Privacy Policy

Personal Data

Personal data is any data that can be used to identify you personally. We process your personal data (e.g. title, first name, last name, address, email address, phone number) only in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following information explains the nature, scope and purpose of the collection, processing and use of personal data.

Please note that data transmission over the Internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

 

Contact Details of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR), other national data protection laws of the member states and other data protection provisions is:

Eckelmann AG
Berliner Straße 161
65205 Wiesbaden
Germany

Phone +49 611 7103-0
Fax +49 611 7103-133

Email: info@eckelmann.de
Website: www.eckelmann.de

 

Contact Details of the Data Protection Officer

Email: datenschutz@eckelmann.de
Website: www.eckelmann.de

 

Notice on Data Transfers to the USA

Our website includes, among other things, tools from companies based in the USA. When these tools are active, your personal data may be transferred to the US servers of the respective companies. Please note that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to hand over personal data to security authorities without you, as the data subject, being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, analyse and permanently store your data located on US servers for surveillance purposes. We have no influence on these processing activities.

 

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

 

Right to Object

Pursuant to Art. 21 GDPR:

If your personal data is processed to safeguard our overriding legitimate interest (legal basis Art. 6(1)(f) GDPR) or in the public interest (legal basis Art. 6(1)(e) GDPR), you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation.

If you exercise your right to object, we will stop processing the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time and without giving reasons to the processing of your personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

 

SSL/TLS Encryption

For security reasons and to protect the transmission of personal data and other confidential content (e.g. enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock symbol in your browser’s address bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

 

Hosting

We host the content of our website with the following provider:

Mittwald
The provider is Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany (hereinafter Mittwald).

For details, please refer to Mittwald’s privacy policy: https://www.mittwald.de/datenschutz

Mittwald is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable possible presentation of our website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act), insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.

Data Processing Agreement
We have concluded a data processing agreement (DPA) for the use of the above service. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

 

Server Log Files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not combined with other data sources.

This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website, and the server log files have to be recorded for this purpose.

 

Cookies

This website uses technically necessary cookies. These are small text files that are stored by your web browser on your computer system only temporarily and serve solely to make the website work. Other cookies remain stored and recognise your browser on your next visit in order to make the website more user-friendly. The legal basis for this processing is Art. 6(1)(f) GDPR, based on our legitimate interest in the functionality and user-friendliness of our website. If consent to the storage of cookies has been requested, the cookies concerned are stored exclusively on the basis of this consent (Art. 6(1)(a) GDPR); consent can be withdrawn at any time.

Technically necessary cookies are usually deleted when you close your browser. Permanently stored cookies have lifetimes ranging from a few minutes to several years.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. Each browser handles cookie settings differently. Please note that if you do not accept cookies, the functionality of our website may be limited.

Where other cookies (e.g. cookies for analysing your browsing behaviour) are stored, they are dealt with separately in this privacy policy.

 

Consent with Borlabs Cookie

This website uses Borlabs Cookie to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies and to document it in compliance with data protection law. Borlabs Cookie runs exclusively on our own web server; no data is transferred to the manufacturer or other third parties.

When you make your choice, Borlabs Cookie stores a cookie named “borlabs-cookie” in your browser. It contains a randomly generated identifier, the consents you have given or withdrawn and the time of your choice. To document your consent, we store the same information in a consent log on our server; your IP address is not stored. The cookie and the log entry are deleted after 60 days, after which we ask for your consent again. Mandatory statutory retention obligations remain unaffected.

You can change your choice or withdraw your consent at any time by clicking the cookie icon at the bottom right of every page.

Borlabs Cookie is used to obtain the consents required by law for the use of certain technologies. The legal basis for this is Art. 6(1)(c) GDPR. The cookie “borlabs-cookie” is strictly necessary for this purpose and is therefore stored without consent pursuant to Section 25(2) no. 2 TDDDG.

 

Contact Form

When you contact us (e.g. via the contact form or by email), personal data is collected. The data concerned can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your enquiry or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your enquiry pursuant to Art. 6(1)(f) GDPR. An additional legal basis is Art. 6(1)(b) GDPR if your enquiry aims at the conclusion of a contract, or your consent pursuant to Art. 6(1)(a) GDPR if it was requested. The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to its storage or the purpose for storing the data no longer applies (e.g. after your enquiry has been dealt with). Mandatory statutory provisions, in particular retention periods, remain unaffected.

