Privacy Policy - Mövenpick Fine Food
Follow us

      Privacy Policy

      1. Controller and Content of this Privacy Policy

      We, Mövenpick Holding AG, Oberneuhofstrasse 12, 6340 Baar, Switzerland, are the operator of the website www.moevenpick-finefood.com (Website) and are, unless otherwise stated in this privacy policy, responsible for the data processing described below.

      Please take note of the information below to know what personal data we collect from you and for what purposes we use it. When it comes to data protection, we adhere to the legal requirements of Swiss data protection law, in particular the Federal Act on Data Protection (FADP), as well as the EU General Data Protection Regulation (GDPR), which may be applicable in individual cases.

      Please note that the following information may be reviewed and amended from time to time. Therefore, we recommend regularly checking this privacy policy for any updates. Furthermore, for individual data processing listed below, other companies are responsible under data protection law or jointly responsible with us, so that in these cases, the information provided by those companies is also relevant.

      This privacy policy applies to our end customers (B2C) and the website www.moevenpick-finefood.com. Separate data protection notices apply to business customers and the B2B website, which are available on the respective website.

      2. Contact Person for Data Protection

      If you have any questions regarding data protection or wish to exercise your rights, please contact our data protection contact person by sending an email to the following address: privacy@moevenpick-group.com

      You can reach our EU data protection representative at:

      MLL EU-GDPR GmbH, Ganghoferstrasse 33, 80339 Munich, Germany, moevenpickholding@mll-gdpr.com

      3. Data Processing when Contacting Us

      If you contact us through our contact addresses and channels (e.g., by email, phone, or contact form), your personal data is processed. We process the data you provide us with, such as your name, email address or phone number, and your request. Additionally, the time of receipt of the request will be documented. Mandatory fields are marked in contact forms with an asterisk (*). We process this data to address your request (e.g., providing information about our products and services, assisting with contract processing, incorporating your feedback into the improvement of our products and services, etc.).

      For product enquiries or complaints, additional information may be required, such as product name, variety, place of purchase, best-before date, production code, or photographs. This information helps us to properly review your request.

      The legal basis for this data processing is our legitimate interest under Article 6(1)(f) of the GDPR in addressing your request or, if your request is aimed at the conclusion or performance of a contract, the necessity of implementing the required contractual measures within the meaning of Article 6(1)(b) of the GDPR.

      If your request relates to a product that is manufactured or distributed by a licensee or business partner, we may forward your request to the relevant partner to the extent necessary for processing. Insofar as licensees independently respond to or review your request, they act as independent controllers within the meaning of applicable data protection law.

      4. Data Processing in Job Applications

      If you apply for a position with us, either spontaneously or in response to a specific job advertisement, we process the personal data you provide to us (e.g., personal details, curriculum vitae, and contact information). We use this data to assess your application and suitability for employment. Detailed information about the processing of your application data can be found in our separate privacy policy for applicants, which we provide to you as part of the application process. The legal basis for this data processing is the necessity for the implementation of the required (pre-)contractual measures within the meaning of Article 6(1)(b) of the GDPR. Application documents from unsuccessful applicants will be deleted at the end of the application process, unless you explicitly agree to a longer retention period or we are legally obliged to retain them for a longer period.

      For job advertisements, we use, among other services, LinkedIn, provided by LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland, as well as Refline, provided by Refline AG, Bösch 65, 6331 Hünenberg, Switzerland. Therefore, your data may be stored in a database of the respective provider, which may allow the provider to access your data if this is necessary for providing the software and supporting its use. Information about data processing by third parties and any transfer abroad can be found in Section 11 of this privacy policy. The legal basis for this processing is our legitimate interest under Article 6(1)(f) of the GDPR in using the services of third-party providers.

      It may be that the providers wish to use some of this data for their own purposes (e.g., for statistical analysis). For these data processing operations, the providers are the controllers and must ensure compliance with data protection laws in connection with these data processing operations. Information about data processing by the providers can be found at http://www.linkedin.com/legal/privacy-policy and https://www.refline.io/en/privacy.html.

