Data Protection
As of August 2025
1. Responsible body
Leadmaxify GmbH,
represented by Fazal-E Elahi,
Rahel-Hirsch-Strasse 10,
10557 Berlin,
Germany
2. Data collection when visiting our website
2.1 When you use our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the website server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
– The website you visited
– Date and time of access
– Amount of data sent in bytes
– Source/referrer from which you accessed the page
– Browser used
– Operating system used
– IP address used (possibly in anonymized form).
This processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.
3. Hosting & Content Delivery Network
We use a provider to host our website and display its content. This provider, either directly or through selected subcontractors, operates exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have a data processing agreement with this provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
4. Cookies
To make your visit to our website more attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow us to save your website settings (so-called “persistent cookies”). In the latter case, you can find information about the storage duration in your web browser’s cookie settings.
If any of the cookies we use process personal data, this processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of a contract, in accordance with Article 6(1)(a) GDPR if you have given your consent, or in accordance with Article 6(1)(f) GDPR to protect our legitimate interests in ensuring the best possible website functionality and a user-friendly and effective website experience.
You can configure your browser to notify you when cookies are set and allow you to decide whether to accept them individually, or to block cookies in certain cases or entirely.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5. Making contact
5.1 Calendly
For the provision of an online appointment booking function, we use the services of the following provider: Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA.
For the purpose of scheduling appointments, in accordance with Art. 6 Para. 1 lit. b GDPR, first and last name as well as email address (and, if applicable, telephone number if a telephone appointment is requested) are collected and, in accordance with Art. 6 Para. 1 lit. f GDPR, transmitted to the provider based on our legitimate interest in effective customer management and efficient appointment scheduling, and stored there for appointment organization.
After the appointment has taken place or after the agreed appointment period has expired, your data will be deleted by the provider.
We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
5.2 When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected when using a contact form is indicated on the respective form. This data is stored and used solely for the purpose of responding to your inquiry, contacting you, and for the associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after your inquiry has been fully processed. This is the case when it can be inferred from the circumstances that the matter has been conclusively resolved and provided that no statutory retention obligations exist.
5.3 Applications via Facebook Lead Ads / Instant Forms
For recruiting applicants, we use, among other things, so-called Facebook Lead Ads (Instant Forms) from the social network Facebook, operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta”) .
When you enter your application data via such a form, it is initially stored directly at Meta and then transmitted to us. We process this data exclusively for the purpose of carrying out the application process.
Legal basis:
Your application data will be processed on the basis of Section 26 Paragraph 1 of the German Federal Data Protection Act (BDSG ) (establishment of an employment relationship).
If you give us your consent (e.g. for longer storage in a talent pool), data processing is based on Art. 6 para. 1 lit. a GDPR .
Processing by Meta:
The primary storage and processing of data is handled by Meta. Further information on data processing by Meta can be found in Meta’s privacy policy:
👉 https://www.facebook.com/policy.php
Disclosure and use by us:
After transmission by Meta, we process your application data internally solely for the purpose of candidate selection. It will not be shared with third parties.
Storage duration:
Your application data will generally be deleted no later than 6 months after the application process has been completed , unless you have expressly consented to a longer storage period.
If you are hired, your data will be transferred to your personnel file and processed in accordance with legal regulations.
Revocation and rights
You have the right to withdraw your consent to data processing at any time with effect for the future. Please send your withdrawal to the contact details provided in the legal notice.
Furthermore, you have the rights under Articles 15 et seq. GDPR (access, rectification, erasure, restriction, objection, data portability).
5.4 Using Typeform for lead capture via Meta Ads
For certain lead generation campaigns, we use a form from the service Typeform , operated by
Typeform SL, Carrer Bac de Roda, 163, local, 08018 Barcelona, Spain.
The form is displayed via our meta ads (Facebook & Instagram Ads) to receive inquiries from interested users.
What data is processed?
