DATA PROTECTION

SCOPE AND AUTHORISATION FOR THE PROCESSING OF PERSONAL DATA

We collect and use the personal data of our users only to the extent that is necessary to ensure that website, content and services function properly. As a rule, personal data belonging to our users is only collected and used with the consent of the user. An exception applies in cases where factual reasons prevent us from obtaining prior consent and processing of the data is permitted by law. The legal basis for the processing of personal data with the prior consent of the data subject is Art. 6 para. 1 point a) GDPR. The legal basis for the processing of personal data required for performance of a contract or to take steps prior to entering into a contract is Art. 6 para. 1 point b) GDPR. The legal basis for the processing of personal data for compliance with a legal obligation is Art. 6 para. 1 point c) GDPR. Art. 6 para. 1 point d) GDPR is the legal basis where the vital interests of the data subject or another natural person require processing of personal data. Where processing is necessary to safeguard a legitimate interest of our company or a third party and if these interests outweigh the interests of the data subject, taking into account the fundamental rights and freedoms of the data subject, Art. 6 para. 1 point f) GDPR is the legal basis for the processing of the data.

DATA ERASURE AND RETENTION PERIOD

The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if we are required to do so by law. In this case, the data will be blocked or erasure at the end of the statutory retention period, unless continued storage of the data is necessary to enter into or perform a contract.

TRANSFER TO DATA

Your personal data will not be transferred to third parties for purposes other than those listed below. We only transfer your personal data to third parties if you have given your explicit consent in this regard according to Art. 6 para. 1 sentence 1 point a) GDPR, if disclosure is necessary pursuant to Art. 6 para. 1 sentence 1 point f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding, legitimate interest in not disclosing your data, for compliance with a legal obligation to disclose your data in accordance with Art. 6 para. 1 sentence 1 point c) GDPR, and this is legally permissible and necessary for the processing of contractual relationships with you according to Art. 6 para. 1 sentence 1 point b) GDPR.

DESCRIPTION AND SCOPE OF DATA PROCESSING AND LEGAL BASIS

Our system (or its web space provider) automatically collects data and information from the computer system of the accessing computer each time our website is accessed.

The following data is collected:

Name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of data and log files is Article 6 para. 1 point f) GDPR.

PURPOSE OF DATA PROCESSING

The temporary storage of the IP address by the system is necessary for delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Storage in log files takes place to ensure that the website functions properly. We use this data in particular to optimise the website and to safeguard the security of our information technology systems. The data is not analysed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 point f) GDPR.

RETENTION PERIOD

The data is erased as soon as it is no longer required for the purpose for which it was collected, so when the specific session has expired.

OPTION TO OBJECT AND OBTAIN RECETIFICATION

The collection of data for delivery of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, users cannot raise objections in this regard.

DESCRIPTION AND SCOPE OF DATA PROCESSING

We use cookies for the operation of our website in order to make it more user-friendly. Some elements of our website require identification of the accessing browser can, even when moving to another page.

Cookies are small files that enable the storage of specific information relating to the user's access device (PC, smartphone, etc.). Firstly, they make the website more user-friendly and hence more convenient for users (e.g. storage of login details). Secondly, they are used to record statistical data concerning website usage and to enable analysis to improve the service. Users can influence the use of cookies. Most browsers have an option to restrict or completely prevent the placing of cookies. However, it is important to note that use, ease of use in particular, are restricted in the absence of cookies.

Technical measures are implemented to pseudonymise user data collected in this way. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the user.

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 point f) GDPR. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 point f) GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 point a) GDPR, provided the user has given their consent.

PURPOSE OF DATA PROCESSING

Technically necessary cookies are placed to simplify website visits for users. Some functions of our website cannot be made available without the use of cookies. They require recognition of the browser, even after moving to a new page.

Analysis cookies are used for the purpose of improving the quality of our website and its content. Analysis cookies teach us how the website is used, which enables us to optimise our service continuously.

These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 point f) GDPR.

