Le Duigou
Service
Privacy

Privacy Policy

1) Introduction and contact details of the data controller

1.1We are delighted that you are visiting our website and thank you for your interest. Below, we provide information on how we handle your personal data when you use our website. Personal data refers to any data that can be used to identify you personally.

1.2The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is LD TRADING & SERVICES GmbH, Sankt-Ulrich-Strasse 34, 6840 Götzis, Austria, Tel.: Please contact us by email, Email: webshop@leduigou.com. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data collection when visiting our website

2.1When you use our website purely for information purposes – that is, if you do not register or otherwise provide us with information – we only collect the data that your browser transmits to the website server (so-called ‘server log files’). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

The website you have visited
Date and time of access
Amount of data transmitted in bytes
Source/referrer from which you accessed the page
Browser used
Operating system used
IP address used (where applicable: in anonymised form)

Data processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. We do, however, reserve the right to review the server log files retrospectively should there be specific indications of unlawful use.

2.2For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the data controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string ‘https://’ and the padlock icon in your browser address bar.

3) Cookies

To make your visit to our website more engaging and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”; in some cases, these cookies remain on your device for longer and enable page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of your web browser’s cookie settings.

Where personal data is also processed by individual cookies we use, the processing is carried out in accordance with Article 6(1)(b) of the GDPR either for the performance of a contract, in accordance with Article 6(1)(a) of the GDPR where consent has been given, or in accordance with Article 6(1)( Article 6(1)(f) of the GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective browsing experience.

You can configure your browser so that you are notified when cookies are set and can decide on a case-by-case basis whether to accept them, or

you

can block the acceptance of cookies in specific cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

4)

Contacting us When you contact us (e.g. via the contact form or by email), personal data is processed – solely for the purpose of handling and responding to your enquiry and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) of the GDPR. If the purpose of contacting you is to enter into a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR. Your data will be deleted if the circumstances indicate that the matter in question has been conclusively resolved and provided that there are no statutory retention obligations to the contrary.

5) Data processing when opening a customer account

In accordance with Article 6(1)(b) of the GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. You can find out which data is required to open an account by referring to the input fields on the relevant form on our website.

You may delete your customer account at any time by sending a message to the above-mentioned address of the data controller. Once your customer account has been deleted, your data will be deleted provided that all contracts concluded in connection with it have been fully settled, there are no statutory retention periods that prevent this, and we no longer have a legitimate interest in continuing to store the data.

6) Use of customer data for direct marketing

Subscription to our email newsletter

If you subscribe to our email newsletter, we will send you regular updates on our offers. The only mandatory information required to receive the newsletter is your email address. Providing any further data is voluntary and is used to enable us to address you personally. We use the so-called A double opt-in procedure, which ensures that you will only receive newsletters once you have expressly confirmed your consent to receive them by clicking on a verification link sent to the email address you provided.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Article 6(1)(a) of the GDPR. In doing so, we store your IP address as recorded by your Internet Service Provider (ISP), as well as the date and time of registration, so that we can trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used strictly for the purpose for which it was collected.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the data controller named at the beginning of this notice. Once you have unsubscribed, your email address will be deleted immediately from our newsletter mailing list, unless you have expressly consented to the continued use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

7) Data processing for order fulfilment

7.1Where necessary for the performance of the contract for delivery and payment purposes, the personal data we collect will be passed on to the contracted transport company and the contracted bank in accordance with Article 6(1)(b) of the GDPR.

Where we are obliged to provide you with updates for goods containing digital elements or for digital products on the basis of a relevant contract, we will process the contact details you provided when placing your order in order to fulfil our statutory information obligations in accordance with Article 6(1)(b) c GDPR. Your contact details will be used strictly for the specific purpose of sending you notifications regarding updates we are required to provide, and will be processed by us for this purpose only to the extent necessary to provide the relevant information.

To process your order, we also work with the service provider(s) listed below, who assist us, either fully or in part, with the fulfilment of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

7.2Disclosure of personal data to delivery service providers

- DHL

We use the following provider as our transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We pass on your email address and/or telephone number in accordance with Article 6(1)(a) of the GDPR prior to delivery of the goods for the purpose of arranging a delivery date or We will pass on the delivery notification to the supplier, provided you have given your express consent to this during the ordering process. Otherwise, for the purposes of delivery in accordance with Article 6(1)(b) of the GDPR, we will only pass on the recipient’s name and the delivery address to the supplier. This information is only passed on to the extent necessary for the delivery of the goods. In this case, it is not possible to arrange the delivery date in advance with the provider or to receive a delivery notification.

