•  
  • En

Privacy Policy

We attach great importance to the protection of your personal data. In all instances of data processing (e.g. collecting, processing, and disclosing your data), we therefore adhere to the European and German regulatory provisions on data protection.

The explanations that follow describe which of your personal data are requested when using our web pages, how these data will be used and disclosed, how you may lodge any claims based on the information provided to us, and which measures we have in place to protect your data.


1. Who is your point of contact (party responsible) for any data protection issues?

The party responsible (controller) as defined by the regulations on data protection for any data processing and data transmission processes generated by our web pages is:

Ottmar Hörl
Kembacher Straße 9
97877 Wertheim
Germany
shop@ottmarhoerl.de
Phone +49 (0) 93 97 - 328
Fax +49 (0) 93 97 - 639

We have not appointed a data protection officer, as we are not legally required to do so.

If you have any queries relating to data protection or the enforcement of your personal data protection rights (see below), please contact us at the address given above.


2. Which of your personal data do we require for you to use our web pages? Which data do we collect and store while you are using our sites?

"Personal data" means any information concerning the personal or material circumstances of an identified or identifiable natural person, such as your name, location data, your phone number, your date of birth, bank details, or your IP address.

As a matter of principle, we collect and use personal data of our users solely as far as these are required for the provision of a functioning website and featuring our contents and services. We collect and use any personal data of our users only after the users have given their consent, the only exception being such cases where actual reasons preclude obtaining consent in advance, or where data processing is permitted by law.


Log data

The following data are logged while our web pages are used. We exclusively save these data (log data) for system-specific internal and statistical purposes:

Web server:
1.    the user's internet protocol (IP) address,
2.    URL,
3.    information on type and version of web browser used,
4.    the operating system used by the user,
5.    date and time of access

Online shop:
1.    session ID,
2.    the user's IP address,
3.    date of access,
4.    information on type and version of web browser used,
5.    customer ID,
6.    shopping basket ID,
7.    language

The data will also be saved to our system log files. These data are not saved in conjunction with any other personal data provided by the user.

Art. 6 para. 1 lit. f of the General Data Protection Regulation (GDPR) forms the legal basis for temporary data and log file storage.

Temporary storage of the IP address by the system is required in order to guarantee that the website information can be submitted to the user's computer system. For this purpose, the user's IP address must be saved as long as the session lasts.

Data are saved to the log files in order to ensure that the website works properly. Moreover, we use these data to optimise our website, and to protect the safety of our data processing systems. We do not use or analyse these data for marketing purposes.

These purposes also constitute our legitimate interests in data processing according to art. 6 para. 1 lit. f of the GDPR.

The personal data will be deleted as soon as they are no longer necessary in relation to the purposes for which they were collected or otherwise processed. In the case of website provision, data will be deleted as soon as the session ends.

In the case of saving personal data to log files, data are no longer necessary when seven days have elapsed. We may save the data for a longer period. In the latter case, we will delete or anonymise the user's IP address so as to render its assignment to a requesting client impossible.

Collecting and processing data for providing the website and saving personal data to log files are absolutely necessary for operating the website. For this reason, the user shall have no right to object in this case.


Registration

Users may register on our website by submitting personal data. In the process, following entry into an online form, these data are transmitted to us and saved. The data mentioned below are collected and processed when registering with us:

1.    customer's full name or full company name,
2.    e-mail address,
3.    address (invoice address and, if required, additional delivery address),
4.    phone number

While registration is performed, the data shown below are saved in addition:

1.    items ordered
2.    textual message for a gift item (if applicable)
3.    method of payment
4.    password (if applicable)
5.    VAT reg. no. (if applicable)

Art. 6 para. 1 lit. a of the GDPR forms the legal basis for data processing as long as the user has given his or her consent.

If registration is necessary for the performance of a contract to which the user is party, or in order to take steps at the request of the user prior to entering into a contract, art. 6 para. 1 lit. b of the GDPR forms an additional legal basis for data processing.

The user is required to register so that a contract can be performed to which the user is party, or in order to take steps at the request of the user prior to entering into a contract.

The data will be deleted as soon as they are no longer necessary in relation to the purposes for which they were collected.

During the process of registration, this is the case for the performance of a contract to which the user is party, or in order to take steps at the request of the user prior to entering into a contract, as soon as the data are no longer required for performing the contract. After the conclusion of a contract, we may be obligated to store personal data of the contractual partner so as to meet contractual or legal requirements.

