Privacy Policy

1) Information about the collection of personal data and contact details of the controller

1.1 We are pleased that you are using our application (hereinafter "App"). Below we inform you about how we handle your personal data when you use our App. Personal data refers to all data that can be used to personally identify you.

1.2 The controller for data processing relating to this app within the meaning of the General Data Protection Regulation (GDPR) is SW Commerce GmbH, Schellingstraße 109a, 80798 Munich, Germany, Tel.: +49 (0) 89-415-535-25, Email: mailme@nutrilovers.de. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this app uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser bar.

2) Log files when using our mobile app

If you download our mobile app from an app store, the necessary information will be transferred to the app store, including your username, email address, and customer account number, the time of download, payment information, and your unique device ID. We have no influence on this data collection and are not responsible for it. We only process the data to the extent necessary to download the mobile app to your mobile device.

When you use our mobile app, we collect the personal data described below to enable convenient use of the feature. If you wish to use our mobile app, we collect the following data, which is technically necessary for us to offer you the features of our mobile app and ensure stability and security:

• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request
• Access status/HTTP status code
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Language and version of the browser software
• Operating system used and its interface
• IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our app. The data will not be shared or used for any other purpose. However, we reserve the right to subsequently review the aforementioned log files should there be concrete evidence of illegal use.

We also need your unique device number (IMEI = International Mobile Equipment Identity), unique network subscriber number (IMSI = International Mobile Subscriber Identity), mobile phone number (MSISDN), possibly MAC address for WLAN use and the name of your mobile device.

3) Hosting & Content Delivery Network

Firebase Cloud Storage
We use the web hosting service "Firebase Cloud Storage" provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the purpose of hosting and displaying the app content on our behalf. All data collected on our website is processed on Google's servers. As part of the aforementioned services, data may also be transmitted to Google LLC servers in the USA for further processing on our behalf. We have concluded a data processing agreement with Google for the use of Firebase, which obligates Google to protect the data of our site visitors and not to pass it on to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision of the European Commission. Further information on Google's data protection policy with regard to Firebase can be found at the following website: https://firebase.google.com/support/privacy
Further processing on servers other than those mentioned above by Google will only take place within the framework communicated below.

4) Cookies

To make our app attractive and enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your device. Some of the cookies we use are deleted after you close the app (so-called session cookies). Other cookies remain on your device and allow us to recognize you (so-called persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period of time, which can vary depending on the cookie.

Some cookies are used to simplify the operation of the app by saving settings. If individual cookies we use also process personal data, the processing is carried out in accordance with Art. 6 (1) (b) GDPR for the performance of the contract, in accordance with Art. 6 (1) (a) GDPR in the case of consent, or in accordance with Art. 6 (1) (f) GDPR to protect our legitimate interests in the best possible functionality of the app and a customer-friendly and effective design of the app's use.

You can configure the settings of your mobile operating system and the app according to your preferences and, for example, refuse to accept third-party cookies or all cookies. However, please note that if you do this, you may no longer be able to use all the features of our mobile app.

5) Contact

When you contact us (e.g. via contact form or email), personal data is collected. Which data is collected when you use a contact form can be seen from the respective contact form in the app. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted after your request has been finally processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary.

6) Data processing when opening a customer account

According to Art. 6 (1) (b) GDPR, personal data will continue to be collected and processed if you provide it to us to perform a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. You can delete your customer account at any time and can do so by sending a message to the above-mentioned address of the person responsible. We store and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked with regard to retention periods under tax and commercial law and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use of the data that is permitted by law, about which we will inform you accordingly below.

7) Registration in the app

You can register in our app by providing personal data. The input mask used for registration determines which personal data is processed for registration. We use the so-called double opt-in procedure for registration, i.e., your registration is only complete once you have confirmed your registration via a confirmation email sent to you for this purpose by clicking on the link contained therein. If you do not confirm this within 24 hours, your registration will be automatically deleted from our database. Providing the aforementioned data is mandatory. You can provide all other information voluntarily by using our portal.

