Privacy policy
Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide your data. Failure to provide it will have no consequences. This applies only insofar as no other provision is made in the following processing activities.
“Personal data” means any information relating to an identified or identifiable natural person.
Server Log Files
You can visit our websites without providing any personal information.
Whenever you access our website, usage data is transmitted to us or to our web host / IT service provider by your Internet browser and stored in log files (so-called server log files). The stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, based on our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.
Your data may be transferred to and processed in third countries outside the EU, particularly in Canada and the USA. An adequacy decision by the European Commission exists for Canada. For the USA, an adequacy decision by the European Commission exists, namely the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is carried out on the basis of contractual obligations comparable to the European Commission’s Standard Contractual Clauses.
Contact
Data Controller
If you wish, you may contact us. The controller responsible for data processing is:
Lewat Group - Owner: Roger Lewat
Rene Schickele Strasse 34
79117 Freiburg im Breisgau
Germany
Phone: +49 761 59519072
Email: lewatgroup@outlook.com
Customer-Initiated Contact by Email
If you contact us by email on your own initiative for business purposes, we collect your personal data (name, email address and message content) only to the extent provided by you. The processing of data serves the purpose of handling and responding to your contact request.
If the contact serves to carry out pre-contractual measures (e.g. consultation regarding a purchase interest or preparation of an offer) or concerns an existing contract between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, based on our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR.
We use your email address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
Collection and Processing of Personal Data When Using the Contact Form
When using our contact form, we collect your personal data (name, email address and message content) only to the extent provided by you. The processing of data serves the purpose of contacting you.
If the contact serves to carry out pre-contractual measures (e.g. consultation regarding a purchase interest or preparation of an offer) or concerns an existing contract between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, based on our overriding legitimate interest in processing and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR.
We use your email address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
WhatsApp Business
If you contact us for business purposes via WhatsApp, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The processing of data serves the purpose of handling and responding to your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name if provided, and any other data you provide to us.
We use a mobile device whose address book contains exclusively data from users who have contacted us via WhatsApp. Accordingly, no personal data is transmitted to WhatsApp by us without you having already consented to this with WhatsApp.
Your data is transmitted by WhatsApp to servers operated by Meta Platforms Inc. in the USA. An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. is certified under the TADPF and has therefore undertaken to comply with European data protection principles.
If the contact serves to carry out pre-contractual measures (e.g. consultation regarding a purchase interest or preparation of an offer) or concerns an existing contract between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, based on our overriding legitimate interest in providing a quick and simple means of contact and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR.
We use your personal data only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
Further information on the terms of use and data protection when using WhatsApp can be found at:
https://www.whatsapp.com/legal/#terms-of-service
https://www.whatsapp.com/legal/#privacy-policy
Customer Account / Orders
Customer Account
When opening a customer account, we collect your personal data to the extent specified there. The processing of data serves the purpose of improving your shopping experience and simplifying order processing.
Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Your customer account will subsequently be deleted.
Collection, Processing and Disclosure of Personal Data When Placing Orders
When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries.
The provision of data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded.
Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and is necessary for the performance of a contract with you.
Your data may be disclosed, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers involved in order processing and IT service providers. In all cases, we strictly comply with statutory requirements. The scope of data transferred is limited to the minimum necessary.
Your data may be transferred to and processed in third countries outside the EU, particularly in Canada and the USA. An adequacy decision by the European Commission exists for Canada. For the USA, an adequacy decision by the European Commission exists, namely the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is carried out on the basis of contractual obligations comparable to the European Commission’s Standard Contractual Clauses.
Reviews / Advertising
Shopauskunft Customer Reviews
We use the review tool “shopauskunft.de” provided by Händlerbund Management AG (Kohlgartenstraße 11–13, 04315 Leipzig; “Shopauskunft”) on our website.
After your order, we would like to invite you to rate and comment on your purchase. For this purpose, we contact you by email and use the technical system “Legally Compliant Review Request (RBA)”.
For this purpose, we process data relating to your order (order number/invoice number, purchase value and shipping costs) as well as your email address. Where applicable, we may also use this data to verify your review.
Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent, provided that you have expressly consented to the disclosure of your data and to receiving the review request.
