data protection

Basic Principles

This privacy policy is intended to inform users of this website about the nature, scope, and purpose of the collection and use of personal data by the website operator "Sucre Fine Jewelry, Hohenzollernstraße 7, 80801 Munich, Tel: 0049 89 34018666, E-Mail: office@sucre-jewelry.de".

The website operator takes your data protection very seriously and treats your personal data confidentially and in accordance with statutory regulations. As changes to this privacy policy may be made due to new technologies and the continuous development of this website, we recommend that you read through the privacy policy at regular intervals.

Definitions of the terms used (e.g., "personal data" or "processing") can be found in Art. 4 GDPR.

1. Information about the collection of personal data and contact details of the controller

1.1 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Sucre Fine Jewelry, Hohenzollernstraße 7, 80801 Munich, Tel: 0049 89 34018666, E-Mail: office@sucre-jewelry.de. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.

1.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser address bar.

2. Access data when visiting the website www.sucre-jewelry.de

We, the website operator or site provider, collect data about access to the website based on our legitimate interest (see Art. 6 Para. 1 lit. f GDPR) and store it as "server log files" on the website server. The following data is logged in this way:

Visited website Time at the time of access Amount of data sent in bytes Source/reference from which you reached the page Browser used Operating system used IP address used

Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of unlawful use.

3. Reach measurement & cookies

3.1 We collect information about your use of our website www.sucre-jewelry.de through the use of so-called browser cookies. These are small text files that are stored on your data carriers and that save certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data is sent, as well as information about the age of the cookie and an alphanumeric identification character. Cookies enable our systems to recognize the user's device and make any presets immediately available. As soon as a user accesses the platform, a cookie is transmitted to the hard drive of the respective user's computer. The use of cookies increases the user-friendliness and security of this website.

3.2 The cookies we use only store data about your use of the website. This is not done by assigning it to you personally, but by assigning an identification number to the cookie ("Cookie ID"). The cookie ID is not merged with your name, your IP address, or similar data that would allow the cookie to be assigned to you.

3.3 Common browsers offer the setting option of not allowing cookies. Note: It is not guaranteed that you will be able to access all functions of this website without restrictions if you make such settings.

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies 
Firefox: https://support.mozilla.org/de/kb/verbesserter-schutz-aktivitatenverfolgung-desktop?redirectslug=cookies-erlauben-und-ablehnen&redirectlocale=de
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/mdm/mdmf7d5714d4/web 
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

3.4 We use cookies to safeguard our legitimate interest in improving our website and being able to offer you a better and more tailored service. They allow us to recognize your computer when you return to our website, thereby:

Saving information about your preferred activities on the website to tailor our website to your individual interests;

Saving your login data and display preferences (e.g., language);

Speeding up the processing of your requests.

The legal basis for data processing through cookies is Art. 6 Para. 1 p. 1 lit. f GDPR.

3.5 Cookies are stored until you delete them or the term of the respective cookie expires. In this case, the cookie is automatically deleted from your computer.

4. Contacting us

If you contact us as the website operator using the contact options offered, your details will be stored so that they can be accessed for processing and answering your inquiry. Without your consent, this data will not be passed on to third parties. The legal basis for processing the data is our legitimate interest in answering your request according to Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after final processing of your inquiry, which is the case when it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no statutory retention obligations to the contrary.

5. Data processing when opening a customer account and for contract processing

According to Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. The data collected can be seen from the respective input forms. Your customer account can be deleted at any time and can be done by sending a message to the aforementioned address of the controller. We store and use the data provided by you for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, provided that you have not expressly consented to further use of your data or a further legally permitted data use on our part has been reserved, about which we inform you accordingly below.

In addition to contract processing, we also use the data collected from you during contract processing for the purpose of informing you from time to time about new offers and promotions.

These include:

First name Last name Title Salutation Billing and delivery address, if applicable address supplement Packstation and DHL customer number E-mail address Billing and payment data Date of birth, if applicable telephone number.

6. Use of your data for direct marketing

The following explanations refer to the processing of personal data for advertising purposes. The GDPR declares such data processing on the basis of Article 6 Paragraph 1 Letter f) as generally conceivable and as a legitimate interest. The duration of data storage for advertising purposes does not follow any rigid principles and is oriented toward the question of whether the storage is necessary for advertising contact.

6.1 Advertising purposes of Sucre Fine Jewelry and third parties. If you have concluded a contract with us, we list you as an existing customer. In this case, we process your postal contact data, even without specific consent, to send you information about new products and services in this way. We process your email address to send you information about our own similar products, even without specific consent. You can object to this service at any time in every customer notification at the end of the information.

