DATA PROTECTION WEBSITE

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other applicable data protection regulations ("applicable data protection law") is the:  

EDAG Engineering GmbH  
Kreuzberger Ring 40  
65205 Wiesbaden  
Tel.: +49 611 7375-0  
Fax: +49 611 7375-265  
E-Mail: info[at]edag.com  

Website: www.edag.com  

The data protection officer of the controller can be reached via:  

E-Mail: datenschutz[at]edag.com   

1. scope and purpose of the processing of personal data  
We collect and use the personal data of our users only to the extent necessary to provide a functional website and our content and services. The collection and use of our users' personal data only takes place regularly with the user's consent (where required by law). An exception applies in cases where it is not possible to obtain prior consent for factual reasons or where the processing of the data is permitted by other legal bases in accordance with the applicable data protection law.

2. legal basis for the processing of personal data  
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a EU General Data Protection Regulation (GDPR) and the analogous provisions in accordance with the applicable data protection law serve as the legal basis for the processing of personal data.

When processing personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 lit. b GDPR and the analogous provisions in accordance with the applicable data protection law serve as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR and the analogous provisions in accordance with the applicable data protection law serve as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 lit. d GDPR and the analogous provisions under the applicable data protection law serve as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 lit. f GDPR and the analogous provisions in accordance with the applicable data protection law serve as the legal basis for the processing.

3. data erasure and storage duration  
The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract. 

1. description and scope of data processing

We use the consent management service of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich (hereinafter "Usercentrics"). Our Usercentrics consent tool is played out via the Google Tag Manager. For this reason, the Google Tag Manager is activated as an essential cookie (unselectable at first level) during initial visits to our website. Only if you activate a cookie requiring consent through your express consent in our consent tool Usercentrics will the Google Tag Manager establish a connection to this cookie and the corresponding cookie will be loaded - see IV. Use of the Google Tag Manager.

When our website is accessed, the Usercentrics system automatically collects data and information from the computer system of the accessing computer. The following data is collected by or through the use of the service:

• Opt-in and opt-out data
• Referrer URL
• User Agent
• User settings
• Consent ID
• Time of consent
• Consent type
• Template version
• Banner language

2. legal basis for data processing

The legal basis for the legal obligation for consent-requiring data processing is Art. 6 para. 1 sentence 1 lit. c GDPR and the analogous provisions of the applicable data protection law.

3. purpose of data processing

The service is used to manage consents. This serves to comply with legal obligations, according to which data processing requiring consent may only be carried out via the website if users have given their consent. The Usercentrics service is used to store the consent obtained and to manage it. This also applies in the event that consent is withdrawn.

Usercentrics is used as a processor. We have therefore concluded a data processing agreement with Usercentrics in accordance with the legal requirements.

4. duration of storage; possibility of objection and removal

The retention period is the period of time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.

The consent data (consent given and revocation of consent) will be stored for three years. The data will then be deleted immediately.

The collection and storage of data is required by law for the operation of the website. Consequently, the user has no option to object.

You can find the data protection provisions of the data processor here: https://usercentrics.com/privacy-policy/ 

1. description and scope of the processing of personal data

This website uses Google Tag Manager. This is a tool that allows marketers to manage their website tags via an interface. A tag manager itself, which implements the tags, is a service that can collect personal data by setting cookies. The tool triggers other tags, which in turn may collect data.

We use Google Tag Manager on two levels when you visit our website. Initially, when you access our website, Google Tag Manager is activated as an essential cookie (unselectable at first level). At this stage, however, it only serves the function of playing our cookie consent tool Usercentrics - see III. - which gives you the opportunity to decide on the activation of the various cookies used on our website. Up to this point, the web tracking functions of the Google Tag Manager are deactivated and at this stage it only serves as an administration or activation tool for Usercentrics.

Only at the second level do we manage and activate further cookies via the Google Tag Manager, which require your consent. Only if you activate a cookie requiring consent by giving your express consent in our consent tool Usercentrics will the Google Tag Manager establish a connection to this cookie and load the corresponding cookie. Until such activation, the web tracking functions of the Google Tag Manager also remain deactivated.

2. purpose and legal basis of the processing of personal data

The purpose of using Google Tag Manager is to be able to manage third-party tags in an organised manner and also to be able to implement your selection of activated technologies accordingly. We have a legitimate interest in this, Art. 6 para. 1 sentence 1 lit. f GDPR. If you activate other services in our consent tool Usercentrics, their processing is based on your consent, Art. 6 para. 1 sentence 1 lit. a GDPR

3. duration of storage, possibility of objection and removal

The Google Tag Manager itself triggers other tags, which in turn may collect data. The Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager. You can find more information here: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/

When the Google Tag Manager is activated, a connection to Google is established. In this respect, we would like to point out that we have no influence on the storage of your data by Google. We have also concluded a data processing agreement with Google for this purpose.

