PRIVACY POLICY - botspot

In this privacy policy we inform you about the processing of personal data when using our website.

Personal data is information that relates to an identified or identifiable person. This primarily includes information that allows conclusions to be drawn about your identity, for example your name, your telephone number, your address or e-mail address. Statistical data that we collect, for example, when you visit our website and that cannot be linked to your person do not fall under the concept of personal data.

CONTENT OF THIS PRIVACY POLICY

1. Contact person
2. Data processing on the website
2.1 Calling up our website / access data
2.2 Establishing contact Inquiry by e-mail, telephone or fax Contractual relationship: customer and contract data Newsletter Applications
3. use of cookies and similar technologies
3.1 Legal basis and revocation
3.2 Necessary tools
3.3 Functional Tools
3.4 Analysis tools
3.6 Marketing cookies
3.6 Tools and external media
4. online presence in social networks
5. disclosure of data
6. data transfer to third countries
7. storage period
8. your rights, in particular revocation and objection
9. changes to the privacy policy

1.CONTACT

Contact Contact person and so-called responsible for the processing of your personal data when visiting this website within the meaning of the General Data Protection Regulation (DSGVO) is the
botspot 3D Scan GmbH
Bruno-Bürgel-Weg 134-144
12439 Berlin

Phone: +49 30 985 40 40 0
E-mail: mail@botspot.de

For all questions on the subject of data protection in connection with our products and services or the use of our website, you can also contact our data protection officer at any time. She can be reached at the above postal address (keyword: “attn. data protection officer”) as well as at datenschutz@botspot.de We expressly point out that if you use this e-mail address, the contents will not be exclusively noted by our data protection officer. If you wish to exchange confidential information, we therefore request that you first contact us directly via this e-mail address.

2.DATA PROCESSING ON OUR WEBSITE

1.1 CALLING UP OUR WEBSITE / ACCESS DATA

Each time you use our website, we collect the access data that your browser automatically transmits to enable you to visit the website. The access data includes in particular:

– Browser type and browser version
-operating system used
-referrer URL
-Host name of the accessing computer
-Time of the server request
-IP address

The data processing of this access data is necessary to enable the visit of the website and to ensure the permanent functionality and security of our systems. The access data is also temporarily stored in internal log files for the purposes described above, in order to compile statistical information about the use of our website, to further develop our website with regard to the usage habits of our visitors (e.g. if the proportion of mobile devices with which the pages are accessed increases) and to generally maintain our website administratively. The legal basis is Art. 6 para. 1 p. 1 lit. b DSGVO, insofar as the page view occurs in the course of the initiation or execution of a contract, and otherwise Art. 6 para. 1 p. 1 lit. f DSGVO due to our legitimate interest in the permanent functionality and security of our systems. The log files are stored for 7 days and archived after subsequent anonymization.

1.2 CONTACT

You have various options for contacting us. This includes the contact form. In this context, we process data exclusively for the purpose of communicating with you.

The legal basis is Art. 6 para. 1 p. 1 lit. b DSGVO, insofar as your information is required to answer your inquiry or to initiate or execute a contract, and otherwise Art. 6 para. 1 p. 1 lit. f DSGVO due to our legitimate interest that you contact us and we can answer your inquiry. If you are not an existing customer, we will also send you promotional e-mails only on the basis of your consent. In these cases, the legal basis is Art. 6 para. 1 sentence 1 lit. a DSGVO.

“The data you enter in the contact form will remain with us, in particular until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after processing your enquiry has been completed). Mandatory legal provisions – in particular retention periods – remain unaffected.”

1.3 REQUEST BY E-MAIL, TELEPHONE OR TELEFLAX

You have various options for also contacting us by e-mail, telephone or fax. In this context, we process data exclusively for the purpose of communicating with you.
The legal basis is Art. 6 para. 1 p. 1 lit. b DSGVO, insofar as your information is required to answer your inquiry or to initiate or execute a contract, and otherwise Art. 6 para. 1 p. 1 lit. f DSGVO due to our legitimate interest that you contact us and we can answer your inquiry. We only make promotional telephone calls if you have given your consent for this. If you are not an existing customer, we will also only send you promotional e-mails on the basis of your consent. The legal basis in these cases is Art. 6 para. 1 p. 1 lit. a DSGVO.
“The data you enter in the contact form will remain with us, in particular until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after processing your enquiry has been completed). Mandatory legal provisions – in particular retention periods – remain unaffected.”

