Privacy policy
1) Introduction and Contact Information of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about the handling of your personal data when using our website. Personal data here refers to all data with which you can be personally identified.
1.2 The controller for data processing on this website, in terms of the General Data Protection Regulation (GDPR), is Ingo Gerdes, Ingo Gerdes - memodec, Altwickeder Hellweg 246, 44319 Dortmund, Germany, Tel.: +4923113733979, E-Mail: contact@memodec.com. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 When merely using our website for information purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website visited
- Date and time at the moment of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
3) Hosting & Content Delivery Network
Shopify
For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")
Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
All data collected on our website is processed on the provider's servers. We have entered into a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, small text files that are stored on your device. Some of the cookies we use are deleted after the browser session is ended, i.e., after you close your browser (so-called “session cookies”). Other cookies remain on your device and enable us to recognize your browser on your next visit (so-called “persistent cookies”). You can check the duration of storage in the overview of cookie settings in your web browser.
If individual cookies we use also process personal data, processing is carried out in accordance with Art. 6(1)(b) GDPR either for the execution of the contract, according to Art. 6(1)(a) GDPR in the case of given consent, or according to Art. 6(1)(f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser to inform you about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for specific cases or in general.
Please note that the functionality of our website may be limited if cookies are not accepted.
5) Contacting
When contacting us (e.g., via contact form or email), personal data is collected - only to the extent necessary to process and respond to your request.
The legal basis for processing this data is our legitimate interest in responding to your request according to Article 6(1)(f) GDPR. If your contact aims at concluding a contract, then an additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after your request has been finalized, provided that there are no legal storage obligations to the contrary.
6) Data Processing When Opening a Customer Account
According to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide them to us for the purpose of opening a customer account. Which data is required for opening the account can be seen from the input mask of the respective form on our website.
Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted, unless all contracts concluded via the account have been fully processed, no statutory retention periods apply, and there is no continuing legitimate interest in their further storage on our part.
7) Use of Client Data for Direct Advertising
Subscription to our E-Mail Newsletter
If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which means that we will only send you newsletters once you confirm your consent by clicking on a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent for the use of your personal data according to Art. 6(1)(a) GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace any possible misuse of your e-mail address at a later time. The data collected by us when registering for the newsletter will be used exclusively for the purpose of promotional communication via the newsletter.
You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending the corresponding message to the controller mentioned above. After cancellation, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.
8) Data Processing for Order Processing
8.1 To the extent necessary for contract processing, personal data collected by us are passed on to the transport company commissioned with the delivery and the credit institution commissioned with payment processing, in accordance with Art. 6(1)(b) GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details transmitted by you during the order (name, address, email address) to inform you personally about upcoming updates within the legally provided period in an appropriate way (e.g., by mail or email) according to our statutory information obligations under Art. 6(1)(c) GDPR. Your contact details are strictly used for the purpose of notifying you about updates owed by us and are processed by us only as far as this is necessary for the respective information.
For the processing of your order, we also work with the following service provider(s) who support us wholly or partly in the execution of concluded contracts. Certain personal data are transmitted to these service providers according to the following information.
8.2 Use of Payment Service Providers (Payment Services)
- Apple Pay
If you choose the payment method "Apple Pay" by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the "Apple Pay" function of your iOS, watchOS, or macOS device by charging a payment card stored in "Apple Pay". Apple Pay uses security features built into the hardware and software of your device to protect your transactions. To release a payment, entering a code previously defined by you and verifying it via "Face ID" or "Touch ID" on your device is required.
For the purpose of payment processing, the information you provided during the order process, along with information about your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to execute the payment. The encryption ensures that only the website from which the purchase was made can access the payment data. After the payment is made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the payment success.
