Privacy Policy

As of August 2025

We are delighted that you are interested in SAUERESSIG. In accordance with the applicable data protection regulations, we would like to inform you below about what personal data we or service providers commissioned by us collect during

  • your visit to our website,
  • your use of the contact form,
  • job advertisements,
  • the newsletter

(hereinafter collectively referred to as “website”), for what purposes we use this data and how we use it to optimize our services for you, as well as your rights as a data subject.

  1. General
  1. Controller, data protection officer
  2. a) The controller pursuant to Art. 4 No. 7 of the EU General Data Protection Regulation (GDPR) is

Saueressig Vreden GmbH & Co. KG

Gutenbergstraße 1-3, 48691 Vreden, Germany

T: +49 203 87842510

E-mail: datenschutz@saueressig.com

hereinafter referred to as “Saueressig,” “we,” or “us.” Further information about the provider can be found in our legal notice.

  1. b) You can contact the data protection officer by post at the above address with the addition “z.Hd. Datenschutzbeauftragter” (for the attention of the data protection officer), tel. +49 (0)7621 5705398 and by email at s.baum@bhk-datenschutz.de.
  1. Types of data processed, categories of data subjects

2.1 Type of data processed

  • Contact details (e.g., email, telephone numbers)
  • Content data (e.g., text entries, photographs, videos)
  • Usage data (e.g., websites visited, interest in content, access times)
  • Communication data and history
  • Consent management
  • Meta/communication data (e.g., device information, IP addresses)
  • Tracking data
  • Reach measurement
  • Data according to Sections B. and C.

2.2 Categories of data subjects

  • Visitors and users of the website and online offerings
  • Customers, interested parties, and business partners
  • Applicants
  • Other communication partners

(Hereinafter, we refer to the data subjects collectively as “users.”)

  1. Purpose of processing

We use your personal data

  • to provide the website and online offerings, its functions, and content,
  • to manage users’ consent to the processing of their data,
  • to respond to contact requests and communicate with users,
  • to assert, enforce, exercise or defend legal claims and legal disputes, and to detect, investigate and prevent criminal offences;
  • for security measures,
  • for measuring reach
  • for the purpose of direct marketing, e.g. in the form of personalized advertisements, an e-mail newsletter or postal advertising, surveys, invitations to events
  • for the purpose of surveys on product and service satisfaction and analysis thereof
  1. Provision of the website and log files

(1) When you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser automatically transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 lit. f) GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred
  • Website from which the request originates
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

(2) The IP addresses of users are deleted or anonymized after the end of use.

  1. Cookies

(1) In addition to the aforementioned log files, cookies are stored on your computer when you use our website. Cookies are small text files that are assigned to the browser you are using and stored on your hard drive, enabling the entity that sets the cookie (in this case, us) to receive certain information. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the Internet offering more user-friendly and effective overall.

(2) Use of cookies:

  1. a) This website uses the following types of cookies, the scope and functionality of which are explained below:
  • Session cookies (see b)
  • Persistent cookies (see c).
  1. b) Session cookies store a so-called session ID, which allows various requests from your browser to be assigned to the same session. Session cookies are deleted when you log out or close your browser. If you restart your browser and return to the website, the website will not recognize you. You will need to log in again (if login is required) or reset your templates and preferences if the website offers these functions. A new session cookie will then be generated, which stores your information and remains active until you leave the site and close your browser.
  2. c) Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.

(3) For what purposes do we use cookies?

We use cookies to personalize content and ads, to provide social media features, and to analyze traffic to our website. We also share information about your use of our website with our social media, advertising, and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected from your use of their services. You consent to our cookies when you continue to use our website.

Basic information

Purpose Description Storage period

Technically necessary cookies Technically necessary cookies enable the use of our website by enabling basic functions such as page navigation and access to secure areas of the website. Our website may not function properly without these cookies. Session cookies – are deleted when you close your browser.

Analytics cookies (statistics) We use third-party analytics cookies to understand how visitors use our site. This helps us improve the quality and content of our site. The aggregated statistical information includes data such as the total number of visitors. For example, we learn how often and in what order individual pages are accessed and how much time visitors spend on average on our pages. We also learn whether users have visited our website at an earlier point in time. The legal basis for this is the consent you have given us (Art. 6 para. 1 lit. a) GDPR), § 25 TTDSG. For further information, see point 12 (Web analytics services). Persistent cookies – remain on your device but are automatically deleted after 26 months if you do not visit the website again, unless shorter periods apply in individual cases.

