InnoButler Logo

Privacy Policy

1. Introduction

With the following information, we would like to provide you as the "data subject" with an overview of the processing of your personal data by us and your rights under the data protection laws. It is fundamentally possible to use our website without entering personal data. However, if you wish to avail of special services of our company via our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain consent from you.

The processing of personal data, such as your name, address, or e-mail address, always complies with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection provisions applicable to "Company Ltd." Through this privacy policy, we want to inform you about the extent and purpose of the personal data we collect, use, and process.

As the processing controller, we have implemented numerous technical and organizational measures to ensure the most complete protection possible for personal data processed via this website. Nevertheless, internet-based data transfers can generally have security gaps, so absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us via alternative means, such as by telephone or by post.

2. Controller

The controller in the sense of the GDPR is:

InnoButler GmbH
Erich-Weinert-Str. 30
10439 Berlin

Telefon: +49 151 745 90 109
Email: awoellwarth@innobutler.com

CEO and Founder: Alexander Woellwarth-Lauterburg

3. Data Protection Officer

You can reach the data protection officer as follows: datenschutz@innobutler.com

You can contact our data protection officer directly at any time with any questions or suggestions about data protection.

4. Legal Basis for Processing

Art. 6 para. 1 lit. a GDPR (in conjunction with § 25 para. 1 TTDSG) serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which you are a party, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 para. 1 lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in cases of inquiries about our products or services.

If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 para. 1 lit. c GDPR.

In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor in our premises were injured and his name, age, health insurance data or other vital information would have to be passed on to a doctor, a hospital or other third parties. Then the processing would be based on Art. 6 para. 1 lit. d GDPR.

Finally, processing operations could be based on Art. 6 para. 1 lit. f GDPR. This legal basis covers processing operations that are not covered by any of the aforementioned legal bases, if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. Such processing operations are particularly permitted to us because they were specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if you are a customer of our company (Recital 47 sentence 2 GDPR).

5. Transfer of Data to Third Parties

There will be no transfer of your personal data to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

  1. you have given your explicit consent to this according to Art. 6 para. 1 lit. a GDPR,

  2. the transfer according to Art. 6 para. 1 lit. f GDPR is permissible to safeguard our legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,

  3. in the event that there is a legal obligation to pass on the data according to Art. 6 para. 1 lit. c GDPR, and

  4. this is legally permissible and necessary according to Art. 6 para. 1 lit. b GDPR for the processing of contractual relationships with you.

As part of the processing operations described in this privacy policy, personal data may be transferred to the USA. The USA does not have an adequate level of data protection (ECJ: Schrems II judgment). In particular, US investigative authorities can obligate US companies to disclose or disclose personal data without the affected persons being able to effectively take legal action against this. Therefore, there is basically the possibility that your personal data will be processed by US investigative authorities. We have no influence on these processing activities.

To protect your data, we have concluded agreements on order processing based on the standard contractual clauses of the European Commission. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent according to Art. 49 para. 1 lit. a) GDPR can serve as the legal basis for the transfer to third countries. This does not apply to data transfers to third countries for which the European Commission has issued an adequacy decision according to Art. 45 GDPR.

6. Technology

6.1 SSL/TLS Encryption

This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you send to us as the operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

We use this technology to protect your transmitted data.

6.2 Data Collection

When Visiting the Website When merely using our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). Our website collects a range of general data and information each time a page is called up by you or an automated system. This general data and information are stored in the server's log files. Possible collected data can include

  1. The types and versions of browsers used,

  2. The operating system used by the accessing system,

  3. The website from which an accessing system reaches our website (so-called referrers),

  4. The sub-pages that are accessed via an accessing system on our website,

  5. The date and time of access to the website,

  6. A truncated internet protocol address (anonymised IP address), and,

  7. The internet service provider of the accessing system.

When using this general data and information, we do not draw any conclusions about you. Instead, this information is needed to

  1. Correctly deliver the content of our website,

  2. Optimise the content of our website and its advertising,

  3. Ensure the long-term functionality of our IT systems and the technology of our website, and

  4. Provide law enforcement authorities with the necessary information for prosecution in the event of a cyber attack.

This data and information collected by us are therefore statistically evaluated and further analysed with the aim of increasing data protection and data security in our company, to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files are stored separately from all personal data provided by an affected person.

