Privacy Policy

Below we would like to inform you about data protection on our website and about the nature, scope and purpose of the personal data we collect, use and process. Data protection is very important to us.

Personal data is any data by which you could be personally identified, such as your name, IP address, telephone number, etc. Some of this data is processed automatically when you visit the website (e.g. IP address, browser type, operating system, etc.), or when you give us your consent to processing, or when you voluntarily provide us with your data, e.g. by entering your details into a form on our website.

We would also like to inform you of the rights to which you are entitled under the GDPR.

You have the right, at any time and free of charge, to obtain information about the origin, recipients and purpose of your personal data processed by us, as well as the right to have this data rectified, erased or transferred.

You furthermore have the right, under certain circumstances, to demand the restriction of the processing of your personal data. If you have given us your consent to the processing of data, you may withdraw this consent at any time with effect for the future. You also have the right to lodge a complaint with the competent data protection supervisory authority.

The controller responsible for data protection / the processing body is

redfries
Daniela Rosenhammer
Stadtamhof 5
93059 Regensburg, Germany
info@redfries.com
Telephone +49 941 2902994

Processing of your data in connection with the services we provide

For our customers or business partners, or in the event that you are interested in our services, the nature, scope and purpose of the processing of your personal data are governed by the contractual or pre-contractual relationship existing between us. In doing so, we process personal data that we request from you, or that you provide to us, in order to respond to your enquiry, prepare a quotation for you, or process your order. The data subjects in this context are prospective customers, business partners and contractual partners. The purpose of the processing is the performance of contractual services, communication, as well as responding to enquiries and office and organisational procedures.

Unless otherwise stated elsewhere in this privacy policy, the processing of your data, as well as its disclosure to third parties, is limited to that data which is necessary and appropriate for responding to your enquiries and/or for the performance of the contract, for safeguarding our rights, and for fulfilling statutory obligations.

The data concerned is:

• Master data (e.g. names, addresses)
• Payment data (e.g. bank details, invoices)
• Contact data (e.g. email address, telephone number, postal address)
• Contract data (e.g. subject matter of the contract, contract term)

The legal basis for the data processing is Article 6(1)(1)(b) GDPR, the performance of the contract or the handling of pre-contractual enquiries.

Unless a specific retention period is stated in this privacy policy, we store your personal data until the purpose for the data processing no longer applies. We delete your personal data once we no longer require it, i.e. after termination of the contractual relationship existing between us, or once our legitimate interest in the continued processing of the data lapses, or if you request that we delete it. Mandatory statutory provisions – in particular statutory retention periods – remain unaffected. It may also be necessary, for the purpose of asserting, exercising or defending legal claims arising from contractual relationships, or for the protection of the rights of another natural or legal person, to process your personal data until such periods expire. We then only delete the personal data required for this purpose once these periods have expired. Until then, however, we limit the processing of this data to these purposes.

Visiting the website – processing of personal data, and the nature and purpose of its use

When you visit our website, your internet browser transmits data to our web server (as a technical necessity). The following data is processed in the server log files during an ongoing connection for communication between your internet browser and our web server:

• the page from which the file was requested – referrer URL
• the name of the file
• the date and time of the request
• a description of the type of web browser used / browser version and operating system
• the IP address of the requesting computer
• access status (file transferred, file not found, etc.)
• the amount of data transferred

For technical reasons (accessing the website), this data is stored for a short period. It is not possible for us to draw any conclusions about individual persons from this data. IP addresses are deleted or anonymised after seven days at the latest.

The data is evaluated exclusively for internal purposes and does not allow us to draw any conclusions about your identity. No comparison is made with other data sets.

The data referred to above is processed for the following purposes:
• ensuring a smooth and proper connection to the website,
• ensuring convenient use of the website,
• evaluating system security and stability

The legal basis for the data processing is Article 6(1)(1)(f) GDPR. Our legitimate interest follows from the purposes for collecting data listed above. Under no circumstances do we use the data collected to draw conclusions about your identity. You may visit the website without providing any personal details.

Cookies

We use cookies on our website. Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, trojans or other malware.

The legal basis for storing cookies, or for accessing information already stored on your device, is section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Technically necessary cookies may be used without consent under this provision. For all other cookies, in particular those used for analytics and marketing purposes, we obtain your consent before they are set.

