Data Controller in the Context of the General Data Protection Regulation and Other Applicable EU Member State Data Protection Laws and Other Provisions with a Data Protection Character:

Data Controller & Data Protection Officer:

Director: Sebastian Müller
Email: info@claips.com

Claips.com is a division of

Artisan Book Publishing Ltd.
128 City Road,
EC1V 2NX, London,
United Kingdom

Company Number: 15779320

Managing Director: Christian Paul Heinze

Use of Cookies

The website claips.com uses cookies. Cookies are data stored by the web browser on the user’s computer system. These cookies can be transmitted to the website upon accessing a page, thereby enabling the user to be identified. Cookies help simplify the use of websites for users.

It is always possible to object to the setting of cookies by changing the settings in your web browser. Cookies that have been set can be deleted. Please note that if cookies are disabled, not all functions of our website may be available in full.

Creation of Logfiles

With each visit to the website, claips.com automatically collects data and information through an automated system. These are stored in the server’s logfiles.

The following data may be collected:

  • Information about the browser type and version used
  • The user’s operating system
  • The user’s internet service provider
  • The user’s IP address
  • Date and time of access
  • Websites from which the user’s system accessed our website (referrer)
  • Websites that are accessed from our website by the user’s system

The processing of the data serves the delivery of the content of our website, ensuring the functionality of our IT systems, and optimizing our website. The data in the logfiles is always stored separately from other personal data of the users.

Analysis Tools and Advertising

Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies.” These are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising.

We have activated the IP anonymization function on this website. As a result, your IP address is shortened by Google within EU Member States or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and then shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case you may not be able to use all functions of this website in full. Furthermore, you can prevent the collection of data generated by the cookie (including your IP address) related to your use of the website by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You can prevent the collection of your data by Google Analytics by clicking the following link. An opt-out cookie will be set, which will prevent the collection of your data on future visits to this website: Disable Google Analytics.

More information on how Google Analytics handles user data can be found in Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities in our use of Google Analytics.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a cookie for conversion tracking is set. Cookies are small text files that the web browser stores on the user’s computer. These cookies expire after 30 days and do not serve to personally identify users. If the user visits certain pages of this website while the cookie is still valid, Google and we can recognize that the user clicked on the ad and was redirected to that page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across the websites of AdWords customers. The information obtained with the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag, but they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object by disabling the Google Conversion Tracking cookie in your browser settings. You will then not be included in the conversion tracking statistics.

The storage of “conversion cookies” is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising.

More information on Google AdWords and Google Conversion Tracking can be found in Google’s Privacy Policy: https://www.google.de/policies/privacy/.

Google DoubleClick

This website uses Google DoubleClick cookies (Floodlights). DoubleClick is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Cookies are small text files stored by a user’s browser. A pseudonymous identification number (ID) is assigned to your browser. DoubleClick cookies do not contain any personal data.

The cookies are used to analyze the use of this website. The collected data is evaluated for statistical purposes and in anonymized form. You can prevent the use of cookies by downloading and installing the browser plug-in available at the following link under the section DoubleClick Deactivation Extension. Alternatively, you can disable DoubleClick cookies on the Digital Advertising page at the following link.

The cookies are used to advertise products from this website operator (retargeting). At a later date, you may be shown advertisements (e.g., banners, text-image ads, videos, etc.) on other websites in this regard. Users can object to the retargeting functionality by adjusting the display settings of the Google Remarketing Tags or by disabling retargeting. Alternatively, users can disable the use of third-party cookies by using the opt-out page of the Network Advertising Initiative.

Registration on Our Website

If the data subject uses the opportunity to register on the website of the data controller by providing personal data, the data is transmitted to the data controller via the respective input form. The data is stored solely for the purpose of internal use by the data controller.

During registration, the user’s IP address as well as the date and time of registration are stored. This is to prevent abuse of the services. The data is not passed on to third parties unless there is a legal obligation to do so.

The registration of the data is required to provide content or services. Registered users have the possibility at any time to delete or change the stored data. The data subject can obtain information about the personal data stored about them at any time.

Newsletter

When the newsletter of our company is subscribed to, the data is transmitted to the data controller via the respective input form.

