General

1. Your personal data in the sense of Art. 4 No. 1 DSGVO (e.g. IP address, name, e-mail address, payment information) will be processed by us only in accordance with the provisions of German data protection law and taking into account the European General Data Protection Regulation (DSGVO). The following regulations inform you about the type, scope and purpose of the collection, processing and use of personal data.
2. Processing within the meaning of Art. 4 No. 2 DSGVO of personal data is lawful pursuant to Art. 6 DSGVO if one of the following conditions is met:

(a) the data subject has given consent to the processing of personal data relating to him or her for one or more specific purposes;

(b) processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject’s request;

(c) processing is necessary for compliance with a legal obligation to which the controller is subject;

(d) processing is necessary in order to protect the vital interests of the data subject or another natural person;

(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(f) processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

3. the processing of special personal data (e.g. health data) within the meaning of Article 9 (1) of the GDPR is lawful, in particular pursuant to Article 9 (2) of the GDPR, if one of the following conditions is met:
– there is an explicit consent of the person;

– processing is necessary for the establishment, exercise or defense of legal claims or in the case of actions by the courts in the course of their judicial activities.

4. automatic decision-making or profiling with regard to personal data within the meaning of Art. 22 DSGVO does not take place.

5. the operator ensures the security of the data in accordance with Art. 32 DSGVO, taking into account the principle of proportionality, through appropriate technical measures.

If, contrary to expectations, there is a breach of data protection, the competent supervisory authority will be notified in accordance with Art. 33 of the GDPR, as well as the data subject in accordance with Art. 34 of the GDPR.

7 It is prohibited to falsify screenshots or other evidence, to use third-party evidence or to otherwise pretend to have fulfilled the requirements for a product test.

Scope

This privacy policy only applies to our web pages. If you are forwarded to other sites via links on our pages, please inform yourself there about the respective handling of your data.

Duration of data storage

The duration of the storage of the data transferred by you is based on the legal storage obligations. According to commercial and tax laws, invoices must be kept for a period of 10 years. Registration data is stored for the duration of the existence of the account.

Disclosure of data to third parties

A transfer of data transmitted within the framework of the contractual relationship to third parties (Art. 4 No. 10 DSGVO), will only take place if you have expressly declared your consent (Art. 4 No. 11 DSGVO) or the transfer is necessary for the performance of the contract. The consent can be revoked informally at any time. Data collected by visiting the website will only be collected by third parties who are explicitly named below.

Person responsible in the sense of the DSGVO

The responsible party within the meaning of the General Data Protection Regulation (DSGVO), as well as other data protection laws applicable in the European Union and other provisions of a data protection nature is:

Th Global Inc.

7190 W Sunset Blvd #30D Los Angeles

California 90046

Email: [email protected]

 

Use of our mobile app without registration

1.When you use the mobile app, we collect the personal data described below to enable you to use the functions comfortably. If you wish to use our mobile app, we collect the following data, as this is technically necessary for us to offer you the functions of our mobile app, in particular to offer you the payment function and to ensure stability and security. In addition, we use the data to test and optimize our offer, for statistical analyses and for marketing measures (legal basis is Art. 6 para. 1 p. 1 lit. b, f DS-GVO):

– Activity data

– App data

– Location data

– Hardware and device data

– Marketing and attribution data

– Network data

– Customer lifetime value

– Time zone difference from Greenwich Mean Time (GMT)

– Request content

– Access status/status code

– Amount of data transferred in each case

– mobile network provider

– Data on the test process (start, end, test ID, test payout value)

Our legitimate interest in the collection of data thereby results from the stated purpose.

2. further recipients of the data:

a) Recipients of the data are

– IT service providers,

– Service and call centers,

– Sales and marketing service providers

b) When downloading the mobile app, the required information is transferred to the app store of your choice, i.e. in particular user name, email address and customer number of your account, time of download, payment information and the individual device identification number. We have no influence on this data collection and are not responsible for it. We process the data only insofar as it is necessary for downloading the mobile app to your mobile device.

c) We use “IDFA / Android ID” in our app. Detailed information on this can be found in the section “IDFA / Android ID”.

We are obliged by commercial and tax law to store your address and payment data for a period of ten years. After complete settlement of the contractual relationship (i.e. regularly after successful billing), the data will be restricted in processing after 36 months, i.e. your data will only be used to comply with legal obligations.