      5. Background Data Processing on our Website

      5.1 Data Processing when Visiting our Website (Log File Data)

      When you visit our Website, the web servers temporarily store every access in a log file (Log File Data). The following data is collected without your intervention and stored by us until automatically deleted:

      • IP address of the requesting computer;
      • date and time of access;
      • name and URL of the accessed file;
      • website from which the access was made, if applicable, with the search term used;
      • operating system of your computer and the browser you are using (including type, version, and language setting);
      • device type, where the Website is accessed from a mobile device;
      • city or region from which the access was made; and
      • name of your internet service provider.

      The collection and processing of this data is carried out for the purpose of enabling the use of our Website (establishing a connection), ensuring the long-term security and stability of the system, and enabling error and performance analysis and optimisation of our Website based on statistical evaluations and the target-group-specific presentation of the Website (in particular, pre-setting the language version of our Website; see also Section 6 regarding these points).

      In case of an attack on our data processing systems or suspicion of unauthorised or improper use of the Website, the IP address and other data will be analysed for clarification and defence purposes; if necessary, they may be used in civil or criminal proceedings for the identification of the respective user. For further data processing to protect our interests, we refer to Section 10.

      The legal basis for this data processing is our legitimate interest within the meaning of Article 6(1)(f) of the GDPR in the purposes described above.

      For these data processing operations, we use the services of STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany (Provider). Therefore, your data may be stored in a database of the Provider, which may allow the Provider to access your data if this is necessary for providing the services and supporting their use. Information about data processing by third parties and any transfer abroad can be found in Section 11 of this privacy policy. The legal basis for this processing is our legitimate interest under Article 6(1)(f) of the GDPR in using the services of third-party providers.

      Finally, when you visit our Website, we use cookies, as well as applications and tools that rely on the use of cookies. In this context, the data described here may also be processed. For more information, please refer to the subsequent sections of this privacy policy, in particular Section 5.2.

      5.2 Cookies

      Cookies are information files that your web browser stores on the hard drive or in the memory of your device when you visit our Website. Cookies are assigned identification numbers that enable your browser to be identified and allow the information contained in the cookie to be read.

      Cookies are used, among other things, to make your visit to our Website easier, more enjoyable, and more meaningful. We use cookies for various purposes that are necessary for the desired use of the Website, i.e., “technically necessary”. For example, we use cookies so that your entries when filling out a form on the Website are temporarily saved, so that you do not have to repeat them when navigating to another page. Furthermore, cookies perform other technical functions necessary for the operation of the Website, such as load balancing, which distributes the workload of the site across various web servers to relieve the servers. Finally, we use cookies in the design and programming of our Website, for example, to enable the uploading of scripts or codes.

      The legal basis for this data processing is our legitimate interest within the meaning of Article 6(1)(f) of the GDPR in providing a user-friendly and up-to-date website.

      Most web browsers accept cookies automatically. However, when accessing our Website, we ask for your consent to the use of technically non-essential cookies, in particular for the use of cookies from third parties for marketing purposes. You can adjust your preferences by using the corresponding buttons in the cookie banner. Details regarding the individual cookie-based services and data processing can be found within the cookie banner and in the following sections of this privacy policy.

      For managing your cookie settings, we use the consent management tool Cookiebot of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (Cookiebot). Cookiebot stores your consent decision and ensures that technically non-essential cookies are used or blocked in accordance with your selection. Information about any transfer abroad can be found in Section 11 of this privacy policy.

      You may also be able to configure your browser to prevent cookies from being stored on your computer or to receive a notification whenever a new cookie is being sent. On the following pages, you will find instructions on how to configure cookie settings for selected browsers.

      Disabling cookies may prevent you from using all the features of our Website.

      5.3 Google Tag Manager

      To manage the functions of our Website, we use the Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Tag Manager allows tracking codes and associated code fragments (or tags) to be managed without having to manually alter the code. Once implemented, the tracking tools we use can be managed, triggered, and controlled via Google Tag Manager. Google Tag Manager is therefore closely related to the data processing described below and is indirectly used for the purposes described therein, which is why the legal basis for the processing also derives from the sections on the individual tools. To the extent that the use of Google Tag Manager constitutes a separate processing activity, the legal basis is our legitimate interest within the meaning of Article 6(1)(f) of the GDPR in using third-party services for the efficient management of our websites and for conducting our marketing activities.

      It may be that Google wishes to use some of this data for its own purposes (e.g., for statistical analysis for product optimisation). For these data processing operations, Google is the controller and must ensure compliance with data protection laws in connection with these data processing operations. Information about data processing by Google is available in Google’s Privacy Policy.

