Data Protection Information

Thank you for visiting our website. Compliance with data protection regulations is of particular importance to us. This privacy policy informs you about our handling of your data. To make the processing of your data understandable to you, we would like to provide you with an overview of these processes through the following information. In order to ensure transparent processing, this privacy policy includes details about how we handle your data, as well as information about your rights under the European General Data Protection Regulation (EU GDPR) and the Federal Data Protection Act new (BDSG new).

I. Data Controller

Responsible according to the EU General Data Protection Regulation (EU GDPR) is:

nox Germany GmbH
Katzbergstr. 3, D-40764 Langenfeld
Tel.: +49 (0) 4224 920 000
Email: welcome@nox-nachtexpress.de

II. Our Data Protection Officer

Bettina Möhlmann
Glücksteinallee 7
D-68163 Mannheim
Email: Datenschutzbeauftragter@nox-nachtexpress.de

III. General Information

The following privacy notices inform you about the nature and scope of processing so-called personal data by nox Germany GmbH. Personal data includes all information relating to an identifiable natural person ("Data Subject"). An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics expressing the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person (Article 4, point 1. EU GDPR).

IV. Scope of Processing Personal Data

We process personal data of our users only to the extent necessary for providing a functional website and our content and services. The processing of personal data of our users is regularly only done with the user's consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of data is required by legal regulations.

V. Legal Basis for Processing Personal Data

Below, we provide you with transparent information on the legal principles and regulations, i.e., the legal bases of the EU GDPR, that enable us to process personal data.

We process your data only if at least one of the following conditions applies:

Consent (Article 6(1)(a) EU GDPR): You have given us your consent to process data for a specific purpose. An example would be storing data entered into a contact form.
Contract (Article 6(1)(b) EU GDPR): To fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we enter into a service contract with you, we need personal information beforehand.
Legal Obligation (Article 6(1)(c) EU GDPR): When we are subject to a legal obligation, we process your data. For instance, we are legally obligated to retain invoices for accounting, which typically contain personal data.
Legitimate Interests (Article 6(1)(f) EU GDPR): In the case of legitimate interests that do not override your fundamental rights, we reserve the right to process personal data. For example, we may need to process certain data to operate our website securely and economically efficiently. This processing constitutes a legitimate interest.

Other conditions such as the exercise of tasks carried out in the public interest or in the exercise of official authority and the protection of vital interests usually do not apply to us. If such a legal basis should be relevant, it will be indicated at the respective point.

VI. Collection and Storage of Personal Data and the Nature and Purpose of Their Use

Contact Form and Email Inquiry

For inquiries of any kind, we offer you the opportunity to contact us through a form provided on the website. It is necessary to provide a valid email address, as well as first and last names, so that we know who the inquiry is from and can respond to it. The data processing for the purpose of contacting us is carried out according to Art. 6(1)(a) EU GDPR based on your voluntarily given consent. The personal data collected by us through the use of the contact form will be automatically deleted after the completion of your request.

Providing your personal data is voluntary. However, we can only process your request if you provide us with your name, email address, and the reason for the inquiry.

Visiting our Website

During the purely informative visit to our website, when you do not otherwise provide us with information, we only collect the personal data that your browser transmits to us. These include:

IP address of your system,
Date and time (including time zone) of your request,
Type, content, and protocol version of your request (specific page request),
Access status (HTTP status code) of our server,
Size of our server response in bytes,
Your user agent (type, version, operating system used), and
The domain you accessed.

We also store this data in the log files.

The mentioned data are technically necessary for us to display our website, ensure stability and security, and optimize our offering. The legal basis is Art. 6(1)(f) EU GDPR, with our legitimate interest arising from the purposes mentioned above. We delete this data at the latest after seven days.

Under no circumstances do we use the collected data to draw conclusions about your person.

Additionally, we use cookies and analytics services when you visit our website.

For further explanations, please refer to the later sections of this privacy policy and our Cookie Policy.

Customer Portal

In the customer portal, you have the opportunity to track your shipments and perform other activities such as complaint management or address management.

When you log in to the customer portal, only data necessary for the use of the customer portal is collected. The legal basis for this is Article 6(1) EU GDPR.

In your customer portal, we provide you with comprehensive information stored with us after your registration.