The legal basis for data processing is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above.

6.3 Encrypted Payment Transactions

If there is an obligation to provide us with your payment data (e.g., account number for direct debit authorisation) after concluding a fee-based contract, this data is required for payment processing.

Payment transactions using common means of payment (Visa/MasterCard or direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock symbol in your browser line.

We use this technology to protect your transmitted data.

6.4 Hosting by Webflow

We host our website with Webflow. Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for displaying the page, providing certain website functions and ensuring security (necessary cookies).

The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter: Webflow).

When you visit our website, your personal data is processed on Webflow's servers. This can also involve the transfer of personal data to the company Webflow in the USA.

The use of Webflow is based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website possible.

We have concluded a contract for order processing. This is a contract required under data protection law, which ensures that Webflow processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Further information on privacy regulations can be found at: https://webflow.com/legal/privacy

6.5 GoDaddy

We use GoDaddy for our website, a website construction system for hosting our domain. The service provider hosted is GoDaddy.com LLC, Corporate Headquarters 14455 N. Hayden Rd., Ste. 226, Scottsdale, AZ 85260 USA (hereinafter referred to as "GoDaddy").

Personal data collected on this website is stored on GoDaddy's servers. This may include, among others, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access, and other data generated through a website.

The use of GoDaddy is for the purpose of contract fulfillment towards our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 Para. 1 lit. f GDPR).

GoDaddy will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions regarding this data. Further processing on other servers than the aforementioned GoDaddy ones only takes place within the framework communicated below.

GoDaddy processes data from you, among others, in the USA. We would like to point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can be associated with various risks for the legality and security of data processing.

As the basis for data processing for recipients based in third countries (outside the EU, Iceland, Liechtenstein, Norway, especially in the USA) or data transfer to these countries, GoDaddy uses so-called standard contractual clauses (Art. 46 Para. 2 and 3 GDPR). Standard contractual clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data also meet the European data protection standard when they are transferred to third countries and stored there. Through these clauses, GoDaddy commits to comply with the European data protection level when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on the EU Commission's implementing decision.

Learn more about the data processed through the use of GoDaddy in the privacy policy at https://de.godaddy.com/legal/agreements/privacy-policy.

7. Cookies

7.1 General Information about Cookies

Cookies are small files that your browser automatically creates and stores on your IT system (laptop, tablet, smartphone, etc.) when you visit our site.

The cookie stores information resulting from the specific device used. However, this does not mean that we directly obtain knowledge of your identity.

The use of cookies is designed to make our offer more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after leaving our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specified period. If you visit our site again to use our services, it is automatically recognized that you have been with us before and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate our offer for the purpose of optimization. These cookies allow us to automatically recognize that you have already visited our site when you visit our site again. The cookies set in this way are automatically deleted after a defined period. The respective storage duration of the cookies can be taken from the settings of the consent tool used.

7.2 Legal Basis for the Use of Cookies

The data processed by the cookies, which are necessary for the proper functioning of the website, are required to safeguard our legitimate interests and those of third parties according to Art. 6 Para. 1 lit. f GDPR.

For all other cookies, you have given your consent in the sense of Art. 6 Para. 1 lit. a GDPR via our opt-in cookie banner.

7.3 Information on Avoiding Cookies in Common Browsers

You always have the option to delete cookies, allow only selected cookies, or completely deactivate cookies through the settings of your used browser. More information can be found on the support pages of the respective providers:

7.4 Cookiebot (Consent Management Tool)

We use the consent management tool "Cookiebot" from Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. This service allows us to obtain and manage the consent of website visitors for data processing.

Cookiebot collects data generated by end users who use our website. When an end user gives consent via the cookie consent tool, the following data is automatically logged at Cookiebot:

The key and the consent status are also stored in the end user's browser in the "CookieConsent" cookie, so that the website can automatically read and follow the end user's consent for all subsequent page requests and future end user sessions for up to 12 months. The key is used for the proof of consent and for an option with which it can be checked whether the consent status stored in the end user's browser is unchanged compared to the original consent that was sent to Cybot.

