Der Artikel wurde erfolgreich in den Warenkorb gelegt
Ihr Warenkorb ist leer

Privacy Statement

Privacy

The operators of this site take the protection of your personal data very seriously. We treat your personal information confidentially and in accordance with statutory data protection rules and this Privacy Statement.

Our website can generally be used without providing personal data. Any personal data (e.g. name, address or email addresses) provided is always voluntary, where possible. This data is not disclosed to third parties without your express consent.

Please note, data transmission via the Internet (e.g. email communication) may hold security vulnerabilities. It is not possible to fully protect data from third party access.

 

Encryption

To protect data, which you have disclosed while using this site, from unwanted external access, we use an encryption process. Your details are transferred via the Internet from your computer to our server and vice versa by means of an SSL (Secure Socket Layer) encryption process. This is shown by a closed padlock symbol on the status bar on your browser and by the address bar that starts with .

 

Privacy Statement for the Use of Facebook Plugins (like button)

Plugins from the social network Facebook, operator Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated in our site. You can recognize the Facebook plugins by the Facebook logo or the “like” button on our site. You will find an overview of the Facebook plugins here: developers.facebook.com/docs/plugins/.

When you visit our site, a direct connection is made between your browser and the Facebook server via the plugin. Facebook is thus informed that you have visited our site with your IP address. If you click the Facebook “like” button while you are logged in to your Facebook account, you can link the contents of our website to your Facebook profile. Facebook can thereby associate your visit to our site with your user account. Please note, as operators of the site we do not receive any information about the content of the transferred data nor of their use by Facebook. You can find further information on this subject in Facebook’s privacy statement at: de-de.facebook.com/policy.php.

If you do not want Facebook to associate your visit to our site with your user account, please log out of your Facebook user account.

 

Privacy Statement for the Use of Google Services

We also use Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Google Analytics also uses cookies, which enable an analysis of your use of our website and online services. The information about your use of this website and online offers generated by the cookie is transmitted to a Google server in the USA and stored. The Ledlenser GmbH & Co. KG uses Google Analytics with the extension “_anonymizeIp()” so that the IP addresses transmitted to Google are first shortened and further processed on servers in Europe, to prevent them being directly linked to a particular individual. Google uses this information to evaluate your use of the website, to compile reports on website activities for the website operators, and to render other services associated with the use of the website and the Internet. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will never associate your IP address with any other Google data. You can also prevent the cookie for Google Analytics from being installed by configuring your browser software; however, please be aware that in this case, you may not be able to use all functions of this website to the full extent. You can object to the data collection and storage for Google Analytics at any time with future effect by means of a Google browser plugin.

As an AdWords customer we also use Google Conversion Tracking, an analysis service from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). A cookie by Google AdWords will thereby be set on your computer (“Conversion Cookie”) if you arrive at our website via a Google advertisement. These cookies expire within 30 days and are not used for personal identification purposes. If you visit certain pages of ours and the cookie has not yet expired, we and Google can recognize that someone has clicked on the advertisement and was thus transferred to our website. Each AdWords customer receives a different cookie. Cookies can therefore not be traced back to the websites of AdWords customers. We use the information collected by the conversion cookie to provide aggregate conversion statistics to advertisers who have opted for conversion tracking. AdWords customers are informed of the total number of users who have clicked on their advertisement and were transferred to a site that has a conversion tracking tag. However, they do not receive any information, which allow users to be personally identified. If you do not want to be included in the tracking procedure, you can also reject the use of cookies which is necessary for this purpose – for example, by a browser setting which deactivates the automatic use of cookies in general. You can also deactivate cookies for conversion tracking by configuring your browser in such a way that cookies from the domain “googleadservices.com” are blocked.

If you visit our site using a mobile device (e.g. smartphone or tablet), you can object to the use of Google Analytics with future effect via this link. When you activate the link, we set a cookie in your browser which sends a signal to us to prevent the use of Google Analytics for your device. Please note that you need to object to the use of Google Analytics again if you remove the cookies from your browser.

We also use Google AdSense, a web advertisements service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google”) to control advertising (text advertisements, banners, etc.). Your browser therefore may save a cookie sent by Google or a third party. The information saved in the cookie can be recorded, collected and analyzed by Google or a third party. In addition, Google AdSense also uses small, invisible graphics to collect information. The use of these allows simple actions like visitor traffic on the website to be recorded, collected and analyzed. The information generated by the cookie and/or graphics concerning your use of this website will be passed on to a Google server in the USA and saved there. Google uses the information obtained in this way to perform an evaluation of your usage patterns with regard to the AdSense ads. Google may also transmit this information to third parties where required by law, or for third parties to process the information on behalf of Google. Google does not associate your IP address with other saved data held by Google. You can prevent cookies from being saved on your hard drive as well as the use of the aforementioned graphics. The same applies to these cookies as to the others mentioned above: To do so you need to deactivate the acceptance of cookies in your browser settings.

We use the remarketing technology of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). With this technology, users who have visited out web pages and online services and have shown interest in our offer will again be presented with personalized advertisements on Google partner network websites. Advertising is displayed by using cookies, small text files saved to the computer of the user. These text files can be used to analyze user behavior when visiting the website and then be used for selective product recommendations and interest-based advertising.

If you do not wish to see any interest-based advertisements, you can prevent Google from using cookies for these purposes by visiting www.google.de/settings/ads . You can optionally disable third party cookies by visiting the Network Advertising Initiative opt-out page.

