Free consultation

Data Protection

General Information

We hereby inform you about the processing of your personal data when you use our website.

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States of the European Union (EU), as well as other data protection provisions, is:

TROPPER DATA SERVICE AG
Marie-Curie-Straße 6
51377 Leverkusen
represented by the Management Board Mr. Dirk Wilbertz (Chairman), Mr. David Ender
Contact: Phone: +49 (0) 214 40 49 0
Fax: +49 (0) 214 40 49 205,
Email: info@tropper.de
(see our Imprint).

You can reach our data protection officer at datenschutz@tropper.de or at our postal address with the addition "the data protection officer".

Introduction

This privacy policy is intended to provide you, as a customer or prospective customer, with a comprehensive overview of how and to what extent your data is collected, stored, processed, disclosed, and transmitted by us when you visit our pages or use our services. Furthermore, you should gain an overview of the data protection measures we have in place and what options are available to you when you visit our site and use our services.

To ensure the protection of your data in the future, especially in light of new legal requirements and technical developments, it is essential to update this privacy policy from time to time. We therefore recommend that you review our information and notices on data processing regularly.

1. Subject of Protection

The subject of protection is your personal data. In the GDPR, these are defined in Art. 4, No. 1 as information relating to an identified or identifiable natural person. This means all data that relates (whether directly or indirectly) to you, e.g., first name, last name, addresses, email addresses, user behavior, etc. Data related to online websites or services that do not belong to us or that we do not control are not part of this privacy policy.

2. When and to what extent do we process personal data?

Below you will find an overview of all processes in which your personal data is processed.

2.1. For the Provision of Contractual Services/Registration

We process inventory data and contract data to fulfill our contractual obligations and services (Art. 6, para. 1, lit. b GDPR).

2.2. Contacting Us

If contact is made via email or the contact form, the information provided will be processed only to the extent necessary to answer your questions.

2.3. Visiting Our Website

When you visit our website, we or our authorized service providers may use cookies or similar technologies. This automatically sends information to our website's server. This information is temporarily stored in so-called log files. The information collected helps us to better adapt our services to the needs of our customers and, above all, to make them even more secure. They also serve advertising purposes. Further information on this can be found in the "In-depth" section.

3. Legal Basis for the Processing of Personal Data

If your consent is obtained for the processing of personal data, Art. 6, para. 1, lit. a GDPR serves as the legal basis. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, Art. 6, para. 1, lit. b GDPR is the legal basis. This legal basis also applies to processing operations necessary for carrying out pre-contractual measures. If processing is necessary for compliance with a legal obligation, Art. 6, para. 1, lit. c GDPR serves as the legal basis. If processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6, para. 1, lit. d GDPR is the legal basis.

If processing is necessary for the legitimate interests of our company or a third party, and the interests and rights of the data subject do not override these interests, then Art. 6, para. 1, lit. f GDPR serves as the legal basis for processing.

4. Data Deletion and Storage Duration

Data stored by us will be deleted as soon as it is no longer required for its intended purpose and no legal retention obligations prevent its deletion. If user data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This means the data will be blocked and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons. According to legal requirements, data is retained for 6 years in accordance with Section 257 (1) HGB (commercial books, inventories, opening balances, annual financial statements, commercial letters, booking vouchers, etc.) and for 10 years in accordance with Section 147 (1) AO (books, records, management reports, booking vouchers, commercial and business letters, documents relevant for taxation, etc.).

5. How do we protect personal data?

We implement physical, technical, and administrative security measures to adequately protect your personal data from loss, misuse, unauthorized access, disclosure, and alteration. These security measures include firewalls, data encryption, access controls for data, and we select our server locations very carefully. We are committed to securing our systems and services.

However, you are responsible for the security and confidentiality of your passwords and your account profile or registration data. Furthermore, it is your responsibility to ensure that the personal data we hold about you is accurate and up-to-date. We are not liable for the protection of personal data that we disclose to third parties based on an account link authorized by you.

