Privacy Policy

Table of Contents

  1. General information on Data Protection
  2. Privacy Policy Website
  3. Information for applicants
  4. Information for business partners

 

General information on Data Protection

 

Information about the Data Controller:

DOSTOFARM GmbH

Hansacker 24

26655 Westerstede

We attach particular importance to protecting your personal data. Your personal data is processed in accordance with the data protection regulations, in particular the General Data Protection Regulation of the European Union (GDPR) and the German Federal Data Protection Act (FDPA).

The following information provides an overview of the nature, extent and purpose of collecting, processing and transferring personal data as well as the safety measures deployed to protect these data.

Personal data are individual information on personal or factual circumstances of an identified or identifiable natural person such as e.g. your name, address, telephone number, your date of birth as well your e-mail and IP address.

 

  • Legal basis for the processing of personal data
  • As far as we obtain a consent of the data subject for the processing of personal data, Art. 6 (1) a GDPR serves as legal basis. You can withdraw this processing at any time in accordance with Art. 7 (3) GDPR.
  • 6 (1) b GDPR serves as legal basis for the processing of personal data required for the performance of a contract or for the execution of pre-contractual measures.
  • If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) c GDPR serves as legal basis.
  • If the processing is necessary for the preservation of the legitimate interest of our company or of a third party and if the fundamental rights and freedoms of the person concerned do not predominate, Art. 6 (1) f GDPR serves as legal basis for processing. In this case, you have the right of objection according to Art. 21 GDPR.

 

Data deletion and storage period

Personal data will be deleted as soon as the purpose for storage no longer applies. Due to legal retention periods, we may be obliged to store the data for a longer period of time.  In addition, storage may take place if this is required by statutory retention obligations to which our company is subject (e.g. accounting or tax retention periods of up to 10 years in accordance with the German Tax Code (AO) and Commercial Code (HGB)).

Your Rights

Upon written request, we will inform you in accordance with Art. 15 GDPR and in accordance with our legal obligation under Art. 12 GDPR whether and which of your personal data is processed or stored by us. Furthermore, you have the right to have incorrect data corrected in accordance with Art. 16 GDPR, data transferability in accordance with Art. 20 GDPR, blocking and deletion of your personal data in accordance with Art. 17 GDPR – provided that there are no legal storage obligations to the contrary – as well as the right to restrict processing in accordance with Art. 18 GDPR. In addition, you have the right to contact the competent supervisory authority pursuant to Art. 77 GDPR.

IN ADDITION, YOU HAVE THE RIGHT TO OBJECT PURSUANT TO ART. 21 GDPR, PROVIDED THAT THE PROCESSING RELATES TO LEGITIMATE INTERESTS ACCORDING TO ART. 6 (1) F GDPR.

If you have given us your consent to process your data, you may of course withdraw this consent for the future at any time in accordance with Art. 7 (3) GDPR.

If you have any questions regarding the processing of your personal data, you can contact our data protection officer, who is ready to assist with any enquiries, suggestions and complaints that you may have.

Data protection officer of

DOSTOFARM GmbH

Hansacker 24
26655 Westerstede
E-Mail: mail@dostofarm.de

 

Changes to our Privacy Statement

We reserve the right to make changes to our privacy statement to ensure that our privacy statement is always up to date with the current legal regulations. This applies also when the privacy statement needs to be adjusted due to new or redesigned services. The new privacy statement will then take effect the next time you use our services.

This privacy policy is dated 2024.

 

2.Privacy Policy Website

 Provision of the website

Use of hosting service providers

Our website is hosted on servers of a hosting provider, which is located in the EU, based on an order processing according to Art. 28 GDPR. Within the scope of its services, the hosting service provider may have access to personal data of our users, in particular to technical data, which arise within the scope of the technical communication between you and our website (e.g. server log files). However, he may not use them for his own purposes. The use of a hosting service provider is based on our legitimate interests pursuant to Art. 6 (1) f GDPR in the provision of infrastructure and platform services, computing capacity, e-mail dispatch and security services.

