Privacy Policy
This page contains information about how we handle personal data on our website.
I. Scope
With this document, the data controller wishes to fulfill its information obligations to data subjects pursuant to Article 13 of the General Data Protection Regulation (GDPR). This data protection information is available at https://blog.findeling.de/datenschutzrichtlinie Published and valid since January 2022. Due to the ongoing development of our website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The amended version will be published here.
II. Who is responsible for data processing?
The controller responsible for data processing pursuant to Article 4 No. 7 GDPR is:
Oliver Bock,
III. What do we process your data for?
III.1. Log files/Hosting
If you visit our website without registering or otherwise providing us with information, we only collect the following data that your browser transmits to our server (so-called "server log files"):
The individual pages of our website (URL)
Date and time of access
Amount of data sent in bytes
Source/referrer from which you accessed this page
Browser used
Operating system used
IP address used (possibly in anonymized form)
Our website is stored and made available for retrieval by a hosting provider. The web server used stores the aforementioned server log files.
Purpose of processing: Hosting of the website
Legal basis and legitimate interests: The processing is based on our overriding legitimate interest (Art. 6 para. 1 lit. f GDPR) in the security and stability of our website by commissioning a service provider to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services.
Data recipient: WordPress Ltd., https://wordpress.com/
Privacy policy of WordPress Ltd.: https://automattic.com/de/privacy/
Third-country transfer: Wix.com Ltd. is based in Israel. In this regard, the European Commission decided that Israel offers an adequate level of protection for the personal data of citizens from EU member states.
IV.2. Cookies
IV.2.a. General
(aa) Definitions
Below you will find comprehensive information about so-called "cookies" and other storage technologies ("web storage"). This is information that is often stored in databases on your device. Every type of "cookie" or "web storage" can contain personal data. In many cases, however, the data is pseudonymized. The following terms may be used below:
First-party cookie: This cookie is stored or modified by the website you are currently browsing.
Third-party cookie: This cookie is stored or modified by third parties with whom the website operator is connected (e.g., an advertising network, a social media platform, etc.).
Session cookie: This cookie is deleted from your device when you close the browser.Often, a session cookie only stores a session ID to associate multiple requests from a user on a page with their session.
Persistent Cookie: This cookie is stored on your device until it expires or you delete it manually or automatically in your browser.
Absolutely essential: Without this cookie and web storage, the service you requested cannot be provided.
Optional: This cookie and web storage enables us to use additional functions and is only used if you give your consent.
Local Storage: This is part of so-called "web storage". This information is also stored in your web browser until you delete it manually.
Session Storage: This is part of so-called "web storage". This information is also stored in your web browser until you close the browser window.
(bb) Legal basis
Strictly necessary cookies and web storage: The storage of information and access to it are based on the legal basis of Section 25 (2) No. 2 TTDSG.
Optional cookies and web storage: The storage of information and access to it are based on the legal basis of your individual, personal and voluntary consent pursuant to Section 25 (1) TTDSG. i.V.m. Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. Data processing carried out before the withdrawal remains lawful. Please note that if you do not accept optional cookies, some functions of our website may be restricted.
(cc) Data recipient/Access option
First-party cookies: Only we, as the data controller and website operator, have access to these.
Third-party cookies: Only the third party that set these cookies has access to them. For example, only Google has access to a cookie set by Google and can read or modify it.
Web storage: Only we, as the data controller and website operator, have access to this.
(dd) Storage duration
Session cookies: These are only temporarily stored in your browser until the end of the browser session or can be deleted by you beforehand.
Persistent cookies: These remain stored on your device for as long as specified in the respective cookie or can be deleted by you beforehand.
Local storage: This remains stored until manually deleted.
Session storage: This remains stored until the browser window is closed.
The exact storage duration is specified under "Cookies and web storage used".
(ee) Deletion options/Objection
Please note that you can configure your browser to notify you when cookies are being set, allowing you to decide whether to accept them individually, or to block cookies in certain cases or entirely. Each browser manages cookie settings differently. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find this information for the respective browsers at the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/
A general objection to the use of cookies for online marketing purposes can be made via the US website for many services, especially in the case of tracking. https://www.aboutads.info/choices/ or the EU website https://www.youronlinechoices.com/ will be explained.
