Privacy Policy

1. Scope of this Privacy Policy

This Privacy Policy applies to the processing of your personal data on the websites www.scalefree.com, www.visualdatavault.com and www.datavault4dbt.com as well as to the LinkedIn, XING, Facebook, Instagram, TikTok and X business channels, your participation in (paid) events, webinars and trainings as well as your use of the Admin Buddy for Salesforce WebApp.

“personal data” is any information about an identified or identifiable natural person. You are identifiable as a person if you can be identified directly (e.g. by your name) or indirectly (e.g. by a pseudonymous e-mail address) with this information.

“processing” means any operation or set of operations which is performed upon personal data, whether or not by automated means.

2. Controller for Data Processing

The controller (hereinafter also “we” or “us”) of your processed personal data is

Scalefree International GmbH
Schützenallee 3
30519 Hannover
E-Mail: [email protected]

3. Information on Joint Responsibility with Social Media Platforms

(Note: If the above links do not lead directly to the specified pages, please copy the specified URL into the address line of your browser).

4. Data Protection Requests

If you have any questions about data protection or data security, you can contact our data protection officer by writing to

Althammer & Kill GmbH & Co. KG
Roscherstraße 7
30161 Hannover
E-Mail: [email protected]

5. Purposes and Legal Bases for the Processing of Your Personal Data

5.1 Processing on Our Website and in Regards to Our Services

The purposes pursued with the data processing on our website and in regard to our services are explained below.

As part of the above data processing, we transmit personal data to the service providers listed below:

The service providers process your data as our processors on the basis of a corresponding data processing agreement. Insofar as the service providers are located outside the European Economic Area, the transfer takes place on the basis of a adequacy decision by the EU Commission or the standard contractual clauses provided by the EU Commission and further technical and organizational measures to safeguard the security of your personal data.

5.2 Processing in Connection with Our Social Media Channels

5.2.1 Operation of a Company Channels on Social Media Platforms

When you visit our social media channels, we process your personal data, which you provide there voluntarily, for the following purposes:

• Processing of inquiries from visitors to the social media channels by us;
• Create or share posts;
• Conducting customer surveys, marketing campaigns, market analyses, competitions, contests or similar campaigns or events on social media channels. Separate data protection information may apply for the respective campaign;
• Settlement of disputes and legal disputes, establishment, assertion or defense of legal claims or legal disputes, enforcement of existing contracts;
• Legal basis: Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest: public relations, company presentation).

5.2.2 Processing on Our Social Media Profiles

If you visit one of our company channels on the social media platforms we use, your personal data will be processed by the respective social media platform:

• Meta processes your personal data on Facebook for the purposes and on the legal basis set out in the Facebook Privacy Policy.
• Meta processes your personal data on Instagram for the purposes and on the legal bases set out in the Instagram Privacy Policy.
• YouTube is offered in Europe by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes your personal data on YouTube for the purposes and on the legal basis set out in the YouTube Privacy Policy.
• X (formerly Twitter) is offered in Europe by Twitter International Unlimited Company with registered office at One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“X”). X processes your personal data on X for the purposes and on the legal bases set out in the X Privacy Policy.
• LinkedIn is offered in Europe by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). LinkedIn processes your personal data on LinkedIn for the purposes and on the legal bases set out in the LinkedIn Privacy Policy.
• TikTok is offered in Europe by TikTok Technology Limited, 2 Cardiff Lane Grand Canal Dock DUBLIN, D02 E395 Ireland (“TikTok”). TikTok processes your personal data on TikTok for the purposes and on the legal bases set out in the TikTok Privacy Policy.
• Xing is offered by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany (“New Work”). New Work processes your personal data for the purposes and on the legal bases set out in the Xing Privacy Policy.

Legal basis: Art. 6 (1) sentence 1 lit. b GDPR (processing for the performance of a contract; as a rule, this contract is the terms of use of the social media platforms that form the basis of your use of the social media platforms).

Notes:

• The aforementioned social media platforms can assign your activities on the respective Scalefree company channel to your social media profile if you are logged in and also use them for their own business purposes in accordance with the respective data policy or privacy policy. You can only (partially) avoid this if you are logged out and visit our respective company profile in the private mode of your browser or contact us via other communication channels.
• Personal data may also be transmitted by the respective service to servers in a third country and thus processed outside the European Union. The social media platforms use standard contractual clauses for this purpose or rely on the adequacy decisions issued by the EU Commission with regard to certain countries. For details, please refer to the providers’ data protection notices.