Users may cancel their registration at any time. You shall have the right to have your personal data saved in our system amended. Cancellation and amendment of data shall be effected by contacting us at the address given above.

If the data are necessary for the performance of a contract to which the user is party, or in order to take steps at the request of the user prior to entering into a contract, their premature deletion is only possible as long as this is permissible in view of any contractual or legal requirements.


Contact form

We have implemented a contact form on our website to make it easy for you to contact us electronically, stating your request. Via the contact form, we collect your name and e-mail address, optionally also the name of your company, address, phone and fax numbers. When your message is sent, the data shown below are saved in addition:

user's IP address, date and time of sending

During the process of sending your message, we will ask you to give your consent to your data being processed; reference is also made to our Privacy Policy.

Alternatively, you may contact us using the e-mail address given. In this case, the user's personal data transmitted together with the e-mail message will be stored.

We will use your data solely for processing your request, and may contact you for this purpose using the contact details provided by you. We will not use these data for marketing purposes. Nor will we share them with third parties.

Art. 6 para. 1 lit. a of the GDPR forms the legal basis for data processing as long as the user has given his or her consent.

Art. 6 para. 1 lit. f of the GDPR forms the legal basis for processing data that are disclosed while sending an e-mail message. In cases where e-mail contact is targeted at concluding a contract, art. 6 para. 1 lit. b of the GDPR forms an additional legal basis for data processing.

We will process data collected from the online form solely for answering your request. In the case of contacts made via e-mail, these constitute the required legitimate interests in data processing pursued by us.

Any other processing of personal data during the sending process is targeted at preventing fraudulent use of the contact form, and at protecting the safety of our data processing systems.

The personal data will be deleted as soon as they are no longer necessary in relation to the purposes for which they were collected or otherwise processed. In the case of data collected from the online contact form, as well as data disclosed by sending an e-mail message, data will be deleted as soon as the conversation with the user ends. The conversation ends when the circumstances indicate that the matter at hand has been brought to a conclusion.

In the case of additional personal data collected during the sending process, data will be deleted, at the latest, when seven days have elapsed.

The user may revoke his or her consent to the processing of personal data. If the user has contacted us by e-mail, he or she shall have the right to object to the personal data being processed. The user is entitled to assert his or her right at any time using the contact details given above. In this case, the conversation can no longer be continued.

Any personal data stored while maintaining contact, will be deleted in this case.


3. How will your data be used? Will they be shared with third parties? And for what purpose?

We will use any personal data provided by you to answer your requests, process your order from our online shop as well as for the purpose of technical administration of our web pages.

We will not share, sell or otherwise disclose your personal data to third parties unless such disclosure is necessary to perform a contract; for invoicing purposes; to debit your account with the amount of your payment, or unless you have explicitly consented to such use. Furthermore, we are entitled to disclose personal data for debt collection purposes, and we reserve the right to exchange data with general credit protection agencies (e.g. Schufa). The aforesaid applies only as far as legally permissible.


Using PayPal as a payment method

In our online shop, we use PayPal, an external online payment service, as a payment method (PayPal [Europe] S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg [hereinafter referred to as "PAYPAL"]). If you decide to use PayPal as an online payment service, you will automatically be connected with the PAYPAL online payment service via a technical gateway. The payment details entered by you will be transmitted to PAYPAL, stored and processed there, solely for processing payment. Moreover, data processing is performed only for the purpose of processing payment for your order; PAYPAL may be required to disclose your payment details to the credit institution entered by you in order to affect and authorise the payment transaction. When choosing PayPal as your payment method, PAYPAL will redirect you via a gateway directly to PayPal, where you will log in to your PayPal account to authorise the payment transaction.

Art. 6 para. 1 lit. a of the GDPR forms the legal basis for data processing as long as the user has given his or her consent.

Further information is provided here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=en_DE


Legally required disclosure

Please note that, in particular cases, we may be entitled to disclose your data by order of the competent authority insofar as this is required for the prosecution of criminal offences; for purposes of danger defence performed by the police authorities at federal state level; for the performance of statutory duties of the protection of the constitution at national and federal state levels by the competent authorities, the German intelligence service (BND), or military counterintelligence service; or for the enforcement of intellectual property rights.


