you may no longer have full access to all functions of our website.

Further information on Google’s privacy policy can be found at https://www.google.de/intl/de/policies/ .

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them to their full extent.

You can revoke your consent to data processing using our Manage consent management service here

Right of withdrawal

You have the right to revoke your consent to the pseudonymous analysis of your surfing behavior by Criteo at any time without giving reasons with effect for the future by using the following link to unsubscribe at https://www.criteo.com/de/privacy/ or with the help of our Consent Management Service here. In this case, you may no longer have full access to all the functions of our website.

On our website we use the technology of RTB House SA, 61/101 Złota Street, 00-819 Warsaw, Poland. This technology enables us to use pixels and cookies to point you to further content within our website or on third-party websites that may also be of interest to you (retargeting). Cookies are used in this context. The recommendations integrated by RTB House are determined based on the content you have seen so far. The content is technically controlled and delivered automatically by RTB House. The display is on a pseudonymous basis.

The information generated by the cookie about your use of this website such as browser type/version, operating system used, referrer URL (the previously visited page), time of the server request is transferred to the RTB House server and stored there.


The legal basis for this data processing is Article 6 paragraph 1 letter a) GDPR.

Right of withdrawal

You have the right to withdraw your consent at any time without giving reasons with effect for the future, e.g. within the privacy policy of RTB House at https://www.rtbhouse.com/privacy/ or with the help of our Consent Management Service here. In this case, you may no longer be able to fully use all the functions of our website.

Our websites use Microsoft Bing Ads, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). Microsoft Bing Ads enables us to track your activities on our websites if you have accessed our websites via Microsoft Bing Ads ads. When you click on an ad placed by us using Microsoft Bing Ads, a cookie is placed on your device. This enables us and Microsoft to track that you have clicked on a Microsoft Bing Ads ad and were redirected to our websites through it. The information generated by the cookie about your use of our websites (including your IP address) may be transmitted to a Microsoft server, possibly in the USA or in another third country, and stored there. You can find more information about data protection at Microsoft at https://privacy.microsoft.com/de-de/privacystatement .

By using Microsoft Bing Ads, we aim to evaluate the effectiveness of our advertising measures. We do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Microsoft. Based on these evaluations, we can see which of the advertising measures used are particularly effective. It is not possible to identify you personally based on this information.

The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with effect for the future.

If you do not agree to the future transmission of your data to Microsoft when using our websites, you have the option of completely deactivating Microsoft Bing Ads in your browser settings (see section 2). You can also prevent data processing using the following link ttp://choice.microsoft.com/de-DE/opt-out be prevented.

In the event of revocation, it is possible that not all functions of our website will be fully available to you.

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them to their full extent.

You can revoke your consent to data processing using our Consent Management Service manage here.

Our websites use Facebook Custom Audiences Pixel, a marketing tool from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Using Facebook Custom Audiences Pixel enables tracking across websites.

The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons with effect for the future.

If you do not agree to the future transmission of your data to Facebook when using our websites, you have the option of completely deactivating Facebook in your browser settings (see section 15 above).

In the event of revocation, it is possible that not all functions of our website will be fully available to you.

Further information about data processing by Facebook can be found in the privacy policy at https://www.facebook.com/privacy/ .

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them in full.

You can revoke your consent to data processing using our Consent Management Service manage here.
• Time of access to our offer

• Type and content of the campaign and

• the reaction to the respective campaign (e.g. clicking a button)

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons and with effect for the future.

If you do not agree to the future transmission of your data to Pinterest Inc. when using our websites, you have the option of completely deactivating Pinterest Inc. in your browser settings (see section 15).

In the event of revocation, it is possible that not all functions of our website will be fully available to you.

Further information about data processing by Pinterest Inc can be found in the privacy policy at https://policy.pinterest.com/de/privacy-policy .

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them to their full extent.

You can revoke your consent to data processing using our Manage consent management service here .

We use the so-called Facebook Software Development Kit (Facebook SDK). The Facebook SDK is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).

The following data is used or logged by Facebook SDK:

• Explicit events – Information from events that are tracked because we specifically configured our app to do so, such as “AddtoCart” or “logPurchase”, as well as additional parameters provided by the app.

• Automatically logged events – Basic interactions in the app (e.g. app installs, app launches) and system events (e.g. SDK loading, SDK performance) that are automatically recorded.