4. at the beginning or during the use of our mobile app, we may ask you in a pop-up for permission to use the following functions:

– Use of GPS functionality to identify relevant offers, even when the app is closed.

– Of your photos to photograph your test results.

If you do not give permission, we will not use this data. You may not be able to use all the features of our app in this case. You can grant or revoke permission later in the operating system settings.

If one of our websites is accessed directly via the app, you will find the relevant information in the sections on the use of the website.

Additional data collected when using our mobile app with registration.

1. in addition to the data collected when using the app without registration, the information required for the conclusion of contracts and the subsequent exchange of services is collected when using the app with registration. Furthermore, we use the data for testing and optimizing our offer, for statistical analyses and for marketing measures (legal basis for this is Art 6 para. 1 p. 1 lit. b, c, f DSGVO):

– Contact information

– payment information

Our legitimate interest in the collection of data thereby results from the stated purpose.

2. other recipients of the data:

a) Recipients of the data are

– IT service providers,

– Service and call centers,

– sales and marketing service providers

b) This data on payment transactions is forwarded to our bank (e.g. when using SEPA direct debits) for the purpose of payment processing.

c) The data for external payment providers (e.g. for credit cards or PayPal) are not collected or stored by us, but are transferred directly from you to the payment service provider. We only receive a notification of the payment made and, if necessary, other data resulting from your agreement with the external payment provider. 3.

We are obliged by commercial and tax law to store your address and payment data for a period of ten years. During the ongoing contractual relationship, we will make the data available to you at any time for your own use (e.g. tax return, settlement with the employer). After termination and complete settlement of the contractual relationship, the data will be restricted in processing, i.e. your data will only be used to comply with legal obligations.

Cookies

We use cookies on our website. These are small files that are automatically created by your browser and stored on your end device (PC, laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. In the cookie, information is stored that arises in each case in connection with the specific end device used. This does not mean, however, that we gain direct knowledge of your identity.

The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your terminal device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.

These cookies enable us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined period of time. The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) p. 1 lit. f DSGVO. Most browsers accept cookies automatically. However, you can configure your browser in such a way that no

cookies are stored on your computer or that a notice always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.

Storage of access data in log files

You can visit our website without providing any personal information.

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

browser type/browser version

Operating system used

referrer URL

Host name of the accessing computer

Time of the server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

The purpose of the processing results from our legitimate interest within the meaning of Art. 6 (1) p. 1 lit. f) DSGVO.

An order processing contract has been concluded with our hoster.

Registration function

Users can create a user account. In the course of registration, the required mandatory information is communicated to the end customers and processed on the basis of Art. 6 (1) lit. b DSGVO for the purpose of providing the user account. The processed data includes in particular the login information (password as well as an email address). The data entered during registration is used for the purposes of using the user account and its purpose.

Users may be informed about information relevant to their user account, such as technical changes, by e-mail. If users have terminated their user account, their data relating to the user account will be deleted, subject to any legal obligation to retain it. It is the responsibility of users to back up their data upon termination before the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract.

Within the scope of the use of our registration and login functions as well as the use of the user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as those of users in protection against abuse and other unauthorized use. In principle, this data is not passed on to third parties, unless it is necessary for the pursuit of our claims or there is a legal obligation to do so pursuant to Art. 6 para. 1 lit. c. DSGVO.

Facebook Connect / Login

On our website, we use an application of the company Facebook, Inc., 1601 Willow Road, 94024 Menlo Park, USA (hereinafter: Facebook Connect / Login), to enable dié registration / login with an existing Facebook account. In the context of web tracking, Facebook Connect / Login uses cookies that are stored on your computer and enable an analysis of the use of our website and your surfing behavior (so-called tracking). We perform this analysis based on the tracking service of Facebook Connect / Login in order to constantly optimize our website and make it more available. In the course of using our website, data such as, in particular, your IP address and your user activities are transmitted to servers of the company Facebook Connect / Login and processed and stored outside the European Union, e.g. in the USA. The legal basis for the data processing is Art. 6 para.1 lit.a DSGVO.

Facebook Connect / Login has self-certified under the EU-US Privacy Shield Agreement (see www.privacyshield.gov/list ).

