Data Protection

The Auvesta website (www.auvesta.com) as well as the therein integrated web shop "Auvesta-Shop" (https://auvesta-shop.com) is managed by the Auvesta Edelmetalle AG, Industriestr. 4, 83607 Holzkirchen, Germany (hereinafter "Auvesta" or "we"). The protection of your personal data is a central concern for us. It is our intention within the framework of this Data Protection Statement, to inform you about the nature, scope and purpose of the collection, processing and use of your personal data

1. Information about the collection of personal data and contact details of the controller (responsible entity)
2. Data collection when visiting our website
3. Cookies
4. Establishment of contact
5. Data processing upon opening a customer account and for contract execution
6. Use of your data for direct mail
7. Data processing for the order handling
8. Use of social media: video
9. Web analytics services
10. Use of a live chat system
11. Tools and miscellaneous
12. Rights of data subjects
13. Duration of storage of personal data

1. Information about the collection of personal data and contact details of the controller (responsible entity)

1.1. We are pleased that you have visited our website and thank you for your interest. Below please information about the handling of your personal data when using our website. Personal data pertains to all data that allows you to be personally identified.

1.2. Controller (responsible entity) for the data processing on this website within the meaning of the General Data Protection Regulation [GDPR] is Auvesta Edelmetalle AG, Industriestr. 4, 83607 Holzkirchen, Deutschland, Tel.: +49 8024-47 41 144, Fax: +49 8024-47 41 146, E-Mail: info@auvesta.com. The controller of your personal data refers to the natural or legal person, public authority, institution or other entity that decides, alone or in concert with others, on the purposes and means, of the processing of the personal data.

1.3. The controller (responsible entity) for this website has appointed a data protection officer, which can be reached as follows:

Andreas Dronia
Industriestr. 4
83607 Holzkirchen
Tel: 08024 / 608 87 174
E-Mail: datenschutz@auvesta.com

1.4. This website uses an SSL or respectively TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (for example, orders or requests to the controller (responsible entity)). You can discern an encrypted connection, by means of the change in the address line of the browser, from "http://" to "https://" and the lock symbol in your browser line.

2. Data collection when visiting our website

In the case of the mere informative use of our website, i.e. insofar as you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you call up our website, we collect the following information, which is technically necessary for us to display the website:

Our visited webpage

Date and time at the time of access
Amount of data transmitted in bytes
Source / Referrer URL from which you called up the webpage
Used browser
Used operating system
Used IP address (possibly in anonymous form)

The processing is effected pursuant to Art. 6 (1) lit. f of the General Data Protection Regulation [GDPR], on the basis of our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. However, we reserve the right to retrospectively cross-check the server log files insofar as concrete evidence indicates unlawful use.

3. Cookies

In order to make the visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various web pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your terminal device and allow us or our affiliates (third-party cookies) to recognize your browser on your next visit (persistent cookies). Insofar as cookies are set, they collect and process individual user information such as browser and location data as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.

In some cases, cookies are used to simplify the ordering process by storing settings (for example, remembering the contents of a virtual shopping cart for a later visit to the website). Insofar as personal data is also in individual cases processed by the cookies implemented by us, the processing shall be effected in accordance with Art. 6 (1) lit. b of the General Data Protection Regulation [GDPR], either for the purpose of implementing the contract or in accordance with Art. 6 (1) lit. f of the General Data Protection Regulation [GDPR], in order to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the visit to the website.

We may under specific circumstances collaborate with advertising partners to help us make our website more interesting to you. For this purpose, cookies may also be stored on your hard drive when you visit our website (third-party cookies). You shall be informed about the use of such cookies and the extent of the information collected in each case, individually and separately within the following paragraphs.

Please note that you can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or can exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings. These can be found for the respective browser under the following links:

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

Please note that insofar as you do not accept cookies, the functionality of our website may be limited.