 

Server Logs

When you visit our website or use our services the device used for accessing the site automatically transmits log data (connection data) to our servers. The relevant information consists of:

  • The browser and its version number,
  • The operating system and its version number,
  • The referrer URL, which is the website you visited before switching to our website,
  • The date and time of access to our website,
  • The name of the subpages,
  • The corresponding IP address,
  • The amount of data transmitted.

The data collected are used exclusively for evaluating the data statistically to ensure operation and safety and to optimise processing of the offer. For security grounds, however, we reserve the right to inspect log files retroactively if we have sufficient grounds to suspect illegal usage. The data will not be stored for longer than necessary. This collection is carried out on the basis of our legitimate interest under Art. 6 (1) f GDPR.

 

Cookies

In several areas of the website we use so-called “cookies”, for example to identify the preferences of the users and thus to optimally design the website. This allows for easier navigation and a high degree of user-friendliness of the website. The processing by cookies for the technical provision of the website constitutes a legitimate interest pursuant to Art. 6 (1) f GDPR / § 25 (2) TDDDG. In addition, Art. 6 (1) a EU GDPR / § 25 (1) TDDDG provides the legal basis if we require your consent for the use of cookies (for marketing or analysis purposes, etc.).

Cookies are technologies, which are stored on the visitor’s hard disk drive. Cookies do not damage your computer and do not contain viruses. Most cookies used on the website are so-called “session cookies”. They are automatically deleted after the end of your visit. Other cookies stay on your devices and make it possible for your browser to be recognised the next time you visit. These files can be used, for example, to display information on the page that is specifically tailored to your interests.

You can change the properties of your browser so that it informs you of the placement of cookies. In this way, the use of cookies is made transparent. If you fully oppose the use of cookies, you may not be able to use individual functions of this website.

 

Security of Your Data

We deploy technical and organisational security measures to adequately protect the data that you have made available to us from being unintentionally or intentionally manipulated, lost, destroyed or accessed by unauthorised persons. Therefore, we are using SSL encryption for the transmission of confidential content e.g. enquires which you send to us as the site operator. An encrypted connection can be recognised when the web address changes from “http://” to “https://” and a padlock symbol is shown in your browser bar. When SSL encryption is activated, third parties cannot read the data that you transmit to us. Our security measures are kept up-to-date.

 

Contact us

If you contact us (e.g. via contact form, e-mail, telephone, social media), your personal data will be stored and processed by us for the purpose of processing the enquiry and any related follow-up questions pursuant to Art. 6 (1) b GDPR (within the framework of pre-contractual / contractual measures) or pursuant to Art. 6 (1) f GDPR (general enquiries). This data is not transferred to third parties without your consent.

The data entered into the contact form remain with us until you request that they be deleted, you withdraw your consent to the storage of your data, or the purpose of the data storage is no longer given (i.e. after the successful processing of your request), provided there are no legal storage obligations to the contrary.

 

Registration on our Website

When you sign up on our website to order goods, services and information in our online portal, personal data will be collected. Signing up allows you to access services and contents which are only available to registered users. If needed, registered users have the possibility to alter or delete data provided in the framework of registration at any time. Where appropriate, your data used for processing orders are transmitted to shipping and payment providers commissioned by us. Your personal data are not disseminated to third parties in any other way. The processing of your personal data is carried out within the framework of implementing the contract (in accordance with Art. 6 (1) b GDPR). Deletion of your data is carried out in accordance with the applicable statutory retention periods.

 

Newsletter

When you subscribe to our newsletter on our website we use the personal data you provide only for distributing the newsletter.

The subscription to our newsletter takes place by way of the double opt-in process. This means that upon signing up you receive an email that requests you to confirm your subscription. This confirmation is necessary to prevent the use of third-party email addresses. The subscriptions to our newsletter are recorded so that the subscription process can be retraced in accordance with legal requirements (consent pursuant to Art. 6 (1) lit. a) GDPR). This includes the logging of the time of subscription, the time of confirmation and the IP address.

Any data that we obtain from you as well as the logging information will not be disseminated to third parties. Your consent to the collection and storage of your data as well as their usage for the distribution of the newsletter can be withdrawn at any time without stating any reasons. A link to cancel your subscription can be found at the end of every newsletter.