You can revoke your consent at any time. However, the revocation will result in us no longer being able to offer you further use of your customer portal from the effective date of your revocation.

Registration on ready4Nox Website

Through our site ready2nox.com, you can create or update new parking spaces or your previous agreements online.

When you register on the ready2nox website, only data necessary for parking space management (delivery address and your contact details) is collected. The legal basis for this is Article 6(1) EU GDPR.

You can revoke your consent at any time. However, the revocation will result in us no longer being able to offer you further use of the ready2nox site from the effective date of your revocation.

Applicant Data

We offer you the opportunity to apply to us through our website. Your applicant and application data will be electronically collected and processed by us for the purpose of handling the application process. The legal basis for this processing is § 26(1) sentence 1 BDSG in conjunction with Art. 88(1) GDPR.

If an employment contract is concluded after the application process, we store the data submitted during the application in your personnel file for the purpose of regular organizational and administrative processes – of course, in compliance with further legal obligations.

The legal basis for this processing is also § 26(1) sentence 1 BDSG in conjunction with Art. 88(1) GDPR.

In the event of rejecting an application, we automatically delete the data transmitted to us two months after the rejection is communicated. However

, deletion does not occur if the data must be stored for a longer period due to legal requirements, such as proof obligations under the AGG, requiring storage for up to four months or until the conclusion of legal proceedings.

In this case, the legal basis is Art. 6(1)(f) GDPR and § 24(1) no. 2 BDSG. Our legitimate interest lies in legal defense or enforcement.

If you explicitly consent to a longer storage of your data, e.g., for inclusion in an applicant or interested party database, the data will be further processed based on your consent. The legal basis is then Art. 6(1)(a) GDPR. You can, of course, revoke your consent at any time according to Art. 7(3) GDPR by declaring it to us with effect for the future.

No Automated Decision Making (Art. 22(1) and (4) EU GDPR)

As a responsible company, we refrain from automated decision-making or profiling.

VII. Storage Periods and Deletion of Personal Data

Personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to exist. Storage may also occur if required by European or national legislatures in Union regulations, laws, or other provisions to which the data controller is subject (archiving obligation). Data will be blocked or deleted when a storage period prescribed by the mentioned standards expires, unless there is a necessity for further storage of the data for the conclusion or fulfillment of a contract. We store data collected for contract processing until the expiration of legal or possible contractual warranty and guarantee rights. After this period (usually ten years after contract conclusion), the data is stored solely for the purpose of a review by tax authorities, for economic and tax audit purposes, as well as for the clarification of potential criminal offenses.

VIII. Disclosure of Data to Third Parties

Transmission of your personal data to third parties for purposes other than those listed below does not take place.

We only disclose your data to third parties if:

1. You have given your explicit consent in accordance with Art. 6(1)(a) EU GDPR,
2. Disclosure is necessary for the establishment, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data, in accordance with Art. 6(1)(f) EU GDPR,
3. There is a legal obligation to disclose data pursuant to Art. 6(1)(c) EU GDPR, or
4. It is legally permissible and necessary for the execution of contractual relationships with you in accordance with Art. 6(1)(b) EU GDPR.

IX. Data Security

Data Transmission with SSL

We are aware that data security is a crucial concern for you when shopping online. For this reason, we use the SSL technology (Secure Socket Layer) to transmit your personal data (address, customer number, order data, etc.) from all areas. Weltbild treats your data according to the highest standards of data protection. Your data is thus protected against unauthorized access.

What is SSL?

Technically speaking, SSL - translated as Secure Socket Layers - is an encryption technology. Your order is encrypted into a secret code and sent over the Internet. Only the central Weltbild computer can decrypt and process this order. Weltbild, in turn, treats your information according to the highest standards of data protection. Therefore, your order cannot be read by any unauthorized person; only the Weltbild computer has the "key" to decrypt your order. More information: www.ssl.de

How to Recognize a Secure Order via SSL?

When accessing an SSL-protected process on a secure order, you will usually see a clear notice that your computer is entering SSL security mode. (You may need to confirm the security notice with "OK"). Further information: Your web browser provides detailed explanations of security procedures and encryption under the help section. Also, look for the "s" in the URL - this indicates that your order on the Internet is secure.

X. Use of Cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device; they do not contain viruses, trojans, or other malicious software.