When registering for the newsletter, the user’s IP address as well as the date and time of registration are stored. This is to prevent abuse of the services or the email address of the data subject. The data is not passed on to third parties unless there is a legal obligation to do so.

The data is used solely for sending the newsletter. The newsletter subscription can be canceled by the data subject at any time.

Similarly, the consent to store the personal data can be revoked at any time. A corresponding link is provided in each newsletter.

Ways to Contact Us

The website claips.com features a contact form that can be used for electronic communication. Alternatively, you can contact us via the provided email address. If the data subject contacts the data controller via one of these channels, the personal data transmitted by the data subject is automatically stored. This storage is solely for the purpose of processing or contacting the data subject. The data is not passed on to third parties.

Routine Deletion and Blocking of Personal Data

The data controller processes and stores personal data of the data subject only for as long as necessary to achieve the purpose of storage. Storage may also occur if provided for by European or national law in EU regulations, laws, or other provisions to which the data controller is subject.

Once the purpose of storage no longer exists or a legally prescribed storage period expires, the personal data is routinely blocked or deleted.

Rights of the Data Subject

If your personal data is processed by us, you are a data subject within the meaning of the GDPR and have the following rights with respect to the data controller:

Right of Access

You can request confirmation from the data controller as to whether personal data concerning you is being processed.

If such processing exists, you can request information from the data controller regarding the following:

  • the purposes for which the personal data is processed;
  • the categories of personal data that are processed;
  • the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
  • the planned duration of the storage of your personal data or, if specific details are possible, the criteria for determining the storage period;
  • the existence of a right to rectification or deletion of your personal data, a right to restrict processing by the data controller, or a right to object to this processing;
  • the existence of a right to file a complaint with a supervisory authority;
  • all available information about the source of the data if the personal data was not collected from the data subject;
  • the existence of automated decision-making, including profiling pursuant to Art. 22(1) and (4) GDPR and—in such cases—meaningful information about the involved logic as well as the significance and intended consequences of such processing for the data subject.

You have the right to be informed by the data controller whether the personal data concerning you is transferred to a third country or an international organization. In this context, you can request information about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

Right to Rectification

You have the right to have inaccurate or incomplete personal data concerning you rectified by the data controller without delay. The data controller must make the correction immediately.

Right to Restrict Processing

Under the following conditions, you may request the restriction of the processing of your personal data:

  • if you contest the accuracy of your personal data for a period that allows the data controller to verify the accuracy of the personal data;
  • if the processing is unlawful and you object to the deletion of the personal data and instead request the restriction of its use;
  • if the data controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims; or
  • if you have objected to the processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the legitimate interests of the data controller override your interests.

If the processing of your personal data is restricted, these data – apart from their storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of a significant public interest of the Union or a Member State.

If the restriction of processing is applied for under the above conditions, you will be informed by the data controller before the restriction is lifted.

Right to Deletion

You can request that the personal data concerning you be deleted immediately, and the data controller is obliged to delete this data without delay, provided that one of the following reasons applies:

  • The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You withdraw your consent on which the processing is based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
  • You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
  • The personal data concerning you has been processed unlawfully.
  • Deletion of the personal data concerning you is necessary to fulfill a legal obligation under Union or Member State law to which the data controller is subject.
  • The personal data concerning you was collected in relation to the provision of information society services pursuant to Art. 8(1) GDPR.

If the data controller has made your personal data public and is obliged to delete it pursuant to Art. 17(1) GDPR, the data controller shall take appropriate measures, taking into account the available technology and implementation costs (including technical measures), to inform the data controllers processing the personal data that you, as the data subject, have the right to have all links to these personal data or copies or replications of these personal data deleted.

The right to deletion does not apply if the processing is necessary:

  • for exercising the right to freedom of expression and information;
  • to comply with a legal obligation that requires the processing according to Union or Member State law to which the data controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
  • for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) as well as Art. 9(3) GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of such processing; or
  • for the establishment, exercise, or defense of legal claims.

Right to Notification

If you have asserted your right to rectification, deletion, or restriction of processing with the data controller, the data controller is obliged to inform all recipients to whom your personal data has been disclosed of this rectification, deletion, or restriction of processing, unless this proves impossible or is associated with disproportionate effort.

You have the right to be informed by the data controller about these recipients.

Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to the data controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another data controller without hindrance from the data controller to whom the personal data have been provided, provided that

  • the processing is based on your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, and
  • the processing is carried out by automated means.

In exercising this right, you also have the right to require that the personal data concerning you be transmitted directly by one data controller to another, insofar as this is technically feasible. The rights and freedoms of other persons must not be affected thereby.

The right to data portability does not apply to processing personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

Right to Object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data that is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.

The data controller will no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If your personal data is processed for the purposes of direct marketing, you have the right at any time to object to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services – irrespective of Directive 2002/58/EC – to exercise your right to object by automated means using technical specifications.

Right to Withdraw Consent

You have the right to withdraw your consent to data processing at any time. The legality of the processing based on the consent prior to its withdrawal shall not be affected by the withdrawal.

Automated Decision-Making Including Profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

  • is necessary for entering into or performing a contract between you and the data controller,
  • is permitted by Union or Member State law to which the data controller is subject and which also contains appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or
  • is based on your explicit consent.

However, such decisions must not be based on special categories of personal data pursuant to Art. 9(1) GDPR unless Art. 9(2)(a) or (g) applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.

With regard to the cases mentioned in (a) and (c), the data controller shall take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, which include at least the right to request human intervention by the data controller, to express your point of view, and to contest the decision.

Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, place of work, or the location of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.

The supervisory authority with which the complaint is lodged shall inform the complainant about the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Disclosure of Data to Third Parties

To implement our service and, in particular, to ensure the functionality of our website, we use a provider. The provider is also engaged as an external service provider for processing your data. The provider has been carefully selected and commissioned by us, is bound by our instructions, and is regularly monitored.

Legal Basis for Processing

Where we obtain the data subject’s consent for processing personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data necessary for the performance of a contract of which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for the conclusion of pre-contractual measures.

Where processing of personal data is required to comply with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.

In cases where processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6(1)(d) GDPR serves as the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not override those legitimate interests, Art. 6(1)(f) GDPR serves as the legal basis for the processing. Our company’s legitimate interest lies in carrying out our business activities.

Duration of Storage of Personal Data

Personal data is stored for the duration of the applicable statutory retention period. After the period expires, the data is routinely deleted unless it is required for the initiation or performance of a contract.

Rights of the Data Subject

If your personal data is processed by us, you are a data subject within the meaning of the GDPR and have the following rights with respect to the data controller:

Right of Access

You can request confirmation from the data controller as to whether personal data concerning you is being processed.
If such processing exists, you can request information from the data controller regarding the following:

  • the purposes for which the personal data is processed;
  • the categories of personal data processed;
  • the recipients or categories of recipients to whom the personal data concerning you has been disclosed or will be disclosed;
  • the planned duration of the storage of your personal data or, if possible, criteria for determining the storage period;
  • the existence of a right to rectification or deletion of your personal data, a right to restrict processing by the data controller, or a right to object to the processing;
  • the existence of a right to lodge a complaint with a supervisory authority;
  • all available information about the origin of the data if the personal data was not collected from the data subject;
  • the existence of automated decision-making including profiling pursuant to Art. 22(1) and (4) GDPR and—in such cases—meaningful information about the logic involved as well as the significance and intended consequences of such processing for the data subject.

You have the right to be informed by the data controller whether your personal data is transferred to a third country or to an international organization. In this context, you can request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

Right to Rectification

You have the right to have inaccurate or incomplete personal data concerning you rectified by the data controller without delay. The data controller must promptly make the necessary corrections.

Right to Restrict Processing

Under the following conditions, you may request the restriction of the processing of your personal data:

  • If you contest the accuracy of your personal data for a period that allows the data controller to verify its accuracy;
  • If the processing is unlawful and you object to the deletion of the personal data and instead request the restriction of its use;
  • If the data controller no longer requires the personal data for the purposes of processing, but you need it for the establishment, exercise, or defense of legal claims; or
  • If you have objected to the processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the data controller’s legitimate interests override your interests.

If the processing of your personal data is restricted, these data – aside from storage – may only be processed with your consent, for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of significant public interest of the Union or a Member State.

If the restriction of processing is applied for under the above conditions, you will be informed by the data controller before the restriction is lifted.