You can prevent cookies from being stored by configuring your browser software accordingly; however, please be aware that in this case, you may not be able to use all functions of this website to the full extent. Furthermore, you can prevent Google from logging your use of this website as recorded by the cookie, as well as from processing this data (incl. your IP address), by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout

By using our services, you agree to the processing of your personal data collected by Google in the aforementioned manner and for the aforementioned purpose. Please note that Google has its own privacy guidelines which are independent from ours. We assume no responsibility or liability for these guidelines and procedures. Please inform yourself of Google’s privacy policy before using our website.

 

Privacy Statement for the Use of Google +1

Our site uses functions from Google +1. The operator is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Collection and dissemination of information: By using the Google +1 button you can publish information worldwide. Via the Google +1 button you and our other users can receive personalized content from Google and our partners. Google saves both information related to the content that you have given a +1 for, and information about the page that you were viewing when you clicked on +1. Your +1s can be displayed as information with your profile name and photo in Google services, such as in search results or your Google profile, or in other places on websites or advertisements on the Internet. Google records information concerning your +1 activities to improve Google services for you and others. In order to use +1 buttons you need a Google profile that is visible and public worldwide, which at least contains the name that was selected for the profile. This name is used by all Google services. In some cases, this name can also replace another name which you have used when sharing content via your Google account. The identity of your Google profile can be shown to users who know your email address or other identifying information about you.

Use of the collected information: In addition to the uses mentioned above, the information provided by you will also be used in accordance with the applicable Google privacy policy. Google may publish aggregate statistics concerning users’ +1 activities, or might communicate these to users and partners, such as publishers, advertisers or linked websites.

 

Privacy Statement for the Use of etracker

Our website uses the analysis service etracker. The operator is etracker GmbH, 1 Erste Brunnenstraße, 20459 Hamburg, Germany.

User profiles can be created from the data under pseudonyms. Cookies may be used to this end. Cookies are small text files that are stored in the visitor's local browser cache. The cookies make it possible for your browser to be recognized again. The data compiled with the etracker technologies will not be used to personally identify visitors to this website and will not be merged with the personal data about the bearer of the pseudonym without the express permission of the respective individual.

You can object to the data collection and storage at any time with future effect. To object to the collection and storage of your user data with future effect you can obtain an opt-out cookie from etracker at the following link. This will ensure that in the future no visitor data from your browser will be collected and stored by etracker: www.etracker.de/privacy

An opt-out cookie with the name “cntcookie” from etracker will thus be set. Please do not delete this cookie if you wish to maintain this objection. You can find more information in etracker’s privacy policy: www.etracker.com/de/datenschutz.html

 

Privacy Statement for the Use of Twitter

Twitter functions are integrated in our site. These functions are provided by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the function “retweet”, the websites you have visited will be linked to your Twitter account and made known to other users. In doing so, data will also be transmitted to Twitter. Please note, as operators of the site we do not receive any information about the content of the transferred data nor of their use by Twitter. You can find further information on this subject in Twitter’s privacy statement at: twitter.com/privacy.

You can change your Twitter privacy settings in your account settings at: twitter.com/account/settings .

 

Privacy Statement for the Use of Xing

Our website uses functions from the network XING. The operator is XING AG, 29-32 Dammtorstraße, 20354 Hamburg, Germany. Every time a user accesses one of our pages that has functions from Xing a connection is established to Xing servers. Thereby, to our knowledge, personal data is not stored. In particular, no IP addresses are stored nor user behavior analyzed.

You can find further information about privacy and the Xing share button in Xing’s privacy statement at: www.xing.com/app/share

 

Privacy Statement for the Use of Pinterest

On our website we use social plugins from the social network Pinterest, which is operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA ("Pinterest"). When visiting a page which uses this type of plug-in, your browser will connect directly to Pinterest’s servers. The plugin thereby transmits protocol data to Pinterest’s server in the USA. This protocol data may contain your IP address, the addresses of the visited websites which also contain Pinterest functions, the type and settings of the browser, data and time of the request, your usage patterns of Pinterest, as well as cookies.

Please refer to Pinterest’s privacy policy for further information on the purpose, extent, further processing and use of data by Pinterest, as well as your relevant rights and options to protect your privacy: about.pinterest.com/de/privacy-policy

 

Privacy Statement for the Use of Tumblr

Our website uses buttons from Tumblr. The operator is Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA. These buttons allow you to share an article or a page on Tumblr, or to follow the provider on Tumblr. When visiting one of our pages which uses a Tumblr button, the browser will connect directly to Tumblr’s servers. We have no control over the extent of data Tumblr collects and transmits using these plugins. Currently the user’s IP address as well as the URL of the respective website are transmitted.

You can find further information on this subject in Tumblr’s privacy statement at: www.tumblr.com/policy/de/privacy.

 

Privacy Statement for the Use of Instagram

Instagram functions are integrated in our site. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged in to your Instagram account, you can link the contents of our website to your Instagram profile by clicking the Instagram button. Instagram can thereby associate your visit to our site with your user account. Please note, as operators of the site we do not receive any information about the content of the transferred data nor of their use by Instagram. You can find further information on this subject in Instagram’s privacy statement at: instagram.com/about/legal/privacy/

 

Server Log Files

The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This is:

  • browser type / browser version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of server request

This data cannot be matched to specific persons. The data is not merged with other sources of data. We reserve the right to later check this data if we receive any concrete indications of unlawful use.

 

Cookies

Our website sometimes uses so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our service more user-friendly, effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal until they are deleted. These cookies enable us to recognize your browser when you next visit our site.