4. Integration and use of social plug-ins, especially Facebook's "Recommend" or "Like" buttons, and other tags of external social networking service providers

Our web pages use wild cards for social media buttons such as Facebook, Google+ and Twitter. The buttons are not loaded until you click the wild card for the character concerned. Only in this instant will a connection with the servers of the social networking service providers be established and information on your visit to our website be transmitted. Your data will only be transmitted to the social networking service provider if you are logged in to your relevant social network account.

The details given below apply to the Facebook, Google+ and Twitter buttons used on our web pages:


Facebook

Our web pages employ so-called plug-ins from the external social networking service provider Facebook, we also link to Facebook. The sole responsibility for Facebook and its internet presence lies with Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter referred to as "Facebook"). A complete list of Facebook plug-ins is available from: https://developers.facebook.com/docs/plugins/?locale=en_US

Facebook tags on our web pages are indicated by the Facebook logo; we do not use Facebook plug-ins at this stage, which means that your data are not transmitted to Facebook.

The Facebook link or Facebook's Like button will only be activated, once you click the link or button. A description field giving you further information on potential data transmission to Facebook will be shown beforehand; reference is also made to this part of our Privacy Policy.

When clicking on any of the Facebook tags, in particular the Share button will be loaded and a connection with the Facebook servers be established. In this instant, the fact that you are visiting our website will be transmitted to Facebook. If you visit our website whilst logged in to your Facebook user account, additional information, e.g. the user-related data mentioned in section 2, will be transmitted to Facebook. These data will be transmitted to Facebook, related to your user account, stored there, and might be shared with third parties, especially Facebook's advertising partners. However, this will only happen if you are logged in to your Facebook user account. If you wish to avoid being tracked, we suggest that you log out of your Facebook user account before clicking the Facebook tags on our web pages. We wish to point out that the features associated with the Facebook tags, particularly the transmission of user-related information to Facebook, are not active while you visit our web pages unless you click the Facebook tags.

For more information regarding the purpose and scope of Facebook's data collecting, processing and use, and your rights in that regard as well as possible settings to protect your privacy, we suggest that you refer to Facebook's policy on data protection, which can be accessed at http://de-de.facebook.com/privacy/explanation.php.

Art. 6 para. 1 lit. a of the GDPR forms the legal basis for data processing.


Google+

Our web pages also employ plug-ins from the external social networking service provider Google+. The sole responsibility for Google+ and its web pages lies with Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google+ tags on our web pages are indicated by "+1"; we do not use Google+ plug-ins at this stage, which means that your data are not transmitted to Google.

The +1 button will only be activated, once you click it. A description field giving you further information on the details of potential data transmission to Google will be shown beforehand when moving the cursor over the information icon to the right of the social media buttons; reference is also made to this part of our Privacy Policy.

When clicking on the Google+ tag, in particular the +1 button will be loaded and a connection with the Google servers be established. If you visit our website whilst logged in to your Google+ user account, specific information and the user-related data mentioned in section 2 as well as the fact that you have visited our website, will be transmitted to Google. These data will be transmitted to Google, stored there, and might be shared with third parties. However, this will only happen if you are logged in to your Google+ user account. If you wish to prevent data from being transmitted to Google, we suggest that log out of your Google+ user account before clicking the Google tags on our web pages. We wish to point out that the features associated with the Google+ tags, particularly the transmission of user-related information to Google, are not active while you visit our web pages unless you click the Google+ tags.

For more information regarding the purpose and scope of Google's data collecting, processing and use concerning the +1 button, and your rights in that regard as well as possible settings to protect your privacy, we suggest that you refer to Google's policy on data protection, which can be accessed at https://policies.google.com/privacy?hl=en.

Art. 6 para. 1 lit. a of the GDPR forms the legal basis for data processing.


Twitter

Our web pages also employ plug-ins from the external social networking service provider Twitter, we also link to Twitter. The sole responsibility for Twitter and its web pages lies with Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA.

Twitter tags on our web pages are indicated by the Twitter logo or "Tweet"; we do not use Twitter plug-ins at this stage, which means that your data are not transmitted to Twitter.

The Twitter Tweet button will only be activated, once you click it. A description field giving you further information on the details of potential data transmission to Twitter will be shown beforehand when moving the cursor over the information icon to the right of the social media buttons; reference is also made to this part of our Privacy Policy.