The functionality of the website is not guaranteed without processing. The "CookieConsent" cookie set by Cookiebot is classified as necessary.

Cybot is the recipient of your personal data and acts as a processor for us.

Detailed information on the use of Cookiebot can be found at: https://www.cookiebot.com/de/privacy-policy/.

8. Content of our website

8.1 Data processing when opening a customer account and for contract processing

According to Art. 6 para. 1 lit. b GDPR, personal data is collected and processed when you provide it to us for the execution of a contract or when opening a customer account. The data collected can be seen from the respective input forms. Deleting your customer account is possible at any time and can be done by sending a message to the address of the responsible person mentioned above. We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked considering tax and commercial law retention periods and deleted after these periods, unless you have expressly consented to further use of your data or we have reserved the right to further use of data legally allowed, about which we will inform you accordingly.

8.2 Data processing for identity verification

If necessary, we check your identity based on Article 6 paragraph 1 lit. b and lit. f GDPR using information from service providers. The authorization results from the protection of your identity and the prevention of attempts at fraud at our expense. The fact and result of our inquiry will be stored in your customer account or guest account for the duration of the contractual relationship.

8.3 Contact / Contact form

Personal data is collected when you contact us (e.g., via a contact form or email). The data collected in the case of using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request according to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been processed conclusively; this is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and that there are no statutory retention obligations.

9. Our Activities on Social Networks

To communicate with you and inform you about our services on social networks, we have our own pages there. When you visit one of our social media pages, we are, in terms of Art. 26 of the GDPR, jointly responsible with the provider of the respective social media platform for the triggered processing operations.

We are not the original provider of these pages but use them within the framework offered to us by the respective providers. Therefore, we would like to point out that your data may also be processed outside the European Union or the European Economic Area. This use may entail data protection risks for you, as the enforcement of your rights e.g., to information, deletion, objection, etc., could be complicated, and the processing in social networks often serves directly for advertising purposes or to analyze user behavior by the providers, without us being able to influence it. If usage profiles are created by the provider, cookies are often used, or the usage behavior is assigned to your own member profile of the social networks.

The described processing operations of personal data are carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest and the legitimate interest of the respective provider to communicate with you in a modern way or to inform you about our services. If you have to give consent to the respective providers for data processing as a user, the legal basis refers to Art. 6 para. 1 lit. a GDPR in conjunction with Art. 7 GDPR.

Since we do not have access to the data stocks of the providers, we point out that you can best assert your rights (e.g., to information, rectification, deletion, etc.) directly with the respective provider. Further information on the processing of your data in social networks is listed below for the respective social network provider we use:

9.1 LinkedIn

LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
Privacy policy: https://www.linkedin.com/legal/privacy-policy

10. Social Media Plugins

10.1 LinkedIn Plugin

We have integrated components of LinkedIn Corporation on this website. LinkedIn is an internet-based social network that allows users to connect with existing business contacts and make new business contacts.

The operator company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For privacy matters outside the USA, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

Each time our website, equipped with a LinkedIn component (LinkedIn plugin), is accessed, this component causes the browser you are using to download a corresponding display of the LinkedIn component. More information about the LinkedIn plugins can be found at https://developer.linkedin.com/plugins. During this technical process, LinkedIn becomes aware of which specific subpage of our website you visited.

If you are logged into LinkedIn at the same time, LinkedIn recognizes each time you visit our website and throughout the duration of the respective stay on our website, which specific subpage of our website you visit. This information is collected by the LinkedIn component and assigned by LinkedIn to your LinkedIn account. If you press a LinkedIn button integrated on our website, LinkedIn assigns this information to your personal LinkedIn user account and stores this personal data.

LinkedIn always receives information via the LinkedIn component that you have visited our website if you are logged into LinkedIn at the same time as you access our website; this happens regardless of whether you click on the LinkedIn component or not. If you do not want this information to be transmitted to LinkedIn, you can prevent the transmission by logging out of your LinkedIn account before accessing our website.