IV.2.b.Cookies used
The following overview lists the essential first-party cookies used on our website and the purpose of the data processing:
consent policy (Persistent Cookie)
Purpose: Stores the user's cookie preferences.
Validity period: 1 year
hs (Session Cookie)
Purpose: Used for security reasons
Validity period: Until the end of the browser session
smSession (Persistent Cookie)
Purpose: Used to identify registered website members
Validity period: 2 weeks
ssr caching (persistent cookie)
Purpose: Used to display the system that rendered the website.
Validity period: 1 min.
svSession (Persistent Cookie)
Purpose: Used in connection with user registration
Validity period: 2 years
XSRF token (session cookie)
Purpose: Used for security reasons
Validity period: Until the end of the browser session
The following overview lists the optional third-party cookies from Wix used on our website and the purpose of the data processing:
bSession (Persistent Cookie)
Purpose: Used to measure system effectiveness
Validity period: 20 minutes
TS* (Session Cookie)
Purpose: Used for security reasons and to combat fraud.
Validity period: Until the end of the browser session
The following overview lists the optional third-party cookies from Google used on our website and the purpose of the data processing:
_ga (Persistent Cookie)
Purpose: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Validity period: 2 years
_gid (Persistent Cookie)
Purpose: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Validity period: 1 day
_gat_gtag_UA (Persistent Cookie)
Purpose: Used by Google Analytics to limit the request rate.
Validity period: 1 minute
IV.3. Contact
When you contact us (e.g., via contact form, email, telephone, or fax), personal data is collected. The specific data collected via a contact form is indicated on the form itself. This data is stored and used solely for the purpose of responding to your inquiry, contacting you, and for the associated technical administration. We cannot process your request without this mandatory information. All other information is voluntary.
Purpose of processing: To answer your request
Legal basis: Article 6(1)(b) GDPR for pre-contractual or contractual matters. Article 6(1)(a) GDPR for your voluntary information.
Recipients of the data: Email service providers for emails, hosting providers for contact form requests.
Data retention period: Your data will be deleted after your request has been fully processed. This is the case when it is clear from the circumstances that the matter has been resolved and provided that no statutory retention obligations apply. In the case of pre-contractual and contractual matters, your request will be stored until the contract is terminated and its processing then restricted. If there is no longer a legal basis for storage, the data will be deleted.
IV.4.Chat
Intercom by Intercom R&D Unlimited Company
Our website uses technologies from Intercom R&D Unlimited Company. For this purpose, anonymized data is collected and stored for web analytics and to operate the live chat system for answering live support requests. Usage profiles can be created from this anonymized data under a pseudonym.
Data recipient: 2nd Floor, Stephen Court, 18-21 Saint Stephen's Green, Dublin 2; Intercom, Inc. a Delaware corporation with offices at 55 2nd Street, 4th Fl., San Francisco, CA 94105, USA
Intercom's privacy policy: https://www.intercom.com/legal/privacy
Legal basis and legitimate interests: The data transfer is based on our overriding legitimate interest (Art. 6 para. 1 lit. f GDPR) in the security and stability of a professional live chat system.
Third-country transfer: The data is processed outside the scope of the European Union, in Israel.
Data retention period: Regarding data retention at Wix, please refer to their privacy policy. We store your data until your request has been processed. If the request leads to a contract, the standard customer retention period applies.
IV.5. Newsletter
We send newsletters to our customers via email with information about our company, our products, services, promotions and offers. The newsletter is sent at most once a month.
Purpose of processing: Direct marketing, customer communication
Legal basis and legitimate interests: The sending is based on our legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR) in regular customer communication and sales promotion via direct marketing.
Right to object (opt-out): You can object to receiving our newsletter at any time with effect for the future by informing us by email (see above under Responsible Person) or by clicking the link that can be found at the end of each newsletter.
Storage period: Your data will be stored until you object. After that, its processing will be restricted and it will be blocked from further newsletter distribution.