The data is deleted as soon as the purpose of its collection has been fulfilled. For more information on the handling of transferred data, please refer to Facebook’s privacy policy: www.facebook.com/privacy/explanation.

You can prevent the collection and forwarding of personal data (esp. your IP address) as well as the processing of this data by deactivating the execution of script code in your browser, installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www.ghostery.com ) or activating the “Do Not Track” setting of your browser.

Google Sign-In

We offer you the option to register and log in to our website using Google Sign-In. This is done exclusively with your express consent in accordance with Art. 6 para. 1 p. 1 lit. a. DSGVO. Google Sign-In is a service of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. An additional registration or login is therefore not necessary. To log in or register, you will be redirected to the Google page, where you can log in with your usage data. This will link your Google profile or your Google email address and our service. Through the link, we automatically receive the following data from Google Ireland Limited:

First and last name

E-mail address

Gender

Your Google user ID (if different from the e-mail address)

Of this data, we use only that which is used to complete the user profile. This information is mandatory for our services to be able to identify you.

For more information about Google Sign-In and privacy settings, please see the privacy notice: policies.google.com/privacy

Android ID / IDFA

For advertising purposes, we use the so-called “Advertising Identifier” (IDFA) and the Android ID. This is a unique, but non-personalized and non-permanent identification number for a specific end device, which is provided by iOS and Android respectively. The data collected via the IDFA and Android ID is not linked to any other device-related information. We use the IDFA and Android ID to provide you with personalized advertising and to evaluate your usage. We use this to collect the following data: Measuring your interaction with banners by counting the number of times a banner is displayed without being clicked (“frequency capping”), click-through rate, detecting unique usage (“unique user”), and security measures, fraud prevention, and troubleshooting. You can delete the IDFA or Android ID in the device settings at any time, and a new one will be created that will not be merged with the previously collected data. Please note that you may not be able to use all the features of our app if you restrict the use of the IDFA or Android ID.

Braze

Through Braze, we are provided with the functionality to send emails or other messages, e.g. via push or in-app message, e.g. to inform you about newly received orders or, about a change in the privacy policy or to send you advertising (as far as you have separately agreed to advertising). The legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO. As your personal data is processed in the USA, we have concluded an agreement with standard data protection clauses. The contact details of the provider are: Braze Inc, 318 West 39th Street, 5th Floor, New York, NY 10018. Data protection overview: https://www.braze.com/privacy

The collected data will be deleted upon termination of the contractual relationship.

Otherwise, cumulative reports on usage are created from the data, but these are anonymized and used for an unlimited period of time.

Facebook impressions

On our website, we use a web tracking service provided by Facebook, Inc, 1601 Willow Road, 94024 Menlo Park, USA (hereinafter: Facebook Impressions). In the context of web tracking, Facebook Impressions uses cookies that are stored on your computer and enable an analysis of the use of our website and your surfing behavior (so-called tracking). We perform this analysis based on the Facebook Impressions tracking service in order to constantly optimize our website and make it more available. In the course of using our website, data such as, in particular, your IP address and your user activities are transmitted to servers of the Facebook Impressions company and processed and stored outside the European Union, e.g. in the USA. The legal basis for the data processing is Art. 6 para.1 lit.a DSGVO.

Facebook Impressions has self-certified under the EU-US Privacy Shield Agreement (see www.privacyshield.gov/list ).

The data is deleted as soon as the purpose of its collection has been fulfilled. You can find more information on the handling of the transferred data in the privacy policy of Facebook Impressions: www.facebook.com/privacy/explanation.

You can prevent the collection and forwarding of personal data (esp. your IP address) as well as the processing of this data by deactivating the execution of script code in your browser, installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www.ghostery.com ) or activating the “Do Not Track” setting of your browser.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

The lawfulness of the processing results from Art. 6 para. 1 sentence 1 lit. f) DSGVO for the collection of statistics.

The anonymization function of Google Analytics is used.

An order processing agreement has been concluded with Google Inc.

Google Adsense

We use Google AdSense, a service for integrating advertisements of Google Inc. (“Google”). Google AdSense uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. Google AdSense also uses so-called web beacons (invisible graphics). Through these web beacons, information such as visitor traffic on these pages can be analyzed.