1.4 CONTRACTUAL RELATIONSHIP: CUSTOMER AND CONTRACT DATA

We collect, process and use personal data only to the extent that it is necessary for the establishment, content or modification of the legal relationship (inventory data). We collect, process and use personal data about the use of our Internet pages (usage data) only insofar as this is necessary to enable the user to use the service or to bill the user.
The legal basis is Art. 6 para. 1 p. 1 lit. b DSGVO, insofar as your data is required to answer your inquiry or to initiate or execute a contract.

1.5 NEWSLETTER

You have the option of subscribing to our newsletter, in which we will regularly inform you about innovations to our products, services and promotions. For ordering our newsletters we use the so-called double opt-in procedure, i.e. we will only send you newsletters by e-mail if you confirm in our notification e-mail by clicking on a link that you are the owner of the specified e-mail address. If you confirm your e-mail address, we will store your e-mail address, the time of registration and the IP address used for registration until you unsubscribe from the newsletter. The storage serves the sole purpose of sending you the newsletter and to be able to prove your registration. You can unsubscribe from the newsletter at any time. A corresponding unsubscribe link can be found in every newsletter. A message to the contact details provided above or in the newsletter (e.g. by e-mail or letter) is of course also sufficient for this purpose. The legal basis for the processing is your consent in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO. We use standard market technologies in our newsletters with which the interactions with the newsletters can be measured (e.g. opening of the email, links clicked on). We use this data in pseudonymous form for general statistical evaluations and for the optimization and further development of our content and customer communication. This is done with the help of small graphics embedded in the newsletter (so-called pixels). The data is collected exclusively pseudonymously and is not linked to your other personal data. The legal basis for this is your consent in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO. We want to share content that is as relevant as possible for our customers and interested parties via our newsletter and better understand what readers are actually interested in. If you do not want the analysis of usage behaviour, you can unsubscribe from the newsletters or deactivate graphics in your email program by default. The data on interaction with our newsletters is stored pseudonymously for 30 days and then completely anonymized.
Sendinblue (formerly Newsletter2Go) is used as the newsletter software. Your data will be transmitted to Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. You can find more information under 5. “Data transfer”.

1.6 APPLICATIONS

You can apply to us for open positions via our application page (https://botspot.de/de/stellenangebote-und-karriere/) by e-mail (career@botspot.de). The purpose of the data collection is the selection of applicants for the possible establishment of an employment relationship. For the purpose of receiving and processing your application, we collect the following data in particular: First name and surname, e-mail address, application documents (e.g. certificates, CV), date of earliest possible job start and salary expectations. The legal basis for the processing of your application documents is Art. 6 para. 1 p. 1 lit. b and Art. 88 para. 1 DSGVO in conjunction with § 26 para. 1 p. 1 BDSG.

3 USE OF COOKIES AND SIMILAR TECHNOLOGIES

This website uses cookies and similar technologies (collectively, “Tools”) provided either by us or by third parties.
A cookie is a small text file that is stored on your device by the browser. Cookies are not used to run programs or download viruses onto your computer. Comparable technologies are in particular web storage (local / session storage), fingerprints, tags or pixels. Most browsers are set by default to accept cookies and similar technologies. However, you can usually adjust your browser settings so that cookies or similar technologies are rejected or only stored with your prior consent. If you refuse cookies or similar technologies, not all of our offers may function properly for you.
In the following, we list the tools we use by category, informing you in particular about the providers of the tools, the storage period of the cookies and the transfer of data to third parties. In addition, we explain in which cases we obtain your voluntary consent to use the tools and how you can revoke this consent.
Should – even despite the greatest care – the information in the cookie banner contradict that in this data protection

3.1 LEGAL BASIS AND REVOCATION

3.1.1 LEGAL BASIS

We use tools necessary for website operation based on our legitimate interest pursuant to Art. 6 (1) p. 1 lit. f DSGVO to enable you to use our website more conveniently and individually and to make use as time-saving as possible. In certain cases, these tools may also be necessary for the performance of a contract or for the implementation of pre-contractual measures, in which case the processing is carried out in accordance with Art. 6 (1) p. 1 lit. b DSGVO.
We use all other tools, in particular those for marketing purposes, on the basis of your consent pursuant to Art. 6 (1) sentence 1 lit. a DSGVO and pursuant to Section 15 (3) sentence 1 TMG, insofar as usage profiles are created for the purposes of advertising or market research. Data processing with the help of these tools only takes place if we have received your consent in advance.
If personal data is transferred to third countries, we refer you to section 6 (“Data transfer to third countries”), also with regard to the possible associated risks. We will inform you if we have concluded standard contractual clauses or other guarantees with the providers of certain tools. If you have given your consent to the use of certain tools, we (also) transfer the data processed when using the tools to third countries on the basis of this consent.

