Privacy Policy

1) Introduction and Contact Information of the Data Controller  

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data refers to all data that can be used to personally identify you.

1.2 The responsible entity for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is HomezInno UG (limited liability), Georgstraße 38, 30159 Hannover, Germany, Tel.: +49 (0) 511 / 592 991 50, Email: info@homezinno.de. The controller for the processing of personal data is the individual or legal entity that, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 The controller has appointed a data protection officer, who can be reached as follows: "Keanu Zienczyk, keanu.zienczyk@homezinno.de."

2) Data Collection When Visiting Our Website  

2.1 When you use our website for informational purposes only, meaning you do not register or otherwise transmit information to us, we collect only the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

- Our visited website  

- Date and time of access  

- Amount of data sent in bytes  

- Source/reference from which you accessed the page  

- Browser used  

- Operating system used  

- IP address used (if applicable: anonymized)

The processing is carried out according to Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. This data is not shared or used for any other purpose. However, we reserve the right to retrospectively review the server log files if there are concrete indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the "https://" and the padlock symbol in your browser line.

3) Hosting & Content Delivery Network  

3.1 To host our website and display its contents, we use a provider who performs these services either directly or through selected subcontractors, exclusively on servers within the European Union. All data collected on our website is processed on these servers. We have concluded a data processing agreement with the provider, ensuring the protection of our website visitors' data and preventing unauthorized disclosure to third parties.

3.2 Cloudflare

We use a content delivery network (CDN) from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA. This service enables us to deliver large media files like graphics, website content, or scripts more quickly via a network of regionally distributed servers. Processing is based on our legitimate interest in improving the stability and functionality of our website under Art. 6 (1) lit. f GDPR. We have concluded a data processing agreement with the provider, ensuring the protection of our website visitors' data and preventing unauthorized disclosure to third parties. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection levels based on an adequacy decision by the European Commission.

4) Cookies  

To make your visit to our website more attractive and enable the use of certain functions, we use cookies—small text files stored on your device. Some of these cookies are deleted automatically after you close the browser (so-called "session cookies"), while others remain on your device longer, allowing the storage of site settings (so-called "persistent cookies"). You can find the storage duration of persistent cookies in your browser's cookie settings.

If personal data is processed using cookies, this is done under Art. 6 (1) lit. b GDPR to execute the contract, under Art. 6 (1) lit. a GDPR if consent has been granted, or under Art. 6 (1) lit. f GDPR to protect our legitimate interest in the best possible functionality of the website and a customer-friendly and effective site visit.

You can adjust your browser settings to notify you when cookies are set and decide individually whether to accept them or reject cookies for certain cases or generally. Please note that rejecting cookies may limit the functionality of our website.

5) Contact  

5.1 Smartsupp

This website uses a live chat system from the following provider: smartsupp.com, s.r.o., Milady Horakove 13, 60200 Brno, Czech Republic. The processing of personal data transmitted through the chat is either necessary for contract initiation or fulfillment under Art. 6 (1) lit. b GDPR, or it is based on our legitimate interest in effectively supporting our website visitors under Art. 6 (1) lit. f GDPR.Your data transmitted in this way will be deleted after the relevant matter has been fully resolved, subject to any statutory retention periods. 

In addition, further information may be collected and analyzed for the purpose of creating pseudonymized user profiles using cookies, although this data will not be used for your personal identification and will not be combined with other datasets. If this information is related to a person, it is processed based on our legitimate interest in the statistical analysis of user behavior for optimization purposes in accordance with Art. 6 (1) lit. f GDPR. 

You can prevent the setting of cookies by adjusting your browser settings accordingly. In this case, however, the functionality of our website may be limited. You can object to the collection and storage of data for the purpose of creating pseudonymized user profiles at any time with effect for the future by sending your objection to us informally via email to the email address provided in the legal notice. 

We have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.

5.2 Smartsupp.com (smartsupp.com s.r.o.)

This website uses technologies from smartsupp.com, s.r.o., Milady Horakove 13, 60200 Brno, Czech Republic ([www.smartsupp.com](https://www.smartsupp.com)) to collect and store anonymized data for web analysis and to operate the live chat system for responding to live support requests. Anonymous user profiles may be created from this data under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the internet browser of the site visitor. These cookies enable the recognition of the internet browser.