      6. Tracking and Web Analytics Tools

      6.1 General Information about Tracking

      For the purpose of customising and continuously optimising our Website, we use the web analytics services listed below. In this context, pseudonymised usage profiles are created, and cookies are used (please also see Section 5.2). The information generated by the cookie regarding your use of our Website is usually transmitted to a server of the service provider, where it is stored and processed, together with the Log File Data mentioned in Section 5.1. This may also result in a transfer to servers abroad, e.g., to the USA (for information on the absence of an adequate level of data protection and the safeguards in place, see Sections 11.2 and 11.3).

      Through the data processing, we obtain, among others, the following information:

      • navigation path followed by a visitor on the site (including content viewed);
      • time spent on the Website or specific page;
      • the specific page from which the Website is left;
      • the country, region, or city from which the Website is accessed;
      • end device (type, version, colour depth, resolution, operating system, width and height of the browser window); and
      • returning or new visitor.

      The provider, on our behalf, will use this information to evaluate the use of the Website, in particular to compile Website activity reports and to provide further services related to Website usage and internet usage for the purposes of market research and the customisation of the Website. For these processing activities, we and the providers may be considered joint controllers in terms of data protection to a certain extent.

      The legal basis for this data processing with the following services is your consent within the meaning of Article 6(1)(a) of the GDPR. Some of the data processing may also be considered profiling (with or without a high risk), to which your consent also extends. You can withdraw your consent or reject the processing at any time by rejecting or disabling the relevant cookies in the cookie banner or in the settings of your web browser (see Section 5.2) or by using the service-specific options described below.

      Regarding the further processing of the data by the respective provider as the (sole) controller, including any potential disclosure of this information to third parties, such as authorities due to national legal regulations, please refer to the respective privacy policy of the provider.

      6.2 Google Analytics

      We use the web analytics service Google Analytics of Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).

      Contrary to the description in Section 6.1, IP addresses are not logged or stored in Google Analytics (in the version used here, “Google Analytics 4”). For accesses originating from the EU, IP address data is only used to derive location data and is immediately deleted thereafter. When collecting measurement data in Google Analytics, all IP address lookups are performed on EU-based servers before the traffic is forwarded to Analytics servers for processing. Google Analytics utilises regional data centres. When connecting to the nearest available Google data centre in Google Analytics, the measurement data is sent to Analytics via an encrypted HTTPS connection. In these centres, the data is further encrypted before being forwarded to Analytics’ processing servers and made available on the platform. The most suitable local data centre is determined based on the IP address. This may also result in a transfer of data to servers abroad, e.g., to the USA (for information on the absence of an adequate level of data protection and the safeguards in place, see Sections 11.2 and 11.3).

      Users can prevent the collection of data related to their Website usage (including IP address) generated by the cookie as well as the processing of this data by Google, and withdraw their consent, by rejecting or deactivating the relevant cookies in the cookie banner or in the settings of their web browser (see Section 5.2) or by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

      Regarding the further processing of data by Google, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=en.

      7. Online Advertising and Targeting

      7.1 In General

      We use services of various companies to provide you with interesting offers online. In the process of doing this, your user behaviour on our Website and websites of other providers is analysed in order to subsequently be able to show you online advertising that is individually tailored to you.

      Most technologies for tracking your user behaviour (Tracking) and displaying targeted advertising (Targeting) utilise, in addition to Log File Data (see Section 5.1), cookies (see also Section 5.2) or similar technologies and unique identifiers (e.g., advertising ID), which allow your browser to be recognised across different websites. Depending on the service provider, it may also be possible for you to be recognised online even when using different end devices (e.g., laptop and smartphone). This may be the case, for example, if you have registered for a service that you use with several devices.

      For these purposes, the aforementioned data may be transmitted to the companies involved in the advertising networks (e.g., Google) and further processed by them. This may also involve the disclosure of data to potentially all countries worldwide (for information on the absence of an adequate level of data protection and the safeguards in place, see Sections 11.2 and 11.3). In addition, the following data, in particular, is used to select the advertising that is potentially most relevant to you:

      • information about you that you provided when registering or using a service from advertising partners (e.g., your gender, age group); and
      • user behaviour (e.g., search queries, interactions with advertisements, types of websites visited, products or services viewed and purchased, newsletters subscribed to).