You may withdraw your consent at any time by using the corresponding link in the email or by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information on data protection when using Shopauskunft can be found at:
https://www.shopauskunft.de/datenschutz
Use of Judge.me
We use the “Judge.me” review system provided by Judge.me Ltd (c/o Buckworths, 2nd Floor, 1–3 Worship Street, London, England, EC2A 2AB; “Judge.me”) on our website.
Judge.me enables us to collect customer reviews and display them on our website in order to provide you with insight into the quality of our services.
After placing an order, you may receive an invitation from us or Judge.me to submit a review and may then provide a review.
The following data may be processed by us and/or Judge.me: email address, name, telephone number, address, information about your device (IP address, web browser information and operating system), information about the purchased product or service (order number and product details), the content of your review and the star rating you provide, as well as product photos or videos if you have attached them to your product review.
This data may also be used, where applicable, to verify your review.
Judge.me uses technologies such as cookies.
Your data may be transferred outside the EU to the United Kingdom. An adequacy decision by the European Commission exists for the United Kingdom.
Your data may also be transferred to the USA. An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Judge.me is not certified under the TADPF. This data transfer is carried out on the basis of special contracts approved for use in the United Kingdom that provide the same level of protection as personal data receives in the United Kingdom.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR.
The processing of your personal data is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR, provided that you have expressly consented to the disclosure of your data and receipt of the review request.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information on data protection when using Judge.me can be found at:
Review Reminder
After your order, we would like to ask you to review your purchase.
For this purpose, we use your personal data (name, email address and order information), independently of contract processing, to send you a review reminder by email after you have completed a purchase, provided that you have expressly consented to this.
Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent.
You may withdraw your consent at any time by using the corresponding link in the email or by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Use of Email Address for Sending Newsletters
We use your email address to send information and offers by newsletter, provided that you have expressly consented to this.
Data processing serves exclusively the purpose of advertising communication.
For this purpose, we process your email address and, where applicable, additional data that you voluntarily provided when subscribing to our newsletter.
Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us.
Your email address will then be removed from the mailing list.
Despite removal from the mailing list, we may continue to store your email address on a so-called blacklist in order to prevent you from receiving newsletter emails from us in the future.
This storage is based on Art. 6 para. 1 lit. f GDPR, based on our legitimate interest and your legitimate interest in preventing the repeated use of your email address for sending our newsletter.
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data.
Shipping Service Providers / Inventory Management
Disclosure of Email Address to Shipping Companies for Shipping Status Information
As part of contract processing, we disclose your email address to the transport company if you have expressly consented to this during the ordering process.
The disclosure serves the purpose of informing you by email about the status of your shipment.
Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent.
You may withdraw your consent at any time by notifying us or the transport company.
Use of an External Inventory Management System
For contract processing, we use an inventory management system as part of order processing.
For this purpose, the personal data collected as part of your order is transmitted to:
Pickware GmbH
Goebelstr. 21
64293 Darmstadt
Germany
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Payment Service Providers
Use of PayPal Checkout
We use the PayPal Checkout payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22–24 Boulevard Royal, L-2449 Luxembourg; “PayPal”) on our website.
Data processing serves the purpose of offering you payment through the payment service.
When selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method.
This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Cookies may be stored in this process, enabling your browser to be recognized.
The resulting data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, based on our overriding legitimate interest in providing a customer-oriented range of payment methods.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.
Credit Card via PayPal, Direct Debit via PayPal & “Pay Later” via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit reference agencies.
For this purpose, PayPal transmits the personal data required for the credit assessment to a credit reference agency and uses the information regarding the statistical probability of payment default to make a balanced decision concerning the establishment, execution or termination of the contractual relationship.
The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, which may include address data.
Your legitimate interests are taken into account in accordance with statutory provisions.
Data processing serves the purpose of credit assessment for the initiation of a contract.
Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, based on our overriding legitimate interest in protecting against payment default where PayPal makes advance payments.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data by notifying PayPal.
Providing the data is necessary for concluding the contract using the payment method you have selected.
Failure to provide the data means that the contract cannot be concluded using the payment method you have selected.
Third-Party Providers
When payment is made using a third-party payment method, the data required for payment processing is transmitted to PayPal.
This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
To process the selected payment method, PayPal may subsequently transmit the data to the respective provider.