Right to Deletion

You can request that the personal data concerning you be deleted immediately, and the data controller is obliged to delete this data without delay if one of the following conditions applies:

  • Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You withdraw your consent on which the processing is based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
  • You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
  • Your personal data has been processed unlawfully.
  • Deletion of your personal data is necessary to fulfill a legal obligation under Union or Member State law to which the data controller is subject.
  • Your personal data was collected in connection with the provision of information society services pursuant to Art. 8(1) GDPR.

If the data controller has made your personal data public and is obligated to delete it pursuant to Art. 17(1) GDPR, the data controller shall take appropriate measures, taking into account available technology and implementation costs (including technical measures), to inform the data controllers processing your personal data that you, as the data subject, have the right to have all links to these personal data or copies or replications of these personal data deleted.

The right to deletion does not apply if the processing is necessary:

  • for exercising the right to freedom of expression and information;
  • to comply with a legal obligation that requires the processing according to Union or Member State law to which the data controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
  • for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) as well as Art. 9(3) GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right mentioned in paragraph 1 is likely to render the achievement of the objectives of such processing impossible or seriously impaired; or
  • for the establishment, exercise, or defense of legal claims.

Right to Notification

If you have asserted your right to rectification, deletion, or restriction of processing with the data controller, the data controller is obliged to inform all recipients to whom your personal data has been disclosed of this rectification, deletion, or restriction of processing, unless this proves impossible or is associated with disproportionate effort.

You have the right to be informed by the data controller about these recipients.

Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to the data controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another data controller without hindrance from the data controller to whom the personal data have been provided, provided that

the processing is based on your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, and
the processing is carried out by automated means.

In exercising this right, you also have the right to require that your personal data be transmitted directly by one data controller to another, insofar as this is technically feasible. The rights and freedoms of other persons must not be affected thereby.

The right to data portability does not apply to processing personal data that is necessary for performing a task carried out in the public interest or in the exercise of official authority vested in the data controller.

Right to Object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data that is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.

The data controller will cease processing your personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If your personal data is processed for the purpose of direct marketing, you have the right at any time to object to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the possibility to exercise your right to object in connection with the use of information society services – regardless of Directive 2002/58/EC – by automated means using technical specifications.

Right to Withdraw Consent to Data Processing

You have the right to withdraw your consent to data processing at any time. The legality of the processing based on your consent prior to its withdrawal shall not be affected by the withdrawal.

Automated Decision-Making Including Profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

is necessary for entering into or performing a contract between you and the data controller,
is permitted by Union or Member State law to which the data controller is subject and which also contains appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or
is based on your explicit consent.

However, such decisions must not be based on special categories of personal data pursuant to Art. 9(1) GDPR unless Art. 9(2)(a) or (g) applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.

Regarding the cases mentioned in (a) and (c), the data controller shall take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, which include at least the right to request intervention by a person from the data controller, to state your own position, and to contest the decision.

Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, your workplace, or the location of the alleged violation if you believe that the processing of your personal data violates the GDPR.

The supervisory authority with which the complaint is lodged will inform the complainant about the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Disclosure of Data to Third Parties

To implement our service and particularly to ensure the functionality of our website, we use a provider. The provider is also engaged as an external service provider for processing your data. The provider has been carefully selected and commissioned by us, is bound by our instructions, and is regularly monitored.

Legal Basis for Processing

Where we obtain the data subject’s consent for processing personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for the conclusion of pre-contractual measures.

Where processing of personal data is required to comply with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.

In cases where processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6(1)(d) GDPR serves as the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not override those legitimate interests, Art. 6(1)(f) GDPR serves as the legal basis for the processing. Our company’s legitimate interest lies in conducting our business activities.

Duration of Storage of Personal Data

Personal data is stored for the duration of the applicable statutory retention period. After the period expires, the data is routinely deleted, unless it is required for initiating or fulfilling a contract.

Rights of the Data Subject

If your personal data is processed by us, you are a data subject within the meaning of the GDPR and have the following rights with respect to the data controller:

Right of Access

You can request confirmation from the data controller as to whether personal data concerning you is being processed.
If such processing exists, you can request the following information from the data controller:

  • the purposes for which the personal data is processed;
  • the categories of personal data processed;
  • the recipients or categories of recipients to whom your personal data has been disclosed or will be disclosed;
  • the planned duration of the storage of your personal data or, if possible, the criteria for determining the storage period;
  • the existence of a right to rectification or deletion of your personal data, a right to restrict processing by the data controller, or a right to object to the processing;
  • the existence of a right to lodge a complaint with a supervisory authority;
  • all available information about the origin of the data if the personal data was not collected from you;
  • the existence of automated decision-making, including profiling pursuant to Art. 22(1) and (4) GDPR and—in such cases—meaningful information about the involved logic as well as the significance and intended consequences of such processing for you.

