sollso®
Privacy policy
Privacy policy Sollso Laufrad UG(haftungsbeschränkt)
§ 1 General information
In this privacy policy you will find detailed information about what happens to your personal data when you visit our website www.sollso.com. All data that enables you to be personally identified is personal data. When processing your data, we strictly adhere to the legal requirements, in particular the General Data Protection Regulation (“GDPR”). It is very important to us that your visit to our website is completely secure.
§ 2 Responsible body
The responsibility for the collection and processing of personal data on this website lies with the data protection authorities:
Sollso Laufrad UG (haftungsbeschränkt)
represented by Heinrich Schnitzer
Oberrecht 73
25436 Neuendeich Germany
Phone: 015201648564
§ 3 Access data (server log files)
When you visit our website, we automatically collect access data that your browser transmits to us and store it in so-called server log files.
These are the following points:
- Browser type and browser version of your PC
- Operating system used by your PC
- Referrer URL (source/reference from which you came to our website)
- Host name of the accessing computer
- Date and time of the server request
- the IP address currently used by your PC (in anonymized form, if applicable)
As a rule, it is not possible for us, nor is it our intention, to assign this data to a specific person. This data is processed in accordance with Art. 6 para. 1 lit. f GDPR in order to protect our legitimate interest in improving the stability and functionality of our website.
§ 4 Cookies
We use so-called cookies to make visiting our website attractive and to enable the use of certain functions. These are small text files that are stored on your end device. Cookies are not able to execute programs or transfer viruses to your computer system. Necessary cookies, which are required for electronic communication or the provision of desired functions, are stored in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest in the storage serves the technically flawless and optimized provision of our services. Other cookies (e.g. for analyzing your surfing behavior) are treated separately in this privacy policy.
We mainly use so-called “session cookies”, which are automatically deleted at the end of your visit. In addition, we use cookies that remain stored on your end device until you remove them yourself. These enable us to recognize your browser on your next visit.
You can set your browser so that you are notified when cookies are to be set. You can then decide whether you want to allow cookies in individual cases, whether you want to allow cookies for certain cases or whether you want to reject cookies in general. You can also set your browser to automatically delete cookies when you close it. Please note that the functionality of this website may be restricted if you deactivate cookies.
§ 5 Web analysis tools and advertising
1. google analytics
We use the web analysis service Google Analytics in the version Google Analytics 4 on our website, which is provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable your use of our website to be analyzed. Within Google Analytics, all data from devices located in the EU (based on the geographical IP address) is first collected via domains and servers within the EU before the data traffic is forwarded to the Analytics servers for further processing.
The processing of your data is based on your consent, which you have given in the cookie consent tool (pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR).
2. hosting and content delivery networks (CDN)
External hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data.
We use the following hoster:
webgo GmbH
Wandsbeker Zollstraße 95
22041 Hamburg
a. IP anonymization
IP anonymization is automatically activated for Google Analytics on our website. This means that your IP address is truncated within the EU or the EEA before it is transmitted to Google in the USA. Only in exceptional cases will the full IP address be transmitted and truncated there. Google uses this information on our behalf to evaluate your use of the website, to compile activity reports and to provide other services relating to website and Internet use. According to Google, IP addresses are not logged or stored in Google Analytics, but are only processed briefly for geolocalization and deleted immediately. Your IP address will not be merged with other Google data.
b. Demographic characteristics in Google Analytics
Our website uses the “demographic characteristics” function of Google Analytics to obtain information about the age, gender and interests of visitors to the site. The data used for this purpose is based on interest-based advertising from Google and visitor data from third-party providers. The data cannot be assigned to individual persons. You can deactivate the use of this function at any time via your Google ad settings and generally prohibit the collection of your data by Google Analytics in accordance with the section “Objection to data collection”.
c. Google Signals
In addition to Google Analytics, our website also uses Google Signals. This service
enables Google to create cross-device usage reports
(“cross-device tracking”). If you have activated personalized ads in your Google account and linked your devices to your account, Google can analyze your usage behavior across different devices, provided you have consented to the use of Google Analytics (Art. 6 para. 1 lit. a GDPR). We do not receive any personal data, only statistics. You can deactivate the personalized ads in your Google account and thus prevent cross-device tracking by Google Signals. You can find more information here:
https://support.google.com/ads/answer/2662922?hl=de and https://support.google.com/analytics/answer/7532985?hl=de.
