Data protection

Privacy policy pursuant to Art. 13 GDPR

Data protection and privacy are particularly important to us. We are therefore committed to protecting your personal data and only collecting, processing, and using it in accordance with the General Data Protection Regulation (GDPR) and national data protection regulations. The following privacy policy explains which of your personal data is collected when you use our platform and how this data is used. Our privacy policy is updated regularly in accordance with legal and technical requirements. Please therefore refer to the current version of our privacy policy.

I. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws as well as other data protection regulations is:

NextGen Media GmbH

Represented by the managing directors Wolfgang Patz and Erik Freutel

Franz-Jacob-Straße 2c.
10369 Berlin

T: +49 (0) 160 | 78 49 590
T: +49 (0) 30 | 20 63 49 03
E:kontakt@nextgen-media.de

II. General information on data processing

1. Scope of processing personal data

Your personal data will only be processed to the extent necessary to provide a functional website and our content and services. Processing will only take place with your consent, unless prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data

The legal basis for the processing of personal data is provided by the provisions of Art. 6 (1) GDPR as follows:

a. Article 6(1)(a) of the GDPR, insofar as we obtain the consent of the data subject for the processing of personal data.

b. 6 (1) (b) GDPR, insofar as the processing of personal data is necessary for the performance of a contract to which the data subject is party. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

c. 6 (1) (c) GDPR, insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject.

d. 6 (1) (d) GDPR, insofar as vital interests of the data subject or another natural person require the processing of personal data.

e. Article 6(1)(f) GDPR, provided that the processing is necessary to safeguard a legitimate interest of our company or a third party and this outweighs the interests, fundamental rights, and freedoms of the data subject.

3. Data deletion and storage period

Once the purpose of storage no longer applies, your personal data will be deleted or blocked. If European or national legislators stipulate in EU regulations, laws, or other provisions to which the controller is subject that storage beyond the purpose is permitted, this may take place until the expiry of the storage period prescribed by the aforementioned standards. The data will then be blocked or deleted, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract. The deletion periods for the processing operations are documented in our processing directory.

III. Provision of the website and creation of log files

1. Description and scope of data processing

Our system automatically collects data and information from the computer system of the accessing computer each time our website is accessed.

The following data is collected:

a. Date and time of access

b. Your Internet service provider

c. Information about the type of browser used to access the site and the version used

d. Your operating system

With the exception of your IP address or other data that could be used to identify you, this data is also stored in our system's log files. This data is not stored together with your other personal data.

2. Legal basis for data processing

Article 6(1)(f) of the GDPR provides the necessary legal basis for the temporary storage of data.

3. Purpose of data processing

The provision of the website to your computer requires the temporary storage of your IP address by the system. For this purpose, your IP address must remain stored for the duration of the session. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 (1) lit. f GDPR.

4. Duration of storage

If the data collection is no longer necessary to achieve the purpose, the data will be deleted. When data is collected for the purpose of providing the website, this occurs at the end of each session.

5. Right to object and right to erasure

You have no option to object, as the collection and storage of data in log files is essential for the provision and operation of the website.

IV.Use of cookies

1. Description and scope of data processing

Our website uses so-called "cookies." These are text files that are stored in the Internet browser or by the Internet browser on your computer system. A cookie can be stored on your operating system as soon as it accesses a website. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.

Cookies are used to make our website user-friendly. This is because some parts of our website require identification of the browser used even after a page change.

The following data is stored and transmitted in the cookies:

a. Log-in information

b. Language settings

c. Items in a shopping cart

d. Navigation on the page and function control

2. Preventing cookies from being stored

Depending on the browser you use, you can set it so that cookies are only stored with your consent. If you only want to accept the cookies we use, but not those of any service providers and partners, you can select the "Block third-party cookies" setting in your browser. As a rule, the help function in the menu bar of your web browser will show you how to reject new cookies and disable cookies that have already been received. If you use shared computers that are set to accept cookies and Flash cookies, we recommend that you always log out completely after finishing.

3. Legal basis for data processing

Article 6(1)(f) of the GDPR provides the necessary legal basis for the processing of personal data using cookies.

