Data protection
Data protection declaration according to the GDPR
Name and address of the person responsible
The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is
Fa
52070 Aachen
Tel.: + 49 (0) 241- 94 64 215
Email: info@mycl-turell.de
Website: www.mycl-turell.de
- Name and address of the data protection officer
The data protection officer of the controller is
Company
- Data protection officer –
Daniela Porps
52070 Aachen
Tel.: + 49 (0) 241-94 64 216
Email: daniela.porps@motorrad-meyer.de
III. General information about data processing
1. Scope of processing personal data
Your personal data (e.g.b Salutation, name, address, email address, telephone number, bank details, credit card number) are only processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following regulations inform you about the type, scope and purpose of the collection, processing and use of personal data. This data protection declaration only applies to our website www.mycl-turell.de. If you are redirected to other sites via links on our site, please inform yourself there about how your data is handled.
-
Legal basis for the processing of personal data
If we obtain the consent of the data subject for processing personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis.
When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. To the extent that processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR as the legal basis. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as the legal basis. If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the person concerned do not outweigh the first-mentioned interest, then Art. 6 para. 1 lit. f GDPR as the legal basis for processing.
-
Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data to conclude or fulfill a contract.
- Provision of the website and creation of log files
-
Description and scope of data processing
Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
(1) Information about the browser type and version used
(2) The user's operating system
(3) The user's Internet service provider
(4) The user's IP address
(5) Date and time of access
(6) Websites from which the user's system accesses our website
(7) Websites that are accessed by the user's system via our website
The data is also stored in the log files of our system. This does not affect the user's IP addresses or other data that enables the data to be assigned to a user. This data is not stored together with other personal data of the user.
- Legal basis for data processing
The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f GDPR
- Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. To do this, the user's IP address must remain stored for the duration of the session. These purposes also include our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR
- Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. If the data is collected to provide the website, this is the case when the respective session has ended.
- Possibility of objection and removal
The collection of data to provide the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility for the user to object.
- Use of cookies
- a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or stored on the user's computer system by the Internet browser. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again.
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.
The following data is stored and transmitted in the cookies:
(1) Language settings
(2) Items in a shopping cart
(3) Log-in information
- b) Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR
- c) Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change.
We need cookies for the following applications:
(1) Shopping cart
(2) Adopting language settings
(3) Remembering search terms
The user data collected through technically necessary cookies is not used to create user profiles.
These purposes also include our legitimate interest in processing personal data in accordance with Art. 6 para. 1 lit. f GDPR
- d) Duration of storage, possibility of objection and removal
Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, as a user you also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.
-
Use of Google Analytics for web analysis
Our website uses Google Analytics, a web analysis service provided by Google Inc. (www.google.de). Google Analytics uses so-called “Cookies”, text files that are stored on your computer and which enable analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also choose to collect the data generated by the cookie and related to your use of the website (incl. Your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=deAs an alternative to the browser plug-in, you can click this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie is stored on your device. If you delete your cookies, you have to click the link again. - Google Adwords
(1) We use the Google Adwords service to draw attention to our attractive offers on external websites using advertising materials (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. Our interest is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.
(2) These advertising materials are delivered by Google via so-called “ad servers”. To do this, we use ad server cookies, through which certain parameters can be measured to measure success, such as display of ads or clicks by users. If you reach our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies typically expire after 30 days and are not intended to be used to personally identify you. The analysis values for this cookie are usually the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user does not would like to be addressed more).
(3) These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Adwords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Each Adwords customer is assigned a different cookie. Cookies cannot therefore be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. Based on these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of advertising materials; in particular, we cannot identify users based on this information.
(4) Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and will therefore inform you according to our level of knowledge: By integrating AdWords Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or If you have not logged in, there is a possibility that the provider will find out and store your IP address.
OBJECTION / PREVENTION OF TRACKING
(5) You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular the suppression of third-party cookies means that you do not receive any advertisements from third-party providers; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com, https://www.google.de/settings /ads, whereby this setting will be deleted if you delete your cookies c.) by deactivating the interest-based ads of the providers that are part of the self-regulatory campaign “About Ads” via the link http://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies delete; d) by permanently deactivating it in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to fully use all of the functions of this offer.
(6) The legal basis for the processing of your data is Art.6 Para.1 p.1 lit. f GDPR. Further information about data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html . Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org . Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .
- Newsletter
- Description and scope of data processing
You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input mask is transmitted to us.In order to be sure that no errors were made when entering the email address, we use the so-called Double opt-in procedure (DOI procedure): After you have entered your email address in the registration field and given your consent to receive the newsletter, we will send you a confirmation link to the email address you provided. Only when you click on this confirmation link will your email address be added to our mailing list for sending the newsletter. The legal basis for this data processing is Article 6 paragraph 1 letter a) GDPR.In addition, the following data is collected when registering:
Date and time of registration
Your consent will be obtained for the processing of data as part of the registration process and reference will be made to this data protection declaration.
The data will not be passed on to third parties in connection with data processing for sending newsletters. The data is used exclusively for sending the newsletter.
- Legal basis for data processing
The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 lit. a GDPR.
- Purpose of data processing
The collection of the user's email address serves to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.
- Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user's email address is therefore stored as long as the subscription to the newsletter is active. The other personal data collected as part of the registration process is usually deleted after a period of seven days.
The subscription to the newsletter can be canceled at any time by the affected user. For this purpose, there is a corresponding link in every newsletter. This also makes it possible to revoke your consent to the storage of personal data collected during the registration process.
VII. Email advertising for similar goods and services
At the end of each email, you will be given the opportunity to opt-in with regard to the future use of your email address for the previously stated purpose (advertising comparable goods and services) by
VIII. Registration
- Description and scope of data processing
On our website we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. A transfer of data to third parties does not take place. The following data is collected as part of the registration process:
(1) Name
(2) Email address
(3) Street and number.
(4) ZIP code
(5) CITY
(6) Country
(7) TEL.
As part of the registration process, the user's consent to process this data is obtained.
- Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR. If the registration serves to fulfill a contract to which the user is a party or to carry out pre-contractual measures, the additional legal basis for processing the data is Art. 6 para. 1 lit. b GDPR
- Purpose of data processing
The user must register in order to provide certain content and services on our website. Registration of the user is necessary to fulfill a contract with the user or to carry out pre-contractual measures.
- Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.
This is the case for the data collected during the registration process if the registration on our website is canceled or changed.
This is the case during the registration process to fulfill a contract or to carry out pre-contractual measures if the data is no longer required to carry out the contract. Even after the contract has been concluded, it may be necessary to store the contractual partner's personal data in order to comply with contractual or legal obligations.
As a user, you have the option to cancel your registration at any time. You can change the data stored about you at any time.
If the data is necessary to fulfill a contract or to carry out pre-contractual measures, early deletion of the data is only possible unless contractual or legal obligations prevent deletion.
- Contact form and email contact
- Description and scope of data processing
There is a contact form on our website that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. This data is:
(1) Name
(2) Email address
(3) Street and number.
(4) ZIP code
(5) CITY
(6) Country
(7) TEL.
Your consent will be obtained for the processing of the data as part of the sending process and reference will be made to this data protection declaration.
Alternatively, you can contact us using the email address provided. In this case, the user's personal data transmitted with the email will be stored.
In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.
- Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR.
The legal basis for the processing of data transmitted when sending an email is Art. 6 para. 1 lit. f GDPR If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR
- Purpose of data processing
The processing of the personal data from the input mask serves us solely to process the contact. If you contact us via email, this also represents the necessary legitimate interest in processing the data. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
- Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with the user has ended. The conversation ends when it can be seen from the circumstances that the matter in question has been finally clarified.The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
- Transfer of data to third parties
1. Payment service provider
This website offers various payment options such as:b Advance payment, via PayPal, Amazon and payment on account. For this purpose, payment data may be transmitted to payment service providers with whom we work.We will pass on your personal data to third parties exclusively to the service partners involved in the contract processing and the credit institution responsible for payment matters. However, in cases where your personal data is passed on to third parties, the scope of the data transmitted is limited to the necessary minimum.Further information on the processing of personal data by payment service providers can be found in their data protection policies.
- Shipping company
To deliver orders, we work with external shipping service providers (e.g.b DHL) together. These shipping service providers receive the following data from us to carry out the respective order:
- Your name
- Your delivery address
- if necessary Your postal number (if you would like to have the order delivered to a DHL packing station)
- if necessary Your email address (if the shipping service provider would like to inform you by email about the expected delivery date)
You can find further information about the processing of personal data by shipping service providers in their privacy policies.
