Data protection

The operator of this website takes the protection of your personal data seriously. We treat your personal data confidentially and in accordance with applicable data protection legislation as well as this privacy policy. When you use this website, various items of personal data are collected. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this occurs. Please note that data transmission over the internet (for example, communication by email) may involve security vulnerabilities. Complete protection of data against access by third parties is not possible.

Storage period

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing ceases to apply. If you submit a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (such as retention periods required by tax or commercial law); in the latter case, deletion will take place once those grounds no longer apply.

Legal basis for data processing on this website

Where you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR, or Article 9(2)(a) GDPR where special categories of data within the meaning of Article 9(1) GDPR are processed. Where you have consented to the storage of cookies or access to information on your device (for example, via device fingerprinting), data processing is additionally carried out on the basis of § 25(1) TDDDG. Consent may be revoked at any time. Where your data is required for the performance of a contract or for pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. We also process your data where this is necessary to fulfil a legal obligation, on the basis of Article 6(1)(c) GDPR. Data processing may furthermore be carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. The specific legal basis applicable in each individual case is set out in the following sections of this privacy policy.

Transfer of data to the United States and other third countries

We use, among other things, tools provided by companies based in the United States or other third countries that may not offer an adequate level of data protection. When these tools are active, your personal data may be transferred to and processed in such third countries. Please note that a level of data protection comparable to that of the EU cannot be guaranteed in these countries. For example, US companies are obligated to release personal data to security authorities without the data subject being able to take legal action against this. It cannot therefore be ruled out that US authorities (such as intelligence services) may process, evaluate, and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You may revoke consent that has already been given at any time. The lawfulness of any data processing carried out prior to the revocation remains unaffected by the revocation.

Right to object to data collection in specific cases and to direct marketing (Article 21 GDPR)

Where data processing is based on Article 6(1)(e) or (f) GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on those provisions. The respective legal basis on which processing is based is set out in this privacy policy. If you lodge an objection, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims (objection pursuant to Article 21(1) GDPR).

Where your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Article 21(2) GDPR).

Right to lodge a complaint with a supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work, or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedy.

The supervisory authority responsible for the operator is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit Ludwig-Erhard-Str. 22, 7th floor 20459 Hamburg Germany Email: mailbox@datenschutz.hamburg.de

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will only take place insofar as it is technically feasible.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content — such as enquiries you send to us as the website operator — this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from "http://" to "https://" and by the lock symbol in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Right of access, deletion, and rectification

Within the framework of the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, the purpose of data processing, and — where applicable — the right to rectification or deletion of such data. You may contact us at any time regarding these or any other questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time to exercise this right. The right to restriction of processing applies in the following cases: (i) if you contest the accuracy of your personal data stored by us, we generally need time to verify this, and you have the right to request the restriction of processing during the verification period; (ii) if the processing of your personal data was or is unlawful, you may request the restriction of data processing instead of deletion; (iii) if we no longer need your personal data but you require it for the establishment, exercise, or defence of legal claims, you have the right to request restriction of processing instead of deletion; (iv) if you have lodged an objection pursuant to Article 21(1) GDPR, a balancing exercise between your interests and ours must be carried out, and you have the right to request restriction of processing until the outcome of that balancing exercise is determined.

Where you have restricted the processing of your personal data, such data may — apart from being stored — only be processed with your consent or for the establishment, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a member state.

Objection to unsolicited emails

The use of contact data published under the obligation to provide a legal notice for the purpose of sending unsolicited advertising and information materials is hereby expressly prohibited. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam emails.