Data privacy
Privacy Policy
1. Introduction
This website is operated by: Jads UG (haftungsbeschränkt).
It is very important to us to handle the data of our website visitors with confidence and to protect it as best as possible. For this reason, we make every effort to fulfill the requirements of the GDPR.
In the following, we explain to you how we process your data on our website. For this purpose, we use language that is as clear and transparent as possible so that you truly understand what happens to your data.
2. General Information
2.1 Processing of Personal Data and Other Terms
Data protection applies to the processing of personal data. Personal means all data with which you can be personally identified. This includes, for example, the IP address of the device (PC, laptop, smartphone, etc.) in front of which you are currently sitting. Such data is processed whenever 'anything happens to it'. Here, for example, the IP is transmitted from the browser to our provider and automatically stored there. That is then a processing (pursuant to Art. 4 No. 2 GDPR) of personal data (pursuant to Art. 4 No. 1 GDPR).
These and other legal definitions can be found in Art. 4 GDPR.
2.2 Applicable Regulations/Laws – GDPR, BDSG, and TDDDG
The scope of data protection is regulated by laws. In this case, these are the GDPR (General Data Protection Regulation) as a European regulation and the BDSG (Federal Data Protection Act) as national law.
In addition, the TDDDG supplements the provisions of the GDPR insofar as it relates to the use of cookies.
2.3 The Controller
Responsible for data processing on this website is the controller within the meaning of the GDPR. This is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data.
You can reach the controller at:
Jads UG (haftungsbeschränkt)
Jads UG (haftungsbeschränkt) C/O Betahaus Eifflerstraße 43 22769 Hamburg
hello@jads.io
2.4 Data Protection Officer
We have appointed a data protection officer for our company. You can reach them at:
simply Legal GmbH
Sebastian Schenk
Burkarderstr. 36, 97082 Würzburg
dpo@dieter-datenschutz.de
Tel. +49 931 90879520
2.5 How Data is Generally Processed on This Website
As we have already established, there is data (e.g., IP address) that is collected automatically. This data is predominantly required for the technical provision of the homepage. Insofar as we use additional personal data or collect other data, we inform you about this or ask for consent.
You share other personal data with us deliberately.
You will find detailed information on this below.
2.6 Your Rights
The GDPR provides you with comprehensive rights. These include, for example, free information about the origin, recipient, and purpose of your stored personal data. In addition, you can request the correction, blocking, or deletion of this data or lodge a complaint with the competent data protection supervisory authority. You can revoke any consent given at any time.
What these rights look like in detail and how they are to be exercised can be found in the last section of this privacy policy.
2.7 Data Protection – Our View
Data protection is more than just a chore for us! Personal data has great value, and mindful handling of this data should be a matter of course in our digitized world. In addition, as a website visitor, you should be able to decide for yourself what happens to your data, when, and by whom. Therefore, we commit ourselves to complying with all legal regulations, collect only the data necessary for us, and naturally treat it confidentially.
2.8 Transfer and Deletion
The transfer and deletion of data are also important and sensitive topics. Therefore, we would like to briefly inform you in advance about our general approach to this.
A transfer of data takes place only on the basis of a legal foundation and only if this is unavoidable. This may be the case, in particular, if it involves a so-called processor and a data processing agreement pursuant to Art. 28 GDPR has been concluded.
We delete your data when the purpose and the legal basis for processing cease to apply and there are also no other statutory obligations preventing deletion. A 'good' overview of this is also provided by Art. 17 GDPR.
Please refer to this privacy policy for all further information and contact the controller if you have specific questions.
2.9 Hosting
Framer
This website uses Framer, a website builder for creating and hosting interactive websites. Framer is offered by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands. The service provides functions that allow website content to be visually designed, published, animated, and embedded with real-time elements such as CMS, e-commerce modules, or 3D objects. Framer enables responsive designs, portfolios, blogs, and integrations of external content as well as deployment on custom domains. When using Framer, IP address, browser type and version, device information, access times, pages viewed, usage statistics, referrer, location data, device ID, and, if applicable, identification data entered by website visitors such as name, email address, telephone number, and physical address are typically processed. The processing takes place for the purpose of the technical provision, presentation, and optimization of the website, ensuring security, and, if applicable, processing inquiries or orders via embedded functions. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR to protect legitimate interests in a functional and secure website. If a contractual relationship is initiated in embedded contact or order forms, Art. 6 para. 1 lit. b GDPR also applies. Framer does not set any cookies when you access our pages; visitor statistics run via the cookieless Framer Analytics (see the Analysis and Tracking Tools section). A transfer of personal data to third countries does not generally take place in connection with Framer. Should a transfer to company entities outside the EEA take place, the EU Standard Contractual Clauses are used as appropriate safeguards. Personal data is generally deleted as soon as the purpose of processing ceases to apply, consent given is revoked, or statutory retention periods have expired. Further information on data protection at Framer can be accessed at https://www.framer.com/legal/privacy-statement/.