4. Purpose of data processing

Technically necessary cookies are used to simplify the use of our websites for you. Without the use of cookies, various functions of our website cannot be offered, as these require the browser to be recognized after a page change.

The following applications require cookies:

a. Remembering search terms

b. Transfer of language settings

No user profiles are created using user data collected by technically necessary cookies.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR.

5. Duration of storage, right to object and right to erasure

Cookies are stored on your computer. From there, they are transmitted to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. You can also delete cookies that have already been stored at any time. This can also be done automatically. If you deactivate cookies for our website, this may result in restrictions on the use of our website's functions.

V.Registration

1. Description and scope of data processing

You can register on our platform by providing personal data. To do so, you enter your data in an input mask. This data is then transmitted to us and stored. The data is not passed on to third parties.

The following data is collected during the registration process:

a. Name

b. Address

c. Email

The following data is also stored at the time of registration:

a. Your IP address

b. Date and time of your registration

We will obtain your consent to process this data during the registration process.

2. Legal basis for data processing

The user's consent to the processing of data in accordance with Art. 6 (1) (a) GDPR constitutes the necessary legal basis for this.

In addition, Art. 6 (1) (b) GDPR provides the necessary legal basis for the processing of your data insofar as the registration serves to fulfill a contract with you or to carry out pre-contractual measures.

3. Purpose of data processing

Your personal data will be processed in compliance with the requirements of the GDPR and the BDSG.

a. to fulfill a contract (Art. 6 para. 1 b GDPR)

We only process your data for the purpose of providing and brokering banking transactions and financial services for the fulfillment of contracts or to carry out pre-contractual measures upon request.

Data processing is based on the specific purpose or the product you have requested. For example, this may involve setting up a securities account, executing deposits, granting loans, etc. The purpose may therefore also include the execution of transactions, the assessment of needs, asset analyses, asset management, and asset consulting. You can find further details on the purposes of data processing in the applicable contract documents and terms and conditions at any time.

b. in the context of balancing interests (Art. 6(1)(f) GDPR)

Beyond the data necessary for the use of our platform, we only process your data if this is unavoidable in order to protect our legitimate interests or those of third parties. Examples:

Prevention and investigation of crimes
Assertion of legal claims and defense in legal disputes
Measures for building and facility security (e.g., access controls)
Review and optimization of business management processes and further development of services and products

c. based on your consent (Art. 6 para. 1 a GDPR)

You can give us your consent to process personal data for one or more specific purposes (e.g., to receive the newsletter or to evaluate traffic data for advertising purposes). In this case, the processing of your data is lawful on the basis of your consent. You can revoke your consent at any time, including any declaration you made before May 25, 2018, before the GDPR came into force. The revocation of consent only applies to the future and does not affect the legality of the data processed until the revocation.

d. due to legal obligations (Art. 6 (1) c GDPR) or in the public interest (Art. 6 (1) e GDPR)

4. Duration of storage

If the data collection is no longer necessary to achieve the purpose, the data will be deleted.

This applies to data collected during the registration process if the registration on our website is deleted or changed.

5. Right to object and right to erasure

You can cancel your registration at any time or have the information stored about you changed at any time.

VI.Contact form and email contact

1. Description and scope of data processing

We provide a contact form on our website for electronic communication. To use it, enter your data in the input mask. This data will then be transmitted to us and stored. The following data is collected:

Last name, first name
Address
email

The following data is also stored when the message is sent:

Your IP address
Date and time of your registration

During the sending process, we will obtain your consent to process this data and refer you to this privacy policy.

You can also contact us via the email address provided. Your personal data transmitted with the email will be stored.

The data will be used exclusively for processing communications. The data processed for communications will not be passed on to third parties.

2. Legal basis for data processing

The user's consent to the processing of data in accordance with Art. 6 (1) (a) GDPR constitutes the necessary legal basis for this.

The user's consent to the processing of data in accordance with Art. 6 (1) (a) GDPR constitutes the necessary legal basis for this. If personal data is transmitted via email, Art. 6 (1) (f) GDPR constitutes the necessary legal basis for the processing of the data. If the purpose of this contact is also to conclude a contract, Art. 6 (1) lit. b GDPR also constitutes the necessary legal basis for processing.