DESCRIPTION AND SCOPE OF DATA PROCESSING

A contact form is available on our website, which can be used to send us electronic messages. Where users draw on this option, the data entered in the contact form and the IP address, date and time are transmitted to us and stored. Your consent is obtained for the processing of data when you send us the form; reference is made to this in the Privacy Policy. In this case, the legal basis for the processing of data is Art. 6 para. 1 point a) GDPR.

Alternatively, you can contact us via the email address provided. The user's personal data transmitted with the email will be stored in this case. Date will not be transferred to third parties in this context. The legal basis for the processing of this data is Art. 6 para. 1 point f) GDPR. If the purpose of email contact is to enter into a contract, the additional legal basis for processing is Art. 6 para. 1 point b) GDPR.

PURPOSE OF DATA PROCESSING

Personal data obtained from the contact form is processed by us exclusively for contractual purposes. This also constitutes the necessary legitimate interest in the processing of data where contact is established by email. Other personal data processed during the sending process is used to prevent misuse of the contact form and to safeguard the security of our information technology systems.

RETENTION PERIOD

The data is erased as soon as it is no longer required to fulfil the purpose for which it was collected. This applies to the personal data obtained from the input mask of the contact form and data that is sent by email when the respective contact with the user has ended. Contact has ended when circumstances indicate that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process is erased after a period of seven days at the latest.

OPTION TO OBJECT AND OPTAIN RECTIFICATION

Users have the option to withdraw their consent to the processing of personal data at any time. Where users contact us by email, they can object to the storage of their personal data at any time. But in these cases, it will no longer be possible to remain in contact to clarify the matters at hand.

All personal data stored in the process of contacting us will be erased in this case.

KOMMENTARMÖGLICHKEIT
Wir bieten den Nutzern auf unserer Internetseite die Möglichkeit, individuelle Kommentare zu hinterlassen. Hinterlassen Sie einen Kommentar werden neben den von Ihnen hinterlassenen Kommentaren auch Angaben zum Zeitpunkt der Kommentareingabe sowie zu dem von der betroffenen Person gewählten Nutzernamen (Pseudonym) gespeichert und veröffentlicht. Ferner wird die vom Internet-Service-Provider (ISP) der betroffenen Person vergebene IP-Adresse mitprotokolliert. Diese Speicherung der IP-Adresse erfolgt aus Sicherheitsgründen und für den Fall, dass die betroffene Person durch einen abgegebenen Kommentar die Rechte Dritter verletzt oder rechtswidrige Inhalte postet. Die Speicherung dieser personenbezogenen Daten erfolgt daher im eigenen Interesse des für die Verarbeitung Verantwortlichen, damit sich dieser im Falle einer Rechtsverletzung gegebenenfalls exkulpieren könnte. Es erfolgt keine Weitergabe dieser erhobenen personenbezogenen Daten an Dritte, sofern eine solche Weitergabe nicht gesetzlich vorgeschrieben ist oder der Rechtsverteidigung des für die Verarbeitung Verantwortlichen dient.werden in diesem Fall gelöscht.
 

