Legal

Privacy Policy

Introduction

Thank you for your interest in 1KOMMA5° (hereinafter "we", "us") and for visiting our website.

With the information presented below, we provide you with an overview of the processing of your personal data on our website https://www.1komma5grad.com/ (hereinafter "Website").

We also want to inform you about your rights under data protection laws. The processing of your personal data by us is always in accordance with the General Data Protection Regulation (hereinafter "GDPR") and all applicable country-specific data protection regulations.

1. Controller

1KOMMA5° GmbH
represented by: Philipp Schröder, Micha Grüber
Neuer Wall 35
20354 Hamburg

E-Mail: info@1komma5grad.com

2. Data Protection Officer

You can reach our data protection officer as follows:
secjur GmbH
Steinhöft 9
20459 Hamburg

Phone: +49 40 228 599 520
E-mail: dsb@secjur.com

 You can contact our data protection officer directly at any time with all questions and suggestions regarding data protection and the exercise of your rights.

3. Definitions

This privacy policy is based on the terminology of the GDPR. For your convenience, we would like to explain some important terms in this context in more detail:

·       Personal Data: Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

·       Data Subject: Data subject is any identified or identifiable natural person whose personal data are processed by the controller.

·       Data Processing: Data processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

·       Recipient: recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

·       Third Party: Third Party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

·       Consent: Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

4. Source of Personal Data

We may obtain personal information in the following ways:

4.1 Information Provided by You

You can provide information (e.g., contact information) about yourself on our website.

4.2 Automatically Collected and Generated Data

By using our website, data is automatically collected and generated.

4.3 Data Collected by Third Parties

As far as we maintain presences in social and professional networks, we may receive data from you via these (e.g., if you contact us via a social or professional network or respond to one of our contents shared there).

5. Scope, Purpose, Legal Basis, Storage Period and Recipients

5.1 General Information

In the following, we provide you with an overview of which personal data we process. For this purpose, we describe to what extent, for what purposes and on what legal basis we process personal data.

We will not disclose your personal data to third parties without your consent, unless this is permitted by law (e.g., because it is necessary for the performance of the contract).

The processing of your personal data may be based on the following legal bases:

• Art. 6 (1)(a) GDPR serves as our legal basis for processing operations where we obtain consent for a certain processing.

• If the processing of personal data is necessary for the performance of a contract to which you are a party, the processing is based on Art. 6 (1)(b) GDPR. The same applies to such processing operations that are necessary for the performance of pre-contractual measures.

• If we are subject to a legal obligation by which a processing of personal data becomes necessary, the processing is based on Art. 6 (1)(c) GDPR.

• Furthermore, processing operations may be based on Art. 6 (1)(f) GDPR. Processing operations are based on this legal basis if the processing is necessary to protect a legitimate interest of ours, provided that the interests, fundamental rights and freedoms of the data subject are not outweighed.

5.2 Data Transfers to Third Countries

Among other things, we use services of companies that are based in third countries (e.g., in the USA). If these services are active, it is possible that data will be transferred to a third country and processed there. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries.

US companies, for example, are obliged to hand over data to authorities or similar institutions, if necessary, without you as the data subject being able to take effective legal action against this according to our understanding of the law. We have no influence on such data transfer.

5.3 Erasure of Data

Insofar as no specific storage period is specified within this data protection notice, the data processed by us will be erased in accordance with the legal requirements as soon as their consents permitted for processing are withdrawn or other permissions cease to apply (e.g. if the purpose of processing this data has ceased to apply or it is not required for the purpose). If the data are not erased because they are required for other and legally permissible purposes, their processing will be limited to these purposes. That is, the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law or whose storage is necessary for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person.

5.4 Security Measures

We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.

The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access to, input of, disclosure of, assurance of availability of and segregation of the data. Furthermore, we have established procedures to ensure the exercise of data subjects' rights, the deletion of data, and responses to data compromise. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and processes in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.

5.5 Transmission of Personal Data

In the course of our processing of personal data, it may happen that the data is transferred to or disclosed to other bodies, companies, legally independent organizational units or persons. Recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements that serve to protect your data with the recipients of your data.