Advertising cookies (marketing) We use advertising cookies to evaluate the effectiveness of our advertising measures and to derive optimizations from them. The legal basis for this is the consent you have given us (Art. 6 para. 1 lit. a) GDPR), § 25 TTDSG. § 25 TTDSG. Persistent cookies – remain, but are automatically deleted after 26 months if the website has not been visited, unless shorter periods apply in individual cases.

(4) Control over cookies

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

(5) Cookie consent with Borlabs Cookie

This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consent.

When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data is not passed on to the provider of Borlabs Cookie. You can change the settings of Borlabs Cookie here: Borlabs Cookie Settings

The provider is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany.

The borlabs-cookie stores the consent you gave when you entered the website. If you wish to revoke this consent, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.

The data collected will be stored until you request us to delete it, delete the Borlabs cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

The Borlabs cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. a) , 5 para. 2 GDPR.

  1. Contact

(1) Our website features a contact form that allows you to contact us electronically in a simple and straightforward manner. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. The relevant data, in particular personal data, address data, contact details, and messages (free text field), are immediately visible on the respective input mask. At the time of sending, the following data is also stored:

The IP address of the user

Date and time of sending the form

(2) For the processing of the data, reference is made to this privacy policy during the sending process. Alternatively, you can contact us using the email addresses provided. In this case, the personal data of the user transmitted with the email will be stored. The data will be used exclusively for processing the request.

(3) The legal basis for the processing of data transmitted when using the contact form or when sending an email is Art. 6 para. 1 lit. f) GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR.

(4) The processing of personal data from the input mask is used solely for the purpose of processing the contact request. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

(5) You can contact us using the email addresses provided on the website. In this case, the personal data transmitted with the email will be stored. The data will be used exclusively for processing the request. The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f) GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b) GDPR.

(6) The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user is ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified. The personal data collected additionally during the sending process will be deleted after a period of seven days at the latest.

(7) Notwithstanding paragraph 3, contact requests from customers relating to a specific business transaction will be stored for as long as this is necessary for the execution and processing of the contract (Art. 6 para. 1 lit. b) GDPR) or due to statutory retention obligations (Art. 6 para. 1 lit. c) GDPR). Contact requests from customers that do not relate to a specific business transaction will be stored for as long as the business relationship exists. The legal basis is Art. 6 para. 1 lit. f) GDPR to protect our legitimate interests and those of the customer, in particular support and quality assurance. Customers can object to the processing at any time in individual cases.

  1. Newsletter dispatch after product purchase

(1) If you have purchased products or services from us, we may send you our newsletter even without prior registration for the newsletter subscription, to the email address you provided when making your purchase. This applies to newsletters advertising products similar to those you have purchased.

(2) The legal basis for the above processing operations in connection with the sending of newsletters after a purchase is Article 6 (1) lit. f) GDPR in conjunction with Section 7 (3) UWG. Our legitimate interest in data processing is the direct promotion of our products to our customers and their interest in offers and promotions.

(3) You can object to the sending of the newsletter at any time. You can declare your objection by clicking on the link provided in every newsletter email or by sending a message to the contact details specified in section 1 of this privacy policy.

  1. Job vacancies (online portal)

(1) We advertise job vacancies on our website. We collect, process, and use your personal data to process your online application. The legal basis for this is Art. 6 (1) (b) GDPR. Your online application data will be sent directly to the management by email. Appropriate technical and organizational measures are in place to ensure that your personal data is treated confidentially in accordance with the legal provisions.

(2) Please note that data transmitted by email is unencrypted and may be accessed or falsified by unauthorized persons. You are welcome to send us your documents by post. If you have applied for a specific position and this position has already been filled, or if we consider you to be equally or even better suited for another position, we would be happy to forward your application within our company. The legal basis for this is Art. 6 (1) lit. f) GDPR to protect your and our legitimate interests. Please let us know if you do not agree with this procedure. After completion of the application process, but no later than after 6 months, your personal data will be automatically deleted unless you expressly consent to storage for a longer period.

(3) In addition, the General Data Protection Notice for Employees and Applicants (mandatory information pursuant to Art. 13 GDPR) applies.

  1. Transfer to third parties

(1) Within the scope of hosting our website, your data processed by us is processed on the basis of a data processing agreement.

(2) In the event of the use of web analysis services and third-party providers, the data will be transferred to the extent described herein.