      We and our service providers use this data to determine whether you belong to the target audience we address and take this into account when selecting advertisements. For example, after visiting our Website, you may see advertisements for the products or services you have viewed when you visit other sites (Re-Targeting). Depending on the amount of data, a user profile may also be created, which is automatically analysed, i.e., with profiling, whereby the advertisements are selected based on the information stored in the profile, such as belonging to certain demographic segments or potential interests or behaviours. These advertisements may be displayed to you on various channels, including our Website as well as advertising placements provided through the online advertising networks we use, such as Google.

      The data may then be analysed for the purpose of settlement with the service provider, as well as for evaluating the effectiveness of advertising measures in order to better understand the needs of our users and customers and to improve future campaigns. This may also include information that the performance of an action (e.g., visiting certain sections of our Website or submitting information) can be attributed to a specific advertisement. We also receive from service providers aggregated reports of advertisement activity and information on how users interact with our Website and advertisements.

      The legal basis for this data processing is your consent within the meaning of Article 6(1)(a) of the GDPR. Some of the data processing may also be considered profiling (with or without a high risk), to which your consent also extends. You can withdraw your consent or reject the processing at any time by rejecting or disabling the relevant cookies in the cookie banner or in the settings of your web browser (see Section 5.2). Further options for blocking advertising can also be found in the information provided by the respective service provider, such as Google.

      7.2 Google Ads

      As explained in Section 7.1, this Website uses the services of Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) for online advertising. Google uses cookies, similar technologies and unique identifiers, in particular advertising IDs, which allow your browser to be recognised when you visit other websites. A list of the cookies used by Google is available here. The information generated thereby about the visit to these websites (including your IP address) is transmitted, among others, to Google’s servers in the USA and stored there (for information on the absence of an adequate level of data protection and the safeguards in place, see Sections 11.2 and 11.3). Google will process the data in particular to show you personalised advertising on Google services (e.g., the search engine). Further information on data protection at Google can be found here.

      The legal basis for this data processing is your consent within the meaning of Article 6(1)(a) of the GDPR. You can withdraw your consent or reject the processing at any time by rejecting or disabling the relevant cookies in the cookie banner or in the settings of your web browser (see Section 5.2). Further options for blocking advertising can be found here.

      7.3 Meta Pixel and Audience-Based Advertising on Meta Platforms

      As explained in Section 7.1, this Website uses the advertising services of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) for online advertising. Meta uses technologies such as cookies and the Meta Pixel, which allow your browser to be recognised when visiting other websites. The information generated thereby about the visit to these websites (including your IP address) is transmitted, among others, to Meta’s servers in the USA and stored there (for information on the absence of an adequate level of data protection and the proposed safeguards, see Sections 11.2 and 11.3). Meta will process the data in particular to show you personalised advertising on Meta services (e.g., Facebook or Instagram). We use the targeting functions offered by Meta to address user groups based on their interactions within the Meta platforms (e.g., clicks on links in our advertisements). Further information on data protection at Meta can be found here and here.

      The legal basis for this data processing is your consent within the meaning of Article 6(1)(a) of the GDPR. You can withdraw your consent or reject the processing at any time by rejecting or disabling the relevant cookies in the cookie banner or in the settings of your web browser (see Section 5.2). Further options for blocking advertising can be found here.

      8. Social Media Profiles

      Our Website contains links to our profiles on the social networks of the following providers:

      • Meta Platforms Ireland Limited (Facebook and Instagram), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Privacy Policy;
      • LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland, Privacy Policy;
      • Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, Privacy Policy.

      If you click on the icons of the social networks, you will be automatically redirected to our profile on the respective network. This establishes a direct connection between your browser and the server of the respective social network. As a result, the social network receives in particular the data described in the section on Log Files (Section 5.1), i.e., in particular the information that you have visited our Website with your IP address and clicked on the link. This may also involve the transfer of data to servers abroad, e.g., to the USA (for information on the absence of an adequate level of data protection and the proposed safeguards, see Sections 11.2 and 11.3).

      For data processing as a logged-in user of the social networks, please also see the information in Section 9 as well as the privacy policies of the providers. The legal basis for any data processing attributed to us is our legitimate interest within the meaning of Article 6(1)(f) of the GDPR in the use and promotion of our social media profiles.