3. Purpose of data processing

We process the personal data collected via the input mask exclusively for the purpose of processing your contact request. If you contact us by email, this also constitutes the necessary legitimate interest in the processing of the data.

We use the other personal data processed during the sending process to prevent misuse of the contact form and to secure our IT systems.

4. Duration of storage

If the data collection is no longer necessary to achieve the purpose, the data will be deleted. This applies to personal data from the input mask of the contact form and data sent by email once the respective communication with you has ended. This is the case when the circumstances indicate that the matter in question has been conclusively clarified.

Any other personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Right to object and right to erasure

You may revoke your consent to the processing of your personal data at any time. If you contact us by email, you may object to the storage of your personal data at any time. Please note that in this case, further communication with you can no longer be continued.

To revoke your consent and object to the storage of your data, please send an informal email or letter to the contact person.

In this case, personal data stored for the purpose of establishing contact will be completely deleted.

VII. Disclosure of your data to third parties

In order to make our platform and website as pleasant and convenient as possible for you as a user, we occasionally use services provided by external service providers. Below, you have the opportunity to find out about the data protection regulations governing the use of the services and functions employed, so that you can also exercise your rights with these service providers if necessary.

Google Analytics
Google Tag Manager
Social media plugins
Hotjar
SalesViewer

1. Google Analytics

Our website uses the services of Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.

The legal basis for use is our legitimate interest pursuant to Art. 6 (1) (f) GDPR in finding out how often and in what way our website is used in order to continuously improve it.

Google participates in the Privacy Shield Agreement between the European Union and the United States and has certified itself accordingly. Google is therefore committed to complying with the standards and regulations of European data protection law. For more information, please visit the following link:https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

We have concluded a data processing agreement with Google in accordance with Art. 28 GDPR, so that Google uses the information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering, and to provide us with further services associated with the use of this online offering and the use of the Internet, and to continuously improve performance. This includes the option of creating pseudonymous usage profiles from the processed data.

Google Analytics is only used on our homepage with IP anonymization activated, so that the IP address of users within member states of the European Union or in other signatory states to the Agreement on the European Economic Area is usually truncated by Google.

Furthermore, the IP address transmitted by the browser of the visitor to our homepage is not merged with other Google data. You can also prevent the transmission of data generated by cookies and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:http://tools.google.com/dlpage/gaoptout?hl=de.

For more information about Google's use of data, settings, and options for opting out, please refer to Google's privacy policy (https://policies.google.com/technologies/ads) and the settings for displaying advertisements by Google(https://adssettings.google.com/authenticated).

The personal data collected from visitors to our website is deleted or anonymized by Google after 14 months.

2. Google Tag Manager

We use Google Tag Manager so that we can manage the marketer website tags via a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.http://www.google.de/tagmanager/use-policy.html

3. Social media plugins

Our platform and website use social media plugins ("plugins") from various social networks. These plugins allow you to share content or recommend products, for example. The plugins are disabled by default on our websites and therefore do not send any data. You can activate the plugins by clicking on the "Activate social media" button. The plugins can of course be deactivated again with a single click.

When these plugins are activated, your browser establishes a direct connection to the servers of the respective social network as soon as you visit a page on our website. The content of the plugin is transmitted directly from the social network to your browser and integrated into the website.

By integrating the plugins, the social network receives the information that you have accessed the corresponding page of our website. If you are logged into the social network, it can assign the visit to your account. If you interact with the plugins, for example by clicking the Facebook "Like" button or posting a comment, the corresponding information is transmitted from your browser directly to the social network and stored there.

For information on the purpose and scope of data collection and the further processing and use of data by social networks, as well as your rights and settings options for protecting your privacy, please refer to the privacy policies of the respective networks or websites. The links to these can be found below.

Even if you are not logged into social networks, data can still be sent to the networks from websites with active social plugins. An active plugin sets a cookie with an identifier each time the website is accessed. Since your browser sends this cookie to the network server without asking every time you connect, the network could in principle create a profile of which websites the user associated with the identifier has visited. It would then also be possible to assign this identifier to a person at a later date, for example when they log in to the social network.

If you do not want social networks to collect data about you via active plugins, you can either simply deactivate the social plugins on our websites with a single click or select the "Block third-party cookies" function in your browser settings. The browser will then not send any cookies to the server for embedded content from other providers. However, with this setting, other cross-page functions may no longer work in addition to the plugins.