You can configure your browser to notify you when cookies are being used and to only accept them on a case-by-case basis, to accept cookies in certain situations or block them entirely, and to activate the automatic deletion of cookies when you close your browser. If you deactivate cookies, the functionality of this website may be limited.

 

Contact Form

If you send us inquiries using the contact form, we will store your information from the inquiry form as well as the contact details provided by you for the purpose of processing your inquiry and in case there are follow-up questions. We do not transfer your data to third parties without your permission.

 

Objection to Promotional Emails

Any use of contact data provided in line with the mandatory legal notice for the purpose of unsolicited advertising and information is hereby prohibited. The operators of the website expressly reserve the right to take legal action for unsolicited advertising materials, e.g. spam email.

 

Newsletter

If you wish to receive the newsletter offered on the website, we require an email address from you plus information allowing us to check that you are the owner of the email address provided and that you agree to receive the newsletter. Further information is not collected. We use this data exclusively for sending the requested information and do not communicate it to third parties.

You can revoke your consent to save the data and your email address, as well as the use thereof for the purpose of sending the newsletter, at any time, for example, via the “unsubscribe” link in the newsletter.

 

Registration Process

You can register on our website. Within the context of the registration procedure we collect and process the following data: Email address, name, address, date of birth

This information is processed to create your user profile, to deliver the required access data to you, and to make contact with you. Your data remains stored as long as your profile exists and/or is required for support reasons (e.g. legal retention periods). You can delete your account independently. We do not transfer your data to third parties without your permission.

 

Competitions

We only send information collected within the context of competitions to partners of the competition chosen by us, and with the participant’s consent.

 

Information, Deletion, Blocking

You are entitled at any time and at no cost to obtain any information about data we have stored about you, the origin and recipient of the data as well as the purpose of the data processing. You are also entitled to have this data corrected, blocked or deleted. If you have any questions about this or other issues related to personal data, you can contact us at any time using the address given in the legal notice.

Privacy Statement

 

Data Protection Declaration of Ledlenser GmbH & Co KG

I.         Name and address of the responsible party

The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the EU Member States as well as other data protection regulations is:

Ledlenser GmbH & Co. KG
Kronenstr. 5 – 7
42699 Solingen
Germany

Ledlenser Beteiligungs GmbH
Headquarters: Solingen, Germany

ledlenser.com

II.       Name and address of the Data Protection Officer

The responsible party's Data Protection Officer is:

Christoph Strieder
Ahrstrasse 1
42655 Solingen
Germany
Phone: 02123820860
datenschutz@anwalt-strieder.de

III.    General information on data processing

1.        Scope of the personal data processing

We collect and utilise our users' personal data only insofar as this is necessary for provision of an operational site and of our content and services. Collection and utilization of our users' personal data is only undertaken periodically with the user's consent. An exception applies in those cases where prior consent cannot be obtained for legal or factual reasons and the processing of the data is permitted by law.

2.        Legal basis for processing personal data

Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 para. 1 (a) EU General Data Protection Regulation (GDPR) serves as legal basis. In processing personal data necessary for performance of a contract to which the data subject is a party, Art. 6 Para. 1 lit. b GDPR applies as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR applies as the legal basis. In the event that vital interests of the data subject or another natural person require a processing of personal data, Art. 6 1 lit. d GDPR applies as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Para. 1 lit. f GDPR applies as the legal basis for processing. 

3.                  Data deletion and storage duration

The data subject's personal data will be deleted or blocked as soon as the purpose of storage ceases to apply.

In the event that you send us speculative application data via our website or otherwise electronically, we will delete the data immediately if we do not initiate an application procedure. In the event that we initiate an application procedure or you send us application data at our request, we will delete your data at the latest 4 months after completion of the application procedure if an employment relationship does not come into existence. A longer storage takes place if you have expressly declared your consent to this.

Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject. Blocking or erasure of data will be carried out even if a storage deadline prescribed by the above-mentioned standards expires, unless data storage is a necessity for concluding or performing a contract.

4.                  Categories of recipients

Unless otherwise described below, the person responsible or the company responsible for the processing of personal data via our website is generally responsible for the processing of personal data (see Clause I of this data protection declaration). The personal data will not be communicated to third parties. A transmission to third parties, however, takes place in compliance with the provisions of the GDPR and the BDSG as well as other data protection regulations, if and insofar as this is necessary within the framework of a contract that has come into being via our website (contract initiations, contract execution and contract execution), insofar as this is legally prescribed, within the framework of the requirements specified by the respective law and, if applicable, consideration of the interests concerned. Such a case can, for example, be part of a criminal investigation. Such a transmission also takes place, as far as a legally effective consent by it is present.

If you submit your data to us in order to apply for our company as an employee, data will only be transferred to the relevant department or departments within our company.

IV.    Provision of the website and creation of log files

1.        Description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer. 

The following data is collected:

- Information regarding the used browser type and version
- The user’s operating system
- The user's IP address
- Date and time of access

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2.                  Legal basis for the data processing

The legal basis for temporary storage of data and log files is Art. 6 para. 1 lit. f of the GDPR.

3.                  Purpose of the data processing

Temporary storage of IP address by the system is necessary to enable delivery of the website to the user's computer. To this end, the user's IP address must remain stored for the duration of the session. The data is stored in log files to ensure the website's functionality. The data is also used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context. These purposes also encompass our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f of the GDPR.

4.                  Duration of Retention

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for provision of the website, this will be undertaken once the respective session has ended. If the data is stored in log files, this is the case after 14 days at the latest, unless otherwise stated in this DSE.

5.        Objection and removal option

Collection of data for provision of the website and storage of data in log files is absolutely necessary for operation of the website. Consequently, there is no option to object on the part of the user.