In the cookie, information is stored that results in connection with the specifically used device. However, this does not mean that we immediately become aware of your identity.

The use of cookies serves, on the one hand, to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our site.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These cookies enable us to automatically recognize that you have already visited us when you return to our site. These cookies are automatically deleted after a defined period.

The data processed by cookies is required for the stated purposes to safeguard our legitimate interests and those of third parties pursuant to Art. 6(1)(f) GDPR.

You can configure your browser to prevent cookies from being stored on your computer or to always display a notice before a new cookie is created. However, the complete deactivation of cookies may result in you not being able to use all functions of our website.

XI. Use of Analytics Tools, Tracking Tools, and External Services

The tracking measures listed below and used by us are carried out based on Art. 6(1)(f) EU GDPR. With the tracking measures used, we want to ensure that our website is designed to meet the needs and continuously optimized.

**Google Analytics**

We use "Google Analytics," a web analytics service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland ("Google"). Google uses cookies, which are small text files stored on your device that enable an analysis of your use of our website. The information generated by the cookie about your use of our website is usually transmitted to a Google server and stored there.

If IP anonymization is activated on the website (‘IP anonymization’), your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be sent to a Google server in the US and truncated there. Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide us with other services related to website and internet usage. Pseudonymous user profiles can be created from the processed data. The IP address transmitted when using Google Analytics will not be associated with any other data held by Google.

We use Google Analytics only with the activated IP anonymization described above. This means that your IP address is only processed by Google in a shortened form. Personal identification is thus excluded.

We use Google Analytics for the purpose of analyzing the use of our website and continuously improving individual functions and the user experience. Through the statistical evaluation of user behavior, we can improve our offer and make it more interesting for you as a user. The legal basis is Art. 6(1)(a) EU GDPR (consent).

You can prevent the storage of cookies generated by Google Analytics by adjusting your browser settings accordingly. We would like to point out that in this case, you may not be able to use all functions of our website. If you no longer wish to participate in tracking, you can also object to this use by preventing the installation of cookies through the corresponding settings in your browser software (deactivation option) or by installing a browser add-on. Your visit data will then be collected by Google Analytics JavaScript. Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/

To ensure that Google only processes the transmitted data in accordance with our instructions and complies with the applicable data protection regulations, we have concluded a contract for order processing with Google.

Third-party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.

For more information on data use by Google, settings, and objection options, as well as privacy, please refer to Google's websites:

Privacy Overview: https://support.google.com/analytics/answer/600424

5?hl=en&ref_topic=2919631
Privacy Policy: https://policies.google.com/privacy?hl=en&gl=en
Data Use by Google When You Use Websites or Apps of Our Partners: https://policies.google.com/technologies/partner-sites?hl=en
Data Use for Advertising Purposes: https://policies.google.com/technologies/ads?hl=en
Settings for Personalized Advertising by Google: https://adssettings.google.de

The data will be deleted as soon as it is no longer necessary for the purpose of its collection.

**Google Adwords Conversion Tracking:**

We use the online advertising program "Google AdWords" and, within Google AdWords, the Conversion Tracking feature. Google Conversion Tracking is an analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). When you click on an ad placed by Google, a conversion tracking cookie is stored on your computer. These cookies expire after 30 days, do not contain personal data, and therefore do not serve for personal identification. If you visit certain pages on our website and the cookie has not expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google AdWords customer receives a different cookie, so there is no way that cookies can be tracked across the websites of AdWords customers. The information obtained through the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers receive the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that allows users to be personally identified. If you no longer wish to participate in tracking, you can also opt-out by preventing the installation of cookies through your browser settings (deactivation option). You will then not be included in the conversion tracking statistics. Further information and Google's privacy policy can be found at: https://policies.google.com/privacy?gl=en

**Google reCAPTCHA:**

We use "Google reCAPTCHA" on our websites.

The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). reCAPTCHA is used to check whether data input on our websites (e.g., in a contact form) is done by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various features. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, duration of stay on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

The data processing is based on Art. 6 para. 1 lit. f EU GDPR. The website operator has a legitimate interest in protecting his web offers from abusive automated spying and from SPAM.