2.10 Legal Bases
The processing of personal data always requires a legal basis. In Art. 6 para. 1 sentence 1, the GDPR provides for the following possibilities:
a) The data subject has given consent to the processing of their personal data for one or more specific purposes;
b) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
c) Processing is necessary for compliance with a legal obligation to which the controller is subject;
d) Processing is necessary in order to protect the vital interests of the data subject or of another natural person;
e) Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
f) Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
In the following sections, we will name the specific legal basis for each respective processing operation.
3. What Happens on Our Website
By visiting our website, we process personal data from you.
In order to protect this data as best as possible against unauthorized interference by third parties, we use SSL or TLS encryption. You can recognize this encrypted connection by the fact that https:// or a lock symbol is displayed in the address line of your browser.
Below you will find out which data is collected when you visit our website, for what purpose this happens, and on what legal basis.
3.1 Data Collection When Accessing the Website
By accessing the website, information is automatically stored in so-called server log files. This involves the following information:
Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server inquiry
IP address
This data is temporarily required in order to be able to display our website to you permanently and without problems. In particular, this data thus serves the following purposes:
System security of the website
System stability of the website
Troubleshooting on the website
Establishing a connection to the website
Display of the website
Data processing takes place in accordance with Art. 6 para. 1 lit. f GDPR and is based on our legitimate interest in processing this data, in particular out of the interest in the functionality of the website and its security.
Where possible, this data is stored in pseudonymized form and deleted once the respective purpose has been achieved.
Insofar as the server log files allow the identification of the data subject, the data is stored for a maximum period of 14 days. An exception exists if a security-relevant event occurs. In this case, the server log files are stored until the security-relevant event has been eliminated and conclusively resolved.
Otherwise, a merging with other data does not take place.
3.2 Data Processing Through User Input
3.2.1 Contacting Us
a) Email
If you contact us by email, we process your email address and any other data contained in the email. These are stored on the mail server and partially on the respective terminal devices. Depending on the request, the legal basis for this is regularly Art. 6 para. 1 lit. f GDPR or Art. 6 para. 1 lit. b GDPR. The data will be deleted as soon as the respective purpose ceases to apply and it is possible in accordance with legal requirements.
b) Contact Form
Typeform
Our website uses the contact form from Typeform, an interactive online form service provided by TYPEFORM, S.L., C/Bac de Roda, 163, 08018 Barcelona, Spain. Typeform enables the creation and integration of user-friendly contact forms with which digital inquiries, customer feedback, or other information can be collected in a modern way. Through the use of Typeform, the data requested in the form and entered by users (e.g., name, email address, messages) are processed, as well as technical information such as IP address, device settings, browser details, and interaction data for the purpose of form delivery and analysis. The processing serves to facilitate contact as well as the management, evaluation, and improvement of user inquiries. The form is loaded when accessing the respective page; your IP address and technical device data are transmitted to Typeform and, for spam protection, to Google (reCAPTCHA). The legal basis for loading is our legitimate interest in providing a contact form (Art. 6 para. 1 lit. f GDPR); for the information you submit in the form, it is the initiation of collaboration (Art. 6 para. 1 lit. b GDPR). Typeform uses cookies for function and analysis when loading the form. If you do not want this, write to us by email instead. A transfer of personal data to third countries by Typeform cannot be ruled out; if data is processed outside the European Economic Area, this is done exclusively on the basis of the guarantees provided by Typeform, such as the EU Standard Contractual Clauses. Storage period: The data collected with Typeform is deleted as soon as consent has been revoked, the processing purpose ceases to apply, or statutory retention periods do not prevent deletion. Further information on data processing by Typeform can be found at: https://admin.typeform.com/to/dwk6gt
c) Appointment Scheduling Tool
Calendly
