Privacy policy

In accordance with the statutory provisions of data protection law (in particular the new version of the German Federal Data Protection Act (BDSG) and the European General Data Protection Regulation (GDPR)), we inform you below about the type, scope and purpose of the processing of personal data by our company. This privacy policy also applies to our websites and social media profiles. With regard to the definition of terms such as "personal data" or "processing", we refer to Art. 4 GDPR. Name and contact details of the controller(s) Our controller (hereinafter "controller") within the meaning of Art. 4(7) GDPR is

myBotanika
Krystian Kalinowski and Frank Bonk GbR.
39 Free floe
44339 Dortmund
Fax: info@mybotanika.de
E-mail address: info@mybotanika.de

Types of data, purposes of processing and categories of data subjects
Below we inform you about the type, scope and purpose of the collection, processing and use of personal data.

1. types of data that we process
Inventory data (name, address, etc.), contact data (telephone number, e-mail, fax, etc.),

2. purposes of the processing pursuant to Art. 13 para. 1 c) GDPR
Processing of contracts, fulfillment of contractual obligations, customer service and customer care,

3. categories of data subjects pursuant to Art. 13 para. 1 e) GDPR
Customers, interested parties,
The persons concerned are collectively referred to as "users".
Legal basis for the processing of personal data
Below we inform you about the legal basis for the processing of personal data:

1. if we have obtained your consent for the processing of personal data, Art. 6
Para. 1 sentence 1 lit. a) GDPR legal basis.

2. if the processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract
If data processing is required in response to your request, the legal basis is Art. 6 para. 1 sentence 1 lit. b) GDPR.

3. if the processing is necessary for compliance with a legal obligation to which we are subject (e.g.
statutory retention obligations), Art. 6 para. 1 sentence 1 lit. c) GDPR is the legal basis.

4. where processing is necessary in order to protect the vital interests of the data subject or of a third party
other natural person, the legal basis is Art. 6 para. 1 sentence 1 lit. d) GDPR.

5. if the processing is necessary to protect our legitimate interests or those of a third party
and if your interests or fundamental rights and freedoms do not override this, Art.

6 para. 1 sentence 1 lit. f) GDPR legal basis.

Disclosure of personal data to third parties and processors
We do not pass on any data to third parties without your consent. Should this nevertheless be the case,
then the transfer takes place on the basis of the aforementioned legal bases, e.g. in the case of the
Forwarding of data to online payment providers for contract fulfillment or due to legal requirements
order or due to a legal obligation to disclose the data for the purpose of
criminal prosecution, to avert danger or to enforce intellectual property rights.
We also use processors (external service providers, e.g. for web hosting of our websites and
databases) for the processing of your data. If, within the framework of an agreement on
If data is passed on to processors for order processing, this is always done in accordance with Art.
28 GDPR. We select our processors carefully and check them regularly
and have been granted the right to issue instructions regarding the data. In addition, the
processors have taken appropriate technical and organizational measures and the
Comply with data protection regulations according to BDSG n.F. and GDPR

Data transfer to third countries
The adoption of the European General Data Protection Regulation (GDPR) has resulted in a
uniform basis for data protection in Europe. Your data is therefore mainly
processed by companies to which the GDPR applies. However, if the processing by
services of third parties take place outside the European Union or the European Economic Area, then
these must fulfill the special requirements of Art. 44 et seq. GDPR must be met. This means that the
Processing takes place on the basis of special guarantees, such as those officially recognized by the EU Commission.
recognized determination of a level of data protection corresponding to the EU or compliance with official
recognized special contractual obligations, the so-called "standard contractual clauses".
Insofar as we, due to the ineffectiveness of the so-called "Privacy Shield", pursuant to Art. 49 para. 1 sentence 1 lit. a) GDPR
obtain your express consent to the transfer of data to the USA, we will
the risk of secret access by US authorities and the use of the data for
monitoring purposes, possibly without legal remedies for EU citizens.