• Facebook App ID – A unique ID assigned by Facebook to the advertiser’s website and mobile app.

• Mobile Advertising ID – the iOS IDFA or Android Advertising ID.

•Metadata from the request - mobile operating system type and version, SDK version, app name, app version, device opt-out setting, user agent string, and client IP address. The SDK also collects the following device metrics: time zone, device operating system, device model, vendor, screen size, processor cores, total storage, free storage.

The Facebook SDK helps us to increase the advertising success of advertising campaigns for mobile apps placed via Facebook - for example, by not displaying advertising for the corresponding app on devices on which it is already installed. The Facebook SDK also enables various evaluations of the installation of our app and the success of one of our advertising campaigns. With the help of the Facebook SDK, we are also able to analyze individual activities of a user within the app in order to be able to define the target group for advertising campaigns more precisely and better, for example.

Only this pseudonymized data is transferred to Facebook. The pseudonym used is the advertising ID provided by the device's operating system (the name may vary depending on the operating system). The app ID can be recreated by the user when the app is reinstalled.

The purpose of collecting and using this data is to analyze our target group and optimize advertising campaigns and product information. The legal basis is Art. 6 Para. 1a GDPR, the consent you have given.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons and with effect for the future.

If you do not agree to the future transmission of your data to Facebook when using our websites, you have the option of completely deactivating Facebook in your browser settings (see section 14).

In the event of revocation, it is possible that not all functions of our website will be fully available to you.

Further information about data processing by Facebook can be found in the privacy policy at https://www.facebook.com/privacy/ .

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them in full.

You can revoke your consent to data processing using our Manage consent management service here

Our websites use the performance advertising network of AWIN AG, Eichhornstrasse 3, 10785 Berlin. Awin is an affiliate network that offers so-called affiliate marketing. This is an internet-based form of sales that enables commercial website operators (so-called merchants or advertisers) to display advertising, which is usually remunerated via click or sale commissions, on the websites of sales partners (so-called affiliates or publishers). The merchant provides an advertising medium via the affiliate network, which is then integrated into an affiliate's website. To document transactions, AWIN stores the affiliate's identification number, the website visitor's serial number and the advertising medium clicked on in order to be able to correctly assign the success of an advertising medium.

The legal basis for the processing of the data is Art. 6 Paragraph 1 Letter f of GDPR. The purpose of storing this data is to process commission payments between a merchant and the affiliate, which are processed via Awin. This is also our legitimate interest.

Right to object (Art. 21 GDPR)

You have the right to object to the processing of your personal data at any time with effect for the future using our Consent Management Service .

We will not subsequently process your personal data any further unless we can demonstrate compelling legitimate grounds for our processing which override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

Further information on data processing by AWIN can be found in the privacy policy at https://www.awin.com/de/datenschutzerklarung .

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them in full.

On our websites we have integrated the following services of the provider Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. As part of the services, Google may process personal data about you. It cannot be ruled out that Google will also transmit the information to a US server. You can find more information at https://policies.google.com/privacy/frameworks?gl=de . We have no influence on how and which of your personal data Google processes. According to Google's privacy policy, the following personal data may be processed, depending on the respective Google service ( https://policies.google.com/privacy?gl=de#infocollect ).

•Data about the apps, browsers and devices you use to access Google services

•unique identifiers, the type and settings of your browser, the type and settings of your device, the operating system, information about the mobile network (name of the mobile operator, telephone number, version number of the app)

•Data about the interaction of your apps, browsers and devices with Google services (e.g. IP address, crash reports, system activities and the date, time and referring URL of your request).

•Activity data (e.g. terms you search for, videos you watch, content and ads you view and interact with)

For more information on how Google uses data from websites that include Google services, see https://policies.google.com/technologies/partner-sites?hl=de
For information on the purpose and scope of data processing by Google as well as your rights and setting options for protecting your privacy, please refer to Google’s privacy policy at https://policies.google.com/privacy?hl=de . Information about your privacy settings can be found at https://safety.google/privacy/privacy-controls/ .

We use Google Maps. Google Maps is a map service that is designed to make it easy to find the locations we specify on our websites. By using Google Maps, data about your use of the maps functions on our websites can be processed by Google.
The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons and with effect for the future.