Information is stored in the cookie that arises in connection with the specific device used. This does not mean, however, that we thereby gain direct knowledge of your identity. Cookies do not contain personal data and therefore cannot be directly attributed to any particular user.

The use of cookies serves to make our offering more pleasant for you to use. For instance, we use technically necessary session cookies to recognise that you have already visited certain pages of our website. These cookies are automatically deleted once you close your browser. The data processed by these cookies is required for the purposes stated above, in order to safeguard our legitimate interests, and those of third parties, pursuant to Article 6(1)(1)(f) GDPR.

Furthermore, with your consent, cookies from third-party providers may be used, and data may be transferred to third countries outside the EU. In that case, the legal basis is Article 6(1)(1)(a) GDPR – your consent. These cookies are automatically deleted after a defined period. You can find the storage period in the overview in your web browser's cookie settings. You may withdraw your consent at any time. Further explanations of the cookies used, their purpose and storage period, can be found in our cookie policy. There you can also change or withdraw your consent to the setting of cookies at any time.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer, or so that a notice always appears before a new cookie is created. Each browser manages cookie settings differently. Instructions on how to disable cookies, or how to change these settings, are described in the help menus of your browser (see also the technical notes at the end of this privacy policy).

Google Tag Manager – Google Analytics

This website uses Google Tag Manager. This service allows website tags to be managed through a single interface. Google Tag Manager only implements tags. This means: no cookies are used and no personal data is collected. Google Tag Manager triggers other tags, which may in turn collect data. However, Google Tag Manager itself does not access this data. If a deactivation has been carried out at domain or cookie level, it remains in effect for all tracking tags, insofar as these are implemented using Google Tag Manager.

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With your consent (Article 6(1)(1)(a) GDPR), Google Analytics may use cookies or comparable technologies to create pseudonymised usage profiles and analyse the use of the website. The information generated in this way about your use of this website, such as browser type/version, operating system used, referrer URL, an approximate value of your location, and the time of the server request, is transmitted to a Google server and processed there. Google may also use other technologies, such as tracking pixels, to analyse the use of the website.

On behalf of the operator of this website, Google will use this information to evaluate use of the website, to compile reports on website activity, and to provide other services relating to website and internet use, such as market research and the demand-oriented design of websites. The IP address transmitted by your browser as part of Google Analytics is not merged with other data held by Google.

You can prevent the storage of cookies by adjusting your browser software settings accordingly. In addition, you can limit the collection of data generated by cookies or comparable technologies, and relating to your use of the website, by Google, as well as the processing of this data by Google, via our cookie consent tool and via the privacy settings of your Google account.

With your consent, the data is transferred to the USA. This transfer is based on the European Commission's standard contractual clauses and, where Google is certified for this purpose, on the EU-US Data Privacy Framework. Further information can be found at
https://privacy.google.com/businesses/gdprcontrollerterms/ and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

Further information on data protection at Google can be found at https://policies.google.com/privacy or at https://support.google.com/analytics/answer/6004245

Enquiries by email or telephone

If you contact us by email or telephone, your enquiry, including all personal data arising from it (e.g. name, enquiry), will be stored and processed by us for the purpose of handling your request. Your data will not be disclosed without your consent. There is no statutory or contractual obligation to provide your data; however, we are unable to process your enquiry without it.

This data is processed on the basis of Article 6(1)(b) GDPR, provided your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Article 6(1)(a) GDPR) and/or on our legitimate interest (Article 6(1)(f) GDPR), as we have a legitimate interest in the effective handling of enquiries addressed to us.

Data sent to us via enquiries (email) is stored by us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Newsletter

We only send our newsletter containing promotional information (hereinafter "newsletter") with the express consent of recipients pursuant to Article 6(1)(1)(a) GDPR. Registration for our newsletter takes place using a so-called double opt-in procedure, i.e. after signing up for our newsletter, you will receive an email asking you to confirm your registration. This confirmation is necessary to ensure that no third party can register using your email address. There is no statutory or contractual obligation to provide your data; however, sending a newsletter is not possible without it.

Newsletter sign-ups are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation, as well as the IP address.