Depending on the campaign, the following personal data may be collected via the Typeform form:
name
E-mail address
Telephone number
Company information
Information on marketing needs
Further voluntary information
Purpose of processing:
The processing is carried out for the purpose of:
Contact
Lead qualification
Provision of requested information
Preparing for a non-binding consultation
Analysis and optimization of our marketing measures
The legal basis is Art. 6 para. 1 lit. b GDPR (pre-contractual measures) and Art. 6 para. 1 lit. f GDPR (legitimate interest in effective marketing).
Data processing by Typeform
Typeform acts as a data processor for us within the meaning of Article 28 GDPR.
Data may be processed within the EU and, in some cases, via separate safeguards (e.g., EU Standard Contractual Clauses) when services outside the EU are used.
Further information on Typeform’s data protection policy can be found here:
https://admin.typeform.com/to/dwk6gt
6. Web analytics services
6.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.
By default, Google Analytics 4 sets cookies when you visit the website. These cookies are small text files that are stored on your device and collect certain information. This information includes your IP address, which Google shortens by removing the last digits to prevent it from being directly linked to you.
The information is transmitted to Google servers and processed there. This may also involve transfers to Google LLC, which is based in the USA.
Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide other services relating to website activity and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected through the use of Google Analytics 4 is stored for two months and then deleted.
All processing described above, in particular the setting of cookies on your device, only takes place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service using the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with Google, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites
Demographic Features:
Google Analytics 4 uses the special “demographic features” function to generate statistics about the age, gender, and interests of website visitors. This is achieved by analyzing advertising and information from third-party providers. This allows for the identification of target groups for marketing activities. However, the collected data cannot be attributed to any specific individual and is deleted after a storage period of two months.
Google Signals:
As an extension to Google Analytics 4, this website may use Google Signals to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6 Para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including those related to cross-device conversions. We do not receive any personally identifiable information from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the “Personalized Ads” feature in your Google account settings. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de
UserIDs:
As an extension to Google Analytics 4, the “UserIDs” function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 Para. 1 lit. a GDPR, have created an account on this website, and log in to this account on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
6.2 Google Tag Manager
This website uses “Google Tag Manager,” a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).
Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and for calibrating, controlling, and linking them to conditions via a unified user interface. Google Tag Manager itself does not store or read any information on user devices. The service also does not perform any independent data analysis. However, when you visit our website, Google Tag Manager transmits your IP address to Google, where it may be stored. Transmission to servers of Google LLC in the USA is also possible.
This processing only takes place if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, Google Tag Manager will not be used during your visit to our website. You can withdraw your consent at any time with effect for the future. To exercise your right to withdraw consent, please deactivate this service using the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with European data protection standards.
Further legal information regarding Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de
7. Retargeting/remarketing and conversion tracking
7.1 Meta Pixel with Enhanced Matching
Within our online services, we use the “Meta Pixel” service from the following provider in enhanced matching mode: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).
When a user clicks on an advertisement we place on Facebook or Instagram, the URL of our linked page is extended by a parameter using the “Meta Pixel.” This URL parameter is then entered into the user’s browser after redirection via a cookie set by our linked page itself. Furthermore, this cookie collects specific customer data, such as the email address, which we collect on our website linked to the Facebook or Instagram ad during processes such as purchases, account logins, or registrations (enhanced matching). The cookie is then read and enables the transmission of the data, including the specific customer data, to Meta.
We use “Meta Pixel” with advanced matching to make our advertisements (“ads”) on Facebook and/or Instagram more effective and to ensure that they match users’ interests or exhibit certain characteristics (e.g., interests in specific topics or products, determined based on websites visited) that we transmit to Meta (“Custom Audiences”).
We also analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an ad (conversion). Compared to the standard version of “Meta Pixel,” the advanced matching feature helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All transmitted data is stored and processed by Meta, enabling it to be linked to the respective user profile. Meta can then use the data for its own advertising purposes in accordance with Meta’s data policy (https://www.facebook.com/about/privacy/). This data may allow Meta and its partners to display ads on and off Facebook.