d. Order processing
We have concluded an order processing contract with Google and strictly adhere to the strict requirements of the German data protection authorities when using Google Analytics.
e. Storage period
Data at user and event level that Google stores and that is linked to cookies, user identifiers (such as the User ID) or advertising IDs (such as DoubleClick cookies or the Android advertising ID) will be deleted after 14 months. Further details can be found at this link:
https://support.google.com/analytics/answer/7667196?hl=de.
f. Right of withdrawal
Your express consent is required for many data processing procedures. If the processing of your data is based on your consent, you have the right to withdraw this consent at any time with effect for the future in accordance with Art. 7 (3) GDPR. To do so, simply change your selection in the cookie settings. Such a revocation has no effect on the legality of the data processing that was carried out on the basis of your consent up to the time of revocation. The storage of data for billing and accounting purposes remains unaffected by this revocation. More detailed information on the processing of user data by Google Analytics is available in Google’s privacy policy at the following link: https://support.google.com/analytics/answer/6004245?hl=de. For general data protection provisions, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=de&gl=de.
B. Google Tag Manager
Our website uses the Google Tag Manager (provider: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, “Google”). Google Tag Manager is a solution that enables marketers to manage website tags via a single interface. Google Tag Manager itself is a cookie-free domain and does not store any personal data. It only controls the activation of other tags, which in turn can potentially collect data. However, Google Tag Manager does not access this data. Deactivation at domain or cookie level applies to all tracking tags that are implemented with Google Tag Manager.
C. Google Ads and Google conversion tracking
This website uses Google Ads (formerly Google AdWords), an online advertising service from Google. Google Ads allows us to use advertising material on external websites to draw attention to our offers and to analyze the effectiveness of our advertising measures. The aim is to present you with interesting advertising, to optimize the website and to ensure a fair calculation of advertising costs. We use conversion tracking as part of Google Ads to measure the effectiveness of our advertising campaigns. Google delivers the ads via so-called “AdServers”. Ad server cookies are used to record certain key figures such as ad impressions or clicks. When you click on a Google ad, a conversion tracking cookie is stored in your browser. These cookies are small text files that lose their validity after 30 days and do not serve to identify you personally. They merely enable Google to recognize your browser. If you visit certain pages of our website within this period, Google and we can see that you have reached our site via the ad. Google Ads uses cookies to measure the effectiveness of advertising campaigns. Each Ads customer receives a separate cookie so that cross-website tracking is excluded. The cookies generally store the following information: a unique cookie ID, the frequency of ad impressions, the time of the last impression and your opt-out preference. This data is used to generate conversion statistics for Ads customers who have activated conversion tracking. The customers find out how many users have clicked on their ad and visited a specific page, but without it being possible to draw conclusions about you personally. You can object to the use of cookies at any time and deactivate Google Conversion Tracking in your browser settings. In this case, you will not be included in the statistics. The data collected in your Google account will be merged exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can give or withdraw this consent to Google at any time. If data is collected that is not merged in your Google account, for example because you do not have a Google account or have objected to the merging, the data processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the For more detailed information and the privacy policy, please visit Google’s privacy policy at:
https://policies.google.com/ technologies/ads? hl=en.
D. Google Remarketing
This website uses Google Remarketing in combination with the cross-device functions of Google Ads and Google DoubleClick (provider: Google). Google Remarketing evaluates your user behavior on our website in order to divide you into relevant advertising target groups. This enables us to show you suitable advertising messages when you visit other websites on the Internet (remarketing or retargeting).
By linking Google Remarketing audiences with Google’s cross-device features, we can show you personalized advertising messages based on your previous usage behavior on different devices. If you have given your consent, Google will link your web and app browsing history to your Google Account to ensure that you receive the same personalized advertising messages on all devices you use to sign in to your Google Account. To support this feature, Google Analytics collects Google-authenticated IDs from users. These IDs are temporarily linked to our Google Analytics data in order to define and create target groups for cross-device advertising.
You can deactivate personalized advertising in your Google account at the following link and thus permanently object to cross-device remarketing/targeting: https://www.google.com/settings/ads/onweb/.
The data collected in your Google account is processed exclusively on the basis of your consent, which you can give or revoke at Google (Art. 6 para. 1 lit. a GDPR). Data that is not merged in your Google account (e.g. because you do not have a Google account or have objected to the merging) is processed in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest in the anonymized analysis of visitors to our website for advertising purposes serves to optimize our website and our advertising.