To register for our newsletter, it is sufficient to provide your email address. Your email address remains stored with us until you unsubscribe from our newsletter again. You may unsubscribe from the newsletter at any time with effect for the future, either by clicking the link at the end of each newsletter or the "Unsubscribe from newsletter" link on our website, and then following the steps described.

Consent to sending emails to your address is given on the basis of Article 6(1)(a) GDPR. Our interest lies in using a user-friendly and secure newsletter system that serves both our business interests and users' expectations of receiving information about our products.

We would like to point out that you may object to the future processing of your personal data at any time by contacting us. Further information on your right of withdrawal can be found under the heading "Data subject rights".

Email marketing and your right to object

If we have obtained your email address in connection with the sale of goods or services and you have not objected, we reserve the right, pursuant to section 7(3) of the German Act Against Unfair Competition (UWG), to regularly send you our offers for similar products to those already purchased, by email. The legal basis arises from our legitimate interest in the promotional approach to our customers, and the processing of the data is permissible under Article 6(1)(1)(f) GDPR as part of a balancing of interests.

You may object to the use of your email address at any time by sending us a message or via the corresponding link in the promotional email. Once the legal basis for processing data for promotional emails no longer applies, your email address will be deleted, provided this does not conflict with statutory retention obligations (e.g. arising from tax or commercial law retention obligations).

We would further like to point out that you may object to the future processing of your personal data at any time in accordance with the statutory provisions under Article 21 GDPR. Such an objection may in particular be raised against processing for the purposes of direct marketing.

Postal advertising and your right to object

We reserve the right to use your first and last name, as well as your postal address, which you have provided to us in connection with orders, for our own advertising purposes, e.g. to send you interesting offers and information about our products by post. This serves to safeguard our predominant legitimate interests, determined by way of a balancing of interests, in the promotional approach to our customers pursuant to Article 6(1)(1)(f) GDPR.

You may object to the storage and use of your data for these purposes at any time by sending us a message. Such an objection may in particular be raised against processing for the purposes of direct marketing. Once the legal basis for processing data for postal advertising no longer applies, your address data will be deleted, provided this does not conflict with statutory retention obligations.

Use of data upon registration for the shop – customer account

We collect personal data when you voluntarily provide it to us as part of your order, when contacting us (e.g. via a contact form or email), or when opening a customer account.

When ordering goods through our shop, you have the choice of registering with us as a customer or ordering without registration. If you wish to register as a new customer, we will store your collected customer data for future orders. By registering with us, you are able to order more quickly by logging into your password-protected customer account, are always aware of the status of your orders, and always have an up-to-date overview of orders you have placed to date.

If you wish to order without registering, you will need to re-enter your details each time you place a further order.

Which data is collected can be seen from the relevant input forms.

We use the data you provide exclusively for the performance of the contract and the handling of your enquiries. Once your enquiry has been finally answered, the contract has been fully performed, or your customer account has been deleted, your data will be blocked from further use and deleted once the statutory retention periods under tax and commercial law have expired.

You may delete your customer account at any time by sending us a message.

The legal basis for the data processing is Article 6(1)(1)(a),(b) GDPR.

Disclosure of data to delivery service providers when delivering goods

For the performance of the contract, we pass your data on to the shipping company commissioned with delivery, insofar as this is necessary for the delivery of ordered goods.

Provided you have given us your express consent to do so during or after your order, we pass your email address and telephone number on to the chosen delivery service provider on this basis, so that it may contact you prior to delivery for the purpose of announcing or coordinating the delivery.

Your consent may be withdrawn at any time by sending us a message, or directly to the delivery service provider at the contact address listed below. Following withdrawal, we will delete the data provided for this purpose, unless you have expressly consented to further use of your data, or we reserve a further use of data that is legally permissible and about which we inform you in this policy.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn, Germany

The legal basis for the data processing is Article 6(1)(1)(a),(b) GDPR.

Disclosure of data to payment service providers – Shopify Payments

We offer payment via "Shopify Payments" on our website. If you select this payment method, payment processing is carried out by the payment service provider Shopify International Limited ("Shopify Payments", 2nd Floor Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland), to whom we disclose the information you provide during the ordering process, together with information about your order (IP address, email address, name, address, account number, sort code, credit card number where applicable, invoice amount, currency and transaction number). Your data is disclosed exclusively for the purpose of payment processing and only to the extent necessary for that purpose.