If you do not agree to the future transmission of your data to Google when using Google Maps, you have the option of deactivating Google Maps in your browser settings. In this case, however, you will no longer be able to use Google Maps and the map display.

Information and further details on data processing by Google in the context of the use of Google services can be found in this privacy policy under section 15.1 “Integration of Google services”.
You are not obliged to provide your personal data. The provision is neither legally or contractually required nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them to their full extent.

This website uses the consent management service of Usercentrics GmbH Rosental 4, 80331 Munich https://usercentrics.com/de/ , a software that serves to comply with our legal obligations and to store the consent to data processing. In this context, data processing is carried out on the basis of Art. 6 Paragraph 1 Letter f of GDPR. The data collected and used in this context is always stored under a pseudonym (e.g. a random identification number) and is not merged with personal data about you (e.g. name, address, etc.). If the external service providers are given access to the data, this is done exclusively on our behalf and under our control. Technically, the software uses so-called "cookies" and "local storages" in particular to collect the following information: When was the website visited, with which device and with which browser, which IP address (anonymized) and which consents were given.

The revocation certificate of a previously granted consent is kept for three years. The storage is based on our accountability according to Art. 5 Para. 2 GDPR. This obliges us to comply with the processing of personal data in accordance with the General Data Protection Regulation. In contrast, the retention period in the regular limitation period according to Section 195 of the German Civil Code is three years. This limitation period begins at the end of the year in which the claim arose (Section 199 of the German Civil Code). The three-year limitation period therefore begins on December 31st and ends three years later on December 31st, midnight.

We use the marketing communication tool from Emarsys eMarketing Systems GmbH (hereinafter "Emarsys"), Zeppelinstrasse 2, 85399 Hallbergmoos, to manage our customers and for our marketing campaigns. If you have ordered something in our online shop or have created a customer account, we process the data you provided during registration for the purpose of processing the order process and for personalized customer communication. In order to be able to address you individually based on previous and current use of our website using various communication channels, e.g. via email and push notifications, and to make our offer more interesting for you as a user, we consolidate user data from all relevant data sources. For this purpose, we transmit to Emarsys in particular the following personal data of the users concerned:

• Pseudonymized email address,

• Name first Name,

• Birth date

• Telephone number

• Address details

• if applicable, aggregated information on the customer account history,

• Opt-ins for contact,

• First registration date,

• Customer number,

For this purpose, a cookie with a lifespan of 12 months is set when you use this website. We pass on the data collected via the cookie to Emarsys for evaluation in pseudonymized form. This serves our legitimate interest in the statistical-based optimization of our online offering. Personal references are excluded due to the anonymization.

The existing data sets are enriched with further information on individual usage behavior on our website. This allows, among other things, certain information on orders already placed or click-based product interests to be collected, assigned and evaluated. All of this information is processed exclusively in pseudonymized form.

This cookie-based analysis enables us to show you advertising on our website that is tailored to your interests.

The legal basis for the processing of data that goes beyond the storage of contact details in the database (legal basis Art. 6 Para. 1 lit. b GDPR) and the transmission of anonymized order data from the database (legal basis Art. 6 Para. 1 lit f. GDPR) is exclusively if you have given your express consent in accordance with Art. 6 Para. 1 lit. a GDPR.

Right of withdrawal

You have the right to withdraw your consent to personalized marketing at any time without giving reasons and with effect for the future.

If you do not agree to the future transmission of your data to Emarsys when using our websites, you have the option of completely deactivating Emarsys in your browser settings (see section 15).

In the event of revocation, it is possible that not all functions of our website will be fully available to you.

Further information on data processing by Emarsys can be found in the privacy policy at: https://www.emarsys.com/en/privacy-policy/

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them to their full extent.

You can revoke your consent to data processing using our Manage consent management service here

The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons and with effect for the future.

If you do not agree to the future transmission of your data to polyfill-fastly.net when using our websites, you have the option of completely deactivating polyfill-fastly.net in your browser settings (see section 15).

In the event of revocation, it is possible that not all functions of our website will be fully available to you.