5.2.3 Use of Statistical Information of the Social Media Channels

We use the YouTube Analytics tool provided by YouTube as well as the LinkedIn Insights tool provided by LinkedIn and the Site-InSights provided by Meta (Facebook) to learn more about our subscribers, how our posts have been received and how users have reacted to them.

• You can find out what data YouTube provides us with here.
• You can find out what data LinkedIn provides us with here.
• You can find out what data Meta (Facebook) provides us with here.

(Note: If the above link does not lead directly to the specified pages, please copy the specified URL into the address line of your browser).

Legal basis: Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest: Optimization of posts on our company profiles, improvement of communication with guests, customers and interested parties).

5.2.4 Duration of Storage of Your Personal Data in Connection with Our Social Media Channels

5.2.5 Transfer of Personal Data to Third Countries when Using the Social Media Channels

Your posts created in social media channels are publicly accessible worldwide and can also be transmitted by the social media platforms to third countries (countries outside the EU/EEA, e.g. USA). In these third countries, despite the use of suitable guarantees by the platforms, it may not be possible to guarantee an adequate level of protection and you may not be able to assert your data protection rights in accordance with the GDPR, or not to the same extent. There may be a risk that the recordings may be used by government agencies for other purposes due to laws or legal practice in third countries (e.g. by security authorities to combat terrorism). For the appropriate safeguards used by the social media platforms for the processing of your personal data in the third country, please consult the information provided in the data protection information of the social media platforms (see section 5.2.2 of this privacy policy).

5.2.6 Sharing Content on Our Website via Social Media

If you use the share function on our website, no personal data is transferred to the respective social media service. If you share content from our website with your personal profile, we have no influence on the content and scope of the data that the networks collect. In this respect, the terms of use and data protection provisions of the respective social media service apply.

6. Use of Cookies on Our Website

We use cookies on our website.

A cookie is a small data file that is stored on your device. Cookies are used to analyze user interest and to make our website more user-friendly. In principle, you can also use our website without cookies. However, if you want to use the full functionality of our website in the most user-friendly way, you should accept the cookies that enable the use of certain functions or provide comfort features. The purpose of the cookies we use is shown in the following list.

You can set your browser to notify you before accepting cookies, to accept or reject only certain cookies, or to reject all cookies. In addition, you can delete cookies from your storage device at any time.

You can view and disable currently enabled cookies in our website´s cookie settings.

6.1 Essential Cookies

These cookies are technically necessary to provide the following core functions of the website and cannot be disabled by you:

• Display the content of the website
• Anonymization of IP addresses in log files
• Cookie consent status
• Verify and identify users
• Frontend login for subpages with access restrictions

Please refer to the cookie settings of our website for the specific technically necessary cookies that are used. The legal basis for the processing of personal data based on the cookie is Art. 6 (1) sentence 1 lit. f GDPR. Our legitimate interest is to provide you with the functions of our website.

6.2 Other Technically Unnecessary Cookies

Other, technically not necessary cookies are used in order to measure the performance of the website and user behavior (Statistics, Marketing) or to use third-party services (External Media). However, these are not absolutely necessary for the provision of the website and must therefore be activated by you independently in the cookie settings of our website.

For supplementary information on data processing in connection with individual cookies, please refer to the information in the cookie settings, as well as the partially supplementary information on the respective services in this Privacy Policy.

7. Deletion of Your Personal Data

Your personal data will only be processed as long as the processing purposes specified in no. 5 exist. In addition, however, there are further retention obligations or legal bases that make longer processing necessary.

7.1 Legal Retention Periods

Your personal data will be stored insofar as statutory retention periods exist, in particular within the scope of the retention periods pursuant to Section 147 of the German Fiscal Code (AO), which stipulates a retention period of six years for commercial and business letters including emails and ten years for accounting documents (e.g. invoices), as well as within the scope of Section 257 of the German Commercial Code (HGB), which stipulates a corresponding retention period of six or ten years. Legal basis: Art. 6 (1) sentence 1 lit. c GDPR (legal obligation).

