Privacy Policy

We are pleased to welcome you to our website https://myspaceplus.de/ ("Website") and thank you for your interest in our company. In connection with your visit to our website, we also process personal data in the sense of Article 4, No. 1 GDPR ("Data"). We are aware of the importance of the data entrusted to us. Protecting your privacy while processing your data is an important concern for us, and we take it into account in our business processes. The handling of your data is carried out in compliance with the legal requirements for data protection.

1. Responsible body and data protection officer

The responsible body according to Article 4, No. 7 GDPR for processing your data in connection with this website is:

Space Plus Store GmbH ("Space Plus" or "we")
Space Plus Store GmbH
An der Gümpgesbrücke
9D-41564 Kaarst
E-mail: info@myspaceplus.de

You can contact the data protection officer of Space Plus as follows:
IITR Datenschutz GmbH

Dr. Sebastian Kraska
Marienplatz
280331 Munich
Germany
Phone: +49 (0)89 18917360
E-mail: email@iitr.de

2. Purpose of data processing, legal basis, retention period, recipients, and third-country transfer

Depending on the processing purpose, the processing of your data may be based on a different legal basis. In operating our website, we are supported by processors who process your data on our behalf and according to our instructions and, as such, are recipients of your data ("Service providers"). Furthermore, your data may also be disclosed to other companies.

Below, we outline the different purposes for which your data may be processed on our website, specifying the relevant legal basis and retention period. Additionally, we inform you whether your data will be disclosed to service providers or other companies and if a transfer of your data outside the European Economic Area ("EEA") will take place.

a. Accessing our website and server log files

To display our website on your device, it is technically necessary for our web server, on which our website is hosted, to process data from you. For this purpose, we process your IP address along with information about your browser type and version, your operating system, your Internet service provider, the date and time of your access, the website from which you accessed our website, and the subpages you visited in a server log file. We are supported by a service provider in hosting. This service provider is based in England, outside the EEA, in a third country. The European Commission has issued an adequacy decision for the data transfer to the United Kingdom.

The processing of your data is carried out according to Article 6(1)(f) GDPR. The processing of your IP address is necessary to safeguard our legitimate interests in the accessibility and correct display of our website. The additional storage of your data in a server log file serves to protect our legitimate interests in ensuring the security and proper functioning of our website, as well as identifying, isolating, and rectifying disturbances and errors.

Your data in our server log file will be automatically deleted 30 days after visiting our website.

b. Contact

On our website, we provide you with the opportunity to contact us on various topics.
If you contact us via our contact form, the required fields are marked as such. These fields are necessary to process your inquiry. All other information is voluntary and serves only to provide a more precise answer to your inquiry. Additionally, you can contact us by phone, email, mail, or fax. The data we process in this context may vary depending on the communication channel but typically includes your first and last name, address, phone number, and email address.

If your contact is aimed at concluding a contract or is related to a contract, we process your data based on Article 6(1)(b) GDPR. If your contact is of a general nature, we process your data according to Article 6(1)(f) GDPR based on our legitimate interests to respond to your inquiry about our company and/or our offers individually and to the best of our ability.

We will delete your data when it is related to a contractual relationship, possibly only after the expiration of commercial or tax-related retention periods, which can last up to 6 years. These periods usually begin at the end of the year in which you contacted us. All other data will be deleted when your inquiry has been fully resolved, and we are not subject to any legal obligation to retain the data.

c. Call-Back Service

You can use our call-back service on our website.

To use the call-back service, please refer to the call-back service input mask. Mandatory data fields are marked as such. These are necessary because we cannot call you back without them. All other fields are voluntary and serve only to provide a more precise response to your inquiry.

If your use of our call-back service is aimed at concluding a contract or is related to a contract, we process your data based on Article 6(1)(b) GDPR. If your inquiry is of a general nature, we process your data according to Article 6(1)(f) GDPR based on our legitimate interests to respond to your inquiry about our company and/or our offers individually and to the best of our ability.

If you have an existing account with us, we store information related to the call-back service in your account for one year. Data concerning all other inquiries is deleted after one month.

d. Use of Cookies

To make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies in some areas. Cookies are files that are stored on your hard drive or in the cache of your internet browser when you visit our website. When we refer to "cookies" below, this may also include other technologies such as web beacons, local storage objects, and other similar storage or access technologies.