Deletion of data and storage duration
Unless expressly stated in this privacy policy, your personal data will be
erased or blocked as soon as you withdraw your consent to the processing or the processing of your personal data is terminated.
The purpose for storing the data no longer applies or the data is no longer required for the purpose, unless
their further storage is necessary for evidentiary purposes or is required by law.
conflict with retention obligations. These include, for example, retention obligations under commercial law
of business letters in accordance with Section 257 (1) HGB (6 years) and retention obligations under tax law
in accordance with § 147 Para. 1 AO of receipts (10 years). When the prescribed retention period expires,
your data will be blocked or deleted, unless the storage is still necessary for a specific purpose.
necessary for the conclusion or fulfillment of the contract.
Existence of automated decision-making
We do not use automated decision-making or profiling.
Provision of our website and creation of log files

1. if you only use our website for informational purposes (i.e. no registration and also no
other transmission of information), we only collect the personal data that you have provided to us.
browser to our server. If you wish to view our website, we collect
the following data:
- IP address;
- Internet service provider of the user;
- Date and time of retrieval;
- Browser type;
- Language and browser version;
- Content of the retrieval;
- Time zone;
- Access status/HTTP status code;
- Amount of data;
- Websites from which the request comes;
- Operating system.
This data is stored together with other personal data of yours.
does not take place.

2. this data serves the purpose of user-friendly, functional and secure delivery
our website to you with functions and content as well as their optimization and statistical analysis.
Evaluation.

3. the legal basis for this is our legitimate interest, which also lies in the above purposes, in
of data processing in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.

4. for security reasons, we store this data in server log files for the storage period of
days. After this period has expired, they will be deleted automatically, unless we need them.
Retention for evidence purposes in the event of attacks on the server infrastructure or other
Infringements.

Cookies
1. we use so-called cookies when you visit our website. Cookies are small text files that
your Internet browser stores and saves on your computer. If you visit our website again
these cookies provide information to automatically recognize you. To the
Cookies also include the so-called "user IDs", where user details are stored using pseudonymized profiles.
are stored. We inform you about this by means of a notice when you visit our website
to our privacy policy on the use of cookies for the aforementioned purposes.
purposes and how you can object to this or prevent its storage ("opt-out").

A distinction is made between the following types of cookie:
- Necessary, essential cookies: Essential cookies are cookies that are required for the operation of the website.
are absolutely necessary to use certain functions of the website such as logins, shopping cart or
to store user input, e.g. regarding the language of the website.
- Session cookies: Session cookies are used to recognize multiple uses of a website.
offer by the same user (e.g. if you have logged in to determine your
login status). When you visit our site again, these cookies provide information
to automatically recognize you. The information obtained in this way is used to improve our
optimize our offers and make it easier for you to access our site. If
When you close the browser or log out, the session cookies are deleted.
- Persistent cookies: These cookies remain stored even after the browser is closed.
They are used to store the login, to measure reach and for marketing purposes. These
are automatically deleted after a specified period, which varies depending on the cookie
can. You can delete cookies at any time in the security settings of your browser.
- Cookies from third-party providers (third-party cookies, especially from advertisers): Accordingly
You can configure your browser settings according to your wishes and, for example, prevent the acceptance of
of third-party cookies or all cookies. However, we would like to point out at this point
Please note that you may then not be able to use all the functions of this website. Read more
for these cookies in the respective privacy policies of the third-party providers.
2. data categories: User data, cookie, user ID (inb. the pages visited, device information,
access times and IP addresses).
3. purposes of processing: The information obtained in this way serves the purpose of improving our web offers
technically and economically optimized and to provide you with easier and more secure access to our
website.
4. legal basis: If we process your personal data with the help of cookies on the basis of your
consent ("opt-in"), then Art. 6 para. 1 sentence 1 lit. a) GDPR is the legal basis.
Otherwise, we have a legitimate interest in the effective functionality, improvement and
economic operation of the website, so that in this case Art. 6 para. 1 sentence 1 lit. f) GDPR
is the legal basis. The legal basis is also Art. 6 para. 1 sentence 1 lit. b) GDPR if the cookies
to initiate a contract, e.g. for orders.
5. storage period/deletion: The data is deleted as soon as it is no longer required for the purpose for which it was collected.
their collection are no longer required. In the case of the collection of data for the provision of the
website, this is the case when the respective session has ended.
Cookies are otherwise stored on your computer and transmitted by it to our website.
transmitted. As a user, you therefore have full control over the use of cookies.
By changing the settings in your Internet browser, you can prevent the transmission of
Deactivate or restrict cookies. Cookies that have already been saved can be deleted at any time.
can be made. This can also be done automatically. If cookies are deactivated for our website,
it may no longer be possible to use all functions of the website to their full extent.
Here you will find information on deleting cookies by browser:
Chrome: https://support.google.com/chrome/answer/95647
Safari: https://support.apple.com/de-at/guide/safari/sfri11471/mac
Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen

Internet Explorer:
https://support.microsoft.com/de-at/help/17442/windows-internet-explorer-delete-manage-cookies
Microsoft Edge: https://support.microsoft.com/de-at/help/4027947/windows-delete-cookies
6. objection and "opt-out": You can object to the storage of cookies on your hard disk at any time.
regardless of consent or legal permission, generally prevent the processing of personal data by
You can select "do not accept cookies" in your browser settings. However, this can
result in functional restrictions of our offers. You can object to the use of cookies
third-party providers for advertising purposes via a so-called "opt-out" via this American
website (https://optout.aboutads.info) or this European
Website (http://www.youronlinechoices.com/de/praferenzmanagement/) contradict.
Processing of contracts
1. we process inventory data (e.g. company, title/academic degree, names and addresses)
and contact data of users, e-mail), contract data (e.g. services used,
names of contact persons) and payment data (e.g. bank details, payment history) for the purpose of
Fulfillment of our contractual obligations (knowledge of who the contractual partner is; justification,
content and processing of the contract; checking the plausibility of the data) and
Services (e.g. contacting customer service) pursuant to Art. 6 para. 1 sentence 1 lit. b) GDPR.

The entries marked as mandatory in online forms are required for the conclusion of the contract.
required.
2. this data will not be passed on to third parties unless it is necessary for the purpose of prosecution.
our claims (e.g. transfer to a lawyer for collection) or to fulfill the contract
(e.g. transfer of data to payment providers) is required or there is an obligation to do so.
legal obligation pursuant to Art. 6 para. 1 sentence 1 lit. c) GDPR.
3. we may also process the data provided by you in order to inform you about other interesting
products from our portfolio or to send you e-mails with technical information.
to the customer.
4. the data will be deleted as soon as it is no longer required for the purpose for which it was collected.
are necessary. This is the case for inventory and contract data if the data is required for the
execution of the contract are no longer required and no claims from the contract
can be asserted because they are time-barred (warranty: two years /
Standard limitation period: three years). We are obliged to comply with commercial and tax regulations,
to store your address, payment and order data for a period of ten years. However
we restrict the processing after three years if the contract is terminated, i.e.
Your data will only be used to comply with legal obligations. Details in the
user account until it is deleted.