V.       Use of cookies

a) Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the internet browser on the user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a distinctive character string that enables unique identification of the browser when the website is accessed again. We use cookies to make our website more user-friendly. Some elements of our website require that the browser's accessing can be identified even after changing the page. The following data is stored and transmitted in the cookies:

- Language settings

We also use cookies on our website which enable analysis of the user's surfing behaviour. The following data can be transmitted in this way:

- Entered search term
- Frequency of page views
- Use of website functions
- Session duration up to 20 minutes
- Campaign tracking - Analysis of the user's origin
- Areas where the user clicks the most
- Bounce rate
- Viewing contact details
- Viewing ratings
- Playing media
- Updating the page
- Add to Favorites
- Sharing content (social media)

The user data collected in this way is pseudonymised via technical precautions. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with users' other personal data. When accessing our website, users are informed by an information banner on the use of cookies for analytical purposes and referred to this data protection declaration. A note is also included in this context as to how the user can disable the storage of cookies in the browser settings. 

b) Legal basis for the data processing
The legal basis for processing personal data using cookies is Art. 6 para. 1 lit. f of the GDPR.

c) Purpose of the data processing 

The purpose of using technically necessary cookies is to simplify use of websites for users. Some features of our website are not offered without the use of cookies. In this case, it is necessary that the browser be recognised even after changing the page.

We require cookies for the following applications: 

- Acceptance of language settings
- Transfer of data for contact forms
- Search results
- Product Consultant
- Product Comparison

The user data collected by technically necessary cookies shall not be used to create user profiles.

The analysis cookies are used to improve the quality of our website and its content. Using analysis cookies, we learn how the site is used and can constantly optimise our service. By making your data anonymous, we record which areas of our website and the media made available are particularly used for our users in terms of content and/or design and are therefore of particular interest to them in order to ensure that such an offer is constantly improved and can be found and updated. For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f of the GDPR.

e) Duration of storage, objection and removal option

Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user you have full control of the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's features in full.

VI.    Newsletter

1.        Description and scope of data processing

You can subscribe to a free newsletter on our website. The data from the input screen is sent to us when you subscribe to the newsletter.

- Email address
- First name
- Surname
- Dealer or endcustomer
- Date of birth (voluntary)

The following data will also be collected upon subscription:

- IP address of the calling computer
- The date and time of registration

During the registration process, your consent is obtained for processing data and reference is made to this Date Protection Declaration.

2.                  Mailchimp

The newsletter is sent via the provider "MailChimp" (provider: Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA). In so doing, we transmit the following data, which is also stored by this provider on a server in the USA, to the provider as our contractual partner for sending newsletters:

- Email address
- First name
- Surname

The data is also evaluated by the provider in order to improve his own services, e.g. by technical optimisation of the dispatch under presentation of newsletters. However, under no circumstances does the provider use the data transmitted to him to pass it on to third parties or to address the person behind the personal data.

According to its own statements, the provider uses the EU/US Privacy Shield on the basis of a certification for data protection (https://mailchimp.com/legal/privacy/?cf. _ga=2.248350592.642654411.1526902929-1842242371.1526902929). According to this, a level of data protection in accordance with European data protection law should be guaranteed when the data is transmitted to the provider.

In addition, we have concluded a contract on order data processing with the provider, according to which the provider is obliged to protect the data of our users and to insure an appropriate level of protection and to process on our behalf, in particular also not to pass the data on to third parties.

3.                  Legal basis for the data processing

The legal basis for processing data after the user registers for the newsletter is, if the user's consent to this has been obtained, is Art. 6 para. 1 lit. a GDPR; in addition, the transmission in accordance with Art. 45 GDPR in connection with the EU/US Privacy Shield is justified.

4.                  Purpose of the data processing

The user's email address is collected in order to deliver the newsletter. Collection of other personal data as part of the subscription process is for preventing the misuse of the services or of the used email address.

5.                  Duration of Retention

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user's email address will therefore be stored for as long as the subscription to the newsletter is active.

6.                  Objection and removal option

The subscription to the newsletter can be cancelled by the user at any time. A link to do this can be found in every newsletter. This also enables withdrawal of consent for storage of personal data collected during the subscription process.

VII.  Registration

1.        Description and scope of data processing

On our website, we offer users the ability to register with the entry of personal data. The data is entered into an input screen, transmitted to us, and stored. This data is not transferred to third parties.

The following data is collected during the registration process:

 Serial number, date of purchase, dealer information (town, name of dealer), first name, surname, postal code, town, street, house number, country, date of birth (optional), email address. optional newsletter registration or participation in market research (survey and collection of individual views on our products and services, their presentation and distribution).

The following data is stored during registration:

- The IP address of the user
- The date and time of registration
- For product registration: first name, last name, address, email address, gender, serial numbers of purchased products, seller designation, date of purchase

The user's consent to processing this data is obtained during the registration process.

2.                  Legal basis for the data processing

The legal basis for processing the data, if the user's consent to this has been obtained, is Art. 6 para. 1 lit. a of the GDPR. If registration is for the fulfilment of a contract to which the user is a party or for the implementation of pre-contractual measures, an additional legal basis for the data processing is Art. 6, para. 1 lit.b of the GDPR.

3.                  Purpose of the data processing

Registration of the user is useful for the warranty processing of our manufacturer's warranty and for the product management of the products manufactured by us. It is subject to the user's consent. If and to the extent that a registration option for the creation of a user account is offered on our website, it is also possible via this user account to register products in order to extend the warranty conditions for certain products of which we are the manufacturer (manufacturer's warranty) with us.