  1. Storage

We process and store your personal data for as long as it is necessary to fulfill our contractual and legal obligations. We delete your personal data as soon as it is no longer required for the above-mentioned purposes. In doing so, personal data may be retained for the period during which claims can be asserted against our companies

(statutory limitation periods of three or up to thirty years). In addition, we store your personal data to the extent that we are legally obliged to do so. Corresponding documentation and retention obligations arise from commercial, tax, and social security regulations, generally 6 or 10 years.

  1. Automated decision-making, profiling

(1) We do not use fully automated decision-making in accordance with Article 22 GDPR to establish and implement the business relationship.

(2) In order to provide you with targeted information and advice about our products, we or service providers acting on our behalf may use web analysis tools, in particular tracking technology. These enable us to tailor our communication and advertising to your needs. In this regard, we refer to Section 12 Web Analysis Services and Advertising.

  1. Data processing by third-party providers

12.1 Google reCAPTCHA

(1) We use “Google reCAPTCHA” (hereinafter ‘reCAPTCHA’) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

(2) reCAPTCHA is used to check whether the data entered on this website (e.g., in a contact form or when requesting links for delivery tracking) is entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website or the query page. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, length of time the website visitor stays on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not notified by Google that an analysis is taking place.

(3) Processing is carried out on the basis of Art. 6 para. 1 lit. a) GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent is voluntary and can be revoked at any time. If you do not give your consent, you may not be able to use certain features.

(4) For more information about Google reCAPTCHA, please refer to Google’s privacy policy and Google’s terms of use at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

12.2 Google Analytics

(1) This website has integrated Google Analytics. Google Analytics is a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).

(2) Google Analytics uses “cookies,” which are text files placed on the user’s computer to help the website analyze how users use the site. The information generated by the cookie about the user’s use of this website is usually transferred to a Google server in the US and stored there.

(3) IP anonymization is activated on this website, so that the IP address of users within member states of the European Union or in other states party to the Agreement on the European Economic Area is truncated beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there, so that data processing outside the European Union can take place. In this case, the personal data collected by Google Analytics will be transferred to the USA.

(4) We would like to point out that the use of cookies for the purpose of data processing within the framework of Google Analytics is only legally permissible in accordance with Art. 44 and 49 (1) lit. a) GDPR with the prior consent of the user. You will therefore be asked to give your consent within the framework of the consent management system used.

(5) The user can generally prevent the storage of cookies by selecting the appropriate settings in their Internet browser. The user can also prevent the collection and transmission of data generated by the cookie and related to their use of the website (including their IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on available at the following link to disable Google Analytics JavaScript (ga.js, analytics.js, dc.js) available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

(6) We would like to point out that SAUERESSIG has no influence on or control over the nature and scope of Google’s use of your personal data. We therefore recommend that you restrict this processing by adjusting your privacy settings in your browser configuration if you wish to do so.

(7) Further information and Google’s applicable data protection provisions can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html.

(8) SAUERESSIG also uses Google Analytics in conjunction with AdWords advertisements (see section 12.4) for statistical purposes. The legal basis for this processing is the user’s consent. If, even with your consent to processing by SAUERESSIG, you do not wish Google to process your data, you can disable this via the Ads Settings Manager (https://adssettings.google.com/) on the Google website.

(9) Processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. a) GDPR insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting). Consent is voluntary and can be revoked at any time. If you do not give your consent, you may not be able to use certain features.

12.3 Google Tag Manager

(1) This website uses Google Tag Manager as part of Google Analytics. Tags are small pieces of code on our website that are used, among other things, to measure traffic and visitor behavior, to measure the impact of online advertising and social media, to use remarketing and targeting, and to test and optimize the website. Google Tag Manager is a solution that allows Saueressig to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

(2) Further information about Google Tag Manager can be found on the Internet at: https://www.google.com/analytics/tag-manager/use-policy/

12.4 Google Ads

(1) We use Google’s online advertising program Google Ads. We use conversion tracking as part of Google Ads. Google places a cookie on your device if you have reached our website via a Google ad on an external website.

(2) Google provides us with statistical evaluations using the information collected by the cookies. We learn the total number of users who clicked on our advertisement(s) and were redirected to our website. These evaluations enable us to identify which of the advertising measures used are particularly effective. We do not receive any further data; in particular, we cannot identify users based on this information.

(3) We do not collect or process any personal data ourselves. By using Google Ads and conversion tracking, we pursue our interest in displaying advertisements that may be of interest to you, making our website more interesting for you, and calculating advertising costs accordingly.

