Privacy Policy

1) Introduction and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data are all data that can be used to identify you personally.

1.2 The controller for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is Saida Bouraada, Saada Boutique, Alter Kirchweg 13, 40880 Ratingen, Germany, Tel.: 0162 9126097, Email: info@saada-boutique.de. The entity responsible for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data collection when visiting our website

When using our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/referral from which you accessed the site
Used browser
Used operating system
Used IP address (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. No transfer or other use of the data takes place. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

3) Cookies

To make the visit to our website attractive and to enable the use of certain features, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for a longer period and allow the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.

If personal data is also processed by individual cookies used by us, processing is carried out according to Art. 6 para. 1 lit. b GDPR either for the performance of the contract, according to Art. 6 para. 1 lit. a GDPR in the case of given consent, or according to Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

You can set your browser so that you are informed about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contact

4.1 Loox

For review reminders, we use the services of the following provider: Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel

Only based on your explicit consent according to Art. 6 para. 1 lit. a GDPR do we transmit your email address and, if applicable, other customer data to the provider so that they can contact you by email with a review reminder.

You can revoke your consent at any time with effect for the future towards us or the provider.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

When data is transferred to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4.2 WhatsApp Business

You have the option to contact us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called 'Business version' of WhatsApp.

If you contact us via WhatsApp regarding a specific business (for example, an order placed), we will store and use the mobile number you use on WhatsApp and, if provided, your first and last name in accordance with Art. 6 para. 1 lit. b GDPR for processing and responding to your request. Based on the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address, or email address) to assign your inquiry to a specific process.

If you use our WhatsApp contact for general inquiries (e.g., about the range of services, availability, or our website), we will store and use the mobile number you use on WhatsApp and, if provided, your first and last name in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the efficient and timely provision of the requested information.

Your data will only ever be used to respond to your request via WhatsApp. There will be no disclosure to third parties.

Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transmits phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device that only contains the WhatsApp contact details of users who have also contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has consented to the transmission of their WhatsApp phone number from the address books of their chat contacts upon first use of the app on their device by accepting the WhatsApp terms of use in accordance with Art. 6 para. 1 lit. a GDPR. The transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your related rights and options for protecting your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider that protects the data of our site visitors and prohibits passing it on to third parties.

As part of the aforementioned processing, data transfers to servers of Meta Platforms Inc. in the USA may occur.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

4.3 As part of contacting us (e.g., via contact form or email), personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary.

The legal basis for processing this data is our legitimate interest in responding to your request according to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if the circumstances indicate that the matter concerned has been conclusively clarified and provided no legal retention obligations oppose this.

5) Data processing when opening a customer account

According to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. Which data is required for account opening can be found in the input mask of the corresponding form on our website.

Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the responsible party. After deletion of your customer account, your data will be deleted provided that all contracts concluded have been fully processed, no legal retention periods prevent this, and we have no legitimate interest in further storage.

6) Use of customer data for direct advertising

6.1 Sign up for our email newsletter

When you sign up for our email newsletter, we will regularly send you information about our offers. The only required information for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. For newsletter dispatch, we use the so-called Double Opt-in procedure, which ensures that you only receive newsletters after you have explicitly confirmed your consent to receive the newsletter by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In doing so, we store the IP address registered by your Internet Service Provider (ISP) as well as the date and time of registration to be able to trace any possible misuse of your email address at a later time. The data collected by us during newsletter registration is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the designated link in the newsletter or by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve a further data use that is legally permitted and of which we inform you in this declaration.

6.2 Klaviyo

The dispatch of our email newsletters is carried out by this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provide when registering for the newsletter in accordance with Art. 6 para. 1 lit. f DSGVO to this provider so that they can carry out the newsletter dispatch on our behalf.

Subject to your explicit consent according to Art. 6 para. 1 lit. a GDPR, the provider also conducts a statistical success evaluation of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our site visitors and prohibits passing it on to third parties.

