Privacy Policy

Introduction

Magh und Boppert GmbH, Paderborn (hereinafter: “We”), as the operator of the website, is the data controller for processing website users’ personal data. Our contact details can be found under the legal notice on the website; the contact persons for questions regarding the processing of personal data are named directly in this Privacy Policy.

We take the protection of your privacy and your private data very seriously. We collect, store and use your personal data only in accordance with the content of our Privacy Policy and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and the national data protection regulations.

With this Privacy Policy, we inform you about the extent and for what purposes that personal data is processed in connection with the use of the website.

Personal data

Personal data is information about an identified or identifiable natural person. This includes any information about your identity, such as your name, email address or postal address. Information that cannot be linked to your identity (such as statistical data on the number of website users) is not considered personal data.

As a matter of principle, you can use our website without disclosing your identity and without providing personal data. We will then only record general information about visits to our website. However, personal data is collected from you for some of the services offered. This data will then only be processed by us for the purpose of using this website, in particular for providing the requested information. When collecting personal data, it is only mandatory to provide data that is absolutely necessary. It may also be possible to provide further information, in which case this is voluntary. We indicate in each case whether the information is mandatory or voluntary. We will then provide information on the specific details in the relevant section of this Privacy Policy.

No automated decision-making based on your personal data takes place in connection with the use of our online services.

Processing of personal information

Your messages will be stored by us on particularly secure servers within the European Union. These are protected by technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. Only a few authorised persons have access to your data. They are responsible for providing technical, commercial or editorial support for the servers. However, despite regular checks, complete protection against all risks is not possible.

Your personal data is transmitted over the internet in an encrypted form. We use TLS/SSL encryption (Transport Layer Security/Secure Socket Layer) for data transmission.

Disclosure of personal data to third parties

We will only use your personal information to provide the services you have requested. Insofar as external service providers are used by us within the scope of provision of services, their access to data also takes place exclusively for the purpose of providing services. By adopting technical and organisational measures, we ensure compliance with the data protection requirements and also oblige our external service providers to do so.

Furthermore, we do not pass on data to third parties without your express consent, in particular not for advertising purposes. Your personal data will only be passed on if you yourself have consented to data being passed on or if we are entitled or obliged to do so on the basis of statutory provisions and/or official directives or court orders. In particular, this may involve providing information for the purposes of criminal prosecution, the prevention of danger or the enforcement of intellectual property rights.

Insofar as we transfer your personal data ourselves or through service providers to countries outside the European Union, we comply with the special provisions of Art. 44 et seq. GDPR and also oblige our service providers to comply with these regulations. We will therefore only transfer your data to countries outside the European Union subject to the level of protection guaranteed by the GDPR. This level of protection is ensured in particular by an adequacy decision of the EU Commission or by appropriate safeguards pursuant to Art. 46 GDPR.

Legal basis for data processing

Insofar as we obtain consent for processing your personal data, Art. 6(1)(a) GDPR is the legal basis for data processing.

Insofar as we process your personal data because it is necessary for the fulfilment of a contract or in the context of a relationship with you similar to a contract, Art. 6(1)(b) GDPR constitutes the legal basis for data processing.

Insofar as we process your personal data for the fulfilment of a legal obligation, Art. 6(1)(c) GDPR is the legal basis for data processing.

Furthermore, Art. 6(1)(f) GDPR can be considered as the legal basis for data processing if the processing of your personal data is necessary to protect a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not require the protection of personal data.

Within the framework of this Privacy Policy, we always indicate the legal basis on which we base the processing of your personal data.

Data deletion and storage period

We always delete or block your personal data when the purpose for storing it no longer applies. However, storage may take place beyond this if this is stipulated by legal requirements to which we are subject, for example with regard to statutory storage and documentation obligations. In such a case, we will delete or block your personal data after the relevant requirements come to an end.

Use of our online services

Information about your computer

Each time you access our website, we collect the following information about your computer, regardless of your registration: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred are recorded as part of this request. We also collect product and version information about the browser used as well as the computer’s operating system. Furthermore, we record the website from which our online services were accessed. The IP address of your computer is only stored for the time of use of the website and then deleted or anonymised by shortening. The remaining data is stored for a limited period of time.

We use this data to operate our online services, in particular to detect and remove errors, to determine how the website is used and to make adjustments or improvements. These purposes are also our legitimate interest for data processing according to Art. 6(1)(f) GDPR.