(3) Due to the use of conversion tracking, your browser automatically establishes a direct connection to Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of conversion tracking. We inform you according to our state of knowledge: Through the integration, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement of ours. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, Google will receive your IP address and statistical information (browser type and version number, address of the website you visited previously (referrer), date and time of the request) and the address of the pages you visit on our website.

(4) Google may transfer your personal data to Google group companies, such as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

(5) Processing is based on your voluntary consent. The legal basis for this is Art. 6 para. 1 sentence 1 lit. a) GDPR, Art. 49 para. 1 sentence 1 lit. a) GDPR and § 25 TDDSG (Telecommunications Digital Services Data Protection Act).. You can revoke your consent at any time with future effect by changing the cookie settings in the Borlab Cookie Consent Manager.

(6) You can also prevent cookies from being set at any time in various ways: a) by adjusting your browser settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party ads; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”; https://www.google.de/settings/ads; c) by deactivating interest-based advertising from providers who are part of the “About Ads” self-regulation campaign via the link https://www.aboutads.info/choices; d) by permanently deactivating them in your browsers at the link https://www.google.com/settings/ads/plugin. We would like to point out that in this case, you may not be able to use all the functions of our website.

(7) For more information about the purpose and scope of data collection and processing by Google in connection with Google Ads, please refer to Google’s privacy policy at https://www.google.de/intl/de/policies/privacy/ and at https://policies.google.com/technologies/ads?hl=de. There you will also find further information on your rights in this regard and settings options for protecting your privacy.

12.5 My Fonts

(1) This website uses web fonts, https://www.myfonts.com/. When you visit a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly and calls up a CSS file on the server of MyFonts Inc. to comply with the terms of the font license. According to MyFonts Inc., no cookies are placed or used and no personal data is collected.

(2) The third-party provider is: Monotype Imaging Holdings Inc., a Delaware company based at 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA.

(3) Monotype’s privacy policy can be found here: https://www.monotype.com/legal/privacy-policy/. Monotype tracks, among other things, the number of times the embedded fonts are accessed. The Web Fonts Tracking Policy can be found here: https://www.monotype.com/legal/privacy-policy/web-font-tracking-privacy-policy/

  1. Social

13.1

Saueressig is interested in presenting itself on as many channels as possible, in being accessible to customers, service providers, other business partners, applicants, and interested parties, and in promoting topics and products via social networks.

We process personal data when you visit the Saueressig Group on social media channels. We use our various social media channels to offer you a wide range of multimedia services and to exchange ideas with you on topics that are important to you. In addition to the respective social network provider, we also collect and process personal user data on our social media channels. For the respective data processing purposes and data categories, we refer to the individual social media channels, which are explained in more detail below.

Data processing is generally used for the following purposes:

  • Communication with visitors to the Saueressig social media channel;
  • Handling inquiries from visitors to our Saueressig social media channels; Collecting statistical information about the reach of Saueressig social media channels;
  • Conducting customer surveys, marketing campaigns, market analyses, prize draws, competitions, or similar promotions or events;
  • Resolving disputes and legal disputes, establishing, exercising, or defending legal claims or legal disputes, enforcing existing contracts.

The processing of your personal data is necessary to achieve these purposes.

13.2 Information about social media channels

(1) We integrate posts and recommendation functions from platforms such as Facebook, YouTube, and Instagram on our website. These services are inactive by default, but can be activated by the user. The services are mainly based in the USA, but are subject to the usual data protection rules in EU and EEA countries. For example, if you actively use a recommendation button on our site or read an article with an embedded post, YouTube video, or Spotify playlist, general framework data such as your IP address may be transferred back to the social networks and platforms through the embedding technology. We have no influence on how the platforms use the data, including for the creation of user profiles. Please check with Facebook, YouTube, etc. directly for more information and adjust your privacy settings there.

(2) Social networks and other external platforms are subject to their own privacy policies, even if we distribute information and maintain a presence there under our brands. The US company provides us with its editorial system and general usage data, such as the number of views, the duration of use, the demographics of readers, and the user names of all contacts—you can read the network’s privacy policy here.

(3) You can also create a user account with us by connecting to your Facebook account (using the “Sign in with Facebook” function). In this case, we will not receive your Facebook login details – the social network’s privacy policy applies – but we will need to request your public data and email address in order to register you with us. This will give you a user account with us, and you can later disconnect from Facebook at any time in our login area to log in independently of Facebook.