6.2 Interest-based advertising. So that you only receive advertising information that is of supposed interest to you, we categorize and supplement your customer profile with further information if necessary. Both statistical information and information about your person are used for this purpose. The goal is to send you advertising oriented solely toward your actual or supposed needs and accordingly not to bother you with useless advertising. Your address and order data are processed by us for our own marketing purposes.

7. Data processing for order processing, e-commerce and payment providers

7.1 Processing of customer and contract data
We collect, process, and use personal customer and contract data for the establishment, content-related design, and amendment of our contractual relationships. We collect, process, and use personal data regarding the use of this website (usage data) only to the extent necessary to enable the user to use the service or to bill for it. The legal basis for this is Art. 6 Para. 1 lit. b GDPR.
The collected customer data will be deleted after completion of the order or termination of the business relationship and expiration of any existing statutory retention periods. Statutory retention periods remain unaffected.

7.2 Data transmission upon conclusion of a contract for online shops, retailers, and shipment of goods
When you order goods from us, we pass your personal data on to the transport company commissioned with the delivery as well as to the payment service provider commissioned with the payment processing. Only such data as is required by the respective service provider for the fulfillment of its task will be disclosed. The legal basis for this is Art. 6 Para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. If you have given your corresponding consent according to Art. 6 Para. 1 lit. a GDPR, we will pass your e-mail address to the transport company commissioned with the delivery so that it can inform you about the shipping status of your order by e-mail; you can revoke your consent at any time.

7.3 Credit checks
For purchases on account or another payment method where we provide advance performance, we may carry out a credit check (scoring). For this purpose, we transmit your entered data (e.g., name, address, age, or bank data) to a credit agency. Based on this data, the probability of a payment default is determined. In the event of an excessive risk of payment default, we may refuse the respective payment method.
The credit check is carried out on the basis of contract fulfillment (Art. 6 Para. 1 lit. b GDPR) as well as to avoid payment defaults (legitimate interest according to Art. 6 Para. 1 lit. f GDPR). If consent has been obtained, the credit check is carried out on the basis of this consent (Art. 6 Para. 1 lit. a GDPR); the consent can be revoked at any time.

7.4 Use of payment service providers

We integrate payment services from third-party companies on our website. When you make a purchase from us, your payment data (e.g., name, payment amount, account details, credit card number) is processed by the payment service provider for the purpose of payment processing. These transactions are subject to the respective terms and conditions and privacy policies of the relevant providers. The use of payment service providers is based on Art. 6(1)(b) of the GDPR (contract fulfillment) and the interest in providing a payment process that is as smooth, convenient, and secure as possible (Art. 6(1)(f) of the GDPR). To the extent that your consent is requested for certain actions, Art. 6(1)(a) of the GDPR serves as the legal basis for data processing; consent can be revoked at any time for the future.
We use the following payment services/payment service providers on this website:

PayPal
The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").
Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.
For details, please refer to PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Apple Pay
When you use the Apple Pay payment option, your payment data is transmitted directly to Apple. We do not have access to your payment information. The provider of the payment service is Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. You can find Apple's privacy policy at: https://www.apple.com/legal/privacy/de-ww/.

Google Pay
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You can find Google's privacy policy here: https://policies.google.com/privacy.

Klarna
The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). Klarna offers various payment options (e.g., installment purchases). If you choose to pay with Klarna (Klarna checkout solution), Klarna will collect various personal data from you. Klarna uses cookies to optimize the use of the Klarna checkout solution. For details on the use of Klarna cookies, please refer to the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.
You can read further details in Klarna's privacy policy at the following link: https://www.klarna.com/de/datenschutz/.

Sofortüberweisung
The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "Sofort GmbH"). With the "Sofortüberweisung" procedure, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin fulfilling our obligations. If you have chosen the "Sofortüberweisung" payment method, you provide the PIN and a valid TAN to Sofort GmbH, which it can use to log into your online banking account. After logging in, Sofort GmbH automatically checks your account balance and carries out the transfer to us using the TAN provided by you. Subsequently, it immediately sends us a transaction confirmation. After logging in, your transactions, credit line of your overdraft facility, and the existence of other accounts and their balances are also checked automatically. In addition to the PIN and TAN, the payment data entered by you and personal data are also transmitted to Sofort GmbH. Personal data includes your first and last name, address, telephone number(s), email address, IP address, and, if applicable, other data required for payment processing. The transmission of this data is necessary to unambiguously verify your identity and prevent attempted fraud. For details on payment via Sofortüberweisung, please refer to the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

Shopify Payment
The provider of this payment service in the EU is Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter "Shopify Payment"). Details can be found in the Shopify Payment privacy policy: https://www.shopify.de/legal/datenschutz.

American Express
The provider of this payment service is American Express Europe S.A., Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany (hereinafter "American Express").
American Express may transfer data to its parent company in the USA. Data transfer to the USA is based on Binding Corporate Rules. Details can be found here: https://www.americanexpress.com/en-pl/company/legal/privacy-centre/european-implementing-principles/.
Further information can be found in American Express's privacy policy: https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html.

