Privacy Policy

**INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER**

1.1 We are pleased that you visit our website and thank you for your interest. We inform you below about how we process your personal data when you use our site. Personal data is any information that allows you to be personally identified.

1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is Modetrendhaus. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries addressed to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the padlock symbol in your browser's address bar.

**DATA COLLECTION WHEN VISITING OUR WEBSITE**

If you use our website only for informational purposes, that is, without registering or providing us with other information, we only collect the data your browser transmits to our server (the "server log files"). When you access our site, we collect the following data, technically necessary to display the site to you:

- The website visited
- The date and time of access
- The amount of data sent in bytes
- The source/resource through which you arrived at the site
- The browser used
- The operating system used
- The IP address used (possibly anonymized)

Processing is carried out in accordance with Article 6, paragraph 1, lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not transmitted or used otherwise. However, we reserve the right to check the server log files later if there are concrete indications of illegal use.

**COOKIES**

To make the visit to our website attractive and enable the use of certain features, we use cookies on several pages. These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of your browser session, i.e., when you close your browser (session cookies). Other cookies remain on your device and allow us or our partners (third-party cookies) to recognize your browser during your next visit (persistent cookies). When cookies are set, they collect and process, to an individual extent, certain information about users such as browser data, location data, and IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

Some cookies serve to simplify the ordering process by storing settings (for example, remembering the contents of a virtual shopping cart for a later visit to the site). When some of the cookies we implement also process personal data, the processing is carried out in accordance with Article 6, paragraph 1, lit. b GDPR either for the execution of the contract or in accordance with Article 6, paragraph 1, lit. f GDPR for the protection of our legitimate interests regarding the optimal functionality of the website and a user-friendly and efficient design of the site visit.

We may collaborate with advertising partners who help us make our online offer more attractive to you. For this purpose, cookies from partner companies may also be stored on your hard drive (third-party cookies) during your visit to our site. When we collaborate with these advertising partners, you will be informed individually and separately about the use of these cookies and the extent of the information collected in the following sections.

Please note that you can configure your browser to notify you about the installation of cookies and allow you to decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or generally. Each browser differs in how it manages cookie settings. Information on this is available in the help menu of each browser, which explains how to change your cookie settings. You can find information for the following browsers at the following links:

Internet Explorer : [https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies](https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies)
- Firefox : [https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen]
- Chrome : [https://support.google.com/chrome/answer/95647?hl=de]
- Safari : [https://support.apple.com/de-de/guide/safari/sfri11471/mac]
- Opera : [https://help.opera.com/de/latest/web-preferences/#cookies]

Please note that if you do not accept cookies, the functionality of our website may be limited.

**CONTACT**

As part of contacting us (e.g., via a contact form or by email), personal data is collected. The data collected when using a contact form is visible in the respective contact form. This data is stored and used only to respond to your request or for contact and associated technical administration. The legal basis for data processing is our legitimate interest in responding to your request according to Article 6, paragraph 1, lit. f GDPR. If your contact aims to conclude a contract, the additional legal basis for processing is Article 6, paragraph 1, lit. b GDPR. Your data will be deleted after your request has been fully processed; this occurs when the circumstances show that the issue in question has been resolved and unless there is a legal obligation to retain it.

**DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING**

In accordance with Article 6, paragraph 1, lit. b GDPR, personal data is also collected and processed when you provide it to us for the execution of a contract or when opening a customer account. The data collected is visible in the respective input forms. Deleting your customer account is possible at any time and can be done by sending a message to the responsible party mentioned above. We store and use the data you have provided for contract processing. After the full execution of the contract or deletion of your customer account, your data is blocked due to tax and commercial retention periods and deleted after these periods expire, unless you have expressly consented to further use of your data or if we reserve a later use of the data permitted by law, which we will inform you about in this statement.

**USE OF YOUR DATA FOR DIRECT MARKETING**

6.1 Subscription to our email newsletter

When you sign up for our newsletter by email, we regularly send you information about our offers. The email address is the only mandatory information for sending the newsletter. Providing other data is optional and is used to address you personally. For sending the newsletter, we use the double opt-in method. This means that we will only send you a newsletter by email if you have expressly confirmed that you agree to receive newsletters. We will then send you a confirmation email asking you to confirm by clicking on a link that you want to receive newsletters in the future.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Article 6, paragraph 1, lit. a GDPR. When registering for the newsletter, we store the IP address you registered with your Internet service provider (ISP) as well as the date and time of registration in order to be able to track possible misuse of your email address at a later date. The data we collect when registering for the newsletter is used solely for marketing purposes via the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a message to the person responsible mentioned above. After your unsubscription, your email address will be immediately deleted from our mailing list unless you have expressly consented to further use of your data or we reserve a use

subsequent data processing permitted by law, about which we will inform you in this statement.