We use cookies to store session-related information within the website. These cookies expire at the end of the session/browser session (so-called transient cookies) and are not stored permanently. Other cookies remain on your device beyond the respective browser session and allow us to recognize your device on your next visit (so-called persistent cookies). Persistent cookies are automatically deleted after a predefined period, which can vary depending on the type of cookie.

Cookies can be classified into the following categories/cookie types:

Technically necessary cookies

Cookies necessary for the execution of specific website functionalities |

Statistics / Analysis

Cookies for analyzing data to gather information about the users of the website, the use of the website, the requested content, and the location of the users. We use these to optimize the quality of our content. These data are also used by us and the third-party providers mentioned in our privacy policy to track your usage behavior and the content you requested over a longer period and across websites. In this way, we and the third-party providers can personalize content, ads, and advertising for you.

Of course, you can also visit our website without using cookies. One option is to disable the use of cookies on your computer by changing the cookie settings in your browser. This would apply to all cookies. You can usually find the procedure to disable cookies via the "Help" function of your internet browser. However, please note that these settings may affect the full availability and functionality of our website.

Some of the cookies we use on our website come from third parties who help us analyze the effectiveness of our website content and the interests of our visitors, measure the performance of our website, place targeted advertising and other content on our or other websites, or communicate with you. On our website, we use both First Party Cookies (visible only from the domain you are currently visiting) and Third Party Cookies (cross-domain visible and regularly set by third parties).

The storage of information on your device (e.g., PC, smartphone) and possibly accessing information stored on your device is based on Section 25 of the Telecommunication-Telemedia Data Protection Act (TTDSG). If the processing of information is absolutely necessary to enable the use of our website explicitly requested by you, the storage or access occurs based on § 25(2) No. 2 TTDSG. Further storage of information on your device takes place based on your consent according to § 25(1) TTDSG. The legal bases of the GDPR mentioned in this privacy policy apply to the further processing of the personal data obtained in this context.

e. Managing consents

As stated, we also use technically non-essential cookies on our website. On your first visit to our website, we ask for your consent to use such cookies. For this purpose, we use a Consent Manager. This is a plugin that can collect consent for the use of cookies and/or similar technologies. To manage your consent, i.e., whether you have granted or denied consent, we store corresponding data in a cookie on your device to recognize you on your next visit to our website and not ask for consent again. In this process, we process your IP address, the time of your visit to our website, and information about your browser and device. Through the Consent Manager, you can change the settings you have chosen at any time and withdraw your consent to the use of non-essential cookies and technologies and the further processing of the personal data collected through them at any time with effect for the future. The Consent Manager can be opened via the "Cookie Settings" button in the footer of each website page.

The processing of your data in connection with this is based on Art. 6 (1) lit. f) GDPR and serves our legitimate interest in providing you with the most pleasant experience possible when using our website.

The cookie has a lifespan of 12 months unless you delete it earlier in your browser.

g. Google Tag Manager

We use the Google Tag Manager tool on our website by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google Ireland").

The Google Tag Manager allows us to set and manage so-called tags on our website. Tags help us better determine which offers and services you are interested in on our website and how you interact with our website. We further process this information using Google Analytics when a tag is triggered on our website. The use of the Google Tag Manager involves the use of technically non-essential cookies and online identifiers (including cookie IDs) as well as your IP address. Google acts as a service provider in connection with the use of the Google Tag Manager.

The use of the Google Tag Manager is based on your consent as per Art. 6(1)(a) GDPR.

The information collected by the Google Tag Manager is deleted after 9 or 18 months (https://policies.google.com/technologies/ads). Google acts as a service provider for the Google Tag Manager. The contract for data processing, which also applies to the Google Tag Manager, can be viewed here: https://privacy.google.com/businesses/processorterms.

The use of the Google Tag Manager results in the transfer of your data to the USA. There is an adequacy decision by the European Commission for data transfers to the USA. Data transfer is carried out, among other things, based on standard contractual clauses as suitable guarantees for the protection of personal data, which we have concluded with Google Ireland in the data processing agreement.