4 OBTAINING YOUR CONSENT

For the collection and management of your consents we use the tool (please complete naming of the tool: e.g. Usercentrics of Usercentrics GmbH, Rosental 4, 80331 Munich (“Usercentrics”)). This generates a banner which informs you about the data processing on our website and gives you the opportunity to agree to all, individual or no data processing by optional tools. This banner will appear the first time you visit our website and when you revisit your preferences selection to change them or withdraw consents. The banner will also appear on subsequent visits to our website if you have disabled the storage of cookies or the cookie has been deleted by (please add: e.g. Usercentrics) or has expired. Your consent or revocation, your IP address, information about your browser, your terminal device and the time of your visit are transmitted to (please add tool regarding cookie banner). In addition, (please add tool) sets a necessary cookie to store your given consents and revocations. If you delete your cookies, we will ask you for your consent again when you visit the site at a later time. The data processing by (please add tool e.g. Usercentrics) is necessary to provide you with the legally required consent management and to comply with our documentation obligations. The legal basis for the use of (please add tool e.g. Usercentrics) is Art. 6 para. 1 p. 1 lit. f DSGVO, justified by our interest in fulfilling the legal requirements for cookie consent management.

4.1 WITHDRAWAL OF YOUR CONSENT OR CHANGE OF YOUR SELECTION

You can revoke your consent for certain tools at any time. To do so, click on the following link/button: [link/button]. There you can also change the selection of the tools you wish to consent to using, as well as obtain additional information on the cookies and the respective storage period. Alternatively, you can assert your revocation for certain tools directly with the provider.

4.2 NECESSARY TOOLS

We use certain tools to enable the basic functions of our website (“necessary tools”). Without these tools, we could not provide our service. Therefore, necessary tools are used without consent based on our legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO or for the performance of a contract or for the performance of pre-contractual measures pursuant to Art. 6 (1) p. 1 lit. b DSGVO.

4.2.1 OWN COOKIES

We use our own necessary cookies in particular
– for load distribution,
– to save your language settings,
– to indicate that information placed on our website has been di

4.2.2 GOOGLE TAG MANAGER

Our website uses Google Tag Manager, a service provided for users from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other users by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (together “Google”).
The Tag Manager is used to manage tracking tools and other services, so-called website tags. A tag is an element that is stored in the source code of our website, for example, to record specified usage data. The Google Tag Manager ensures that the usage data required by our partners is forwarded to them. The Google Tag Manager does not require the use of cookies. Legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO, based on our legitimate interest to integrate and manage multiple tags in an uncomplicated way on our website. We have concluded an order processing agreement with Google. Partially, data is processed on a Google server in the USA. In the event that personal data is transferred to the USA or other third countries, we have concluded standard contractual clauses with Google pursuant to Art. 46 (2) lit. c DSGVO. For further information, please refer to section 6 (“Data transfer to third countries”). For more information, see Google’s information on TagManager

4.2.3 GOOGLE FONTS

Our website uses the Google Fonts service, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area and Switzerland and by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (together “Google”) for all other users.
When you call up a page, your browser loads the fonts required to display texts correctly and attractively. For this purpose, your browser must establish a connection to Google’s servers. This tells Google that our website was accessed via your IP address. According to Google, such calls are separate from other Google services that require user authentication. A consolidation with other data does not take place. No cookies are stored.
The legal basis for data processing is your voluntary consent in accordance with Art. 6 (1) p. 1 lit. a DSGVO. Google Fonts serves a uniform and appealing presentation of our online presence through maintenance-free and efficient use of fonts, also taking into account any licensing restrictions for their local integration.
The server to which a connection is established may be located in the USA. In the event that personal data is transferred to the USA or other third countries, your consent expressly extends to the data transfer (Art. 49 (1) sentence 1 lit. a DSGVO). Please refer to section 6 (“Data transfer to third countries”) for the associated risks.
For more information, please see Google’s Frequently Asked Questions and Privacy Policy.