6.2 Sending the newsletter by email to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers regarding goods or services similar to those already purchased from our range by email. For this purpose, we do not need to obtain your separate consent in accordance with Article 7, paragraph 3, UWG. The data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Article 6, paragraph 1, lit. f GDPR. If you initially objected to the use of your email address for this purpose, no emails will be sent. You have the right to object to the use of your email address for this purpose at any time with effect for the future by sending a message to the person responsible mentioned above. The only costs for you will be the transmission fees at basic rates. After receiving your objection, the use of your email address for advertising purposes will be stopped immediately.

**DATA PROCESSING FOR ORDER PROCESSING**

7.1 The personal data we collect is transmitted as part of contract processing to the shipping company responsible for delivery, to the extent necessary for the delivery of goods. We transmit your payment data to the bank responsible for payment processing, to the extent necessary for payment processing. If payment service providers are used, we will expressly inform you about this below. The legal basis for data transmission is Article 6, paragraph 1, lit. b GDPR.

7.2 Use of payment service providers

**PayPal**

When you pay via PayPal, PayPal credit card, PayPal direct debit, or – if available – "purchase on invoice" or "installment payment" via PayPal, we transmit your payment data to PayPal (Europe) S.a.r.l. and Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of payment processing. The transmission is carried out in accordance with Article 6, paragraph 1, lit. b GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to perform a credit check for payment methods via PayPal credit card, PayPal direct debit, or – if available – "purchase on invoice" or "installment payment" via PayPal. For this purpose, your payment data may be transmitted to credit rating agencies in accordance with Article 6, paragraph 1, lit. f GDPR based on PayPal’s legitimate interest in assessing your creditworthiness. The result of the credit assessment, concerning the statistical probability of default, is used by PayPal to decide on the availability of the respective payment method. The credit assessment may include probability values (called scores). When scores are considered in the credit assessment result, they are based on a scientifically recognized mathematical and statistical method. Address data is particularly taken into account in the calculation of scores. For additional information on data protection, including the credit rating agencies used, please refer to PayPal’s privacy statement: [https://www.paypal.com/de/webapps/mpp/ua/privacy-full]

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may be entitled to process your personal data to the extent necessary for the processing of contractual payments.

**SOFORT**

If you choose the payment method "SOFORT," payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we transmit the information you provided during the order process, as well as information about your order in accordance with Article 6, paragraph 1, lit. b GDPR. The transmission of your data is exclusively for the purpose of processing payments with the payment service provider SOFORT and only to the extent necessary for this purpose.

SOFORT GmbH is part of the Klarna group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). For more information on SOFORT's data protection rules, please visit: [https://www.klarna.com/sofort/datenschutz]

 **REVIEW REMINDER NOTICE**

**Personal Review Reminder (not sent via a customer review management system)**

We use your email address to send you a one-time reminder to submit a review of your order for the rating system we use, if you have expressly given us your consent in accordance with Article 6, paragraph 1, lit. a GDPR during or after your order. You can withdraw your consent at any time by sending a message to the data controller.

**USE OF SOCIAL MEDIA: SOCIAL PLUG-INS**

**9.1 Facebook Plug-ins with Shariff Solution**

Our site uses social plug-ins ("plug-ins") from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

To protect your data when visiting our site, these buttons are not integrated directly as plug-ins but only via an HTML link. This integration ensures that no connection to Facebook servers is established when you visit a page on our site containing these buttons. By clicking the button, a new browser window will open and display the Facebook page where you can (after possibly entering your login details) interact with the available plug-ins.

Facebook Inc., based in the USA, is certified under the EU-US Privacy Shield, ensuring compliance with the data protection standards in force in the EU.

For more information on the collection, use, and protection of data by Facebook as well as your rights and settings options, please see Facebook's privacy policies: [https://www.facebook.com/policy.php](https://www.facebook.com/policy.php).