Use of cookies

Cookies are used for our online services, as is the case on many websites. Cookies are small text files that are stored on your computer and save certain settings as well as data for exchange with our online services via your browser. A cookie usually contains the name of the domain from which the cookie file was sent, information about the age of the cookie and an alphanumeric identifier.

Cookies allow us to recognise your computer and make any preferences and settings immediately available. As far as possible, the cookies we use are so-called ‘session cookies’, which are automatically deleted after the end of the browsing session. Occasionally, cookies with a longer storage period can also be used, so that your settings and preferences can also be taken into account the next time you visit our website.

Most browsers are configured to accept cookies automatically. However, you can deactivate the storage of cookies or configure your browser to notify you as soon as cookies are sent. It is also possible to delete cookies that have already been stored manually via the browser settings. Please note that you may only be able to use our online services to a limited extent or not at all if you reject the storage of cookies or delete necessary cookies.

If cookies are not required for our online services, we will ask for your consent to the use of cookies when you access our website for the first time. With regard to non-essential cookies from third-party providers, you will find a more detailed description of the services from these third-party providers used by us below. The legal basis for the associated data processing, including any data transfer, is in each case your consent within the meaning of Art 6(1)(a) GDPR. Once given, consent can be revoked at any time with effect for the future, in particular by changing the selected settings.

The legal basis for the use of necessary cookies is our legitimate interest in the proper provision of our online services within the meaning of Art. 6(1)(F) GDPR and – insofar as contracts are concluded or fulfilled via our online services – the fulfilment of the contract within the meaning of Art. 6(1)(b) GDPR.

Registration

You can register to use our online services. To do this, you must provide the data requested during registration, for example name, address and email address. We also record the date and time of registration and the IP address. You have the advantage that you do not have to re-enter this data every time you use the services or place an order.

The legal basis for processing data for registration is Art. 6(1)(a) GDPR in the case of consent. Additionally, if you register with us for the purpose of fulfilling or initiating a contract, the legal basis for processing the data is Art. 6(1)(b) GDPR.

The information requested as a mandatory field during registration is required for the performance or initiation of a contract with us for certain services. However, you can use the basic functions of our online services (with the exception of the Academy) without registering. When you register, a user account is created for you. The data in the user account is stored by us for as long as there is an active user relationship. If no activity can be detected over a period of three years, the status of the user relationship is set to inactive. You can request the deletion of your user account at any time. When using the Avendoo Academy, your activities are recorded in your user account, in particular the content accessed. If you publish your own content, this will also be added to the user account. The purpose of the user account is to manage the content you access and to display the correct content in each case. The legal basis for processing the data is therefore Art. 6(1)(b) GDPR.

Integration of third-party services

For some functions of our online services, we rely on services from third-party providers. The corresponding services are mainly optional functions that must be explicitly selected or used by you. We have concluded contractual agreements with the respective providers for the provision or integration of their services and are committed, as far as we can, to ensuring that the third-party providers also provide transparent information about the scope of the processing of personal data and comply with the provisions of data protection law.

Google Tag Manager

We use the Google Tag Manager provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter: “Google”) for our online services. Google Tag Manager is a tag management system (TMS) that can be used to manage tags, i.e. tracking codes and associated code fragments, on our website. Google services can be integrated into a website via the Google Tag Manager.

When using the Google Tag Manager, a connection to Google’s servers is established. This means that the IP address of the browser on the terminal device used by the visitor to these web pages is stored by Google. It cannot be ruled out that data will be transmitted to Google in the USA in this context and that US security authorities may be able to access the data under certain circumstances. However, cookies are not set up in connection with the use of the Google Tag Manager.

You can find more information about the Google Tag Manager and data processing by Google here:

https://support.google.com/tagmanager/answer/6102821?hl=de

https://www.google.com/policies/privacy/

https://support.google.com/tagmanager/answer/6102821?hl=de
https://www.google.com/policies/privacy/
Our legal basis for using Google Tag Manager is our legitimate interest according to Art. 6(1)(f) GDPR. Our legitimate interest is to manage the tracking codes in our online services, which enable us to analyse the use of our website and to improve and personalise our services.

Google Analytics

We use Google Analytics for statistical evaluations. Google Analytics is a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, Ireland (hereinafter: “Google”).

Within the framework of Google Analytics, Google uses cookies, among other things, for evaluations. The type and scope of the use and evaluation of cookies are specified by Google. The information generated by the cookies about your use of online services is transmitted to a Google server and stored there. It cannot be ruled out that data will be transmitted to the USA and that government agencies may be able to access this data. However, in the event that IP anonymisation is activated on this website, your IP address will be shortened by Google beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there.