When you use our app, we store your data required to fulfill the contract, including any payment information, until you permanently delete your access. We also store the data you voluntarily provide for the duration of your use of the portal, unless you delete it beforehand. You can manage and edit all information in the secure customer area. The legal basis is Art. 6 (1) (f) GDPR.
In addition, we store all content published by you (such as public posts, pinboard entries, guestbook entries, etc.) to operate the app. We have a legitimate interest in providing the app with all user-generated content. The legal basis for this is Art. 6 (1) (f) GDPR. If you delete your account, your comments, particularly those published in the forum, will remain visible to all readers, but your account will no longer be accessible. In this case, all other data will be deleted.

8) Comment function

As part of the comment function in our app, in addition to your comment, information about the time the comment was created and the commentator name you chose will be saved and published in this app. Furthermore, your IP address will be logged and saved. This storage of the IP address is done for security reasons and in the event that the data subject violates the rights of third parties or posts illegal content through a comment. We need your email address in order to contact you if a third party should object to the content you have published being illegal. The legal basis for storing your data is Art. 6 (1) (b) and (f) GDPR. We reserve the right to delete comments if they are objected to as illegal by third parties.

As a user, you can subscribe to subsequent comments. You will receive a confirmation email to ensure that you are the owner of the specified email address (double opt-in procedure). The legal basis for data processing in the case of a comment subscription is Art. 6 (1) (a) GDPR. You can unsubscribe from ongoing comment subscriptions at any time with future effect. Please see the confirmation email for further information on how to unsubscribe.

9) Use of your data for direct marketing

9.1 Registration for our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to receive the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm that you wish to receive the newsletter in the future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR. When you register for the newsletter, we save the IP address entered by your Internet service provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your email address at a later date. The data we collect when you register for the newsletter will be used exclusively for the purposes of advertising via the newsletter. You can unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we inform you in this declaration.

9.2 Sending the email newsletter to existing customers

If you provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range, as those you have already purchased. According to Section 7 (3) of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. Data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) (f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you emails.

You are entitled to object to the use of your email address for the aforementioned advertising purposes at any time, with future effect, by notifying the controller named at the beginning. You will only incur transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

10) Sending push notifications

You can sign up to receive our push notifications. You will regularly receive information about our services via our push notifications.

To register, you must confirm receipt of notifications or allow this in your operating system settings. This process is documented and stored. This includes saving the time of registration and your device identification. Collecting this data is necessary so that we can display push notifications and, in the event of misuse, track the processes. This data therefore serves our legal protection. This data is processed on the basis of Art. 6 (1) (a) GDPR.

You can revoke your consent to the storage and use of your personal data for receiving our push notifications and the statistical survey described above at any time with future effect. To revoke your consent, you can unsubscribe from the setting provided for receiving push notifications in the app settings of your operating system.

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Your data will therefore be stored as long as your subscription to our push notifications is active.

11) Online Marketing

Google Ads conversion tracking

This app uses the online advertising program “Google Ads” and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

We use Google Ads to draw attention to our attractive offers using advertising materials (so-called Google Adwords) on external websites. Based on the data from the advertising campaigns, we can determine the success of individual advertising measures. This allows us to show you advertising that is of interest to you, make our app more interesting for you, and ensure a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an ad placed by Google Ads. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this app and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to compile conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

When using Google Ads, personal data may also be transferred to Google LLC's servers in the USA.

Details on the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com /settings /ads /plugin ?hl=de

In order to target users whose data we have received as part of business or business-like relationships with even more tailored advertising, we use a customer matching function within Google Ads. For this purpose, we transmit one or more files with aggregated customer data (primarily email addresses and telephone numbers) electronically to Google. Google does not receive access to the clear data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts that the data subjects have set up. This enables personalized advertising to be displayed across all Google services linked to the respective Google account.