 

Analysis-Tools

The analysis measures listed below and used by us are carried out on the basis of Art. 6 (1) a GDPR (consent). With the use of these analysis measures, we want to ensure that our website is designed to meet requirements and is continuously optimised. Using the analysis tools, we record the use of our website under a pseudonym and evaluate it for the purpose of optimising our services.

You can withdraw this processing at any time in accordance with Art. 7 (3) GDPR.

 

Google Analytics

This website uses the functions of the web analysis service Google Analytics. It is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland. Google Analytics uses so-called “cookies”. These are technologies which are stored on your computer and make it possible to analyse your use of the website. Deletion of the user and results data takes place after 14months.

IP Anonymisation

We have activated an IP anonymisation function on this website. Through this, Google shortens your IP address prior to its transfer to the USA provided that you are within a member states of the European Union or in another contracting state to the Agreement on the European Economic Area. In exceptional circumstances only, the full IP address is transmitted to a server of Google in the USA and shortened there. Google uses this data on behalf of the website operator to evaluate the use of the website, to compile reports about website activities and to provide other website services related to website and internet usage on behalf of the website provider. Your IP address, collected in the context of Google Analytics, is not combined with other data provided by Google.

Browser Plugin / Prevention of data collection

You can prevent the storage of cookies with the appropriate settings in your browser. Please note, however, that if you do so not all features of the website will be available to you. Furthermore, you can prevent Google from gaining access to the data created by the cookie and your usage data (incl. your IP address) and prevent Google from processing such data by downloading the following plug-in for your browser: https://tools.google.com/dlpage/gaoptout?hl=en

More information regarding the handling of user data by Google Analytics is available at Google under the following link: https://support.google.com/analytics/answer/6004245?hl=en

Order Processing

We have entered into a data processing contract with Google and we strictly apply the regulations of the supervisory authorities when using Google Analytics.

 

Meta (Facebook) Pixel

This website uses the visitor action pixel from Meta to measure conversions. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Meta, the data collected is also transferred to the USA and other third countries.

This allows the behaviour of site visitors to be tracked after they have been redirected to the provider’s website by clicking on a Meta ad. This allows the effectiveness of the meta adverts to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes in accordance with the Meta Data Usage Policy. This allows Meta to place adverts on Meta pages and outside Meta. This use of the data cannot be influenced by us as the website operator.

The use of Meta pixels is based on Art. 6 para. 1 lit. f EU GDPR. The website operator has a legitimate interest in effective advertising measures, including social media. A corresponding consent is requested for the processing of your data (e.g. consent to the storage of cookies). This processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a EU GDPR; consent can be withdrawn at any time.

You can find further information on protecting your privacy in Meta’s data protection information: https://de-de.facebook.com/about/privacy/

You can also deactivate the remarketing function ‘Custom Audiences’ in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen or on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

 

Contents and Services of Third Parties

Based on the legitimate interest of the provider according Art. 6 (1) f GDPR, a situation can arise where contents, services and benefits of third parties are integrated which complement our service offerings. With the use of the following services, we want to ensure a customised design and the continuous optimisation of our website.

 

Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is a solution offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland, with which the company can administer website tags via an interface. The tool itself (which implements the tags) is a cookie-free domain that collects no personal data. Google Tag Manager triggers other tags which may collect data. Google Tag Manager does not access this data. If on the domain or the cookie level a deactivation is configured by the user, such deactivation is retained for all tracking tags that were implemented with Google Tag Manager. The tags used are named separately below and can be individually edited by you in the privacy settings, for example by deactivating cookies for these elements. Further information https://www.google.com/policies/privacy/

 

Hotjar

We use Hotjar to better understand the needs of our users and to optimise the offer and experience on this website. Hotjar’s technology gives us a better understanding of our users‘ experiences (e.g. how much time users spend on which pages, which links they click on, what they like and don’t like, etc.) and this helps us to optimise our services based on our users’ feedback. Hotjar works with cookies and other technologies to collect data about the behaviour of our users and their end devices, in particular IP address of the device (is only recorded and stored in anonymised form during your website use), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for displaying our website. Hotjar stores this information on our behalf in a pseudonymised user profile. Hotjar is contractually prohibited from selling the data collected on our behalf.