LinkedIn offers the option to unsubscribe from email messages, SMS messages, and targeted ads, as well as manage ad settings at https://www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame, who can set cookies. Such cookies can be rejected at https://www.linkedin.com/legal/cookie-policy. LinkedIn's applicable privacy policy can be found at https://www.linkedin.com/legal/privacy-policy. LinkedIn's cookie policy can be found at https://www.linkedin.com/legal/cookie-policy.

11. Web Analysis

11.1 GStatic

We use the GStatic service on our site from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland. The legal basis for the transmission of personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR and Art. 9 para. 2 lit. a GDPR, which you have given on our website.

GStatic is a background service used by Google to retrieve static content, reducing bandwidth usage and pre-loading necessary catalog files. The service loads, in particular, background data for Google Fonts and Google Maps.

In this context, pseudonymized usage profiles may be created and cookies (see "Cookies") may be used. The information generated by the cookie about your use of this website may include:

As part of the processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States.

These processing operations are carried out only with the express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time. For more information on revoking your consent, see either the consent itself or at the end of this privacy policy.

Further information on the handling of transferred data can be found in the provider's privacy policy at https://policies.google.com/privacy.

The provider offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

We use Google Analytics 4 (GA4) on our websites, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Further information on data protection can be found at: https://support.google.com/analytics/answer/12017362?hl=de.

11.2 LinkedIn Analytics

We use the retargeting tool as well as the conversion tracking of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland (LinkedIn) on this website.

For this purpose, the LinkedIn Insight Tag is integrated on our website, which allows LinkedIn to collect statistical data about your visit and use of our website and provide us with corresponding aggregated statistics. In addition, the service serves to display interest-specific and relevant offers and recommendations to you after you have informed yourself on the website about certain services, information, and offers. The related information is stored in a cookie.

The following data are generally collected and processed:

These processing operations are carried out only with the express consent in accordance with Art. 6 para. 1 lit. a GDPR. Your data is stored until you withdraw your consent.

You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited. The personal data is kept as long as it is necessary for the fulfillment of the processing purpose. The data will be deleted as soon as they are no longer necessary for the purpose.

In the context of processing via LinkedIn, data can be transferred to the USA and Singapore. The security of the transfer is regularly secured via so-called standard contractual clauses, which ensure that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to establish an adequate level of security, consent in accordance with Art. 49 para. 1 lit. a GDPR will be obtained from you.

Further information on LinkedIn's privacy policy can be found at: https://de.linkedin.com/legal/privacy-policy.

11.3 Microsoft Clarity

We use the service Microsoft Clarity ("Clarity"), a web analytics service provided by Microsoft Corp., One Microsoft Way, Redmond, Washington, USA, on our websites.

In this context, pseudonymous usage profiles are created and cookies are set on your device.

Processed data include, among others:

The information is used to evaluate the use of the website, to compile reports about the website activities and to provide further services connected with the website use and the internet use for the purposes of market research and demand-oriented design of our websites.

These processing operations are carried out only with explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

You can view Microsoft's privacy policy at: https://privacy.microsoft.com/de-de/privacystatement.

12. Plugins and Other Services

12.1 Google WebFonts

Our website uses so-called web fonts for a uniform representation of fonts. The Google WebFonts are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

These processing operations are carried out only with explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

For more information on Google WebFonts and Google's privacy policy, visit: https://developers.google.com/fonts/faq; https://www.google.com/policies/privacy/.

12.2 jQuery and jQueryUI (use of ajax.googleapis.com)

The website uses Ajax and jQuery or jQueryUI technologies, which optimize loading speeds. In this context, program libraries are called up from Google servers. Google's CDN (Content delivery network) is used. If you have used jQuery on another page from the Google CDN before, your browser will resort to the copy stored in the cache. If this is not the case, it requires a download, whereby data from your browser reach Google!Inc. ("Google"). Your data will be transferred to the USA.

You can learn more at: https://developers.google.com/speed/libraries/#jquery and the privacy policy of google.de.

12.3 Microsoft Teams

We use the tool "Microsoft Teams" ("MS-Teams") for conducting our communication in written form (chat) as well as in the form of telephone conferences, online meetings, and video conferences. The service provider is Microsoft Ireland Operations ("Microsoft"), Ltd., 70 Sir John Rogerson's Quay, Dublin, Ireland. Microsoft Ireland Operations, Ltd. is part of the Microsoft group of companies based in One Microsoft Way, Redmond, Washington, USA.