6. When do we share data?

First, we want to assure you that we do not sell, lend, or rent your personal data. Data is only passed on if, for example, it is essential for the fulfillment of our contractual obligations, we have a legitimate interest, or we have your consent. Every contractual partner of ours is carefully and diligently selected, and we oblige them to protect all data in accordance with legal regulations. For this reason, we also conclude a data processing agreement with the processor in accordance with Art. 28 GDPR.

7. Links

Our website may contain links to websites of other providers, for whose content we are not responsible and to which this privacy policy does not extend.

8. Your Rights

As soon as your personal data is processed, you are a data subject within the meaning of the GDPR. Therefore, you have the following rights vis-à-vis the controller (i.e., us):

  • Right of access,
  • Right to rectification or erasure,
  • Right to restriction of processing,
  • Right to object to processing,
  • Right to data portability.

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. Further information can be found in the "In-depth" section.

Website provision and log file creation

When you access our landing page, information that your browser transmits to the server is automatically processed by the web server or the hosting provider used. This may include, in particular:

  • IP address of the accessing device,    
  • page or file accessed,
  • Browser type and browser version,
  • HTTP status code,
  • requesting provider,

The processing of this data is technically necessary to provide the landing page, ensure system security, detect misuse, and guarantee the stability of the service.

The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable, and functional provision of the landing page.

The data will be deleted as soon as it is no longer required for the stated purposes, unless legal retention obligations or security interests necessitate longer storage.

Hosting

This website is hosted by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter "Webflow").

When you visit our website, Webflow, as a technical service provider, automatically processes certain personal data that is technically necessary for the operation and delivery of the website. This includes, in particular:

  • IP address
  • Date and time of access
  • Browser type and version
  • Operating system
  • Referrer URL (previously visited page)

The processing of this data is based on Art. 6 para. 1 lit. f GDPR (legitimate interest), as we have a legitimate interest in the stable and secure presentation of our website.

Webflow may transfer data to the USA. Webflow is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection.

A data processing agreement (DPA) in accordance with Art. 28 GDPR has been concluded with Webflow. Webflow processes the data exclusively on our behalf and is contractually obliged to process the data only according to our instructions and to ensure the confidentiality and security of the data.

Further information on data protection at Webflow can be found in Webflow's privacy policy: https://webflow.com/legal/privacy

Cookies

1. Scope of Data Processing

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on the user's hard drive. This cookie contains a characteristic string of characters that enables unique identification of the browser when the website is revisited. Cookies cannot run programs or transmit viruses.

2. Legal Basis for Data Processing

The legal basis for processing personal data using technically necessary cookies is Art. 6, para. 1, lit. f GDPR. The legal basis for processing personal data using cookies for analysis purposes, if the user has given their consent, is Art. 6, para. 1, lit. a GDPR.

3. Purpose of Data Processing

The purpose of using technically necessary cookies is to simplify website usage. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

Analysis cookies are used to improve the quality of our website and its content. Through these cookies, we learn how the website is used and can thus continuously optimize our offerings.

4. Duration of Storage, Right to Object, and Deletion Options

Cookies are stored on your computer and transmitted from there to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

We use the Cookiebot tool to manage your consent. Cookiebot itself sets a technically necessary cookie for this purpose, the use of which is based on our legitimate interest in documenting consent. How to delete this cookie is explained in more detail under "Deleting Cookies". Below you will find the information text and detailed information about the cookies that were presented to you when you first visited the page. You will also find detailed information on whether and for which cookies you have given your consent. This allows you to transparently track your decision at any time. You can change or revoke your consent or refusal at any time using the links provided below. If you consent to the use of the cookies specified by us for the first time, the status of your consent will be stored in a cookie, so you do not have to consent again if you visit our websites again. Even if you do not consent, this will be noted in the cookie.