If personal data is processed during the described transmissions, the processing is carried out exclusively for the purpose of payment processing according to Art. 6(1)(b) GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. The anonymization eliminates any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
When you use Apple Pay on the iPhone or Apple Watch to complete a purchase made through Safari on the Mac, the Mac and the authorization device communicate through an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can be used to identify you. You can disable the ability to use Apple Pay on your Mac in the settings on your iPhone. Go to "Wallet & Apple Pay", and disable "Allow Payments on Mac".
For more information about privacy with Apple Pay, visit the following webpage: https://support.apple.com/de-de/HT203027
- Bancontact
On this website, one or more online payment methods of the following provider are available: Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium
If you choose a payment method of the provider where you make an advance payment (e.g., credit card payment), your payment data shared during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order according to Art. 6(1)(b) GDPR are passed on to this provider. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
- EPS Transfer
On this website, one or more online payment methods of the following provider are available: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2,1200 Vienna, Austria
If you choose a payment method of the provider where you make an advance payment (e.g., credit card payment), your payment data shared during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order according to Art. 6(1)(b) GDPR are passed on to this provider. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
- Google Pay
If you select the payment method "Google Pay" by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing is carried out via the "Google Pay" application of your mobile device running at least Android 4.4 ("KitKat") and equipped with an NFC function by charging a payment card stored in Google Pay or a verified payment system (e.g., PayPal). To release a payment over Google Pay for amounts over €25, the prior unlocking of your mobile device by the respective verification measure (e.g., facial recognition, password, fingerprint, or pattern) is required.
For the purpose of payment processing, the information you provided during the order process, along with information about your order, is passed on to Google. Google then transmits your payment information stored in Google Pay in the form of a uniquely assigned transaction number to the originating website, which verifies a successful payment. This transaction number contains no information about the real payment data of your payment means stored in Google Pay but is created and transmitted as a one-time valid numerical token. For all transactions via Google Pay, Google acts only as an intermediary to process the payment transaction. The execution of the transaction occurs exclusively in the relationship between the user and the originating website by charging the payment means stored in Google Pay.
If personal data is processed during the described transmissions, the processing is carried out exclusively for the purpose of payment processing according to Art. 6(1)(b) GDPR.
Google reserves the right to collect, store, and evaluate certain transaction-specific information for every transaction conducted via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of the goods or services purchased provided by the merchant, photos you attached to the transaction, the name and email address of the seller and buyer or sender and receiver, the payment method used, your description of the reason for the transaction, and possibly the offer associated with the transaction.
According to Google, this processing is carried out exclusively based on Art. 6(1)(f) GDPR on the basis of Google's legitimate interest in proper invoicing, verification of transaction data, and the optimization and functional maintenance of the Google Pay service.
Google also reserves the right to merge the processed transaction data with further information collected and stored by Google when using other Google services.
The terms of use for Google Pay can be found here:
For more information about privacy at Google Pay, visit the following webpage:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- iDeal
On this website, one or more online payment methods of the following provider are available: Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands
If you choose a payment method of the provider where you make an advance payment (e.g., credit card payment), your payment data shared during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order according to Art. 6(1)(b) GDPR are passed on to this provider. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
- Klarna
On this website, one or more online payment methods of the following provider are available: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden
If you choose a payment method of the provider where you make an advance payment (e.g., credit card payment), your payment data shared during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order according to Art. 6(1)(b) GDPR are passed on to this provider. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
If you select a payment method of the provider where the provider advances the payment (e.g., invoice purchase, installment purchase, or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and possibly data on an alternative payment method) during the order process.
To protect our legitimate interest in determining the solvency of our customers, these data are forwarded by us to the provider for the purpose of a credit assessment according to Art. 6(1)(f) GDPR. The provider checks based on the personal data provided by you and other data (such as shopping cart, invoice amount, order history, payment experiences) whether the selected payment option can be granted in view of payment and/or default risks.
In the context of the application review, identity and credit information from the following credit agencies may also be included according to Art. 6(1)(f) GDPR based on the provider's internal criteria:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things but not exclusively, address data.