You have the right to be informed by the data controller whether your personal data is transferred to a third country or an international organization. In this context, you can request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

Right to Rectification

You have the right to have inaccurate or incomplete personal data concerning you rectified by the data controller without delay. The data controller must promptly make the necessary corrections.

Right to Restrict Processing

Under the following conditions, you may request that the processing of your personal data be restricted:

  • If you contest the accuracy of your personal data for a period that allows the data controller to verify its accuracy;
  • If the processing is unlawful and you object to the deletion of the personal data and instead request that its use be restricted;
  • If the data controller no longer requires your personal data for the purposes of processing, but you need it for the establishment, exercise, or defense of legal claims; or
  • If you have objected to the processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the data controller’s legitimate interests override your interests.

If the processing of your personal data is restricted, these data – aside from their storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of significant public interest of the Union or a Member State.

If the restriction of processing is applied for under the above conditions, you will be informed by the data controller before the restriction is lifted.

Right to Deletion

You can request that your personal data be deleted immediately, and the data controller is obliged to delete this data without delay if one of the following conditions applies:

  • Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You withdraw your consent on which the processing is based pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
  • You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
  • Your personal data has been processed unlawfully.
  • Deletion of your personal data is necessary to comply with a legal obligation under Union or Member State law to which the data controller is subject.
  • Your personal data was collected in connection with the provision of information society services pursuant to Art. 8(1) GDPR.

If the data controller has made your personal data public and is obliged to delete it pursuant to Art. 17(1) GDPR, the data controller shall take appropriate measures, considering available technology and implementation costs (including technical measures), to inform any other data controller processing your personal data that you, as the data subject, have the right to have all links to these personal data or copies or replications of these personal data deleted.

The right to deletion does not apply if the processing is necessary:

  • for exercising the right to freedom of expression and information;
  • to comply with a legal obligation that requires the processing according to Union or Member State law to which the data controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
  • for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) as well as Art. 9(3) GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to in paragraph 1 is likely to render the achievement of the objectives of such processing impossible or seriously impaired; or
  • for the establishment, exercise, or defense of legal claims.

Right to Notification

If you have asserted your right to rectification, deletion, or restriction of processing with the data controller, the data controller is obliged to inform all recipients to whom your personal data has been disclosed of such rectification, deletion, or restriction, unless this proves impossible or is associated with disproportionate effort.

You have the right to be informed by the data controller about these recipients.

Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to the data controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another data controller without hindrance from the data controller to whom the personal data have been provided, provided that

the processing is based on your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, and
the processing is carried out by automated means.

In exercising this right, you also have the right to require that the personal data concerning you be transmitted directly by one data controller to another, insofar as this is technically feasible. The rights and freedoms of other persons must not be affected thereby.

The right to data portability does not apply to processing personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

Right to Object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.

The data controller will cease processing your personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If your personal data is processed for the purpose of direct marketing, you have the right at any time to object to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services – irrespective of Directive 2002/58/EC – to exercise your right to object by automated means using technical specifications.

Right to Withdraw Consent to Data Processing

You have the right to withdraw your consent to data processing at any time. The legality of the processing based on your consent prior to its withdrawal shall not be affected by the withdrawal.

Automated Decision-Making Including Profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

is necessary for entering into or performing a contract between you and the data controller,
is permitted by Union or Member State law to which the data controller is subject and which also contains appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or
is based on your explicit consent.

However, such decisions must not be based on special categories of personal data pursuant to Art. 9(1) GDPR unless Art. 9(2)(a) or (g) applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.

Regarding the cases mentioned in (a) and (c), the data controller shall take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, which include at least the right to request intervention by a person from the data controller, to state your own position, and to contest the decision.

Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, workplace, or the location of the alleged violation, if you believe that the processing of your personal data violates the GDPR.
The supervisory authority with which the complaint is lodged will inform you about the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Disclosure of Data to Third Parties

To implement our service and, in particular, to ensure the functionality of our website, we use a provider. The provider is engaged as an external service provider for processing your data. The provider has been carefully selected and commissioned by us, is bound by our instructions, and is regularly monitored.

Legal Basis for Processing

Where we obtain your consent for the processing of personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data necessary for the performance of a contract to which you are a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for the conclusion of pre-contractual measures.

Where processing of personal data is required to comply with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.

In cases where processing is necessary to protect the vital interests of you or another natural person, Art. 6(1)(d) GDPR serves as the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and your interests, fundamental rights, and freedoms do not override those legitimate interests, Art. 6(1)(f) GDPR serves as the legal basis for the processing. Our company’s legitimate interest lies in carrying out our business activities.

Duration of Storage of Personal Data

Personal data is stored for the duration of the applicable statutory retention period. After the period expires, the data is routinely deleted unless it is required for the initiation or performance of a contract.

Rights of the Data Subject

If your personal data is processed by us, you are a data subject within the meaning of the GDPR and have the following rights with respect to the data controller:

Right of Access

You can request confirmation from the data controller as to whether personal data concerning you is being processed.
If such processing exists, you can request the following information from the data controller:

  • the purposes for which your personal data is processed;
  • the categories of personal data processed;
  • the recipients or categories of recipients to whom your personal data has been disclosed or will be disclosed;
  • the planned duration of the storage of your personal data or, if possible, the criteria for determining the storage period;
  • the existence of a right to rectification or deletion of your personal data, a right to restrict processing by the data controller, or a right to object to the processing;
  • the existence of a right to lodge a complaint with a supervisory authority;
  • all available information about the origin of the data if your personal data was not collected directly from you;
  • the existence of automated decision-making including profiling pursuant to Art. 22(1) and (4) GDPR and—in such cases—meaningful information about the logic involved as well as the significance and intended consequences of such processing for you.

You have the right to be informed by the data controller whether your personal data is transferred to a third country or an international organization. In this context, you can request information about the appropriate safeguards pursuant to Art. 46 GDPR in connection with such transfers.

Right to Rectification

You have the right to have inaccurate or incomplete personal data concerning you rectified by the data controller without delay. The data controller must promptly make the necessary corrections.

Right to Restrict Processing

Under the following conditions, you may request that the processing of your personal data be restricted:

  • If you contest the accuracy of your personal data for a period that allows the data controller to verify its accuracy;
  • If the processing is unlawful and you object to the deletion of your personal data and instead request that its use be restricted;
  • If the data controller no longer requires your personal data for the purposes of processing, but you need it for the establishment, exercise, or defense of legal claims; or
  • If you have objected to the processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the data controller’s legitimate interests override your interests.

If the processing of your personal data is restricted, these data – aside from their storage – may only be processed with your consent, for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of significant public interest of the Union or a Member State.

If the restriction is applied under the aforementioned conditions, you will be informed by the data controller before the restriction is lifted.

Right to Deletion

You can request that your personal data be deleted immediately, and the data controller is obliged to delete this data without delay if one of the following conditions applies:

  • Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You withdraw your consent on which the processing is based pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
  • You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
  • Your personal data has been processed unlawfully.
  • Deletion of your personal data is necessary to comply with a legal obligation under Union or Member State law to which the data controller is subject.
  • Your personal data was collected in connection with the provision of information society services pursuant to Art. 8(1) GDPR.

If the data controller has made your personal data public and is obligated to delete it pursuant to Art. 17(1) GDPR, the data controller shall take appropriate measures, considering available technology and implementation costs (including technical measures), to inform any data controller processing your personal data that you, as the data subject, have the right to have all links to these personal data or copies or replications of these personal data deleted.

The right to deletion does not apply if the processing is necessary:

  • for exercising the right to freedom of expression and information;
  • to comply with a legal obligation that requires the processing according to Union or Member State law to which the data controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
  • for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) as well as Art. 9(3) GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right mentioned in paragraph 1 is likely to render the achievement of the objectives of such processing impossible or seriously impaired; or
  • for the establishment, exercise, or defense of legal claims.