Revoke, renew, or change your cookie consent

Cookiebot

We use the external web service Cookiebot from Cybot A/S (www.cookiebot.com/de) to inform you about the cookies used on our website and to obtain your consent for cookie usage. To store consent, a permanent cookie named "CookieConsent" is stored in your browser.

The following data is automatically logged by Cookiebot:

  • IP number of the end-user in anonymized form (the last three digits are set to '0')
  • Date and time of consent
  • User agent of the end-user's browser
  • URL from which consent was sent
  • An anonymous, random, and encrypted key
  • End-user's consent status, which serves as proof of consent

The information generated by the cookie is not used to personally identify visitors to this website and is not merged with personal data about the bearer of the pseudonym. The data collected by Cookiebot is stored on servers within the EU. Further details can be found in Cookiebot's privacy policy: www.cookiebot.com/de/privacy-policy/

If you do not agree with the storage of this data, you can object to the storage at any time by clicking as described above. In this case, a so-called opt-out cookie will be placed in your browser, which means that Cookiebot will only provide cookies for the technically flawless and optimized provision of the website. Please note that completely deleting your cookies will also delete the opt-out cookie, and you may need to reactivate it.

Legal basis

We use Cookiebot based on legitimate interest (Art. 6 para. 1 lit f GDPR). We have an interest in implementing the requirements of the data protection authorities in a legally compliant manner; therefore, we use a tool to obtain consent and inform website visitors.

Storage period

The permanent cookie named "CookieConsent" from Cookiebot is automatically deleted after 12 months, unless you delete it earlier via your browser settings. You can delete cookies at any time in your browser's security settings.

Third-country transfer

No third-country transfer takes place through the use of Cookiebot.

Opt-out

By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

Web Analytics with Webflow Analyze

This website uses Webflow Analyze, a web analytics tool from Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA.

Webflow Analyze allows us to analyze user behavior on our website to continuously improve our offerings. Among other things, the following data is collected:

  • Visited pages and subpages
  • Time spent on pages
  • Origin of visit (e.g., direct, search engine, referral)
  • Device type, browser type, and operating system
  • Interactions on the website (e.g., clicks)

Webflow Analyze is designed for data protection and operates without the use of cookies. No personal data is passed on to third parties, and no cross-device profiles are created.

Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest), as we have a legitimate interest in analyzing and optimizing our website. Since Webflow Analyze operates without cookies and does not create personal profiles, no separate consent is generally required.

A data processing agreement (DPA) in accordance with Art. 28 GDPR has been concluded with Webflow. Webflow is thus contractually obliged to process the data collected within Webflow Analyze exclusively on our behalf and according to our instructions, and to take all necessary technical and organizational measures to protect the data.

Further information can be found in Webflow's privacy policy: https://webflow.com/legal/privacy

Contact forms, contact via email

1. Scope of Processing

You can contact us both via email and through a contact form. If you use the contact form, the data entered into the input fields will be transmitted to us and stored after submission. The following data is stored:

  • Name,
  • Email address,
  • Date and time of the inquiry,

The data entered via the contact form is directly transferred to our CRM system Salesforce and processed there for handling, assigning, and documenting your inquiry.

Processing is carried out to handle your inquiry, to communicate with you, and, if applicable, to implement pre-contractual measures.

2. Purpose and Legal Basis of Data Processing

The processing of your data serves solely to handle your request. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data. Other personal data processed during the submission process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for processing the data, if the user has given consent, is Art. 6, para. 1, lit. a GDPR. The legal basis for processing data transmitted during an email exchange is Art. 6, para. 1, lit. f GDPR. If the email contact aims at concluding a contract, an additional legal basis for processing is Art. 6, para. 1, lit. b GDPR.

The transmitted data will be deleted as soon as your inquiry has been fully processed and no statutory retention periods or legitimate interests in further storage exist. Business and commercial law-relevant communication may be stored longer in accordance with statutory retention periods, particularly under the German Commercial Code (HGB) and the German Tax Code (AO).