Mastercard
The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter "Mastercard").
Mastercard may transfer data to its parent company in the USA. Data transfer to the USA is based on Mastercard's Binding Corporate Rules. Details can be found here: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

VISA
The provider of this payment service is Visa Europe Services Inc., London Branch, 1 Sheldon Square, London W2 6TT, Great Britain (hereinafter "VISA").
Great Britain is considered a secure third country under data protection law. This means that Great Britain has a level of data protection that corresponds to the level of data protection in the European Union.
VISA may transfer data to its parent company in the USA. Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-für-den-ewr.html.
Further information can be found in VISA's privacy policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

8. Use of Social Media: Social Plugins

8.1 Facebook Plugins with 2-Click Solution: Our website uses so-called social plugins ("plugins") from the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

To increase the protection of your data when visiting our website, the plugins are initially integrated into the page using a so-called "2-click" solution. You can recognize deactivated plugins by the fact that they are grayed out. This integration ensures that when you call up a page on our website that contains such plugins, no connection is yet established with the Facebook servers. Only when you activate the plugins and thus grant your consent to data transmission in accordance with Art. 6(1)(a) of the GDPR does your browser establish a direct connection to the Facebook servers. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Facebook. We have no influence on the scope of data that Facebook collects with the help of the plugins. According to our knowledge, Facebook at least receives information about which of our websites you are currently visiting and have visited previously. By integrating the plugins, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a profile on Facebook or are not currently logged in. The collected information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transmitted to Facebook.

Facebook Inc., based in the USA, is certified for the US-EU data protection agreement "Privacy Shield," which ensures compliance with the level of data protection applicable in the EU.

For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights and settings options for protecting your privacy, please refer to Facebook's privacy policy: http://www.facebook.com/policy.php

8.2 Google+ Plugins with 2-Click Solution

Our website uses so-called social plugins ("plugins") from the social network Google+, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

To increase the protection of your data when visiting our website, the plugins are initially integrated into the page using a so-called "2-click" solution. You can recognize deactivated plugins by the fact that they are grayed out. This integration ensures that when you call up a page on our website that contains such plugins, no connection is yet established with the Google+ servers. Only when you activate the plugins and thus grant your consent to data transmission in accordance with Art. 6(1)(a) of the GDPR does your browser establish a direct connection to the Google+ servers. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Google+. We have no influence on the scope of data that Google+ collects with the help of the plugins. According to our knowledge, Google+ at least receives information about which of our websites you are currently visiting and have visited previously. By integrating the plugins, Google+ receives the information that your browser has called up the corresponding page of our website, even if you do not have a profile on Google+ or are not currently logged in. The collected information (including your IP address) is transmitted by your browser directly to a Google+ server in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a Google+ server and stored there. The information is also published on Google+ and displayed to your contacts.

Google LLC, based in the USA, is certified for the US-EU data protection agreement "Privacy Shield," which ensures compliance with the level of data protection applicable in the EU. For the purpose and scope of data collection and the further processing and use of the data by Google, as well as your rights and settings options for protecting your privacy, please refer to Google's privacy policy: https://www.google.com/intl/de/policies/privacy/

8.3 Twitter Plugins with 2-Click Solution

Our website uses so-called social plugins ("plugins") from the microblogging service Twitter, which is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter").

To increase the protection of your data when visiting our website, the plugins are initially integrated into the page using a so-called "2-click" solution. You can recognize deactivated plugins by the fact that they are grayed out. This integration ensures that when you call up a page on our website that contains such plugins, no connection is yet established with the Twitter servers. Only when you activate the plugins and thus grant your consent to data transmission in accordance with Art. 6(1)(a) of the GDPR does your browser establish a direct connection to the Twitter servers. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Twitter. We have no influence on the scope of data that Twitter collects with the help of the plugins. According to our knowledge, Twitter at least receives information about which of our websites you are currently visiting and have visited previously. By integrating the plugins, Twitter receives the information that your browser has called up the corresponding page of our website, even if you do not have a profile on Twitter or are not currently logged in. The collected information (including your IP address) is transmitted by your browser directly to a Twitter server in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a Twitter server and stored there. The information is also published on Twitter and displayed to your contacts.

Twitter Inc., based in the USA, is certified for the US-EU data protection agreement "Privacy Shield," which ensures compliance with the level of data protection applicable in the EU.