4.                  Duration of Retention

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case for those during the registration process to fulfill a warranty contract (manufacturer's warranty) when the data is no longer required for the execution of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.

5.                  Objection and removal option

As a user you have the option of cancelling the registration at any time. You can change the data stored about you at any time. Please use the contact form provided on our website to send us an email with the email address used for registration. We will then verify your request by contacting you, after which we will delete or amend your request if it is positively verified. If the data is required for the fulfillment of a contract or the implementation of pre-contractual measures, early erasure of data is only possible insofar as contractual or legal obligations do not preclude erasure.

VIII.    Contact form and email contact

1.             Description and scope of data processing

There are contact forms on our website which can be used for electronic contact. If a user accepts this option, the data entered in the input screen will be transmitted to us and stored. These data are (depending on the type of contact form used):

General contact form: name, email address, requests, questions about purchased products, support,

- Spare part enquiries and warranty: name, email address, address, product, serial number, request, date of purchase
- Sales and advertising material trade: concern, email address, company, address

During the sending process, your consent is obtained for processing data and reference is made to this data protection declaration. Alternatively, you can contact us via the provided email address. In this case, the user's personal data that is transmitted along with the email will be stored.The data will not be disclosed to third parties during the course of this. The data is used exclusively for the processing of the conversation.

2.                  Legal basis for the data processing

The legal basis for processing the data, if the user's consent to this has been obtained, is Art. 6 para. 1 lit. a of the GDPR. The legal basis for processing the data transferred in the course of sending an email is Art. 6 Para. 1 lit. f of the GDPR. If the email contact aims at the conclusion of a contract, then an additional legal basis for the processing is Art. 6 Abs. 1 b of the GDPR.

3.                  Purpose of the data processing

The processing of personal data in the input screen is used by us only for processing the contact. In the event of contact by email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process is for preventing the misuse of the contact form and to ensure the security of our information technology systems.

4.                  Duration of Retention

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the contact form input screen and the data that was sent by email, this is the case when the respective conversation with the user has been completed. The conversation will have ended when it is evident from the circumstances that the matter at hand has been conclusively resolved. Personal data that was additionally collected during the sending procedure will be deleted at the latest after a period of seven days.

5.                  Objection and removal option

The user has the option of revoking his or her consent to the processing of personal data at any time. A user who has contacted us by email can object at any time to the storage of his or her personal data. It will not be possible to continue the conversation in this case. All personal data stored in the course of making contact will be deleted in this case if and insofar as this is not contrary to statutory provisions, e.g. under the German Commercial Code or the Tax Code, or any other justification under data protection regulations, which requires storage after weighing up all interests.

IX.     Web analysis by Google Analytics

1.        Scope of the personal data processing

We use the software "Google Analytics" (Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website to analyse the surfing behaviour of our users. The use of this software makes it possible to assign user behavior to a user's pseudonym ID, even across devices.

Terms of use of Google Inc. for Google Analytics:

www.google.com/analytics/terms/de.htmlpolicies.google.com

According to its own statements, the provider uses the EU/US Privacy Shield due to certification for data protection (https://support.google.com/analytics/answer/7105316?hl=en). According to this, a level of data protection in accordance with European data protection law should be guaranteed when the data is transmitted to the provider.

In addition, we have concluded a contract on order data processing with the provider, according to which the provider is obliged to protect the data of our users and to insure an appropriate level of protection and to process on our behalf, in particular also not to pass the data on to third parties.

The software sets one or more cookies on the user's end device (see above for cookies). If individual pages of our website are accessed, the following data is stored:

Two bytes of the IP address of the user's calling system

- The called up web page
- The website from which the user has accessed the accessed website (referrer)
- The subpages that are called up from the called up web page
- The time spent on the website
- The frequency with which the website is accessed

The user behaviour information stored in such cookies is automatically transferred to a server of the software provider (Google), which is usually located in the USA, i.e. in a third country outside the EU and the EEA. However, we use the anonymisation of the IP address provided by the software on our website. This will shorten your IP address, which would otherwise have made it possible to identify the respective user, within the member states of the EU and the EEA, before such a transmission, whereby in exceptional cases a reduction can also take place after such a transmission. Under no circumstances will your IP address be combined with other data in order to record and analyse profiles and user behaviour. Google only analyses and displays your website activity in relation to our website as part of our order data processing in order to make information collected in this way available to us as a service. This is also our legitimate interest in data processing.

2.                  Legal basis for processing personal data

The legal basis for the use of Google Analytics is Art 6 Paragraph 1 lit a) GDPR, in addition Art. 6 para. 1 lit a) GDPR, and Art. 6 para. 1 lit. f GDPR, Art. 45 GDPR in conjunction with EU/US Privacy Shield.

3.                  Purpose of the data processing

The processing of users' personal data enables us to analyse the surfing behaviour of our users. We are in a position to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f of the GDPR. By anonymising the IP address, users' interest in protecting their personal data is sufficiently taken into account.

4.                  Duration of Retention

The data processed by us when using our website via the "Google Analytics" service is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

5.             Objection and removal option

Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user you have full control of the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's features in full.

We offer our users on our website the possibility of an opt-out from the analysis procedure. To do this, you must follow the corresponding link. In this way, another cookie is placed on your system, which signals to our system not to store the user's data. If the user deletes the corresponding cookie from his own system in the meantime, he must set the opt-out cookie again. By changing the security settings of your Internet browser, you can prevent cookies from being stored in the devices it uses. However, this can lead to restrictions in the use of Internet pages

You can also prevent the processing of your data collected in cookies by the Google Analytics software by using software provided by Google Inc. (browser add-on for deactivating Google Analytics), which you can download and use under the link  tools.google.com/dlpage/gaoptout. The provider is exclusively Google Inc. so that its terms of use and, where applicable, restrictions must be observed. It cannot be guaranteed that the software provider makes this software available for all operating systems and/or devices.