Further information about data processing by polyfill-fastly.net can be found in the privacy policy at https://polyfill-fastly.net/v3/privacy-policy

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them in full.
You can revoke your consent to data processing using our Manage consent management service here

These websites use the web analysis tools of prudsys AG, Zwickauer Straße 16, 09112 Chemnitz https://prudsys.de/ , a software that is used to control and improve our online offerings, in particular to measure the use of our online offerings and to show you corresponding product recommendations. The data collected and used in this context is always stored under a pseudonym (e.g. a random identification number) and is not merged with personal data about you (e.g. name, address, etc.). If the external service providers are given access to the data, this is done exclusively on our behalf and under our control. Technically, the tracking tools used use so-called "cookies" and "web beacons" in particular to collect the following information: which pages are visited, when, how often and in what order, which products are searched for, which links or offers are clicked on and which orders are placed. If you do not want us to collect and use information about your use of the website in this way, you can object via our consent management service. For this purpose, a corresponding opt-out cookie is set on your computer that does not contain any data suitable for tracking, but simply makes it possible to recognize your objection to the data collection so that it is no longer carried out.  

The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons and with effect for the future.

If you do not agree to the future transmission of your data to prudsys when using our websites, you have the option of completely deactivating prudsys in your browser settings (see section 15).

In the event of revocation, it is possible that not all functions of our website will be fully available to you.


Further information on data processing by prudsys can be found in the privacy policy at https://prudsys.de/datenschutz/  

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them to their full extent.

You can revoke your consent to data processing using our Manage consent management service here

Our apps use Sentry, a service provided by Functional Software, Inc. dba Sentry, 132 Hawthorne Street, San Francisco, CA 94107, USA, to collect information about JavaScript errors in the app so that our developers can proactively fix these errors. Only the page a user was on when the error occurred, the type of error that occurred, the pseudonymized user identification number and the anonymized installation identification number browser information are processed. The legal basis for the processing of the data is Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in identifying errors in our apps. Further information can be found in the data protection information at https://sentry.io/privacy/ .

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons and with effect for the future.

If you do not agree to the future transmission of your data to Expo when using our websites, you have the option of completely deactivating Expo in your browser settings (see section 15).

In the event of revocation, it is possible that not all functions of our website will be fully available to you.


Further information on data processing by Expo can be found in the privacy policy at https://expo.io/privacy

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them in full.

You can revoke your consent to data processing using our Manage consent management service here

We use the TikTok pixel on our website from the provider TikTok Information Technologies UK Limited, One London Wall, 6th Floor, London EC2Y 5EB. This is a JavaScript code snippet that enables us, with your consent, to understand and track the activities of visitors to our website. The Tiktok pixel collects and processes information about visitors to our website or the devices they use (so-called event data).

Personal data, in particular your IP address and email address, as well as other information such as device ID, device type and operating system may be transferred to TikTok. TikTok uses, among other things, your email address or other login and device information to identify users of our website and assign them to a TikTok user account.

TikTok uses this data to show its users targeted and personalized advertising and to create interest-based user profiles. This data is anonymous and not visible to us and is only used by us to measure the effectiveness of advertising. We have no influence on how and which of your personal data TikTok processes.

Such processing of information by the TikTok pixel or access to information already stored on your device only takes place with your consent. The legal basis for the collection and transmission of personal data to TikTok is therefore Art. 6 Para. 1 Letter a of GDPR.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons and with effect for the future.

If you do not agree to the future transmission of your data to TikTok when using our websites, you have the option of completely deactivating TikTok in your browser settings (see section 15).

In the event of revocation, it is possible that not all functions of our website will be fully available to you.

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them in full.

You can revoke your consent to data processing using our Manage consent management service here

This collection and transmission of data is carried out by us and TikTok as joint controllers. We have concluded a corresponding data protection agreement with TikTok. It cannot be ruled out that TikTok will also transmit the information to servers outside the EU or EEA. For more information on how TikTok processes personal data and the options for exercising your rights vis-à-vis TikTok, please see TikTok's data policy at https://www.tiktok.com/legal/privacy-policy?lang=de-DE

If you are active in social networks, we use our online presence in the respective networks to communicate with you or to offer information about us there.

We would like to point out that your data may also be processed outside the European Union (EU). This could make it more difficult to enforce your rights.

Your data can also be processed within the social networks for market research and advertising purposes (e.g. usage profiles) in order to show your advertisements within and outside the networks that correspond to your presumed interests. For these purposes, cookies are usually stored on your computers in which your usage behavior and interests are stored.