Consent may be withdrawn at any time with future effect by contacting the data controller named above or the provider.
- DPD

We use the following provider as our transport service provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany

We will pass on your email address and/or telephone number in accordance with Article 6(1)(a) of the GDPR prior to delivery of the goods for the purpose of arranging a delivery date or We will pass on the delivery notification to the supplier, provided you have given your express consent to this during the ordering process. Otherwise, for the purposes of delivery in accordance with Article 6(1)(b) of the GDPR, we will only pass on the recipient’s name and the delivery address to the supplier. This information is only disclosed to the extent necessary for the delivery of the goods. In this case, it is not possible to arrange the delivery date in advance with the supplier or to provide a delivery notification.

Consent may be withdrawn at any time with future effect by contacting the data controller named above or the supplier.
- DPD Austria

We use the following provider as our transport service provider: DPD Direct Parcel Distribution Austria GmbH, Arbeitergasse 46, Leopoldsdorf 2333, Austria

We process your email address and/or telephone number in accordance with Article 6(1)(a) a GDPR, we will pass on your data to the supplier prior to the delivery of the goods for the purpose of arranging a delivery date or notifying you of the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, for the purposes of delivery in accordance with Article 6(1)(b) of the GDPR, we will only pass on the recipient’s name and the delivery address to the supplier. This information will only be passed on to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or It is not possible to provide a delivery notification

Consent may be withdrawn at any time, with effect for the future, by notifying the data controller named above or the provider.
- Austrian Post

We use the following provider as our transport service provider: Austrian Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria

We will pass on your email address and/or telephone number to the provider in accordance with Article 6(1)(a) of the GDPR prior to delivery of the goods for the purpose of arranging a delivery date or to notify you of the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery in accordance with Article 6(1)(b) of the GDPR, we will only pass on the recipient’s name and the delivery address to the provider. This information is only passed on to the extent necessary for the delivery of the goods. In this case, it is not possible to arrange the delivery date in advance with the supplier or to receive a delivery notification.

Consent may be withdrawn at any time with future effect by notifying the data controller named above or the supplier.
- UPS

We use the following provider as our transport service provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany

We will pass on your email address and/or telephone number to the provider in accordance with Article 6(1)(a) of the GDPR prior to delivery of the goods for the purpose of arranging a delivery date or notifying you of the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery, we will only pass on the recipient’s name and the delivery address to the provider in accordance with Article 6(1)(b) of the GDPR. Personal data will only be disclosed to the extent necessary for the delivery of goods. In this case, it is not possible to arrange the delivery date in advance with the

supplier

or to receive a delivery notification.

Consent may be withdrawn at any time with future effect by contacting the data controller named above or the supplier.

7.3Use of payment service providers (payment services)

- Apple Pay

If you choose the ‘Apple Pay’ payment method provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing takes place via the ‘Apple Pay’ function on your device running iOS, watchOS or macOS by debiting a payment card stored with ‘Apple Pay’. Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. To authorise a payment, you will therefore need to enter a code that you have previously set, and verify your identity using the ‘Face ID’ or ‘Touch ID’ function on your device.

For the purposes of payment processing, the information you provide during the ordering process, together with details of your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data using a developer-specific key before the data is transmitted to the payment service provider associated with the payment card stored in Apple Pay in order to process the payment. The encryption ensures that only the website through which the purchase was made can access the payment details. Once the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm that the payment was successful.

Where personal data is processed in connection with the transfers described, such processing is carried out solely for the purpose of payment processing in accordance with Article 6(1)(b) of the GDPR.

Apple stores anonymised transaction data, including the approximate purchase amount, the approximate date and time, and an indication of whether the transaction was successfully completed. Anonymisation completely precludes any link to an individual. Apple uses the anonymised data to improve “Apple Pay” and other Apple products and services.

When you use Apple Pay on your iPhone or Apple Watch to complete a purchase that you initiated via Safari on your Mac, your Mac and the authorisation device communicate via an encrypted channel through Apple’s servers. Apple does not process or store any of this information in a format that could be used to identify you personally. You can disable the option to use Apple Pay on your Mac in your iPhone’s settings. Go to ‘Wallet & Apple Pay’ and turn off ‘Allow payments on Mac’.

Further information on data protection for Apple Pay can be found at the following web addresses: https://support.apple.com/de-de/HT203027
- Mollie

This website offers one or more online payment methods from the following provider: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands

If you select a payment method from this provider that requires you to pay in advance (such as a credit card payment), the payment details you provide during the ordering process (including your name, address, bank and payment card details, currency and transaction number), as well as information about the contents of your order, in accordance with Article 6(1)(b) of the GDPR. In this case, your data will be passed on solely for the purpose of processing payments with the provider and only to the extent necessary for this purpose.
- PayPal

This website offers one or more online payment methods from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from this provider that requires you to pay in advance, your payment details provided during the ordering process (including name, address, bank and payment card details, currency and transaction number), as well as information regarding the contents of your order, in accordance with Article 6(1)(b) of the GDPR. In this case, your data will be passed on solely for the purpose of processing the payment with the provider and only to the extent necessary for this.