NUTZUNG ONLINE-SHOP FUNKTION Wir verarbeiten die Daten unserer Kunden im Rahmen der Bestellvorgänge in unserem Onlineshop, um ihnen die Auswahl und die Bestellung der gewählten Produkte und Leistungen, sowie deren Bezahlung und Zustellung, bzw. Ausführung zu ermöglichen. Zu den verarbeiteten Daten gehören Bestandsdaten, Kommunikationsdaten, Vertragsdaten, Zahlungsdaten und zu den von der Verarbeitung betroffenen Personen gehören unsere Kunden, Interessenten und sonstige Geschäftspartner. Die Verarbeitung erfolgt zum Zweck der Erbringung von Vertragsleistungen im Rahmen des Betriebs eines Onlineshops, Abrechnung, Auslieferung und der Kundenservices. Hierbei setzen wir Session Cookies für die Speicherung des Warenkorb-Inhalts und permanente Cookies für die Speicherung des Login-Status ein. Die Verarbeitung erfolgt auf Grundlage des Art. 6 Abs. 1 lit. b (Durchführung Bestellvorgänge) und c (Gesetzlich erforderliche Archivierung) DSGVO. Dabei sind die als erforderlich gekennzeichneten Angaben zur Begründung und Erfüllung des Vertrages erforderlich. Die Daten offenbaren wir gegenüber Dritten nur im Rahmen der Auslieferung, Zahlung oder im Rahmen der gesetzlichen Erlaubnisse und Pflichten gegenüber Rechtsberatern und Behörden. Die Daten werden in Drittländern nur dann verarbeitet, wenn dies zur Vertragserfüllung erforderlich ist (z.B. auf Kundenwunsch bei Auslieferung oder Zahlung). Nutzer können optional ein Nutzerkonto anlegen, indem sie insbesondere ihre Bestellungen einsehen können. Im Rahmen der Registrierung, werden die erforderlichen Pflichtangaben den Nutzern mitgeteilt. Die Nutzerkonten sind nicht öffentlich und können von Suchmaschinen nicht indexiert werden. Wenn Nutzer ihr Nutzerkonto gekündigt haben, werden deren Daten im Hinblick auf das Nutzerkonto gelöscht, vorbehaltlich deren Aufbewahrung ist aus handels- oder steuerrechtlichen Gründen entspr. Art. 6 Abs. 1 lit. c DSGVO notwendig. Angaben im Kundenkonto verbleiben bis zu dessen Löschung mit anschließender Archivierung im Fall einer rechtlichen Verpflichtung. Es obliegt den Nutzern, ihre Daten bei erfolgter Kündigung vor dem Vertragsende zu sichern. Im Rahmen der Registrierung und erneuter Anmeldungen sowie Inanspruchnahme unserer Onlinedienste, speichern wir die IP-Adresse und den Zeitpunkt der jeweiligen Nutzerhandlung. Die Speicherung erfolgt auf Grundlage unserer berechtigten Interessen, als auch der Nutzer an Schutz vor Missbrauch und sonstiger unbefugter Nutzung. Eine Weitergabe dieser Daten an Dritte erfolgt grundsätzlich nicht, außer sie ist zur Verfolgung unserer Ansprüche erforderlich oder es besteht hierzu eine gesetzliche Verpflichtung gem. Art. 6 Abs. 1 lit. c DSGVO. Die Löschung erfolgt nach Ablauf gesetzlicher Gewährleistungs- und vergleichbarer Pflichten, die Erforderlichkeit der Aufbewahrung der Daten wird alle drei Jahre überprüft; im Fall der gesetzlichen Archivierungspflichten erfolgt die Löschung nach deren Ablauf (Ende handelsrechtlicher (6 Jahre) und steuerrechtlicher (10 Jahre) Aufbewahrungspflicht).
 