      9. Data Transfers in the Case of Logged-in Users of a Third-Party Online Service

      When you visit our Website, it may be that the third-party service providers mentioned in this privacy policy (e.g., Google) can link the data described herein with your user account with these services, provided you are logged in to that account. If you do not want such a link to be established and further data to be transmitted to third-party service providers, you must fully log out of the respective services and delete all cookies from the providers before visiting our Website. A link between your access to our Website and your user account may also occur if you log in to the third-party service immediately after clicking on a link on our Website. For further information on how to configure your browser to prevent cookies from being stored on your computer or to receive a notification whenever a new cookie is being sent, please see Section 5.2.

      10. Fulfilment of our Legal Obligations and Protection of our Legal Interests

      The data mentioned in this privacy policy may also be processed if this is necessary for the fulfilment of legal obligations or for the protection, defence, and enforcement of our legal interests or the rights and interests of third parties, in particular other customers or our employees. This includes, for example, the investigation of incidents, the preparation and conduct of legal proceedings (e.g., lawsuits or criminal complaints), or the provision of information to authorities such as tax and employment authorities. For these purposes, the data may also be disclosed to further authorities and third parties, such as courts, debt collection offices, supervisory authorities, or lawyers, tax advisors, or accountants and auditors.

      The legal basis for this data processing is, insofar as it is covered by a legal provision of EEA law or the law of a member state, the fulfilment of a legal obligation within the meaning of Article 6(1)(c) of the GDPR, or our legitimate interest within the meaning of Article 6(1)(f) of the GDPR in complying with our legal obligations and protecting our legal interests.

      11. Disclosure and Cross-Border Transfer

      11.1 Disclosure to Third Parties and Third-Party Access

      Without the support of other companies, we would not be able to provide our products and services in the desired form. To use the services of these companies, it is necessary to share your personal data with these companies to a certain extent. A disclosure of data is limited to selected third-party service providers and only to the extent necessary for the optimal provision of our services. Various third-party service providers are explicitly mentioned in this privacy policy.

      In connection with the Mövenpick Fine Food brand, we also cooperate with licensees and business partners. If your request relates to a product that is manufactured or distributed by such a partner, we may forward your request to the relevant licensee to the extent necessary for processing. In this case, the licensees act as independent controllers within the meaning of applicable data protection law.

      It is also indispensable to rely on service providers for the use and management of our infrastructure and the fulfilment of internal tasks, and therefore further third parties may also have access to your data to the extent necessary for the use of the services, such as providers of software solutions (e.g., for word processing or email delivery), providers of IT services (e.g., hosting providers, telecommunications providers such as internet access services), agencies (e.g., in the field of marketing), or security services. The legal basis for these data processing operations is our legitimate interest within the meaning of Article 6(1)(f) of the GDPR in using the services of third parties.

      Furthermore, your data may also be disclosed to protect our rights and obligations (see Section 10). Data may also be disclosed if another company intends to acquire our company or parts thereof, and such disclosure is necessary to conduct due diligence or to complete the transaction.

      The legal basis for the latter data processing is our legitimate interest within the meaning of Article 6(1)(f) of the GDPR in the sale of our company or parts thereof.

      11.2 Transfer of Personal Data to Third Countries

      We may transfer your personal data to third parties located abroad if it is necessary to carry out the data processing described in this privacy policy. Specific data transfers have been mentioned above (see in particular Sections 5, 6, and 7). When making such transfers, we will ensure compliance with the applicable legal requirements for disclosing personal data to third parties. The countries to which data is transmitted include those that, according to the decision of the Federal Council and the European Commission, have an adequate level of data protection (such as the member states of the EEA or, from the EU’s perspective, Switzerland), as well as those countries (such as the USA) whose level of data protection is not considered adequate (see Annex 1 of the Data Protection Ordinance (DPO) and the website of the European Commission). If the country in question does not provide an adequate level of data protection, we ensure, unless an exception is specified on a case-by-case basis for the individual data processing (see Article 49 of the GDPR), that your data is adequately protected by these companies by means of appropriate safeguards. Unless otherwise specified, these safeguards may be provided for by the selection of companies that are certified under the applicable Data Privacy Framework or in some cases by standard contractual clauses as referred to in Article 46(2)(c) of the GDPR, which can be found on the websites of the Federal Data Protection and Information Commissioner (FDPIC) and the EU Commission. If you have any questions regarding the implemented measures, please reach out to our data protection contact person (see Section 2).