If named below, we use the following service provider:
Mailchimp
The newsletter service provider uses cookies and other tracking technologies to collect and process the following data in addition to the email address and, if applicable, the names of the newsletter recipients:
IP address, device information (hardware, operating system, web browser, unique device identifier), connection information and device locations
The newsletters sent contain so-called web beacons, which record the recipient's interaction with the newsletter (e.g. opening the newsletter, clicking on links contained therein).
Data recipient: The Rocket Science Group (Mailchimp), LLC, 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308 USA
Mailchimp's privacy policy: https://www.intuit.com/privacy/statement/
Legal basis and legitimate interests: Data is transferred on the basis of our overriding legitimate interest (Art. 6 para. 1 lit. f GDPR) in the security and stability of a legally compliant newsletter system including automated double opt-in and traceability of user registrations.
Third-country transfer: The data is processed outside the scope of the European Union, in Israel.
Appropriate safeguards: With regard to Israel, the European Commission decided that Israel provides adequate protection for the personal data of citizens of EU member states (Art. 45 GDPR).
Storage period: Your data will be stored until you revoke your consent.After that, their processing is restricted and they are stored for up to three years in order to be able to prove previously given consent in a legally compliant manner.
IV.6. Events
For booking events, we have integrated a booking form on certain pages of our website, through which ticket bookings can be processed. Our events are held both in person and online. The information on the event overview is definitive.
Purpose of processing: Organization of the event, billing if applicable.
Legal basis: Registration for the event constitutes a contract pursuant to Art. 6 para. 1 lit. b GDPR.
Data recipients: The registration data will be forwarded to the persons or companies involved in planning, organization, execution, and, if applicable, billing for these tasks. If this involves commissioned data processing, we have concluded a data processing agreement with these companies in accordance with Article 28 GDPR to protect your personal data.
Storage period: We store the registration data until the event has been fully processed and for 3 years beyond that, should it be a paid event.
Regarding the online events, please refer to the data processing by Google:
Video conference via Google Meet
When using Google Meet, the following data is processed:
User information: First name, last name, telephone number (optional), email address, password (if single sign-on is not used), profile picture (optional), department (optional)
Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information
For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.
When dialing in by phone: Information about the incoming and outgoing phone number, country name, start and end time. Additional connection data may also be required, such as... z.B. The device's IP address will be stored.
Text, audio, and video data: You may have the option to use the chat, question, or polling functions in an online meeting. In this case, the text you enter will be processed to display it in the online meeting and, if applicable, to record it. To enable video display and audio playback, data from your device's microphone and any webcam will be processed for the duration of the meeting. You can disable or mute your camera or microphone at any time using the Google Meet application.
To participate in an “online meeting” or to enter the “meeting room”, you must at least provide information about your name.
Purpose of processing: We use the Google Meet tool to conduct telephone conferences, online meetings, video conferences and/or webinars (hereinafter: "online meetings"). Google Meet is a service of Google Inc., which is based in the USA.
Responsible parties: We are primarily responsible for the use of Google Meet. If you access Google via their website, the responsible party is: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Legal basis and legitimate interests: Insofar as the events are conducted within the framework of a contract, the legal basis is Article 6(1)(b) GDPR. Insofar as the online meeting is not conducted on the basis of a contract, the legal basis is Article 6(1)(f) GDPR. Our overriding legitimate interest lies in the effective, stable, secure, and professional conduct of online meetings, telephone conferences, video conferences, and webinars.
Data recipient: Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA
Google's privacy policy: https://policies.google.com/privacy?
Third-country transfer: The data is processed outside the scope of the European Union, in the USA.
IV.7. Photo/video recordings at events
If you participate in an in-person event organized by us, photos and/or videos of the participants may be taken during the event and published along with information about the location, time and purpose of the event.
Purpose of data processing: Documentation of the event for publication on our company website, our social media profiles and company brochures for advertising purposes.
Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR
Legitimate interests: Promotion of our company, public relations, direct marketing
Data recipients: possibly photographer; advertising agency
Storage period: Recordings that are not used after the event will be deleted immediately.
IV.8. Social Media
Our website uses social plugins from various social networks. To enhance the protection of your data when visiting our website, these buttons are not fully integrated as plugins, but rather embedded using an HTML link. This method ensures that no connection is established with the servers of the respective social network when you access a page on our website containing such buttons. When you click the button, a new browser window opens and takes you to the social network's page. If necessary, after entering your login details, you can then use the provided function (z.B. execute “like” or “share”.