Google Analytics
1. we have integrated the website analysis tool "Google Analytics" (service provider: Google Ireland Limited,
Register No.: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) on our website.
2. data categories and description of data processing: user ID, IP address (anonymized).
When you visit our website, Google places a cookie on your computer to track your use of the website.
of our website by you. We have activated the IP anonymization "anonymizeIP"
is activated, which means that IP addresses are only processed in abbreviated form. On this website, your
IP address of Google therefore within member states of the European Union or in other countries.
States party to the Agreement on the European Economic Area. Only in
In exceptional cases, the full IP address will be transmitted to a Google server in the USA and
shortened there. Google will use this information on behalf of the operator of this website,
to evaluate your use of the website in order to compile reports on website activity
and to compile further data related to the use of the website and the Internet,
to provide services to the controller. Furthermore, we have the
cross-device analysis of website visitors activated via a so-called user ID
is carried out. The IP address transmitted by your browser as part of Google Analytics
will not be merged with other Google data. Further information on data usage
with Google Analytics can be found here: https://www.google.com/analytics/terms/de.html
(Terms of use of Analytics), https://support.google.com/analytics/answer/6004245?hl=de
(Notes on data protection for Analytics) and Google's privacy policy
https://policies.google.com/privacy.
3. purpose of processing: The use of Google Analytics serves the purpose of analysis,
Optimization and improvement of our website.
4. legal bases: If you have consented to the processing of your personal data using "Google
Analytics" from the third-party provider ("opt-in"), then Art. 6 para. 1 sentence 1 lit. a)
DS-GVO is the legal basis. The legal basis is also our legitimate interest in the above purposes
legitimate interest (the analysis, optimization and improvement of our website) in the
Data processing pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR. For services provided in connection with
are provided under a contract, the tracking and analysis of user behavior is carried out in accordance with Art. 6
para. 1 sentence 1 lit. b) GDPR, in order to use the information thus obtained to provide optimized services for the
fulfillment of the purpose of the contract.
5. storage duration: The data sent by us and stored with cookies, user IDs or other
Data linked to advertising IDs is automatically deleted after months. The deletion of data,
whose retention period has been reached is automatically carried out once a month.
6. data transfer/recipient category: Google, Ireland and USA. We have also entered into an agreement with Google
concluded an agreement on order processing in accordance with Art. 28 GDPR.
7. objection and removal options ("opt-out"):
-You can generally prevent cookies from being saved on your hard disk by changing the settings in your
Select "Do not accept cookies" in your browser settings. However, this can
functional limitation of our offers. Furthermore, you can
Collection of the data generated by the cookie and related to your use of the website to
Google and the processing of this data by Google by clicking on the link below.
download and install the browser plugin available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de
-As an alternative to the browser plugin above, you can prevent the collection by Google Analytics
by [__insert here__the Analytics opt-out link of your website]
click. The click sets an "opt-out" cookie that prevents the collection of your data by the
prevents you from visiting this website in the future. This cookie only applies to our website and your
current browser and only lasts until you delete your cookies. In this case
you set the cookie again.
-You can access the cross-device user analysis in your Google account under "My data >
Deactivate "personal data".
Presence in social media
1. we maintain profiles or fan pages on social media. When using and calling up our
profile in the respective network by you, the respective data protection notices and
Terms of use of the respective network.
2. data categories and description of data processing: usage data, contact data,
Content data, inventory data. Furthermore, the data of users within social networks in the
As a rule, data is processed for market research and advertising purposes. For example, the
usage behavior and the resulting interests of the users, user profiles are created.
be created. The usage profiles can in turn be used, for example, to display advertisements within
and outside the networks that presumably correspond to the interests of the users. To
For these purposes, cookies are generally stored on the user's computer, in which the
usage behavior and the interests of users are stored. Furthermore, the
usage profiles, data is also stored independently of the devices used by the users
(especially if the users are members of the respective platforms and are registered with them).
are logged in). For a detailed description of the respective forms of processing and the
For opt-out options, please refer to the data protection declarations and information
the operators of the respective networks. Also in the case of requests for information and the assertion of
of data subject rights, we would like to point out that these are most effectively asserted with the providers.
can be made. Only the providers have access to the users' data and can
directly take appropriate measures and provide information. Should you nevertheless need help
then you can contact us.
3. purpose of the processing: communication with the users connected to the social networks
and registered users; information and advertising for our products, offers and services
Services; external presentation and image cultivation; evaluation and analysis of users and content
our presence in the social media.
4. legal bases: The legal basis for the processing of personal data is
our legitimate interest in the above purposes pursuant to Art. 6 para. 1 sentence 1 lit. f)
DS-GVO. If you have given us or the person responsible for the social network your consent to the
processing of your personal data, the legal basis is Art. 6 para. 1 sentence 1 lit.
a) in conjunction with. Art. 7 GDPR.