This processing is also carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Local third-party providers may include:
-
Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
-
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Purchase on Account via PayPal
When paying by purchase on account, the data required for payment processing is initially transmitted to PayPal.
To process this payment method, PayPal subsequently transmits the data to Ratepay GmbH (Franklinstraße 28–29, 10587 Berlin; “Ratepay”) in order to fulfill the contract with you using the selected payment method.
This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Ratepay may conduct a credit assessment based on mathematical-statistical procedures using credit reference agencies, following the procedure described above.
Data processing serves the purpose of credit assessment for the initiation of a contract.
Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, based on our overriding legitimate interest in protecting against payment default where Ratepay makes advance payments.
Further information on data protection and the credit reference agencies used by Ratepay can be found at:
https://www.ratepay.com/legal-payment-dataprivacy/
https://www.ratepay.com/legal-payment-creditagencies/
Further information on data processing when using PayPal can be found in PayPal’s privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of Shopify Payments
We use the “Shopify Payments” payment service provided by Shopify International Limited (2nd Floor Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website.
Payment processing in this case is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; “Stripe”).
Data processing serves the purpose of offering you payment through Shopify Payments.
When you select and use a corresponding Shopify Payments payment method, the data required for payment processing is transmitted to Stripe in order to fulfill the contract with you using the selected payment method.
This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Stripe reserves the right to obtain a credit report based on mathematical-statistical procedures using credit reference agencies, where applicable.
For this purpose, Stripe transmits the personal data required for the credit assessment to a credit reference agency and uses the information regarding the statistical probability of payment default to make a balanced decision concerning the establishment, execution or termination of the contractual relationship.
The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, which may include address data.
Your legitimate interests are taken into account in accordance with statutory provisions.
Data processing serves the purpose of credit assessment for the initiation of a contract.
Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, based on our overriding legitimate interest in protecting against payment default where Stripe makes advance payments.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data by notifying Stripe.
Providing the data is necessary for concluding the contract using the payment method you have selected.
Failure to provide the data means that the contract cannot be concluded using the payment method you have selected.
Further information on data processing when using Shopify Payments can be found in Shopify’s privacy policy:
https://www.shopify.com/de/legal/datenschutz
Further information on data processing by the payment service provider Stripe can be found in Stripe’s privacy policy:
Cookies
Our website uses cookies.
Cookies are small text files that are stored in the Internet browser or by the Internet browser on a user’s computer system.
When a user visits a website, a cookie may be stored on the operating system of the user.
This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies.
By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and transmission of the data contained therein.
Previously stored cookies can be deleted at any time.
Please note, however, that you may then not be able to use all functions of this website to their full extent.
You can find information on how to manage cookies, including how to disable them, in the following links for the most important browsers:
Chrome:
https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge:
https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox:
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari:
https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically Necessary Cookies
Unless otherwise stated in this privacy policy, we use only technically necessary cookies for the purpose of making our services more user-friendly, effective and secure.
Cookies also enable our systems to recognize your browser even after you have navigated to another page and to provide you with services.
Some functions of our website cannot be offered without the use of cookies.
For these functions, it is necessary for the browser to be recognized even after changing pages.
The use of cookies or comparable technologies is based on § 25 para. 2 TDDDG.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR, based on our overriding legitimate interest in ensuring the optimal functionality of the website and providing a user-friendly and effective service.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.
Use of the Shopify Consent Tool (Shopify Privacy & Compliance)
We use the “Shopify Privacy & Compliance” consent tool provided by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website.
Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool enables you to provide consent to data processing via the website, particularly the setting of cookies, and to exercise your right to withdraw consent that has already been given.
The data processing serves the purpose of obtaining and documenting the consent required for data processing and thereby complying with legal obligations.
Cookies may be used for this purpose.
User information, including your IP address, may be collected and transmitted to Shopify.
Your data may be transferred to and processed in third countries outside the EU, particularly in Canada and the USA.
An adequacy decision by the European Commission exists for Canada.
For the USA, an adequacy decision by the European Commission exists, namely the Trans-Atlantic Data Privacy Framework (TADPF).
Shopify is not certified under the TADPF.
This data transfer is carried out on the basis of contractual obligations comparable to the European Commission’s Standard Contractual Clauses.
Data processing is carried out to comply with a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.