4.4 ANALYSIS TOOLS

In order to improve our website, we use tools for the statistical collection and analysis of general usage behaviour based on access data (“analysis tools”). We also use analytics services to evaluate the use of our various marketing channels.
The legal basis for the analysis tools is – unless otherwise stated – your consent according to Art. 6 para. 1 p. 1 lit. a DSGVO. For the revocation of your consent, see 3.1.3 “Revoking your consent or changing your selection”. In the event that personal data is transferred to the USA or other third countries, your consent expressly extends to the transfer of data (Art. 49 (1) sentence 1 lit. a DSGVO). Please refer to section 6 (“Data transfer to third countries”) for the associated risks.

4.5 MARKETING TOOLS

We also use tools for advertising purposes (“marketing tools”). Some of the access data collected when using our website is used for interest-based advertising. By analyzing and evaluating this access data, we are able to display personalized advertising, i.e. advertising that corresponds to your actual interests and needs, on our website and on the websites of other providers.
The legal basis for the marketing tools is your consent according to Art. 6 para. 1 p. 1 lit. a DSGVO. For the revocation of your consent, see 3.1.3 “Revoking your consent or changing your selection”. In the event that personal data is transferred to the USA or other third countries, your consent expressly extends to the transfer of data (Art. 49 (1) sentence 1 lit. a DSGVO). Please refer to section 6 (“Data transfer to third countries”) for the associated risks.
In the following section, we would like to explain these technologies and the providers used for this purpose in more detail. The data collected may include in particular:
– the IP address of the device;
– the identification number of a cookie;
-the device identifier of mobile devices (Device ID);
-Referrer URL (previously visited page);
-Pages viewed (date, time, URL, title, length of stay);
-Downloaded files;
-Clicked links to other websites;
-If applicable, achievement of certain goals (conversions);
-Technical Information: Operating system; browser type, version and language; device type, brand, model and resolution;
-Approximate location (country and city, if applicable).

However, the collected data is only stored pseudonymously, so that no direct conclusions can be drawn about the persons.

4.4 ANALYSIS TOOLS

4.5.1 GOOGLE MARKETING PLATFORM AND AD MANAGER (FORMERLY DOUBLECLICK)

Our website uses the Google Marketing Platform and the Google Ad Manager, services which are offered for users from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other users by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (together “Google”).
These services use cookies and similar technologies to present you with advertisements that are relevant to you. Use of the Services enables Google and its partner sites to serve ads based on previous visits to our site or other sites on the Internet.
The data generated in this context may be transferred by Google to a server in the USA for evaluation and stored there. In the event that personal data is transferred to the USA, we have concluded standard contractual clauses with Google.
If you have not consented to the use of Google Marketing Platform and Ad Manager, Google will only display general advertising that has not been selected based on the information collected about you on this website. In addition to withdrawing your consent, you also have the option to disable personalized advertising in Google’sadvertising settings.
The following cookies are set by Google:
“IDE” for 12 months.
You can find more information on this in Google’s privacy policy.

4.6 TOOLS AND EXTERNAL MEDIA

We also use tools and other external media, such as embedded videos or maps.
The legal basis for this is – unless otherwise stated – your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO, which you give via the cookie banner or with the respective tool itself by individually allowing its use via a banner (overlay) placed above it. For the revocation of your consent, see 3.1.3 “Revoking your consent or changing your selection”. In the event that personal data is transferred to the USA or other third countries, your consent expressly extends to the transfer of data (Article 49 (1) sentence 1 lit. a DSGVO). Please refer to section 6 (“Data transfer to third countries”) for the associated risks.

4.6.1 YOUTUBE VIDEOS

We have embedded videos in our website that are stored on YouTube and are playable from our websites, provided you have consented. YouTube is a multimedia service of YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (“YouTube”), a group company of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
We have activated the extended data protection mode of YouTube. This means that Google does not receive any usage information and does not set any cookies until the user actively clicks on the play button. After this click, the video is played and Google sets its own cookies to improve its services and to play individualized advertising in the Google advertising network.
By visiting our website, YouTube and Google receive the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether you are logged into YouTube or Google or not. YouTube and Google use this data for the purposes of advertising, market research and demand-oriented design of their websites. If you call up YouTube on our website while you are logged into your YouTube or Google profile, YouTube and Google can also link this event to the respective profiles. If you do not want the association, it is necessary that you log out of Google before calling up our website.
In addition to withdrawing your consent, you also have the option of deactivating personalised advertising in Google’s advertising settings. In this case, Google will only display non-individualized advertising.
You can find more information in Google’s privacy policy, which also applies to YouTube.