For more information on Google reCAPTCHA and Google's privacy policy, please refer to the following links: https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

OpenStreetMap:

This page uses the open-source mapping tool "OpenStreetMap" (OSM) via an API. The provider is the OpenStreetMap Foundation. To use the features of OpenStreetMap, it is necessary to store your IP address. This information is usually transferred to an OpenStreetMap server and stored there. The provider of this site has no influence on this data transfer. The use of OpenStreetMap is in the interest of an attractive presentation of our online offers and easy findability of the places we specify on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f EU GDPR. More information on how user data is handled can be found in the OpenStreetMap privacy policy and here: https://www.fossgis.de/datenschutzerkl%C3%A4rung/

Google Tag Manager:

This website uses Google Tag Manager. Through this service, website tags can be managed via an interface. The Google Tag Manager only implements tags. This means that no cookies are used, and no personal data is collected. The Google Tag Manager triggers other tags that may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags implemented with the Google Tag Manager.

Complianz GDPR/CCPA Cookie Consent:

We use the Complianz GDPR/CCPA Cookie Consent service on our website. The provider of the service is Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands. As this service is hosted locally on the web server, no data transfer to third parties takes place.

Fastly:

Fastly is a Content Delivery Network (CDN) tool that speeds up the general loading and reloading of content. It is used by our integrated map style to reload content from our integrated maps.
The provider of the service is Fastly, Inc., 475 Brannan St, Suite 300 San Francisco, CA 94107, USA.
The use of the service may result in data transfer to a third country (USA). Further information can be found in the provider's privacy information at the following URL: https://www.fastly.com/de/privacy/

XII. Use of Social Plugins

Xing:

Our website uses features of the XING network. The provider is the New York SE, Am Strandkai 1, 20457 Hamburg, Germany.

Each time one of our pages containing XING features is accessed, a connection to XING servers is established. To our knowledge, no personal data is stored during this process. In particular, no IP addresses are stored or the user's behavior is evaluated.

For more information on data protection and the XING Share button, please see XING's privacy policy at: https://www.xing.com/app/share?op=data_protection.

Facebook:

We use plugins from the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (Facebook). The plugins are marked with a Facebook logo or the addition "Facebook Social Plugin." An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins/?locale=en_US

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the page.

Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly assign your visit to our website to your Facebook profile. If you interact with the plugins, for example by pressing the "Like" button or leaving a comment, this information is also transmitted directly to a Facebook server and stored there.

The information is also published on your Facebook profile and displayed to your Facebook friends. The purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights in this regard

 and setting options for protecting your privacy, can be found in Facebook's privacy policy: http://www.facebook.com/policy.php

If you do not want Facebook to directly assign the data collected via our website to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of Facebook plugins with add-ons for your browser.

LinkedIn:

We use components of the LinkedIn network on our site. LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time our website is accessed, which has such a component, this component causes the browser you are using to download a corresponding representation of the component from LinkedIn.

This process informs LinkedIn about which specific page of our internet presence is currently being visited. If you click the LinkedIn "Recommend" button while logged into your LinkedIn account, you can link the content of our pages to your LinkedIn profile. This allows LinkedIn to associate the visit to our pages with your LinkedIn user account.

We have no influence on the data that LinkedIn collects through this, nor do we have any knowledge of the content of the data transmitted to LinkedIn. Details on data collection by LinkedIn and your rights and options can be found in LinkedIn's privacy policy. These notes can be found at http://www.linkedin.com/legal/privacy-policy

Kununu:

We have a profile on kununu (belongs to XING). The provider is the New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

You can recognize the XING plugins and kununu links by the XING logo, as well as kununu links on our page. When you visit our pages, a direct connection is established between your browser and the XING server via the kununu plugin. XING receives the information that you have visited our site with your IP address. If you click on the kununu logo while logged into your XING account, you can link the content of our pages to your XING profile. This enables XING to assign the visit to our pages to your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by XING. A direct connection between your browser and the kununu server (belongs to XING) is established via the kununu links. kununu receives the information that you have visited our site with your IP address. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by kununu.

If you do not want kununu to be able to assign your visit to our pages to your kununu user account, please log out of your kununu user account. Details on how they handle your personal data can be found in the privacy policy of XING/kununu: https://privacy.xing.com/en/data-protection-declaration.