By clicking on the respective plugin, you give us your personal consent to the transfer of data to the respective social network. In particular, your IP address will be transferred to the respective social network. The legal basis for this is Article 6(1)(a) GDPR. You have the right to withdraw your consent at any time. Data processing carried out before the withdrawal remains lawful. The withdrawal only applies to future processing.
The following social networks are used:
Instagram
Instagram is a service provided by Facebook.
Data recipient: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Instagram”), parent company: Facebook Inc., 1 Hacker Way, 94025 Menlo Park, California, USA
Instagram's privacy policy: https://instagram.com/about/legal/privacy
Third-country transfer: Unless anonymized data is transferred to Facebook Inc., data processing takes place in the USA.
Objection: Further settings and options to object to the use of data for advertising purposes are available within your Instagram profile settings: https://www.instagram.com/accounts/privacy_and_security/
IV.9. Opening a customer account
If you open a personal customer account with us for future orders, the following terms and conditions apply:
Purpose of processing: User agreement for the personal customer account.
Legal basis: Contract pursuant to Art. 6 para. 1 lit. b GDPR. Your consent pursuant to Art. 6 para. 1 lit. a GDPR applies to the data you voluntarily provide.
Mandatory information: The required information is listed on the registration form. Without this data, we cannot open an account for you.
Data recipient: The customer account is managed via our online shop. This is operated by our web host (see above).
Data Retention Period: Your data in your customer account will be stored for as long as your user agreement with us is in effect. Voluntary information will be stored until you withdraw your consent. After that, its processing will be restricted, and it will be stored for up to three years to ensure that previously granted consent can be legally demonstrated. This is done on the basis of our legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) in demonstrating data protection compliance.
IV.10. Ordering of goods or services
IV.10.a. General
WooCommerce by WordPress Ltd.
Our website uses WooCommerce by WordPress Ltd., a service provided by WordPress to enable professional order processing through our website.
Purpose of processing: Fulfillment of your order.
Legal basis: Contract pursuant to Art. 6 para. 1 lit. b GDPR. For data you voluntarily provide, your consent pursuant to Art. 6 para. 1 lit. a GDPR applies. For other processing, Art. 6 para. 1 lit. f GDPR applies.
Legitimate interests: Debt collection and enforcement; measures for business management and further development of services and products.
Data recipient: WooCommerce Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland
Privacy policy of WooCommerce Ireland Ltd.: https://automattic.com/privacy/
Third-country transfer: The data is processed outside the scope of the European Union, in Israel.
Data retention period: Regarding data retention at Wix, please refer to their privacy policy. We store data until the request is processed. If a contractual relationship follows the request, the data retention period for customer data applies.
IV.10.b. Payment processing
Purpose of processing: Order fulfillment. Payment processing.
Legal basis: Contract pursuant to Art. 6 para. 1 lit. b GDPR.
Obligation to provide payment: Depending on the payment method chosen, you must provide us or the payment service provider with the necessary payment details.
Data recipients: The payment service providers used are listed below:
PayPal
Service provider: PayPal (Europe) S.à r.l. et Cie, S.C.A. , 22-24 Boulevard Royal, L-2449 Luxembourg, https://www.paypal.com/de
PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Credit check: PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be forwarded to credit agencies in accordance with Art. 6 Para. 1 lit. f GDPR based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to offer the respective payment method. The credit check may contain probability values (so-called score values). If score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data is among the data used to calculate the score values, but is not the only factor.
IV.10.c. Direct marketing
Purpose of processing: Direct marketing, sales promotion
Legal basis: Our overriding legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR
Legitimate interests: Direct marketing, sales promotion
Data recipient: Agency, Lettershop
IV.10.e. Legal obligation
Purpose of processing: Fulfillment of legal obligations (e.g.Information, notification, disclosure and retention obligations, payment of taxes and duties)
Legal basis: The respective legal regulation applies in conjunction with Art. 6 para. 1 lit. c GDPR.