The storage of your data also depends on the respective storage period of the tools activated by the Google Tag Manager.

You cannot activate the Google Tag Manager yourself, as it manages and plays out technologies that are essential for the operation of the website and is therefore itself an essential technology of our website.

If tools requiring consent are used by Google Tag Manager, their use can be eliminated by deactivating the respective activity.

4. disclosure of personal data

Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. The terms of use can be found at: www.google.com/analytics/terms/de.html; an overview of data protection can be found at: www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy at: www.google.de/intl/de/policies/privacy.

In this respect, we would also like to point out that we cannot rule out the transfer of data to the USA (to Google LLC based in the USA) in this context. However, since the adequacy decision between the EU and the USA, the Data Privacy Framework (DPF), which has been in force since 10 July 2023, the USA has been certified as having an equivalent level of data protection to the EU insofar as the company receiving the data in the USA is certified in accordance with the regulations of the DPF, which is the case for Google LLC (see positive proof in the list of the US Department of Commerce). 

1. description and scope of data processing  
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

(1) The user's IP address  
(2) Date and time of access  
(3) Website visited  
(4) Amount of data sent in bytes  
(5) Source/reference from which you accessed 
the page, 
(6) Browser used  
(7) Operating system used

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. legal basis for data processing  
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR and the analogous provisions in accordance with the applicable data protection law.

3. purpose of data processing  
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. The data collected is therefore used for statistical analyses and to improve the website. Your personal data (IP address) is anonymised in advance.

Data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR and the analogous provisions in accordance with the applicable data protection law.

4. duration of storage  
The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the accessing client.

5. possibility of objection and removal  
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object. 

1 Description and scope of data processing  
Our website uses cookies. Cookies are data records that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.  
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.  
The following data is stored and transmitted in the cookies: 

(1) The IP address of the user  
(2) Date and time of access  
(3) Log information  
(4) Amount of data transferred  
(5) Requesting domain

We also use cookies on our website that enable us to analyse the surfing behaviour of users.  

The following data can be transmitted in this way:  
(1) Device type, model, brand, screen resolution  
(2) Operating system, versions, families  
(3) Browser, version, configuration, engines, plugins, language, language code  
(4) Location data  
(5) Provider details  
(6) Pages per visit,  
(7) Entry pages, exit pages, page URL, page title, search terms, downloads  
(8) Search engines, search term, websites, social networks  
(9) Campaigns, campaign keyword

When accessing our website, the user is informed about the use of functional cookies as well as cookies for analysis and marketing purposes and his consent to the processing of the personal data used in this context is obtained using a cookie consent manager (Usercentrics, see point III.). In this context, reference is also made to this privacy policy.   
In the Cookie Consent Manager, you will also find detailed information on how the individual cookies work, information on the duration of their function and information on whether third parties have access to these cookies. You can access the Cookie Consent Manager at any time via a corresponding button in the footer of our website.  

2 Legal basis for data processing  
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 sentence 1 lit. f GDPR.  
The legal basis for the processing of personal data using functional cookies and cookies for analysis and marketing purposes is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR together with the analogous provisions in accordance with the applicable data protection law.

3. purpose of data processing  
We divide cookies into the following categories depending on their purpose and function:

a) Technically necessary cookies 
Technically necessary cookies guarantee functions without which our website cannot be used as intended. These cookies are used exclusively by us and are therefore first party cookies. This means that all information stored in the cookies is sent back to our website. Technically necessary cookies are used, for example, to ensure that logged-in users always remain logged in when accessing various subpages of our website and therefore do not have to re-enter login data each time they access a new page.

The use of technically necessary cookies on our website is possible and permitted without consent. For this reason, technically necessary cookies cannot be deactivated or activated individually. These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Our interest in the technically smooth provision of our website and the services offered through it prevails.

b) Functional cookies  

Functional cookies enable our website to save information that has already been entered (such as registered name, language selection or the location of the user) and to offer improved and more personalised functions based on this. These cookies only collect and store data in such a way that user behaviour on other websites cannot be tracked.

c) Performance cookies  
Performance cookies collect aggregated information about how our website is used in order to improve its attractiveness, content and functionality. These cookies help us to determine whether, which, how often and for how long subpages of our website are visited and what content users are particularly interested in.  
These cookies do not store any information that allows the user to be identified. The information collected is aggregated and does not allow us to draw any direct conclusions about the individual person. They are used solely to compile statistics in order to tailor the content of our website more specifically to the needs of our users, improve the user experience and optimise our offering.

d) Marketing cookies  
Marketing cookies originate from external advertising companies (third-party cookies) and are used to collect information about the websites visited by the user in order to create targeted advertising for the user and to display adverts based on the user's interests. They are also used to limit the frequency with which an advert appears and to measure the effectiveness of advertising campaigns. This information can be shared with third parties, e.g. advertisers.