Processing contact inquiries in Salesforce

We use Salesforce as our CRM system for processing inquiries and managing prospect and customer contacts. The provider, depending on the contractual arrangement, is a company of the Salesforce Group.

If you contact us via the landing page contact form, the data you enter will be directly transferred to Salesforce and processed there as an inquiry or lead.

Processing in Salesforce is carried out specifically for the following purposes:

  • Recording and processing prospect inquiries, assigning inquiries to responsible contacts,
  • Communication with prospects, sales and customer management,
  • Documentation of communication, tracking the processing status of the inquiry.

Processed data may include, in particular, name, company, business contact details, content of the inquiry, time of the inquiry, and other information you provide to us via the contact form.

The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as the processing is necessary for the implementation of pre-contractual measures. Otherwise, processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the efficient, traceable, and structured processing of prospective customer and customer inquiries.

Insofar as Salesforce processes personal data on our behalf, this is done on the basis of a data processing agreement in accordance with Art. 28 GDPR.

A transfer to third countries, particularly the USA, cannot be ruled out. In this case, the transfer is based on the respective applicable data protection guarantees according to Art. 44 et seq. GDPR, in particular adequacy decisions, the Data Privacy Framework, standard contractual clauses, or other suitable guarantees.

Webinar Registration via Calendly

On our landing page, we offer you the opportunity to register for a webinar or book a webinar spot. For this purpose, we use the Calendly service.

Provider is: Calendly, LLC, 115 E Main St., Ste A1B, Buford, GA 30518 (USA)

If you use Calendly for webinar registration, the data you enter during registration will be processed. This may include, in particular:

  • Name, email address,
  • Phone number,     if requested,
  • Information in the     free text field,

Processing is carried out to receive your webinar registration, reserve your spot, provide you with information about the webinar, and to organizationally prepare and conduct the webinar.

The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as the processing is necessary for the performance of your webinar registration. Insofar as the processing is carried out for the organizational implementation, tracking, and documentation of the registration, the legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the efficient organization and execution of webinars and the management of registrations.

Insofar as Calendly processes personal data on our behalf, this is done on the basis of a data processing agreement in accordance with Art. 28 GDPR.

Calendly may also process personal data in the USA. Personal data is only transferred to third countries in accordance with Art. 44 et seq. GDPR, in particular on the basis of an adequacy decision, a certification under the EU–U.S. Data Privacy Framework, standard contractual clauses of the European Commission, or other appropriate safeguards.

Further information on data processing by Calendly can be found in Calendly's privacy policy.

Your Rights as a Data Subject

Below, we would like to provide you with comprehensive information about your rights.

1. Right of access, Art. 15 GDPR

You can request confirmation at any time as to whether personal data concerning you is being processed by us. This information is, of course, free of charge, provided it is not requested an excessive number of times. If personal data is being processed, you also have the right to information about the following:

  • the purposes of the processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing concerning the data subject or to object to such processing;
  • the existence of the right to lodge a complaint with a supervisory authority;
  • where the personal data are not collected from the data subject, any available information as to their source;
  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR, and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

2. Right to rectification, Art. 16 GDPR

If your personal data stored by us is incorrect or incomplete, you have the right to rectification and completion. We must rectify it without undue delay.

3. Right to restriction of processing, Art. 18 GDPR

Under the following conditions, you may request a restriction of the processing of personal data concerning you:

  • if you contest the accuracy of the personal data concerning you for a period enabling us to verify the accuracy of the personal data;
  • if the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of their use;
  • if we no longer need the personal data for the purposes of processing, but you require them for the establishment, exercise, or defense of legal claims, or
  • if you have objected to the processing pursuant to Art. 21, para. 1 GDPR and it has not yet been determined whether our legitimate grounds outweigh your grounds.

If the processing of personal data concerning you has been restricted, these data – apart from their storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction of processing has been limited according to the aforementioned conditions, you will be informed by us before the restriction is lifted.