On our website, we use the appointment booking feature of Calendly, a service for automated appointment and meeting scheduling operated by Calendly, LLC, 271 17th Street Northwest, 10th Floor, Atlanta, Georgia 30363, USA. Calendly makes it possible to arrange appointments conveniently via an embedded booking tool or an external link; availability is displayed in real time and bookings can be made directly. Personal data such as name, email address, telephone number, professional details (e.g., employer, job title), content entered by the user (e.g., preferences or comments), and technical data such as IP address, geolocation, device type, and browser information are processed; this may also include information collected through cookies. The purpose of the processing is simple and efficient appointment coordination, lead generation, and, if applicable, the optimization of business processes in connection with appointment bookings. The legal basis for data processing is Art. 6 para. 1 lit. b GDPR for (pre-)contractual measures, as well as Art. 6 para. 1 lit. f GDPR based on the legitimate interest in efficient communication and process optimization. The booking tool is loaded when accessing the page /termin-buchen; Calendly may set cookies for user guidance and analysis. A transfer of personal data to the USA takes place; the Standard Contractual Clauses approved by the EU Commission are used as a guarantee for an adequate level of data protection. The storage period depends on the respective booking purpose and statutory retention obligations; data is deleted as soon as it is no longer required for the stated purposes or consent given is revoked, provided that no statutory retention obligations conflict. Further information can be found in Calendly's privacy policy: https://calendly.com/legal/privacy-notice
3.2.2 Job Applications
You can apply to us by email; our website does not have an application form, it only mentions the email address. We process the data transmitted in this process to decide on the establishment of an employment relationship.
We process name, address, and contact details, information on education, qualifications, and professional career, as well as the submitted documents such as cover letter, CV, and certificates. Further information, such as an application photo, is voluntary. The processing serves the execution of the application procedure, the assessment of suitability for the advertised position, and communication during the course of the procedure.
The legal basis is Art. 6 para. 1 lit. b GDPR in conjunction with Section 26 para. 1 sentence 1 BDSG, as the processing is necessary for the decision on establishing an employment relationship. If, by way of exception, special categories of personal data are processed, such as information about a severe disability, this is done on the basis of Art. 9 para. 2 lit. b GDPR in conjunction with Section 26 para. 3 BDSG. Insofar as the processing serves to defend against asserted claims, we base it on Art. 6 para. 1 lit. f GDPR.
Only internal departments involved in the process, in particular HR administration and the respective specialist department, have access to the application documents. A transfer to third parties does not take place unless otherwise stated in this policy.
If an employment does not result, the documents will be deleted six months after completion of the procedure. If an employment does result, the data will be transferred to the personnel file. If storage of the documents beyond the conclusion of the procedure is intended for future positions, we will obtain consent beforehand. The legal basis is then Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time with effect for the future; the lawfulness of the processing carried out up to the revocation remains unaffected. Without consent, the documents will be deleted after the specified period has expired.
The transmission of data is neither legally nor contractually required. However, without this information, an assessment of the application is not possible. Unsolicited applications are handled according to the same principles.
3.3 Analysis and Tracking Tools
Framer Analytics
This website uses Framer Analytics, an analysis and tracking service provided by Framer Limited, Lanrick Keepers Cottage, Lanrick Estate, Doune, Perthshire, United Kingdom, FK16 6HH. Framer Analytics enables the evaluation of visitor flows and other statistical analyses such as live visitor count, unique visitor numbers, page views, bounce rate, average session duration, evaluation of traffic sources including referrers and UTM parameters, frequently visited entry and exit pages, and the approximate determination of countries, device types used, browsers, and operating systems. The recorded data includes exclusively anonymized information such as aggregated visitor numbers, session and interaction metrics, referrers, UTM parameters, and the technical information transmitted by the browser (e.g., device type, operating system, and country). No personal data within the meaning of the GDPR, in particular no IP addresses, cookies, or other identifiers, are processed. The processing takes place exclusively for the purpose of statistical evaluation of website usage, performance optimization, and improvement of the web offering. The legal basis for the use of Framer Analytics is Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in the continuous analysis and optimization of the website. Framer Analytics does not use cookies and does not set any identifiers, so consent under Section 25 para. 1 TDDDG is not required. A transfer of data to third countries does not take place, as all data is processed anonymously. The data is stored in aggregated and anonymized form and not deleted in relation to specific individuals; should deletion nonetheless be necessary because the purpose ceases to apply, it will take place immediately. Further information can be found at: https://www.framer.com/legal/privacy-statement/
3.4 Social Media Profiles
In addition to our website, our company is also present on social networks. In doing so, we want to present our company and create the opportunity to contact us.