The information generated by cookies and web beacons about the use of this website (including your IP address) and delivery of advertising formats will be transmitted to and stored by Google on servers in the United States. This information may be passed on by Google to contractual partners of Google. However, Google will not merge your IP address with other data stored by you.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

For more information on the privacy policy of Google Inc. please visit www.google.de/intl/de/privacy.

Google Web Fonts

External fonts, Google Fonts, are used on these Internet pages. Google Fonts is a service of Google Inc. (“Google”). The integration of these web fonts is done by a server call, usually a Google server in the USA. This transmits to the server which of our Internet pages you have visited. Also, the IP address of the browser of the end device of the visitor of these Internet pages is stored by Google.

The use of Google Fonts serves to improve the visual presentation of our website and this therefore constitutes a legitimate interest within the meaning of Art. 6 (1) sentence 1 lit. f) DSGVO.

You can find more information in Google’s privacy policy, which you can access here:

www.google.com/fonts#AboutPlace:about

www.google.com/policies/privacy/

Help Scout

We use “Help Desk”, a service of Help Scout Inc, 131 Tremont St, Boston, MA 02111, USA (hereinafter referred to as: “Help Scout”), to process your requests. In the process, data provided by you in the context of the request is transmitted to Help Scout on a server in the USA. Your data will not be processed by Help Scout if you only use our website for information purposes and do not contact us.

The transmission serves the purpose of being able to answer your inquiries quickly and efficiently. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6 para. 1 p. 1 lit. f) DSGVO.

You can object to the collection and forwarding of personal data. You can revoke your consent to the aforementioned processing of data at any time, for example by sending us an e-mail. Alternatively, you can also revoke your consent directly to Help Scout.

In order to oblige Help Scout to process the transmitted data only in accordance with our instructions and to comply with the applicable data protection regulations, we have concluded an order processing agreement with Help Scout. In addition, Help Scout has joined the Privacy Shield Agreement concluded between the European Union and the USA and thereby assures that it sufficiently observes and complies with the data protection standards required by the European Union. Help Scout’s certification can be viewed at the following link: www.privacyshield.gov/participant?id=a2zt0000000KzX1AAK&status=Active.

Further information on data protection can be found in Help Scout’s privacy policy at: www.helpscout.net/company/privacy

Reddit Conversion Tracking

Our website uses the “Reddit Conversion Pixel”, an analytics service provided by Reddit Inc, 520 Third Street, Suite 305, San Francisco, CA 94107, United States. This tool sets a cookie on your PC when you come to our website via a Reddit advertisement. The cookie is not used for personal traceability. If you visit our website, both we and Reddit will be able to recognize that you have clicked on the corresponding ad and were redirected to our site via it.

Conversion statistics are created for us with the data collected by conversion cookies. We thus learn the total number of users who responded to our ad and were then redirected to a web page that was tagged with a Reddit pixel. We do not receive any information during this process that would allow us to personally identify you as a user. If you reject this tracking procedure, the storage of cookies can be deactivated via your Internet browser. If necessary, use the help function of your browser for further information.

You can find out more about Reddit’s privacy policy at: www.reddit.com/help/privacypolicy

Snapchat Script/Pixel

We use a marketing tool of Snap Inc, 63 Market Street, Venice, CA 90291, USA (“Snapchat”) on this website (legal basis Art. 6 (1) lit. f) DSGVO). This function is used to present you with interest-based advertisements (“Snapchat Ads”) when using the instant messaging service Snapchat. For this purpose, a pixel from Snapchat has been implemented on this website. Via this pixel, a direct connection to the servers of Snapchat is established when visiting the website. In doing so, it is transmitted to the Snapchat server that you have visited this website and Snapchat assigns this information to your personal Snapchat user account. You can find more information about the display of advertisements on Snapchat here. We do not provide Snapchat with any other personal information about you, such as your email address.

For more information on the collection and use of data by Snapchat, as well as your rights in this regard and options for protecting your privacy, please see Snapchat’s privacy policy: www.snap.com/de-DE/privacy/privacy-policy

Taboola

We use the service of Taboola on our website, which makes it possible to play out user-specific recommendations for content and advertisements based on surfing behavior and customer interests in order to improve the user-friendliness of our offer. The usage profiles are created using pseudonyms, they are not merged with the data about the bearer of the pseudonym and do not allow any conclusions to be drawn about personal data. Taboola collects the following user information by means of cookies:

Operating system of the user

Web pages/content accessed on our web pages

Referrer/link through which the user came to our website

Time and number of website calls

Calls from error pages

Location information (city and state)

IP addresses in shortened form

For more information about Taboola, please visit www.taboola.com/privacy-policy.