5.6 Website in General

5.6.1 Provision of the Website, Server Log Files

5.6.1.1 Scope of Processing

To provide our website, we use storage space, computing capacity and software that we rent from a corresponding server provider (web host). These services also include the sending, receiving and storage of e-mails. In addition, when you visit our website, data is automatically processed that your browser transmits to our server. This general data and information are stored in the log files of the server (in so-called "server log files"). The following data may be collected:

• Browser type and browser version

• Used operating system

• Referrer URL (previously visited website)

• Host name of the accessing computer

• Date and time of server request

• IP address

5.6.1.2 Purpose of the Processing

When using this data and information, we do not draw any conclusions about your person. The purposes we pursue include in particular:

• Provision of our website

• Provision of our online offer and user-friendliness

• Operation and provision of information systems

• Content Delivery Network (CDN)

• Provision of contractual services

• Customer service

• Provision of e-mail communication

• Ensuring smooth connection of the website

• Clarification of acts of abuse or fraud,

• Problem analysis in the network

• Evaluation of system security and stability.

5.6.1.3 Legal Basis

The legal basis for data processing is our legitimate interest within the scope of Art. 6 (1)(f) GDPR. We have a legitimate interest in being able to provide our website in a technically flawless manner.

5.6.1.4 Recipients of Personal Data

Your data will be transferred to the necessary extent to service providers for hosting and content delivery network (CDN) within the framework of order processing.

5.6.2 Use of Cookies

5.6.2.1 General Information

We use cookies on our website.

These are text files that your browser automatically creates and that are stored on your IT system when you visit our site. Through cookies, certain information flows to the respective place setting the cookie. By using cookies, it is not possible to execute programs or transfer viruses to your terminal device.

If you do not agree to the use of cookies, you can disable them under the settings.

When you visit our website or a sub-website for the first time and it contains cookies, you will be shown a "cookie banner". There you will be informed about the individual cookies that we use. You can find out about each individual cookie in terms of the name, the provider, the purpose of the processing and the storage period. In addition, you can allow us to use cookies that are not necessary and reverse this decision there on again.

In legal terms, a distinction must be made between necessary and non-necessary cookies.

5.6.2.2 Essential Cookies

We use essential cookies. These are cookies that are technically necessary to provide all the functions of our website. The legal basis for data processing is our legitimate interest within the meaning of Art. 6 (1)(f) GDPR. We have an overriding legitimate interest in being able to offer our service in a technically flawless manner. The legal basis for the use of cookies vis-à-vis our contractual partners who make use of services contractually owed by us via our website is Art. 6 (1)(b) GDPR, the provision of our contractual services.

5.6.2.3 Non-essential Cookies

We also use cookies that are not essential (e.g., analysis and marketing cookies). These are cookies that are not technically necessary. We use them to understand your behavior on our website and to improve our offer. The legal basis for the data processing is your consent according to Art. 6 (1)(a) GDPR. The cookies are only set after you have given your consent via our "cookie banner".

5.6.2.4 Storage Period

With regard to storage period, the following types of cookies are distinguished:

• Temporary Cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online offer and closed his end device (e.g., browser or mobile application).

• Permanent Cookies: Permanent cookies remain stored even after the end device is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Likewise, user data collected with the help of cookies can be used for reach measurement. Unless we provide users with explicit information about the type and storage period of cookies (e.g., as part of obtaining consent), users should assume that cookies are permanent and that the storage period can be up to two years.

5.6.3 Cookie Banner

5.6.3.1 Scope of Processing

With our cookie banner, we inform you about the cookies we specifically use. In addition, we give you the opportunity to decide whether you want to consent to the setting of cookies that are not necessary. Processed may be:

• Usage data (e.g., websites visited, time of access).

• Meta and communication data (e.g., IP address)

5.6.3.2 Purpose of Processing

We process your personal data for the following purposes:

• Informing the user about the cookies we use.

• Enabling the user to consent to cookies that are not technically necessary.