Further information on data protection at Shopify can be found at:
https://www.shopify.com/de/legal/datenschutz
Plug-ins and Other Services
Use of Facebook Single Sign-On
We use the single sign-on function (formerly Facebook Connect) of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “Facebook”) on our website.
Meta Platforms Ireland and we are joint controllers for the collection of your data and its transmission to Facebook when the service is integrated.
The basis for this is an agreement between us and Meta Platforms Ireland concerning joint processing of personal data, which defines the respective responsibilities.
The agreement can be accessed at:
https://www.facebook.com/legal/controller_addendum
Under this agreement, we are particularly responsible for fulfilling the information obligations pursuant to Arts. 13 and 14 GDPR, complying with the security requirements of Art. 32 GDPR regarding the correct technical implementation and configuration of the service, and complying with the obligations under Arts. 33 and 34 GDPR insofar as a personal data breach concerns our obligations under the joint processing agreement.
Meta Platforms Ireland is responsible for enabling data subject rights under Arts. 15–20 GDPR, complying with the security requirements of Art. 32 GDPR regarding the security of the service, and complying with the obligations under Arts. 33 and 34 GDPR insofar as a personal data breach concerns Meta Platforms Ireland’s obligations under the joint processing agreement.
This function enables website visitors to log in to the website using their existing Facebook account.
The data processing serves the purpose of verification during registration, personalization and interest-based advertising.
In order to provide this function on the website, a connection to Facebook’s servers is established.
Cookies are used for this purpose.
Among other things, the following information may be collected and transmitted to Facebook: IP address, browser information, referrer URL (the website from which you accessed our website) and location data.
This applies regardless of whether you are registered with or logged in to the social network.
Even users who are not registered or logged in may have data transmitted.
If you are simultaneously connected to one or more of your social network accounts, the information collected may also be associated with your corresponding profiles.
You can prevent this association by logging out of your social media accounts before visiting our website and before activating the buttons.
Your data may be transferred to the USA.
An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF).
Meta has been certified under the TADPF and has therefore undertaken to comply with European data protection principles.
When using the single sign-on function, the website visitor’s Facebook profile is linked to a customer account on this website.
Facebook provides us with personal data of the user as specified during the login process.
This may include, among other things, name, address, public profile information (e.g. name, profile picture, age and gender), email address, friends lists and “Likes”.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR.
The processing of your personal data is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information on the collection and use of your data by Facebook, your rights and options for protecting your privacy can be found in Facebook’s privacy information:
https://www.facebook.com/about/privacy/
Use of Google Translate
We use the translation service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website through an API integration.
The data processing serves the purpose of displaying the information provided on the website in other languages.
In order for the translation to be automatically displayed in the country language selected by you, the browser you use establishes a connection to Google’s servers.
Cookies may be used for this purpose.
Among other things, the following information may be collected and processed: IP address, URL of the visited page, date and time.
Your data may be transferred to the USA.
An adequacy decision by the European Commission exists for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF).
Google has been certified under the TADPF and has therefore undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR.
The processing of your personal data is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information on the collection and use of your data by Google can be found at:
https://www.google.com/policies/privacy/
Data Subject Rights and Retention Period
Retention Period
After the contract has been fully processed, the data will initially be stored for the duration of the statutory warranty period.
It will then be stored taking into account statutory retention obligations, particularly those under tax and commercial law, and subsequently deleted once the applicable retention period has expired, unless you have consented to further processing and use.
Rights of the Data Subject
Subject to the applicable legal requirements, you have the following rights under Arts. 15 to 20 GDPR:
-
Right of access
-
Right to rectification
-
Right to erasure
-
Right to restriction of processing
-
Right to data portability
In addition, pursuant to Art. 21 para. 1 GDPR, you have the right to object to processing based on Art. 6 para. 1 lit. f GDPR, as well as to processing for the purpose of direct marketing.
Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful.
Among other authorities, you may lodge a complaint with the supervisory authority responsible for us at the following contact details:
State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
Königstrasse 10 a
70173 Stuttgart
Germany
Tel.: +49 711 6155410
Fax: +49 711 61554115
Email: poststelle@lfdi.bwl.de
Right to Object
Where the data processing described here is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, you have the right, for reasons arising from your particular situation, to object at any time to such processing with effect for the future.
Following an objection, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.