 

Enquiries by Email, Phone or Fax

If you contact us by email, phone or fax, your enquiry including all personal data arising from it (name, enquiry) is stored and processed by us for the purpose of dealing with your request. We do not pass this data on without your consent; the only exception is the shared use within the Eckelmann Group described in the section “Contact by Phone”.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if it was requested; consent can be withdrawn at any time.

The data you send us with enquiries remains with us until you ask us to delete it, withdraw your consent to its storage or the purpose for storing the data no longer applies (e.g. after your request has been dealt with). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

For phone calls, the information in the following section “Contact by Phone” also applies.

 

Contact by Phone

When you call us, we process the connection data of your call: your phone number, the date, time and duration of the call, and whether and in which department your call was answered. The content of calls is not recorded.

We use this data to return missed calls and to plan our telephone availability. We also link your phone number to your company, and to your name only if you have given it to us. This link also covers the subsidiaries of the Eckelmann Group that use our telephone system.

The legal basis for the processing is our legitimate interest in reliable telephone availability and in looking after our customers (Art. 6(1)(f) GDPR). If your call is related to the performance of a contract or is necessary to carry out pre-contractual measures, the processing is additionally based on Art. 6(1)(b) GDPR.

We delete the details of individual calls after 30 days. We delete the link between your phone number and your company twelve months after your last call.

 

Newsletter

If you subscribe to one of our email newsletters, we will regularly send you information about our offers. For this purpose, we collect, process and use the data fields shown in the registration form. We send the newsletter using the so-called double opt-in procedure. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving newsletters. For this, you will receive a confirmation email in which you complete your newsletter subscription by clicking on a designated link. After that, we will be pleased to send you our newsletter.

By activating the confirmation link, you give us your consent to the collection, processing and use of your personal data pursuant to Art. 6(1)(a) GDPR.

You can withdraw this consent at any time with effect for the future by unsubscribing from the newsletter. For this purpose, every newsletter contains an “Unsubscribe” link. The data you have provided to us for receiving the newsletter is stored by us until you unsubscribe from the newsletter and is deleted from the newsletter distribution list after you unsubscribe. Data stored by us for other purposes remains unaffected.

This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany, with whom we have concluded a data processing agreement. CleverReach is a service with which newsletter distribution can be organised and analysed. The data you enter to subscribe to the newsletter (e.g. email address) is stored on CleverReach’s servers in Germany or Ireland. Our newsletters sent with CleverReach allow us to analyse the behaviour of the newsletter recipients. Among other things, we can analyse how many recipients opened the newsletter and how often which link in the newsletter was clicked. Further information on data analysis by CleverReach newsletters is available at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

The data processing is based on your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time by unsubscribing from the newsletter. The lawfulness of the data processing already carried out remains unaffected by the withdrawal.

If you do not want any analysis by CleverReach, you have to unsubscribe from the newsletter. For this purpose, every newsletter contains a corresponding link. You can also unsubscribe from the newsletter directly on the website.

The data you have provided for receiving the newsletter is stored by us or the newsletter service provider until you unsubscribe from the newsletter and is deleted from the newsletter distribution list after you unsubscribe. Data stored by us for other purposes remains unaffected.

After you have been removed from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist in order to prevent future mailings. The data from the blacklist is used only for this purpose and is not combined with other data. This serves both your interest and our interest in complying with the legal requirements for sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

For details, please refer to CleverReach’s privacy policy at: https://www.cleverreach.com/de/datenschutz/.

Data Processing Agreement
We have concluded a data processing agreement (DPA) for the use of the above service. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

 

Applicant Data

We offer you the opportunity to apply to us (e.g. via an online application form). Below we inform you about the scope, purpose and use of the personal data collected from you during the application process. We assure you that your data is collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data is treated in strict confidence.