When clicking on the Twitter tag, in particular the Tweet button will be loaded and a connection with the Twitter servers be established. If you visit our website whilst logged in to your Twitter user account, specific information and the user-related data mentioned in section 2 as well as the fact that you have visited our website, will be transmitted to Twitter. These data will be transmitted to Twitter, stored there, and might be shared with third parties. However, this will only happen if you are logged in to your Twitter user account. If you wish to prevent data from being transmitted to Google, we suggest that you log out of your Twitter user account before clicking the Twitter tags on our web pages. We wish to point out that the features associated with the Twitter tags, particularly the transmission of user-related information to Twitter, are not active while you visit our web pages unless you click the Twitter tags.

For more information regarding the purpose and scope of Twitter's data collecting, processing and use, and your rights in that regard as well as possible settings to protect your privacy, we suggest that you refer to Twitter's policy on data protection, which can be accessed at https://twitter.com/en/privacy.

Art. 6 para. 1 lit. a of the GDPR forms the legal basis for data processing.

Twitter Inc. will either delete log data or remove any common account identifiers, such as user name, full IP address, e-mail address, or phone number, after a maximum of 18 months, if not sooner.

Our web pages also link to the social media platforms Facebook, Twitter, YouTube, and Instagram. Icons on our web pages labelled with the corresponding logos of these social media platforms indicate the relevant links which redirect you to our corresponding social media pages. We do not use social plug-ins in this context.

None of your data is transmitted to the social media services via the tags on our web pages as these are regular hyperlinks that do not transmit any data. Once you click the tag, you will instantly be directed to our corresponding social media site. Data will only be transmitted when you are logged in to your user account with the respective social media service. This puts you in a position to link, or share, information featured on our web pages with the social media service, or, in the case of YouTube, watch the videos on our YouTube channel. The social media service might be informed of the content featured on the pages you have visited while browsing our website.

The sole responsibility for the social media services linked to our site lies with:

•    Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, for Facebook and its internet presence;
•    Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA, for Twitter and its internet presence;
•    YouTube, LLC, 901 Cherry Ave., St. Bruno, CA 94066, USA, for YouTube and its internet presence;
•    Instagram, LLC, 1601 Willow Rd. Menlo Park, CA 94025, USA, for Instagram and its internet presence;

For more information regarding the purpose and scope of Facebook's, Twitter's, YouTube's, or Instagram's data collecting, processing and use, and your rights in that regard as well as possible settings to protect your privacy, we suggest that you refer to these social media services' policies on data protection, which can be accessed at:

•    https://www.facebook.com/about/privacy/ for Facebook
•    https://twitter.com/en/privacy for Twitter
•    https://policies.google.com/privacy?hl=en for YouTube
•    https://www.instagram.com/about/legal/privacy/ for Instagram


5. How do we protect your personal data?

We have a number of adequate security measures in place to protect your personal data to a reasonable extent.

In line with this Privacy Policy, physical and technical measures as well as organisational procedures that restrict access to the information stored to specifically authorised personnel have been implemented to protect our data base. Our information system is protected by a firewall to prevent access from other networks connected to the internet. Only personnel that require specific information to fulfil a certain task have access to personal data. Our personnel have been trained to meet the requirements regarding data security and data privacy measures.

When collecting and transmitting data from our web pages, we use standardised SSL technology. Personal data collected during the ordering process are transmitted using SSL encryption, which can be recognised by the padlock icon in your web browser and "https://" appearing in the address bar.

You should not in any case disclose to third parties the password you use to access our web pages, and should take care to alter your password at regular intervals. Moreover, we suggest that you use different passwords for different websites that are password-protected (e.g. e-mail account, online banking, etc.). When exiting our website, be sure to log off and close your web browser so as to prevent unauthorised users from accessing your user account.

We cannot guarantee seamless data protection when communicating by e-mail.


6. E-mail marketing (e.g. e-mail newsletter)

We have implemented an online form on our website for you to subscribe to our newsletter. Once you register for the newsletter, data entered in the online form (your e-mail address) are transmitted to us.

Moreover, the following data are collected during registration:

the date and the user's IP address used during registration, the date and the user's IP address used for double opt-in confirmation

During the process of registration, we will ask you to give your consent to your data being processed; reference is also made to our Privacy Policy.

Data collected and processed in connection with mailing our newsletters will not be shared with third parties. The data will solely be used for newsletter mailing.

Art. 6 para. 1 lit. a of the GDPR forms the legal basis for data processing after the user has registered for the newsletter as long as the user has given his or her consent.

The collection of the user's e-mail address serves the purpose of sending the newsletter to subscribers.