When using MS-Teams, the following personal data is processed:

To enable the display of video and the playback of audio, data from your device's microphone and from a video camera of the device are processed for the duration of the meeting. You can switch off or mute the camera or the microphone at any time yourself via the "Microsoft Teams" applications.

If a corresponding consent has been requested, processing takes place exclusively based on Art. 6 para. 1 lit. a) GDPR. Within the framework of an employment relationship, corresponding data processing is carried out based on § 26 BDSG. The legal basis for the use of "MS Teams" in the context of contractual relationships is Art. 6 para. 1 lit. b) GDPR. In all other cases, the legal basis for the processing of your personal data is Art. 6 para. 1 lit. f) GDPR. Our interest here is in the effective conduct of online meetings.

If we record online meetings, we will inform you in advance and, if necessary, ask for your consent to the recording. If you do not wish this, you can leave the online meeting.

As a cloud-based service, "MS-Teams" processes the mentioned data in the course of providing the service. To the extent that "MS-Teams" processes personal data in connection with Microsoft's legitimate business operations, Microsoft is an independent data controller for this use and, as such, is responsible for complying with applicable laws and obligations of a data controller. As far as you access the MS-Teams website, Microsoft is responsible for data processing. Calling up the website is necessary for downloading the MS-Teams software.

Detailed information on data protection at Microsoft, in connection with "MS-Teams", can be found at: https://docs.microsoft.com/de-de/microsoftteams/teams-privacy.

13. Your Rights as a Data Subject

13.1 Right to Confirmation

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

13.2 Right to Information Art. 15 GDPR

You have the right to receive free information about the personal data stored about you and a copy of this data in accordance with the statutory provisions at any time.

13.3 Right to Correction Art. 16 GDPR

You have the right to request the correction of incorrect personal data concerning you. Furthermore, you have the right, taking into account the purposes of processing, to request the completion of incomplete personal data.

13.4 Deletion Art. 17 GDPR

You have the right to demand that we delete personal data concerning you immediately, provided that one of the reasons stipulated by law applies and if processing or storage is not necessary.

13.5 Restriction of Processing Art. 18 GDPR

You have the right to request us to restrict processing if one of the legal prerequisites is met.

13.6 Data Portability Art. 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, common and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, who was provided with the personal data, provided that the processing is based on consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract in accordance with Art. 6 para. 1 lit. b GDPR and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task that is in the public interest or in the exercise of public authority, which has been transferred to us.

Furthermore, in exercising your right to data portability under Art. 20 (1) GDPR, you have the right to obtain that the personal data be transferred directly from one controller to another, where technically feasible, and as long as this does not affect the rights and freedoms of others.

13.7 Objection Art. 21 GDPR

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, which is based on Art. 6 para. 1 lit. e (data processing in the public interest) or f (data processing based on a balance of interests) GDPR.

This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise or defend legal claims.

In individual cases, we process personal data for direct marketing purposes. You can object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is connected with such direct advertising. If you object to us processing for direct marketing purposes, we will no longer process the personal data for these purposes.

In addition, you have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you, which occurs for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 GDPR, unless such processing is necessary for the performance of a task carried out for reasons of public interest.

You are free to exercise your right of objection in connection with the use of information society services, notwithstanding Directive 2002/58/EC, using automated procedures that use technical specifications.

13.8 Revocation of Data Protection

Consent You have the right to revoke consent to the processing of personal data at any time with effect for the future.

13.9 Complaint to a Supervisory Authority

You have the right to complain to a supervisory authority responsible for data protection about our processing of personal data.

14. Routine Storage, Deletion, and Blocking of Personal Data

We process and store your personal data only for the period necessary to achieve the storage purpose or as provided by the legal provisions to which our company is subject.

If the storage purpose ceases to apply or if a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with legal regulations.

15. Duration of Storage of Personal Data

The criterion for the duration of storage of personal data is the respective legal retention period. After the period has expired, the corresponding data will be routinely deleted, provided they are no longer necessary for the performance or initiation of the contract.