In addition, we also use the opportunity to place advertisements and job postings on social media.
Below we inform you about what data we and the respective social network process when you visit and interact with our profile.
We operate a LinkedIn profile at https://www.linkedin.com/. This social network is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Interaction with our company profile
When you visit our LinkedIn profile and interact with us via it, we process personal data. On the one hand, the data made publicly available on the profile. On the other hand, also the personal data contained in posts, comments, or direct messages to us. Through interactions such as liking or sharing, we can see the user profile with the public information. The legal basis for this processing is Art. 6 para. 1 lit. f GDPR. It is in our legitimate interest to provide relevant and interesting content and to enable the use and functionality of our LinkedIn profile. Insofar as an inquiry is related to the performance of a contract or is necessary to take steps prior to entering into a contract, our processing is based on Art. 6 para. 1 lit. b GDPR.
Page Insights
LinkedIn provides us with summarized statistics and insights (so-called Page Insights) that provide us with information about how people interact with our company page. Among other things, we receive information about the number of profiles that view, comment on, or otherwise interact with our posts, as well as summarized demographic and other information that helps us learn about interaction with our page or LinkedIn profile. Page Insights provided to us by LinkedIn consist of aggregated data, whereby LinkedIn does not provide us with any personal data of members in relation to Page Insights. We also have no way of linking Page Insights to individual members. When placing advertisements, LinkedIn transmits information to us about the types of people who see our ads and about the success of our ads. Personal data is only passed on to us if this person has consented to such processing. We also receive information from LinkedIn that allows us to understand which of our ads led to a purchase being made or an action being taken. The processing of this data serves the purpose of analyzing our reach and tailoring our content and ads to user interests. Based on the evaluation of this data, we can see how our content, profile, and advertising are consumed. This allows us to create audience-oriented content and run ads to better market our company and services. The processing is based on our legitimate interest according to Art. 6 para. 1 sentence 1 lit. f GDPR. When processing personal data in the course of so-called Page Insights, the processing takes place under joint controllership with LinkedIn pursuant to Art. 26 para. 1 GDPR. For this purpose, we have entered into a corresponding agreement with LinkedIn, which can be viewed [here](https://legal.linkedin.com/pages-joint-controller-addendum). The contact details of LinkedIn are: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. For LinkedIn, you can contact the data protection officer at the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO.
Processing by LinkedIn
By visiting our company profile, LinkedIn may also process personal data beyond this. In this case, processing takes place under the sole responsibility of LinkedIn and without our knowledge. More detailed information from LinkedIn on this: https://de.linkedin.com/legal/privacy-policy.
3.5 Third-Party Content
Elfsight
On our website, we use the service Elfsight to integrate interactive third-party content such as social media feeds, review widgets, forms, as well as various e-commerce and engagement tools. Elfsight is operated by Elfsight LLC, Paronyana str. 19/3, 201, Yerevan, 0015 Armenia. Elfsight enables the integration of diverse widgets, for example to display social media content (e.g., Instagram, YouTube feeds), to show reviews and testimonials, to provide lead capture forms, chat functions, e-commerce components such as countdown timers and product galleries, and other interactive elements. In the context of using Elfsight, in particular the IP address, details about the operating system and browser, and, if applicable, all form data entered into widgets by users are processed. The processing takes place for the purpose of providing, displaying, and interacting with the respective integrated third-party content, for user interaction, and for analyzing technical parameters of use. We use Elfsight exclusively to display our LinkedIn posts on the homepage; the widget is loaded when accessing the homepage. The legal basis is our legitimate interest in presenting our posts (Art. 6 para. 1 lit. f GDPR). Elfsight may set technically necessary as well as analysis cookies. A transfer of personal data to third countries, in particular to Armenia, takes place. Elfsight states that it ensures appropriate guarantees within the meaning of Art. 44 et seq. GDPR for adequate protection, such as concluding EU Standard Contractual Clauses; nevertheless, an absolutely equivalent level of data protection as in the EU cannot be guaranteed. Personal data is generally deleted as soon as the purpose of processing ceases to apply or consent has been revoked, provided that no conflicting statutory retention periods exist. Further information on data protection at Elfsight can be found at: https://elfsight.com/privacy-policy/
Google Fonts
On our website, fonts from the Google Fonts service are used, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Fonts makes it possible to integrate fonts directly from Google servers in order to provide uniform and appealing typography as well as optimal loading times via a Content Delivery Network (CDN). As part of the integration, the IP address of website visitors, the font resource requested in each case, and HTTP header information such as user agent and referrer are processed. The purpose of data processing is the technical provision of the fonts, the improvement of the design, and the optimization of display across different devices and browsers. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in appealing and consistent website design as well as technically secure and efficient provision. According to current information, Google Fonts does not set cookies to provide the fonts. A transfer of personal data to third countries does not take place, as processing according to Google takes place in Europe by Google Ireland Limited. Personal data is only stored for as long as is necessary for the provision of the fonts and the security of the service; if the purpose ceases to apply or upon a justified deletion request, the data will be deleted, provided that no statutory retention obligations conflict. Further information is available at https://developers.google.com/fonts/faq/privacy.