For more detailed information and the privacy policy, please refer to Google’s privacy policy at: https://policies.google.com/ technologies/ads? hl=en.
E. Google AdSense
Our website uses Google AdSense, a service provided by Google for the placement of advertisements. Google AdSense uses so-called “cookies”, text files that are stored on your computer and that enable personalized advertising based on your interests and the content of our website. In addition, Google AdSense uses so-called web beacons (invisible graphics), through which visitor traffic on our pages can be statistically analyzed for online marketing purposes.
The information generated by cookies and web beacons about your use of our website (including your IP address) and the provision of advertising formats is transmitted to a Google server in the USA and stored there. Google may share this information with third parties. However, Google will not merge your IP address with other data that you may have stored. If you have given your consent, your personal data will be stored and processed on the basis of this consent in accordance with Art. 6 para. 1 lit. A GDPR. In addition, we have a legitimate interest pursuant to Art. 6 para. 1 lit. F GDPR in the analysis of user behavior to optimize our website and our advertising. The data collected in your Google account is merged exclusively on the basis of your consent, which you can give or revoke at Google (Art. 6 para. 1 lit. a GDPR).
You have the option of preventing the installation of cookies by selecting the appropriate settings in your browser. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
F. Google Fonts
On our website we use Google Fonts (previously Google Web Fonts), a service provided by Google LLC. Google Fonts allows the integration of external fonts, so-called Google Fonts. For this purpose, your web browser loads the required Google font into your browser cache when you access our website. This is necessary to ensure a visually appealing presentation of our texts. If your browser does not support this function, a standard font from your computer will be used. Google Fonts are integrated via a server call, usually a Google server in the USA. The information about which of our websites you have visited is transmitted to the server. Google also stores the IP address of your device’s browser. We have no influence on the scope and further use of the data collected and processed by Google through the use of Google Fonts.
The use of Google Fonts serves optimization purposes, in particular to improve the user-friendliness and appealing design of our website. This also constitutes our legitimate interest in the processing of the aforementioned data by the third-party provider. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR. Further information on Google Fonts can be found at https:// fonts.google.com/, https://developers.google.com/fonts/faq?hl=de-DE&csw=1.
G. WordPress Stats
Our website uses the WordPress Stats tool to statistically analyze visitor access. WordPress Stats is a component of the Jetpack plugin, which is provided by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA. WordPress Stats uses cookies, which are stored on your computer and enable us to analyze the use of our website. The information generated by cookies about your use of our website is stored on a server in the USA. The processed data can be used to create user profiles that are used exclusively for analysis and not for advertising purposes. Your IP address is anonymized after processing and before storage.
The cookies used by “WordPress-Stats” remain on your device until you delete them. Further information on this can be found in Automattic’s privacy policy at https://automattic.com/privacy/ and in the notes on Jetpack cookies at https://jetpack.com/support/cookies/.
The storage of “WordPress Stats” cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the anonymized analysis of user behavior in order to optimize both our website and our advertising measures.
§ 6 Social media
A. Facebook plugins (Like & Share button)
Plugins of the social network Facebook are integrated on our website. The provider is Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA (“Facebook”). The Facebook plugins are identified by the Facebook logo or the “Like” button on our website. An overview of the Facebook plugins is available at the following link: https://developers.facebook.com/docs/plugins/? locale=en DE. In the interest of increased data protection when visiting our website, the Facebook plugins are not integrated directly, but by means of an HTML link (so-called “Shariff” solution from c’t). This type of integration guarantees that no connection to the Facebook servers is initially established when a page of our website containing Facebook plugins is accessed. The connection to Facebook is only established by clicking on the Facebook button in a new browser window, where you can then use the Like or Share function.
Information on the purpose and scope of data collection, the further processing and use of the data by Facebook as well as your rights in this regard and setting options to protect your privacy can be found in Facebook’s privacy policy at: https://dede.facebook.com/privacy/explanation.
B. Instagram plugin
The functions of the Instagram service (Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA) integrated on our website are recognizable by the Instagram logo, for example in the form of an “Instagram camera”. An overview of the Instagram plugins and their visual representation can be found at: http://blog.instagram.com/post/36222022872/introducing-instagram-badges.
In the interest of increased data protection, the Instagram plugins are integrated via the so-called “Shariff” solution (c’t) by means of an HTML link. This implementation ensures that when a page of our website containing Instagram plugins is accessed, no connection is initially established with Instagram’s servers. The connection to Instagram is only initiated by deliberately clicking the Instagram button in a separate browser window. Information on Instagram’s data collection, processing and use as well as your rights and privacy settings can be found in the privacy policy at: https://instagram.com/about/legal/privacy/.