All processing described above, in particular the setting of cookies for reading information on your device, will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
The information generated by Meta is generally transferred to and stored on a Meta server; in this context, data may also be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with European data protection standards.
7.2 Google Ads Remarketing
This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
For this purpose, Google places a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. Further data processing only takes place if you have consented to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalize ads you see on the web. If you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to create target audiences. As part of using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC. in the USA.
All processing described above, in particular the setting of cookies for reading information on your device, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, retargeting technology will not be used during your visit to our website.
You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
Details regarding the processing initiated by Google and how Google handles website data can be found here: https://policies.google.com/technologies/partner-sites.
Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/
7.3 Google Ads Conversion Tracking
This website uses the online advertising program “Google Ads” and, within the framework of Google Ads, the conversion tracking service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites using advertising materials (so-called Google AdWords). Based on the data from the advertising campaigns, we can determine the success of individual advertising measures. Our aim is to show you advertising that is relevant to you, to make our website more interesting for you, and to achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies typically expire after 30 days and are not used for personal identification. If a user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of different Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. These customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can personally identify users. The use of Google Ads may also involve the transfer of personal data to the servers of Google LLC in the USA.
Details regarding the processing triggered by Google Ads Conversion Tracking and Google’s handling of website data can be found here: https://policies.google.com/technologies/partner-sites.
All processing described above, in particular the setting of cookies to read information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
Furthermore, you can permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
Please note that certain functions of this website may not be available or may be limited if you have disabled the use of cookies.
Google’s privacy policy can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
8. Page functionalities
8.1 Facebook Plugins
Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
These plugins enable direct interaction with content on the social network.
To enhance the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called “2-click” or “Shariff” solution.
This integration ensures that when you access a page on our website containing such plugins, no connection is established with the provider’s servers.
Only when you activate the plugins and thereby give your consent to the data transfer in accordance with Art. 6 Para. 1 lit. a GDPR, will your browser establish a direct connection to the provider’s servers. In this process, regardless of whether you are logged into an existing user profile, information about your device (including your IP address), your browser, and your browsing history will be transmitted to the provider and may be further processed there.
If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the plugin by clicking it again. However, this revocation does not affect data that has already been transferred to the provider.
Data may also be transferred to: Meta Platforms Inc., USA.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
8.2 LinkedIn Plugins
Our website uses plugins from the social network of the following provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
These plugins enable direct interaction with content on the social network.
To enhance the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called “2-click” or “Shariff” solution.
This integration ensures that when you access a page on our website containing such plugins, no connection is established with the provider’s servers.
Only when you activate the plugins and thereby give your consent to the data transfer in accordance with Art. 6 Para. 1 lit. a GDPR, will your browser establish a direct connection to the provider’s servers. In this process, regardless of whether you are logged into an existing user profile, information about your device (including your IP address), your browser, and your browsing history will be transmitted to the provider and may be further processed there.
If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the plugin by clicking it again. However, this revocation does not affect data that has already been transferred to the provider.
Data may also be transferred to: LinkedIn Inc., USA.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
8.3 YouTube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transferred to: Google LLC, USA.
When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the content, at the latest when the video is played. Certain information, including your IP address, is transmitted to the provider in this process.
If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent misuse.
If you are logged into a user account with the provider during your visit, your data will be directly associated with your account when you click on a video. If you do not want this association with your account, you must log out before clicking the play button.
All of the aforementioned processing activities, in particular the setting of cookies for reading information on your device, will only take place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
8.4 Google Maps
This website uses an online map service provided by Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Maps is a web service for displaying interactive maps to visually represent geographical information. Using this service allows us to show you our location and makes it easier for you to find directions.
When you access pages that include a Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored on Google servers. This may also involve transmission to the servers of Google LLC in the USA. This occurs regardless of whether Google provides a user account that you are logged into or whether a user account exists at all. If you are logged into Google, your data will be directly associated with your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them.