4. Right to Erasure

Unless there is a legitimate interest to the contrary, you can assert your right to erasure at any time.

5. Withdrawal of Consents

Any data processing based on your consent can be stopped as soon as you withdraw your consent. The withdrawal can be made at any time and with effect for the future. As we are obliged to store the given consents due to our accountability, the withdrawal must be made in writing, although an email withdrawal is sufficient.

Data Protection Information for Online Meetings, Telephone Conferences, and Webinars via "Microsoft Teams", "GoToWebinar", "GoToMeeting", and "ETES"

Below, we would like to inform you about the processing of personal data in connection with the use of "Microsoft Teams", "GoToWebinar", "GoToMeeting", and "ETES WebConference".

Purpose of Processing

We use the tools "Microsoft Teams", "GoToWebinar", "GoToMeeting", or "ETES WebConference" to conduct telephone conferences, online meetings, video conferences, and/or webinars (hereinafter collectively referred to as "online meetings"). "GoToWebinar" is a service of LogMeIn, Inc., based in the USA. "GoToMeeting" is a service of LogMeIn, Inc., based in the USA. "Microsoft Teams" is a service of Microsoft Corporation. "ETES WebConference" is a service of ETES GmbH.

Controller

The controller for data processing directly related to the conduct of "online meetings" is Tropper Data Service AG, Marie-Curie-Straße 6, 51377 Leverkusen. You can reach our data protection officer at: legitimis GmbH, Ball 1, 51469 Bergisch Gladbach, Germany Datenschutz@tropper.de

Note: If you access the website of "Microsoft Teams", "GoToWebinar", "GoToMeeting", or "ETES WebConference", the respective provider is responsible for data processing. However, accessing the website is only necessary for use if you need to download the software.

If you do not wish or are unable to use the "Microsoft Teams" app, you can also use "Microsoft Teams" via your browser. In this case, the service will also be provided via the "Microsoft Teams" website. If you do not wish or are unable to use the "GoToWebinar" app or the "GoToMeeting" app, you can also use "GoToWebinar" or "GoToMeeting" via your browser. In this case, the service will also be provided via the "GoToWebinar" or "GoToMeeting" website.
If you do not wish or are unable to use the "ETES WebConference" app, you can also use "ETES WebConference" via your browser. In this case, the service will also be provided via the "ETES WebConference" website.

What data is processed?

When using "Microsoft Teams", "GoToWebinar", "GoToMeeting", or "ETES WebConference", various types of data are processed. The scope of data processed also depends on what information you provide before or during your participation in an "online meeting".

The following personal data will be processed:

User Information:

First name, last name, phone (optional), email address, password (if "Single Sign-On" is not used), profile picture (optional), department (optional)

Meeting Metadata:

e.g., date, time, meeting ID, phone numbers, location, participant IP addresses, device/hardware information

For recordings (optional):

MP4 file of all video, audio, and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.

When dialing in by phone:

Information on incoming and outgoing phone numbers, country name, start and end time. If applicable, further connection data, such as the device's IP address, may be stored.

Text, Audio, and Video Data:

You may have the option to use the chat, question, or survey functions in an "online meeting". In this respect, the text entries you make are processed to display them in the "online meeting" and, if necessary, to log them. To enable the display of video and the playback of audio, data from your device's microphone and any video camera on the device will be processed accordingly during the meeting. You can switch off or mute the camera or microphone yourself at any time via the "Microsoft Teams", "GoToWebinar", "GoToMeeting" and "ETES WebConference" applications.

To participate in an "online meeting" or enter the "meeting room", you must at least provide your name.

Scope of Processing

We use "Microsoft Teams", "GoToWebinar", "GoToMeeting" and "ETES WebConference" to conduct "online meetings". If we intend to record "online meetings", we will inform you transparently in advance and – if necessary – ask for your consent. The fact of recording will also be displayed to you in the "Microsoft Teams", "GoToWebinar", "GoToMeeting" or "ETES WebConference" app. If it is necessary for the purpose of logging the results of an online meeting, we will log the chat content. However, this will generally not be the case.

