Data protection

PRIVACY POLICY

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.

1.2 The controller for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Jasmin Butschle, Im Groppen 6, 89185 Hüttisheim, Germany, Tel.: 015205996404, E-mail: siren.pearls@web.de. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. No disclosure or other use of the data takes place. However, we reserve the right to retrospectively check the server log files if there are concrete indications of illegal use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

3.1 Amazon Web Services

For hosting our website and displaying the page content, we use the system of the following provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA

All data collected on our website is processed on the provider's servers.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European data protection level.

3.2 Wix

For hosting our website and displaying the page content, we use the system of the following provider: Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel

Data is also transferred to: Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA

In the event of a data transfer to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

3.3 Google Cloud CDN

We use a Content Delivery Network from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

This service allows us to deliver large media files such as graphics, page content, or scripts faster via a network of regionally distributed servers. Processing is carried out to protect our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

Data may also be transferred to: Google LLC, USA

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for a longer period and allow for the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the cookie settings overview of your web browser.

If personal data is also processed by individual cookies used by us, the processing takes place either in accordance with Art. 6 para. 1 lit. b GDPR for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of a given consent, or in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the visit to the site.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting Us

5.1 When you contact us (e.g., via contact form or email), personal data is processed exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that no statutory retention obligations conflict with this.

5.2 Use of Oracle Service Cloud

When you contact us, our customer service stores and uses further data about the details of your visit to our service pages, such as your IP address, the date and time of your visit, the browser you used, the individual websites you visited, and your respective time spent there. This serves to know which websites you have already visited when processing your request, so that we do not refer you to websites you have already visited and thus know, as part of our service information. This processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the continuous optimization of our customer service and the improvement of consultation quality. Your personal data is stored and used exclusively for the processing and answering of your request or for contacting you and the associated technical administration.

Your personal data is stored on our behalf on cloud servers of Oracle Deutschland B.V. & Co. KG (Riesstraße 25, 80992 Munich), which provides us with storage capacities within the framework of the "Oracle Service Cloud". The cloud servers on which your personal data is stored are located in Germany, so your data never leaves Germany. Your data will be deleted there after your request has been fully processed, provided you wish this and no statutory retention obligations conflict with it.

6) Data Processing When Opening a Customer Account

In accordance with Art. 6 para. 1 lit. b GDPR, personal data is collected and processed to the extent necessary when you provide it to us when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the above-mentioned address of the controller. After deleting your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, no statutory retention periods conflict with this, and we no longer have a legitimate interest in further storage.

7) Data Processing for Order Fulfillment

7.1 Transmission of image files for order processing via email

On our website, we offer customers the possibility to commission the personalization of products by sending image files via email. The submitted image motif is used as a template for the personalization of the selected product.

The customer can send one or more image files from the memory of the used device to us via the email address provided on the website. We then collect, store and use the files thus transmitted exclusively for the production of the personalized product in accordance with the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. No further disclosure takes place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just mentioned are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 para. 1 lit. b GDPR.

After the order has been fully processed, the transmitted image files are automatically and completely deleted.

7.2 Transmission of image files for order processing via message function

If the customer has the option to commission the personalization of products by sending image files via the message function, the submitted image motif is used as a template for the personalization of the selected product.

The customer can send one or more image files from the memory of the used device to us via the existing message function. We then collect, store and use the files thus transmitted exclusively for the production of the personalized product in accordance with the respective description of our services.

If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. No further disclosure takes place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just mentioned are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 para. 1 lit. b GDPR.

After the order has been fully processed, the transmitted image files are automatically and completely deleted.

7.3 Transmission of image files for order processing via upload function

On our website, we offer customers the possibility to commission the personalization of products by sending image files via an upload function. The submitted image motif is used as a template for the personalization of the selected product.

Via the upload form on the website, the customer can send one or more image files from the memory of the used device directly to us via automated, encrypted data transmission. We then collect, store and use the transmitted files exclusively for the production of the personalized product in accordance with the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. No further disclosure takes place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just mentioned are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 para. 1 lit. b GDPR.

After the order has been fully processed, the transmitted image files are automatically and completely deleted.

7.4 To the extent necessary for contract fulfillment for delivery and payment purposes, the personal data collected by us is passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided during the order to inform you personally within the scope of our legal information obligations in accordance with Art. 6 para. 1 lit. c GDPR. Your contact data will be used strictly for the purpose of communicating updates owed by us and processed by us only to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s) who assist us fully or partially in carrying out concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

7.5 To fulfill our contractual obligations to our customers, we cooperate with external shipping partners. We pass on your name, your delivery address, and, if necessary for delivery, your telephone number, exclusively for the purpose of goods delivery in accordance with Art. 6 para. 1 lit. b GDPR to a shipping partner selected by us.

