1) Introduction and contact details of the person responsible
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about how your personal data is handled when you use our website. Personal data is all data with which you can be personally identified.1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Cosmowaves GmbH, Jolly-Str.17, 76137 Karlsruhe, Germany, Tel.: 0721/9823349, Fax: 0721/9823790, Email: info@cosmowaves.de. The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.1.3 The person responsible has appointed a data protection officer, who can be reached as follows: "Henning Schäfer, Jolly-Str.17, 76137 Karlsruhe, 0721/9823890, info@cosmowaves.de"
2) Data collection when you visit our website
2.1 If you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the site server (so-called “server log files”). ). When you access our website, we collect the following data, which is technically necessary for us to display the website to you: Our website visited Date and time at the time of access Amount of data sent in bytes Source/reference from which you came to the page Browser used Operating system IP address used (if necessary: in anonymized form) Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
2.2 Diese Website nutzt aus Sicherheitsgründen und zum Schutz der Übertragung personenbezogener Daten und anderer vertraulicher Inhalte (z.B. Bestellungen oder Anfragen an den Verantwortlichen) eine SSL-bzw. TLS-Verschlüsselung. Sie können eine verschlüsselte Verbindung an der Zeichenfolge „https://“ und dem Schloss-Symbol in Ihrer Browserzeile erkennen.
3) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after you close the browser (so-called “session cookies”), while some of these cookies remain on your device for a longer period of time and enable page settings to be saved (so-called “persistent cookies”). In the latter case, you can find out the storage period in the overview of the cookie settings in your web browser. If personal data is also processed through individual cookies we use, the processing takes place in accordance with Art. 6 Paragraph 1 Letter b GDPR either to implement the contract , in accordance with Art. 6 Para. 1 lit. a GDPR in the event of consent being given or in accordance with Art. 6 Para. 1 lit You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Please note that if you do not accept cookies, the functionality of our website may be restricted .
4) Contact
When you contact us (e.g. via contact form or email), personal data is processed - exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose. The legal basis for the processing of this data is our legitimate interest in to answer your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Article 6 (1) (b) GDPR. Your data will be deleted if the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no legal retention obligations to the contrary.
5) Data processing
when opening a customer accountIn accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent required if you provide it to us when opening a customer account. You can find out which data is required to open an account in the input mask of the corresponding form on our website. Your customer account can be deleted at any time and can be done by sending a message to the above address of the person responsible. After your customer account has been deleted, your data will be deleted provided that all contracts concluded regarding it have been completely processed, there are no statutory retention periods to the contrary and we have no legitimate interest in further storage.
6) Use of customer data for direct advertising
6.1 Registration for our email newsletter If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally. To send the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive the newsletter once you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data we collect when registering for the newsletter is used strictly for a specific purpose.
You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person responsible mentioned at the beginning. Once you have unsubscribed, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration. 6.2 Goods availability notification by emailFor items that are temporarily unavailable, you can sign up to receive email goods availability notifications. We will send you a one-off email informing you about the availability of the item you have selected. The only mandatory information for sending this notification is your email address. Providing further data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure to send emails, which ensures that you only receive a notification once you have expressly confirmed your consent to this by clicking on a verification link sent to the email address provided. By activating the confirmation link You give us your consent to use your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data we collect when you register for our email notification service about product availability is used strictly for the intended purpose.
You can unsubscribe from availability notifications at any time by sending a message to the person responsible mentioned at the beginning. Once you have unsubscribed, your email address will be immediately deleted from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration .
7) Data processing for order processing
7.1 If necessary for contract processing for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art If we owe updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact details you provided when ordering (name, address, email address) in order to provide you with our legal information obligations in accordance with Art. 6 Para. 1 lit. c GDPR to personally inform you about upcoming updates within the legally stipulated period of time using an appropriate means of communication (e.g. by post or email). Your contact details will be used strictly for the purpose of communicating updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the respective information. To process your order, we also work with the service provider(s) below who support us in whole or in part in the implementation of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
7.2 In order to fulfill our contractual obligations towards our customers, we work with external shipping partners. We pass on your name and delivery address and, if necessary for delivery, your telephone number, exclusively for the purposes of delivering goods in accordance with Art. 6 Para. 1 lit. b GDPR to a shipping partner selected by us We use the following provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, GermanyWe provide your email address and/or telephone number in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods for the purpose of agreeing a delivery date or to announce delivery, provided you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery in accordance with Article 6 Paragraph 1 Letter b GDPR, we will only pass on the name of the recipient and the delivery address to the provider. The data will only be passed on to the extent that this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery announcement is not possible. The consent can be revoked at any time with future effect from the person responsible named above or from the provider. - DHLAs a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, GermanyWe will provide your email address and/or telephone number in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods for the purpose of agreeing on a delivery date or for delivery notification to the provider further, provided you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery in accordance with Article 6 Paragraph 1 Letter b GDPR, we will only pass on the name of the recipient and the delivery address to the provider. The data will only be passed on to the extent that this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery announcement is not possible. The consent can be revoked at any time with future effect from the person responsible named above or from the provider. - DPDAs a transport service provider, we use the following provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany
We will pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 Para. 1 lit have given consent. Otherwise, for the purpose of delivery in accordance with Article 6 Paragraph 1 Letter b GDPR, we will only pass on the name of the recipient and the delivery address to the provider. The data will only be passed on to the extent that this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery announcement is not possible. The consent can be revoked at any time with future effect from the person responsible named above or from the provider. - HermesAs a transport service provider, we use the following provider: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, GermanyWe will provide your email address and/or telephone number in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods for the purpose of agreeing on a delivery date or for delivery notification to the provider, provided you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery in accordance with Article 6 Paragraph 1 Letter b GDPR, we will only pass on the name of the recipient and the delivery address to the provider. The data will only be passed on to the extent that this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery announcement is not possible. The consent can be revoked at any time with future effect from the person responsible above or from the provider.7.4 Use of payment service providers (payment services) - Amazon PayAuf One or more online payment methods from the following provider are available on this website: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg
If you choose a payment method from the provider with which you pay in advance, the payment data you provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order in accordance with Art. 6 Paragraph 1 lit. b GDPR passed on. In this case, your data will be passed on exclusively for the purpose of processing payments with the provider and only to the extent that it is necessary for this purpose. If you select a payment method for which we provide advance payment, you will also be asked to provide certain personal data during the ordering process (Vor - and last name, street, house number, postal code, city, date of birth, email address, telephone number, if necessary data on an alternative means of payment). In such cases, in order to protect our legitimate interest in determining your ability to pay, this data will be used We forward this to the provider for the purpose of a credit check in accordance with Article 6 Paragraph 1 Letter f of the GDPR. Based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment history), the provider checks whether the payment option you have selected can be granted with regard to payment and/or default risks.
If you choose a payment method from the provider with which you pay in advance (e.g. credit card payment), the payment details you provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be sent to them passed on in accordance with Article 6 Paragraph 1 Letter b GDPR. In this case, your data will be passed on exclusively for the purpose of processing payments with the provider and only to the extent that it is necessary for this purpose. - PaypalOne or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you choose a payment method from the provider with which you pay in advance, the payment data you provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order in accordance with Art. 6 Paragraph 1 lit. b GDPR passed on. In this case, your data will be passed on exclusively for the purpose of processing payments with the provider and only to the extent that it is necessary for this purpose. If you select a payment method for which we provide advance payment, you will also be asked to provide certain personal data during the ordering process (Vor - and last name, street, house number, postal code, city, date of birth, email address, telephone number, if necessary data on an alternative means of payment). In such cases, in order to protect our legitimate interest in determining your ability to pay, this data will be used We forward this to the provider for the purpose of a credit check in accordance with Article 6 Paragraph 1 Letter f of the GDPR. Based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment history), the provider checks whether the payment option you have selected can be granted with regard to payment and/or default risks.
The credit report can contain probability values (so-called score values). To the extent that score values are included in the results of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. You can object to this processing of your data at any time by sending a message to us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
8) Online marketing
Google AdSenseThis website uses Google AdSense, a web advertising service Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, i.e. text files that are stored on your computer and which enable your use of the website to be analyzed. In addition, Google AdSense also uses so-called “web beacons” (small invisible graphics) to collect information. Simple actions such as visitor traffic on the website can be recorded, collected and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This may also result in a transmission to the Google LLC servers. in the USA.Google uses the information obtained in this way to carry out an evaluation of your usage behavior with regard to the AdSense advertisements. The IP address transmitted by your browser as part of Google AdSense is not combined with other Google data. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process the data on behalf of
All processing described above, in particular reading out information on the device used via cookies and/or web beacons, will only be carried out if you have given us your express consent to this in accordance with Article 6 Paragraph 1 Letter a of the GDPR. Without this consent, Google AdSense will not be used during your visit to the site. You can revoke your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website. For data transfers to the USA The provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection levels based on an adequacy decision by the European Commission. Google's data protection regulations can be viewed here: https://www.google.de /policies/privacy/
9) Web analysis services
Google (Universal) AnalyticsThis website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website. By default, when you visit the website, Google (Universal) Analytics sets cookies, which are stored as small text modules on your device and collect certain information. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude any direct personal reference. The information is transmitted to Google servers and further processed there. Transfers to Google LLC, based in the USA, are also possible. Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services related to website activity and internet usage . The shortened IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected as part of the use of Google (Universal) Analytics is stored for a period of two months and then deleted. All processing described above, in particular the setting of cookies on the device used, only takes place if you give us your express consent in accordance with Article 6 Paragraph 1 Letter a of the GDPR. Without your consent, Google (Universal) Analytics will not be used during your visit to the site. You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please deactivate this service using the “cookie consent tool” provided on the website.