If you select a payment method where we pay in advance, you will also be asked during the ordering process to provide certain personal details (first name and surname, street, house number, postcode, town, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).

In such cases, in order to safeguard our legitimate interest in assessing your creditworthiness, we will pass this data on to the provider in accordance with Article 6(1)(f) of the GDPR for the purpose of a credit check. The provider checks, on the basis of the personal data you have provided as well as other data (such as your shopping basket, invoice amount, order history and payment history), whether the payment method you have selected can be authorised in view of the risks of non-payment and/or bad debt.

The credit report may contain probability values (so-called ‘score’ values). Where score values are included in the credit report’s findings, they are based on a scientifically recognised mathematical and statistical method. The calculation of the score values takes into account, amongst other things but not exclusively, address details.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may, where applicable, we remain entitled to process your personal data insofar as this is necessary for the processing of payments in accordance with the contract.

8) Web analytics services

8.1Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device and collect certain information. This information includes your IP address, although Google truncates the last few digits to prevent direct personal identification.

The information is transmitted to Google’s servers and processed there. This may also involve the transfer of data to Google LLC, which is based in the USA.

Google uses the information collected on our behalf to analyse your use of the website, to compile reports on website activity for us, and to provide other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics, which has been truncated, is not combined with any other data held by Google. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the device you are using, takes place only if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To exercise your right to withdraw consent, please disable this service using the ‘Cookie Consent Tool’ provided on the website.

We have entered into a data processing agreement with Google which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the specific ‘demographic characteristics’ feature and can use this to generate statistics that provide insights into the age, gender and interests of website visitors. This is achieved by analysing advertising and information from third-party providers. This enables target groups to be identified for marketing activities. However, the data collected cannot be linked to any specific individual and is deleted after being stored for a period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalised adverts and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Article 6(1)(a) of the GDPR, analyse your usage behaviour across devices and create database models, including those relating to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the ‘Personalised advertising’ feature in your Google Account settings. To do this, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the “UserIDs” function can be used on this website. If you consent to the use of Google Analytics 4 in accordance with Article 6(1)(a) If you have given your consent under the GDPR, set up an account on this website and log in using that account on various devices, your activities – including conversions – may be analysed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

8.2Google Tag Manager

This website uses ‘Google Tag Manager’, a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: ‘Google’).

Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and for calibrating, controlling and conditioning them via a unified user interface. Google Tag Manager itself does not store any information on users’ devices or read such information. Nor does the service carry out any independent data analysis. However, when a page is accessed, Google Tag Manager transmits your IP address to Google, where it may be stored. Data may also be transferred to servers operated by Google LLC in the USA.

This processing will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, Google Tag Manager will not be used during your visit to the site. You may withdraw your consent at any time with future effect. To withdraw your consent, please disable this service using the “Cookie Consent Tool” provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with European data protection standards.

Further legal information on Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de

9) Retargeting/Remarketing and Conversion Tracking

9.1Meta Pixel with extended data matching

Within our online offering, we use the “Meta Pixel” service provided by the following provider in extended data matching mode: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”)

If a user clicks on an advert we have placed on Facebook or Instagram, ‘Meta Pixel’ is used to append a parameter to the URL of our linked page. This URL parameter is then set in the user’s browser following the redirection by a cookie set by our linked page itself. Furthermore, this cookie collects specific customer data, such as the email address, which we collect on our website linked to the Facebook or Instagram advert during processes such as completing purchases, logging into an account or registering (advanced data matching). The cookie is then read, enabling the data – including the specific customer data – to be transmitted to Meta.

We use ‘Meta Pixel’ with extended data matching to make our advertisements (so-called ‘Ads’) on Facebook and/or Instagram more effective and to ensure that they match users’ interests or exhibit certain characteristics (e.g. interests in specific topics or products, determined on the basis of the websites visited), which we transmit to Meta (so-called "Custom Audiences").

In addition, we analyse the effectiveness of our adverts by tracking whether users were redirected to our website after clicking on an advert (conversion). Compared to the standard version of "Meta Pixel", the enhanced data matching feature helps us to better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.

All data transmitted is stored and processed by Meta, enabling it to be linked to the relevant user profile and allowing Meta to use the data for its own advertising purposes in accordance with Meta’s Data Use Policies (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to serve adverts on and off Facebook.

All processing operations described above, in particular the setting of cookies to retrieve information from the device you are using, will only be carried out if you have given us your explicit consent to do so in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by disabling this service via the ‘Cookie Consent Tool’ provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

The information generated by Meta is usually transferred to and stored on a Meta server; in this context, it may also be transferred to servers operated by Meta Platforms Inc. to the USA.