REGISTRIERUNG Sie haben die Möglichkeit, sich auf unserer Internetseite unter Angabe von personenbezogenen Daten zu registrieren. Welche personenbezogenen Daten dabei an uns übermittelt werden, ergibt sich aus der jeweiligen Eingabemaske, die für die Registrierung verwendet wird. Die von Ihnen eingegebenen personenbezogenen Daten werden ausschließlich für die interne Verwendung für eigene Zwecke verarbeitet. Wir können die Weitergabe an einen oder mehrere Auftragsverarbeiter veranlassen, der Ihre personenbezogenen Daten ebenfalls ausschließlich für eine interne Verwendung, die uns zuzurechnen ist, nutzt. Durch eine Registrierung auf unserer Internetseite wird ferner die vom Internet-Service-Provider (ISP) der betroffenen Person vergebene IPAdresse, das Datum sowie die Uhrzeit der Registrierung gespeichert. Die Speicherung dieser Daten erfolgt vor dem Hintergrund, dass nur so der Missbrauch unserer Dienste verhindert werden kann, und diese Daten im Bedarfsfall ermöglichen, begangene Straftaten aufzuklären. Insofern ist die Speicherung dieser Daten zur Absicherung erforderlich. Eine Weitergabe dieser Daten an Dritte erfolgt grundsätzlich nicht, sofern keine gesetzliche Pflicht zur Weitergabe besteht oder die Weitergabe der Strafverfolgung dient. Ihre Registrierung unter freiwilliger Angabe personenbezogener Daten dient dazu, Ihnen Inhalte oder Leistungen anzubieten, die aufgrund der Natur der Sache nur registrierten Benutzern angeboten werden können. Registrierten Personen steht die Möglichkeit frei, die bei der Registrierung angegebenen personenbezogenen Daten jederzeit abzuändern oder vollständig aus unserem Datenbestand löschen zu lassen. Wir erteilen jeder betroffenen Person jederzeit auf Anfrage Auskunft darüber, welche personenbezogenen Daten über die betroffene Person gespeichert sind. Ferner berichtigen oder löschen wir personenbezogene Daten auf Wunsch oder Hinweis der betroffenen Person, soweit dem keine gesetzlichen Aufbewahrungspflichten entgegenstehen.

The controller has integrated on the website content and services from other providers. They include, for example, maps provided by Google Maps, videos from YouTube and artwork and images from other websites. Transmission of the IP address is absolutely necessary to access this data and display the content in the user's browser. The providers (hereinafter ‘third-party providers’) therefore obtain the IP address of the respective user.

Even though we endeavour to use only third-party providers who exclusively need the IP address for content delivery, we are still unable to influence whether the IP address may be stored. In this case, this process is used for statistical purposes, among other things. We will notify our users accordingly if we become aware that the IP address is stored.

Our website uses the ‘Google Maps’ component by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as ‘Google’.

Each time the ‘Google Maps’ component is accessed, Google places a cookie to process user settings and data when the page on which the ‘Google Maps’ component is integrated is displayed. As a rule, this cookie is not deleted when you close the browser but expires after a certain period of time unless you delete it manually at an earlier time.

Should you not consent to the processing of your data, you may disable the ‘Google Maps’ service to prevent the transfer of data to Google. To do so, you must deactivate the Java Script function in your browser. However, please bear in mind that you will not be able to use ‘Google Maps’ in this case, or only to a limited extent.

The use of "Google Maps" and the information obtained via ‘Google Maps’ is governed by the Google Terms of Use http://www.google.de/intl/de/policies/terms/regional.html and the additional terms and conditions for ‘Google Maps’ https://www.google.com/intl/de_de/help/terms_maps.html.

To protect input forms on our website, we use the ‘reCAPTCHA’ service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as ‘Google’. This service enables us to tell whether input was made by a human or was misused by automated machine processing.

To our knowledge, the referrer URL, the IP address, the behaviour of website visitors, information about the operating system, browser and length of stay, cookies, display instructions and scripts, the user's input behaviour and mouse movements in the ‘reCAPTCHA’ checkbox area are transmitted to ‘Google’.

Among other things, Google uses the information obtained in this way to digitise books and other printed materials and to optimise services such as Google Street View and Google Maps (e.g. house number and street name recognition).

The IP address transmitted as part of ‘reCAPTCHA’ will not be associated with other Google data unless you are logged into your Google account at the time you use the ‘reCAPTCHA’ plug-in. Should you wish to prevent this transmission and storage of data about you and your behaviour on our website by ‘Google’, you must log out of ‘Google’ before you visit our site or use the reCAPTCHA plug-in.

Use of the ‘reCAPTCHA’ service is governed by the Google Terms of Use: https://www.google.com/intl/de/policies/privacy/.

This site uses so-called web fonts provided by Fonticons, Inc. for the standardised display of fonts. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to the servers of Fonticons, Inc. By doing so, Fonticons, Inc. will become aware that our website has been accessed via your IP address. The use of web fonts is intended to ensure that our online services are presented in a standardised and attractive manner. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 point f) GDPR.