7.2 Statute of Limitations

Your personal data may also be stored to preserve evidence for the assertion of or defense against legal claims within the framework of the statute of limitations. According to Sections 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is three years. The regular limitation period begins at the end of the year in which the claim arose and the creditor becomes aware of the circumstances giving rise to the claim and the identity of the debtor or should have become aware of them without gross negligence. Legal basis: Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest: Assertion, exercise or defense of or against legal claims).

8. Data Recipients

Your personal data may generally be transferred to the following categories of recipients:

• Third parties who provide the contractually agreed services on our behalf and support us in the provision of our services;
• Providers who receive data for the purpose of arranging and providing services;
• Partners we work with to provide services to you;
• Insurance partner;
• Authorities (e.g. tax authorities);
• Lawyers and courts in the event of litigation.

Legal base for the transfer is our respective legitimate interest, Art. 6 (1) sentence 1 lit. f GDPR.

Transfer of Personal Data to Partners/Sponsors

Any personal data listed under para. 5.1 that you provide in connection with your registration for an event, webinar or training will be passed on to our partners and sponsors for the specific event, webinar or training. You can find a general overview of the partners and sponsors on our company page under https://www.scalefree.com/consulting/partners/. Any disclosure of your personal data will be made to our partners/sponsors only as far as it is necessary for the fulfillment of our contractual obligations towards you (Art. 6 (1) sentence 1 lit. b GDPR) or on the basis of your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR (conducting of a free webinar/event or for marketing purpose).

After the transfer our partners/sponsors will process the provided personal data as controllers. We will name you the respective partners/sponsors for the specific event, webinar or training when you register for it and provide your respective consent.

9. Necessity of Providing Your Personal Data

If you do not provide the required personal data, we will not be able contact you or provide you with any services or information. If it is not necessary to provide personal data and you do not provide it, we will not be able to provide you with separate or individual information.

10. Processing of Personal Data for Applications

We collect and process the personal data you send to us if you apply for a job with us for the purpose of the processing of the application procedure. The processing may also be carried out electronically. This is the case, in particular, if an applicant submits corresponding application documents by e-mail or by means of a web form on our website. We process your personal data based on § 26 BDSG, Art. 6 (1) sentence 1 lit. b GDPR for the application procedure and the possible conclusion of an employment contract.

If you conclude an employment contract with us, the submitted data will be stored for the purpose of processing the employment relationship in compliance with above mentioned legal bases. If no employment contract is concluded, the application documents will be automatically erased two months after notification of the refusal decision, provided that no other legitimate interests are opposed to the erasure. Other legitimate interest in this relation is, e.g. a burden of proof in a procedure under the General Equal Treatment Act (AGG).

11. Transfer of Your Personal Data to Third Countries

Your personal data is processed on servers within the scope of the GDPR (in the EU / EEA). A transfer to third countries does not take place in principle, unless it is explicitly stated otherwise in this Privacy Policy.

12. Data Processing with Google Services

We use several services by Google companies, which require the processing of your personal data:

12.1 Google Tag Manager

We use the Google Tag Manager of Google Ireland Limited, incorporated and operating under the laws of Ireland (Registered Number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland, “Google”) on this website.

The Google Tag Manager only manages and implements tags. This means that no personal data is collected by the Google Tag Manager. The data processed by Google Tag Manager does not contain user IP addresses or any user-specific identifiers that could be associated with a specific person. Apart from data in standard HTTP request logs, all of which is deleted within 14 days of receipt, Google Tag Manager does not collect, store or share information about visitors or our clients’ properties, including page URLs visited.

More information about Google Tag Manager can be found at https://www.google.com/analytics/terms/tag-manager/ and https://support.google.com/tagmanager/answer/9323295?hl=en.

12.2 Google Analytics

For the purpose of statistical evaluation, we obtain information about your use of our website in order to improve our website and its functionalities on this basis. However, no personal data is transmitted or stored by which you can be identified as a user.