The collection, storage, and analysis are carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on Google’s legitimate interest in displaying personalized advertising, conducting market research, and/or designing Google websites to meet user needs. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree to the future transfer of your data to Google in connection with the use of Google Maps, you can also completely deactivate the Google Maps web service by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, will then be unavailable.
Where legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6 Paragraph 1 Letter a of the GDPR. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please follow the instructions for submitting an objection as described above.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with European data protection standards.
Further information on Google’s data protection practices can be found here: https://business.safety.google/intl/de/privacy/
8.5 Google reCAPTCHA
This website uses the CAPTCHA service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transferred to Google LLC, USA.
The provider uses “Google Fonts,” i.e., fonts downloaded from the internet by Google, for the visual design of the CAPTCHA window. No further information beyond that already transmitted to Google via the reCAPTCHA functionality is processed.
The service verifies whether an entry is made by a human or abusively by automated processing and blocks spam, DDoS attacks, and similar automated malicious access. To ensure that an action is performed by a human and not an automated bot, the provider collects the IP address of the device used, identification data of the browser and operating system type, and the date and duration of the visit, and transmits this information to the provider’s servers for evaluation. Cookies may be used in this process; these are small text files that are stored in the browser of your device.
If the processing described above is based on cookies, they will only be set if you have given us your explicit consent in accordance with Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual responsibility on the internet and preventing misuse and spam in accordance with Article 6 Paragraph 1 Letter f GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/
9. Tools and other items
Cookie Consent Tool
: This website uses a “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users upon visiting the site as an interactive interface, where consent for specific cookies and/or cookie-based applications can be granted by ticking boxes. By using this tool, all cookies/services requiring consent are only loaded if the respective user grants the corresponding consent by ticking the boxes. This ensures that such cookies are only placed on the user’s device if consent has been given.
The tool uses technically necessary cookies to store your cookie preferences. No personal user data is processed in this process.
If, in individual cases, the processing of personal data (such as the IP address) occurs for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Article 6(1)(f) GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management and thus in the legally compliant design of our website.
A further legal basis for the processing is Article 6(1)(c) GDPR. As the data controller, we are legally obligated to make the use of cookies that are not technically necessary dependent on the respective user’s consent.
Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further information about the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.
10. Rights of the data subject
10.1 The applicable data protection law grants you the following rights as a data subject (rights of access and intervention) with regard to the processing of your personal data by the controller, whereby reference is made to the legal basis listed for the respective requirements for exercising these rights: – Right of
access pursuant to Art. 15 GDPR; – Right to rectification pursuant to Art. 16 GDPR; – Right to erasure pursuant to Art. 17 GDPR; – Right to restriction of processing pursuant to Art. 18 GDPR; – Right to be informed pursuant to Art. 19 GDPR; – Right to data portability pursuant to Art. 20 GDPR; – Right to withdraw consent pursuant to Art. 7 para. 3 GDPR; – Right to lodge a complaint pursuant to Art. 77 GDPR.
10.2 Right to object:
If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.
If you exercise your right to object, we will cease processing the data in question. Further processing will only be permitted if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You can exercise your right to object as described above.
If you exercise your right to object, we will cease processing the data in question for direct marketing purposes.
11. Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – where applicable – by the respective statutory retention period (e.g., commercial and tax law retention periods).
When processing personal data based on explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the data in question will be stored until you withdraw your consent. If
statutory retention periods exist for data processed in the context of contractual or quasi-contractual obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the expiry of the retention periods, unless it is still required for the performance of a contract or for taking steps prior to entering into a contract and/or we have a legitimate interest in its continued storage.
When processing personal data based on Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.
When processing personal data for direct marketing purposes based on Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Article 21(2) GDPR.
Unless otherwise specified in this privacy policy regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
Copyright notice: This privacy policy was created by the specialist lawyers of the IT law firm and is protected by copyright (https://www.it-recht-kanzlei.de)