      11.3 Information on Data Transfers to the USA

      Some of the third-party service providers mentioned in this privacy policy are based in the USA. For the sake of completeness, we would like to inform users residing or based in Switzerland or the EEA that there are surveillance measures by US authorities in place that generally allow for the storage of all personal data of individuals whose data has been transmitted from Switzerland or the EEA to the United States. This occurs without differentiation, limitation, or exception based on the purpose for which the data is being collected and without an objective criterion that would restrict US authorities’ access to the data and its subsequent use to specific, strictly limited purposes that can justify the interference associated with accessing and using the data. Affected individuals in Switzerland or the EEA also have no effective legal remedies or judicial protection against the general access powers of US authorities that would enable them to obtain access to, or the rectification or deletion of, personal data concerning them. We explicitly highlight this legal and factual situation to enable you to make an informed decision regarding your consent to or objection to the use of your data.

      For users residing in Switzerland or a member state of the EEA, we also want to expressly inform you that, from the perspective of the European Union and Switzerland, the United States does not provide an adequate level of data protection, among other reasons, as explained in this section. In cases where we have mentioned in this privacy policy that data recipients (such as Google) are located in the United States, we will ensure through the selection of companies that are certified under the applicable Data Privacy Framework or in some cases through contractual arrangements with these companies and, if necessary, additional appropriate safeguards, that your data is adequately protected at these recipients.

      12. Retention Periods

      Unless expressly stated otherwise, we only store personal data for as long as it is necessary to carry out the processing described in this privacy policy. In particular, the following retention periods apply:

      • Contact enquiries and product enquiries: 12 months after the completion of processing the request, unless further statutory retention obligations apply.
      • Application documents: Documents from unsuccessful applicants will be deleted at the end of the application process, unless a longer retention period has been agreed or is legally required.
      • Log File Data (Website accesses): 7 days.
      • Cookies: The storage duration of cookies varies depending on the cookie type and is visible in the cookie banner. Session cookies are deleted when the browser is closed.
      • Business communication, concluded contracts, and accounting documents: Up to 10 years in accordance with statutory retention obligations (accounting and tax law).

      If we no longer need this data to provide services to you, the data will be blocked. This means that the data may then only be used if this is necessary to fulfil the retention obligations or to defend and enforce our legal interests. The data will be deleted as soon as there is no longer any legal obligation to retain it and no legitimate interest in its retention exists.

      13. Data Security

      We use appropriate technical and organisational security measures to protect your personal data stored with us against loss and unlawful processing, in particular unauthorised access by third parties. Our employees and the service companies mandated by us are obliged to maintain confidentiality and uphold data protection. Furthermore, these persons are only granted access to personal data to the extent necessary for the performance of their tasks.

      Our security measures are continuously adapted in line with technological developments. However, the transmission of information via the internet and electronic means of communication always involves certain security risks and we cannot, therefore, provide any absolute guarantee for the security of information transmitted in this way.

      14. Automated Decisions

      We do not use personal data collected via this Website for automated individual decisions that produce legal effects concerning you or similarly significantly affect you.

      15. Your Rights

      If the legal requirements are met, as a data subject, you have the following rights:

      Right of access: You have the right to request access to your personal data stored by us at any time and free of charge if we process such data. This gives you the opportunity to check what personal data concerning you we process and whether we process it in accordance with applicable data protection regulations.

      Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed about the rectification. In this case, we will also inform the recipients of the data concerned about the adaptations we have made, unless this is impossible or involves disproportionate effort.

      Right to erasure: You have the right to obtain the erasure of your personal data under certain circumstances. In individual cases, particularly in the case of statutory retention obligations, the right to erasure may be excluded. In this case, the erasure may be replaced by a blocking of the data if the requirements are met.

      Right to restriction of processing: You have the right to request that the processing of your personal data be restricted.

      Right to data portability: You have the right to receive from us, free of charge and in a readable format, the personal data you have provided to us.

      Right to object: You have the right to object at any time to data processing, in particular with regard to data processing related to direct marketing (e.g., marketing emails).

      Right to withdraw consent: You generally have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.

      To exercise these rights, please contact us at the address specified in Section 2.

      Right of complaint: You have the right to lodge a complaint with a competent supervisory authority, e.g., against the manner in which your personal data is processed.

      ***