5.6.3.3 Legal Basis of Processing

The legal basis for the use of the cookie banner is Art. 6 (1)(f) GDPR. We have an outweighing legitimate interest in using the cookie banner, which allows us to obtain the legally required consents for the use of cookies that are not necessary and to comply with our duty to provide information regarding cookies.

5.6.3.4 Storage Period

The cookie banner stores preferences until you reset or customize them.

5.6.3.5 Recipients of Personal Data

Your data will be transmitted to the necessary extent to a Cookie Banner service provider within the framework of order processing.

5.7 Contact Options

5.7.1 Scope of Processing

Through our website, you have the option to contact us by e-mail.

In the process of contacting, you and responding to your inquiry, we process the following personal data from you:

• First and last name

• e-mail address

• Telephone number

• address data

• Date and time of the inquiry

• IP address

• Communication content, if applicable

5.7.2 Purpose of Processing

We process your data to respond to your inquiry as well as other resulting matters.

5.7.3 Legal Basis

If your request is based in connection with pre-contractual measures or with an existing contract with us, the legal basis is the performance of the contract and the implementation of pre-contractual measures pursuant to Art. 6 (1)(b) GDPR.

If your request is made independently of pre-contractual measures or contracts existing with us, our overriding legitimate interests pursuant to Art. 6 (1)(f) GDPR constitute the legal basis. We have an outweighing legitimate interest in offering visitors to our website a way whereby they can contact us.

5.7.4 Storage Period

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of contact inquiries, this is generally the case when the circumstances indicate that the specific matter has been conclusively processed.

5.7.5 Recipients of Personal Data

Your data will be transmitted to regional partners of ours who will contact you directly as part of the offer preparation and installation process. In addition, your data will be transmitted to a service provider for customer contact management within the scope of order processing to the extent necessary.

5.8 Ordering and Activation of Our Product Heartbeat

5.8.1 Scope of Processing

Through our website, you have the option to order or activate our product "Heartbeat". In order to perform these operations, we process your personal data. In particular, we process the following personal data:

• First and last name

• E-mail address

• Telephone number

• Address data

• Communication content, if applicable

5.8.2 Purpose of Processing

We process your data to manage your request.

5.8.3 Legal Basis

If your inquiry is related to pre-contractual measures or an existing contract with us, the associated data processing operations are based on Art. 6 (1)(b) GDPR.

5.8.4 Recipients of Personal Data

Your data is thereby transmitted to the necessary extent to service providers for the execution of the product order or activation within the scope of order processing.

5.9 Newsletter

5.9.1 Scope of Processing

If you would like to receive information about our new products and services, we may inform you about them via newsletters, provided that you consent to receiving newsletters.

You can withdraw your consent to receive our newsletters at any time by clicking on the unsubscribe link in emails or by sending the revocation by email to info@1komma5grad.com or by post to the contact details given in the imprint. Your personal data will then be removed from the distribution list.

Our newsletters contain so-called tracking links that allow us to analyze the behavior of newsletter recipients. For example, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. This enables us to statistically evaluate the success or failure of online marketing campaigns. The personal data collected through the tracking links is stored and evaluated by us in order to optimize the newsletter dispatch and to better adapt the content of future newsletters to your interests.

Within the scope of the newsletter dispatch, we process the following personal data, among others:

• E-mail address

• First and last name

• Organization

• Preferred language

• Metadata (e.g., device information, IP address, date and time of subscription)

• Interaction with the newsletter

5.9.2 Purpose of Processing

We process your personal data for the following purposes:

• Newsletter dispatch: implementation of marketing measures

• Newsletter tracking: measuring success.

5.9.3 Legal Basis

The legal basis for sending our newsletter is your given consent in accordance with Art. 6 (1) lit. a. You can withdraw your consent at any time, with effect for the future. The legal basis for newsletter tracking is, pursuant to Art. 6 (1)(f) GDPR, our legitimate interest to know whether our newsletter meets your interests and expectations.

5.9.4 Recipients of Personal Data

Your data will be transmitted to the necessary extent to a service provider for newsletter dispatch within the scope of order processing.