4.6.2 GOOGLE MAPS

Our website uses the map service Google Maps, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area and Switzerland and by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (together “Google”) for all other users.
In order for the Google map material we use to be integrated and displayed in your web browser, your web browser must establish a connection to a Google server, which may also be located in the USA, when you call up our website. In the event that personal data is transferred to the USA or other third countries, we have concluded standard contractual clauses with Google.
By integrating the map material, Google receives the information that a page of our website was called up from the IP address of your device. If you call up the Google map service on our website while you are logged into your Google profile, Google can also link this event to your Google profile. If you do not wish to be associated with your Google profile, you must log out of Google before accessing our contact page. Google stores your data and uses it for purposes of advertising, market research and personalized display of Google Maps. For more information, please see Google’s privacy policy and the Google Maps Additional Terms of Service.

ONLINE PRESENCE IN SOCIAL NETWORKS

We maintain online presences in social networks in order to communicate there with customers and interested parties, among others, and to provide information about our products and services.
The users’ data is usually processed by the social networks concerned for market research and advertising purposes. Thus, usage profiles can be created based on the interests of the users. For this purpose, cookies and other identifiers are stored on the users’ computers. On the basis of these usage profiles, advertisements, for example, are then placed within the social networks but also on third-party websites.
As part of the operation of our online presences, it is possible that we may access information such as statistics on the use of our online presences provided by the social networks. These statistics are aggregated and may include, in particular, demographic information and data on interaction with our online presences and the posts and content distributed via them. Please refer to the list below for details and links to the data of the social networks that we, as operators of the online presences, can access.
The legal basis for data processing is Art. 6 (1) p. 1 lit. f DSGVO, based on our legitimate interest in effectively informing users and communicating with users, or Art. 6 (1) p. 1 lit. b DSGVO, in order to stay in contact with and inform our customers and to carry out pre-contractual measures with future customers and interested parties.
For the legal basis of the data processing carried out by the social networks on their own responsibility, please refer to the data protection information of the respective social network. Under the following links you will also receive further information on the respective data processing as well as the objection options.
We would like to point out that data protection requests can be asserted most efficiently with the respective provider of the social network, as only these providers have access to the data and can take appropriate measures directly. Below is a list with information on the social networks on which we operate online presences:

Operation of the Facebook Fanpage in joint responsibility on the basis of an agreement on joint processing of personal data (so-called Page Insights Supplement regarding the controller).
— Operation of the Facebook Fanpage in joint responsibility on the basis of an agreement on joint processing of personal data(so-called Page Insights Supplement regarding the controller).
— Information on the processed site insights data and the contact option in the event of data protection queries:https://www.facebook.com/legal/terms/information_about_page_insights_data
— Privacy Policy: https://www.facebook.com/about/privacy/
–Opt-Out: https://www.facebook.com/settings?tab=ads andhttp://www.youronlinechoices.com

Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
— Privacy Policy: https://help.instagram.com/519522125107875
–Google/YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
–Privacy Policy:https://policies.google.com/privacy Opt-Out: https://www.google.com/settings/ads.

– Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland)
–Privacy Policy: https://twitter.com/de/privacy
–Opt-Out: https://twitter.com/personalization.

LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
— Operation of the LinkedIn company page in joint responsibility on the basis of an agreement on joint processing of personal data (so-called Page Insights Joint Controller Addendum).
— Information on the processed site insights data and the contact option in the event of data protection queries:https://legal.linkedin.com/pages-joint-controller-addendum
— Privacy Policy: https://www.linkedin.com/legal/privacy-policy
— Opt-Out:https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.SketchFab (1123 Broadway, Ste 501, New York, NY 10010).
— Privacy Policy: https://sketchfab.com/privacy

5 INFORMATION DISCLOSURE

A passing on of the data raised by us takes place in principle only, if:
– you have given your express consent to this in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO,
– the disclosure is necessary in accordance with Art. 6 (1) sentence 1 lit. f DSGVO for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not having your data disclosed,
– we are legally obliged to pass on data in accordance with Art. 6 Para. 1 Sentence 1 lit. c DSGVO or
– this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b DSGVO for the processing of contractual relationships with you or for the implementation of pre-contractual measures, which take place upon your request.