4. duration of storage, objection and removal options  
Cookies are stored on the user's computer and transmitted by it to our site. As a user, you therefore have full control over the use of cookies.  
You can revoke your consent to the use of cookies at any time with effect for the future. Please use one of the following options to do so:

You inform us that you wish to withdraw your consent or change your settings in our Cookie Consent Manager, which can be accessed at any time via the website.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Cookies that have already been saved can be deleted at any time in your settings. This can also be done automatically.

You can also prevent the collection of the data generated by the respective cookie and related to your use of our websites (including your IP address) and the processing of this data by downloading and installing the plugin available for your browser.

You can also manage marketing cookies using the tools developed in many countries as part of self-regulation programmes, such as https://www.aboutads.info/choices/ (USA) or http://www.youronlinechoices.com/uk/your-ad-choices (EU).

5. transfer of personal data  
By accepting the functional cookies that go beyond the technically necessary cookies as well as cookies for analysis and advertising purposes, you also consent in accordance with Art. 49 para. 1 sentence 1 lit. a GDPR and the analogous provisions under the applicable data protection law that your data may be processed in the USA if there is no comparable level of data protection.  

In this respect, there is no comparable level of data protection in the USA as in Europe if the company receiving the data is not certified in accordance with the adequacy decision between the EU and the USA, the Data Privacy Framework (DPF), which has been in force since 10 July 2023. In particular, it is possible that government agencies may access personal data without us or you being aware of this. Legal prosecution may not be successful. We transfer personal data to third countries when using cookies in this case on the basis of the EU standard contractual clauses in order to establish an equivalent level of data protection, if necessary. You can find more information here:

https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_en

Insofar as the company receiving the data is certified in accordance with the applicable adequacy decision between the EU and the USA, the Data Privacy Framework (DPF), a level of data protection equivalent to that of the EU is attested in this respect and the data processing is based on the Data Privacy Framework.  

To change your privacy settings, click the fingerprint icon in the bottom left corner.

1. Description and scope of data processing  
A contact form is available on our website, which can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. This data is mandatory:

(1) My request  
(2) E-mail address

In addition, the following data can be entered voluntarily by you:

(3) Salutation  
(4) Company  
(5) Surname, first name  
6) Telephone no.  
(7) Street, house number  
(8) Postcode, town  
(9) Country  
(10) Your message to us

The following data is also stored at the time the message is sent:

(11) The IP address of the user  
(12) Date and time of registration  

Your consent is obtained for the processing of the data as part of the sending process and reference is made to this privacy policy.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.  

2. legal basis for data processing  
The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. a GDPR if the user has given his consent.

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 sentence 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

3. purpose of data processing  
The processing of personal data from the input mask serves us to process the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.  
The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. duration of storage  
The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.  

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5 Possibility of objection and removal  
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting us will be deleted in this case. 

1. Description and scope of data processing

On our website, you have the option to register for a free press mailing list and to subscribe to company news via this list, provided that you, as a user, are also a press organ. When registering for the press mailing list, the data from the input mask is transmitted to us.

The following data must be provided:

(1) Title

(2) First name, surname

(3) Publisher

(4) E-mail address

(5) Name of publication

This is the e-mail address you provided, along with information that allows us to verify that you are the owner of the e-mail address provided or that the owner of the e-mail address agrees to receive company news via the press distribution list.

In addition, the following data is collected during registration:

(1) IP address of the accessing computer

(2) Date and time of registration

In addition, the name of the publication can be voluntarily provided during registration. For the processing of the data, your consent (as far as legally necessary) is obtained during the registration process and reference is made to this data protection declaration.

In connection with data processing for the sending of company news, the data is passed on to third parties. This involves Cision Germany GmbH, De-Saint-Exupéry-Straße, 60549 Frankfurt am Main.

The data is used to send company news, for which it is entered into a protected area of the Cision Germany GmbH media database. This platform is used to send company news to the entered distribution list. Your data is stored on Cision servers in Europe and in third countries. An exchange takes place between EU and third-country servers. This exchange is subject to EU data protection rules.

More information can be found at https://privacy.cision.com/ or https://privacy.cision.com/Client-Data-Privacy-Obligations

2. Legal basis for data processing

Art. 6 para. 1 sentence 1 lit. b GDPR and the analogous provisions of the applicable data protection law serve as the legal basis for the processing of personal data that is required for the performance of a contract (in this case, the sending of our IR releases) to which the data subject is a party.

3. Purpose of data processing

The user's email address is collected for the purpose of sending the corresponding company news by means of the press mailing list.

Other personal data collected during the registration process is used to prevent misuse of the services or the email address used.

4. Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. The user's email address will therefore be stored for as long as the subscription to the press mailing list is active.

The other personal data collected during the registration process will usually be deleted after a period of seven days.

5. Right of objection and removal

The user concerned can cancel their subscription to the press mailing list at any time and delete the profile created. For this purpose, every company message contains a corresponding note for unsubscribing from the press mailing list.