For the purpose and scope of data collection and the further processing and use of the data by Twitter, as well as your rights and settings options for protecting your privacy, please refer to Twitter's privacy policy: https://twitter.com/privacy

9. Online Marketing

Use of Google AdWords Conversion Tracking

This website uses the online advertising program "Google AdWords" and, within the scope of Google AdWords, conversion tracking from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google AdWords to draw attention to our attractive offers with the help of advertising materials (so-called Google AdWords) on external websites. We can determine how successful individual advertising measures are in relation to the data of the advertising campaigns. Our objective is to show you advertising that is of interest to you, to make our website more interesting to you, and to achieve a fair calculation of advertising costs.

The cookie for conversion tracking is set when a user clicks on an AdWords ad placed by Google. Cookies are small text files that are stored on your computer system. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords client receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords clients. The information obtained using the conversion cookie is used to create conversion statistics for AdWords clients who have opted for conversion tracking. The clients learn the total number of users who clicked on their ad and were redirected to a page provided with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can block this use by deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics. We use Google AdWords based on our legitimate interest in targeted advertising pursuant to Art. 6(1)(f) of the GDPR.

Google LLC, based in the USA, is certified for the US-EU data protection agreement "Privacy Shield," which ensures compliance with the level of data protection applicable in the EU.

You can obtain further information about Google's privacy policy at the following internet address: http://www.google.de/policies/privacy/

You can permanently deactivate cookies for ad preferences by preventing them via the corresponding settings in your browser software, or by downloading and installing the browser plug-in available at the following link: http://www.google.com/settings/ads/plugin?hl=en

Please note that certain functions of this website may not be usable or may only be usable to a limited extent if you have deactivated the use of cookies.

10. Web Analysis Services

Google Universal Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies," which are text files saved on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your shortened IP address) is generally transmitted to and stored on a Google server in the USA.

This website uses Google Analytics exclusively with the "_anonymizeIp()" extension, which ensures the anonymization of the IP address by shortening it and excludes direct personal reference. Due to the extension, your IP address is previously shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data by Google.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that in this case you may not be able to use the full functionality of this website. Furthermore, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en

As an alternative to the browser plugin, or for browsers on mobile devices, please click the following link to set an opt-out cookie that will prevent future collection by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you must click this link again):

Click here to deactivate Google Analytics tracking

Google LLC, based in the USA, is certified under the US-EU Privacy Shield, which ensures compliance with the level of data protection applicable in the EU. This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a User ID. You can deactivate the cross-device analysis of your usage in your customer account under "My Data", "personal data". More information about how user data is handled by Google Analytics can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en

11. Tools and Other

Google Web Fonts

This site uses so-called Web Fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") for the uniform display of fonts. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

For this purpose, the browser you use must establish a connection to Google's servers. As a result, Google gains knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If your browser does not support web fonts, a standard font will be used by your computer.

Google LLC, based in the USA, is certified under the US-EU Privacy Shield, which ensures compliance with the level of data protection applicable in the EU.

Further information on Google Web Fonts can be found at:
https://developers.google.com/fonts/faq

12. User Rights

12.1 As a user, you have the right to receive free information upon request about which personal data has been stored about you. You also have the right to have incorrect data corrected and to have your personal data restricted or deleted. If applicable, you can also exercise your right to data portability. Should you believe that your data has been processed unlawfully, you can lodge a complaint with the responsible supervisory authority.

12.2 Right of access in accordance with Art. 15 GDPR: You have, in particular, the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage duration or the criteria for determining the storage duration, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the source of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the significance and the envisioned consequences of such processing for you, as well as your right to be informed of what safeguards according to Art. 46 GDPR exist regarding the transfer of your data to third countries;

12.3 Right to rectification in accordance with Art. 16 GDPR: You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and/or to have incomplete data stored by us completed;

12.4 Right to erasure in accordance with Art. 17 GDPR: You have the right to demand the erasure of your personal data if the conditions of Art. 17(1) GDPR are met. However, this right does not exist, in particular, if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;

Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, contested by you, is being verified, if you refuse the erasure of your data due to inadmissible data processing and instead demand the restriction of the processing of your data, if you need your data for the establishment, exercise, or defense of legal claims after we no longer need this data after the purpose has been achieved, or if you have lodged an objection based on your particular situation, as long as it has not yet been determined whether our legitimate grounds override yours;

Right to notification in accordance with Art. 19 GDPR: If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or to request the transmission to another controller, as far as this is technically feasible;

Right to withdraw consent given in accordance with Art. 7(3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will immediately delete the data concerned, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;

Right to lodge a complaint in accordance with Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data violates the GDPR.

12.2 RIGHT TO OBJECT

IF, WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOM, OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE, OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

13. Duration of storage of personal data

The duration of the storage of personal data is determined by the respective statutory retention period (e.g., commercial and tax retention periods). After the expiration of the period, the corresponding data is routinely deleted, provided it is no longer required for the fulfillment or initiation of a contract and/or we have no legitimate interest in further storage.