**9.2 Google+ Plug-ins with Shariff Solution**

Our site uses social plug-ins ("plug-ins") from the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

To protect your data when visiting our site, these buttons are not integrated directly as plug-ins but only via an HTML link. This integration ensures that no connection to Google+ servers is established when you visit a page on our site containing these buttons. By clicking the button, a new browser window will open and display the Google+ page where you can (after possibly entering your login data) interact with the available plug-ins.

Google LLC, based in the USA, is certified under the EU-US Privacy Shield, ensuring compliance with the data protection standards applicable in the EU.

For more information on the collection, use, and protection of data by Google as well as your rights and settings options, please see Google's privacy policies: [https://www.google.com/intl/de/policies/privacy](https://www.google.com/intl/de/policies/privacy).

**9.3 Instagram Plug-ins with Shariff Solution**

Our site uses social plug-ins ("plug-ins") from the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

To protect your data when visiting our site, these buttons are not integrated directly as plug-ins but only via an HTML link. This integration ensures that no connection to Instagram servers is established when you visit a page on our site containing these buttons. By clicking the button, a new browser window will open and display the Instagram page where you can (after possibly entering your login data) interact with the available plug-ins.

Instagram LLC, based in the USA, is certified under the EU-U.S. Privacy Shield, ensuring compliance with data protection standards in the EU.

For more information on the collection, use, and protection of data by Instagram as well as your rights and settings options, please see Instagram's privacy policies: [https://help.instagram.com/155833707900388/](https://help.instagram.com/155833707900388/).

**ONLINE MARKETING**

**10.1 Google DoubleClick**

This site uses the online marketing tool DoubleClick from Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to deliver relevant ads to users, improve campaign performance reports, or prevent a user from seeing the same ad multiple times. Using a cookie identifier, Google can record which ads were shown in which browser and thus avoid repetition. The processing is based on our legitimate interest in the optimal marketing of our website according to Article 6, paragraph 1, lit. f GDPR.

In addition, DoubleClick may use cookie identifiers to record conversions associated with ad requests. This happens when a user sees a DoubleClick ad and later accesses the advertiser's website with the same browser and makes a purchase there. According to Google, DoubleClick cookies do not contain personal information.

Your browser automatically establishes a direct connection to Google's servers due to the marketing tools used. We have no influence on the scope and subsequent use of the data collected by Google through this tool and therefore inform you according to our knowledge: Through the integration of DoubleClick, Google receives the information that you have visited the corresponding part of our site or clicked on an ad from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider obtains and records your IP address.

If you do not wish to participate in this tracking, you can disable conversion tracking cookies by configuring your browser to block cookies from the domain www.googleadservices.com at [https://www.google.de/settings/ads](https://www.google.de/settings/ads). This setting will be removed when you delete your cookies. You can also learn about cookie settings via the Digital Advertising Alliance at [www.aboutads.info](http://www.aboutads.info) and adjust the settings. Finally, you can configure your browser to be notified when cookies are set and decide individually whether to accept them or exclude cookie acceptance for certain cases or in general. Please note that not accepting cookies may limit the functionality of our site.

Google LLC, based in the USA, is certified under the EU-US Privacy Shield, ensuring compliance with the data protection standards applicable in the EU.

For more information on Google's privacy policies, please visit: [https://www.google.de/policies/privacy/](https://www.google.de/policies/privacy/).

You can permanently object to the use of cookies for advertising settings by configuring your browser software to block cookies or by downloading and installing the browser plug-in available at the following address: [https://www.google.com/settings/ads/plugin?hl=de](https://www.google.com/settings/ads/plugin?hl=de).

Please note that some features of this site may not be available or only available to a limited extent if you disable cookies.

**10.2 Use of Google AdWords Conversion Tracking**

This site uses the online advertising program "Google AdWords" and conversion tracking from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google AdWords to draw attention to our attractive offers with the help of ads (the "Google AdWords") on external sites. This allows us to determine the success of advertising campaigns in relation to the data. We aim to show you ads that interest you, make our website more appealing to you, and fairly calculate advertising costs.

A conversion tracking cookie is set when you click on a Google AdWords ad served by Google. Cookies are small text files stored on your computer system. These cookies usually expire after 30 days and are not used to personally identify users. When the user visits certain pages of this site and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie, so cookies cannot be tracked across AdWords customers' websites. The information collected using conversion cookies is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page containing a conversion tracking tag. However, they do not receive information that allows them to

Personally identify users. If you do not wish to participate in tracking, you can opt out by disabling the conversion tracking cookie via your internet browser settings. You will then not be included in the conversion tracking statistics. We use Google AdWords due to our legitimate interest in targeted advertising according to Article 6, paragraph 1, lit. f GDPR.