X.       Web analysis by Sizmek

1.        Scope of the personal data processing

On our website we use the software "Sizmek" (provider: Sizmek Inc., 401 Park Avenue S, 10016 New York City / USA) to analyse the surfing behaviour of our users. The use of this software makes it possible for us, on the basis of your interests and your user behaviour on our website, to place advertising material and advertisements relating to you within the offers of third parties. In addition, we can determine your interaction with our advertisements for operational evaluation.

According to its own statements, the provider applies the EU/US Privacy Shield (https://www.sizmek.com/privacy-policy/) on the basis of a certification for data protection. According to this, a level of data protection in accordance with European data protection law should be guaranteed when the data is transmitted to the provider. 

In addition, we have concluded a contract on order data processing with the provider, according to which the provider is obliged to protect the data of our users and to insure an appropriate level of protection and to process on our behalf, in particular also not to pass the data on to third parties.

The software places one or more cookies on the user's end device (see above for cookies) or uses other techniques, e.g. advertising pixels on our website or in our advertisements and "statistical identification", which determine to which advertising a user reacts.

If individual pages of our website are accessed, the following data is recorded and stored in a non-personal or non-personal manner:

information about the Internet browser you are using

- Day/time
- The type of hardware and software used on your device
- The time spent on the website
- The frequency with which the website is accessed
- Internet pages called up by the device
- Advertisements displayed on the device
- Your interaction with ads displayed on your device
- approximate geographical location of the terminal's Internet service provider
- demographic data (e.g. gender and age groups and their Internet activity)

The non-personal or related user behavior information stored in cookies or processed by other techniques is automatically transferred to a server of the software provider (Sizmek), which is usually located in the USA, i.e. in a third country outside the EU and the EEA. Under no circumstances will your data be merged in order to be able to record and analyse individual profiles and user behaviour in this way. This is also our legitimate interest in data processing.

2.                  Legal basis for processing personal data

The legal basis for the use of Google Analytics is Art 6 Paragraph 1 lit. a) GDPR, in addition Art. 6 para. 1 lit. a) GDPR, and Art. 6 para. 1 lit. f GDPR, Art. 45 GDPR in conjunction with EU/US Privacy Shield.

3.                  Purpose of the data processing

The processing of users' personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are in a position to design our advertising media and advertisements in a targeted manner and to measure and statistically evaluate the success of advertisements.

 This helps us to continuously improve our website and its user-friendliness. For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f of the GDPR. By anonymising the IP address, users' interest in protecting their personal data is sufficiently taken into account.

4.                  Duration of Retention

The data processed by us when using our website via the  "Google Analytics"  service is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. In all other respects, data is only stored to the extent and as long as this is necessary in the context of the use of the service.

5.             Objection and removal option

As a user, you have full control over the use of cookies used by Sizmek. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's features in full.

By changing the security settings of your Internet browser, you can prevent cookies from being stored in the devices it uses. However, this can lead to restrictions in the use of Internet pages.

You can also object to the use of Sizmek via an opt-out tool at www.sizmek.com/privacy-policy-de/ at any time. To do this, simply follow the instructions described under this link, which you can call up on your respective mobile device.

XI.     Doubleclick Ad Exchange Buyer

1.         Scope of the personal data processing

We use the software "Ad Exchange Buyer" (Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website to analyse the surfing behaviour of our users. The use of this software makes it possible for us to effectively design advertising material and advertisements on Internet pages that concern you on the basis of your interests and your user behaviour. Privacy Policy of Google Inc policies.google.com/privacy

According to its own statements, the provider applies the EU/US Privacy Shield (https://www.sizmek.com/privacy-policy/) on the basis of a certification for data protection. According to this, a level of data protection in accordance with European data protection law should be guaranteed when the data is transmitted to the provider.

In addition, we have concluded a contract on order data processing with the provider, according to which the provider is obliged to protect the data of our users and to insure an appropriate level of protection and to process on our behalf, in particular also not to pass the data on to third parties.

The software sets one or more cookies on the user's end device (for cookies, see above), which determine what advertising reference the user has when accessing Internet pages and to which advertising a user reacts.

If individual pages of our website are accessed, the following data is recorded and stored in a non-personal or non-personal manner:

- information about the Internet browser you are using
- Product search keyword
- (previously) visited websites

The user behaviour information stored in such cookies is automatically transferred to a server of the software provider (Google), which is usually located in the USA, i.e. in a third country outside the EU and the EEA. A personal reference is not established. Under no circumstances will your data be merged in order to be able to record and analyse individual profiles and user behaviour in this way. This is also our legitimate interest in data processing.

2.                  Legal basis for processing personal data

The legal basis for the use of the Google Ad Exchange Buyer service is Art. 6 para. 1 lit. a) GDPR, i.Ü. Art. 6 para. 1 lit. f GDPR, Art. 45 GDPR in conjunction with EU/US Privacy Shield.

3.                  Purpose of the data processing

The processing of users' personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are in a position to design our advertising media and advertisements in a targeted manner and to measure and statistically evaluate the success of advertisements. This helps us to continuously improve our website and its user-friendliness. For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f of the GDPR. By anonymising the IP address, users' interest in protecting their personal data is sufficiently taken into account.