C. YouTube plugin
Our website uses plugins from the YouTube video service to integrate and play video content. This is operated by YouTube, LLC, 901 Cherry Ave, Sa. In the interest of increased data protection when visiting our website, the YouTube plugins are not integrated directly into the page, but only via an HTML link (so-called “Shariff” solution from c’t). This integration ensures that no connection to the YouTube servers is established when a page of our website containing such plugins is accessed. Only when you click on the YouTube button will a new browser window open and call up the YouTube page where you can click on the Like button. Detailed information on data protection and the processing of your data by YouTube as well as your rights and settings options can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/ policies/privacy.
§ 7 Google Maps
Our website uses the map service Google Maps from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), which is integrated via an application programming interface (API). To protect your data when you visit our website, Google Maps is deactivated by default. The connection to the Google servers is only established when you actively use Google Maps (consent pursuant to Art. 6 para. 1 lit. a GDPR). This prevents your data from being transmitted to Google the first time you visit our website. After activating Google Maps, your IP address is recorded by Google and usually transmitted to a server in the USA and stored there. Once Google Maps has been activated, the operator of this website has no way of influencing this data transfer. Detailed information on the processing of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/ privacy/.
§ 8 Contact form
If you contact us by e-mail or via the contact form, the data transmitted, including your contact details, will be stored in order to process your request and to be available for any queries you may have. A
This data will not be passed on to third parties without your express consent. The processing of the data transmitted in the contact form takes place exclusively on the basis of your consent given in accordance with Art. 6 para. 1 lit. a GDPR. This consent can be withdrawn at any time without giving reasons.
An informal notification by e-mail to us is sufficient for the revocation. The legality of the data processing carried out before the revocation is not affected by the revocation.
The data transmitted via the contact form will be stored by us until you ask us to delete it, revoke your consent to storage or the need for data storage no longer applies. Statutory retention periods remain unaffected by this.
§ 9 Customer account
The creation of a customer account requires your consent to the storage of your master data (name, address, e-mail address, bank details) and usage data (user name, password). This data is stored to enable you to place orders via your customer account using your e-mail address and password.
§ 10 Online payments
In order to process your order in our online store, we require certain personal data from you. The mandatory information required to fulfill the contract is marked accordingly. Depending on the payment method you choose, the data relevant for payment processing will be transmitted to the relevant payment service provider. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. b GDPR.
A. Apple Pay
Our website uses Apple Pay, a service for online payment methods. The service provider is the American company Apple Inc, Infinite Loop, Cupertino, CA 95014, USA. Responsibility for data processing in connection with Apple Pay lies primarily with Apple Pay. It is important to understand that this may potentially involve the processing and storage of data without full anonymization. In addition, there is a possibility that US authorities may gain access to this data under certain circumstances. Furthermore, this data may be linked to information from other Apple Pay services if you have a user account there.
You can find out more about the data processed through the use of Apple Pay in the privacy policy at https://www.apple.com/legal/privacy/deww/.
B. giropay
Our website uses the online payment provider giropay. The service provider is the German company paydirekt GmbH, Stephanstraße 14-16, 60313 Frankfurt am Main, Germany. You can find out more about the data processed through the use of giropay in the privacy policy at https://www.giropay.de/rechtliches/datenschutzerklaerung/.
C. Mastercard
Our website uses the payment service provider Mastercard. The service provider is the American company Mastercard Inc. Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium is responsible for the European region. The responsibility for data processing in connection with Mstercard lies primarily with Mastercard. It is important to understand that this may potentially involve the processing and storage of data without full anonymization. In addition, there is a possibility that US authorities may gain access to this data under certain circumstances. Furthermore, this data may be linked to information from other Mastercard services if you have a user account there. Further information about the data processed through the use of Mastercard can be found in the Privacy Policy at https://www.mastercard.de/de-de/ datenschutz.html.
D. PayPal
Our website uses the online payment service PayPal. The service provider is the American company PayPal Inc. The company PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg is responsible for the European area.
The responsibility for data processing in connection with PayPal lies primarily with PayPal. It is important to understand that this may potentially involve the processing and storage of data without complete anonymization. In addition, there is a possibility that US authorities may gain access to this data under certain circumstances. Furthermore, this data may be linked to information from other PayPal services if you have a user account there.