We use the following plugins on our platform and website:

a) YouTube

b) Facebook

c) Twitter

d) TikTok

e) LinkedIn

f) Instagram

a) YouTube

Our platform uses plugins from the Google-operated YouTube site. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. Further information on the handling of user data can be found in YouTube's privacy policy.https://policies.google.com/privacy?hl=de&gl=de

b) Facebook

We use plugins from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). You can find the link to Facebook's privacy policy here:Facebook privacy policy.

When using Facebook, we also use Facebook Pixel. With the help of Facebook Pixel, Facebook is able to identify visitors to our online offering as a target group for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use Facebook Pixel to display the Facebook ads we place only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products, which are determined based on the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not appear annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). 12.4. The Facebook pixel is integrated directly by Facebook when you visit our websites and may store a so-called cookie on your device. If you then log in to Facebook or visit Facebook while logged in, your visit to our online offering will be noted in your profile. The data collected about you is anonymous to us, so it does not allow us to draw any conclusions about the identity of users. However, the data is stored and processed by Facebook so that it can be linked to the respective user profile and used by Facebook for its own market research and advertising purposes. If we transmit data to Facebook for comparison purposes, it is encrypted locally in the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of matching the data with the data encrypted by Facebook. 12.5. Furthermore, when using the Facebook pixel, we use the additional function "extended matching," whereby data for the formation of target groups ("custom audiences" or "lookalike audiences") is transmitted to Facebook in encrypted form. Further information.

c) Twitter (X)

Plugins from the short message network Twitter Inc. (Twitter) are integrated into our website. You can recognize the Twitter plugins (tweet button) by the Twitter logo on our site. An overview of tweet buttons can be found here (https://about.twitter.com/resources/buttons).

When you visit a page on our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter thereby receives the information that you have visited our site with your IP address. If you click on the Twitter "tweet button" while you are logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or how it is used by Twitter.

If you do not want Twitter to be able to associate your visit to our pages, please log out of your Twitter user account.
For more information, please refer to Twitter's privacy policy (https://twitter.com/privacy).

d) Instagram

We use features from the social media network Instagram, owned by Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA, on our website. The functions for embedding Instagram content (embed function) allow us to display images and videos. When you visit pages that use these functions, data (IP address, browser data, date, time, cookies) is transmitted to Instagram, stored, and evaluated. If you have an Instagram account and are logged in, this data will be assigned to your personal account and the data stored therein. The privacy policy, which information Instagram collects and how they use it, can be found athttps://help.instagram.com/519522125107875.

e) TikTok

TikTok Inc., 10100 Venice Blvd., Culver City, CA 90232, USA (hereinafter referred to as "TikTok") is responsible for processing the personal data provided by visitors when they use the TikTok app.

We collect, process, and use your personal data provided to us by TikTok solely for the purpose of providing information to which you have consented and with your consent for display on our TikTok profile. The processing of your personal data is carried out exclusively on the basis of the applicable data protection regulations of NextGen Media UG (limited liability), i.e., depending on the case—specifically on the basis of your prior consent given to NextGen Media UG (limited liability), a legal obligation, a contract concluded with you, or after weighing legitimate interests in individual cases.

Insofar as we process personal data on the basis of consent, we only do so as long as you do not object or revoke your consent.

TikTok collects personal data to evaluate user behavior. TikTok provides a certain portion of this data to TikTok profile operators in anonymized and aggregated form. This data includes the number of new followers and demographic data such as gender and country, without any reference to identifiable individuals. We are therefore unable to identify any visitors to the TikTok profile.

As the operator of our profile on TikTok, we receive anonymized statistical data (known as insights) from TikTok. We cannot draw any conclusions about individual visitors from this data. Furthermore, this statistical data cannot be linked to the profile data of our users. The data contained in the statistics is used by NextGen Media UG (limited liability) exclusively for the analysis of user behavior so that we can better tailor our TikTok profile and our offerings to the needs and interests of our users.

We only use the data provided to us by TikTok that is necessary for the purposes stated here. If further data is made available, we will not retrieve it and therefore will not process it.