In the case of webinars, we may also process questions asked by webinar participants for the purpose of recording and post-processing webinars. If you are registered as a user with "GoToWebinar", then reports on "online meetings" (meeting metadata, telephone dial-in data, questions and answers in webinars, survey function in webinars) can be stored with "GoToWebinar" for up to 90 days. Automated decision-making within the meaning of Art. 22 GDPR is not used.

Legal Bases for Data Processing

Insofar as personal data of employees of Tropper Data Service is processed, § 26 BDSG is the legal basis for data processing. Should personal data in connection with the use of "Microsoft Teams", "GoToWebinar", "GoToMeeting" or "ETES WebConference" not be necessary for the establishment, execution or termination of the employment relationship, but nevertheless be an elementary component of the use of "GoToWebinar", then Art. 6 para. 1 lit. f) GDPR is the legal basis for data processing. In these cases, our interest lies in the effective conduct of "online meetings".

Furthermore, the legal basis for data processing during the conduct of "online meetings" is Art. 6 para. 1 lit. b) GDPR, insofar as the meetings are conducted within the framework of contractual relationships.

If no contractual relationship exists, the legal basis is Art. 6 para. 1 lit. f) GDPR. Here too, our legitimate interest lies in the effective conduct of "online meetings".

Recipients / Data Disclosure

Personal data processed in connection with participation in "online meetings" is generally not passed on to third parties, unless it is specifically intended for disclosure. Please note that content from "online meetings", as well as from personal meetings, often serves precisely to communicate information with customers, prospective clients, or third parties, and is therefore intended for disclosure.

Other Recipients: The aforementioned providers necessarily gain knowledge of the above-mentioned data, insofar as this is stipulated in our data processing agreement with the respective provider.

For “Microsoft Teams” and “ETES”: Data processing outside the European Union (EU) generally does not occur, as we have restricted our storage location to data centers within the European Union. However, we cannot rule out that data routing may occur via internet servers located outside the EU. This may particularly be the case if participants in an “online meeting” are located in a third country.

However, the data is encrypted during transmission over the internet and thus secured against unauthorized access by third parties.

Data Processing Outside the European Union

“GoToWebinar” and “GoToMeeting” are services provided by LogMeIn Ireland Limited (Bloodstone Building Block C 70 Sir John Rogerson’s Quay Dublin 2, Ireland), a subsidiary of LogMeIn Inc. (Log-MeIn, 320 Summer Street, Boston, MA 02210, USA). This means that personal data is also processed in a third country. We have concluded a data processing agreement with the provider of “GoToWebinar” that complies with the requirements of Art. 28 GDPR. A level of data protection is ensured by the conclusion of the so-called EU standard contractual clauses.

Data Protection Officer

We have appointed a Data Protection Officer. You can reach our Data Protection Officer at datenschutz@tropper.de or at our postal address with the addition 'the Data Protection Officer'.

Your Rights as a Data Subject

You have the right to information about your personal data. You can contact us at any time for information.

For an inquiry not submitted in writing, we ask for your understanding that we may require proof from you to verify that you are the person you claim to be.

Furthermore, you have the right to rectification or erasure or to restriction of processing, insofar as you are legally entitled to do so.

Finally, you have the right to object to processing within the scope of legal requirements. The right to data portability also exists within the scope of data protection regulations.

Data Deletion

We generally delete personal data when there is no longer a need for further storage. A need may arise, in particular, if the data is still required to fulfill contractual obligations, to process and defend against warranty and, where applicable, guarantee claims. In the case of statutory retention periods, deletion is only considered after the respective retention period has expired.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint regarding our processing of personal data with a data protection supervisory authority.

Updates and Changes to this Privacy Policy

This Privacy Policy may be updated if technical, organizational, or legal conditions change. The version published on the landing page at the time of access applies.

As of: 11.05.2026