You can also prevent the transfer of data to Google Ireland by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

h. Google Analytics

We use the Google Analytics tool on our website by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google Ireland").

Google Analytics allows us to analyze and evaluate the use of our website to compile reports on the website activities of our visitors. Google Analytics also creates pseudonymized usage profiles of website visitors. The use of Google Analytics involves the use of technically non-essential cookies and online identifiers (including cookie IDs), IP addresses, and device identifiers. We use Google Analytics exclusively with the "Anonymize-IP" extension, which deletes part of your IP address before transferring it to Google Ireland.

The use of Google Analytics is based on your consent as per Art. 6(1)(a) GDPR.

We use Google Analytics with the "Google Signals" extension. With Google Signals, we can analyze your use of our website across devices. However, this requires you to have a Google account, be logged into it when visiting our website, and have the "Personalized Advertising" function enabled in your Google account. You can find out how to enable this function at the following link: https://support.google.com/ads/answer/2662856. If this is the case, additional data, such as your location, search history, YouTube history, and data from Google partner websites, may be processed according to Google.

The information collected by Google Analytics is deleted after 9 or 18 months (https://policies.google.com/technologies/ads). Google acts as a service provider in the use of Google Analytics. We have therefore entered into a data processing agreement with Google Ireland, which also covers Google Analytics and is available at the following link: https://privacy.google.com/businesses/processorterms/. Due to the ruling of the European Court of Justice, particularly in case C-40/17 – Fashion ID, we are prepared to enter into a joint responsibility agreement with Google Ireland according to Art. 26 GDPR. Currently, such an agreement is not provided by Google Ireland.

The use of Google Analytics involves the transfer of your data to the USA. There is an adequacy decision by the European Commission for data transfers to the USA. Part of the contract between us and Google Ireland includes the so-called standard contractual clauses, which according to Art. 46(1), (2)(c) GDPR, provide suitable guarantees for third-country transfers.

You can prevent the transfer of data to Google Ireland by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

i. Google Ads

We use Google Ads from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google Ireland") on our website.

Google Ads allows us to display ads on the Google search engine or on third-party websites when the user enters certain search terms (keyword targeting). Additionally, targeted ads can be shown based on user data (e.g., interests) stored by Google Ireland (audience targeting). We can analyze this data quantitatively, such as how many ads led to clicks and which search terms triggered our ads.

The use of Google Ads is based on your consent as per Article 6(1)(a) GDPR.

Google Ireland receives the data as a controller, not as a processor.

The information collected through Google Ads is deleted after 9 or 18 months (https://policies.google.com/technologies/ads).

Using Google Ads results in the transfer of your data to the USA. There is an adequacy decision from the European Commission for data transfers to the USA. The data transfer occurs, among other things, based on standard contractual clauses as suitable guarantees for the protection of personal data, which we have entered into with Google Ireland in a data processing agreement, available at: https://privacy.google.com/businesses/controllerterms/.

Further information and the privacy policy can be found in Google's privacy statement at: https://policies.google.com/technologies/ads.

You can prevent the transmission of data to Google Ireland by downloading and installing the browser plugin available at: https://support.google.com/ads/answer/7395996.

j. Google Ads Remarketing

We use Google Ads Remarketing from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google Ireland").

Google Ads Remarketing analyzes your behavior on our website (e.g., clicking on certain products/ads) to assign you to specific advertising target groups. Remarketing enables us to show users of our website ads based on their interests on other websites within the Google network.

Additionally, Google Ads Remarketing allows linking the created advertising target groups with Google's cross-device features. This way, interest-based and personalized ads, tailored to your past usage and browsing behavior on one device, can also be displayed on another device.

The use of Google Ads Remarketing is based on your consent as per Article 6(1)(a) GDPR.

Google Ireland receives the data as a controller, not as a processor.

The information collected through Google Ads Remarketing is deleted after 9 or 18 months (https://policies.google.com/technologies/ads).

Using Google Ads Remarketing results in the transfer of your data to the USA. There is an adequacy decision from the European Commission for data transfers to the USA. The data transfer occurs, among other things, based on standard contractual clauses as suitable guarantees for the protection of personal data, which we have entered into with Google Ireland in a data processing agreement, available at: https://privacy.google.com/businesses/controllerterms/.