Right to Notification

If you have asserted your right to rectification, deletion, or restriction of processing with the data controller, the data controller is obliged to inform all recipients to whom your personal data has been disclosed of such rectification, deletion, or restriction, unless this is impossible or associated with disproportionate effort.

You have the right to be informed by the data controller about these recipients.

Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to the data controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another data controller without hindrance from the data controller to whom the personal data have been provided, provided that

the processing is based on your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, and
the processing is carried out by automated means.

In exercising this right, you also have the right to require that your personal data be transmitted directly by one data controller to another, insofar as this is technically feasible. The rights and freedoms of other persons must not be affected thereby.

The right to data portability does not apply to processing personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

Right to Object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.

The data controller will cease processing your personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defense of legal claims.

If your personal data is processed for the purpose of direct marketing, you have the right at any time to object to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the possibility to exercise your right to object in connection with the use of information society services – irrespective of Directive 2002/58/EC – by automated means using technical specifications.

Right to Withdraw Consent to Data Processing

You have the right to withdraw your consent to data processing at any time. The legality of the processing based on your consent prior to its withdrawal shall not be affected by the withdrawal.

Automated Decision-Making Including Profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

is necessary for entering into or performing a contract between you and the data controller,
is permitted by Union or Member State law to which the data controller is subject and which also contains appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or
is based on your explicit consent.

However, such decisions must not be based on special categories of personal data pursuant to Art. 9(1) GDPR unless Art. 9(2)(a) or (g) applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.

Regarding the cases mentioned in (a) and (c), the data controller shall take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, which include at least the right to request intervention by a person from the data controller, to state your own position, and to contest the decision.

Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, workplace, or the location of the alleged violation, if you believe that the processing of your personal data violates the GDPR.
The supervisory authority with which the complaint is lodged will inform you about the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Disclosure of Data to Third Parties

To implement our service and in particular to ensure the functionality of our website, we use a provider. The provider is engaged as an external service provider for processing your data. The provider has been carefully selected and commissioned by us, is bound by our instructions, and is regularly monitored.

Legal Basis for Processing

Where we obtain your consent for processing personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data necessary for the performance of a contract to which you are a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for the conclusion of pre-contractual measures.

Where processing of personal data is required to comply with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.

In cases where processing is necessary to protect the vital interests of you or another natural person, Art. 6(1)(d) GDPR serves as the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and your interests, fundamental rights, and freedoms do not override those legitimate interests, Art. 6(1)(f) GDPR serves as the legal basis for the processing. Our company’s legitimate interest lies in carrying out our business activities.

Duration of Storage of Personal Data

Personal data is stored for the duration of the applicable statutory retention period. After this period expires, the data is routinely deleted unless it is required for the initiation or performance of a contract.

Rights of the Data Subject

If your personal data is processed by us, you are a data subject within the meaning of the GDPR and have the following rights with respect to the data controller:

Right of Access

You can request confirmation from the data controller as to whether personal data concerning you is being processed.
If such processing exists, you can request the following information from the data controller:

  • the purposes for which your personal data is processed;
  • the categories of personal data processed;
  • the recipients or categories of recipients to whom your personal data has been disclosed or will be disclosed;
  • the planned duration of the storage of your personal data or, if possible, the criteria for determining the storage period;
  • the existence of a right to rectification or deletion of your personal data, a right to restrict processing by the data controller, or a right to object to the processing;
  • the existence of a right to lodge a complaint with a supervisory authority;
  • all available information about the origin of the data if your personal data was not collected directly from you;
  • the existence of automated decision-making including profiling pursuant to Art. 22(1) and (4) GDPR and—in such cases—meaningful information about the logic involved as well as the significance and intended consequences of such processing for you.

You have the right to be informed by the data controller whether your personal data is transferred to a third country or an international organization. In this context, you can request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with such transfers.

Right to Rectification

You have the right to have inaccurate or incomplete personal data concerning you rectified by the data controller without delay. The data controller must promptly make the necessary corrections.

Right to Restrict Processing

Under the following conditions, you may request that the processing of your personal data be restricted:

  • If you contest the accuracy of your personal data for a period that allows the data controller to verify its accuracy;
  • If the processing is unlawful and you object to the deletion of your personal data and instead request that its use be restricted;
  • If the data controller no longer requires your personal data for the purposes of processing, but you need it for the establishment, exercise, or defense of legal claims; or
  • If you have objected to the processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the data controller’s legitimate interests override your interests.