A standard font will be used by your computer if your browser does not support web fonts. For more information about Font Awesome, visit https://fontawesome.com/help and the privacy policy of Fonticons, Inc: https://fontawesome.com/privacy.

We collect and process the personal data of applicants for the purpose of handling the application process. Processing can also be carried out electronically. This is the case in particular if an applicant submits relevant application documents to us electronically, for instance by email or via a web form on the website. Where we enter into an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically erased two months after notification of rejection, provided that erasure is not precluded by our other legitimate interests. Other legitimate interest in this sense include, for example, complying with the burden of proof in proceedings under the General Equal Treatment Act (AGG).

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

RIGHT OF INFORMATION

You can obtain confirmation from the controller as to whether personal data concerning you is processed by us. Where processing has taken place, you may obtain the following information from the controller:

(1) the purposes for which the personal data is processed;

(2) the categories of personal data that are processed;

(3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;

(4) the envisaged duration of storage of personal data concerning you or, where specific information on this is not possible, criteria for determining the storage period;

(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

(6) the existence of a right of appeal to a supervisory authority;

(7) all available information on the origin of the data if the personal data has not been collected from the data subject;

(8) the existence of automated decision-making including profiling in accordance with Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to obtain information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may obtain information about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.

RIGHT OF RECTIFICATION

You have a right to obtain rectification and/or completion from the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the correction without delay.

RIGHT TO RESTRICTION OF PROCESSING

You may obtain restriction of processing of your personal data where the following conditions apply:

(1) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;

(2) processing is unlawful and you oppose the erasure of personal data and request restriction of its use instead;

(3) the controller no longer requires the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defence of legal claims; or

(4) you have objected to the processing pursuant to Art. 21 (1) GDPR and it has not yet been established whether the legitimate reasons of the controller outweigh your reasons.

Where processing of personal data concerning you has been restricted, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be notified by the controller before the restriction is lifted.

RIGHT TO ERASURE

Obligation to erase

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.

(2) You withdraw your consent on which the processing is based in accordance with Art. 6 para. 1 point a) or Art. 9 para. 2 point a) GDPR and no other legal basis for processing applies.

(3) You object to processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to processing pursuant to Art. 21 para. 2 GDPR.

(4) The personal data concerning you has been processed unlawfully.

(5) The erasure of personal data concerning you is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.

(6) The personal data concerning you was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.

Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase this data pursuant to Art. 17 para. 1 GDPR, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, the personal data.

Exceptions

The right to erasure does not apply if processing is necessary

(1) to exercise the right to freedom of expression and information;

(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 points h) and i) and Art. 9 para. 3 GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 6 para. 1 point f) GDPR. Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or

(5) for the establishment, exercise or defence of legal claims.

RIGHT TO NOTIFICATION

Where you have exercised the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller shall be obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to obtain information from the controller about these recipients.

RIGHT TO DATA PORTABILITIY

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where

(1) processing is based on consent pursuant to Art. 6 para. 1 point a) GDPR or Art. 9 para. 2 point a) GDPR or on a contract pursuant to Art. 6 para. 1 point b) GDPR and

(2) processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be impaired by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

RIGHT OF OBJECTION

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point e) or f) of Article 6(1) GDPR, including profiling based on those provisions.

The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

Notwithstanding Directive 2002/58/EC, you have the option of exercising your right to object in connection with the use of information society services by means of automated procedures using technical specifications.

RIGHT TO WITHDRAW CONSENT UNDER DATA PROTECTION LAW

You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent issued prior its withdrawal.

AUTOMATED DECISION-MAKING IN INDIVIDUAL CASES INCLUDING PROFILING

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

(1) is necessary for the conclusion or performance of a contract between you and the controller;

(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or

(3) is made with your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 point a) or g) applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

In the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

As a responsible undertaking, we do not use automated decision-making or profiling.

RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

We use the common SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this involves 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise whether an individual page of our website is transmitted in an encrypted form by the closed display of the key or padlock icon in the lower status bar of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.