4.                  Duration of Retention

The data processed by us when using our website via the  "Google Analytics"  service is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. In all other respects, data is only stored to the extent and as long as this is necessary in the context of the use of the service.

5.             Objection and removal option

As a user, you have full control over the use of cookies used by Google as part of the Ad Exchange Buyer service. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's features in full. You can also set your browser to block cookies from the "googleadservices.com" domain so that cookies from other providers are permitted by you.

By changing the security settings of your Internet browser, you can prevent cookies from being stored in the devices it uses. However, this can lead to restrictions in the use of Internet pages.

XII.  Google Tag Manager

1.        Scope of the personal data processing

On our website we use the service "Google Tag Manager" (provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The Tag Manager is a service with which we can manage website tags (e.g. tracking code) via an interface. The tool provides the administration of other "tags" (e.g. Google Analytics), which in turn may collect data. The Google Tag Manager does not access this data. If deactivation occurs at domain or cookie level, it remains in use for all tracking tags, which are implemented by Google Tag Manager. Google LLC in the USA participates in the EU/US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI), which is intended to guarantee an adequate level of data protection when transmitted to this provider outside the EU/EEA.

2.        Legal basis for processing personal data

If you have given your consent, the legal basis for the use of Google Tag Manager is Art. 6 Paragraph 1 lit. a GDPR, also Art. 6 para. 1 lit. f GDPR, Art. 45 GDPR in conjunction with EU/US Privacy Shield.

3.         Purpose of the data processing

The use of the "Google Tag Manager" service improves the programming and administration of our website with regard to text (e.g. tracking code, Google Analytics) and the functionality of the website.

4.                  Duration of Retention

No personal data is collected via the service, but possibly via the managed day (with us Google Analytics, see above ) web analysis by Google Analytics.

5.                  Objection and removal option

You can exclude the Service by deactivating the "Javascript" function within the software you are using on the device with which you are accessing our website. If deactivation occurs at domain or cookie level, it remains in use for all tracking tags, which are implemented by Google Tag Manager.

XIII.          Social Networks

1. Description and scope of data processing

Our website provides links (identified by a pictogram) to other websites of our Internet presence in social networks, enabling us to call up our respective website in these social networks.

(1) Facebook is a social network of Facebook Ireland Limited (Hanover Reach, 5-7 Hanover Quay, Dublin 2 Ireland). We have integrated our company website into Facebook 

(2) Youtube is a social network of YouTube LLC (operator) (901 Cherry Ave.

San Bruno, CA 94066 USA). We have integrated our company website into YouTube.

(3) Instagram is a social network of Instagram LLC, (operator) (1601 Willow Rd, Menlo Park, CA, USA. We have integrated our company website on Instagram.

(4) Pinterest is a social network of Pinterest Europe Ltd. (operator) (Palmerston House, 2nd Floor) Fenian Street Dublin 2, Ireland). We have integrated our company website on Pinterest.

(These are hereinafter referred to as “social network(s)”)

 By clicking on the link (hyperlink) on our website, which refers to the website of the respective social network, you call up the website of the operator of the social network. If necessary, you may need to log into your social network customer account to fully access our website on the website of the respective social network. We may then have access to your public information on the social network or information that you share for that particular application on the social network. The public information can be viewed by any third party. Such information includes in particular your name, your profile, cover pictures and photographs, gender, networks, user name (also called Facebook URL on Facebook) and user ID (also called Facebook ID on Facebook), comments and contributions (user content). In accordance with contractual agreements between the operators of the respective social networks, information may also be exchanged between these networks, e.g. on the social network "Pinterest", if you sign up for this service with a Facebook or Google account in accordance with the contractual conditions of the respective operators. Details of personal data processed within the social network are decided by your contractual relationship with the operator of the social network and its respective data protection regulations and data protection regulations to which reference is made in this respect. These are available on the social network website. They are also used and processed by us only within the social network within the framework of the functions and procedures offered there in each case. Personal data that we use within our Internet presence on Facebook will not be transmitted by us to third parties unless and to the extent that nothing to the contrary has been expressly agreed to or permission has been given for such transmission. This may be the case, for example, if you request a newsletter (see "Newsletter" above) about our companies.

2. Legal basis for data processing

The legal basis for processing the data, if the user's consent to this has been obtained, is Art. 6 para. 1 lit. a of the GDPR.

3. Purpose of the data processing

We use your personal data exclusively for the purpose of offering and making them available in the respective service in social networks. Any further use will only take place if your legally effective consent is available or we are legally obliged to do so.

4. Duration of storage

The data is stored for the duration of the link to our website in the social network and for the duration of the inventory of our website in the social network.

5. Objection and removal option

The user has the option of revoking his or her consent to the processing of personal data at any time. Such a revocation can be given to us at any time electronically by email, by post, by fax or (remotely) orally. You can also use the contact form provided on the website or the contact data given in the imprint of the website as well as the contact data given next to the contact form on our website.

All personal data stored by us in the course of using our services in social networks will be deleted in this case, provided that data protection regulations which require a legal or according to the purpose of the contract necessary storage of the respective data do not conflict.

You can also remove or restrict a link between your data and our Internet service by making settings in your social media account.