Google LLC, based in the USA, is certified under the EU-US Privacy Shield, ensuring compliance with the data protection standards applicable in the EU.

For more information about Google's privacy policies, please visit: [https://www.google.de/policies/privacy/](https://www.google.de/policies/privacy/).

You can permanently object to the use of cookies for advertising settings by configuring your browser software to block cookies or by downloading and installing the browser plug-in available at the following address: [https://www.google.com/settings/ads/plugin?hl=de](https://www.google.com/settings/ads/plugin?hl=de).

Please note that some features of this site may not be available or only available to a limited extent if you disable cookies.

 **WEB ANALYTICS SERVICES**

**Google (Universal) Analytics**

This site uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies," text files that are stored on your computer and allow analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to a Google server in the United States and stored there.

This site uses Google Analytics with the "_anonymizeIp()" extension, which ensures the anonymization of the IP address by deletion to exclude any direct connection to an individual. With this extension, your IP address is first shortened by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area. In exceptional cases, the full IP address is transmitted to a Google server in the United States and shortened there. In these exceptional cases, this processing is carried out in accordance with Article 6, paragraph 1, lit. f of the GDPR, based on our legitimate interest in statistically analyzing user behavior for optimization and marketing purposes.

Google will use this information on our behalf to evaluate your use of the website, compile reports on site activity, and provide other services related to website use and Internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by configuring your browser software accordingly; however, please note that you may not be able to use all the features of this website fully. Additionally, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following address: [Google Analytics Opt-out Browser Add-on](https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser plugin or in mobile browsers, click the following link to set an opt-out cookie that will prevent future data collection by Google Analytics on this website (this opt-out cookie only works in this browser and for this domain; if you delete your cookies in this browser, you will need to click this link again): [Disable Google Analytics](https://tools.google.com/dlpage/gaoptout?hl=de).

Google LLC, based in the United States, is certified under the EU-U.S. Privacy Shield, ensuring compliance with the data protection standards applicable in the EU.

This site also uses Google Analytics for cross-device analysis of visitor flows, carried out via a user ID. On the first visit to a page, a unique, permanent, and anonymized ID is assigned to the user, which is set on all devices. This allows data from interactions on different devices and sessions for the same person to be combined. The user ID does not contain personal data and does not transmit such data to Google.

You can object at any time to the future collection and storage of data via the user ID. To do this, you must disable Google Analytics on all systems you use, for example in another browser or on a mobile device.

You can disable this with Google's browser plugin (Google Analytics Opt-out Browser Add-on). Alternatively, you can click the following link to set an opt-out cookie that will prevent future data collection by Google Analytics on this website (this opt-out cookie only works in this browser and for this domain; if you delete your cookies in this browser, you will need to click this link again): [Disable Google Analytics](https://tools.google.com/dlpage/gaoptout?hl=de).

For more information about Universal Analytics, please see: [Universal Analytics - Google Analytics Help](https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376).

**TARGETED ADVERTISING/REMARKETING/AD RECOMMENDATION**

**Facebook Pixel for Custom Audiences**

This site uses the "Facebook Pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With your explicit consent, it is possible to track user behavior after they have seen or clicked on a Facebook ad. This process allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and can help optimize future advertising campaigns.

The data collected is anonymous to us, meaning it does not allow conclusions about the identity of users. However, this data is stored and processed by Facebook, allowing it to be linked to the relevant user profile and used for Facebook's own advertising purposes, in accordance with Facebook's privacy policy (https://www.facebook.com/about/privacy/). You can allow Facebook and its partners to display ads on and off Facebook. A cookie may also be stored on your computer for these purposes. These processes are carried out only on the basis of explicit consent in accordance with Article 6, paragraph 1, lit. a of the GDPR.

Consent to the use of the Facebook pixel can only be given by users over the age of 13. If you are younger, please ask your parents for permission.

Facebook Inc., based in the United States, is certified under the EU-U.S. Privacy Shield, ensuring compliance with the data protection standards applicable in the EU.

To disable cookies on your computer, you can configure your internet browser so that no cookies are stored on your computer in the future or to delete cookies already stored. However, disabling all cookies may result in reduced functionality of our site. You can also disable third-party cookies like Facebook via the Digital Advertising Alliance website: [https://www.aboutads.info/choices/](https://www.aboutads.info/choices/).