XIII. Your Rights

If personal data about you is processed, you are a data subject within the meaning of the EU General Data Protection Regulation (EU GDPR), and you have the following rights against the controller:

Right to Information

You can request confirmation from the controller as to whether personal data concerning you is being processed. If such processing is taking place, you can request information from the controller about the following:

1. The purposes for which the personal data is processed.
2. The categories of personal data being processed.
3. The recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed.
4. The planned duration of storage of the personal data concerning you or, if specific information is not possible, the criteria for determining the storage period.
5. The existence of the right to rectification or erasure of personal data concerning you, the right to restriction of processing by the controller, or the right to object to such processing.
6. The right to lodge a complaint with a supervisory authority.
7. All available information on the source of the data if the personal data is not collected from the data subject.
8. The existence of automated decision-making, including profiling, according to Art. 22(1) and (4) of the EU GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you can request to be informed about the appropriate safeguards pursuant to Art. 46 of the EU GDPR in connection with the transfer.

Right to Rectification

You have the right to request the controller to correct or complete the personal data processed about you if it is inaccurate or incomplete. The controller must make the correction without delay.

Right to Restriction of Processing

Under the following conditions, you can request the restriction of processing of personal data concerning you:

1. If you dispute the accuracy of the personal data concerning you for a period that enables the controller to verify the accuracy of the personal data.
2. If the processing is unlawful, and you oppose the deletion of the personal data and instead request the restriction of its use.
3. If the controller no longer needs the personal data for the purposes of processing, but you need it for the establishment, exercise, or defense of legal claims.
4. If you have objected to processing pursuant to Art. 21(1) of the EU GDPR, pending the verification of whether the legitimate grounds of the controller override yours.

If the processing of personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted under the above conditions, you will be informed by the controller before the restriction is lifted.

Right to Erasure

4.1. You may request the controller to erase personal data concerning you without undue delay, and the controller is obligated to erase this data without undue delay if one of the following reasons applies:

1. The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
2. You withdraw your consent on which the processing is based according to Art. 6(1)(a) or Art. 9(2)(a) of the EU GDPR, and there is no other legal basis for the processing.
3. You object to the processing pursuant to Art. 21(1) of the EU GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) of the GDPR.
4. The personal data concerning you has been unlawfully processed.
5. The erasure of personal data concerning you is necessary to comply with a legal obligation under Union or Member State law to which the controller is subject.
6. The personal data concerning you has been collected in relation to the offer of information society services referred to in Art. 8(1) of the EU GDPR.

4.2. Information to Third Parties

If the controller has made the personal data concerning you public and is obliged to erase it according to Art. 17(1) of the EU GDPR, the controller, taking into account available technology and implementation costs, shall take reasonable steps, including technical measures, to inform controllers processing the personal data that you, as the data subject, have requested the erasure of all links to, or copies or replications of, such personal data.

4.3 Exceptions

The right to erasure does not apply to the extent that processing is necessary:

1. For exercising the right of freedom of expression and information.
2. For compliance with a legal obligation that requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
3. For reasons of public interest in the area of public health in accordance with Art. 9(2)(h) and (i) as well as Art. 9(3) of the EU GDPR.
4. For the establishment, exercise, or defense of legal claims.

Right to Notification

If you have asserted your right to rectification, erasure, or restriction of processing against the controller, the controller is obligated to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients by the controller.

Right to Data Portability

You have the right to receive the personal data concerning you that you provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data was provided, provided that:

1. The processing is based on consent pursuant to Art. 6(1)(a) of the EU GDPR or Art. 9(2)(a) of the EU GDPR, or on a contract pursuant to Art. 6(1)(b) of the EU GDPR, and
2. The processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This right shall not adversely affect the rights and freedoms of others.

The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you based on Art. 6(1)(e) or (f) of the EU GDPR, including profiling based on those provisions.

The controller shall no longer process the personal data concerning you unless they demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time

 to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.

Right to Withdraw Consent

You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Automated Individual Decision-Making, Including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data concerning you violates the EU GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy under Art. 78 of the EU GDPR.

XIV. Currentness and Amendment of this Privacy Policy

This privacy policy is currently valid and dated as of February 2023.

We reserve the right to update or amend this privacy policy as necessary while adhering to applicable data protection regulations. This enables us to align it with current legal requirements and consider changes to our services, such as the introduction of new services.

Feel free to use our contact form for any inquiries!