You can object to this processing of your data at any time by sending a message to us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
- PayPal
On this website, one or more online payment methods of the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you choose a payment method of the provider where you make an advance payment, your payment data shared during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order according to Art. 6(1)(b) GDPR are passed on to this provider. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
If you select a payment method of the provider where we advance the payment, you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and possibly data on an alternative payment method) during the order process.
To protect our legitimate interest in determining your solvency in such cases, these data are forwarded by us to the provider for the purpose of a credit assessment according to Art. 6(1)(f) GDPR. The provider checks based on the personal data provided by you and other data (such as shopping cart, invoice amount, order history, payment experiences) whether the selected payment option can be granted in view of payment and/or default risks.
The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things but not exclusively, address data.
You can object to this processing of your data at any time by sending a message to us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Shopify Payments
On this website, one or more online payment methods of the following provider are available: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
If you choose a payment method of the provider where you make an advance payment (e.g., credit card payment), your payment data shared during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order according to Art. 6(1)(b) GDPR are passed on to this provider. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
9) Web Analysis Services
Google Analytics 4
This website uses Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.
By default, when visiting the website, Google Analytics 4 sets cookies, which are small text elements stored on your device, and collects certain information. This information includes your IP address, which, however, is shortened by Google to exclude direct personal reference.
The information is transmitted to Google's servers and processed there. This may also include transmissions to Google LLC located in the USA.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website use and internet use. The IP address transmitted by your browser within the scope of Google Analytics and shortened will not be merged with other Google data. The data collected in the context of the use of Google Analytics 4 is stored for a duration of two months and then deleted.
All the processing described above, especially the setting of cookies on the used device, only takes place if you have given us your explicit consent according to Art. 6(1)(a) GDPR. Without your consent, Google Analytics 4 will not be used during your site visit. You can revoke your given consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service via the “Cookie-Consent-Tool” provided on the website.
We have entered into a data processing agreement with Google, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
Further legal information about Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites.
Demographic Features
Google Analytics 4 uses the special feature "demographic characteristics" and can thus generate statistics that provide information on the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third parties. This allows marketing audiences to be identified. However, the collected data cannot be attributed to a specific person and is deleted after being stored for a duration of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to create reports on cross-device behavior. If you have activated personalized ads and have linked your devices to your Google account, Google can analyze your usage behavior across devices and create database models, including cross-device conversions, subject to your consent to the use of Google Analytics according to Art. 6(1)(a) GDPR. We do not receive any personal data from Google, only statistics. If you want to stop the cross-device analysis, you can disable the "Personalized advertising" function in the settings of your Google account. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de
UserIDs
As an extension to Google Analytics 4, the "UserIDs" function may be used on this website. If you have consented to the use of Google Analytics 4 according to Art. 6(1)(a) GDPR, have set up an account on this website, and sign in on various devices with this account, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.
10) Retargeting/Remarketing and Conversion Tracking
Pinterest Tag Conversion Tracking
This website uses the conversion tracking technology of the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
If you arrived at our website from an advertisement on the provider's domain, cookies and/or similar technologies (tracking pixels, web beacons, pings, or HTTP requests) can be used to track the success of the advertisement.
Through tracking technology, certain device and browser information, including possibly your IP address, is read out to capture and evaluate predefined user actions (e.g., completed transactions, leads, searches on the website, views of product pages) defined by us. This allows the creation of statistics about the behavior on our website after being redirected from an advertisement, which serves us to optimize our offer.
All the processing described above, especially the setting of cookies for reading information on the used device, only takes place if you have given us your explicit consent according to Art. 6(1)(a) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the “Cookie-Consent-Tool” provided on the website.
We have entered into a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
11) Site Functionalities
11.1 Google Maps
This website uses an online map service of the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Maps is a web service for displaying interactive (land) maps to visually present geographical information. Using this service shows you our location and makes it easier to find us.