4. Establishment of contact

Personal information is collected within the framework of the establishment of contact (for example, by contact form or e-mail). For details on which data are collected in the case of a contact form, please refer to the respective contact form. This data is stored and used solely for the purpose of answering your request or for the establishment of contact and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 (1) lit. f of the General Data Protection Regulation [GDPR]. Insofar as your establishment of contact is aimed at the conclusion of a contract, the additional legal basis for the processing is then Art. 6 (1) lit. b of the General Data Protection Regulation [GDPR]. Your data shall be deleted after the final processing of your request, this is the case insofar as it can be inferred from the circumstances that the matter in question is finally clarified and provided that no statutory retention requirements specify otherwise.

5. Data processing upon opening a customer account and for contract execution

Pursuant to Art. 6 (1) lit. b, personal data shall continue to be collected and processed, insofar as you transmit this to us for the purposes of the execution of a contract or for the purposes of opening a customer account. For details on which data is collected, please refer to the respective input forms. A deletion of your customer account is possible at any given time and can be effected by way of a message to the aforementioned address of the controller (responsible entity). We save and use the data you have provided for the execution of the contract. After completion of the contract or deletion of your customer account, your data shall be blocked in compliance with tax and commercial retention periods and deleted after expiration of these periods, unless you have expressly consented to a further use of your data, or legally permitted further data use on our part exists, with regard to which we shall inform you accordingly below.

6. Use of your data for direct mail

6.1. Subscription for our newsletter

Insofar as you submit your subscription for our e-mail newsletter, we shall send you regular information about our offers. Mandatory information for the shipment of the newsletter is solely your e-mail address. The provision of further possible data is voluntary and shall be used to address you personally. For the purposes of the shipment of the newsletter, we use the so-called double opt-in procedure. This means that we shall only ship an e-mail newsletter to you, insofar as you have explicitly confirmed to us that you consent to the shipment of the newsletter. We shall then send you a confirmation e-mail requesting you to confirm by clicking on a link, pursuant to which you express your consent to receive newsletters in the future.

By activating the confirmation link, you grant us your consent for the use of your personal data in accordance with Art. 6 (1) lit. a of the General Data Protection Regulation [GDPR]. When registering for the newsletter, we shall save your IP address, registered by your Internet Service Provider (ISP), as well as the date and time of registration in order to be able to trace a possible misuse of your e-mail address at a later date. The data collected by us when submitting your subscription for the newsletter shall be used exclusively for promotional purposes by means of the newsletter. You can unsubscribe from the newsletter at any given time using the link provided in the newsletter or by sending a corresponding message to the controller mentioned above (responsible entity). After the cancellation of your subscription, your e-mail address shall be deleted immediately from our newsletter distribution, insofar as you have not expressly consented to a further use of your data or insofar as we reserve the right to further data usage, which is permitted by law and with regard to which we shall inform you in this statement.

6.2. Shipment of the newsletter to existing customers: Insofar as you have provided us with your e-mail address when purchasing products, we reserve the right to send you regular offers for products, which are similar to those already purchased, from our assortment by e-mail. We are for this purpose not require to procure a separate consent from you, according to § 7 (3) of the German Unfair Competition Law (UWG). Data processing in this regard is effected solely on the basis of our legitimate interest in personalised direct mail in accordance with Art. 6 (1) lit. f of the General Data Protection Regulation [GDPR]. Insofar as you have from the onset objected to the use of your e-mail address for this purpose, we shall not send you a mail. You are entitled to object to the use of your e-mail address for the purpose described above at any given time with effect for the future, by way of a message to the aforementioned controller (responsible entity). For this purpose, you only have to pay delivery costs according to the basic rates. Upon receipt of your objection, the use of your e-mail address for advertising purposes shall cease immediately.

7. Data processing for the order handling

7.1. For the purposes of the processing of your order, we work with the following service providers, who support us wholly or partly in the execution of concluded contracts. Specific personal data shall be transmitted to these service providers in accordance with the following information.