The personal data will be deleted as soon as they are no longer necessary in relation to the purposes for which they were collected or otherwise processed. In the case of newsletter subscription, the user's e-mail address will be stored as long as subscription to the newsletter is active.

Users may cancel their newsletter subscription at any time. Each copy of the newsletter contains a link to unsubscribe.

This also permits users to revoke their consent to the processing of personal data, which was given during the process of registering for subscription.


7. Upon using our website, a cookie will be placed on your computer. What does this mean?

We use cookies on our website. Cookies are small data files with text information that the web server sends to your web browser. They are saved to your computer's hard drive. Cookies can only be read by the server that has installed them. They gather information on the pages you have visited, and the time you visited them. Cookies can only identify the IP address of your computer; they do not store any personal information such as your name. Data stored in the cookies are not associated with any of your personal data (name, address, etc.).

We use cookies to make our website more user-friendly. Some components of our website require identification of the requesting web browser once the user has moved on to a different page.

The data listed below will be stored in, and transmitted with, the cookies:

1.    language settings
2.    items selected for the shopping basket
3.    log-in information
4.    IP address
5.    date and time
6.    web browser used

Technical measures are in place to pseudonymise the user data thus collected, rendering it impossible to associate the data with the original user. These data are stored separately from any other personal user data.

You can decide whether to accept cookies. You may customise the settings for your web browser (usually by selecting the "Tools" -> "Options" or "Settings" menu item of your browser) so as to accept all cookies, to alert you each time a cookie is presented to your computer, or disable all cookies.

We use technically necessary cookies for the purpose of facilitating the use of our web pages for users. Some features of our website cannot be offered without the use of cookies. These require identification of the web browser once the user has moved on to a different page

Data collected by technically necessary cookies are not used to generate user profiles.

These purposes also constitute our legitimate interests in data processing according to art. 6 para. 1 lit. f of the GDPR.

Cookies are stored on the user's computer and transmitted to our website. This means that users have full control of the use of cookies. By customising your web browser settings, you may disable, or restrict, the use of cookies. Cookies already in place can be deleted at any time, a process that may also be automated. If you decide to disable cookies on our website, you may not be able to take full advantage of all its features.


8. Use of services for marketing and analysis purposes

a) We use Google Analytics, Webalizer and AWstats. What does this mean for your data?

Google Analytics

Our website uses Google Analytics, a web analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). Google Analytics employs so-called "cookies", text files that are stored to your computer in order to facilitate an analysis of your use of the site (cf. section 10). The information generated by these cookies, such as time, place and frequency of your visits to our site, including your IP address, is transmitted to Google's location in the United States and stored there. If the IP anonymisation feature is activated, Google abbreviates and thus anonymises your IP address before transferring it from Member States of the European Union or signatory states to the Agreement on the European Economic Area. Only rarely will a complete IP address be transmitted to a Google server located in the United States and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your usage of our site, to compile reports on website activity for us, and to provide other services related to website and internet usage. Google states that it will never associate your IP address with other data held by Google. You can prevent cookies from being installed by adjusting the settings on your browser software accordingly. You should be aware, however, that this may prevent you from taking full advantage of the features of our website. Google also offers a disabling option in a plug-in available for the most common browser types, thus providing you with greater control over the data collected and processed by Google (including your IP address). If you enable this option, no information regarding your website visit is transmitted to Google. For download visit https://tools.google.com/dlpage/gaoptout?hl=en.

Alternatively, you may disable the future analysis of your website visit by Google Analytics, especially for web browsers for use on mobile devices, by clicking the link below.

Click here to opt-out of Google Analytics

By clicking the link, a so-called "opt-out cookie" is configured, which means that the analysis of your visit to our site will be prevented in the future.

Please note that, should you disable cookies in your web browser settings, Google Analytics will also delete the opt-out cookie, which means that you may be required to activate it again.

For more information regarding the operating mode and the pertinent Terms of Service and Privacy Policy of Google Analytics, please access http://www.google.com/analytics/terms/gb.html or http://www.google.com/analytics/terms/us.html and http://www.google.de/intl/en/policies/privacy/.

We should like to point out that we use Google Analytics with an IP anonymisation feature (anonymizeIP) on our website, which means that Google abbreviates and thus anonymises your IP address before processing it so as to prevent tracking of personal data.


Webalizer

Webalizer is a web log analysis software that generates web pages of analysis, based on server log file data. To this end, Webalizer stores details on the browser version and domain, file name, date and time of the request, the amount of data downloaded, and stores and analyses the data anonymously solely for statistic and in-house purposes.