You can prevent the transmission of data to Google Ireland by downloading and installing the browser plugin available at: https://support.google.com/ads/answer/7395996. If you have a Google account, you can opt-out of personalized advertising at the following link: https://www.google.com/settings/ads/onweb/.

k. Google Ads Conversion

We use Google Ads Conversion Tracking from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google Ireland").

With Google Ads Conversion, both Google Ireland and we can recognize whether you have performed certain actions. For example, we can evaluate which fields on our website were clicked most often and which products were viewed or purchased most frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and the actions they took. If you are registered with a Google Ireland service, Google Ireland can associate the visit with your account. Even if you are not registered with Google Ireland or logged in, there is a possibility that Google Ireland may learn and store your IP address.

The use of Google Ads Conversion is based on your consent as per Article 6(1)(a) GDPR.

Google Ireland receives the data as a controller, not as a processor.

The information collected through Google Ads Conversion is deleted after 9 or 18 months (https://policies.google.com/technologies/ads).

Using Google Ads Conversion results in the transfer of your data to the USA. There is an adequacy decision from the European Commission for data transfers to the USA. The data transfer occurs, among other things, based on standard contractual clauses as suitable guarantees for the protection of personal data, which we have entered into with Google Ireland in a data processing agreement, available at: https://privacy.google.com/businesses/controllerterms/.

You can prevent the transmission of data to Google Ireland by downloading and installing the browser plugin available at: https://support.google.com/ads/answer/7395996.

l. YouTube Embedding

On our website, we use a YouTube iframe from YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA ("Google").

We have embedded the YouTube iframe to allow you to play selected videos hosted on YouTube directly on our website. In doing so, your IP address is transmitted to YouTube. When you visit a page on our website where a YouTube iframe is embedded, YouTube can recognize that you visited that page. If you are logged into YouTube at the same time, the collected information will be associated with your Google account. You can prevent this by logging out of YouTube.

The use of YouTube is based on your consent as per Article 6(1)(a) GDPR.

The use of the YouTube iframe results in the transfer of your data to the USA. There is an adequacy decision from the European Commission for data transfers to the USA. The data transfer is based on your consent according to Article 49(1)(a) GDPR.

We use the "Enhanced Privacy Mode" setting so that Google does not set cookies to analyze user behavior when embedding videos.

m. Facebook-Pixel

We use the "Facebook Pixel" from the social network Facebook, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland") on our website.

When you visit our website, the Facebook Pixel is loaded. With the Facebook Pixel, we can categorize visitors to our website into specific target groups, allowing us to display relevant ads ("Ads") to you on Facebook. This pixel collects information about your browsing session, including the banners and links clicked, a hashed version of the Facebook ID, and the URL being viewed. If you have a Facebook account and are logged in, the visit to this website will be associated with your Facebook user account. For more information about the Facebook Pixel and how it works, please refer to Facebook's help section: https://www.facebook.com/business/help/651294705016616.

The use of the Facebook Pixel is based on your consent, as stated in Article 6 (1) (a) GDPR.

We are jointly responsible with Facebook Ireland for the use of the Facebook Pixel. You can view the joint controller agreement under the following link: https://de-de.facebook.com/legal/terms/page_controller_addendum.

Using the Facebook Pixel involves the transfer of your data to the USA. The European Commission has issued an adequacy decision for data transfers to the USA. The data transmission is also based on Standard Contractual Clauses as appropriate safeguards for the protection of personal data, which can be accessed at: https://www.facebook.com/legal/eu_data_transfer_addendum. As an additional measure to the Standard Contractual Clauses, Facebook has implemented technical and organizational measures to protect your data: https://www.facebook.com/legal/terms/data_security_terms.

For any further unilateral processing of your data by Facebook Ireland, especially concerning potential data transfers to the USA, Facebook Ireland is solely responsible. Facebook Ireland uses cookies and other technologies to collect data from you. For the purposes and legal basis of this processing, you can refer to Facebook's Data Policy (https://www.facebook.com/policy.php). Please note that Facebook Ireland may collect and process data about you when visiting www.facebook.com/ even if you do not have a Facebook account or are not logged in. We are not aware of the data Facebook Ireland collects or its purposes.

n. Facebook Custom Audience (Remarketing)

We use the "Custom Audience" remarketing feature from Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland").