The personal data collected by us shall be passed on to the transport company commissioned with the delivery within the framework of the contract, insofar as this is necessary for the delivery of the goods. We shall pass on your payment details to the commissioned bank within the framework of the payment processing, insofar as this is necessary for the payment processing. Insofar as payment service providers are used, we shall inform you explicitly below. The legal basis for the transfer of data is Art. 6 (1) lit. b of the General Data Protection Regulation [GDPR].

7.2. Disclosure of personal data to shipping service providers

- DHL
Insofar as the delivery of the goods is effected through the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we shall forward your e-mail address to DHL in accordance with Art. 6 (1) lit. a of the General Data Protection Regulation [GDPR] prior to the delivery of the goods, for the purposes of the coordination of a delivery date or delivery notice, provided you have granted your explicit consent in this regard, in the ordering process. Otherwise, we shall for the purposes of the delivery, in accordance with Art. 6 (1) lit. b of the General Data Protection Regulation [GDPR], only pass on the name of the recipient and the shipping address to DHL. The passing on of personal data is only effected to the extent necessary for the delivery of goods. In this case, a prior coordination of the delivery date with DHL or the delivery announcement is not possible.
The granted consent can be withdrawn at any given time with effect for the future vis-à-vis the aforementioned controller (responsible entity) or vis-à-vis the transport service provider DHL.

- UPS
Insofar as the delivery of the goods is effected through the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we shall forward your e-mail address to UPS in accordance with Art. 6 (1) lit. a of the General Data Protection Regulation [GDPR] prior to the delivery of the goods, for the purposes of the coordination of a delivery date or delivery notice, provided you have granted your explicit consent in this regard, in the ordering process. Otherwise, we shall for the purposes of the delivery, in accordance with Art. 6 (1) lit. b of the General Data Protection Regulation [GDPR], only pass on the name of the recipient and the shipping address to UPS. The passing on of personal data is only effected to the extent necessary for the delivery of goods. In this case, a prior coordination of the delivery date with UPS or the delivery announcement is not possible.
The granted consent can be withdrawn at any given time with effect for the future vis-à-vis the aforementioned controller (responsible entity) or vis-à-vis the transport service provider UPS.

7.3. Use of payment service providers

- PayPal
In the case of payment via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "instalment payment" via PayPal, we shall pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"). The disclosure is made in accordance with Art. 6 (1) lit. b of the General Data Protection Regulation [GDPR] and only insofar as this is necessary for the payment processing.
PayPal reserves the right to conduct a credit check in the case of the payment methods credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "instalment" via PayPal. For this purpose, your payment data shall where expedient be passed on to credit bureaus, in accordance with Art. 6 (1) lit. f of the General Data Protection Regulation [GDPR], on the basis of the legitimate interest of PayPal in determining your solvency. The result of the credit check, which is based on the statistical probability of default, is used by PayPal for the purposes of deciding on the provision of the respective payment method. The credit check may entail probability values (so-called score values). Insofar as score values are entailed in the result of the credit check, these are based on a scientifically recognised mathematical-statistical procedure. The calculation of score values includes, but is not limited to, address data. For further details on data protection, among other on the deployed credit agencies, please refer to the data protection statement of PayPal https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any given time by sending a message to PayPal. However, PayPal may continue to be entitled to process your personal data insofar as this is necessary for the payment processing required by the contract.