(4) You can find information about the privacy policies of the individual third-party providers at the following links:

13.3 LinkedIn

The Saueressig LinkedIn pages are operated on LinkedIn, a social network owned by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). When you visit the Saueressig LinkedIn pages, LinkedIn processes your personal data in accordance with its privacy policy, which you can find here.

We process the following personal data:

  • Your LinkedIn username and comments on our Saueressig LinkedIn pages and messages you send to us via our Saueressig LinkedIn pages.
  • Other information necessary to respond to inquiries from our visitors or to uniquely identify our visitors in our systems.

13.4 LinkedIn Campaign Manager

We use LinkedIn Campaign Manager to draw attention to our products. By using LinkedIn Campaign Manager, we define target groups based on the following criteria:

  • Location (e.g., country, region, city)
  • Company (e.g., industry, name, size)
  • Interests (e.g., member groups, interests)
  • Professional experience (e.g., job titles, roles, seniority, skills)
  • Education (e.g., degrees, schools, fields of study)
  • Demographic data (e.g., gender, age)

Based on its algorithm, LinkedIn displays our content on its platform to users who match the defined target group. The legal basis for this type of processing is Art. 6 para. 1 lit. f) GDPR.

13.4 Saueressig on XING

(1) The Saueressig XING pages are operated on XING, a social network operated by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany (“XING”). When you visit the Saueressig XING pages, XING processes your personal data in accordance with its privacy policy, which you can view here.

(2) We use the statistical information (the extent of interactions, statistics on age composition and the working relationships of our visitors) about the use of the Saueressig XING pages, which XING provides in anonymized form via its statistical service. It is not possible for the Saueressig Group to draw conclusions about individual users or access individual user profiles.

(3) We process the following personal data:

  • Your XING user name and comments on our Saueressig XING pages and messages you send us via our Saueressig XING pages.
  • Your activity on our Saueressig XING pages via the XING statistics service, e.g., the extent of interactions, statistics on age composition, and the working relationships of our visitors.
  • Other information necessary to respond to inquiries from our visitors or to uniquely identify our visitors in our systems.
  1. Links to other websites

(1) Our website may contain links to websites operated by third parties that are not covered by this privacy policy. These third-party websites have their own privacy policies and may also use cookies or other tracking technologies. The respective operator or the person named as responsible on the corresponding website is responsible for this.

(2) We check links to external websites before linking to them. However, we have no influence on whether their operators comply with data protection regulations. If we become aware of any violations or infringements, we will remove the corresponding links.

  1. Rights of data subjects
  1. Your rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller.

  1. a) Rights under Art. 15 ff. GDPR

(1) The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed; if so, he or she has the right to access those personal data and the information specified in Art. 15 GDPR. Under certain legal conditions, you have the right to rectification under Article 16 GDPR, the right to restriction of processing under Article 18 GDPR, and the right to erasure (“right to be forgotten”) under Article 17 GDPR. You also have the right to receive the data you have provided in a structured, commonly used, and machine-readable format (right to data portability) in accordance with Article 20 GDPR, provided that the processing is carried out using automated procedures and is based on consent in accordance with Article 6(1)(a) GDPR or on a contract in accordance with Article 6(1)(b) GDPR.

  1. b) Revocation of consent pursuant to Article 7(3) GDPR

If the processing is based on consent, you may revoke your consent to the processing of personal data at any time. Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected.

  1. c) Right to lodge a complaint

You have the option of lodging a complaint with us or with a data protection supervisory authority (Article 77 GDPR).

  1. d) Right to object pursuant to Article 21 GDPR

In addition to the aforementioned rights, you have the following right to object:

  • Right to object on individual grounds

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing based on a balancing of interests); This also applies to profiling based on this provision within the meaning of Article 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

  • Right to object to the processing of data for advertising purposes

In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

  1. Final provisions
  1. Security

(1) We have taken technical and organizational security measures in accordance with Art. 24, 32 GDPR to protect your personal data from loss, destruction, manipulation, and unauthorized access. All our employees and all third parties involved in data processing are obliged to comply with the requirements of the GDPR and to treat personal data confidentially.

(2) SSL or TLS encryption: For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

  1. Changes to our privacy policy

We reserve the right to change our security and privacy measures if this becomes necessary due to technical developments, the expansion of our services, or legal changes. In such cases, we will also adapt our privacy policy accordingly. Therefore, please note the current version of our privacy policy.