We refer to the data protection declarations and information of the operators of the respective networks for a detailed description of the respective processing methods and the options for objection (opt-out).

We would also like to point out that requests for information and the assertion of data subject rights can be most effectively made with the providers. Only the providers have access to the user data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

The processing is carried out for the purpose of contact requests and communication, tracking, remarketing, reach measurement (e.g. access statistics, recognition of returning visitors). The legal basis is based on our legitimate interests, in accordance with Art. 6 Para. 1 Clause 1 Letter f of GDPR. We use the following services and service providers:

Facebook: Social network; Service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: facebook.com Privacy Policy: https://www.facebook.com/about/privacy ; Privacy Shield (ensuring data protection standards when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active ; Opt-out option: Advertising settings: https://www.facebook.com/settings?tab=ads ; Information on the agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum , Privacy Policy for Facebook Pages: https://www.facebook.com/legal/terms/information_about_page_insights_data

Instagram: Social network; Service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com/ Privacy Policy: http://instagram.com/about/legal/privacy

Pinterest: social network; service provider: Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA; website: https://policy.pinterest.com/de/imprint ; Privacy Policy: https://policy.pinterest.com/de/privacy-policy

Google/Youtube: social network; service provider: Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland; website: https://www.youtube.com/ ; Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de

19. Use of your data for advertising and market research purposes

In addition to processing your data to process your purchase at GDC, we also use your data for advertising and market research purposes. Of course, your data will only be passed on to our partner in an anonymized form. The legal basis for this transmission is Art. 6 Paragraph 1 Letter b of GDPR. You can object to the use of your personal data for advertising and market research purposes at any time, either in whole or for individual measures, without incurring any costs other than the transmission costs according to the basic rates. A message in text form to the contact details given above (e.g. email, fax, letter) is sufficient for this.

Below we describe how your personal data is processed when you subscribe to so-called push notifications via our services, e.g. in the settings of your app or in your browser. You can switch these push notifications on and off at any time in the system settings of your device. The following data is processed:

•Device type and year of manufacture

• Operating system

•Device token

•Registration and deregistration times

•Display and clicks on notifications

If you have subscribed to push notifications, we differentiate between registered users and non-registered users. Non-registered users are recognized by a device token, registered users are recognized by a device token and your (hashed) email address. We use our service providers

• Emarsys eMarketing Systems GmbH, Zeppelinstrasse 2, 85399 Hallbergmoos, Germany

The purpose of data processing is to deliver push messages upon request from the user, to document the user’s registration and for statistical evaluation.

The data will be stored for the duration of the push notification subscription.

The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR.

Right of withdrawal

You have the right to revoke your consent at any time without giving reasons and with effect for the future.

If you do not agree to the future transmission of your data to Emarsys and CrossEngage when using our websites, you have the option of completely deactivating both services in your browser settings (see section 15).


In the event of revocation, it is possible that not all functions of our website will be fully available to you.

You are not obliged to provide your personal data. The provision is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide the data could result in you not being able to use our websites at all or not being able to use them in full.

You can revoke your consent to data processing using our Manage consent management service here .

It is possible to save your login data in the respective operating system when logging in. Please note the respective data protection information of the manufacturer of the operating system (Data protection information Android: https://policies.google.com/privacy?hl=de&gl=de , Privacy Policy IOS: https://www.apple.com/legal/privacy/de-ww/ , since in this case the data is no longer held by GDC as the responsible party. The storage of the corresponding data protection notices may vary depending on the operating system.

If GDC processes your personal data, you are a data subject according to Art. 4 No. 1 GDPR with the following rights vis-à-vis GDC:

In accordance with Art. 15 GDPR, you can request confirmation from us as to whether we process personal data concerning you. If we process your personal data, you can request information from us about the following:

•the purposes of processing;

•the categories of your personal data that we process;

•the recipients or categories of recipients to whom we have or will disclose your personal data;

•(where possible) the envisaged period for which we will store your personal data, or, if not possible, the criteria used to determine that retention period;

•the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by us or a right to object to such processing;

•the existence of a right to lodge a complaint with a supervisory authority;

•all available information about the origin of the data, if the personal data was not collected from you;

•the existence of automated decision-making, including profiling (Article 22 (1) and (4) GDPR) and – at least in these cases – meaningful information about the logic involved, as well as the scope and intended effects of such processing for you.