Further information on data protection at Hotjar can be found at https://www.hotjar.com/legal/policies/privacy/.

 

hCaptcha

To protect the contact sheet from unwanted, automated messages, we use the hCaptcha service from Intuition Machines, Inc. As soon as you click on the ‘Load Captcha’ button, your IP address is transmitted to hCaptcha. This tool displays captchas – small tasks that are easy for humans to solve but difficult for machines to master. These captchas help us to identify spam. This service basically processes technical information about your use of our website, such as mouse movements, scroll positions, buttons pressed, touch events on touch displays and any movements of your device (e.g. if you use our website with a smartphone). In addition, hCaptcha collects the answers to the small tasks you are asked. This data is processed by hCaptcha exclusively on our behalf in order to protect our website from bots and spam. Your (non-personal) answers to the small tasks you are asked (e.g. recognising certain objects in images) are also used by hCaptcha to train algorithms. The service is offered by Intuition Machines, Inc, 350 Alabama St, #10, San Francisco, CA 94110, USA. The service is used to ensure the availability of the website, to protect against bots and on the basis of our legitimate interests. You can find hCaptcha’s privacy policy at https://www.hcaptcha.com/privacy. For more information about hCaptcha and Intuition Machines’ privacy policy, please see the following links: www.hcaptcha.com and www.hcaptcha.com/privacy.

 

YouTube

On our website videos of the platform YouTube are integrated. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland. Videos are integrated into our website via the extended data protection mode. The domain will be replaced by the official YouTube Nocookie domain. When this variant is used, information about visitors to the website is only stored when the video is played. As with most websites, YouTube makes use of cookies to gather information about the visitors to their website. YouTube uses these to collect video statistics, to prevent fraud and to improve user experience. Further information regarding privacy on YouTube can be found at: http://www.youtube.com/t/privacy_at_youtube. There you will also find further information about your rights and possible settings to protect your privacy.

 

Payment methods

We offer the following payment methods for efficient and secure payment options. Personal data is processed and stored by the payment service providers. This data may be passed on to credit agencies as part of an identity and credit check. Further information can be found in the payment service providers’ terms and conditions and data protection notices. We only receive information about the confirmation or negative information about the payment.

Mastercard: Payment services (technical connection of online payment methods); Service provider: Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium; Legal basis: Contract fulfilment and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR); Website: https://www.mastercard.de/de-de.html; Privacy Policy: https://www.mastercard.de/de-de/datenschutz.html.

PayPal: Payment services (technical connection of online payment methods) (e.g. PayPal, PayPal Plus, Braintree); Service provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg; Legal basis: Contract fulfilment and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR); Website: https://www.paypal.com/de; Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Visa: Payment services (technical connection of online payment methods); Service provider: Visa Europe Services Inc, London Branch, 1 Sheldon Square, London W2 6TT, UK; Legal basis: Contract fulfilment and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR); Website: https://www.visa.de; Privacy Policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html; Basis for third country transfers: Adequacy decision (UK).

American Express: Payment services (technical connection of online payment methods); Service provider: American Express Europe S.A., Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany; Legal basis: Contract fulfilment and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR); Website: https://www.americanexpress.com/de/; Privacy Policy: https://www.americanexpress.com/de-de/firma/legal/datenschutz-center/online-datenschutzerklarung/.

SOFORT Banking: Payment services (technical connection of online payment methods); service provider: This payment service, which was developed by Payment Network AG, is provided by various providers in different European countries, including Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter referred to as ‘Sofort GmbH’). Legal basis: Contract fulfilment and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR); Website: https://www.sofort.de/datenschutz.html; https://www.klarna.com/sofort/

 

mollie

We use mollie B.V., Keizersgracht 121, NL-1015CJ Amsterdam, Netherlands, as our payment service provider for payment processing, regardless of which payment method you use. The payment data you enter will be recorded and stored by mollie B.V. in accordance with Art. 6 (1) (b) EU GDPR and only passed on to the companies involved in the payment process. For more information on data protection by mollie, please refer to mollie’s privacy policy: https://www.mollie.com/de/privacy.