7.6 Packlink Pro

For order processing, we use the following provider: Packlink Shipping S.L., Calle Amaltea 9, 28045 Madrid, Spain

Name, address and, if applicable, other personal data will be passed on to the provider in accordance with Art. 6 Para. 1 lit. b GDPR for the purpose of processing the online order. Your data will only be passed on to the extent that this is actually necessary for the processing of the order. The provider is also used for accounting purposes. Thus, the provider processes incoming and outgoing invoices and, if applicable, also the bank movements of our company to automatically record invoices, match them to transactions and thus create financial accounting in a semi-automated process.

If personal data is processed in this context, the processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in an efficient organization and documentation of our business processes.

7.7 Transfer of personal data to shipping service providers

- Deutsche Post

We use the following provider as a transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

We will pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before the goods are delivered for the purpose of coordinating a delivery date or announcing the delivery, provided you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery, in accordance with Art. 6 Para. 1 lit. b GDPR, we will only pass on the recipient's name and the delivery address to the provider. The transfer will only take place to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the provider or announce the delivery in advance.

Consent can be revoked at any time with effect for the future from the controller named above or from the provider.
- DHL

We use the following provider as a transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

Consent can be revoked at any time with effect for the future from the controller named above or from the provider.
- DHL Express

We use the following provider as a transport service provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany

Consent can be revoked at any time with effect for the future from the controller named above or from the provider.
- DPD

We use the following provider as a transport service provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany

Consent can be revoked at any time with effect for the future from the controller named above or from the provider.
- UPS

We use the following provider as a transport service provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany

Consent can be revoked at any time with effect for the future from the controller named above or from the provider.

7.8 Use of payment service providers (payment services)

- Klarna

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data provided during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be transmitted to them in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will be transmitted exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

If you select a payment method where the provider pays in advance (e.g., invoice or installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address, telephone number, possibly data on an alternative payment method) during the ordering process.

In order to protect our legitimate interest in assessing the creditworthiness of our customers, this data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. Based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experiences), the provider checks whether the payment option you have selected can be granted in view of payment and/or default risks.

In addition to internal provider criteria, identity and creditworthiness information from the following credit agencies can also be included in the decision-making process for the application review, in accordance with Art. 6 Para. 1 lit. f GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Paypal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider where you pay in advance, your payment data communicated during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be transmitted to them in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will be transmitted exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

If you select a payment method where we pay in advance, you will also be asked to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address, telephone number, possibly data on an alternative payment method) during the ordering process.

In such cases, to protect our legitimate interest in assessing your creditworthiness, we will forward this data to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. Based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experiences), the provider checks whether the payment option you have selected can be granted in view of payment and/or default risks.

One or more online payment methods from the following provider are available on this website: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden

One or more online payment methods from the following provider are available on this website: Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel

If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data communicated during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be transmitted to them in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will be transmitted exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

As part of the aforementioned services, data may also be transmitted to Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA, through further processing on their behalf.

When data is transferred to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

7.9 Sanction List Screening

In the context of initiating business relationships and processing orders, we reserve the right to compare the personal data you provide to us with data from sanction lists of the European Union and/or its individual member states, and to decide whether to enter into a business relationship or execute an order based on the results of this comparison.

This data processing is carried out in accordance with Art. 6 Para. 1 lit. c GDPR due to our legal obligation to check and ensure that we do not enter into business relationships with sanctioned natural or legal persons and thus prevent the provision of resources to such persons.

8) Web analysis services

Polyfill

This website uses the service of the following provider: The Financial Times Ltd., Bracken House, 1 Friday Street, London, England, EC4M 9BT

The service installs a script on our website that enables content to be displayed in high quality even on older browser versions by providing and transmitting polyfill files during the browser request to bridge missing browser functions. For this purpose, certain technical information such as browser details and connection data including your IP address in anonymized form are automatically transmitted to the provider.

The information is used to determine which polyfill files are required by your browser for the proper display of the page content.

If personal data is also processed in this context, the processing takes place on the basis of our legitimate interests in the optimal presentation of our website and the optimization of the user experience in accordance with Art. 6 Para. 1 lit. f GDPR.

When data is transmitted to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

9) Site functionalities

9.1 Facebook Plugins

Plugins from the social network of the following provider are used on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using so-called "2-click" or "Shariff" solutions.

This integration ensures that when you access a page on our website that contains such plugins, no connection is yet established with the provider's servers.