Google reCAPTCHA
Google reCAPTCHA is integrated on our website, a service for detecting and preventing bots, spam, and abusive use cases. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google reCAPTCHA serves to prevent automated access and to increase the security of forms and login areas. In doing so, the service analyzes the behavior of website visitors (e.g., mouse movements, dwell time, input patterns) and decides whether it is a human user. Various categories of personal data are collected, including IP address, mouse movements, dwell time, screenshots of the browser window, cookie information, browser behavior, and, if applicable, data on hand gestures when gesture matching is activated. Data processing takes place for the purpose of safeguarding technical processes against abuse and maintaining the integrity of the website. The legal basis for using Google reCAPTCHA is Art. 6 para. 1 lit. f GDPR, the legitimate interest in protecting against automated attacks. reCAPTCHA is loaded together with the Typeform form and may set functional as well as analysis cookies. A transfer of personal data to servers of Google LLC in the USA cannot be ruled out. In these cases, Google relies on the Standard Contractual Clauses of the EU Commission pursuant to Art. 46 GDPR as an appropriate safeguard for an adequate level of data protection. The storage period of the data depends on the respective intended purpose pursued. Data is generally deleted as soon as the purpose of its collection ceases to apply or consent has been revoked, provided that no statutory retention obligations conflict. Further information on Google reCAPTCHA can be found in the Google Cloud Platform Service Specific Terms at: https://cloud.google.com/terms/service-terms.
3.6 Audio and Video Conferences
Microsoft Teams
For audio and video conferences as well as chat and collaboration functions with you, we use Microsoft Teams from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland; Microsoft Teams is not integrated on our website. Microsoft Teams enables the holding of and participation in online meetings, video conferences, and chats directly via the browser, the integration of appointments, the sharing of files, and real-time communication. As a rule, profile information (e.g., name, email address, profile picture), communication content (chat messages, meeting content, shared files, recordings, transcripts), device and connection data (e.g., app version, device type, country code), usage data (usage behavior, interaction details), optional location data, and, upon activation, media content (images, video recordings within meetings) are processed. The purpose of data processing is the provision, execution, and follow-up of online meetings as well as enabling efficient team communication and collaboration. The legal basis is Art. 6 para. 1 lit. b GDPR, provided that the use takes place in the context of (pre-)contractual measures, as well as Art. 6 para. 1 lit. f GDPR to safeguard the legitimate interest in a modern, efficient communication and collaboration platform. Insofar as Microsoft Teams sets cookies for the provision of the function, this is generally done for session management and functionality only with consent, which can be revoked at any time; the legal basis for this is Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG. Data transfer to third countries, in particular the USA, may take place as part of support, maintenance, or sub-processing operations; in doing so, Microsoft uses the EU Standard Contractual Clauses as an appropriate safeguard pursuant to Art. 46 GDPR. Data is deleted as soon as the purpose of processing ceases to apply, upon revocation of consent, or after statutory retention periods have expired. Further information can be accessed at https://privacy.microsoft.com/en-us/privacystatement.