Part of the data processing may be carried out by our service providers. In addition to the service providers mentioned in this privacy policy, this may include, in particular, data centres that store our website and databases, software providers, IT service providers that maintain our systems, agencies, market research companies and consultancies. If we pass on data to our service providers, they may only use the data to fulfil their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound to our instructions, have suitable technical and organisational measures in place to protect the rights of the data subjects and are regularly monitored by us.

In addition, disclosure may occur in connection with official inquiries, court orders and legal proceedings if it is necessary for legal prosecution or enforcement.

6 DATA TRANSFER TO THIRD COUNTRIES

As explained in this privacy policy, we use services whose providers are partly located in so-called third countries (outside the European Union or the European Economic Area) or process personal data there, i.e. countries whose level of data protection does not correspond to that of the European Union. Where this is the case and the European Commission has not issued an adequacy decision (Art. 45 GDPR) for these countries, we have taken appropriate precautions to ensure an adequate level of data protection for any data transfers. These include, among others, the standard contractual clauses of the European Union or binding internal data protection regulations.
Where this is not possible, we base the transfer of data on exceptions of Art. 49 DSGVO, in particular your explicit consent or the necessity of the transfer for the performance of the contract or for the implementation of pre-contractual measures.
If a third country transfer is provided for and no adequacy decision or appropriate safeguards are in place, it is possible and there is a risk that authorities in the respective third country (e.g. intelligence services) may gain access to the transferred data in order to collect and analyse it and that the enforceability of your data subject rights cannot be guaranteed. When obtaining your consent via the cookie banner, you will also be informed of this.

7 STORAGE PERIOD

In principle, we store personal data only as long as necessary to fulfil the purposes for which we collected the data. Thereafter, we delete the data immediately, unless we still need the data until the expiry of the statutory limitation period for evidence purposes for civil claims or due to statutory retention obligations.
For evidence purposes, we must retain contractual data for three years from the end of the year in which the business relationship with you ends. Any claims become statute-barred at the earliest on this date in accordance with the statutory limitation period.
Even after this, we still have to store some of your data for accounting reasons. We are obliged to do so because of legal documentation obligations that may arise from the German Commercial Code, the German Fiscal Code, the German Banking Act, the German Money Laundering Act and the German Securities Trading Act. The periods specified there for the retention of documents are two to ten years.

8 YOUR RIGHTS , IN PARTICULAR REVOCATION AND OBJECTION

You are entitled to the data subject rights formulated in Art. 15 – 21, Art. 77 DSGVO at any time
Right to withdraw your consent;
— Right to object to the processing of your personal data (Art. 21 DSGVO);
— Right to information about your personal data processed by us (Art. 15 DSGVO);
— Right to rectification of your personal data stored by us that is incorrect (Art. 16 DSGVO);
— Right to erasure of your personal data (Art. 17 DSGVO);
— Right to restrict the processing of your personal data (Art. 18 DSGVO);
— Right to data portability of your personal data (Art. 20 DSGVO);
— Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

level of data protection. Provided that the respective legal requirements are met, we will comply with your data protection request. The legal basis is Art. 6 (1) p. 1 lit. f DSGVO, based on our interest in defending against any civil claims under Art. 82 DSGVO, avoiding fines under Art. 83 DSGVO and fulfilling our accountability obligations under Art. 5 (2) DSGVO.

You have the right to revoke your consent at any time. This has the consequence that we no longer continue the data processing based on this consent for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. Insofar as we process your data on the basis of legitimate interests, you have the right to object to the processing of your data at any time on grounds relating to your particular situation. If it is a matter of objecting to data processing for direct marketing purposes, you have a general right of objection, which will also be implemented by us without giving reasons. If you would like to make use of your right of revocation or objection, it is sufficient to send an informal message to the contact data mentioned above.

Finally, you have the right to complain to a data protection supervisory authority. You can exercise this right at a supervisory authority in the member state of your residence, your workplace or the location of the alleged violation. In Berlin, our headquarters, the competent supervisory authority is: Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin.

9 CHANGES TO THE PRIVACY POLICY

We may occasionally update this privacy statement, for example, if we make changes to our website or if legal or regulatory requirements change.