**Google AdWords Remarketing**

Our site uses Google AdWords remarketing features, which allow us to display ads for this site in Google search results as well as on third-party sites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google uses a cookie in your device's browser, enabling interest-based advertising based on the pages you have visited, using a pseudonymous cookie identifier. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Article 6, paragraph 1, lit. f of the GDPR.

Additional data processing only takes place if you have consented to your Internet and app browsing history being associated with your Google account and that your Google account information is used to personalize the ads you see on the web. If you are logged into Google during your visit to our website, Google uses your data in combination with Google Analytics data to create and define target lists for cross-device remarketing. For this purpose, your personal data is temporarily associated with Google Analytics data to form target groups.

You can permanently object to the setting of cookies for ads by configuring your browser software accordingly or by downloading and installing the browser plugin available at the following address: [Google Ads Settings](https://www.google.com/settings/ads/onweb/).

Alternatively, you can learn about cookie definitions via the Digital Advertising Alliance at the following address: [www.aboutads.info](http://www.aboutads.info) and make the necessary settings. Finally, you can configure your browser to be informed about cookie settings and decide individually whether to accept them or exclude their acceptance in certain cases or generally. Please note that not accepting cookies may limit the functionality of our site.

Google LLC, based in the United States, is certified under the EU-U.S. Privacy Shield, ensuring compliance with the data protection standards applicable in the EU.

For more information about Google advertising and technologies, please visit: [Google Advertising Technologies](https://policies.google.com/technologies/ads?hl=de).

**RIGHTS OF DATA SUBJECTS**

**13.1** The data protection law grants you extensive rights as a data subject (rights to information and intervention) vis-à-vis the controller regarding the processing of your personal data, which we inform you about below:

- **Right of access according to Article 15 of the GDPR:** You have the right, in particular, to obtain information about

your personal data that we process, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the intended retention period or the criteria for determining this period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the envisaged consequences of such processing, as well as your right to know what safeguards are offered according to Article 46 of the GDPR in case of transfer of your data to third countries.

**Right to rectification according to Article 16 of the GDPR:** You have the right to request the immediate rectification of inaccurate data concerning you and/or the completion of incomplete data that we have recorded.

**Right to erasure according to Article 17 of the GDPR:** You have the right to request the erasure of your personal data under the conditions set out in Article 17, paragraph 1 of the GDPR. However, this right does not exist, in particular, when processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

**Right to restriction of processing according to Article 18 of the GDPR:** You have the right to request the restriction of processing of your personal data while the accuracy of your contested data is verified, if you refuse the deletion of your data due to unlawful processing and instead request the restriction of its use, if you need your data for the establishment, exercise, or defense of legal claims, after we no longer need this data once the purposes have been achieved, or if you have raised an objection for reasons related to your particular situation, as long as it is not yet established whether our legitimate grounds prevail.

**Right to information according to Article 19 of the GDPR:** When you have exercised your right to rectification, deletion, or restriction of processing with the data controller, the controller is obliged to inform all recipients to whom your personal data has been disclosed of this rectification or deletion of data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.

- **Right to data portability under Article 20 of the GDPR:** You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller, insofar as this is technically feasible.

- **Right to withdraw consent given under Article 7(3) of the GDPR:** You have the right to withdraw consent given for data processing at any time with effect for the future. Upon withdrawal, we will immediately delete the data concerned unless another legal basis for processing without consent exists. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

- **Right to lodge a complaint under Article 77 of the GDPR:** If you believe that the processing of your personal data violates the GDPR, you have the right to file a complaint with a supervisory authority, especially in the member state of your residence, workplace, or the place of the alleged infringement.

**13.2 Right to object**

When we process your personal data based on a legitimate interest, you have the right to object to this processing at any time for reasons related to your particular situation with effect for the future.

If you exercise your right to object, we will stop processing the data concerned. However, further processing is possible if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

If your personal data is processed for direct advertising, you have the right to object at any time to the processing of your personal data for this advertising purpose. You can exercise your objection as described above.

If you exercise your right to object, we will stop processing the data concerned for direct advertising purposes.

**RETENTION PERIOD FOR PERSONAL DATA**

The retention period for personal data is determined by the applicable legal retention periods (e.g., commercial and tax retention periods). After these periods expire, the data is generally routinely deleted unless it is still necessary for the performance or preparation of the contract and/or if we have a legitimate interest in its continued retention.