Shopify Payments creates a transaction confirmation on the basis of the data transmitted. The provision of payment data is necessary and mandatory for the conclusion and/or performance of the contract if you choose to pay via Shopify Payments. If the payment data is not provided, it is not possible to conclude and/or perform the contract using the Shopify Payments payment method.

We delete the data arising in connection with payment via Shopify Payments once storage is no longer necessary, or we restrict its processing where statutory retention obligations apply. Due to mandatory commercial and tax law provisions, we are required to retain your address, payment and order data for up to ten years.

Further information on data protection at Shopify Payments can be found at https://www.shopify.com/legal/privacy. The terms of use for Shopify Payments can be found at https://www.shopify.com/legal/terms-payments-ie

The legal basis for the data processing is Article 6(1)(1)(a),(b) GDPR.

Online presence on social networks

We maintain an online presence on social networks for promotional purposes.

We would like to point out that you use these social services and their features at your own responsibility. This applies in particular to the use of interactive features (e.g. sharing, rating).

When you visit our social media presences, the respective provider collects and processes personal data for advertising and market research purposes. As a rule, usage profiles are also created in this context. This is particularly the case if you are a member of the respective platform and are logged in. Providers may use these usage profiles to display advertising tailored to your interests. To avoid social media operators collecting information about you while you visit our website, you should log out of the respective social medium before visiting our website, and delete any cookies from that social medium that may be stored in your browser.

Social network links

No social plugins from Facebook or other social networks are integrated into this website. Accordingly, no program code from a social network is active on our pages. The icons for Facebook, etc. on our website are merely linked images.

Data protection notice – online presence on Facebook/Instagram (Meta)

Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland – hereinafter "Facebook") and the page administrator (us) are joint controllers for the processing of personal data set out in the Terms for Covered Products, on the page administrator's Facebook account, that is collected in connection with a visit to, or interaction with, a page (including its content).

Covered Products are all Facebook products, Facebook Pages and Page Insights. Facebook products include Facebook itself (including the mobile Facebook app and the in-app browser), Messenger, Instagram (including apps such as Direct and Boomerang), Portal-branded devices, Bonfire, Facebook Mentions, Facebook Shops, Spark AR Studio, Audience Network, NPE Team apps, and all other features, apps, technologies, software products, products or services offered by Meta Platforms, Inc. or Meta Platforms Ireland Limited. Facebook Business Tools are also included among the Facebook products.

The scope of the joint processing and the controller addendum covers the collection of personal data specified in the Terms for Covered Products and its transmission to Facebook. Facebook's subsequent processing of data is not part of the joint processing. Likewise, where personal data is processed exclusively by us, this is not part of the joint processing – in this case we are the sole controller of the data processing.

The information required under Article 13(1)(a) and (b) GDPR can be found in Facebook's Data Policy at https://www.facebook.com/about/privacy. Further information on the joint processing can be found in the respective terms of use for the products.

For the use of certain Facebook products (so-called "Facebook Business Tools") and the associated data processing, the controller addendum between us and Facebook, as joint controllers pursuant to Article 26 GDPR, applies. This can be viewed at https://www.facebook.com/legal/controller_addendum.

The page administrator and Facebook have entered into this controller addendum in order to set out the respective responsibilities for fulfilling the obligations under the GDPR with regard to the joint processing (as set out in the Terms for Covered Products).

We have furthermore agreed that, as between the parties, Facebook is responsible for enabling data subjects to exercise their rights under Articles 15–20 GDPR with regard to personal data stored by Facebook following the joint processing.

The data transfer is based on the European Commission's standard contractual clauses.

Further information can be found at
https://de-de.facebook.com/help/566994660333381/?helpref=uf_share
https://www.facebook.com/legal/EU_data_transfer_addendum
https://help.instagram.com/519522125107875/?maybe_redirect_pol=0

Facebook's data processing terms

We expressly point out that the use of certain Facebook products may involve the transfer of personal information to Facebook. Depending on the circumstances, it is also possible that Meta Platforms Ireland Limited transfers EU data to Meta Platforms, Inc. in the USA for storage and further processing. By using the Facebook products, the user agrees to Facebook's data processing terms. These can be found at https://www.facebook.com/legal/terms/dataprocessing/update.