5. data transfer/recipient category: social network.
6. the data protection information, information options and objection options (opt-out) of the
respective networks / service providers can be found here:
- Facebook - Service provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour,
Dublin 2, Ireland); Website: www.facebook.com; Privacy Policy:
https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and
http://www.youronlinechoices.com; Opposition:
https://www.facebook.com/help/contact/2061665240770586; agreement on joint
Processing of personal data on Facebook pages (Art. 26 GDPR):
https://www.facebook.com/legal/terms/page_controller_addendum, data protection information for
Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.
- Instagram - Service provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour,
Dublin 2, Ireland) - Privacy Policy/ Opt-Out: https://help.instagram.com/519522125107875,
Opposition: https://help.instagram.com/contact/186020218683230; agreement on joint
Processing of personal data on Instagram pages (Art. 26 GDPR):
https://www.facebook.com/legal/terms/page_controller_addendum.
- Twitter - Service provider: Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103,
USA) - Privacy Policy: https://twitter.com/de/privacy, Opt-Out:
https://twitter.com/personalization.
Social media plug-ins
1. we use social media plug-ins from social networks on our website. In doing so we use
we use the so-called "two-click solution" Shariff from c't or heise.de:
https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html;
Service provider: Heise Medien GmbH & Co. KG, Karl-Wiechert-Allee 10, 30625 Hanover,
Germany; Privacy Policy:
https://www.heise.de/Datenschutzerklaerung-der-Heise-Medien-GmbH-Co-KG-4860.html.
2. data category and description of data processing: usage data, content data,
Inventory data. When you visit our website, "Shariff" does not collect any personal data.
data is transmitted to the third-party providers of the social plug-ins. In addition to the logo or brand of the
social network, you will find a slider with which you can activate the plug-in with a click.
This activation constitutes your consent in the form that the respective provider of the social
network receives the information that you have accessed our website and your
personal data is transmitted to the provider of the plug-in and stored there.
These are so-called third party cookies. With some providers such as Facebook and XING
your IP will be anonymized immediately after collection. The information about the user
The plug-in provider stores the data collected as usage profiles. You can withdraw your consent
can be revoked at any time by deactivating the controller.
3. purpose of data processing: Improvement and optimization of our website; increasing our
Awareness via social networks; possibility of interaction with you and the user
with each other via social networks; advertising, analysis and/or needs-based design of the
Website.
4. legal bases: The legal basis for the processing of personal data is
our legitimate interest in the above purposes pursuant to Art. 6 para. 1 sentence 1 lit. f)
DS-GVO. If you have given us or the person responsible for the social network your consent to the
processing of your personal data, the legal basis is Art. 6 para. 1 sentence 1 lit.
a) in conjunction with. Art. 7 GDPR. In the case of pre-contractual inquiries or when using your
personal data for the fulfillment of the contract, Art. 6 para. 1 sentence 1 lit. b) GDPR
Legal basis.
5. data transfer/recipient category: social network.
6. social networks used and objection: We refer to the purpose and purpose of the use of social networks.
scope of data collection and processing, please refer to the respective data protection declarations of the
social networks. You will also find information about your rights and
Settings options for the protection of your personal data. You have a
right to object to the creation of these user profiles, whereby you have the right to exercise this
rights directly to the respective plug-in provider.
Facebook
1. we have integrated plug-ins from the social network Facebook.com (based in the EU:
Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) as part of the
so-called "two-click solution" from Shariff, which you can recognize by the Facebook logo "f" or the
Add "Like", "Like" or "Share".
2. as soon as you voluntarily activate the Facebook plug-in, a connection is established from your
browser to the Facebook servers. Facebook receives the information,
including your IP that you have accessed our website and transmits this information to
Facebook server in the USA, where this information is stored. If you are logged in to Facebook in
If you are logged into your account, Facebook can assign this information to your account. With
use of the functions of the plug-in, e.g. pressing the "Like" button, these data will be
information is also transferred from your browser to Facebook's servers in the USA and stored there.
stored there and displayed in your Facebook profile and, if applicable, with your friends.
3. the purpose and scope of the data collection and its further processing and use by
Facebook as well as your rights in this regard and setting options to protect your privacy.
privacy can be found in Facebook's privacy policy:
https://www.facebook.com/about/privacy/. Data collection with the "Like" button:
https://www.facebook.com/help/186325668085084. Your settings regarding the use of your
You can manage and object to profile data for advertising purposes on Facebook here:
https://www.facebook.com/ads/preferences/.
4. if you log out of Facebook before visiting our website and delete your cookies,
When the plug-in is activated, no data about the visit to our website is added to your profile.
assigned on Facebook.
5. agreement on joint processing of personal data on Facebook pages (Art.
26 GDPR): https://www.facebook.com/legal/terms/page_controller_addendum,
Data protection information for Facebook pages:
https://www.facebook.com/legal/terms/information_about_page_insights_data.
Twitter
1. we have integrated plug-ins from the social network Twitter.com (Twitter Inc., 1355
Market St., Suite 900, San Francisco, California 94103, USA) within the framework of the so-called
"two-click solution" from Shariff. You can recognize these plug-ins by the Twitter logo with
white bird on a blue background. You can find an overview of Twitter buttons and tweets here