5.10 Customer-Relationship-Management-System

5.10.1 Scope and Purpose of Processing

We use functions of a customer relationship management system ("CRM system") on this website. The CRM system enables us, among other things, to manage existing and potential customers as well as customer contacts and to organize sales and communication processes. The use of the CRM System also enables us to analyze and optimize our customer-related processes. Details on the functions of the CRM we use can be found here: https://www.zoho.com/de/crm/help/getting-started/key-features.html.

Through this, we process the following data, among others:

• E-mail address

• First and last name

• Address

• IP address

• Telephone number

5.10.2 Legal Basis

The CRM is used on the basis of Art. 6 (1)(f) GDPR. We have a legitimate interest in the most efficient customer management and customer communication possible. As far as a corresponding consent has been requested, the processing is conducted exclusively on the basis of Art. 6 (1)(a) GDPR; the consent can be withdrawn at any time via our cookie banner.

5.10.3 Recipients of Personal Data

Your data is thereby transmitted to the necessary extent to a service provider for CRM systems within the scope of order processing.

5.11 Google Tag Manager

5.11.1 Scope and Purpose of Processing

We use Google Tag Manager to control the use of code snippets ("tags"), such as tracking code on our website. In doing so, the Google Tag Manager enables us to quickly and easily exchange code on our website via a web interface without having to intervene in the source code.

Through the Google Tag Manager, we process the following personal data, among other things:

• IP address

• Device data, such as operating system, browser version, screen resolution.

5.11.2 Legal Basis

The legal basis for the use of Google Tag Manager is, pursuant to Art. 6 (1)(f) GDPR, our legitimate interest in playing out website tags quickly and easily.

5.11.3 Storage Period

Personal data is anonymized by Google after 9 months unless there is a legal obligation to retain it.

5.11.4 Recipients of Personal Data

Your data will be transmitted to Google Ireland Ltd. to the extent necessary within the framework of order processing.

5.12 Google Analytics

5.12.1 Scope and Purpose of Processing

This website uses functions of the web analytics service Google Analytics. With the help of Google Analytics, we analyze your user behavior in order to make decisions regarding product and marketing optimization based on the results. Through Google Analytics, we process the following personal data, among others:

• Time of request

• IP addresses

• online identifiers

• Device identifiers

• Technical characteristics of users (e.g., browser type and version, device type, operating system)

• Measurement of user behavior (e.g., views of individual pages / content, views of content from different areas, session period / dwell time, bounce rate

• Use of individual website functionalities (e.g., search queries, downloads)

• eCommerce activity (e.g., products purchased, sales)

• Referral URL (the previously visited page)

5.12.2 Legal Basis

The legal basis for the use of Google Analytics is, pursuant to Art. 6 (1)(a) GDPR, the voluntary and revocable consent given by you. You can withdraw your consent at any time with effect for the future by making the appropriate changes or adjustments in your cookie settings.

5.12.3 Storage Period

Personal data will be anonymized by Google 14 months after your last activity, unless there is a legal obligation to retain it.

5.13 Google reCAPTCHA

5.13.1 Scope of Processing

We use Google reCAPTCHA on our website. As a result, we process the following personal data, among others:

• IP address

• Time spent by the website visitor on the website

• Mouse movements made by the user

Further information on Google reCAPTCHA as well as Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

5.13.2 Purpose of Processing

The purpose of reCAPTCHA is to check whether data entry on our websites (e.g., in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website.

5.13.3 Legal Basis

The legal basis for the data processing is, according to Art. 6 (1)(f) GDPR, our overriding interest in protecting our web offers from abusive automated spying and from SPAM.

5.14 Google AdServices

5.14.1 Scope of Processing

Google AdServices ("Ads") is used to target visitors to the online presence for advertising purposes via Google Ads. With the help of Google Ads, target groups can be created that have called up certain pages, for example. This makes it possible to identify the user on other online presences and display targeted advertising. Google sets a cookie on the user's computer. This allows personal data to be stored and evaluated, in particular

• The activity of the user (in particular which pages have been visited and which elements have been clicked on),

• Device and browser information (in particular the IP address and the operating system),

• Data about the advertisements displayed (in particular, which advertisements were displayed and whether the user clicked on them), and

• Also data from advertising partners (in particular pseudonymized user IDs).