On our behalf, Google uses this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to us as the website operator. In addition, Google may use the data for its own purposes. Within the scope of these purposes, Google may, for example, create a profile of user behaviour or link the data with other data, for example with an existing Google account. We have no influence over these data processing operations. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other data that Google collects or already has. For more information, please refer to Google’s Privacy Policy, a link to which is provided below.

You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout?hl=de. For more information, please visit http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). We would like to point out that on our internet pages Google Analytics has been extended by the “anonymizeIp();” code in order to anonymise IP addresses, whereby the last octet is deleted.

Google reCAPTCHA

To protect our forms, including against misuse for sending spam, we use the reCAPTCHA service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, Ireland (‘Google’) for our online offering. The service analyses the extent to which manual input by a user actually takes place and is designed to filter out automated access, for example by scripts or so-called bots. To use the service, it is necessary to transfer the IP address and other data required by Google for the reCAPTCHA service (device information, user behaviour and cookie content) to Google. The legal basis for the transfer of data is our legitimate interest pursuant to Art. 6 (1) lit. f) GDPR, whereby our legitimate interest relates to the protection of our online offering from misuse and the security of the online offering as a whole.

Further information on data protection at Google, including in relation to the reCAPTCHA service, can be found at https://policies.google.com/privacy?hl=de.

Adobe Typekit

Adobe Typekit fonts are used as external fonts for our online offering. The fonts are provided free of charge by Adobe Systems Software Ireland Ltd., 4-6 Riverwalk, Dublin 24 (‘Adobe’). These fonts are integrated via a server call, usually an Adobe server. This transmits to the server which of our web pages you have visited. Adobe also stores the IP address of the browser on the visitor’s device. It cannot be ruled out that data may be transferred to Adobe servers in the USA in this context and that US security authorities may be able to access the data under certain circumstances. For more information about data processing by Adobe, please refer to Adobe’s privacy policy, which you can access here:

https://www.adobe.com/de/privacy/policies/adobe-fonts.html
https://www.adobe.com/de/privacy/policy.html

The legal basis for the integration of web fonts is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our interest lies in the user-friendly and uniform design of our website.

Use of YouTube

YouTube videos are integrated in our online services; to play these we use a plugin for the YouTube service operated by Google (hereinafter: “YouTube”).
We use the YouTube service in extended data protection mode to protect your privacy as much as possible. If you open a web page in which a YouTube video is embedded through our website, Google initially only receives the information necessary for the integration and no cookies are set up for usage analysis. Google receives further information only once you play the embedded video; in the process, Google may also set up cookies to analyse your user behaviour. When you play the video, Google’s YouTube servers are told, for example, which page of our website you are using to play the video.

We use YouTube in extended data protection mode to protect your privacy as much as possible. When you visit a page on our website that contains a YouTube video, Google initially only receives the information necessary for embedding the video, and no cookies are set for usage analysis. Only when you play the embedded video does Google receive further information; Google may also set cookies to analyse your user behaviour. When you play the video, Google’s YouTube servers are informed, for example, which page of our online offering you are playing the video on.

If you are logged into your Google account, you enable Google or YouTube to assign your surfing behaviour directly to your personal Google profile. We therefore recommend that you only play embedded YouTube videos if you agree to the associated data processing by Google. You can prevent the data allocation to your Google profile by logging out of your YouTube account. Further information on the handling of user data can be found in Google’s Privacy Policy at https://www.google.de/intl/de/policies/privacy/, which also applies to YouTube.

We use YouTube so that we can show you videos and thus better inform you about us and our services. The legal basis for integrating the videos is our legitimate interest within the meaning of Art. 6(1)(f) GDPR; however, playing videos and the associated further data processing are only carried out on the basis of your consent within the meaning of Art. 6(1)(a) GDPR.

Content Delivery Network

We use various content delivery network tools (CDN) in our online offering. A CDN is a network of servers distributed (worldwide) that is capable of delivering content to users quickly and in an optimised manner. It particularly helps with the loading speed of the online offering. Data traffic between users and our online offering is analysed. For this purpose, personal data is processed in server log files by various providers. It cannot be ruled out that these servers are located in the USA. This means that US security authorities may also have access to the data stored there. We use the following service providers for this purpose:

Cloudflare Inc. 665 3rd St. #200, San Francisco, CA 94107, USA. Further information can be found in the privacy policy at https://www.cloudflare.com/de-de/privacypolicy/ and https://blog.cloudflare.com/what-cloudflare-logs/.