If the processing of your personal data is restricted, these data – aside from their storage – may only be processed with your consent, for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of significant public interest of the Union or a Member State.

If the restriction is applied under the aforementioned conditions, you will be informed by the data controller before the restriction is lifted.

Right to Deletion

You can request that your personal data be deleted immediately, and the data controller is obliged to delete this data without delay if one of the following conditions applies:

  • Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You withdraw your consent on which the processing is based pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
  • You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
  • Your personal data has been processed unlawfully.
  • Deletion of your personal data is necessary to comply with a legal obligation under Union or Member State law to which the data controller is subject.
  • Your personal data was collected in connection with the provision of information society services pursuant to Art. 8(1) GDPR.

If the data controller has made your personal data public and is obligated to delete it pursuant to Art. 17(1) GDPR, the data controller shall take appropriate measures, considering available technology and implementation costs (including technical measures), to inform any data controller processing your personal data that you, as the data subject, have the right to have all links to these personal data or copies or replications of these personal data deleted.

The right to deletion does not apply if the processing is necessary:

  • for exercising the right to freedom of expression and information;
  • to comply with a legal obligation that requires the processing according to Union or Member State law to which the data controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
  • for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) as well as Art. 9(3) GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right mentioned in paragraph 1 is likely to render the achievement of the objectives of such processing impossible or seriously impaired; or
  • for the establishment, exercise, or defense of legal claims.

Right to Notification

If you have asserted your right to rectification, deletion, or restriction of processing with the data controller, the data controller is obliged to inform all recipients to whom your personal data has been disclosed of such rectification, deletion, or restriction, unless this is impossible or associated with disproportionate effort.

You have the right to be informed by the data controller about these recipients.

Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to the data controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another data controller without hindrance from the data controller to whom the personal data have been provided, provided that

the processing is based on your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, and
the processing is carried out by automated means.

In exercising this right, you also have the right to require that your personal data be transmitted directly by one data controller to another, insofar as this is technically feasible. The rights and freedoms of other persons must not be affected thereby.

The right to data portability does not apply to processing personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

Right to Object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.

The data controller will cease processing your personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defense of legal claims.

If your personal data is processed for the purpose of direct marketing, you have the right at any time to object to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the possibility to exercise your right to object in connection with the use of information society services – irrespective of Directive 2002/58/EC – by automated means using technical specifications.

Right to Withdraw Consent to Data Processing

You have the right to withdraw your consent to data processing at any time. The legality of the processing based on your consent prior to its withdrawal shall not be affected by the withdrawal.

Automated Decision-Making Including Profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

is necessary for entering into or performing a contract between you and the data controller,
is permitted by Union or Member State law to which the data controller is subject and which also contains appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or
is based on your explicit consent.

However, such decisions must not be based on special categories of personal data pursuant to Art. 9(1) GDPR unless Art. 9(2)(a) or (g) applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.

Regarding the cases mentioned in (a) and (c), the data controller shall take appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, which include at least the right to request intervention by a person from the data controller, to state your own position, and to contest the decision.

Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, workplace, or the location of the alleged violation, if you believe that the processing of your personal data violates the GDPR.
The supervisory authority with which the complaint is lodged will inform you about the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Disclosure of Data to Third Parties

To implement our service and, in particular, to ensure the functionality of our website, we use a provider. The provider is engaged as an external service provider for processing your data. The provider has been carefully selected and commissioned by us, is bound by our instructions, and is regularly monitored.

Legal Basis for Processing

Where we obtain your consent for the processing of personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data necessary for the performance of a contract to which you are a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for the conclusion of pre-contractual measures.

Where processing of personal data is required to comply with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.

In cases where processing is necessary to protect the vital interests of you or another natural person, Art. 6(1)(d) GDPR serves as the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and your interests, fundamental rights, and freedoms do not override those legitimate interests, Art. 6(1)(f) GDPR serves as the legal basis for the processing. Our company’s legitimate interest lies in conducting our business activities.

Duration of Storage of Personal Data

Personal data is stored for the duration of the applicable statutory retention period. After this period expires, the data is routinely deleted unless it is required for the initiation or performance of a contract.