When you send us an application, we process the associated personal data (e.g. contact and communication data, application documents, notes from job interviews, etc.) to the extent necessary to decide on the establishment of an employment relationship. The legal basis for this is Section 26 BDSG (German Federal Data Protection Act; initiation of an employment relationship), Art. 6(1)(b) GDPR (general initiation of a contract) and, if you have given consent, Art. 6(1)(a) GDPR. Consent can be withdrawn at any time. Within our company, your personal data is passed on only to persons involved in processing your application.

If your application is successful, the data you submitted is stored in our data processing systems on the basis of Section 26 BDSG and Art. 6(1)(b) GDPR for the purpose of carrying out the employment relationship.

If we cannot offer you a position, you decline a job offer or you withdraw your application, we reserve the right to keep the data you submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data is then deleted or destroyed. The retention serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be needed after the 6-month period has expired (e.g. because of an impending or pending legal dispute), it will only be deleted when the purpose for the further retention no longer applies.

Longer retention may also take place if you have given your consent to it (Art. 6(1)(a) GDPR) or if statutory retention obligations prevent deletion.

If we do not make you a job offer, we may be able to include you in our applicant pool. In that case, all documents and information from your application are transferred to the applicant pool so that we can contact you if suitable vacancies arise.

Inclusion in the applicant pool takes place exclusively on the basis of your express consent (Art. 6(1)(a) GDPR). Giving consent is voluntary and has no bearing on the ongoing application process. You can withdraw your consent at any time. In this case, the data is irrevocably deleted from the applicant pool unless there are statutory reasons for retention.

Data in the applicant pool is irrevocably deleted no later than two years after consent was given.

To optimise our recruitment processes, we use the job advertisement and applicant management software of HRworks GmbH, Waldkircher Str. 28, 79106 Freiburg, Germany. We have concluded a data processing agreement with HRworks.

 

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool with which we integrate and manage statistics and marketing services on our website. It does not create user profiles, does not set its own cookies and does not analyse any data. It only controls which services are loaded: it loads Google Analytics, Google Ads, the LinkedIn Insight Tag and Leadinfo only after you have given your consent in Borlabs Cookie. We load Google Tag Manager itself only after you have consented to “Statistics” in Borlabs Cookie; without this consent, none of the services mentioned are loaded either. When Google Tag Manager is loaded, Google receives your IP address; it may also be transferred to Google LLC in the USA.

Google Tag Manager is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time, for example via the cookie icon at the bottom right of every page.

Google LLC is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Further information: https://www.dataprivacyframework.gov/

 

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. The website operator receives various usage data, such as page views, time spent on the site, operating systems used and the origin of the user. This data is assigned to the user’s respective device. It is not assigned to a user ID.

Google Analytics also allows us to record, among other things, your mouse and scroll movements and clicks. In addition, Google Analytics uses various modelling approaches to supplement the collected data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that make it possible to recognise the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time.

Data transfers to the USA are based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

Browser Plug-in
You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Further information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

 

Google Ads Conversion Tracking

This website uses Google Ads conversion tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Conversion tracking allows us to measure whether visitors who came to our website via one of our ads on Google carry out certain actions here, for example sending an enquiry. For this purpose, Google stores cookies on your device (including “_gcl_aw” and “_gcl_au”, storage period 90 days). We receive from Google only aggregated statistics that do not allow individual persons to be identified. If you are logged in to Google, Google may assign the data to your Google account.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time, for example via the cookie icon at the bottom right of every page.

Google LLC is certified under the EU-US Data Privacy Framework (see the section “Google Tag Manager”). Further information can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en

 

LinkedIn Insight Tag

This website uses the LinkedIn Insight Tag. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

The Insight Tag allows us to measure how successful our advertising on LinkedIn is and to show visitors to our website relevant ads on LinkedIn (retargeting). We also receive aggregated reports on professional characteristics of our visitors, such as industry, job function or company size; these do not allow conclusions about individual persons. For this purpose, LinkedIn stores cookies on your device (including “li_fat_id”, “bcookie” and “lidc”) and processes, among other things, your IP address, information about your device and browser, the page visited and the time of the visit. If you are logged in to LinkedIn, LinkedIn may assign the visit to your profile. According to LinkedIn, direct identifiers are removed (pseudonymised) within seven days and the remaining data is deleted after 180 days.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time, for example via the cookie icon at the bottom right of every page.