XIV.         Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights with respect to the responsible party:

1.        Right to information

You can request that the responsible party confirm whether we will process personal data that concerns you. If such processing is taking place, you can request to be informed by the responsible party regarding the following information:

(1) the purposes for processing the personal data; 

(2) the categories of personal data being processed;

(3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;

(4) the planned storage duration of personal data concerning you or, if specific information in this respect is not possible, criteria for determining the storage period; 

(5)the existence of a right of rectification or deletion of personal data that concerns you or of a restriction on processing by the responsible party or of a right to object to such processing;

(6)the existence of a right of appeal to a supervisory authority;

(7) any available information on the origin of the data if the personal data has not been collected from the data subject;

(8) the existence of automated decision-making, including profiling in accordance with Art. 22 Par. 1 and 4, GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information regarding whether your personal information will be transmitted to a third-party country or an international organisation. In this respect, you can request the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transmission.

2.        The right of rectification

You have a right of rectification and/or completion with respect to the responsible party if the personal data processed concerning you is incorrect or incomplete. The controller shall make the correction immediately.

3.                  The right to limitation of processing

Under the following conditions, you may request that the processing of personal data concerning you be restricted if:

(1) you dispute the accuracy of the personal data concerning you for a period that enables the responsible party to verify the accuracy of the personal data;

(2) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;

(3) the responsible party does not need the personal data for longer than the processing's purposes, but you need it for the assertion, exercise or defence of legal claims, or

(4) you object to the processing in accordance with Art. 21, Para. 1, GDPR and it is not yet clear whether the legitimate reasons of the responsible party outweigh your reasons.

Where processing of the personal data that concerns you has been restricted, such data – apart from being stored – may be processed only with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on the grounds of an important public interest of the Union or of a Member State.

If the processing restriction has been done in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted.

4.      Right to deletion

a)        Deletion obligation

You may request that the responsible party delete the personal data that concerns you immediately, and the responsible party will be obliged to delete this data immediately if one of the following reasons applies:

(1)       the personal data that concerns you is no longer necessary for the purposes for which it was collected or otherwise processed;

(2)       you revoke your consent to the processing pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR and there is no other legal basis for processing;

(3)       pursuant to Art. 21 Para. 1 GDPR, you object to the processing and there are no overriding justifiable reasons for the processing, or Art. 21 Para. to the processing pursuant to Art. 21 Para. 2 GDPR;

(4)       the personal data that concerns you has been processed unlawfully;

(5)       the deletion of personal data is required to comply with legal obligations according to Union law or the laws of the Member States to which the responsible party is subject;

(6)       the personal data that concerns you has been collected in connection with offered information society services pursuant to Art. 8 Para. 1, GDPR.

b)        Passing information to third parties

If the responsible party has made the personal data that concerns you public and if the responsible party is obliged for its deletion pursuant to Art. 17, Para. 1 of the GDPR, that responsible party shall take appropriate measures, including technical means, while taking into account available technology and implementation costs, to inform the parties responsible for data processing who process the personal data, that you as the person concerned have requested deletion of all links to such personal data or of copies or replications of such personal data.

c)        Exceptions

The right to deletion does not exist insofar as the processing is necessary

(1)       to exercise the right of freedom of expression and information;

(2)       for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the responsible party is subject or for the performance of a task in the public interest or in the exercise of official authority conferred to the responsible party;

(3)       for reasons of public interest in the field of public health in accordance with Art. 9 Para. 2 lit. h and i, as well as Art. 9 Para. 3, GDPR;

(4)       for archiving purposes in the interest of public, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, to the extent that the law referred to in (a) is likely to render impossible or seriously prejudicial the attainment of the objectives of such processing; or

(5)       to assert, exercise or defend legal claims.

5.      Right to information

If you have exercised your right to have the responsible party correct, delete or limit the processing, this party is obliged to inform all recipients to whom the personal data that concerns you has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.

It is your right to have the controller inform you regarding such recipients.

6.        Right to data portability

You have the right to obtain your personal data, which you have provided to the controller, in a structured, commonly used and machine-readable format. In addition, you have the right to pass this data on to another responsible party without obstruction by the responsible party to whom the personal data was provided, insofar as

(1)       the processing is based on consent pursuant to Art. 6 Para. 1 lit. a, GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b GDPR and

(2)       the processing is undertaken using automated procedures.

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one responsible party to another responsible party, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the responsible party.

7.        Right to object

You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning you at any time, which is carried out in accordance with Art. 6 para. 1 lit. e or lit. f, GDPR; the same applies to profiling based on these provisions.

The responsible party will no longer process the personal data that concerns you, unless the party can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data that concerns you is being processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data that concerns you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.

If you object to processing that is for direct marketing purposes, the personal data that concerns you will no longer be processed for these purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

8.                  The right to revoke the data protection declaration of consent

You have the right at any time to revoke your data protection declaration of consent. The withdrawal of consent shall not affect the lawfulness of processing taking place on the basis of this consent before its revocation.

9.        Automated decision in individual cases, including profiling

You have the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against you or significantly impairs you in a similar manner. This does not apply if the decision

(1) is necessary for the conclusion or fulfilment of a contract between you and the responsible party;

(2) is permissible on the basis of legislation of the Union or the Member States, to which the responsible party is subject, and these laws contain adequate measures to safeguard your rights and freedoms, as well as your legitimate interests, or

(3) is undertaken with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9, Para. 1 GDPR, unless Art. 9 para. 2 lit. a or g of the GDPR and appropriate measures have been taken to protect your rights and freedom as well as your legitimate interests.

In the cases referred to in (1) and (3), the responsible party shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person on the part of the responsible party, to state his or her own position and to challenge the decision.

10.  The right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of GDPR.

The supervisory authority with which the appeal has been lodged shall inform the appellant of the status and results of the appeal, including the possibility of a judicial remedy under Art. 78 GDPR.

Updated: 22.05.2018