Data recipients: Authorities, government institutions, lawyers, tax advisors, and, if applicable, data protection officers.
IV.11. Web Analytics
Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. ("Google"). Google Analytics uses "cookies," which are small text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.
Our website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and prevents direct identification of individuals. With this extension, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases is the full IP address transmitted to Google's parent company in the USA and shortened there.
Purposes of processing: Tracking (z.B. Interest-based/behavioral profiling), visit action evaluation, interest-based and behavior-based marketing, profiling (creating user profiles), conversion measurement (measuring the effectiveness of marketing measures), reach measurement (z.B. Access statistics, recognition of returning visitors). These purposes apply to us as well as to Google and its parent company.
Legal basis: For the use of Google Analytics, you may give us your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which you can revoke at any time with effect for the future by deselecting "Marketing" or "Google Analytics" in the cookie settings on our site.
Storage period: We store the anonymized data collected in this way for a maximum period of 14 months. After that, the data is automatically deleted. Regarding Google's data retention period, please refer to their privacy policy.
Objection/Opt-out: You can object to the collection of your data by installing a browser add-on to deactivate Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=de
Here you can specify which data should be used by Google: https://g.co/privacytools
You can also disable personalized advertising directly on Google: https://www.google.com/settings/ads/onweb/
For more information from Google on how to block specific ads, click here: https://support.google.com/ads/answer/2662922?hl=de
Across all providers, you can also save your preferences regarding online advertising here: https://www.youronlinechoices.com/de/
Alternatively, you can use the Network Advertising Initiative's administration page: http://www.networkadvertising.org/consumer/opt_out.asp
Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA
Google's privacy policy: https://policies.google.com/privacy
Google's privacy information for Google Analytics: https://policies.google.com/technologies/partner-sites
Third-country transfer: Unless anonymized data is transferred to Google LLC, data processing also takes place in the USA.
We have entered into the following agreement with Google Ireland Ltd. as a data processor: https://business.safety.google/adsprocessorterms/ This also includes the EU standard contractual clauses, which are to be regarded as suitable safeguards pursuant to Art. 46 (2) c GDPR.
Google Tag Manager
On our website, we use Google Tag Manager from Google. Google Tag Manager is an online tool that allows us to centrally integrate and manage website tags via a user interface. Tags are small code snippets that, for example, record your activity on our website. This is achieved by inserting JavaScript code snippets into the source code of our website. The tags originate from services such as Google Ads or Google Analytics, but tags from other companies can also be integrated and managed via the manager. These tags perform various tasks. They can collect browser data, integrate buttons, set cookies, and even track users across multiple websites. In the Tag Manager account settings, we have allowed Google to receive anonymized data from us. This data only pertains to the use of our Tag Manager and does not include your personal data stored via the code snippets.
Purposes of processing: Tracking (z.B. Interest-based/behavioral profiling), visit action evaluation, interest-based and behavior-based marketing, profiling (creating user profiles), conversion measurement (measuring the effectiveness of marketing measures), reach measurement (z.B. Access statistics, recognition of returning visitors). These purposes apply to us as well as to Google and its parent company. To the best of our knowledge, Google also uses the data collected in this way (anonymized) for its own purposes. In this respect, we refer you to Google's privacy policy.
Legal basis and legitimate interests: The integration of Google Tag Manager on our website is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes. The use of the various tags then takes place in accordance with the separately described sections with the user's explicit consent.
Storage period: Regarding the storage period by Google, please refer to their privacy policy.
Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA
Google's privacy policy: https://policies.google.com/privacy
Third-country transfer: Unless anonymized data is transferred to Google LLC, data processing takes place in the USA.
IV.12. Web Fonts
Our website uses web fonts provided by the respective provider to ensure consistent font display. When you access a page, your browser loads the necessary web fonts into its browser cache to display text and fonts correctly.
For this purpose, the browser you are using must connect to the servers of the respective provider. This allows the provider to know that our website was accessed via your IP address. If your browser does not support web fonts, a standard font from your computer will be loaded.
Purpose of processing: Uniform presentation of our website across all media
Legal basis and legitimate interests: The integration is based on our legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR) in a technically secure, maintenance-free and efficient use of fonts, their uniform display and taking into account possible licensing restrictions for their integration.