The use of CDN service providers is based on our legitimate interest in optimising our online offering in accordance with Art. 6(1)(f) GDPR.

Gstatic

We use the Gstatic service as a Google domain. Gstatic helps to load content on Google faster from our content delivery networks. The domain reduces bandwidth usage, increases network performance and generally speeds up the loading of Google services. When using this service, it cannot be ruled out that data may be stored on Google servers in the USA. This may also allow US security authorities to access the data stored there. The use is in our legitimate interest in the best possible presentation of our online offering in accordance with Art. 6 (1) lit. f) GDPR. Further information can be found in Google’s privacy policy at https://policies.google.com/privacy.

customer account

You can create a customer account for our online offering (‘my Academy’) on a voluntary basis. All information about you and your use of the various offerings is centrally managed in the customer account. This allows you to manage, update and, if necessary, delete all data. The legal basis for processing the registration data is Art. 6 (1) (a) GDPR if consent has been given. If you register with us for the purpose of fulfilling or initiating a contract, the legal basis for processing the data is additionally Art. 6 (1) (b) GDPR.

Registration for customer account

You can register for a customer account online. To create a customer account, you only need to provide an email address and a password. If no password is requested or entered during registration, we will initially assign a password automatically, which you can change later. Further details can be added on a voluntary basis. We reserve the right to offer additional registration options in addition to registration via the online service, to which the relevant regulations will then apply.

In order to use the full range of functions of the customer account, it may be necessary to verify the email address provided during registration. To do this, we will send a confirmation link to the email address you provided, which you must click on. This procedure serves to ensure the security of your data and also to ensure that communications regarding services, delivery status or payment status are sent to a valid email address.

Collection of data via the customer account

All data relating to the use of online services is stored in your customer account, provided that you log in with your customer account. This includes, in particular, personal data (name, age, addresses, delivery and payment information), vouchers, wish lists, purchase history, communication history, search and navigation behaviour, consent to individual services (such as newsletters), discount affinity and information provided explicitly or implicitly by the customer about their main areas of interest. We can use this data to create segments and assign customers to these segments. Membership of such segments is also stored in the customer account. Location-related data such as your delivery addresses or your location are stored, provided you have given your consent.

Your current location may be used to provide you with location-based offers. If you do not want the data to be stored in your customer account in individual cases, you can use the respective offers without using your customer account. If you want to stop the data from being stored in your customer account altogether, you can have your customer account deleted.

Use of data from the customer account

We use the stored data to process the joint business relationship and – with your consent – to send you interesting and relevant offers via all communication channels used by the customer. We use the stored data to try to determine which offers are relevant to you.

We will contact you within the scope of the business relationship using the contact details provided if you make use of individual services. For example, you will automatically receive order notifications or delivery status updates; we will inform you according to your selected preferences. Contact may be made by email, smartphone messages or other digital communication channels. You can also select optional communication channels and occasions, including special newsletters and app messages.

Storage period and deletion

The data collected when using the customer account is generally stored for the duration of the customer account’s existence, but can also be deleted prematurely upon request. Most of the data can be viewed directly online and – with the exception of the email address – changed or deleted. You can delete your customer account at any time by informing us of your wish to do so, for example via the general contact form. In the event of immediate deletion, the data may not be recoverable later in the event of re-registration.

applicant portal

You can apply for a job with us via the applicant portal and submit all the necessary information and documents. Use of the applicant portal is voluntary; you can also send us your application by other means, such as by email or post.

When an application is received via the applicant portal, your documents will be forwarded electronically to the relevant employees at our company. If you have applied for an advertised position, the documents will be automatically deleted three months after completion of the recruitment process, provided that no other legitimate interests prevent deletion. Such legitimate interests in this sense include, for example, obligations to provide evidence in proceedings under the General Equal Treatment Act (AGG). If you have applied without reference to an advertised position (unsolicited application), your application will be retained for as long as there is a possibility that it may be of interest. You have the option of requesting the deletion of your application at any time, even before the expiry of the specified retention periods. In the event of a successful application, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with legal requirements. In all other cases, the legal basis for the storage of your applicant data is your consent in accordance with Art. 6 (1) (a) GDPR.