This also allows the user to revoke their consent to the storage of personal data collected during the registration process. 

1. Description and scope of data processing

On our website, we offer users the opportunity to register by providing personal data as part of the application portal. The data is entered into an input mask and transmitted to us and stored. The following data is collected as part of the registration process:

(1) Title

(2) surname, first name

(3) email address

(4) telephone number

(5) nationality

(6) date of birth

At the time of registration, the following data is also stored:

(6) the user's IP address

(7) date and time of registration

As part of the registration process, we refer you to the data protection declaration for applicants for further processing of the application documents.

2. Legal basis for data processing

The legal basis for the processing of the data is the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and the analogous provisions of the applicable data protection law.

3. Purpose of data processing

Users must register in order to use the applicant portal.

4. Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the event of rejection, the data will be deleted no later than six months after completion of the application process.

If the data subject is considered for another position, it is possible to make contact at a later date and continue the application process. This is subject to the consent of the data subject. In this case, the transmitted data will be deleted 24 months after the application.

5. Right of objection and removal

As a user, you have the option to cancel your registration at any time. You can change the data stored about you at any time. 

We maintain online presences within social networks in order to communicate with the clients, interested parties and users active there and to inform them about our services. In this context, only simple links and social media buttons that do not establish a connection to the respective network when the page is loaded are used on our website. For this purpose, we use the "c't Shariff" solution, which provides data protection-compliant social media buttons.

This distinguishes the "Share" buttons used here from the widely used social media plugins, which transmit data to the social networks as soon as the page is loaded, without the button having to be clicked. In contrast, a Shariff button only establishes direct contact between the social network and the visitor when the latter actively clicks on the share button. Shariff thus prevents users from leaving a digital trail on every page they visit, thereby improving data protection. Further information on c't Shariff can be found at: https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.  
Additional information on the processing of data within the respective social networks can be found in the following privacy policy for social media. 

1. description and scope of the processing of personal data  
This website uses Google Analytics, a web analytics service provided by Google Inc ("Google"). This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyse the activities of a user across devices.

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area (including Switzerland). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.

The following data will be processed:

   The IP address of the user

   Date and time of access

   Log-in information

   Amount of data transferred

   Requesting domain

   Device type, model, brand, screen resolutions

   Operating system, versions, families

   Browser, -version, -configuration, -engines, -plugins, -language, language code

   Location data

   Provider details

   Pages per visit, number of visits, recurring visits, visit time, visit day

   Entry pages, exit pages, page URL, page title, search terms, downloads

   Search engines, search terms, websites, social networks

   Campaigns, campaign keyword

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

2. legal basis for the processing of personal data  
If consent has been given, the legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. a GDPR and the analogous provisions in accordance with the applicable data protection law.

3. purpose of data processing  
The purpose of using the web analysis service is to be able to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, the adequacy decision between the EU and the USA, the Data Privacy Framework (DPF), has applied since 10 July 2023. The USA is certified as having an equivalent level of data protection to the EU insofar as the company receiving the data in the USA is certified in accordance with the regulations of the DPF, which is the case for Google LLC (see positive proof in the list of the US Department of Commerce).

4. duration of storage, objection and removal options  
The data sent by Google and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 14 months. According to Google, data that has reached the end of its retention period is automatically deleted once a month. We would like to point out that we have no influence on the duration of storage by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en  

Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across different devices, you must opt out on all systems used. If you click here, the opt-out cookie will be set: ga-optout text="Deactivate Google Analytics"

This website uses Google Analytics with the extension "_anonymiseIp()". This means that IP addresses are further processed in abbreviated form, so that they cannot be linked to a specific person. If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately.

5. disclosure of personal data  
Information from the third-party provider: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. The terms of use can be found at: www.google.com/analytics/terms/de.html; an overview of data protection can be found at: www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy at: www.google.de/intl/de/policies/privacy.

We have also concluded an data processing agreement with Google for this purpose.

When accepting the functional cookies that go beyond the technically necessary cookies as well as cookies for analysis and advertising purposes, we would like to point out that your data may be processed in the USA. However, since the adequacy decision between the EU and the USA, the Data Privacy Framework (DPF), which has been in force since 10 July 2023, the USA has been certified as having an equivalent level of data protection to the EU insofar as the company receiving the data in the USA is certified in accordance with the regulations of the DPF, which is the case for Google LLC (see positive proof in the list of the US Department of Commerce).

To change your privacy settings, click the fingerprint icon in the bottom left corner.

1. description and scope of data processing  
This website uses Google Ads to draw attention to our attractive offers with the help of advertising material (so-called Google Ads) on external websites. We can determine how successful the individual advertising measures are in relation to the advertising campaign data.  