We use web fonts from the following providers:
Google
Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA
Google's privacy policy: https://policies.google.com/privacy
Third-country transfer: Unless anonymized data is transferred to Google LLC, data processing takes place in the USA.
What data protection rights do I have?
As a data subject, you have the following rights:
Confirmation of data processing: You have the right to request confirmation from us as to whether your personal data is being processed. The conditions for this can be found in Article 15 of the GDPR;
Information: You have the right to request information about your personal data processed by us. The conditions for this can be found in Article 15 GDPR;
Rectification: You have the right to request the immediate rectification of inaccurate personal data concerning you. The conditions for this are set out in Article 16 of the GDPR;
Erasure: You have the right to request the immediate erasure of personal data concerning you. The conditions for this can be found in Article 17 GDPR;
Restriction of processing: You have the right to request the restriction of the processing of your personal data. The conditions for this can be found in Article 18 GDPR;
Data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. Furthermore, you have the right to have this data transmitted by us to another controller. The conditions for this can be found in Article 20 of the GDPR.
Withdrawal of consent: You have the right to withdraw your consent at any time if the processing is based on Article 6(1)(a) or Article 9(2)(a) GDPR. Data processing carried out before the withdrawal remains lawful. The withdrawal only applies to future processing. The conditions for this can be found in Article 7(3) GDPR.
Right to lodge a complaint: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR. The conditions for this are set out in Article 77 of the GDPR. You can contact the supervisory authority responsible for the data controller or the one in your country or state. A list of all supervisory authorities can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which we process based on our overriding legitimate interests (Article 6(1)(e) or (f) GDPR), with effect for the future; this also applies to profiling based on those provisions within the meaning of Article 4(4) GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.
Right to object to the processing of data for direct marketing and product review purposes
We collect and process your personal data for direct marketing purposes.You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct marketing.
In certain cases, we process and use your personal data to send you product reviews and/or other review requests via email, solely in connection with your purchase, contract, and/or other similar transactions. Furthermore, we may also use your email address and/or postal address in this context to send you product recommendations for similar goods and/or services we offer via email and/or post. You will receive these review requests and product recommendations from us regardless of whether you have subscribed to a newsletter.
Exercising your right to object: You can object to these review requests and product recommendations at any time by letter to Oliver Bock, Goldbock Unternehmensbetreuung, Jahnstraße 13, 64665 Alsbach-Hähnlein or by email to oliver.bock@goldbock.com undYou can object to this processing at the end of any review and/or product recommendation email with effect for the future, without incurring any costs other than the respective transmission costs according to the basic rates. Your right to object also automatically applies to any possible profiling insofar as it is related to such direct marketing. If you object to the processing of your data for the purpose of product reviews and/or other review requests and/or product recommendations, we will no longer process your personal data for these purposes with effect for the future.
If you object to the processing of your personal data for direct marketing purposes, we will no longer process your personal data for these purposes with effect for the future.
VI. How long will my data be stored?
Unless otherwise specified above, the following criteria apply for determining the storage period:
In the case of consent pursuant to Art. 6 para. 1 lit. a GDPR, the data will be stored until the data subject withdraws his or her consent.
For pre-contractual and contractual purposes in accordance with Art. 6 para. 1 lit. b GDPR, the data will be stored until the termination of the contract.
Based on our overriding legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, the data will be stored until the data subject exercises their right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of establishing, exercising or defending legal claims.
In the case of direct marketing pursuant to Art. 6 para. 1 lit. f GDPR, the data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 para. 2, 3 GDPR.
Furthermore, personal data will only be stored for as long as there is a legal basis for its storage.
VII. Source of personal data
We process personal data that we have received from you or the recipients of personal data.
VIII. Obligation to provide data
In the course of fulfilling our contractual or legal obligations, you as a data subject may be legally required to provide our company with information and personal data that is necessary for the establishment, execution and termination of the contractual relationship and the fulfillment of the associated contractual obligations, or which we are legally obligated to collect.Without this data, we will generally have to refuse to conclude the contract or will no longer be able to perform an existing contract and may have to terminate it.