The Facebook EU Data Transfer Addendum can be found at https://www.facebook.com/legal/EU_data_transfer_addendum

Facebook's Data Policy can be found at https://www.facebook.com/about/privacy/ – Instagram's Data Policy can be found at https://help.instagram.com/519522125107875

Information on cookies and other storage technologies on Facebook can be found at https://www.facebook.com/policies/cookies/

Facebook's data security terms can be viewed at https://www.facebook.com/legal/terms/data_security_terms

Facebook's terms of service for commercial use can be found at https://www.facebook.com/legal/commercial_terms/update

Facebook's data protection officer can be contacted at https://www.facebook.com/help/contact/540977946302970

Further information on Page Insights data

Facebook continues to provide us with so-called Page Insights for our Facebook Page. Insights data is aggregated data that gives us information about how users interact with our Facebook Page. The legal basis for the data processing is Article 6(1)(1)(f) GDPR, namely safeguarding our legitimate interests in an optimised presentation of our website and effective communication with users.

The data processing is carried out on the basis of an agreement between the joint controllers pursuant to Article 26 GDPR, which can be viewed at https://www.facebook.com/legal/terms/page_controller_addendum.

Further information on Page Insights data on Facebook can be found at https://www.facebook.com/legal/terms/information_about_page_insights_data, as well as at https://de-de.facebook.com/help/instagram/155833707900388

Data processing when making contact via Facebook products

We collect personal data when you contact us, e.g. via the contact form or Messenger. This data is stored and used exclusively for the purpose of responding to your enquiry and/or for making contact and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your enquiry pursuant to Article 6(1)(1)(f) GDPR. Your data is deleted once your enquiry has been fully processed, provided this does not conflict with statutory retention obligations.

Your rights

Facebook and we have agreed that Facebook bears primary responsibility for providing you with information about the joint processing, and for enabling you to exercise your rights under the GDPR. Under the GDPR, you have the right to access, rectification, portability and erasure of your data, as well as to object to the processing of your data and to restrict its processing. You can learn more about these rights in your Facebook settings. For further information on your rights, please also see "Data subject rights" in this privacy policy.

Facebook and we have agreed that the Irish Data Protection Commission is the lead authority responsible for supervising the processing carried out under joint controllership. You have the right to lodge a complaint with the Irish Data Protection Commission (see www.dataprotection.ie) or with your local supervisory authority.

Right to object to advertising

You may object to the processing of your data for advertising purposes on Facebook at any time by adjusting your advertising settings in your Facebook user account at https://www.facebook.com/settings?tab=ads accordingly.

Legal basis for operating the Facebook Page/Instagram and processing personal data when accessed

We operate the Facebook Page/Instagram Page for advertising purposes in respect of our goods and services. The processing of personal data is carried out on the basis of Article 6(1)(1)(f) GDPR.

Pinterest

We also maintain a presence on the social network Pinterest. Insofar as the data you transmit to us via Pinterest is also, or exclusively, processed by Pinterest, Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, email: hallo@pinterest.com) is, alongside us, the controller for data processing within the meaning of the GDPR.

To evaluate user behaviour, Pinterest collects personal data. Pinterest provides operators of Pinterest profiles with data in an anonymised and aggregated form. This concerns demographic data such as age, gender, place of residence or country, without reference to identifiable individuals. We are therefore unable to identify any visitor to our Pinterest profile. We are furthermore provided with statistics on the source of visits to the Pinterest profile, the type of device used to access it, and the number of page views, as well as anonymised statistical data (so-called "Audience Insights"). We cannot draw any conclusions about individual visitors from this data. We use this data exclusively to improve our Pinterest profile and our offering.

Our use of the data provided to us by Pinterest is based on Article 6(1)(1)(f) GDPR, for the purpose of carrying out data analyses in order to statistically evaluate and optimise the use of our Pinterest page, as well as for advertising and marketing our products.