Further information on Google Ads as well as Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

5.14.2 Purpose of Processing

Google Ads are used to address specific target groups in order to show them advertising that corresponds to the visitor's interests when they visit the website.

5.14.3 Legal Basis

The legal basis for the use of Google Ads is, pursuant to Art. 6 (1)(a) GDPR, the voluntary and revocable consent given by you. You can withdraw your consent at any time with effect for the future by making the appropriate changes or adjustments in your cookie settings.

5.14.4 Storage Period

Personal data will be anonymized by Google 14 months after your last activity, unless there is a legal obligation to retain it.

5.15 Google Double Click

5.15.1 Scope and Purpose of Processing

We use the online marketing tool DoubleClick from Google. DoubleClick is used to display interest-based advertisements to you throughout the Google advertising network. The advertisements can be targeted to the interests of the respective viewer with the help of DoubleClick. For example, our ads may be displayed in Google search results or in banner ads associated with DoubleClick. In order to be able to display interest-based advertising to users, DoubleClick must be able to recognize the respective viewer and associate him or her with the web pages visited, clicks and other information on user behavior. For this purpose, DoubleClick uses cookies or comparable recognition technologies (e.g., device fingerprinting). The information collected is combined into a pseudonymous user profile in order to display interest-based advertising to the relevant user. In addition, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later uses the same browser to visit the advertiser's website and make a purchase.

5.15.2 Legal Basis

The legal basis for the processing of your data is your consent pursuant to Art. 6 (1)(a) GDPR.

5.16 Outbrain

5.16.1 Scope and Purpose of Processing

On our website, we use the visitor pixel as well as cookies from Outbrain. When you click on an advertisement and arrive at our website, the Outbrain Pixel allows us to track your behavior on our website. In addition, the Outbrain Pixel allows us to target you with advertising if you have already shown interest in certain products on our website. To recognize and track you on our website, the Outbrain Pixel uses a unique identifier. The information required for this, as well as the information that you have visited our website, which browser and which terminal device you are using, is stored in cookies and transmitted to Outbrain. This process is used to evaluate the effectiveness of Outbrain's advertisements for statistical and market research purposes and can help to optimize future advertising measures.

• For more information, please see Outbrain's privacy policy:

https://www.outbrain.com/de/legal/privacy

5.16.2 Legal Basis

The legal basis for data processing is your consent pursuant to Art. 6 (1)(a) GDPR. You can withdraw your consent at any time with effect for the future by making the appropriate changes or adjustments in your cookie settings.

5.17 Facebook-Pixel – Joint Controllership with Facebook

5.17.1 General Information

We use the so-called "Facebook Pixel" from Meta Platforms Ireland Limited ("Meta") - formerly Facebook Ireland Limited - on our websites under joint responsibility.

When you call up our website via your browser, the Facebook pixel built into this initiates a cookie storage in your system if you have given your consent. The legal basis for this is Art. 6 (1)(a) GDPR. You can withdraw your consent at any time with effect for the future by making the appropriate changes or adjustments in your cookie settings.

Joint Controllers in the sense of Art. 26 GDPR are:

• Meta Platforms, Ireland Ltd, 4 Grand Canal Square, Dublin 2 Ireland.

• 1KOMMA5° GmbH, Neuer Wall 35, 20354 Hamburg, Germany.

5.17.2 Joint Controller Agreement

The joint responsibility agreement pursuant to Art. 26 (1)(2) GDPR is available at: https://www.facebook.com/legal/controller_addendum

5.17.3 Data Processing by Meta

All information collected by the cookie is transmitted to Meta and allows Meta to draw conclusions about your user behavior. If you are registered on a Meta platform/service, Meta can assign this visit to you. Even if you are not registered on a Meta platform/service or are not logged in, it is possible that Meta will receive and store your IP address and other identifiers in a way that can be attributed to you.