8. Use of social media: video

Use of YouTube-Videos

This website uses the YouTube Embedding feature to view and play videos of the provider "YouTube" owned by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

The extended data protection mode is hereby used, which according to the provider information only triggers the storage of user information, insofar as the playback of the video is (videos are) started. Insofar as the playback of an embedded YouTube video is started, the "YouTube" provider uses cookies to collect information about user behaviour. According to "YouTube", this serves among other things, the acquisition of video statistics, the improvement of user-friendliness and the prevention of abusive practices. Insofar as you are logged-on to Google, your data shall be assigned directly to your account when you click on a video. Insofar as you do not wish an association with your profile on YouTube, you must log-off from Google before activating the video button. Google stores your data (even in the case of non-logged-in users) as usage profiles and evaluates them. Such an evaluation is carried out in particular according to Art. 6 (1) lit. f of the General Data Protection Regulation [GDPR], on the basis of the legitimate interests of Google in the display of personalised advertising, market research and / or custom design of its website. You reserve the right to object to the compilation of these user profiles, whereby you must direct the notification of your intention to exercise this right, to YouTube.

Regardless of whether a playback of the embedded video takes place, every time you visit this website, a connection to the Google Network "Double-Click" is established, this may trigger further data processing, over which we have no influence.

Google LLC with registered offices in the USA is certified under the US-European Data Protection Agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

For further information on data protection in the case of "YouTube" please refer to the data protection statement of the provider under: https://www.google.de/intl/de/policies/privacy

9. Web analytics services

Google Universal Analytics

This website uses Google Analytics, a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", text files, which are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website (including the truncated of the IP address) is usually transmitted to a Google server in the USA and stored there.

This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address through truncating and excludes a direct personal reference. The extension shall truncate your IP address beforehand by Google within member states of the European Union or in other contract states of the Agreement on the European Economic Area. Only in exceptional cases shall the full IP address be transmitted to a Google server in the US and truncated there. In these exceptional cases, this processing is carried out in accordance with Art. 6 (1) lit. f of the General Data Protection Regulation [GDPR], on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.

Google shall use this information on our behalf to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data held by Google.

You can prevent the storage of cookies by means of a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and the data related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link:
http://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in or within browsers in the case of mobile devices, please click on the following link to set an opt-out cookie, which shall prevent the acquisition by Google Analytics from this website, in the future (this opt-out cookie only works in this browser and only for this domain, insofar as you delete your cookies in this browser, you must click on this link again):

Disable Google Analytics

Google LLC with registered offices in the USA is certified under the US-European Data Protection Agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
This website also uses Google Analytics for cross-device analysis of visitor traffic conducted through a user ID. You can disable the cross-device analysis of your usage, under "My Data", "Personal Information" in your customer account.
For further information on the handling of user data in the case of Google Analytics, please refer to the Data Protection Statement from Google: https://support.google.com/analytics/answer/6004245?hl=de

10. Use of a live chat system

Zendesk (formerly Zopim)
This website uses technology from Zendesc Inc., 1019 Market St, San Francisco, USA (www.zendesk.com) to collect pseudonymised data for web analytics purposes and to operate the live chat system to answer, collect and save live support requests. From this pseudonymised data, usage profiles can be created under a pseudonym. For this purpose cookies may be used. Cookies are small text files stored locally in the cache of the website visitor's Internet browser. The cookies enable, among other things, the recognition of the Internet browser. Insofar as the information collected in this way has a personal reference, the processing is carried out in accordance with Art. 6 (1) lit. f of the General Data Protection Regulation [GDPR], on the basis of our legitimate interest in effective customer service and the statistical analysis of user behaviour for optimization purposes
The data collected using the Zendesk technologies shall not be used to personally identify the visitor to this website without the explicit consent of the data subjects and shall not be merged with personal data about the bearer of the pseudonym. In order to avoid the storage of Zendesk cookies, you can set your Internet browser so that in future no more cookies can be stored on your computer or already stored cookies are deleted. However, deactivating all cookies may mean that some functions on our website can no longer be executed. The collection and storage of data for the purpose of creating a pseudonymised user profile can be deactivated at any given time with effect for the future, by informing us of your objection by way of an e-mail, submitted to the e-mail address, provided in the imprint.
Zendesk Inc. with registered offices in the USA, is certified under the US-European Data Protection Agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU

11. Tools and miscellaneous

11.1. Google reCAPTCHA
On this website, we also use the reCAPTCHA feature of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This function is primarily used to distinguish whether an input is made by a natural person or abusively by machine and automated processing. The service includes the transmission of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 (1) lit. of the General Data Protection Regulation [GDPR], on the basis of our legitimate interest in determining the individual will-solemnity of actions on the Internet and the prevention of abuse and spam.
Google LLC with registered offices in the USA is certified under the US-European Data Protection Agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.
Further information on Google reCAPTCHA as well as the Data Protection Statement from Google is available under: https://www.google.com/intl/de/policies/privacy/

11.2. Google Maps

On our website we use Google Maps (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Maps is a web service for displaying interactive (land) maps, for the purposes of the visual display of geographic information The use of this service will show you our location and make it easier to get there.

Already upon the call-up of any of the web pages, in which the map from Google Maps is incorporated, information about your use of our website (such as your IP address) is transmitted to Google's servers in the United States and stored there. This is effected regardless of whether Google provisions a user account over which you are logged-on, or there is no user account. Insofar as you are logged-on to Google, your data will be assigned directly to your account. Insofar as you do not wish to be associated with your profile on Google, you must log-off before activating the button. Google stores your data (even for non-logged-in users) as usage profiles and evaluates them. Such an evaluation is carried out in particular according to Art. 6 (1) lit. f of the General Data Protection Regulation [GDPR], on the basis of the legitimate interests of Google in the display of personalized advertising, market research and / or custom design of its website. You reserve the right to object to the compilation of these user profiles, whereby you must direct the notification of your intention to exercise this right, to YouTube.

Google LLC with registered offices in the USA is certified under the US-European Data Protection Agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

Insofar as you object to the future transmission of your data to Google within the framework of the use of Google Maps, you can also disable the Google Maps web service completely by turning off the JavaScript application in your browser. Google Maps and the map display on this website can then no longer be used.

Google's terms of use can be viewed under http://www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for Google Maps can be viewed under https://www.google.com/intl/de_US/help/terms_maps.html
For detailed information on data protection in connection with the use of Google Maps please refer to the website of Google ("Google Privacy Policy"): http://www.google.de/intl/de/policies/privacy/

11.3. Google Web Fonts

This website uses so-called web fonts provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") for consistent presentation of fonts. When you call-up a webpage, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.

To do this, the browser you use, must establish a connection to the server of Google. As a result, Google learns that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our website services. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f of the General Data Protection Regulation [GDPR]. Insofar as your browser does not support web fonts, a standard font will be used by your computer.

Google LLC with registered offices in the USA is certified under the US-European Data Protection Agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

Further information on Google Web Fonts is available under https://developers.google.com/fonts/faq and in the Data Protection Statement from Google: https://www.google.com/policies/privacy/

12. Rights of data subjects

12.1. The applicable data protection law grants you comprehensive rights of access (right to information and intervention rights) vis-à-vis the controller (responsible entity) in connection with the processing of your personal data, with regard to which we shall inform you about below:

- Right to information pursuant to Art. 15 of the General Data Protection Regulation [GDPR]: In particular, you have the right to obtain information about the personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data was or are being disclosed, the planned retention period or the criteria for the determination of the retention period, the existence of a right of rectification, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data, insofar as it was not collected by us, the existence of automated decision making procedure including profiling and if applicable, meaningful information about the logic involved and the scope involved and the intended effects of such processing, as well as your right to be informed, whose continued existence is guaranteed, pursuant to Art. 46 of the General Data Protection Regulation [GDPR], in case your data is passed-on to third countries;

- Right to correction pursuant to Art. 16 of the General Data Protection Regulation [GDPR]: You reserve the right to immediate correction of incorrect data concerning you and / or completion of your incomplete data stored by us;