For more information about the data processed through the use of PayPal, please refer to the privacy policy at https://www.paypal.com/de/webapps/mpp/ua/ privacy-full.
E. Instant bank transfer
Our website enables payments via “Sofortüberweisung”. The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany.
By using “Sofortüberweisung”, the receipt of payment is confirmed by Sofort GmbH in real time. This enables us to provide our services without delay. When paying by “Sofortüberweisung”, your PIN and TAN are transmitted to Sofort GmbH. This company uses the data to log into your online banking account, check your account balance, carry out the transfer and generate a transaction confirmation. As part of the login process, your turnover, the credit limit of your overdraft facility and the existence and balance of other accounts are also automatically checked.
Certain data must be transmitted to Sofort GmbH in order to carry out the “Sofortüberweisung”. In addition to PIN and TAN, this includes payment data and personal data such as first and last name, address, telephone number(s), e-mail address, IP address and any other information required for payment processing. The transmission of this data serves to establish identity and prevent fraud, and the transmission of your data to Sofort GmbH is based on Art. 6 para. 1 lit. a GDPR (your consent) and Art. 6 para. 1 lit. b GDPR (processing for the fulfillment of the contract). You are entitled to withdraw your consent at any time. However, data processing that has already taken place remains unaffected by a revocation. You can find detailed information on payment with Sofortüberweisung in the data protection declarations under the following links: https://www.sofort.de/ datenschutz.html and https://www.klarna.com/sofort/.
F. Visa
Our website enables payments via Visa. The service provider is the American company Visa Inc. Visa Europe Services Inc, 1 Sheldon Square, London W2 6TT, United Kingdom, is responsible for the European region. The responsibility for data processing in connection with Visa lies primarily with Visa. It is important to understand that this may potentially involve the processing and storage of data without full anonymization. In addition, there is a possibility that US authorities may gain access to this data under certain circumstances. Furthermore, this data may be linked to information from other Visa services if you have a user account there. Further information about the data processed through the use of Visa can be found in the privacy policy at https://www.visa.de/nutzungsbedingungen/visaprivacycenter.html.
§ 11 Use and disclosure of data
We assure you that personal data that you provide to us, e.g. when placing an order or by e-mail (such as your name, address or e-mail address), will not be sold to third parties or used commercially in any other way. Your data will be processed exclusively for the purpose of corresponding with you and for fulfilling the purpose for which you have provided us with the data. In the context of payment processing, your payment data will be forwarded to the commissioned credit institution. The data collected automatically when you visit our website is used exclusively for the above-mentioned purposes. The data will not be used for any other purpose.
The protection of your personal data is important to us. We therefore do not pass on your data to third parties unless there is a legal obligation to do so or you have given us your express consent.
§ 12 Encryption (SSL/TLS)
Our website uses SSL or TLS encryption to ensure the security and protection of the transmission of confidential content. This applies in particular to orders or inquiries that you as a site visitor send to us as the operator of the website. An encrypted connection can be recognized by the “https://” in the address bar of your browser and the lock symbol in your browser line.
The activation of SSL or TLS encryption ensures that the data you send to us cannot be read by unauthorized third parties.
§ 13 Storage period
Your personal data that you transmit to us via our website will only be stored for as long as is necessary to achieve the respective purpose of the data processing. However, in accordance with commercial and tax retention obligations, certain data may be stored for up to 10 years.
§ 14 Your data protection rights
As a data subject, you have the following rights vis-à-vis the controller with regard to your personal data in accordance with the statutory provisions:
A. Right of withdrawal
Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to withdraw this consent at any time with effect for the future in accordance with Art. 7 (3) GDPR. This does not affect the lawfulness of the data processing that was carried out on the basis of your consent until you withdraw it. The storage of data for billing and accounting purposes is not affected by a revocation.
B. Right to information
In accordance with Art. 15 GDPR, you have the right to request confirmation from us as to whether we are processing your personal data. If this is the case, you have the right to information about this data, including the processing purposes, the categories of data processed, the recipients or categories of recipients to whom the data has been or will be disclosed, the planned storage period or the criteria for determining this, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of the data if it has not been collected from you, the existence of automated decision-making including profiling and, if applicable, meaningful information on the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed of the guarantees in accordance with Art. 46 GDPR if your data is transferred to third countries.