Only when you activate the plugins and thus give your consent to the data transfer in accordance with Art. 6 Para. 1 lit. a GDPR, does your browser establish a direct connection to the provider's servers. In this process, regardless of whether you are logged in to an existing user profile, certain information about your device (including your IP address), your browser, and your browsing history is transmitted to the provider and may be further processed there.

If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

9.2 Instagram plugins

Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

These plugins enable direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated using a "2-click" or "Shariff" solution.

This integration ensures that no connection to the provider's servers is established when you access a page of our website that contains such plugins.

Only when you activate the plugins and thereby give your consent to the data transfer in accordance with Art. 6 Para. 1 lit. a GDPR, your browser establishes a direct connection to the provider's servers. In this case, regardless of whether you are logged into an existing user profile, certain information about your end device (including your IP address), your browser and your page history is transmitted to the provider and, if necessary, further processed there.

If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

9.3 Facebook Connect

We provide a single sign-on function from the following provider on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

In addition to the transfer of data to the aforementioned provider location, data may also be transferred to: Meta Platforms Inc., USA

If you have an account with the provider, you can use this account data to create a user account or register on our website.

When you visit this page, this login function can establish a direct connection between your browser and the provider's servers, even if you do not have an account with the provider or are not logged into one. The provider thus receives information that you have visited our site. The information collected in this respect (possibly including your IP address) is transmitted by your browser directly to a server of the provider and stored there. However, the information is not used to identify you personally and is not passed on to third parties.

These data processing operations are carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in a user-friendly and interactive design of our online presence.

If you press the login button to register on our website with your account data from the provider, the provider will transmit the general and publicly accessible information stored in your account (user ID, name, address, email address, age and gender) to us exclusively on the basis of your express consent in accordance with Art. 6 Para. 1 lit. a GDPR.

We store and use the data transmitted by the provider to set up a user account with the necessary data (salutation, first name, surname, address data, country, email address, date of birth), provided that you have released this data to the provider. Conversely, data (e.g. information about your browsing or purchasing behavior) can be transferred from us to your account with the provider on the basis of your consent.

The consent given can be revoked at any time with effect for the future towards us.

9.4 Google Sign-In

We provide a single sign-on function from the following provider on our website: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

In addition to the transfer of data to the aforementioned provider location, data may also be transferred to: Google LLC, USA

If you have an account with the provider, you can use this account data to create a user account or register on our website.

When you visit this page, this login function can establish a direct connection between your browser and the provider's servers, even if you do not have an account with the provider or are not logged into one. The provider thus receives information that you have visited our site. The information collected in this respect (possibly including your IP address) is transmitted by your browser directly to a server of the provider and stored there. The information is not used to identify you personally and is not passed on to third parties.

The consent given can be revoked at any time with effect for the future towards us.

Further information on Google's data protection can be found here: https://business.safety.google/intl/de/privacy/

10) Tools and miscellaneous

Cookie Consent Tool

This website uses a "Cookie Consent Tool" to obtain effective user consent for cookies and cookie-based applications requiring consent. The "Cookie Consent Tool" is displayed to users when they access the page in the form of an interactive user interface, where consent for certain cookies and/or cookie-based applications can be given by checking a box. This ensures that all cookies/services requiring consent are only loaded if the respective user has given corresponding consent by checking the box. This ensures that such cookies are only placed on the respective user's end device if consent has been given.

The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

Another legal basis for the processing is Art. 6 Para. 1 lit. c GDPR. As controllers, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.

Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

Further information on the operator and the setting options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

11) Rights of the data subject

11.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) with regard to the processing of your personal data by the controller, whereby reference is made to the stated legal basis for the respective exercise requirements:

Right to information according to Art. 15 GDPR;
Right to rectification according to Art. 16 GDPR;
Right to erasure according to Art. 17 GDPR;
Right to restriction of processing according to Art. 18 GDPR;
Right to notification according to Art. 19 GDPR;
Right to data portability according to Art. 20 GDPR;
Right to withdraw granted consents according to Art. 7 Para. 3 GDPR;
Right to lodge a complaint according to Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

12) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).

When personal data is processed on the basis of an express consent pursuant to Art. 6 Para. 1 lit. a GDPR, the data concerned will be stored until you revoke your consent.

If there are statutory retention periods for data that is processed within the framework of legal transactions or similar obligations on the basis of Art. 6 Para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfillment or initiation of a contract and/or we no longer have a legitimate interest in further storage.

When personal data is processed on the basis of Art. 6 Para. 1 lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

When personal data is processed for direct marketing purposes on the basis of Art. 6 Para. 1 lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 Para. 2 GDPR.

Unless otherwise specified in the other information in this declaration on specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.