These adverts are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of adverts or clicks by users, can be measured. If you access our website via a Google advert, Google Ads will store a cookie on your PC. These cookies generally lose their validity after 30 days and are not intended to identify you personally. The following data is usually stored as analysis values for this cookie:  
(1) the unique cookie ID  
(2) number of ad impressions per placement (frequency)  
(3) last impression (relevant for post-view conversions)  
(4) opt-out information (marking that the user no longer wishes to be addressed)  

These cookies enable Google to recognise your internet browser. If a user visits certain pages of an Ads client's website and the cookie stored on their computer has not yet expired, Google and the client can recognise that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads client. Cookies can therefore not be tracked via the websites of Ads clients. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical analyses from Google. These analyses enable us to recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.  

Further information on data protection at Google can be found here: https://policies.google.com/privacy?hl=en and https://services.google.com/sitestats/en.html 
Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.  

2. legal basis for data processing  
The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR and the analogous provisions in accordance with the applicable data protection law if consent has been given.  

3. purpose of data processing  
By using Google Ads, we pursue the purpose of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

4. duration of storage, objection and removal options  
The cookies used generally lose their validity after 30 days and are not intended to identify you personally.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of Ads Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.

You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular suppressing third-party cookies will prevent you from receiving ads from third-party providers; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this website to their full extent. 

1. description and scope of data processing; disclosure of personal data

We process personal data in the context of plug-ins, temporary cookies, tracking pixels and other measurement tools ("measurement tool"). Measurement tools enable us to track website visits and actions (so-called conversions) of visitors on our respective website. Among other things, this helps us to check the effectiveness of our adverts and to display adverts in a more targeted and interest-based manner.

For this purpose, we process identifiers such as your IP address, the time of a website visit and/or another identifier (e.g. a special ID number). This personal data is sent to the provider of the respective measurement tool or sent to us by the provider. This allows us to track, for example, how often an advert on a partner's website was clicked on in order to reach our website.

2. legal basis for data processing  
The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent.

3. measurement tool service provider

We have no knowledge of the details of the processing of personal data in the area of responsibility of the respective measurement tool provider. Below you will find information about the processing of personal data by the respective measurement tool provider:

Meta-Pixel, a web analysis service of Meta Platforms Inc, 1 Hacker Way Menlo Park, California 94025, USA. You can find more information and the privacy policy here:

https://www.facebook.com/privacy/policy?section_id=0-WhatIsThePrivacy

https://developers.facebook.com/docs/meta-pixel/

Google Pixel, part of the Google Ads advertising service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You can find more information and the privacy policy here:

https://services.google.com/sitestats/en.html

https://privacy.google.com/businesses/adsservices/

LinkedIn Insight Tag, a web analytics service provided by LinkedIn Ireland Unlimited Company, Attn: Legal Dept, Wilton Plaza, Wilton Place, Dublin 2, Ireland. You can find more information and the privacy policy here:

https://www.linkedin.com/help/linkedin/answer/a1444756/linkedin-marketing-solutions-und-die-datenschutz-grundverordnung-dsgvo-?lang=de

https://www.linkedin.com/legal/privacy-policy?  

Xing Pixel, a service of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. You can find the privacy policy here:

https://privacy.xing.com/en/your-privacy

Reddit Conversion Pixel, a web analysis service of Rabbit, Inc, 548 Market St. #16093 San Francisco, California 94104, USA. You can find more information and the privacy policy here:

https://www.reddit.com/r/redditads/comments/a33o6p/the_new_and_improved_conversion_pixel_and/

https://www.reddit.com/policies/privacy-policy  

Twitch Pixel, a web analysis service of Twitch Interactive Inc, 350 Bush Street, Second Floor, San Francisco, California 94104, USA. You can find the privacy policy here:

https://www.twitch.tv/p/en/legal/privacy-notice/  

Studydrive, an offer of Studydrive GmbH, Karl-Marx-Straße 97-99, 12043 Berlin, Germany. You can find the privacy policy here:

https://www.studydrive.net/en/tag/privacy-policy  

Studyfix, an offer from Studyflix GmbH, Kirchbergstr. 23, 86157 Augsburg, Germany. You can find the privacy policy here:

https://studyflix.de/datenschutz

Get in IT / Get in Engineering, an offer of get in GmbH, Siegburger Straße 215, 50679 Cologne, Germany. You can find the data protection information here:

https://www.get-in.de/datenschutz

Yandex, an offer of Yandex N.V., Schiphol Boulevard 165, 1118 BG Schiphol, The Netherlands. You can find the privacy policy here:  

https://yandex.com/legal/search-results/?service=legal-docs&query=personal+data+protection

RetailMeNot, an offer of RetailMeNot Inc, 301 Congress Ave, Suite 700 Austin, TX 78701 US. You can find the privacy policy here:  

https://www.ziffdavis.com/privacy-policy

4. cancellation and removal options

You can revoke your consent at any time, the easiest way is via our cookie manager. You can also delete cookies in the browser of your end device (please note that such a deletion must be carried out separately for each end device due to the technical design).