The data collected using smartsupp.com technologies will not be used to personally identify visitors to this website and will not be merged with personal data about the bearer of the pseudonym without the separate consent of the individual concerned. To avoid the storage of smartsupp.com cookies, you can adjust your internet browser settings so that no cookies are stored on your computer in the future, or already stored cookies are deleted. Disabling all cookies may, however, result in some functions on our website no longer being available. You can object to the collection and storage of data for the creation of a pseudonymized user profile at any time with future effect by sending an informal email to the address provided in the legal notice. 

We have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and to prevent unauthorized disclosure to third parties.

5.3 ShopVote

We use the services of the following provider to send review reminders: Blickreif GmbH, Schulstraße 46, 80634 Munich, Germany.

Based solely on your explicit consent under Art. 6 (1) lit. a GDPR, we transmit your email address and, if applicable, other customer data to the provider so that they can contact you via email with a review reminder. 

You can withdraw your consent at any time with future effect either by notifying us or the provider.

We have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and to prevent unauthorized disclosure to third parties.

5.4 WhatsApp Business

We offer visitors to our website the option of contacting us via WhatsApp, a messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the so-called “Business Version” of WhatsApp for this purpose.

If you contact us via WhatsApp regarding a specific transaction (for example, an order), we will store and use your WhatsApp phone number and, if provided, your first and last name in accordance with Art. 6 (1) lit. b GDPR to process and respond to your inquiry. Based on the same legal basis, we may ask you to provide further data (such as an order number, customer number, address, or email) to assign your inquiry to a specific transaction.

If you use our WhatsApp contact for general inquiries (such as regarding services, availability, or our website), we will store and use your WhatsApp phone number and, if provided, your first and last name based on our legitimate interest in providing efficient and prompt information in accordance with Art. 6 (1) lit. f GDPR.

Your data will only be used to respond to your inquiry via WhatsApp and will not be shared with third parties.

Please note that WhatsApp Business has access to the address book of the mobile device we use for this service and automatically transfers phone numbers stored in the address book to a server operated by Meta Platforms Inc. in the USA. For our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact details of users who have contacted us via WhatsApp.

This ensures that each person whose WhatsApp contact details are stored in our address book has already consented to the transfer of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6 (1) lit. a GDPR by accepting WhatsApp’s terms of use when first using the app. Data of users who do not use WhatsApp or have not contacted us via WhatsApp will not be transferred.

The purpose and scope of data collection, further processing, and use of the data by WhatsApp, as well as your rights and privacy protection settings, can be found in WhatsApp's privacy policy: [https://www.whatsapp.com/legal/?eea=1#privacy-policy](https://www.whatsapp.com/legal/?eea=1#privacy-policy).

As part of the above processes, data may be transferred to Meta Platforms Inc.'s servers in the USA.

For data transfers to the USA, the provider is subject to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

5.5 Contacting Us via Other Means 

When you contact us (e.g., via contact form or email), personal data will only be processed to the extent necessary to handle your inquiry and response. The legal basis for processing this data is our legitimate interest in responding to your inquiry under Art. 6 (1) lit. f GDPR. If your inquiry is related to a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted once your inquiry is fully resolved and provided there are no statutory retention obligations.6) **Data Processing When Opening a Customer Account**  In accordance with Art. 6 (1) lit. b GDPR, personal data will continue to be collected and processed as necessary if you provide it to us during the creation of a customer account. The required data for account creation can be found in the input form on our website. You may delete your customer account at any time by sending a message to the data controller at the address provided above. Once your customer account is deleted, your data will be erased unless all contracts entered into through the account are fully executed, there are no statutory retention periods preventing deletion, and we have no legitimate interest in continuing to store the data.In accordance with Art. 6 (1) lit. b GDPR, personal data will continue to be collected and processed as necessary if you provide it to us during the creation of a customer account. The required data for account creation can be found in the input form on our website. You may delete your customer account at any time by sending a message to the data controller at the address provided above. Once your customer account is deleted, your data will be erased unless all contracts entered into through the account are fully executed, there are no statutory retention periods preventing deletion, and we have no legitimate interest in continuing to store the data.

7) Use of Customer Data for Direct Marketing  

7.1 Subscription to Our Email Newsletter

When you subscribe to our email newsletter, we will send you regular updates about our offers. The only mandatory information required for sending the newsletter is your email address. Providing further data is voluntary and will be used to personalize your communication. For sending the newsletter, we use a double opt-in procedure to ensure that you only receive the newsletter after confirming your consent via a verification link sent to your provided email address.