Paqato
When your goods are shipped, the order header data is used to track the shipment and identify problem cases in accordance with. Art 6 para. 1 lit. b (as part of contractual/pre-contractual relationships), Art. 6 para. 1 lit. f (other requests) GDPR processed.The user information is stored and processed in the PAQATO shipping analysis system from PAQATO GmbH, Johann-Krane-Weg 6, 48149 Münster, Federal Republic of Germany, in order to be able to deliver the goods faster and without errors and to ensure smooth communication (legitimate interest in accordance with. Art 6 para. 1 lit. f GDPR). We delete the data if it is no longer required. We review the necessity every two years; The statutory archiving obligations also apply.
- Social media networks
As part of advertising campaigns, we pass on data to social network providers in accordance with data protection law. We and our advertising partners use your data for personalized advertising that is presented to you on our services and on the websites and apps of other providers. To do this, we and our advertising partners use standard internet technologies. This allows us to advertise in a more targeted manner so that we can only provide you with advertising and offers that are actually relevant to you. This allows us to better meet our users' needs for personalization and discovery of new products and to keep you interested in our services in the long term through a more personal shopping experience. The advertising formats used by us and our advertising partners include advertisements on social networks (e.g.b Facebook Ads, Instagram Ads, YouTube Video Ads).
- Information about social media fan pages
We maintain social media profiles on the social networks Facebook and Instagram (so-called “fan pages”). We regularly publish and share content, offers and product recommendations on our fan pages. Every time you interact with our fan pages or other Facebook or Instagram websites, the operators of the social networks record your usage behavior using cookies and similar technologies. Fan page operators can view general statistics on the interests and demographic characteristics (such as age, gender, region) of the fan page audience. If you use social networks, the type, scope and purposes of processing the data in social networks are primarily determined by the operators of the social networks.If you communicate directly with us via our fan pages or share personal content with us,
Processing of your data by Facebook
Please note that when you use our fan pages, Facebook also processes your data for its own purposes, which are not reflected in this data protection declaration. We have no influence on these data processing operations on Facebook. In this respect, we refer to the data protection information of the respective social networks:
- Data protection information Facebook
- Instagram Privacy Policy | Instagram Help Center
XII. Proven Expert
We use “Proven Expert”, a service from Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin, Germany (hereinafter referred to as: “Proven Expert”) on our website. We use Proven Expert to include customer reviews on our website. As a customer, you have the opportunity to rate services on our website. When you create a review, Proven Expert collects and stores your email address as well as technical data such as your IP address and information about the web browser you use in an associated log file. In addition, Proven Expert also stores other voluntary information if you provide it.
We use Proven Expert to give you the opportunity to rate services on our website. At the same time, the use of Proven Expert serves quality assurance and optimization purposes. In order to ensure the authenticity of a review and to prevent misuse of the review system, for example through spam or multiple reviews by the same user, the aforementioned data must be processed and stored by Proven Expert. The use of Proven Expert therefore serves to maintain the security and integrity of our information technology systems. This also lies in our legitimate interest in processing the above information. If you have given us your consent, the legal basis is Art. 6 para. 1 p. 1 lit. a) GDPR. Furthermore, the legal basis is Art. 6 para. 1 p. 1 lit. f) GDPR.
You can revoke your consent to the processing of your personal data at any time. You can also object to the storage of your personal data at any time. We would like to point out that in this case you cannot use the rating system. You can declare your revocation or objection by sending an email to our email address given in the legal notice. You can completely prevent Proven Expert from processing and storing the above data by not using the rating system.
The data will be deleted as soon as it is no longer required to achieve the purpose of your collection. This is the case if your review is deleted. Deletion will not occur if further processing and storage of your personal data is necessary in individual cases to assert, exercise or defend legal claims. In this case, we have a legitimate interest in further processing and storing your personal data. The legal basis is Art. 6 para. 1 p. 1 lit. f) GDPR. Deletion will not take place even if we are obliged to continue storing your personal data due to legal regulations.
Third party information: Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin, Germany. You can find further information from the third-party provider on data protection on the following Proven Expert website: https://www.provenexpert.com/de-de/datenschutzbestimmungen/.