We only receive anonymized information and statistics if the visitor to our TikTok profile is registered with TikTok. However, we would like to point out that as a result of directly accessing our TikTok profile, for example by reading log files (e.g., IP address) or setting cookies, TikTok itself may record this data.

The use of your data transmitted to us by TikTok is based on Art. 6 para. 1 lit. f GDPR:

to perform data analysis,
to statistically record the use of our TikTok page and to evaluate it for the purpose of optimizing our offer for you,
for the continuous improvement and management of our offerings and products.

Our legitimate interest pursuant to Art. 6 (1) (f) GDPR follows from the above points.

We have no influence on the collection of data by TikTok, nor on the data processing operations carried out by TikTok. We are also unaware of the scope of data collection, the purposes of processing, or the storage periods. The forwarding of data in anonymized statistics cannot therefore be ruled out.

If you, as a registered user, follow/subscribe to our TikTok profile or like it, TikTok adds your profile to the list of all followers/subscribers of that profile. TikTok then makes our posts and videos available to you in your news feed (under Home). The list of our subscribers is provided to NextGen Media UG (limited liability) by TikTok. However, this list only contains data that is public, i.e., information that is voluntarily provided by the registered user via their TikTok settings. The respective user decides for themselves what this data is in their TikTok settings. In addition, each user has the option of customizing their privacy settings in their TikTok settings (under Privacy and Security).

We can also assign comments on our TikTok posts, likes, and activity on our profile to individual users.

The processing of this data serves the above-mentioned purpose and is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your voluntary consent given by registering and logging in to TikTok.

We do not know the full scope of data collection, i.e., what data TikTok collects from visitors and for what purposes TikTok processes this data. TikTok has not provided us with the necessary information. We ask for your understanding that we can only provide you with information to the extent of our knowledge about data processing within our area of responsibility and our influence on data processing.

We would also like to point out that the operators of the platform, which can be accessed on various devices, are mostly US companies and therefore your data may also be processed outside the European Union and the European Economic Area. This may give rise to risks, as it could, for example, make it more difficult to enforce users' rights. According to its privacy policy, TikTok uses the service providers and host providers Alibaba Cloud, Amazon Web Services, StackPack, LLC (Highwinds), and Akamai Technologies, Inc. in the US, all of which are certified under the Privacy Shield and commit to complying with EU data protection standards. Further details are set out in the privacy policies of the individual providers and TikTok.

TikTok: TikTok Inc., 10100 Venice Blvd., Culver City, CA 90232, USA

TikTok's data protection officer can be contacted atdpo@tiktok.com.

Further information on data processing by TikTok can be found in TikTok's privacy policy at:https://www.tiktok.com/legal/privacy-policy?lang=de

f) LinkedIn

Our website also uses the "Share" function of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. If you click on the LinkedIn "share button" (plug-in), you will be redirected to your user account in a separate browser window, provided you are logged into your LinkedIn user account, and you can share the electronic publication stored on our website by adding a comment. The plug-in establishes a direct connection between your browser and the LinkedIn server. LinkedIn receives the information that you have visited our website with your IP address. LinkedIn can then associate your visit to our website with you and your user account. Please note that we have no knowledge of the content of the (personal) data transmitted or its use by LinkedIn. For more information, please refer to LinkedIn's privacy policy at:https://www.linkedin.com/legal/privacy-policy.

4. Hotjar

We use Hotjar to better understand our users' needs and to optimize this service and their experience. Hotjar is a technology service that helps us better understand our users' experience (e.g., how much time they spend on which pages, which links they click, what users like and dislike, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data about our users' behavior and their devices. This includes a device's IP address (processed during your session and stored in anonymized form), the device's screen size, device type (unique device identifiers), browser information, geographic location (country only), and preferred language to display our website. Hotjar stores this information in a pseudonymized user profile on our behalf. Hotjar is contractually obligated not to sell any of the data collected on our behalf.

For more information, see the "About Hotjar" section on the Hotjar support page.