For further information regarding the data processing for which Meta is responsible, please refer to the following information sources, for example:

• Meta Terms of Use: https://www.facebook.com/legal/terms/update

• Data policy: https://de-de.facebook.com/privacy/explanation

5.17.4 Data Processing by US

We receive data from Meta exclusively without personal reference, which is used for the purpose of optimizing and measuring the success of interest-based advertisements and events.

5.18 Social Media Presences

5.18.1 General Information

We use third-party platforms to provide you with information about our company and our products and services. This involves processing interactions such as messages, likes and content on our social media channels.

In addition, we receive data from third-party platforms without personal reference, such as total number of measures played out by the platform operator or preferred visiting and posting times. We have no influence on the creation and provision of this data. The legal basis for the processing here is Art. 6 (1)(f) GDPR, our legitimate interest lies in the improvement of our marketing measures.

The personal data processing associated with this takes place exclusively in the area of responsibility of the platform operators. Further information on data processing can be found in the privacy statements of the respective providers:

• Instagram: https://de-de.facebook.com/help/instagram/519522125107875

• YouTube: https://policies.google.com/privacy

• LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

• Twitter: https://twitter.com/de/privacy

• TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/en

5.19 Incorporation of Third-Party Services and Content

5.19.1 General Information

We use content or service offerings from third-party providers within our online offering in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").

This always requires that the third-party providers of this content are in possession of the IP address of the user, as without the IP address, they would not be able to send the content to the user's browser. The IP address is thus required for the display of this content. We strive to use only such content whose respective providers use the IP address only for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as be linked to such information from other sources.

5.19.2 SoundCloud

We integrate the player "SoundCloud" of the provider SoundCloud Global Limited & Co. KG. The processed data may include, in particular, IP addresses and location data of the users are collected.

• For more information, please refer to the privacy policy of SoundCloud: https://soundcloud.com/pages/privacy

5.19.3 Google Maps

We integrate the maps of the Google Maps service of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data may include, in particular, IP addresses and location data of the users, are collected.

• You can find more information in Google's privacy policy: https://www.google.com/policies/privacy/

6. Your Rights

In this section, we inform you about the rights you have in relation to the processing of your data. The exact scope of the right mentioned in each case can be found in the corresponding Art. of the GDPR. If you wish to exercise any of your rights, please contact us via email (dsb@secjur.com).

6.1 Right to Confirmation

You have the right to request confirmation from us whether personal data relating to you is being processed by us.

6.2 Right of Access by the Data Subject (Art. 15 GDPR)

You have the right to obtain from us at any time, free of charge, information about the personal data stored about you, as well as a copy of this data in accordance with the legal provisions.

6.3 Right of Rectification (Art. 16 GDPR)

You have the right to request that incorrect personal data concerning you be corrected. Furthermore, you have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

6.4 Right to Erasure (Art. 17 GDPR)

You have the right to request that we erase personal data concerning you without undue delay if one of the reasons provided for by law applies and to the extent that the processing or storage is not necessary.

6.5 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to demand that we restrict processing if one of the legal requirements applies.

6.6 Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without obstruction by us, to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6 (1)(a) GDPR or Art. 9 (2)(a) GDPR or on a contract pursuant to Art. 6 (1)(b) GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

In addition, when exercising your right to data portability pursuant to Art. 20(1) of the GDPR, you have the right to obtain that the personal data be transferred directly from one controller to another controller, to the extent that this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

6.7 Right to Object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of data processing in the public interest pursuant to Art. 6 (1)(e) GDPR or on the basis of our legitimate interest pursuant to Art. 6 (1)(f) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

6.8 Withdrawal of Consent

You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.

6.9 Complaint to a Supervisory Authority

You have the right to complain about our processing of personal data to a supervisory authority responsible for data protection.

7. Actuality and Changes of the Privacy Policy

This data protection notice is currently valid and has the following status: June 2023.

If we further develop our website and our offers or if legal or regulatory requirements change, it may be necessary to amend this data protection notice. You can access the current data protection information at any time here.