Data may be transferred to LinkedIn Corporation in the USA, which is certified under the EU-US Data Privacy Framework. You can also switch off advertising based on your website visits directly at LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Further information can be found in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy

Joint Controllership
Insofar as personal data is collected on our website by means of the LinkedIn Insight Tag and transmitted to LinkedIn, we and LinkedIn Ireland Unlimited Company are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited to collecting the data on our website and transmitting it to LinkedIn. The processing that takes place at LinkedIn after the transmission is not part of the joint responsibility; LinkedIn alone is responsible for it.

The joint obligations are governed by the terms that LinkedIn sets for the use of the Insight Tag. We inform you about the data collection on our website and obtain your consent for it. LinkedIn is responsible for the security of the data at LinkedIn and for fulfilling your data subject rights with regard to the data processed by LinkedIn. You can assert your rights both with us and directly with LinkedIn.

 

Leadinfo

We use the Leadinfo service of Leadinfo B.V., Crooswijksesingel 50, 3034 CJ Rotterdam, the Netherlands.

Based on the IP address, Leadinfo identifies which companies visit our website and shows us publicly available information about these companies, for example company name and address. For this purpose, Leadinfo sets two cookies: “_li_id” recognises your browser on further visits (storage period two years), “_li_ses” applies only to the current visit. Leadinfo also processes the pages visited, the time and duration of the visit and the page from which you came. According to Leadinfo, it assigns visits to companies, not to individual persons.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time, for example via the cookie icon at the bottom right of every page.

Further information and an option to object can be found at Leadinfo: https://www.leadinfo.com/en/legal/opt-out/ and in Leadinfo’s privacy policy: https://www.leadinfo.com/en/legal/privacy/

Data Processing Agreement
We have concluded a data processing agreement (DPA) for the use of the above service. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

 

YouTube with Enhanced Privacy

Our website embeds videos from YouTube, a website operated by Google. The operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in privacy-enhanced mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the privacy-enhanced mode does not necessarily exclude the passing on of data to YouTube partners. For example, YouTube connects to the Google DoubleClick network regardless of whether you watch a video.

As soon as you start a YouTube video on this website, a connection to YouTube’s servers is established. The YouTube server is informed which of our pages you have visited. If you are logged in to your YouTube account, you enable YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

In addition, after a video has been started, YouTube may store various cookies on your device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to compile video statistics, improve user-friendliness and prevent fraud attempts.

After a YouTube video has been started, further data processing operations may be triggered over which we have no control.

YouTube is used in the interest of an appealing presentation of our online offering. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.

Further information on how YouTube handles user data can be found in Google’s privacy policy at: https://policies.google.com/privacy?hl=en

 

Google Fonts (Local Hosting)

For the uniform display of fonts, this website uses so-called Google Fonts provided by Google. The Google Fonts are installed locally. No connection to Google’s servers is established.

Further information on Google Fonts is available at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=en.

 

Rights of the Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against the controller:

Right of access pursuant to Art. 15 GDPR:

You have the right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing and objection to processing, the right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed which safeguards pursuant to Art. 46 GDPR exist when your data is transferred to third countries.

Right to rectification pursuant to Art. 16 GDPR: You have the right to have your data rectified if the personal data processed by us is incorrect and/or incomplete.

Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if one of the conditions of Art. 17(1) GDPR is met. However, this right does not exist if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data for the duration of the verification of your data, if you request the restriction of processing instead of the erasure of your data because of unlawful data processing, if we no longer need your data for the purposes of processing but you need it for the establishment, exercise or defence of legal claims, or if you have objected to the processing and it has not yet been determined whether our legitimate grounds override yours.

Right to notification pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate this rectification, erasure or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller, where technically feasible.

Right to withdraw consent pursuant to Art. 7(3) GDPR: You have the right to withdraw consent you have given to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without undue delay unless further processing can be based on a legal basis that does not require consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.

Right to lodge a complaint pursuant to Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority with which the complaint has been lodged informs the complainant of the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

 

Storage Period of Personal Data

The storage period of personal data is determined by the respective statutory retention period (e.g. retention periods under commercial and tax law). After the period has expired, the data concerned is routinely deleted, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in further storage.