By activating the confirmation link, you give us your consent to use your personal data under Art. 6 (1) lit. a GDPR. In this process, we record your IP address as provided by your internet service provider (ISP) and the date and time of your registration to be able to track any potential misuse of your email address at a later date. The data collected during newsletter registration is used solely for the purpose of sending the newsletter.

You can unsubscribe from the newsletter at any time by using the unsubscribe link provided in the newsletter or by notifying the data controller. Upon unsubscribing, your email address will be immediately removed from our newsletter mailing list unless you have expressly consented to the continued use of your data, or we have reserved the right to use the data beyond this, as permitted by law and as detailed in this privacy policy.

7.2 Email Newsletter to Existing Customers

If you have provided us with your email address during a purchase of goods or services, we may periodically send you offers for similar goods or services via email. According to Section 7(3) of the German Act Against Unfair Competition (UWG), we do not need separate consent for this. The data processing is carried out based on our legitimate interest in personalized direct marketing under Art. 6 (1) lit. f GDPR. You have the right to object to the use of your email address for this purpose at any time, effective for the future, by notifying the data controller. After receiving your objection, the use of your email address for advertising purposes will immediately cease.

8) Data Processing for Order Handling  

8.1 In order to fulfill contracts for shipping and payment purposes, we share personal data with the transport company and the payment service provider selected for the transaction, as necessary under Art. 6 (1) lit. b GDPR. The scope of shared data is limited to what is necessary for the fulfillment of the contract.

If we are required to provide updates for goods with digital elements or for digital products on the basis of a contract, we process the contact details provided during the order (name, address, email) to notify you via suitable communication channels (e.g., mail or email) about updates that are legally required. The processing of your contact data is carried out solely for this purpose and to the extent necessary for these notifications.

8.2 Use of Shipping Service Providers

To fulfill our contractual obligations, we work with external shipping partners. We transmit your name, delivery address, and, if necessary, your phone number to the selected shipping partner only for delivery purposes under Art. 6 (1) lit. b GDPR.

8.3 Transfer of Personal Data to Shipping Service Providers

- Deutsche Post

For delivery purposes, we work with Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany. If you have provided your express consent during the order process, we will share your email address and/or phone number with Deutsche Post to coordinate a delivery date or provide delivery notifications under Art. 6 (1) lit. a GDPR. Otherwise, we only share the recipient's name and delivery address for shipping purposes in accordance with Art. 6 (1) lit. b GDPR. In this case, no prior coordination or notification is possible.

- DHL

For delivery purposes, we use the services of DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany. If you have given your consent during the order process, we will share your email address and/or phone number with DHL to arrange a delivery date or provide delivery notifications.Otherwise, we will only share the recipient’s name and delivery address with DHL for the purpose of delivering your order in accordance with Art. 6 (1) lit. b GDPR. In such cases, there will be no prior coordination of the delivery or notification. You can revoke your consent at any time with effect for the future by notifying us or DHL.

- DHL Express

For express deliveries, we use DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany. If you have provided consent during the order process, we will share your email address and/or phone number with DHL Express to coordinate a delivery date or provide delivery notifications in accordance with Art. 6 (1) lit. a GDPR. Otherwise, we only share the recipient’s name and delivery address in accordance with Art. 6 (1) lit. b GDPR. Revocation of consent can be done at any time for future deliveries by contacting us or DHL Express.

- DPD

For delivery services, we work with DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany. With your express consent during the order process, we will share your email address and/or phone number with DPD to coordinate the delivery. In cases where consent is not provided, only the name and delivery address will be shared for the shipping process. Consent can be revoked at any time for future deliveries by notifying us or DPD.

- GLS

We also use the services of General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany. If you have given your consent, your contact information (email or phone number) will be shared for delivery coordination purposes. In the absence of this consent, only the recipient’s name and address are transferred. You may revoke consent at any time with effect for future deliveries by contacting us or GLS.

- Hermes

For shipping, we work with Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany. With your explicit consent, Hermes will receive your contact information to facilitate delivery coordination. Otherwise, only the recipient’s name and delivery address are provided for shipment. Consent can be withdrawn at any time for future deliveries by notifying us or Hermes.