at: https://developer.twitter.com/en/docs/twitter-for-websites/overview.
2. if you are logged into your Twitter account while you are using the Twitter plug-ins voluntarily
Twitter can assign the visit to our website to your Twitter profile.
3. if you wish to exclude the transmission of data to Twitter when activating the plug-in, then
log out of Twitter before visiting our website and delete your cookies.
4. the purpose and scope of the data collection and its further processing and use by
Twitter as well as your rights in this regard and setting options to protect your privacy.
privacy can be found in Twitter's privacy policy:
https://twitter.com/de/privacy. Objection (opt-out): https://twitter.com/personalization.
Instagram
1. we have integrated plug-ins from the social network Instagram (service provider:
Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) as part of the
so-called "two-click solution" from Shariff. You can recognize this by the Instagram logo in the form
a square camera.
2. if you voluntarily activate the plug-in, a connection is established from your browser to the
servers of Instagram. In doing so, Instagram receives the information, including your
IP address that you have visited our site and transmits the information to servers of
Instagram in the USA, where this information is stored. If you are logged into Instagram in your
account are logged in, Instagram can assign this information to your account and you can
click on the Instagram button to share the content of our pages on your Instagram account
and save it and, if necessary, show it to your friends there. We have no knowledge of the
the exact content of the transmitted data, its use and storage duration by Instagram.
3. if you log out of Instagram before visiting our website and delete your cookies,
When the plug-in is activated, no data about the visit to our website is added to your profile.
assigned on Instagram.
4. you can find more information in Instagram's privacy policy/opt-out at /
Opt-out: https://help.instagram.com/519522125107875, objection:
https://help.instagram.com/contact/186020218683230; agreement on joint processing
of personal data on Instagram pages (Art. 26 GDPR):
https://www.facebook.com/legal/terms/page_controller_addendum.
Rights of the data subject
1. objection or revocation against the processing of your data
Insofar as the processing is based on your consent pursuant to Art. 6 para. 1 sentence 1 lit. a), Art. 7 GDPR
you have the right to withdraw your consent at any time. The lawfulness of the
The processing carried out on the basis of the consent until revocation is not affected by this.
Insofar as we base the processing of your personal data on the balancing of interests
pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, you may object to the processing of your personal data.
processing. This is the case if the processing is in particular not necessary for
fulfillment of a contract with you is required, which we will specify in each subsequent
description of the functions. When exercising such an objection
we ask you to explain the reasons why we should not process your personal data as requested by
should be processed by us. In the event of your justified objection, we will check the
situation and will either discontinue or adapt the data processing or provide you with
demonstrate our compelling legitimate grounds for the processing which override your interests.
continue.
You may object to the processing of your personal data for advertising and marketing purposes.
data analysis at any time. You can exercise your right to object free of charge.
You can inform us of your objection to advertising using the following contact details:
myBotanika
Krystian Kalinowski and Frank Bonk GbR.
39 Free floe
44339 Dortmund
E-mail address: info@mybotanika.de
2. right to information
You have the right to obtain confirmation from us as to whether or not personal data concerning you
personal data are processed. If this is the case, you have the right to
Information about your personal data stored by us in accordance with Art. 15 GDPR. This includes
in particular information about the purposes of the processing, the category of personal data
data, the categories of recipients to whom your data has been disclosed or
the planned storage period, the origin of your data, if these are not stored directly by you
were raised.
3. right to rectification
You have the right to have incorrect data corrected or correct data completed in accordance with Art.
16 GDPR.
4. right to erasure
You have a right to erasure of your data stored by us in accordance with Art. 17 GDPR, unless
because statutory or contractual retention periods or other statutory obligations or
Rights to further storage are opposed to this.
5. right to restriction
You have the right to request a restriction on the processing of your personal data.
if one of the conditions in Art. 18 para. 1 lit. a) to d) GDPR is met:
- If you contest the accuracy of the personal data concerning you for a period of time that enables us to
enables the controller to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data
and instead request the restriction of the use of the personal data;
- the controller no longer needs the personal data for the purposes of the processing, or
but you need them for the establishment, exercise or defense of legal claims.
need, or
- if you have objected to the processing pursuant to Art. 21 (1) GDPR and
it is not yet clear whether the legitimate grounds of the controller override your grounds.
predominate.

6. right to data portability
You have a right to data portability in accordance with Art. 20 GDPR, which means that you have the right to
personal data stored by us about you in a structured, commonly used and accessible format.
machine-readable format or the transmission to another responsible person.
can demand.

7. right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. As a rule, you can contact
to the supervisory authority, in particular in the Member State in which they are resident or in which they work
or the location of the alleged infringement.

Data security
In order to protect all personal data that is transmitted to us and to ensure that
the data protection regulations are complied with by us, but also by our external service providers,
we have taken appropriate technical and organizational security measures. Therefore
among other things, all data between your browser and our server via a secure SSL connection
transmitted in encrypted form.