Communication with us

You can contact us in various ways, including via the contact form on our website. We are also happy to keep you regularly updated by sending our newsletter by email.

Contact form

If you wish to use the contact form on our website, we collect the personal data that you enter in the contact form, in particular your name and email address. We also store the IP address and the date and time of the request. We process the data transmitted via the contact form exclusively for the purpose of being able to answer your enquiry or request.

You can decide for yourself what information you send us via the contact form. The legal basis for processing your data is your consent according to Art. 6(1)(a) GDPR.

After we have processed the issue, the data will initially be stored in case of any queries. Deletion of the data can be requested at any time, otherwise we will delete the data after complete settlement of the matter; statutory retention obligations remain unaffected in both cases.

Newsletter

When you subscribe to our newsletter, your email address will be used for our own advertising purposes until you unsubscribe. You will receive regular information by email on current topics as well as emails on special occasions, such as special promotions. The emails may be personalised and customised based on our information about you.

To register for our newsletter, unless you have given us your consent in writing, we use the ‘double opt-in’ procedure, i.e. we will only send you a newsletter by email if you have previously expressly confirmed that you want us to activate the newsletter dispatch. We will then send you a notification email and ask you to confirm that you would like to receive our newsletter by clicking on a link contained in this email.

The legal basis for processing your data is your consent according to Art. 6(1)(a) GDPR, if you have expressly registered for the newsletter. Within the framework of the legal requirements, it may also be possible that you receive our newsletter from us without express consent because you have ordered goods or services from us, we have received your email address in this context and you have not objected to receiving information by email. In this case, the legal basis is our legitimate interest in transmitting direct advertising in accordance with Art. 6(1)(f) GDPR.

If you no longer wish to receive newsletters from us, you can revoke your consent at any time with effect for the future or object to further receipt of the newsletter without incurring any costs other than the transmission costs according to the basic rates. Simply use the unsubscribe link included in every newsletter or send a message to us or our data protection officer.

Comments and comment subscriptions

You have the option to comment on our contributions in our online services. To do this, you must give your name, although you can also use a pseudonym. You must also provide your email address. The provision of your email address is necessary, so that we can contact you in the event of complaints about your comments and ask you to make a statement about them; we also store the IP address. Without this information, you will not be able to post comments. However, when a comment is published, only the name or pseudonym you have selected will be displayed. The legal basis for processing your data is your consent according to Art. 6(1)(a) GDPR. When using the comment function, you can also choose to be informed of any comments on your posts by email. In this case, you will receive corresponding notifications after confirming your email address, which can be cancelled at any time. The legal basis for sending the corresponding email is your consent in accordance with Art. 6(1)(a) GDPR.

Social Media

In addition to our online services, we also use various social media channels to transmit information and communicate, to which you will find links on our website or in which you will find links to our website. Specifically, we use the social network Facebook and the career network Xing. You can recognise the links by the providers’ respective logos.

Clicking on the links opens the corresponding social media pages, for which this Privacy Policy does not apply. Details of the provisions and data protection notices pertaining to the respective providers apply there in principle. Below we have summarised for you an overview of the respective information provided by the providers.

LinkedIn: https://de.linkedin.com/legal/privacy-policy

No personal information is transmitted to the respective providers before the corresponding links are opened. At the same time, your access to the linked page is the basis for data processing by the respective providers.

We would also like to point out here that the Federal Office for Information Security (BSI) provides general information on the safe use of social networks on its website at https://www.bsi.bund.de/DE/ Topics/Consumers/Information and recommendations/Online communication/Social networks/social-networks_node.html.

LinkedIn Account

In addition to our own online offering, we also operate an account on the LinkedIn career network. We use this account to provide information about our company and our activities and to offer a channel for communication. The LinkedIn career network is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (‘LinkedIn’).

Please note that you use the career network and its functions at your own risk. This applies in particular to the use of interactive functions (e.g. liking, sharing, commenting).

Processing of personal data

The data collected about you when using the service is processed by LinkedIn. It cannot be ruled out that data may also be transferred to countries outside the European Union. The data processed includes, among other things, the data you voluntarily provide, such as your name, user name, email address, telephone number, information about your professional career, profile data, content you create, upload or receive, comments, your IP address, details of the device you use, information about websites and content you visit, and your location. We have no influence on the type and scope of data processed by LinkedIn, the type of processing and use, or the transfer of this data to third parties. Information about what data is processed by LinkedIn and for what purposes can be found in LinkedIn’s privacy policy at https://de.linkedin.com/legal/privacy-policy?.