XIII. Rights of the data subject
If your personal data is processed, you are the data subject.Sd GDPR and you have the following rights towards the person responsible:
-
Right to information
You can request confirmation from the person responsible as to whether personal data concerning you is being processed by us. If such processing occurs, you can request information from the person responsible about the following information:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data which are processed;
(3) the recipients or the categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the Storage period;
(5) the existence of a right to correct or delete the personal data concerning you, a right to restrict processing by the person responsible or a right to object to this processing;
(6) the existence of a right to lodge a complaint with a Supervisory authority;
(7) all available information about the origin of the data if the personal data is not collected from the data subject;
(8) the existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you can request to have the appropriate guarantees in accordance with. Art 46 GDPR to be informed in connection with the transfer.
2. Right to rectification
You have the right to rectification and/or completion from the person responsible if the processed personal data concerning you is incorrect or incomplete. The person responsible must make the correction immediately.
3. Right to restriction of processing
You can request the restriction of the processing of personal data concerning you under the following conditions:
(1) if you verify the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse the deletion of the personal data and instead the restriction of the use of the personal data requests;
(3) the person responsible no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
(4) if you object to the processing in accordance with Art . 21 para. 1 GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or processed for reasons of important public interest of the Union or a Member State.
Has the processing been restricted in accordance with the above.G Requirements are restricted, you will be informed by the person responsible before the restriction is lifted.
-
Right to deletion
a) Obligation to delete
You can demand from the person responsible that the personal data concerning you be deleted immediately, and the person responsible is obliged to to delete this data immediately if one of the following reasons applies:
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent to which the processing is based in accordance with. Art 6 para. 1 lit. a or kind. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
(3) You place according to. Art 21 para. 1 GDPR, you object to the processing and there are no overriding legitimate reasons for the processing, or you submit in accordance with. Art 21 para. 2 GDPR object to the processing.
(4) The personal data concerning you was processed unlawfully.
(5) The deletion of the personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
(6) The personal data concerning you was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR collected.
b) Information to third parties
Has the person responsible made the personal data concerning you public and is he in accordance with. Art 17 para. 1 GDPR is obliged to delete them, he will take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you, as the data subject, want them to be deleted any links to this personal data or any copies or replications of this personal data.
c) Exceptions
The right to deletion does not exist if the processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) to Fulfillment of a legal obligation requiring processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with. Art 89 para. 1 GDPR, insofar as the law mentioned under section a) is likely to make the achievement of the objectives of this processing impossible or seriously impair it, or
(5) to assert, exercise or defend legal claims.
5. Right to information
If you have asserted the right to rectification, deletion or restriction of processing against the person responsible, the person responsible is obliged to disclose it to all recipients to whom the personal data concerning you has been disclosed have been notified of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves disproportionate effort.
You have the right to be informed about these recipients by the person responsible.
6. Right to data portability
You have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, common and machine-readable format. You also have the right to transmit this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that
(1) the processing is based on consent in accordance with. Art 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract in accordance with. Art 6 para. 1 lit. b GDPR is based and
(2) the processing is carried out using automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one person responsible to another person responsible, to the extent that this is technically feasible. The freedoms and rights of other people must not be impaired by this. The right to data portability does not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. Right to object
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. e or f GDPR, to lodge an objection; This also applies to profiling based on these provisions.
The person responsible will no longer process the personal data concerning you unless he can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If the personal data concerning you is processed for the purpose of direct advertising, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; This also applies to profiling insofar as it is connected to such direct advertising.
If you object to the processing for direct advertising purposes, the personal data concerning you will no longer be processed for these purposes. In connection with the use of information society services - regardless of Directive 2002/58/EC - you have the opportunity to exercise your right to object using automated procedures that use technical specifications. -
Right to revoke your data protection declaration of consent
You have the right to revoke your data protection declaration of consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent before its revocation.
9. Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effects on you or similarly significantly affects you. This does not apply if the decision
(1) is necessary for the conclusion or performance of a contract between you and the controller,
(2) due to Union or Member State law to which the controller is subject is subject to, is permissible and these legal provisions contain appropriate measures to safeguard your rights and freedoms as well as your legitimate interests or
(3) takes place with your express consent.
However, these decisions may not be based on special categories of personal data according to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.
With regard to the cases mentioned in (1) and (3), the person responsible takes appropriate measures to protect the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the person responsible, to present their own point of view and to challenge the decision.
10. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged violation if you are of the opinion that the processing of personal data concerning you violates the GDPR. The supervisory authority to which the complaint was submitted will inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.