With the help of the Facebook Pixel, Facebook can identify users of a website as a target audience for displaying ads for that website on Facebook (Custom Audience).

With Custom Audience, we ensure that only customers who have visited our website or shown interest in our products are shown ads on Facebook. The data we use for Custom Audience comes from the Facebook Pixel we have set, whose functionality we described above. The data we use for Custom Audience is collected directly from you and provided to Facebook for advertising purposes. Even if you are not registered with Facebook or logged in, the provider may gather and store your IP address and other identifying features.

The use of Custom Audience is based on your consent, as stated in Article 6 (1) (a) GDPR.

Individuals remain in a Custom Audience for a maximum of 180 days after the last interaction: https://de-de.facebook.com/business/help/419552341510847. We are jointly responsible with Facebook Ireland for the "Custom Audience" function. You can view the joint controller agreement under the following link: https://de-de.facebook.com/legal/terms/page_controller_addendum.

Using Facebook Custom Audience involves transferring your data to the USA. The European Commission has issued an adequacy decision for data transfers to the USA. The data transmission is also based on Standard Contractual Clauses as appropriate safeguards for the protection of personal data, which can be accessed at: https://www.facebook.com/legal/eu_data_transfer_addendum. As an additional measure to the Standard Contractual Clauses, Facebook has implemented technical and organizational measures to protect your data: https://www.facebook.com/legal/terms/data_security_terms.

For any further unilateral processing of your data by Facebook Ireland, especially regarding potential data transfers to the USA, Facebook Ireland is solely responsible. Facebook Ireland uses cookies and other technologies to collect data from you. For the purposes and legal basis of this processing, you can refer to Facebook's Data Policy (https://www.facebook.com/policy.php). Please note that Facebook Ireland may collect and process data about you when visiting www.facebook.com even if you do not have a Facebook account or are not logged in. We are not aware of the data Facebook Ireland collects or its purposes.

You can deactivate the "Facebook Custom Audience" feature for logged-in users at https://www.facebook.com/settings/?tab=ads#.

o. Microsoft Clarity

When visiting this website, personal data is processed. Processed data categories: data for creating usage statistics. Purpose of processing: anonymization, creation of statistics, and analysis of user behavior. The legal basis for processing: your consent under Art. 6 (1) a GDPR.

Data is transmitted to: the independent controller Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The legal basis for data transfer to Microsoft Ireland Operations Ltd. is your consent under Art. 6 (1) a GDPR. This may also involve the transfer of personal data to a country outside the European Union.

The transfer of data to the USA is based on Art. 45 GDPR in conjunction with the European Commission’s adequacy decision C(2023) 4745, as the data recipient has committed to complying with the principles of data processing under the Data Privacy Framework (DPF).

For email contact with the data protection officer of Microsoft Ireland Operations Ltd.: https://www.microsoft.com/de-at/concern/privacy.

Microsoft Ireland Operations Ltd.'s privacy policy: https://privacy.microsoft.com/de-de/privacystatement.

p. Facebook

We operate a fan page on www.facebook.com.

When you visit our fan page, various data is collected and processed. For some of the data processing activities on www.facebook.com, we are jointly responsible with Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook Ireland"); for other data processing activities, we or Facebook Ireland are solely responsible.

If you contact us on Facebook, we process your name and other information that you provide directly or through the comment function. We are solely responsible for processing this data. The processing of this data is based on Article 6 (1) (f) GDPR and serves our legitimate interests in an appropriate and interactive company presentation.

We are jointly responsible with Facebook Ireland for the Facebook "Page Insights" feature, which provides us with aggregated and anonymized statistical evaluations of your usage and interaction with our fan page. You can view the joint controller agreement under the following link: https://de-de.facebook.com/legal/terms/page_controller_addendum.

For any further unilateral processing of your data by Facebook Ireland, especially concerning potential data transfers to the USA, Facebook Ireland is solely responsible. Facebook Ireland uses cookies and other technologies to collect data from you. For the purposes and legal basis of this processing, you can refer to Facebook's Data Policy (https://www.facebook.com/policy.php). Please note that Facebook Ireland may collect and process data about you when visiting www.facebook.com even if you do not have a Facebook account or are not logged in. We are not aware of the data Facebook Ireland collects or its purposes.

q. Instagram

We operate an Instagram account on www.instagram.com.

Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook Ireland") is generally responsible for processing your data when visiting www.instagram.com.

Facebook Ireland uses cookies and other technologies to collect data from you. For the purposes and legal basis of this processing, you can refer to Instagram's Privacy Policy (https://help.instagram.com/519522125107875) and Instagram's information on the cookies used (https://help.instagram.com/519522125107875). Please note that Facebook Ireland may collect and process data about you when visiting www.instagram.com even if you do not have an Instagram account or are not logged in. We are not aware of the data Facebook Ireland collects or its purposes.

However, we process such data from you that you provide to us via Instagram and which is publicly visible. The processing of this data is based on Article 6 (1) (f) GDPR and serves our legitimate interests in an appropriate and interactive company presentation.

Facebook Ireland provides us with the "Instagram Insights" function, which allows us to measure and analyze interactions of visitors to our Instagram channel. However, we only have access to aggregated and anonymized data that does not allow identification of individual users.

r. LinkedIn

We maintain a presence on www.linkedin.com.

When visiting our profile, different data is collected and processed. For some of the data processing activities on www.linkedin.com, we are jointly responsible with LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn Ireland”) under data protection law. For other data processing, we or LinkedIn Ireland are solely responsible.

If you contact us on LinkedIn, we process your name and any additional information you provide. We are solely responsible for this processing of your data. The processing of this data is based on Article 6 (1) (f) GDPR and serves our legitimate interests in providing an appropriate and interactive company presentation.

We are jointly responsible with LinkedIn Ireland for the "Page Insights" feature, which provides us with aggregated and anonymized statistical evaluations of your usage and interaction with our profile. You can view the joint controller agreement under the following link: https://legal.linkedin.com/pages-joint-controller-addendum

For any further unilateral processing of your data by LinkedIn Ireland, especially regarding potential data transfers to the USA, LinkedIn Ireland is solely responsible. LinkedIn Ireland uses cookies and other technologies to collect data from you. The purposes and legal basis for these processing activities can be found in the LinkedIn Cookie Policy (https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy) and the LinkedIn Privacy Policy (https://de.linkedin.com/legal/privacy-policy?trk=lithograph_footer-privacy-policy).

Please note that LinkedIn Ireland may also collect and process data about you when visiting the www.linkedin.com website, even if you do not have a LinkedIn account or are not logged in.

3. Data Recipients

Recipients of your data, in connection with your visit to our website, are primarily the service providers and companies mentioned above. In addition, we are supported by service providers engaged by us for the maintenance, care, and development of our website, who process your data solely on our instructions and behalf. For internal administrative purposes, your data may also be shared with other companies affiliated with us.

Your data will only be transferred beyond this in compliance with legal obligations, such as to authorities or for the defense, assertion, or exercise of legal claims.

4. Third-Country Transfer

Due to the use of the companies mentioned under 2. g) to s), it may involve transferring your data to a third country, outside the EEA. Further details can be found in the respective description.

Your data will only be transferred beyond this in compliance with legal obligations, such as to authorities or for the defense, assertion, or exercise of legal claims.

5. Your Rights

Under the provisions of the GDPR, you have the following rights:

• Right of access (Article 15 GDPR),
• Right to rectification (Article 16 GDPR),
• Right to restriction of processing (Article 18 GDPR),
• Right to data portability (Article 20 GDPR).

You have the right to withdraw any consent given to us at any time with effect for the future. Furthermore, you can object to the processing of your data for the purpose of safeguarding legitimate interests at any time with effect for the future, according to Article 21 GDPR. If the processing is not for direct marketing purposes, the right to object exists only for reasons arising from your particular situation. You may also lodge a complaint with a supervisory authority at any time. The supervisory authority responsible for us is the:

Berlin Commissioner for Data Protection and Freedom of Information
Maja Smoltczyk
Friedrichstr. 219
10969 Berlin
Tel.: +49 (0)30 13889-0
Fax: +49 (0)30 2155050
Email: mailbox@datenschutz-berlin.de