We process the data you enter on LinkedIn to the extent that we may like, comment on or share your posts, or contact and interact with you. The data you freely publish and distribute on LinkedIn is included in our offering in this way.

You can restrict the processing of your data in the general settings of your LinkedIn account. In addition, on mobile devices, you can restrict LinkedIn’s access to contact and calendar data, photos, location data, etc. in the settings options. However, this depends on the operating system used. You can find out more about LinkedIn’s privacy settings at: https://de.linkedin.com/legal/privacy-policy?.

Analysis

LinkedIn offers LinkedIn account operators the opportunity to obtain an overview of the use of the account and its users. The analysis functions can be used primarily to call up and evaluate statistical data. We use the data to make our account as attractive and efficient as possible. For this purpose, LinkedIn provides us with data that LinkedIn itself has generated on its own responsibility. The data we receive from LinkedIn is mostly anonymised data and statistics. Insofar as we receive personal data in this context, we are responsible for further processing this data to evaluate the use of our LinkedIn account. Further information can be found in LinkedIn’s privacy policy at https://de.linkedin.com/legal/privacy-policy?.

Communication

LinkedIn gives you the opportunity to communicate with us directly. If you contact us via LinkedIn, we will store and use the data you provide solely for the purpose of responding to your enquiry. The legal basis for the processing of your data is your consent within the meaning of Art. 6 (1) (a) GDPR and our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the collection and processing of enquiries, the evaluation of enquiries and the prevention of misuse.

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For your personal data, this is the case when the respective conversation has ended. For us, the conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You have the option of revoking your consent to the processing of your personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.

Further information about LinkedIn

If you have any questions about our use of personal data in connection with the use of your LinkedIn account, please feel free to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection at LinkedIn, please contact LinkedIn directly.

Your rights and contact

We attach great importance to explaining how your personal data is processed as transparently as possible and also to informing you of the rights to which you are entitled. If you would like more information or would like to exercise the rights to which you are entitled, you can contact us at any time, so that we can deal with your request.

Data subject rights

You have extensive rights with regard to the processing of your personal data. First of all, you have a comprehensive right to information and, if necessary, you can demand the correction and/or deletion or blocking of your personal data. You can also request to restrict processing and have the right to object to processing. You also have a right to data portability with respect to the personal data you provide to us.

If you would like to exercise any of your rights and/or would like to receive more information about them, please contact our Customer Services Team. Alternatively, you can also contact our data protection officer.

Revocation of consent and objection

Once you have given your consent, you may freely revoke it at any time with future effect. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent up until the point of revocation. The contact persons for this are also our customer service team and our.

If the processing of your personal data is not based on consent but on another legal basis, you can object to this data processing. Your objection leads to a review and, if necessary, termination of the data processing. You will be informed about the result of the review and , if the data processing is nevertheless to be continued , you will receive more detailed information from us as to why the data processing is permissible.

Data Protection Officer and Contact

We have appointed an external data protection officer who supports us in data protection issues and whom you can also contact directly. If you have any questions regarding our handling of personal data or require further information on data protection issues, please do not hesitate to contact our data protection officer and his team:

Dr Sebastian Meyer, Lawyer, LL.M.
c/o BRANDI Attorneys at Law
Adenauerplatz 1, 33602 Bielefeld, Germany
Phone: +49 521 96535812
Email: datenschutz@brandi.net

If you would like to contact our data protection officer personally by email, you can also reach him at sebastian.meyer@brandi.net.

Complaints

If you believe that the processing of your personal data by us is not being carried out in accordance with this Privacy Policy or the applicable data protection regulations, you have the right to lodge a complaint with the supervisory authority. You can also complain to our data protection officer. Our data protection officer will then review the matter and inform you of the outcome of the review.

Further information and changes

Links to other websites

Our online services may contain links to other websites. These links are usually marked as such. We have no influence on the extent to which the applicable data protection regulations are observed on the linked websites. We therefore recommend that you also read the respective Privacy Policies for the other websites.

Changes to this Privacy Policy

The date on which this Privacy Policy was last revised is indicated by the date (below). We reserve the right to change this Privacy Policy at any time with future effect. In particular, a change is made in the event of technical adjustments to our online services or changes to data protection requirements. The current version of the Privacy Policy can always be accessed directly via the website. We recommend that you regularly check for changes to this Privacy Policy.

Latest review date for this Privacy Policy: October 2023