9.2TikTok Pixel

This website uses conversion tracking technology provided by the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland

If you have arrived at our website via an advert on the provider’s domain, the success of the advert can be tracked using cookies and/or similar technologies (tracking pixels, web beacons, pings or HTTP requests).

To this end, the tracking technology reads out certain device and browser information, including, where applicable, your IP address, in order to track user actions predefined by us (e.g. to collect and analyse data (such as completed transactions, leads, website searches and product page views). This enables us to compile statistics on user behaviour on our website following a referral from an advert, which helps us to optimise our offering.

All processing described above, in particular the setting of cookies to read information from the device used, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by deactivating this service via the ‘Cookie Consent Tool’ provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

10) Website features

- Google reCAPTCHA

On this website, we use the CAPTCHA service provided by the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC, USA.

For the visual design of the CAPTCHA window, the provider uses ‘Google Fonts’, i.e. fonts downloaded from the internet by Google. No further information other than that mentioned above – which is already transmitted to Google via the ReCaptcha functionality – is processed in this context.

The service checks whether an input is made by a human user or, fraudulently, through machine-based and automated processing, and blocks spam, DDoS attacks and similar automated malicious access attempts. To ensure that an action is carried out by a human and not by an automated bot, the provider collects the IP address of the device used, identification data relating to the browser and operating system type used, as well as the date and duration of the visit, and transmits this data to the provider’s servers for analysis. This may involve the use of cookies, i.e. small text files that are stored in the browser of the end device.

Where the processing described above is carried out on the basis of cookies, these will only be set if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by deactivating this service via the ‘Cookie Consent Tool’ provided on the website.

If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual responsibility on the internet and in preventing misuse and spam in accordance with Article 6(1)(f) of the GDPR. Article 6(1)(f) of the GDPR.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

11) Tools and Miscellaneous

Cookie Consent Tool

This website uses a so-called ‘Cookie Consent Tool’ to obtain valid user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when they visit the site in the form of an interactive user interface, on which consent for specific cookies and/or cookie-based applications can be granted by ticking the relevant boxes. By using this tool, all cookies and services requiring consent are only loaded once the user in question has given their consent by ticking the relevant boxes. This ensures that such cookies are only set on the user’s device if consent has been given.

The tool sets technically necessary cookies to save your cookie preferences. Personal user data is not processed in this context.

Should, in individual cases, the processing of personal data (such as the IP address) nevertheless take place for the purpose of storing, assigning or logging cookie settings, this is carried out in accordance with Article 6(1)(a) (f) GDPR, on the basis of our legitimate interest in ensuring that our consent management for cookies is legally compliant, user-specific and user-friendly, and consequently in ensuring that our website is designed in accordance with the law.

A further legal basis for the processing is Article 6(1)(c) GDPR. As the data controller, we are legally obliged to make the use of non-essential cookies subject to the user’s consent.

Where necessary, we have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further information on the operator and the settings options for the cookie consent tool can be found directly in the relevant user interface on our website.

12) Rights of the data subject

12.1Under applicable data protection law, you are granted the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data; please refer to the legal basis cited for the respective conditions for exercising these rights:

Right
of access
pursuant to Art. Article 15 of the GDPR;
Right to rectification under Article 16 of the GDPR;
Right to erasure under Article 17 of the GDPR;
Right to restriction of processing under Article 18 of the GDPR;
Right to be informed pursuant to Article 19 of the GDPR;
Right to data portability pursuant to Article 20 of the GDPR;
Right to withdraw consent pursuant to Article 7(3) of the GDPR;
Right to lodge a complaint pursuant to Article 77 of the GDPR.

12.2RIGHT

OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, to object to such processing with effect for the future.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. WE RESERVE THE RIGHT TO CONTINUE PROCESSING, HOWEVER, IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.

13) Retention period for personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – where applicable – additionally by the relevant statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of explicit consent in accordance with Article 6(1)(a) of the GDPR, the data concerned will be stored until you withdraw your consent.

Where statutory retention periods apply to data processed in the context of contractual or quasi-contractual obligations on the basis of Article 6(1)(a) GDPR, this data is routinely deleted once the retention periods have expired, provided that it is no longer required for the performance of a contract or for entering into a contract and/or we no longer have a legitimate interest in continuing to store it.

Where personal data is processed on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

Where personal data is processed for the purposes of direct marketing on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21( Exercise your rights under Article 2 of the GDPR.

Unless otherwise specified in the other information contained in this statement regarding specific processing situations, stored personal data will otherwise be erased when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: 25 June 2026, 03:27:40