5. international data transfer

Through the respective use of measurement tools, your personal data may be transferred to recipients in third countries. Third countries are countries outside the EU and outside the EEA. These third countries also include the USA. In this respect, there is no comparable level of data protection in the USA as in Europe if the company receiving the data is not certified in accordance with the adequacy decision between the EU and the USA, the Data Privacy Framework (DPF), which has been in force since 10 July 2023. In particular, it is possible that government agencies may access personal data without us or you being aware of this. Legal action may not be successful.

If there is no adequacy decision, we transfer personal data to third countries on the basis of the EU standard contractual clauses when using measurement tools in order to establish an equivalent level of data protection. You can find more information here:

https://commission.europa.eu/publications/standard-contractual-clauses-international-transfers_en

Insofar as the company receiving the data is certified in accordance with the applicable adequacy decision between the EU and the USA, the Data Privacy Framework (DPF), a level of data protection equivalent to that of the EU is attested in this respect and the data processing is based on the Data Privacy Framework.  

To change your privacy settings, click the fingerprint icon in the bottom left corner.

1.    Description and extent of data processing
We use the Google Maps service on this website. This enables us to display interactive maps directly on the website, making it easy and convenient for you to use the map function.

Should you visit the website, Google receives the information that you have activated the corresponding subpage of our website. In addition, the following data is transmitted:

(1)    IP address of the accessing computer
(2)    Date and time of enquiry

This happens regardless of whether or not Google has provided a user account by means of which you have logged on. If you have logged on to Google, your data is assigned directly to your account. If you do not wish the data to be assigned to your profile with Google, you must log out before clicking on the link. 
Further, depending on what settings the user has made, it is even possible for Google to collect location data. However, your consent to such data being used is always necessary, and you can refuse to let Google have this in your response to the query.
Further information concerning the purpose and scope of data acquisition and its processing by the plugin provider can be found in the provider’s data privacy statements,. where you will also find additional information on your rights in this respect and setting options to protect your private sphere:
https://policies.google.com/privacy?hl=en&gl=en. 

2.    Legal basis for data processing
Provided your consent has been obtained, the legal basis for the processing of data is Art. 6 para. 1 p. 1 point a of the GDPR and the analogous provisions in accordance with the applicable data protection legislation.

3.    Purpose of data processing
Google stores your data as usage profiles, which it then uses for advertising or market research purposes, and/or the needs-based design of its website. An analysis of this type is carried out (even for users who have not logged on) in particular to provide needs-based advertising, and to inform other people using the social network of your activities on our website.

4.    Storage duration; Right to object and right of elimination
We store your personal data for as long as is necessary to provide Google Maps for you when you are accessing this website. You are entitled to withdraw your consent at any time without affecting the admissibility of any processing carried out prior to its withdrawal. Using our Consent Manager is the easiest way to withdraw your consent. You also have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google.

5.    Forwarding of personal data
Google also processes your personal data in the USA. With your consent to the integration of the function, you also consent to the processing of your data in the USA pursuant to Art. 49 para. 1 p. 1 point a of the GDPR. We would like to point out that the European Court of Justice regards the US as a country with a level of data protection that is insufficient by EU standards. In view of this fact, no other suitable data protection safeguards exist. There is therefore a risk of your data being processed by U.S. authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you do not want this to happen, click Refuse.

1.    Description and extent of data processing

We use the web fonts provided by Google and downloaded to our local server to ensure that font types are shown consistently. To this end, the required web fonts are loaded into your browser cache so that texts and fonts are displayed correctly. If your browser does not support web fonts, a default font from your computer is used.

No cookies are set when you call up the page. Also, no direct connection to Google's servers is established, as the fonts are integrated locally into our website.

2.    Legal basis for data processing

Due to our legitimate interest in fonts being shown consistently,  Art. 6 para. 1 p. 1 point f of the GDPR is the legal basis for processing

3.    Purpose of data processing

Google Web Fonts is a freely available library of over 800 fonts. Google Web Fonts allows us to present our website to the user in an attractive design and in the same quality across all devices. This is the only way of making it technically possible for all visitors to our homepage to have a consistent and pleasant user experience.
This is also a legitimate interest within the meaning of Art. 6 para. 1 p. 1 point f of the GDPR.

4.   Storage duration, right to object and right of elimination

Data is stored for as long as it is needed for the purpose for which it was collected. You have the option of objecting to the use by changing your browser settings.

1.    Description and extent of data processing

We have integrated YouTube videos into our online service; these are stored at www.YouTube.com and can be played directly from our website. Due to this integration, a connection between your browser and YouTube is established when you visit our Website and data about you as a user is transferred to YouTube. We have no influence on this data transmission.

2.    Legal basis for data processing
The legal basis for the processing, if you have given your consent, is Art. 6 para. 1 p. 1 lit. a DSGVO and the analogous provisions according to the applicable data protection law.