Further legal information about Google (Universal) Analytics can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sitesDemographic characteristicsGoogle (Universal) Analytics uses the special “demographic characteristics” function and can create statistics that make statements about the age, gender and interests of site visitors. This is done by analyzing advertising and information from third parties. This allows target groups for marketing activities to be identified. However, the data collected cannot be assigned to a specific person and will be deleted after being stored for a period of two months.Google SignalsAs an extension to Google (Universal) Analytics, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and have linked your devices to your Google account, Google can, subject to your consent to the use of Google Analytics in accordance with Article 6 (1) (a) GDPR, analyze your usage behavior across devices and use database models, including cross-device data Conversions, create. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can deactivate the "Personalized advertising" function in your Google account settings. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de You can find further information about Google Signals at the following link: https://support.google.com/analytics /answer/7532985?hl=en
UserIDsAs an extension to Google (Universal) Analytics, the "UserIDs" function can be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, have set up an account on this website and log in with this account on various devices, your activities, including conversions, be analyzed across devices. For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
10) Page functionalities
10.1 Facebook plugins Our website uses social network plugins from the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. These plugins enable direct interactions with content on the social network. In order to increase the protection of your data when you visit our website, the plugins are initially deactivated and integrated into the site using a so-called “2-click” or “Shariff” solution. This integration ensures that when you access a page on our website, the following contains plugins, no connection has yet been established with the provider's servers. Only when you activate the plugins and thus give your consent to the data transfer in accordance with Article 6 Paragraph 1 lit. a GDPR does your browser establish a direct connection to the servers of the provider provider. Regardless of whether you log in to an existing user profile, a certain amount of information about the device you are using (including your IP address), your browser and your page history is transmitted to the provider and, if necessary, further processed there. If you log into an existing user profile on the If you are logged in to the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts. You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider. Data can also be transferred to: Meta Platforms Inc., USA
We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework. which ensures compliance with European data protection levels on the basis of an adequacy decision by the European Commission. 10.2 Instagram plugins Our website uses social network plugins from the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland These plugins enable direct interactions with content on the social network. In order to increase the protection of your data when you visit our website, the plugins are initially deactivated and integrated into the page using a so-called “2-click” or “Shariff” solution. This integration ensures that that when you access a page on our website that contains such plugins, no connection is established with the provider's servers. Only when you activate the plugins and thus give your consent to the data transfer in accordance with Art. 6 Para. 1 lit. a GDPR, Your browser establishes a direct connection to the provider's servers. Regardless of whether you log in to an existing user profile, a certain amount of information about the device you are using (including your IP address), your browser and your page history is transmitted to the provider and, if necessary, further processed there. If you log into an existing user profile on the If you are logged in to the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts. You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.
Data can also be transferred to: Meta Platforms Inc., USA We have concluded an order processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized transfer to third parties. For data transfers to the USA, the provider has agreed to the EU-US Data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission. 10.3 LinkedIn plugins Our website uses social network plugins from the following provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland These plugins enable direct interactions with content on the social network. In order to increase the protection of your data when you visit our website, the plugins are initially deactivated and integrated into the site using a so-called “2-click” or “Shariff” solution .This integration ensures that when you access a page on our website that contains such plugins, no connection is established with the provider's servers. Only when you activate the plugins and thus your consent in accordance with Art. 6 Para. 1 lit. a GDPR in the data transmission, your browser establishes a direct connection to the provider's servers. Regardless of whether you log in to an existing user profile, a certain amount of information about the device you are using (including your IP address), your browser and your page history is transmitted to the provider and, if necessary, further processed there. If you log into an existing user profile on the If you are logged in to the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts. You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider. Data can also be transferred to: LinkedIn Inc., USA We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prevents unauthorized disclosure prohibited to third parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with European data protection levels. 10.4 Pinterest plugins Our website uses social network plugins from the following provider: Pinterest Europe Ltd., Palmerston House , 2nd Floor, Fenian Street, Dublin 2, IrelandThese plugins enable direct interactions with content on the social network. In order to increase the protection of your data when you visit our website, the plugins are initially deactivated using the so-called “2-click” or “Shariff “solution is integrated into the page. This integration ensures that when you access a page on our website that contains such plugins, no connection is established with the provider's servers. Only when you activate the plugins and thus in accordance with Art. 6 Para. 1 lit. a DSGVO your consent to the data transfer, your browser establishes a direct connection to the provider's servers. Regardless of whether you log in to an existing user profile, a certain amount of information about the device you use (including your IP address), your browser and your page history is transmitted to the provider and, if necessary, further processed there.