6.3 Product availability notification via email

For temporarily unavailable items, you can sign up to receive email notifications about product availability. We will send you a one-time email regarding the availability of the item you selected. The only required information for sending this notification is your email address. Providing additional data is voluntary and may be used to address you personally. For email dispatch, we use the so-called Double Opt-in procedure, which ensures that you only receive a notification after you have explicitly confirmed your consent by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In this context, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace any possible misuse of your email address at a later time. The data we collect during your registration for our email notification service regarding product availability will be used strictly for the intended purpose.

You can unsubscribe from the availability notifications at any time by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve a further data use that is legally permitted and of which we inform you in this declaration.

6.4 Shopping cart reminders by e-mail

In case you abandon your purchase with us before completing the order, you have the option to be reminded once by e-mail of the contents of your virtual shopping cart.

The only mandatory information for sending this reminder is your e-mail address. Providing additional data is voluntary and may be used to address you personally. For sending the mail, we use the so-called double opt-in procedure, which ensures that you only receive a notification after you have explicitly confirmed your consent by clicking a verification link sent to the specified e-mail address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR for sending a shopping cart reminder. In this context, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace any possible misuse of your email address at a later time. The data we collect during your registration for our email notification service will be used strictly for the intended purpose.

You can unsubscribe from the shopping cart reminders at any time by sending a corresponding message to the responsible party named at the beginning. After deregistration, your email address will be deleted immediately from our distribution list set up for this purpose, unless you have explicitly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

7) Data processing for order processing

7.1 To the extent necessary for contract processing for delivery and payment purposes, the personal data collected by us are forwarded in accordance with Art. 6 para. 1 lit. b GDPR to the commissioned transport company and the commissioned credit institution.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details you provided during the order to inform you personally within the scope of our legal information obligations in accordance with Art. 6 para. 1 lit. c GDPR. Your contact details will be used strictly for the purpose of notifications about updates owed by us and will be processed by us only to the extent necessary for the respective information.

For the processing of your order, we also cooperate with the following service provider(s) who support us wholly or partly in the execution of concluded contracts. Certain personal data are transmitted to these service providers in accordance with the following information.

7.2 EasyDHL

For the preparation of the shipment, we use the services of the following provider: 247APPS UG (limited liability), In der Goldgrube 28, 56073 Koblenz

In accordance with Art. 6 para. 1 lit. b GDPR, we transmit digital shipping labels with your delivery information exclusively for the purpose of processing your online order from our order processing system to the provider, who then sends them to our local printers to enable printing. Data will only be shared to the extent that it is actually necessary for processing.

7.3 Post & DHL Shipping (official)

For the preparation of shipping, we use the services of the following provider: Deutsche Post DHL Research And Innovation GmbH, Kurt-Schumacher-Str. 1, 53113 Bonn
In accordance with Art. 6 para. 1 lit. b GDPR, we transmit digital shipping labels with your delivery information exclusively for the purpose of processing your online order from our order processing system to the provider, who then sends them to our local printers to enable printing. Data will only be shared to the extent that it is actually necessary for processing.

7.4 Transfer of personal data to shipping service providers

- DHL

As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We will pass your email address and/or phone number to the provider in accordance with Art. 6 para. 1 lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your explicit consent during the ordering process. Otherwise, we will only pass on the recipient's name and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The transfer will only take place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Consent can be revoked at any time with effect for the future towards the responsible party named above or towards the provider.
- DHL Express

As a transport service provider, we use the following provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany

Consent can be revoked at any time with effect for the future towards the responsible party named above or towards the provider.
- DPD

As a transport service provider, we use the following provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany

Consent can be revoked at any time with effect for the future towards the responsible party named above or towards the provider.
- GLS

As a transport service provider, we use the following provider: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany

Consent can be revoked at any time with effect for the future towards the responsible party named above or towards the provider.
- Hermes

As a transport service provider, we use the following provider: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany

Consent can be revoked at any time with effect for the future towards the responsible party named above or towards the provider.