We use for these purposes on our website the analysis tool Google Analytics provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) as provider. This tool helps us to analyze the traffic to and on our website. For this purpose, Google collects information about the time you spend on our website, your interaction with our website and your IP address based on page views. This data is analyzed by Google to create reports that may include, among other things, statements about your length of stay, approximate geographic origin, origin of visitor traffic, exit pages and usage patterns.

In Google Analytics, interactions from you as a visitor to our website are primarily recorded with the help of cookies. These cookies are used to store non-personal data and are not made accessible across domains in browsers.

Information that Google generates about your use of our website through the use of cookies is regularly transferred to data centers in the USA and stored there in anonymized form. Our website uses the IP address anonymization provided by Google for this purpose. The IP anonymization function in Google Analytics sets the last octet of your IPv4-type IP address and the last 80 bits of IPv6 addresses in memory to zero shortly after they are sent to the Google Analytics data collection network for collection. The full IP address is therefore never written to disk. This function ensures the anonymization of your IP address before it is stored and processed within Google Analytics, so that it is impossible for Google to uniquely identify you.

The legal basis for the processing of your personal data within the scope of Google Analytics is your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR, which we request via our website´s cookie settings.

Processing Contract

We have concluded a processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Withdrawal of your consent

You can withdraw your consent to the processing of your personal data within the scope of Google Analytics at any time with effect for the future as follows:

• Withdrawal via our website´s cookie settings

  You can deactivate the processing of your personal data within Google Analytics in our website´s cookie settings.

• Disabling Google Analytics through browser add-on

  You can deactivate Google Analytics by installing a small program, a so-called browser add-on, which you can download from the following address: https://tools.google.com/dlpage/gaoptout . The add-on prevents their data from being analyzed in Google Analytics. However, using the browser add-on to disable Google Analytics does not prevent data from being sent to our website or to other web analysis services.

For more information on how Google Analytics handles user data, please see Google’s privacy policy on Google Analytics.

12.3 Google Ads Conversion

We use the Google Ads Conversion service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) as our processor to determine how successful the Google Ads placed by us are. In doing so, we pursue the interest of showing you advertising that is of interest to you.

To do this, we use cookies that can be used to measure certain parameters for measuring success, such as the display of ads or clicks. If you access our website via a Google ad, a cookie will be stored on your device. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information are usually stored as analysis values for this cookie. These cookies enable Google to recognize your internet browser on different pages. By integrating Google Ads Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible for Google to find out your IP address and store it. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations. Based on these evaluations, we can recognize which advertising measures are particularly effective.

The legal basis for the processing of your personal data in the context of Google Ads Conversion is your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR, which we also obtain via the cookie settings of our website. Therefore, if you do not give your consent, you generally do not consent to the processing of your personal data and no processing takes place in Google Ads Conversion. You can withdraw your consent at any time via the cookie settings on our website.

12.4 Google Ads Remarketing

We use the Google Ads Remarketing service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) as our processor to effectively advertise in Google search results and on third-party websites. For this purpose, the so-called remarketing cookie is set by Google when you visit our website, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. After the end of the purpose and the end of the use of Google Ads Remarketing by us, the data collected in this context will be deleted. The data processing is based on your consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR, which we request via our Cookie settings.

Additional data processing only takes place if you have consented to Google linking your web and app browsing history to your Google account and using information from your Google account to personalize ads you see on the web. In this case, if you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form target groups.

You can withdraw the consent you have given us at any time with effect for the future. Click on the cookie settings of our website, where you can withdraw your consent by removing the respective check mark.

12.5 Google Meet

We use the “Google Meet” service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google Meet”) to conduct online meetings and video conferences.

The scope of the data processed depends on the data you provide before or during participation in an online meeting or video conference. When using Google Meet, data of the communication participants is processed and stored on Google servers. This data may include, in particular, your login data (name, email address, telephone (optional) and password) and meeting data (topic, participant IP address, device information, description (optional)). In addition, visual and audio contributions from participants as well as voice input in chats can be processed. This may also involve transmission to the servers of Google LLC. in the USA.

When processing personal data that is required to fulfill a contract with you (this also applies to processing operations that are necessary to carry out pre-contractual measures), Art. 6 (1) sentence 1 lit. b GDPR serves as the legal basis. Otherwise, the legal basis for data processing when conducting online meetings or video conferences is our legitimate interest in the effective conduct of the online meeting or video conference in accordance with Art. 6 (1) lit. f GDPR. You can find further information on the use of data by Google Meet in Google’s privacy policy at https://www.google.de/policies/privacy/.