Already when accessing those sub-pages in which the map from Google Maps is embedded, information about your use of our website (such as your IP address) is transmitted to Google's servers and stored there, which may also include transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account that you are logged in with or if there is no user account. If you are logged into Google, your data will be directly associated with your account. If you do not wish the assignment to your profile on Google, you must log out before activating the button. Google stores your data (even for users not logged in) as usage profiles and evaluates them.
The collection, storage, and evaluation are carried out according to Art. 6(1)(f) GDPR based on Google's legitimate interest in the display of personalized advertising, market research, and/or demand-oriented design of Google websites. You have a right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree with the future transmission of your data to Google as part of using Google Maps, you also have the option to completely deactivate the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus also the map display on this website cannot then be used.
Where legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6(1)(a) GDPR. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please follow the previously described option to make an objection.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.
11.2 Google reCAPTCHA
On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA. For the optical design of the Captcha window, the provider "Google Fonts", that is, fonts loaded by Google from the Internet, are used. There is no processing of further information other than the ones mentioned above, which are already transmitted through the functionality of reCAPTCHA to Google.
The service checks whether an entry is made by a natural person or is misused through mechanical and automated processing, and blocks spam, DDoS attacks, and similar automated malicious access. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the used device, identification data of the used browser and operating system type, as well as date and duration of the visit and transmits this data to the provider's servers for evaluation.
The legal basis is our legitimate interest in determining individual responsibility on the internet and the prevention of misuse and spam according to Art. 6(1)(f) GDPR.
We have entered into a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.
12) Tools and Miscellaneous
Cookie-Consent-Tool
This website uses a so-called “Cookie-Consent-Tool” to obtain effective user consents for cookies and cookie-based applications requiring consent. The “Cookie-Consent-Tool” displays an interactive user interface to users at the page call-up, which allows consents to be given for certain cookies and/or cookie-based applications by ticking a box. This ensures that such cookies are only loaded on the respective user's device if the user has given consent. The tool sets technically necessary cookies to save your cookie preferences. Personal user data are basically not processed.
If the storage, assignment, or logging of cookie settings involves the processing of personal data (such as the IP address), this is carried out according to Art. 6(1)(f) GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Another legal basis for processing is furthermore Art. 6(1)(c) GDPR. As the responsible party, we are subject to the legal obligation to make the use of technically non-essential cookies dependent on the respective user consent.
Where necessary, we have entered into a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
Further information about the operator and the settings of the Cookie-Consent-Tool can be found directly in the corresponding user interface on our website.
13) Rights of the Data Subject
13.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) with regard to the processing of your personal data, about which we inform you below:
- Right of access by the data subject according to Art. 15 GDPR;
- Right to rectification according to Art. 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing according to Art. 18 GDPR;
- Right to be informed according to Art. 19 GDPR;
- Right to data portability according to Art. 20 GDPR;
- Right to withdraw consents granted according to Art. 7(3) GDPR;
- Right to lodge a complaint according to Art. 77 GDPR.
13.2 RIGHT TO OBJECT
IF, WITHIN THE FRAMEWORK OF A BALANCE OF INTERESTS, WE PROCESS YOUR PERSONAL DATA DUE TO OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US TO CARRY OUT DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
14) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the processing purpose, and - if relevant - additionally by the respective legal retention period (e.g., commercial and tax retention periods).
When processing personal data on the basis of an explicit consent according to Art. 6(1)(a) GDPR, this data is stored until the person concerned revokes their consent.
If there are statutory retention periods for data that is processed within the framework of legal or similar obligations based on Art. 6(1)(b) GDPR, these data are routinely deleted after the retention periods expire, provided they are no longer necessary for the fulfillment of the contract or the initiation of a contract and/or there is no longer any legitimate interest on our part in their further storage.
When processing personal data on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object according to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights, and freedoms of the data subject, or the processing serves the assertion, exercise, or defense of legal claims.
When processing personal data for the purpose of direct advertising on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object according to Art. 21(2) GDPR.
Unless otherwise indicated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.