C. Right to rectification
You have the right to request the correction of incorrect personal data concerning you and/or the completion of your incomplete data from us at any time in accordance with Art. 16 GDPR.
D. Right to erasure
You have the right to request the deletion of your personal data in accordance with Art. 17 GDPR if one of the following reasons applies:
a. Your personal data is no longer required for the purposes for which it was collected or otherwise processed.
b. You revoke your consent that legitimized the processing pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
c . You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
d. The processing of personal data is unlawful.
e. We are obliged to delete the personal data due to a legal obligation under Union law or the law of the Member State to which we are subject.
f. The personal data was collected in connection with the provision of information society services pursuant to Art. 8 (1) GDPR. In the following circumstances, this right may be restricted if processing is essential:
a. for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
b. for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
c. for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR
d. for archiving purposes, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, which are in the public interest, insofar as the protection of the rights of the data subject would render impossible or seriously impair the objectives of this processing.
e. for the establishment, exercise or defense of legal claims. If we have made your personal data public and are obliged to delete it in accordance with the previous provisions, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform the data controllers who process this data that you as the data subject have requested the deletion of all links to your personal data or of copies or replications of this data.
E. Right to restriction of processing
In accordance with Art. 18 GDPR, you have the right to request the restriction of processing (blocking) of your personal data. To exercise this right, you can contact us at any time. You can find the contact details in the legal notice. Restriction of processing can be requested in the following cases
a. If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the review, you have the right to request that the processing of your personal data be restricted.
b. If the processing of your personal data was/is carried out unlawfully, you can request the restriction of data processing instead of erasure.
c. If we no longer need your personal data, but you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of its erasure.
d. If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data. Once the processing of your personal data has been restricted, it may only be processed with your consent. Exceptions apply in certain cases defined by law, such as the assertion of legal claims or the protection of public interests.
F. Right to information
If you exercise your right to rectification, erasure or restriction of processing of your personal data, we are obliged under Art. 19 GDPR to inform all recipients to whom the data has been disclosed. This only does not apply if the notification proves impossible or involves a disproportionate effort. At your request, we will inform you of the recipients of your data.
G. Protection against automated decisions (profiling)
In accordance with Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.
This does not apply if the decision:
a. is necessary for the conclusion or performance of a contract between you and us.
b. is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights, freedoms and legitimate interests; or
c. with your express consent.
However, the decisions in the cases mentioned under (a) to (c) may not be based on special categories of personal data within the meaning of Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or lit. g applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
In the cases mentioned under (a) and (c), we take appropriate measures to protect your rights and freedoms as well as your legitimate interests. This includes at least the right to request human intervention by the controller, to express your point of view and to contest the decision.
H. Right to data portability
If your personal data is processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on the basis of a contract in accordance with Art. 6 para. 1 lit. b GDPR and is processed by automated means, you have the right under Art. 20 GDPR to receive the data you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller or to request that we transmit it to another controller, provided this is technically feasible.
I. Right of objection
If we process your personal data on the basis of a balancing of interests in accordance with Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your personal situation; this also applies to profiling based on this. The applicable legal basis for processing can be found in this privacy policy. In the event of an objection, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defense of legal claims (objection pursuant to Art. 21 (1) GDPR).
If your personal data is processed for direct marketing purposes, you are entitled to object to this processing at any time; this also applies to profiling insofar as it is associated with such direct marketing. In the event of an objection, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21 (2) GDPR). With regard to the use of information society services, notwithstanding Directive 2002/58/EC, you have the option of exercising your right to object by means of automated procedures using technical specifications.
J. Right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR
In the event of violations of the provisions of the GDPR, data subjects have the right to lodge a complaint with a competent supervisory authority. The complaint may be lodged in particular in the Member State of the data subject’s habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint under this provision is without prejudice to any other administrative or judicial remedy.
Our competent supervisory authority is:
Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Straße 22
20459 Hamburg
Germany
Telephone: +49 40 428 54 4040
Email: mailbox@datenschutz.hamburg.de
§ 15 Validity and amendment of this privacy policy
This privacy policy comes into force on 09.02.2026. We reserve the right to amend this statement if necessary and in compliance with the applicable data protection laws, for example to comply with new legal requirements or to take into account changes to our website or new services offered via our website. The current version of the data protection declaration, which is available on our website at the time of your visit, is binding. In the event of changes to this privacy policy, we will publish them on this page to provide you with comprehensive information about what personal data we collect, how we process it and under what conditions we may pass it on.