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you can request to be informed of the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.

According to Art. 16 GDPR, you have the right to request that we correct and/or complete any inaccurate personal data concerning you.

You can request that we delete your personal data immediately in accordance with Art. 17 GDPR. We are obliged to delete your data immediately if one of the following reasons applies:

•Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

•You withdraw your consent on which we base the processing in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.

•You object to the processing pursuant to Art. 21 Para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 Para. 2 GDPR.

•Your personal data has been processed unlawfully.

•The erasure of your personal data is necessary to fulfill a legal obligation under Union or Member State law to which we are subject.

•Your personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR.

If we have made your personal data public and are obliged to delete it pursuant to Art. 17 Para. 1 GDPR, we will take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to inform the data controllers who process the personal data that you, as the data subject, have requested that they delete all links to your personal data or copies or replications of your personal data.

•to exercise the right to freedom of expression and information;

•to fulfill a legal obligation to which we are subject or to perform a task which is in the public interest or in the exercise of official authority vested in us;

•for reasons of public interest in the area of ​​public health (Article 9 (2) (h) and (i) and Article 9 (3) GDPR);

•for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the said right is likely to make the achievement of the objectives of this processing impossible or seriously compromises it, or

•to assert, exercise or defend legal claims.

Under the following conditions, you can request the restriction of the processing of your personal data in accordance with Art. 18 GDPR:

•if you contest the accuracy of your personal data for a period enabling us to verify the accuracy of the personal data;

•if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of the personal data instead;

•if we no longer need your personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or

•if you have objected to processing pursuant to Art. 21 Para. 1 GDPR and it has not yet been determined whether our legitimate reasons outweigh your reasons.

If the processing of your personal data has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

If you have asserted your right to rectification, erasure or restriction of processing against us, we are obliged in accordance with Art. 19 GDPR to inform all recipients to whom we have disclosed your personal data of this fact, unless doing so should prove impossible or involve disproportionate expenditure. You have the right to be informed by us of these recipients.

According to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format. In addition, you have the right to transmit this data to another responsible party without hindrance from us, provided that

•the processing is based on consent (Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR) or on a contract pursuant to Art. 6 Para. 1 lit. b GDPR and

•the processing is carried out using automated procedures.

In exercising this right, you also have the right to have your personal data transmitted directly from us to another controller, where technically feasible. This must not affect the freedoms and rights of other persons. The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

According to Art. 21 GDPR, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) (e) or (f) GDPR, for reasons related to your particular situation; this also applies to profiling based on these provisions. We will not subsequently process your personal data any further unless we can demonstrate compelling legitimate grounds for our processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

You have the right to revoke your declaration of consent to data protection at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. Automated decision in individual cases including profiling. According to Art. 22 GDPR, you have the right not to be subjected to a decision based exclusively on automated processing - including profiling - that has legal consequences for you or significantly affects you in a similar way. This does not apply if the decision

•is necessary for the conclusion or performance of a contract between you and us,

•is permitted by Union or Member State law to which we are subject and which contains appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or

•with your express consent.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data by us infringes the GDPR.

The responsible supervisory authority for GDC in Germany is:

North Rhine-Westphalian Supervisory Authority for Data Protection and Freedom of Information
Cavalry Str. 2-4
40213 Dusseldorf
Phone: +49 211384240
Email: Poststelle@ldi.nrw.de

Our websites contain links to external providers' websites. When setting the link, we carefully checked the content of external providers' websites to see whether they violated any applicable civil or criminal laws. However, it cannot be ruled out that this content may be subsequently changed by the respective providers. If you believe that linked external sites violate applicable law or contain other inappropriate content, please let us know. We will review your notice and remove the external link if necessary. We are not responsible for the content and availability of the linked external websites.

If you have any questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data, as well as revocation of consent granted or objection to a specific use of data, please contact us directly using the contact details provided in this data protection declaration.

This privacy policy only applies to the content of GDC. Other data protection and data security regulations apply to the linked external content. You can find out who is responsible for these offers in the respective imprint or privacy policy.

Due to the further development of our websites or the implementation of new technologies, it may become necessary to change this privacy statement. We therefore reserve the right to change the privacy statement at any time with effect for the future. The version available at the time of your visit to the website always applies.

As of: 31.10.2023
Version 3.04