You can object to the processing of your data at any time by sending a message to mollie. However, mollie may still be authorised to process your personal data if this is necessary for contractual payment processing. A cancellation does not affect the effectiveness of past data processing operations.

 

Vimeo

Videos of the Vimeo platform are integrated into our website. Vimeo is a service provided by Vimeo LLC in 555 West 18th Street, New York, New York 10011. Within the framework of the services, information on the use of our website are transferred to Google servers. If you are logged in with your Vimeo account, Vimeo will link such information with your personal user account. You may prevent the assignment to your account by logging out of your Vimeo user account before using our website and deleting the respective Vimeo cookie. Further information on the processing of data and notes on the privacy policy of Vimeo can be found at https://vimeo.com/privacy.

Please note that Vimeo may use Google Analytics wherefore we link to Google’s Privacy Policy (https://www.google.com/policies/privacy) and the opt-out options of Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=en).

 

Links to websites of third parties

Based on the legitimate interest of the provider, it may occur that contents, services and benefits of third parties are integrated which complement our service offerings. When you access web pages which are linked on this website, information such as your name, IP address, browser details etc. can retrieved again. This Privacy Statement does not govern the collection, dissemination or the processing of personal data by any third parties. In this regard, please also pay attention to the individual privacy statements of the respective third-party providers and service providers to which we link on our website.

 

Social Media

We maintain publicly accessible online presences in social networks to communicate with the customers and interested parties active there and to present our services.

We would like to point out that user data may be processed outside the area of the European Union. Furthermore, user data is usually processed for market research and advertising purposes. To the best of our knowledge, the providers also use cookies, which store your usage behaviour (even across different end devices). This enables us to play out targeted advertising within our own platform as well as on third-party sites.

The processing of users’ personal data is carried out on the basis of our legitimate interests in providing users with effective information and communicating with users in accordance with Art. 6 (1) f GDPR. If the users are asked by the respective providers of the platforms for consent to data processing or if the user voluntarily sends information to our online presences, the legal basis for processing is Art. 6 (1) a GDPR in conjunction with Art. 7 GDPR. If such information contains contract-relevant contents, Art. 6 (1) b GDPR serves as the legal basis.

For a detailed representation of the respective processing and the possibilities of objection (Opt-Out), we refer to the following linked information of the providers.

Also, in the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and give information. Should you nevertheless need help, you can contact us.

 

Facebook and Instagram (Meta)

By interacting with our social media pages on Facebook and Instagram (commenting, liking posts or sending us a message), your data will be stored by us. These social networks are operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hence: Meta).

The operation of a company profile on these channels is a joint responsibility under data protection law pursuant to Art. 26 GDPR for Meta and our company. Accordingly, we have entered into an agreement with Meta that governs the respective obligations under the GDPR: https://www.facebook.com/legal/terms/page_controller_addendum.

Meta provides the profile operators with statistics and insights into the types of actions of our profile visitors (“page insights”). We have no influence on the fact that this data is collected by Meta. According to Meta, this data is only provided to us anonymously, so that the user cannot be identified from the information.

Personal data is deleted as soon as the purpose for which it was stored no longer applies. Storage can also take place if this is provided for by statutory retention obligations to which our company is subject.

Please note that when you use and access our Facebook and Instagram page, your personal data will also be processed by the provider Meta. Meta is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland as well as the parent company located in the USA. Meta processes your data in addition to the processing mentioned above for analysis and advertising purposes. To the best of our knowledge, Meta also uses cookies that store your usage behavior (also across different end devices). This allows Meta to display targeted advertising within its own platform as well as on third-party sites. For more information, please see Facebook’s privacy policy: https://www.facebook.com/about/privacy/, Instagram https://help.instagram.com/519522125107875. Facebook and Instagram also offer the option to object to certain data processing; information and opt-out options in this regard can be found at: https://www.facebook.com/settings?tab=ads and https://www.instagram.com/accounts/privacy_and_security/.  Please note that according to the Meta Privacy Policy, user data is also processed in the USA or other third countries. Meta transfers user data only to countries for which an adequacy decision has been issued by the European Commission pursuant to Art. 45 GDPR or on the basis of appropriate safeguards pursuant to Art. 46 GDPR.