3.    Purpose of data processing
YouTube stores your data as usage profiles, which it then uses for advertising or market research purposes, and/or the needs-based design of its website. An analysis of this type is carried out (even for users who have not logged on) in particular to provide needs-based advertising, and to inform other people using the social network of your activities on our website.

4.    Storage duration, right to object and right of elimination
If you do not wish the data to be assigned to your profile with YouTube, you must log out before activating the button. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact YouTube.

Further information concerning the purpose and scope of data acquisition and its processing by YouTube can be found in the data privacy statement, where you will also find additional information on your rights and setting options to protect your private sphere: https://www.google.de/intl/de/policies/privacy.

5. Forwarding of personal data
YouTube also processes your personal data in the USA. With your consent to the integration of YouTube videos, you also consent to the processing of your data in the USA pursuant to Art. 49 para. 1 p. 1 point a of the GDPR and the analogous provisions according to the applicable data protection law. We would like to point out that the European Court of Justice regards the US as a country with a level of data protection that is insufficient by EU standards. In view of this fact, no other suitable data protection safeguards exist. There is therefore a risk of your data being processed by U.S. authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you do not want this to happen, click Refuse.

1. Description and extent of data processing
For analysis purposes, as well as for e-mailing, blogs and posting social media, we use HubSpot, a service provided by HubSpot Inc., on our website. HubSpot Inc. is a US company which has a subsidiary in Ireland (HubSpot, 2nd floor 30 North Wall Quay, Dublin 1, Ireland, Tel.: +353 1 5187500). HubSpot uses cookies which are stored on the user's computer and collect certain types of data. The following data is collected:

• IP address
• Location
• Browser
• Duration of visit
• Websites opened

2. Legal basis for data processing 
If the user's consent has been obtained, the legal basis for the processing of personal data by the HubSpot service is Art. 6 para. 1 p. 1 point a of the GDPR and the analogous provisions according to the applicable data protection law. The use of the service for the purpose of emailing, blogging and social media posting is otherwise based on our legitimate interest in accordance with Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions in accordance with the applicable data protection law.

3. Purpose of data processing
The purpose of using the service for analysis is to be able to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user.

The data collected via the HubSpot service is used for mailing lists, blogs and social media postings, making customer care easier and clearer. 
The purposes described above are also in our legitimate interests in the processing of personal data under Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions in accordance with the applicable data protection law.

4. Storage duration, right to object and right of elimination
We use data that has been acquired by means of the HubSpot service for the above-mentioned purposes only, and do not disclose such data to third parties. To this purpose, we have also entered into a data processing contract with HubSpot Inc.
You can prevent the acquisition of data by HubSpot by making the appropriate browser settings to forbid cookies from being stored. Instructions can be found on http://www.meine-cookies.org/cookies_verwalten/index.html

If you would like to prevent your data from being used for marketing purposes, you can unsubscribe by clicking on http://www.youronlinechoices.eu/
Further information on data processing by HubSpot and the HubSpot data protection conditions can be found at https://legal.hubspot.com/legal-stuff, https://legal.hubspot.com/privacy-policy, and  https://legal.hubspot.com/website-terms-of-use.

5. Forwarding of Personal Data

HubSpot processes your personal data in the USA. With your consent to the integration of the service, you also consent to the processing of your data in the USA pursuant to Art. 49 para. 1 sentence 1 point a of the GDPR and the analogous provisions pursuant to applicable data protection legislation. We would like to point out that the European Court of Justice regards the US as a country with a level of data protection that is insufficient by EU standards. In view of this fact, no other suitable data protection safeguards exist. There is therefore a risk of your data being processed by U.S. authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you do not want this to happen, click Refuse.

If personal data concerning you is processed, you are the data subject as defined in the GDPR and the analogous provisions pursuant to applicable data protection legislation, and have the following rights against the data controller:

1. Right to be informed
You can ask the controller to provide you with confirmation as to whether or not personal data concerning you is processed by us.

If such processing is being undertaken, you can ask the controller to provide you with information concerning the following:

(1) The purposes for which the personal data is processed;
(2) The personal data categories which are processed;
(3) The recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
(4) The planned storage duration of the personal data concerning you or, if it is not possible to provide concrete information on this point, criteria for defining the storage duration;
(5) The existence of a right to correct or delete the personal data concerning you, a right to limit processing by the controller, or a right to object to such processing;
(6) The existence of a right to lodge a complaint with a supervisory authority;
(7) All available information concerning the origin of the data, if the personal data was not acquired from the data subject him or herself;
(8) The existence of automated decision-making and profiling in accordance with Art. 22 para. 1 and 4 of the GDPR and the analogous provisions pursuant to applicable data protection legislation and – at least in these cases – meaningful information on the logic involved and the implications and intended impact of such processing for the data subject.

You have the right to request information on whether or not the personal data concerning you is transmitted to a third country or international organisation. In this context, you may ask for information on appropriate guarantees in accordance with Art. 46 of the GDPR and the analogous provisions pursuant to applicable data protection legislation relating to the transmission of data.