If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts. You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider. Data can also be transferred to: Pinterest Inc., USA We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prevents unauthorized disclosure to third parties is prohibited. For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level. 10.5 X-Plugins Our website uses plugins from the social network of the following provider: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IrelandThese plugins enable direct interactions with content on the social network. In order to increase the protection of your data when you visit our website, the plugins are initially deactivated using a so-called “2-click” - or “Shariff” solution is integrated into the site. This integration ensures that when you access a page on our website that contains such plugins, no connection is established to the provider's servers. Only when you activate the plugins and thus in accordance with Art 6 Para. 1 lit. a GDPR your consent to the data transfer, your browser establishes a direct connection to the provider's servers. Regardless of whether you log in to an existing user profile, a certain amount of information about the device you are using (including your IP address), your browser and your page history is transmitted to the provider and, if necessary, further processed there. If you log into an existing user profile on the If you are logged in to the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts. You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.
Data can also be transferred to: of the European Commission, which are intended to ensure compliance with the European level of data protection.10.6 a connection is established to the provider's servers, which provide the "XING Share Button" functions (in particular the calculation/display of the counter value). The provider does not store any personal data, especially IP addresses. There is also no evaluation of your usage behavior via the use of cookies in connection with the “XING Share button”. 10.7 YouTubeThis website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, IrelandData can also be transmitted to: Google LLC., USAIf you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. Here, certain information, including your IP address, is transmitted to the provider. If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics and prevent abusive behavior. If you are logged into a user account with the provider during your site visit, your data will be assigned directly to your account when you click on a video. If you do not wish to be assigned to your account, you must log out before pressing the play button. All of the aforementioned processing, in particular the setting of cookies to read information on the device used, will only take place if you have given us your express consent in accordance with. Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with future effect by deactivating this service using the “cookie consent tool” provided on the website. For data transfers to the USA, the provider has adhered to the EU-US data protection framework (EU-US data protection framework). US Data Privacy Framework), which ensures compliance with European data protection levels based on an adequacy decision by the European Commission.
11) Rights of the data subject
11.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the person responsible for the processing of your personal data, with reference being made to the legal basis listed for the respective exercise requirements: Right to information in accordance with Art. 15 GDPR; Right to rectification in accordance with Article 16 GDPR; Right to deletion in accordance with Article 17 GDPR; Right to restriction of processing in accordance with Article 18 GDPR; Right to information in accordance with Article 19 GDPR; Right to data portability in accordance with Article 20 GDPR; Right of revocation granted consent in accordance with Art. 7 Para. 3 GDPR; right to complaint in accordance with Art. 77 GDPR.11.2 We process your personal data due to our predominantly justified interest, you have the right, for reasons that are from yours IN SPECIAL SITUATIONS, IT MAY BE ABLE TO OBJECT TO THIS PROCESSING WITH EFFECTS FOR THE FUTURE. IF YOU USE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPLEX REASONS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS DATA PROCESSED BY US FOR DIRECT ADVERTISING YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA ABOUT YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE YOUR OPT-OUT AS DESCRIBED ABOVE.
12) Duration of storage of personal data
The duration of storage of personal data is measured based on the respective legal basis, the purpose of processing and - if relevant - additionally based on the respective legal retention period (e.g. commercial and tax retention periods). When processing personal data on the basis If you have given your express consent in accordance with Article 6 Para. 1 lit 1 lit. b GDPR, these data are routinely deleted after the retention periods have expired, unless they are no longer required to fulfill or initiate the contract and/or we have no legitimate interest in further storage. When processing personal data on the basis of 6 Para. 1 lit. f GDPR, this data will be stored until you exercise your right to object in accordance with Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate reasons for the processing that exceed your interests, rights and freedoms prevail, or the processing serves to assert, exercise or defend legal claims. When processing personal data for the purpose of direct advertising on the basis of Art. 6 Para. 1 lit. f GDPR, these data are stored until you Exercise the right to object in accordance with Art. 21 Para. 2 GDPR. Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will be deleted if they are processed for the purposes for which they were collected or otherwise processed were no longer necessary.