Google Meet
For audio and video conferences with you, we also use the Google Meet service; Google Meet is not integrated on our website. Google Meet is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Meet enables the holding of virtual meetings, audio and video conferences, and functions such as screen sharing, live captioning, chat, and real-time collaboration. In particular, identity data of the participants (such as name and email address), attendance data (e.g., join and leave times, roles in the meeting), device information and technical metrics (device type, network data such as latency and packet loss for audio/video), location data, meeting events (e.g., presentations, polls, abuse reports), meeting artifacts (recordings, transcripts, if activated), and browser and network analysis data are processed. The data processing takes place for the purpose of organizing and conducting online conferences and virtual collaboration, including the provision, securing, and analysis of the technical functionality of the meetings. The legal basis for the processing is Art. 6 para. 1 lit. b GDPR for contractual and pre-contractual purposes as well as Art. 6 para. 1 lit. f GDPR based on our legitimate interest in efficient, secure, and modern communication. If features such as recording or advanced analytics are used, additional consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG may be required. Google Meet may use functional and analysis cookies to ensure connection stability and analyze performance. These cookies are only set with prior consent. The legal basis for this is Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG. A transfer of personal data to third countries, in particular to the USA, cannot be ruled out as part of support or maintenance processes. Google ensures compliance with an adequate level of data protection by concluding EU Standard Contractual Clauses pursuant to Art. 46 para. 2 lit. c GDPR. The data is deleted as soon as the purpose of processing ceases to apply, consent given is revoked, or statutory retention periods have expired. Further information is available in Google's privacy policy: https://policies.google.com/privacy?hl=en
4. What Else is Important
Finally, we would like to inform you comprehensively and in detail about your rights and tell you how you will be informed about changes to data protection requirements.
4.1 Your Rights in Detail
4.1.1 Right of Access Pursuant to Art. 15 GDPR
You can request information as to whether personal data concerning you is being processed. If this is the case, you can request further information on the manner of processing. A detailed list can be found in Art. 15 para. 1 lit. a to h GDPR.
4.1.2 Right to Rectification Pursuant to Art. 16 GDPR
This right includes the correction of inaccurate data and the completion of incomplete personal data.
4.1.3 Right to Erasure Pursuant to Art. 17 GDPR
This so-called 'right to be forgotten' gives you the right, under certain conditions, to request the deletion of personal data by the controller. This is generally the case if the purpose of data processing has ceased to apply, if consent has been revoked, or if the initial processing took place without a legal basis. A detailed list of grounds can be found in Art. 17 para. 1 lit. a to f GDPR. In addition, this "right to be forgotten" corresponds to the duty of the controller under Art. 17 para. 2 GDPR to take reasonable steps to bring about a general erasure of the data.
4.1.4 Right to Restriction of Processing Pursuant to Art. 18 GDPR
This right is tied to the requirements pursuant to Art. 18 para. 1 lit. a to d.
4.1.5 Right to Data Portability Pursuant to Art. 20 GDPR
This regulates the fundamental right to receive one's own data in a commonly used format and to transmit it to another controller. However, this only applies to data processed based on consent or a contract pursuant to Art. 20 para. 1 lit. a and b and insofar as this is technically feasible.
4.1.6 Right to Object Pursuant to Art. 21 GDPR
You can generally object to the processing of your personal data. This applies in particular if your interest in objecting outweighs the legitimate interest of the controller in the processing and if the processing relates to direct marketing and/or profiling.
4.1.7 Right to "Individual Decision-Making" Pursuant to Art. 22 GDPR
You generally have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. However, this right is also subject to limitations and supplements in Art. 22 para. 2 and 4 GDPR.
4.1.8 Further Rights
The GDPR includes comprehensive rights to notify third parties as to whether or how you have asserted rights under Art. 16, 17, 18 GDPR. However, this applies only insofar as this is possible or can be carried out with reasonable effort.
At this point, we would like to remind you once again of your right to revoke consent given pursuant to Art. 7 para. 3 GDPR. However, the lawfulness of the processing carried out up to that point is not affected by this.
In addition, we would also like to point out your rights under Sections 32 et seq. BDSG, which, however, largely correspond in substance to the rights just described.
4.1.9 Right to Lodge a Complaint Pursuant to Art. 77 GDPR
You also have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of personal data relating to you infringes this Regulation.
5. What Happens if the GDPR is Abolished Tomorrow or Other Changes Take Place?
The current status of this privacy policy is 01.11.2026. From time to time, it is necessary to adapt the content of the privacy policy in order to respond to actual and legal changes. We therefore reserve the right to change this privacy policy at any time. We will publish the amended version in the same place and recommend that you read the privacy policy regularly.
Created with the kind support of Dieter macht den Datenschutz