12.6 Google Maps

On our website we have integrated the Google Maps service. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google needs to process your IP address in order to display the Google Maps map. When using the map service, data on the use of the map functions, location and device data may also be transmitted.

The cooperation with Google in terms of data protection law takes place on the basis of a concluded contract on joint responsibility in accordance with Art. 26 GDPR, available at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.

Furthermore, by using Google Maps, the user enters into a direct user relationship with Google. During use, Google collects and processes data about the use of the map function by the user. Further information on data processing can be found in Google’s privacy policy (https://policies.google.com/privacy?hl=de).

The legal basis for the processing is your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR, which you can give directly via the cookie settings on our website.

You can revoke your consent at any time without giving reasons via the cookie settings.

12.7 Google Data Transfer to the USA

It can happen that personal data is transferred to the USA when Google services are used. Personal data that is transmitted to data centers in the USA is processed by Google LLC, 1600 Amphitheatre Parkway Mountain View, California 94043 and its subsidiaries as sub-processors of Google. Google LLC is certified under the EU-U.S. Privacy Framework. Against this background, an adequate level of data protection is assumed and the transfer of personal data by Google is permitted on the basis of Art. 45 (1) GDPR.

13. Other Third Party Services

13.1 Information on Payments by PayPal

The website offers the possibility of using the payment service provider PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg (“PayPal”) to process payment transactions for orders. In this context, the necessary payment information, and in particular the following personal data, is passed on to PayPal as an independent data controller:

• First name, last name
• Address
• E-mail address
• Phone number

The legal basis for the data transfer is Art. 6 (1) sentence 1 lit. b GDPR (execution of the contract).

When using PayPal, personal data may be transferred to third countries outside the European Economic Area and Switzerland, where an equivalent level of data protection is not always provided.

The aforementioned processing of personal data for payment processing is neither legally nor contractually required. However, without the disclosure of your personal data, we cannot carry out a payment via PayPal.

If you wish to make your payment via PayPal, PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase by invoice” via PayPal. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Among other things, address data is included in the calculation of the score values.

For further information on the processing of your personal data by PayPal, including information on the credit agencies used, please refer directly to PayPal’s privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-full.

13.2 Calendly

We use the service Calendly from Calendly LLC, 115 E Main St., Ste A1B, Buford, GA 30518 as our processor for the planning of appointments. When you make an appointment with us via Calendly, we use Calendly to process the name you provide, your e-mail address and the message you have attached to create an appointment. The legal basis for the processing of your personal data is Art. 6 (1) sentence 1 lit. f GDPR and a legitimate interest on our part in a simple and automated arrangement of appointments with you.

Calendly LLC is certified under the EU-U.S. Privacy Framework. Against this background, an adequate level of data protection is assumed and the transfer of personal data is permitted on the basis of Art. 45 (1) GDPR.

13.3 Zoom

We use the Zoom service of Zoom Video Communications Inc, 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA (“Zoom”) to conduct webinars.

The scope of the data processed depends on the data you provide before or during participation in a webinar. When using Zoom, data of the communication participants is processed and stored on Zoom servers. This data may include, in particular, your login data (name, e-mail address, telephone (optional) company, job-titel, country and password) and meeting data (topic, participant IP address, device information, description (optional)). In addition, visual and audio contributions from participants as well as voice input in chats may be processed.

When processing personal data that is required to fulfill a contract with you (this also applies to processing operations that are required to carry out pre-contractual measures), Art. 6 (1) lit. b GDPR serves as the legal basis. If you have given us your consent to process your data, the processing is carried out on the basis of Art. 6 (1) lit. a GDPR. Consent given can be revoked at any time with effect for the future. Further information on data use by Zoom can be found in Zoom’s privacy policy at https://zoom.us/docs/de-de/privacy-and-legal.html.

Zoom is certified under the EU-U.S. Privacy Framework. Against this background, an adequate level of data protection is assumed and the transfer of personal data is permitted on the basis of Art. 45 (1) GDPR.