Customer data will only be transmitted to Google if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke this consent at any time with future effect. Further information on Google's data protection measures regarding the Customer Match feature can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

12) Web analysis services

Google Analytics 4
This app uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be used to analyze app usage.
When using Google Analytics 4, so-called "cookies" are used by default. Cookies are text files that are stored on your device and enable an analysis of your use of an app. The information collected by cookies about your use of the app (including the IP address transmitted by your device, truncated by the last digits; see below) is usually transmitted to a Google server, where it is stored and processed. This may also involve transmitting information to the servers of Google LLC, located in the USA, for further processing there.
When using Google Analytics 4, the IP address transmitted by your device when you use the app is automatically and always collected and processed anonymously, so that the information collected cannot be directly linked to a specific person. This automatic anonymization is achieved by Google truncating the last digits of the IP address transmitted by your device within member states of the European Union (EU) or other contracting states to the Agreement on the European Economic Area (EEA).
On our behalf, Google uses this and other information to evaluate your use of the app, to compile reports on your app activities and usage behavior, and to provide us with other services related to your app and internet usage. The shortened IP address transmitted by your device as part of Google Analytics 4 will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 will be retained for two months and then deleted.
Google Analytics 4 also uses a special feature called "demographic features" to compile statistics about the age, gender, and interests of app users based on an analysis of interest-based advertising and third-party information. This makes it possible to identify and differentiate user groups for the app for the purpose of targeting marketing measures. However, data collected via "demographic features" cannot be assigned to a specific person, including you personally. This data collected via the "demographic features" function is retained for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for storing and reading information on the device you use to access the app, will only occur if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without your consent, Google Analytics 4 will not be used while you use the app. You can revoke your consent at any time with future effect. To revoke your consent, please deactivate this service using the "Cookie Consent Tool" provided in the app.
In connection with this app, the Google Signals service is used as an extension of Google Analytics 4. With Google Signals, we can have Google create cross-device reports (so-called “cross-device tracking”). If you have activated “personalized ads” in your Google Account settings and have linked your internet-enabled devices to your Google Account, Google can analyze usage behavior across devices and create database models based on this data if you give your consent to the use of Google Analytics 4 in accordance with Art. 6 (1) (a) GDPR. This takes into account the logins and device types of all app users who were logged into a Google Account and performed a conversion. The data shows, among other things, the device on which you first clicked on an ad and the device on which the corresponding conversion took place. We do not receive any personal data from Google, but only statistics created based on Google Signals. You have the option to deactivate the "personalized ads" function in your Google Account settings, thus preventing cross-device analysis in connection with Google Signals. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de
Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de
We have entered into a so-called data processing agreement with Google for our use of Google Analytics 4, which obligates Google to protect the data of our app users and not to pass it on to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
Further legal information on Google Analytics 4 can be found under the following link: https://policies.google.com/privacy?hl=de &gl=de
Details on the processing initiated by Google Analytics 4 and how Google handles data from apps can be found here: https://policies.google.com/technologies/partner-sites

13) Retargeting/ Remarketing/ Recommendation Advertising

Google Ads Remarketing

This app uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google places a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Further data processing only takes place if you have given Google your consent to link your internet and app browsing history with your Google Account and to use information from your Google Account to personalize ads that you view on the web. In this case, if you are logged in to Google while visiting our app, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google will temporarily link your personal data with Google Analytics data to create target groups. When using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC in the USA.

All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without this consent, retargeting technology will not be used during your visit to the site.

You can revoke your consent at any time with future effect. To exercise your revocation, please deactivate this service using the "Cookie Consent Tool" provided in the app.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Meta Pixel

Within our online offering, we use the "Meta Pixel" service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")

When a user clicks on an ad placed by us on Facebook and/or Instagram, a parameter is added to the URL of our linked page using "meta pixels." This URL parameter is then entered into the user's browser after redirection via a cookie set by our linked page itself.