If you, as a registered user, follow ("subscribe to") our Pinterest profile, Pinterest adds your profile to the list of all followers/subscribers of that profile. Pinterest subsequently makes our pins available on your board. The list of our followers is provided to us by Pinterest. This list only contains data that is public, i.e. information that the visitor has voluntarily disclosed via their Pinterest settings. The individual user decides which information this is in their own Pinterest settings. The processing of this data is carried out pursuant to Article 6(1)(a) GDPR, on the basis of your voluntarily given consent through registration and login with Pinterest.

Further information on the processing of data by Pinterest can be found at https://policy.pinterest.com/en/privacy-policy.

You have the option of setting your privacy preferences individually in your Pinterest settings at https://www.pinterest.com/settings/privacy.

Data security – SSL encryption

We use SSL (Secure Socket Layer) encryption on our website to protect the transmission of confidential content. When SSL encryption is activated, the data you transmit to us cannot be read by third parties. Whether an individual page of our website is transmitted in encrypted form can be recognised by the closed padlock symbol in your browser's status bar – your browser's address bar displays "https://" when SSL encryption is in use.

Processing/disclosure of data

Your personal data is not transferred to third parties for purposes other than those set out above or below.

We only disclose your personal data to third parties if:

• you have given your express consent to do so pursuant to Article 6(1)(1)(a) GDPR,
• this is legally permissible and is necessary pursuant to Article 6(1)(1)(b) GDPR for the performance of contractual relationships or for the implementation of pre-contractual measures with you,
• we are subject to a legal obligation to disclose the data pursuant to Article 6(1)(1)(c) GDPR,
• the processing is necessary pursuant to Article 6(1)(1)(f) GDPR to safeguard our legitimate interests or those of a third party, provided the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail, in particular where the data subject is a child.

Data subject rights

You have the right:

• pursuant to Article 15 GDPR, to request information about your personal data processed by us;
• pursuant to Article 16 GDPR, to request the immediate rectification of inaccurate, or the completion of, your personal data stored by us;
• pursuant to Article 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims;
• pursuant to Article 18 GDPR, to request the restriction of the processing of your personal data, provided that the accuracy of the data is contested by you, the processing is unlawful but you object to its erasure, or we no longer need the data but you require it for the assertion, exercise or defence of legal claims, or you have lodged an objection to the processing pursuant to Article 21 GDPR and it has not yet been determined whether our legitimate grounds override yours;
• pursuant to Article 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transfer to another controller;
• pursuant to Article 7(3) GDPR, to withdraw any consent you have given to us at any time with effect for the future. This means that we may no longer continue the data processing based on this consent going forward;
• pursuant to Article 77 GDPR, to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. As a rule, you may contact the supervisory authority of your usual place of residence, your place of work, or our registered office, in particular the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany. A list of data protection authorities in Germany, together with their contact details, can be found at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html.

Right to object to the collection of data in special cases, and to direct marketing (Article 21 GDPR)

Insofar as we process your personal data pursuant to Article 6(1)(1)(f) GDPR, on the basis of a balancing of interests in which our legitimate interests prevail, you have the right, pursuant to Article 21 GDPR, to object at any time, with effect for the future, to the processing of your personal data.

If the processing is carried out for the purposes of direct marketing, you may exercise this right at any time. This also applies to profiling, insofar as it is connected with such direct marketing. Where the processing is carried out for other purposes, you only have a right to object where there are grounds arising from your particular situation.

If you wish to exercise your right to object, it is sufficient to send us an email.

Following the exercise of your right to object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

If you object to the processing of your personal data for the purposes of direct marketing, your personal data will no longer be processed for these purposes.

Changes to this privacy policy – version date

Due to the ongoing development of our website and the services offered via it, or as a result of changed statutory or regulatory requirements, it may become necessary to amend this privacy policy in compliance with applicable data protection provisions. The current version of the privacy policy can be accessed and printed by you at any time on our website under "Privacy Policy".

Last updated: 08/2026

Technical notes on disabling cookies – guides

• Microsoft Edge: https://support.microsoft.com/en-gb/microsoft-edge
• Mozilla Firefox: https://support.mozilla.org/en-GB/kb/enable-and-disable-cookies-website-preferences
• Google Chrome: https://support.google.com/chrome/answer/95647 and https://support.google.com/chrome/answer/95464 (Incognito browsing)
• Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
• Opera: https://www.opera.com/help