Statistics commonly reported by Webalizer include hits, visits, referrers, the visitors' countries, and the amount of data downloaded.

You may prevent Webalizer from analysing user behaviour by disabling cookies from this website being stored, e.g. by adding an exception in your web browser settings.


AWstats

AWstats is another web analysis tool. The tool is used for analysing log files generated by web servers based on visitor requests. Statistical analysis is performed using log files which also include IP addresses. These data are anonymised and cannot be attributed to specific persons. They are not associated with other data from other sources; after statistical analysis the data are deleted. The server statistics automatically stores the following data that the user's web browser transmits to us: type and version of web browser, operating system used, referrer URL (i.e. the last web page the user visited), host name of requesting computer (IP address), time of server request, the keywords the user used, e.g. in Google, to find the page. No data will be transmitted to external servers.


b) We use Google Maps plug-ins. What does this mean for you?

Our website uses plug-ins from the internet service provider Google Maps. Google Maps is operated by Google Inc., resident in the United States, at CA 94043, 1600 Amphitheatre Parkway, Mountain View. When using Google Maps on our website, user information and a user's IP address will be transferred to and stored on Google’s servers in the United States. We have no knowledge of the full scope or content of the data transmitted to Google, nor how they will be used by Google. Google states that it will never associate your IP address with other data held by Google, nor store any personal data. However, Google may share the data with third parties. You can prevent the use of Google Maps by disabling Javascript in your web browser. You should be aware, however, that this will prevent you from using the map feature on our website. By using our website, you declare your consent with the collection and use of data by Google Inc. as described in this section. For more information regarding the Privacy Policy and Terms of Service of Google Maps, please access:
https://www.google.com/intl/en-GB_GB/help/terms_maps.html
or
https://www.google.com/intl/en-US_US/help/terms_maps.html.


We use all the services herein mentioned for advertising and marketing purposes, to render our offer more attractive and to help us improve your shopping experience as well as for troubleshooting. As set out in each section referring to the different services, we are committed to protecting your personal data by advising you of our Privacy Policy in advance, and granting you the right to object to any of the services offered. Art. 6 para. 1 lit. f of the GDPR forms the legal basis for data collection and storage herein mentioned.


9. Rights of the data subject

As soon as your personal data are collected and/or processed, you are the data subject as defined by the GDPR and shall be entitled to assert your legal rights concerning:

Information, rectification, blocking and erasure of data

You shall have the unreserved right to, at any time, obtain information – free of charge – on the personal data we have stored about you, where we have collected these data and with whom we have shared them as well as on the purpose for which we have processed your data on our website. Moreover, you shall have the right to effect the rectification, erasure, or blocking of such data provided that the legal requirements for such action are met.


Right to data portability

You shall have the right to have your personal data, which you have provided to us as the party responsible (controller), made available in a structured, commonly used and machine-readable format. We will be able to meet such request by providing a csv export of your customer data we have processed.


Right to information

Once you have asserted your right to have your personal data rectified, erased or their processing restricted by notifying the controller, the controller shall be obligated to communicate any rectification or erasure of personal data, or restriction of processing regarding these data, to each recipient with whom these personal data held about you have been shared, unless this proves impossible or involves disproportionate effort.

The controller shall inform the data subject about those recipients if the data subject requests it.


Right to object

On grounds relating to your particular situation, you shall have the right, at any time, to object to the processing of the personal data held about you, where such processing is based on art. 6 para. 1 lit. e or lit. f of the GDPR.

The controller shall no longer process the personal data held about you unless the controller demonstrates compelling legitimate grounds for such processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

Where the personal data held about you are used for direct marketing purposes, you shall have the right to object to such use at any time.

Once you have objected to the processing of your personal data for direct marketing purposes, the personal data held about you shall no longer be processed for such purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.


Revocability of declarations of consent based on data protection regulations

Furthermore, you shall be entitled to revoke any declarations of consent that you may have given us, by contacting us at the address provided below. Your revocation shall be permissible at any time, but not retroactively.


Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider the processing of the personal data held about you to infringe upon the General Data Protection Regulation (GDPR).

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to art. 78 of the GDPR.


10. Amendments to this Privacy Policy

We reserve the right to amend, alter, or add to this Privacy Policy as the need may arise and without prior notice. We suggest that you visit our website from time to time to check for any amendments or additions to this Privacy Policy.