7.5 Use of payment service providers (payment services)

- Apple Pay

If you choose the payment method "Apple Pay" from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is done through the "Apple Pay" function of your device running iOS, watchOS, or macOS by charging a payment card stored in "Apple Pay." Apple Pay uses security features that are integrated into the hardware and software of your device to protect your transactions. Therefore, entering a code that you have previously set and verifying using the "Face ID" or "Touch ID" function of your device is required to authorize a payment.

For the purpose of processing payments, the information you provided during the ordering process, along with information about your order, is transmitted in encrypted form to Apple. Apple then re-encrypts this data with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for processing the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the success of the payment.

If personal data is processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.

Apple retains anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.

When you use Apple Pay on the iPhone or Apple Watch to complete a purchase made through Safari on the Mac, the Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you. You can disable the option to use Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and disable "Allow payments on Mac."

Weitere Hinweise zum Datenschutz bei Apple Pay finden Sie unter der nachstehenden Internetadresse: https://support.apple.com/de-de/HT203027
- Paypal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

When selecting a payment method from the provider that requires you to pay in advance, your payment information provided during the ordering process (including name, address, bank and card information, currency, and transaction number) as well as information about the content of your order will be shared with them in accordance with Art. 6 para. 1 lit. b GDPR. The sharing of your data in this case is solely for the purpose of processing the payment with the provider and only to the extent necessary for this.

When selecting a payment method for which we advance payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, if applicable data for an alternative payment method).

In order to safeguard our legitimate interest in determining your payment capability in such cases, this data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR. The provider checks based on the personal data you provided as well as other data (such as shopping cart, invoice amount, order history, payment experiences) whether the payment option you selected can be granted in terms of payment and/or collection default risks.

The credit report may contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things but not exclusively, address data.

You can object to this processing of your data at any time by sending us a message or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for proper payment processing under the contract.
- Paypal Checkout

This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local payment methods from third-party providers.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or - if offered - "Pay Later" via PayPal, we share your payment data with PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or - if offered - "Pay Later" via PayPal. For this purpose, your payment data may be forwarded to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR based on PayPal's legitimate interest in determining your payment capability. The result of the credit check regarding the statistical probability of payment default is used by PayPal for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but is not limited to, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.

In case of availability and selection of the PayPal payment method "Invoice Purchase", your payment data will initially be transmitted to PayPal to prepare the payment, after which PayPal will forward this to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") for the execution of the payment. The legal basis is Art. 6 para. 1 lit. b GDPR. In this case, RatePay conducts an identity and credit check in its own name to determine payment capability according to the principle mentioned above and forwards your payment data to credit agencies based on the legitimate interest in determining payment capability in accordance with Art. 6 para. 1 lit. f GDPR. A list of the credit agencies that Ratepay can rely on can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using the payment method of a local third party, your payment data will first be passed on to PayPal for payment preparation in accordance with Art. 6 para. 1 lit. b GDPR. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the respective provider for the execution of the payment in accordance with Art. 6 para. 1 lit. b GDPR:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

Weitere datenschutzrechtliche Informationen entnehmen Sie bitte der Datenschutzerklärung von PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

When selecting a payment method from the provider where you pay in advance (such as credit card payment), your payment data provided during the ordering process (including name, address, bank and card information, currency, and transaction number) as well as information about the content of your order will be shared with them in accordance with Art. 6 para. 1 lit. b GDPR. The transmission of your data takes place in this case solely for the purpose of payment processing with the provider and only to the extent necessary for this.

7.6 Electronic cancellation option for ongoing obligations with consumers

Consumers who have entered into contracts for paid ongoing obligations (such as subscription contracts) on this website have the option to cancel these via an electronic button in accordance with the applicable cancellation periods.

The activation of the button leads to a confirmation page, on which the consumer can provide further details about the cancellation, clearly identify themselves, and subsequently declare their cancellation electronically.