This allows Meta to define visitors to our online offering as a target group for displaying advertisements (so-called "ads"). Accordingly, we use the service to display the Facebook and/or Instagram ads we place only to users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g., interests in certain topics or products determined based on the websites visited) that we transmit to Meta (so-called "custom audiences").

On the other hand, the “Meta Pixel” can be used to track whether users were redirected to our website after clicking on an advertisement and which actions they perform there (so-called “conversion tracking”).

The data collected is anonymous to us, meaning it does not allow us to draw any conclusions about the identity of the users. However, the data is stored and processed by Meta, allowing a connection to the respective user profile and allowing Meta to use the data for its own advertising purposes.

All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

The information generated by Meta is usually transferred to a Facebook server and stored there; in this context, it may also be transferred to Meta Platforms Inc. servers in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

14) Tools and Other

Firebase Crashlytics

To create anonymized crash reports, we use “Firebase Crashlytics,” a service provided by Google Ireland Ltd., Google Building Gordon House, Barrow Street, Dublin 4, Ireland, to improve the stability and reliability of our app.

In the event of an app crash, anonymous information (app status at the time of the crash, installation UUID, crash trace, phone manufacturer and operating system, and most recent log messages) will be transferred to Google's servers exclusively based on your express consent in accordance with Art. 6 (1) (a) GDPR. Transfers to Google LLC in the US are also possible. This information does not contain any personal data.

If you're using an iOS-based device, you can grant your consent in the app's settings or after a crash. If you're using an Android-based device, you have the option to generally consent to the transmission of crash notifications to Google and app developers during setup.

You can revoke your consent at any time by

• In iOS, deactivate the “Crash Reports” function in the app’s settings
• Adjust the system settings in Android. To do this, open the app's settings, select "Google," and then "Usage & Diagnostics" in the three-dot menu at the top right. Here you can disable the transmission of the relevant data.

For more information on data protection, please see Firebase Crashlytics' privacy policy at https://firebase.google.com/support/privacy

15) Rights of the data subject

15.1 The applicable data protection law grants you comprehensive data subject rights (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we will inform you below:

• Right to information pursuant to Art. 15 GDPR: In particular, you have the right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to information about the guarantees pursuant to Art. 46 GDPR when your data is transferred to third countries;
• Right to rectification in accordance with Art. 16 GDPR: You have the right to have any incorrect data concerning you rectified without delay and/or to have any incomplete data stored by us completed;
• Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 (1) GDPR are met. However, this right does not apply if processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.
• Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse to delete your data due to inadmissible data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons related to your particular situation, as long as it has not yet been determined whether our legitimate reasons outweigh yours;
• Right to information pursuant to Art. 19 GDPR: If you have asserted your right to rectification, erasure, or restriction of processing vis-à-vis the controller, the controller is obligated to inform all recipients to whom the personal data concerning you was disclosed of this rectification, erasure, or restriction of processing, unless doing so proves impossible or involves disproportionate effort. You have the right to be informed of these recipients.
• Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller, where technically feasible;
• Right to revoke consent granted in accordance with Art. 7 (3) GDPR: You have the right to revoke your consent to the processing of data at any time with future effect. In the event of revocation, we will delete the data in question immediately, unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
• Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

15.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH FUTURE EFFECT FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

If you exercise your right to object, we will stop processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. You can exercise your right of objection as described above.

IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

16) Duration of storage of personal data

The duration of storage of personal data is determined based on the respective legal basis, the purpose of the processing and – where applicable – also on the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of an express consent in accordance with Art. 6 (1) (a) GDPR, the data concerned will be stored until you revoke your consent.

If there are statutory retention periods for data that are processed within the framework of legal transactions or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, these data will be routinely deleted after the retention periods have expired, provided that they are no longer required for the fulfilment or initiation of a contract and/or we no longer have a legitimate interest in continuing to store them.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, these data will be stored until you exercise your right of objection in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, these data will be stored until you exercise your right of objection in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.