2. Right to rectification
You have a right to have the controller correct or complete any personal data concerning you which, having been processed, is either incorrect or incomplete. The data controller must carry out any corrections without undue delay.

3. Right to restrict processing
Subject to the following conditions, you can request that processing of the personal data concerning you be restricted:

(1) If you dispute the accuracy of the personal data concerning you for a period which allows the controller to check the accuracy of the personal data;
(2) The processing is unlawful and you refuse deletion of the personal data, instead requesting that use of the personal data be restricted;
(3) The controller no longer needs the personal data for processing purposes, but you need it in order to establish, exercise or defend legal claims, or
(4) If you have filed an objection to the processing of the data in accordance with Art. 21 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.

If the processing of the personal data concerning you has been restricted, then, storage aside, this data may only be processed with your consent (insofar as legally required), or to establish, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of substantial public interest on the basis of Union or Member State law.

If the processing has been restricted under the above-mentioned conditions, you will be informed by the controller before the restriction is lifted.

4. Right to deletion
a) Obligation to delete
You can ask the controller to delete the personal data concerning you without undue delay, and the controller is obliged to delete this data without delay if one of the following reasons applies:
(1) The personal data concerning you is no longer needed for the purposes for which it was collected or otherwise processed.
(2) You revoke your consent, which served as the basis for processing in accordance with Art. 6 para. 1 p. 1 lit. a or Art. 9 para. 2 point a of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and there is no other legal basis for the processing.
(3) You file an objection to processing in accordance with Art. 21 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and there are no overriding legitimate reasons for the processing, or you file an objection to processing in accordance with Art. 21 para. 2 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
(4) The personal data concerning you has been unlawfully processed.
(5) Deletion of the personal data concerning you is necessary in order to ensure compliance with a legal obligation under Union or Member State law to which the data controller is subject.
(6) The personal data concerning you has been acquired in relation to the offer of information society services in accordance with Art. 8 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.

b) Information to third parties
If the controller has made the personal data concerning you public, and is obliged to delete such data in accordance with Art. 17 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, then, taking into account the technologies available and implementation costs, he - the controller - applies appropriate measures, which may also be of a technical nature, to inform the people responsible for processing personal data that, as the data subject, you have requested that they should delete all links to this personal data as well as all copies or replications of this personal data.

c) Exceptions
The data subject does not have the right to have his or her data deleted if processing is necessary
(1) to exercise the rights to freedom of expression and freedom of information;
(2) to comply with a legal obligation calling for processing on the basis of Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 points h and i and Art. 9 para. 3 of the GDPR and the analogous provisions pursuant to applicable data protection legislation;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, insofar as the right set out in section a) is likely to render impossible or seriously impair the achievement of the purposes of this processing, or
(5) to establish, exercise or defend legal claims.

5. Right to information
If you have exercised your right to have the controller correct, delete or restrict the processing of your data, then the controller is obliged to inform all recipients to whom the personal data concerning you has been disclosed of such correction or deletion of the data or restriction of the processing, unless it proves impossible to do so or would involve unreasonable expense and effort.

You are entitled to have the controller inform you of these recipients.

6. Right to data portability
You have the right to receive the personal data concerning you with which you have provided the controller in a structured, commonly used and machine-readable format. Further, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, providing that

(1) processing is based on consent in accordance with Art. 6 para. 1 p. 1 point a of the GDPR or Art. 9 para. 2 point a of GDPR and the analogous provisions pursuant to applicable data protection legislation, or on a contract in accordance with Art. 6 para. 1 p. 1 point b of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and

(2) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible.

This shall not adversely affect the rights and freedoms of others.

The right to data portability does not apply to processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 p. 1 point e or f of the GDPR and the analogous provisions pursuant to applicable data protection legislation; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims.

If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling, insofar as it is related to such direct marketing.

Should you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
In the context of the use of information society services – notwithstanding Directive 2002/58/EG and the analogous provisions pursuant to applicable data protection legislation – you are entitled to exercise your right to object by automated means using technical specifications.

8. Right to withdraw declaration of consent under data protection law
You have the right to withdraw your declaration of consent to the processing of personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on your consent before its withdrawal.

9. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects that concern you or significantly affects in a similar way. This does not apply if the decision

(1) is necessary for entering into or the performance of a contract between you and the data controller,
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests, or
(3) is made with your explicit consent.

These decisions must not, however, be based on special categories of personal data referred to in Art. 9 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, unless Art. 9 para. 2 point a or g and the analogous provisions pursuant to applicable data protection legislation apply, and suitable measures have been undertaken to safeguard your rights and freedoms and your legitimate interests.

With regard to the cases described in points (1) and (3), data controller will implement suitable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State or state of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR and the analogous provisions pursuant to applicable data protection legislation.

The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy in accordance with Art. 78 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.