The collection of personal data and its transmission to us takes place in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for the proper processing of the cancellation. Also based on Art. 6 para. 1 lit. b GDPR, the provided personal data is used to confirm the receipt of the cancellation declaration and the cancellation date electronically in text form. Another legal basis for processing is Art. 6 para. 1 lit. c GDPR. We are legally obligated to provide an electronic cancellation option for consumer contracts concluded via electronic commerce regarding paid ongoing obligations.

8) Retargeting/Remarketing and Conversion Tracking

8.1 Meta Pixel with enhanced data matching

Within our online offering, we use the service "Meta Pixel" in enhanced data matching mode from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")

When a user clicks on an advertisement we have placed on Facebook or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel". This URL parameter is then entered into the user's browser by a cookie that our linked page itself sets after the redirect. Furthermore, this cookie captures specific customer data such as the email address that we collect on our website linked to the Facebook or Instagram ad during processes like purchase completions, account logins, or registrations (enhanced data matching). The cookie is then read and enables the transmission of data including the specific customer data to Meta.

We use 'Meta Pixel' with advanced data matching to make our advertisements (so-called 'Ads') on Facebook and/or Instagram more effective and to ensure that they correspond to users' interests or have certain characteristics (e.g., interests in specific topics or products determined by the visited websites), which we transmit to Meta (so-called 'Custom Audiences').

In addition, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an ad (conversion). Compared to the standard version of 'Meta Pixel', the advanced data matching feature helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.

All transmitted data is stored and processed by Meta, allowing for assignment to the respective user profile, and Meta uses the data for its own advertising purposes in accordance with Meta's data usage policies (https://www.facebook.com/about/privacy/) can be used. The data may enable Meta and its partners to display ads on and off Facebook.

All processing described above, especially setting cookies to read information on the device used, is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

The information generated by Meta is usually transmitted to a server of Meta and stored there; in this context, there may also be a transfer to servers of Meta Platforms Inc. in the USA.

8.2 Taboola

This website uses retargeting technology from the following provider: Taboola Inc., 16 Madison Square West 7th Floor, New York, NY 10010, USA

This allows us to specifically address visitors to our websites with personalized, interest-based advertising who have already shown interest in our shop and our products. The display of advertisements is based on a cookie-based analysis of past and current usage behavior, but no personal data is stored. In cases of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus tailor the advertising to the stored information. These cookies are small text files that are stored on your computer or mobile device. You will see advertisements that are highly likely to match your product and information interests.

All the processing described above, especially the setting of cookies to read information on the device used, is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, the use of retargeting technology during your visit to the site will not take place.

You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie-Consent-Tool" provided on the website.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

9) Rights of the data subject

9.1 The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the controller regarding the processing of your personal data, whereby the respective legal basis for exercising these rights is referred to:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to deletion pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to information pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw given consents pursuant to Art. 7 para. 3 GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

9.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTERESTS AFTER BALANCING INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

10) Duration of storage of personal data

The duration of the storage of personal data is determined based on the respective legal basis, the processing purpose, and – if applicable – additionally based on the respective statutory retention period (e.g., commercial and tax law retention periods).

When processing personal data based on an explicit consent according to Art. 6 para. 1 lit. a GDPR, the affected data will be stored as long as you revoke your consent.

If there are statutory retention periods for data processed within the framework of contractual or contract-like obligations based on Art. 6 para. 1 lit. b GDPR, these data will be routinely deleted after the expiration of the retention periods, provided they are no longer required for contract fulfillment or contract initiation and/or we no longer have a legitimate interest in further storage.

When processing personal data based on Art. 6 para. 1 lit. f GDPR, these data will be stored as long as you exercise your right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

When processing personal data for the purpose of direct advertising based on Art. 6 para. 1 lit. f GDPR, these data will be stored as long as you exercise your right to object under Art. 21 para. 2 GDPR.

Unless otherwise specified by the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

Status: 25.05.2025, 13:01:27

Your shopping cart

Your shopping cart is currently empty.