- Right to deletion pursuant to Art. 17 of the General Data Protection Regulation [GDPR]: You reserve the right to demand the deletion of your personal data subject to the conditions of Art. 17 (1) of the General Data Protection Regulation [GDPR]. However, that right does not apply, in particular, insofar as the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of claims;

- Right to restriction of the processing pursuant to Art. 18 of the General Data Protection Regulation [GDPR]: You reserve the right to request that your personal data be restricted as long as the accuracy of your information is disputed, insofar as you decline to delete your data due to improper data processing and instead request that your data be restricted when processing your data, in order to assert, exercise or defend legal claims, after we no longer require this data for goal purposes or insofar as you have filed an objection based on your particular situation; as long as it can not yet be determined, whether our legitimate reasons prevail;

- Right to be informed pursuant to Art. 19 of the General Data Protection Regulation [GDPR]: Insofar as you have asserted the right to rectification, deletion or restriction of processing vis-à-vis the controller (responsible entity), the latter is obliged to notify all recipients to whom the personal data has been disclosed about this correction or deletion of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You reserve the right to be informed about these recipients.

- Right to data portability pursuant to Art. 20 of the General Data Protection Regulation [GDPR]: You reserve the right to receive your personal information provided to us in a structured, common and machine-readable format, or to request transmission to another controller (responsible entity) where technically feasible;

- Right to revoke granted consent pursuant to Art. 7 (3) of the General Data Protection Regulation [GDPR]: You reserve the right to revoke your granted consent for the processing of your data at any given time with future effect. In the case of the revocation of your granted consent, we shall immediately delete the data concerned, insofar as the further processing cannot be based on a legal basis for consent-less processing. The revocation of your granted consent shall not affect the legality of the processing hitherto effected on the basis of the granted consent up to the time of the revocation thereof;

- Right to lodge a complaint pursuant to Art. 77 of the General Data Protection Regulation [GDPR]: Without prejudice to any other administrative or judicial remedy, you reserve the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, insofar as you are in your capacity as the data subject, of the opinion that the processing of your personal data is in violation of the provisions of the General Data Protection Regulation [GDPR].

12.2. RIGHT OF OBJECTION

INSOFAR AS WE WITHIN THE FRAMEWORK OF THE WEIGHING-UP OF INTERESTS, PROCESS YOUR PERSONAL DATA, ON THE BASIS OF OUR TO A LARGE EXTENT LEGITIMATE INTEREST, YOU RESERVE THE RIGHT TO AT ANY GIVEN TIME,  RAISE AN OBJECTION AGAINST THIS PROCESSING WITH EFFECT FOR THE FUTURE, FOR REASONS BASED ON YOUR SPECIFIC SITUATION.
INSOFAR AS YOU RAISE AN OBJECTION, WE SHALL CEASE THE PROCESSING OF YOUR PERSONAL DATA, AS A DATA SUBJECT, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE CONTINUED PROCESSING, WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR INSOFAR AS THE CONTINUED PROCESSING SERVES THE PURPOSES OF THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

INSOFAR AS YOUR PERSONAL DATA IS PROCESSED TO OPERATE DIRECT MAIL, YOU RESERVE THE RIGHT TO AT ANY GIVEN TIME OBJECT TO THE PROCESSING OF THE PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH ADVERTISING, YOU CAN ALSO IN THIS CASE EXERCISE THE RIGHT OF OBJECTION IN THE MANNER DESCRIBED ABOVE.

INSOFAR AS YOU RAISE AN OBJECTION IN THIS REGARD, YOUR PERSONAL DATA SHALL NO LONGER BE USED FOR THE PURPOSES OF THE DIRECT MAIL.

13. Duration of storage of personal data

The duration of the retention of personal data is based on the respective statutory retention period (e.g. commercial and tax retention periods). After the expiry of the periods, the corresponding data is routinely deleted, insofar as it is no longer required to fulfil the contract or to initiate a contract and / or legitimate interest in the continued retention exists on our part.