5. SalesViewer

On this website, data is collected and stored for marketing, market research, and optimization purposes using SalesViewer® technology from SalesViewer® GmbH on the basis of the legitimate interests of the website operator (Art. 6 (1) (f) GDPR). For this purpose, a JavaScript-based code is used to collect company-related data and information about its use. The data collected with this technology is encrypted using a non-reversible one-way function (known as hashing). The data is immediately pseudonymized and is not used to personally identify visitors to this website. The data stored within the scope of Salesviewer® is deleted as soon as it is no longer required for its intended purpose and there are no legal retention obligations that prevent its deletion. You can object to the collection and storage of data at any time with future effect by clicking on this link https://www.salesviewer.com/opt-out to prevent SalesViewer® from collecting data on this website in the future. An opt-out cookie for this website will be stored on your device. If you delete your cookies in this browser, you will need to click on this link again.
The data collected will be used for marketing purposes. Based on the information collected, we can identify you as a potential customer and may contact you to provide you with customized offers.

VIII. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR. This means you have the following rights vis-à-vis the controller:

1. Right to information

You may request confirmation from the controller as to whether we process personal data relating to you.

If such processing takes place, you may request the following information from the controller:

the purposes of processing;
the categories of personal data that are processed;
the recipients or categories of recipients to whom your personal data has been or will be disclosed;
where possible, the planned duration for which your personal data will be stored, or, if this is not possible, the criteria for determining this duration;
the existence of a right to rectification or erasure of personal data concerning you, or to restriction of processing by the controller, or a right to object to such processing;
the existence of a right of appeal to a supervisory authority;
if the personal data are not collected from the data subject, any available information on the source of the data;
the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You may also request information about whether your personal data is being transferred to a third country or to an international organization. If this is the case, you may request information about the appropriate safeguards in connection with the transfer in accordance with Art. 46 GDPR.

2. Right to rectification

You may request that the controller correct any inaccurate personal data concerning you. You may also request that incomplete personal data be completed, including by means of a supplementary statement, taking into account the purposes of the processing. The controller shall make the requested corrections without delay.

3. Right to erasure ("right to be forgotten")

You may request that the controller delete your personal data without delay, and the controller is obliged to delete this data without delay if one of the following reasons applies:

Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
You revoke your consent on which the processing was based in accordance with Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.
You object to the processing in accordance with Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing in accordance with Art. 21 (2) GDPR.
Your personal data has been processed unlawfully.
The erasure of your personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
Your personal data was collected in relation to the information society services offered in accordance with Art. 8 (1) GDPR.

If the controller has made the personal data concerning you public and is obliged to delete it in accordance with Article 17(1) of the GDPR, it shall take reasonable steps, including technical measures, taking into account the available technology and implementation costs, to inform other controllers processing the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.

However, the right to erasure does not apply if processing is subsequently necessary

to exercise the right to freedom of expression and information;
for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the above-mentioned right to erasure is likely to render impossible or seriously impair the achievement of the objectives of such processing; or
to assert, exercise, or defend legal claims.

4. Right to restriction of processing

You may request that the controller restrict the processing of your personal data if one of the following conditions applies:

the accuracy of your personal data has been contested by you, for a period enabling the controller to verify the accuracy of your personal data;
the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of your personal data instead;
the controller no longer needs your personal data for the purposes of processing, but you need it to assert, exercise, or defend legal claims, or
You have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh yours.

If the processing of your personal data has been restricted, this personal data may—apart from its storage—only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If you have obtained a restriction of processing in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

5. Right to information

If you have exercised the aforementioned rights to rectification, erasure, or restriction of processing against the controller, the controller must notify all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort.

Upon your request, the controller must inform you of these recipients.

6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR, and
processing is carried out using automated procedures.

When exercising this right, you also have the right to have your personal data transferred directly from one controller to another, where technically feasible.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Similarly, the right to data portability must not infringe on the rights and freedoms of other individuals.

7. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.

The controller will no longer process your personal data unless they can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

In connection with the use of information society services, you may exercise your right to object by automated means using technical specifications, notwithstanding Directive 2002/58/EC.

8. Right to revoke the declaration of consent under data protection law

You may revoke your declaration of consent under data protection law at any time. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent prior to revocation.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

The supervisory authority responsible for us is the ...

IX. Current status and changes to this privacy policy

This privacy policy is currently valid and was last updated in July 2020.

Further development of our platform and website and their offerings, or changes to legal provisions, court rulings, or official requirements may make it necessary to amend this privacy policy.