With regard to data processing via our Facebook and Instagram page, you also have the option of asserting your data subject rights against Meta. Further information on this can be found in Meta’s privacy policy: https://www.facebook.com/about/privacy/.

 

Minors

We principally address adult persons with our online offer. Personal information of persons under 16 years of age may only be made available to us with the explicit consent of their legal guardian (Art. 8 GDPR). Processing without the consent of the legal guardian is not permitted. We therefore reserve the right to delete all data relating to minors unless we have the consent of a parent or guardian.

 

3. Information for applicants

Purpose and legal basis for the collection and processing

Your data will be processed by us for the purpose of processing your application in accordance with Art. 88 GDPR i. c. w. § 26 FDPA. If special categories of personal data within the meaning of Art. 9 (1) GDPR are voluntarily communicated as part of the application procedure, their processing is also carried out in accordance with Art. 9 (2) b GDPR.

Recipient of your data

The recipients of your data are the departments involved in the human resources management process (including human resources, managers and heads of department) of the controller. Your data will be treated as strictly confidential and will not be passed on to third parties without your consent. A transfer to third countries or international organisations is not intended.

Storage of your data

Your application data will be deleted 180 days after filling the position. If you are interested in future vacancies, we need your written consent for longer storage of your application documents. You can withdraw this consent at any time for the future in accordance with Art. 7 (3) GDPR. To do so, please send an e-mail with a corresponding note to the contact address given above.

 

4. Information for business partners

Purpose and legal basis for the collection and processing

The primary purpose of data processing is the creation, execution or termination of the contractual relationship. The primary legal basis for this is Art. 6 (1) b GDPR. Without this type of use of your data, the business relationship existing between you and us cannot be carried out.

We also process your data on the basis of Art. 6 (1) f GDPR to protect our legitimate interests or those of third parties (e.g. public authorities). This may be necessary, for example, to maintain IT security and IT operations or for purposes of corporate management, internal communication and other administrative purposes. You can object to this processing by giving special reasons in accordance with Art. 21 GDPR.

In addition, we process your data to fulfil legal obligations, such as regulatory requirements, commercial and tax law storage obligations or documentation obligations. The legal basis for this is Art. 6 (1) c GDPR in conjunction with the nationally applicable laws.

In individual cases, it may also happen that we process your data on the basis of your separately granted consent in accordance with Artt. 6 (1) a, 7 GDPR (e.g. in the context of registering for our newsletter or publishing photo and video recordings). You are always free to decide whether you wish to give your consent. Once you have given your consent, you can withdraw it at any time with effect for the future. To do so, please send corresponding enquiries to the contact address given above.

Should we process your personal data for a purpose not mentioned above, we will inform you of this in advance.

Recipient of your data

Within our company, only those persons receive your personal data who need it to fulfil our contractual and legal obligations. In addition, we sometimes use different service providers to fulfill these obligations, so that it may be necessary to transfer your personal data to other recipients outside the company to the extent necessary to fulfill our contractual and legal obligations. These third parties can be, for example, authorities, financial institutions, suppliers, etc. To process your data technically, we sometimes use external service providers according to Art. 28 GDPR (processors). You can also request detailed information by using the contact information above.

Storage of your data

We store your personal data only as long as they are necessary for the above-mentioned purposes. After termination of the contractual relationship, your personal data will be stored for as long as we are legally obliged to do so. This regularly results from legal obligations to provide evidence and to retain data, which are regulated in the German Commercial Code and the German Fiscal Code, among others. The storage periods thereafter are up to ten years. In addition, personal data may be stored for the time during which claims can be made against us (statutory limitation period of three or up to thirty years).