14. Provision of the Online Offer and Web Hosting

Data and information is automatically collected from the website visitor’s system and stored in the server log files. This storage includes

• the browser type and version used (if transmitted by the user),
• the operating system,
• Date and time of the server request,
• the number of visits,
• the length of time spent on the website,
• the website previously visited, (if transmitted by the user).

The duration of the storage of IP addresses is thirty (30) days. The legal basis for the processing is Art. 6 (1) sentence 1 lit. f GDPR. The legitimate interest for processing the IP address is to enable communication between our server and your terminal device as well as to ensure the general functionality of our website in order to be able to track attacks on our systems. The processing of the other data serves to create statistics.

Hosting Services Through a Third-Party Provider

We use a third-party provider as a data processor to host this website. For this purpose, we have concluded a processing contract with the hosting provider. This serves to protect our legitimate interests within the meaning of Art. 6 (1) sentence 1 lit. f GDPR in a correct presentation of our offer. All data collected in the course of using this website as described will be stored on its servers. Processing on other servers only takes place within the framework explained here.

Our hosting providers are:

Amazon Web Services, Inc. 410 Terry Avenue North Seattle WA 98109 USA

Plesk International GmbH, Vordergasse 598200 Schaffhausen / CH

15. Your Rights in Relation to Your Personal Data

The GDPR grants you various rights in relation to your personal data, which we briefly explain below.

Right to information

You can request information about whether your personal data is being processed. If this is the case, you can request further information, in particular about the purposes of the processing, the categories of personal data processed, the recipients, the storage period or, if this is not possible, the criteria for determining the duration, as well as to further information.

You can request a copy of your personal data, which will be provided to you in the event of a request by e-mail in a common electronic format, provided that this does not affect the rights or freedoms of other persons. For this purpose, please specify exactly which data you require.

Right to rectificationM

You can immediately request the rectification of incorrect personal data concerning you as well as the completion of incomplete personal data.

Right to erasure

You have the right to request the erasure of your personal data, in particular if the data is no longer necessary for the purposes for which it was processed. Your data will be erased immediately unless an exception applies and your data may continue to be stored. This is the case, for example, if there is an obligation to store it for tax or commercial law reasons. In this case, processing will be restricted and will then only take place for this purpose.

Right to restriction of processing

You can request the restriction of the processing of your personal data, in particular if

• you dispute their accuracy and the data is verified,
• the processing is unlawful and you object to the erasure,
• the data is no longer required, but you need it for the assertion, exercise or defense of legal claims, or
• you have objected to the processing.

In the event of the restriction of the processing, your personal data may in principle only be stored and in particular only be processed with your consent or for the assertion or exercise as well as for the defense against legal claims.

Right to data portability

You may request to receive the personal data concerning you that you have provided in a structured, common and machine-readable format so that you can transfer it to another controller. You also have the right to have this data transferred directly to another controller. However, the prerequisite for this right is that the processing of your data is based on consent, the implementation of pre-contractual measures or the performance of a contract.

Right to object

You may object to the processing of personal data relating to you if the processing is based on a legitimate interest (Art. 6 (1) sentence 1 lit. f GDPR). Your right to object also exists in the case of any direct advertising carried out (e.g. newsletter dispatch), including any profiling that may be associated with this. The data will then no longer be processed unless compelling reasons for the processing are proven.

Withdraw of consent given for data processing

If you have consented to the processing of your personal data, you can withdraw this consent at any time. Processing that has taken place up to the time of the revocation remains unaffected by the withdraw.

Assertion of your rights

If you wish to exercise the rights described above, please contact us as the data controller (para. 2).

Right to lodge a complaint with a supervisory authority

You have a right to lodge a complaint with a supervisory authority.

The supervisory authority directly responsible for us is:

The State Commissioner for Data Protection of Lower Saxony
Prinzenstrasse 5
30159 Hanover
Telephone: +49 (0511) 120 45 00
E-Mail: [email protected]

If you have any questions or complaints, please contact us directly first (see para. 2) – surely your concern can be solved to your satisfaction.

16. Changes to this Privacy Policy

From time to time, this Privacy Policy will be updated; changes or additions will be published here. We therefore recommend that you check this page regularly.

Thank you for reading this Privacy Policy.