There you can deactivate tracking at any time in the “User Choices” section.

Once you have opted out, no more personalized content/advertising will be played to you.

Outbrain

On parts of our website, we use the technology of the provider Outbrain UK Ltd. to point our users to additional content within our website and on third-party websites that may also be of interest to them. The further reading recommendations integrated by Outbrain, e.g. below an article, are determined on the basis of the content previously read by the user. To display this interest-based further content, Outbrain uses cookies that are stored on the user’s computer/end device. The content displayed in the Outbrain widget is automatically controlled and delivered by Outbrain in terms of content and technology.

The display of reading recommendations by Outbrain using cookies is done on a purely pseudonymous basis, personal data of users is not stored. The data collected by Outbrain are: Device source, browser type and the anonymized IP address of the user. To anonymize the IP address, the last octet of the IP address is removed to ensure full anonymization.

For more information on Outbrain’s privacy policy, please visit www.outbrain.com/de/legal/privacy.

You can object to tracking for the display of interest-based recommendations at any time; to do so, click on the “decline” (opt-out) field under Outbrain’s privacy policy, which is available at www.outbrain.com/de/legal/privacy.

YouTube

We have integrated YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. These are all embedded in “extended data protection mode”, which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in § 5 (1) are transmitted. We have no influence on this data transmission.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out of Google. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Contact form

When using the contact form offered on these pages, the information you enter is transmitted and stored for the purpose of responding to your request. The data will not be passed on to third parties. The legitimacy of the use of the form results from Art. 6 para. 1 sentence 1 lit. f) DSGVO.

Inquiries by e-mail, telephone

If you contact us by e-mail or telephone, your inquiry including all personal data resulting from it (name, inquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 (1) (a) DSGVO) and / or on our legitimate interests (Art. 6 (1) (f) DSGVO), as we have a legitimate interest in the effective processing of requests sent to us.

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions – in particular legal retention periods – remain unaffected.

Social media links

We have our own social media pages with the third-party providers that can be reached via links from this website. By using the links, you can access the respective websites of the third-party providers (e.g. Facebook Instagram, Twitter) and also share our content. Here, no data transfer takes place by calling up our website. As soon as you have accessed the page of the third-party provider, you are in the area of responsibility of the respective third-party provider, so that their privacy policy or their statements on data use also apply. We have no influence on this, but we recommend that you log out of the respective third-party provider before using a corresponding link in order to avoid unnecessary data transfer, so that usage profiles cannot be created by the third-party provider simply by using the link.

Security of your data / SSL encryption

In accordance with the legal regulation according to § 13 para. 7 TMG (German Telemedia Act), this site uses SSL encryption, which can be recognized by a lock symbol in the address bar of your browser. When SSL encryption is activated, transmitted data cannot be read by third parties.

As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the closed key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures (TOM) to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Rights of the user

You can request information about the personal data stored about you at any time and free of charge. Your rights also include confirmation, correction, restriction, blocking and deletion of such data and the provision of a copy of the data, in a form suitable for transmission, as well as the revocation of consent given and the objection. Legal storage obligations remain unaffected by this.

Your rights arise in particular from the following standards of the GDPR:

Article 7(3) – Right to withdraw consent under data protection law.

Article 12 – Transparent information, communication and modalities for exercising the rights of the data subject

Article 13 – Information obligation when personal data are collected from the data subject

Article 14 – Information obligation when personal data have not been collected from the data subject

Article 15 – Data subject’s right of access, confirmation and supply of a copy of personal data

Article 16 – Right to rectification

Article 17 – Right to erasure (“right to be forgotten”)

Article 18 – Right to restriction of processing

Article 19 – Obligation to give notice in connection with rectification or erasure of personal data or restriction of processing

Article 20 – right to data portability

Article 21 – Right to object

Article 22 – right not to be subject to a decision based solely on automated processing, including profiling

Article 77 – Right to lodge a complaint with a supervisory authority

To exercise your rights (with the exception of Article 77 of the GDPR), please contact the office mentioned under the item “Responsible party in terms of the GDPR” (e.g. by e-mail).