- UPS

For deliveries, we use the services of United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany. If you have consented during the order process, your email address and/or phone number will be shared with UPS for delivery scheduling. In cases where consent is not provided, only the recipient’s name and address will be used. You can revoke your consent at any time with effect for future deliveries by notifying us or UPS.

8.4 **Use of Payment Service Providers (Payment Services)**  

- Amazon Pay

Our website offers one or more payment methods from Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg ("Amazon Pay"). When choosing a payment method through Amazon Pay that requires advance payment (e.g., credit card payments), your payment information (name, address, card details, currency, and transaction number) will be forwarded to Amazon Pay as needed to process the payment, in accordance with Art. 6 (1) lit. b GDPR.

- Apple Pay

If you use Apple Pay, operated by Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payments will be processed via the “Apple Pay” feature on iOS, watchOS, or macOS devices. Apple protects transactions with security features integrated into your device’s hardware and software, and confirmation of payment requires prior authentication via Face ID, Touch ID, or your device passcode.

For payment processing, Apple collects your payment information (including name, payment amount, and the encrypted device account number). This data is passed on to the relevant card provider or payment system through Apple for payment processing. Your information is encrypted so that no personal data is stored on Apple servers.

Apple also processes anonymized transaction data for further use in improving the Apple Pay service. Further details can be found in Apple’s privacy policy: [https://support.apple.com/de-de/HT203027](https://support.apple.com/de-de/HT203027).

- Google Pay

If you choose to use Google Pay, provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, payments will be processed through the Google Pay application on your mobile device. Payment information is securely transmitted to the payment provider, and Google acts as an intermediary in the transaction.

Further details can be found in Google’s privacy policy: [https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de](https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de).

- Klarna

Our website offers payment methods from Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden. For pre-payment methods (e.g., credit card payments), payment information will be forwarded to Klarna to process the payment. For other methods like invoice or installment payments, Klarna will collect additional personal data to assess creditworthiness. Klarna's privacy policy can be accessed here: [https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies](https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies).

9) Web Analytics Services  

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited. Further processing and information about your rights can be found in the privacy policies and terms provided by Google: [https://policies.google.com/privacy?hl=de&gl=de](https://policies.google.com/privacy?hl=de&gl=de).9) 

Web Analytics Services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This service enables us to analyze your use of our website. 

By default, Google Analytics 4 sets cookies, which are small text files that are stored on your device to collect certain information, including your IP address. Google, however, anonymizes your IP address by truncating it, thus preventing direct identification of individuals. 

The information generated by the cookies is transmitted to Google servers, which may include transfers to Google LLC in the USA. Google uses this data on our behalf to analyze your use of the website, generate reports on website activity, and provide additional services related to website usage and internet usage. 

In addition to Google Analytics, we may also use Google Signals, which allows for cross-device tracking and reporting if you have opted in to personalized ads and linked your devices to your Google account. This can provide us with insights into conversions and user interactions across devices. If you want to stop cross-device tracking, you can disable personalized ads in your Google account.

The Google Analytics 4 Demographics and Interest Reports feature may also be used. This function allows the collection of demographic data and interest reports based on cookies and advertising identifiers. These data are anonymized and not linked to specific individuals.

All processing activities related to Google Analytics 4 will only take place with your explicit consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time by disabling Google Analytics through our website's "Cookie-Consent-Tool."

For more information on Google Analytics 4 and the associated data processing, please visit:  

[https://policies.google.com/privacy?hl=de&gl=de](https://policies.google.com/privacy?hl=de&gl=de)

10) Retargeting / Remarketing and Conversion Tracking  

10.1 Google Ads Remarketing

This website uses the retargeting technology Google Ads Remarketing, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Through this technology, Google sets a cookie in your browser, which enables interest-based advertisements to be shown based on the pages you have visited on our website.

If you are logged into your Google account, and you have given Google consent to use your web and app browsing history to personalize ads, Google will use this data to generate remarketing lists. This enables cross-device remarketing. Your data will only be linked to your Google account for remarketing purposes with your explicit consent. The associated data processing is based on Art. 6 (1) lit. a GDPR, and you can revoke your consent at any time through our "Cookie-Consent-Tool."

For further details on how Google handles personal data in advertising, please visit:  

[https://policies.google.com/technologies/partner-sites](https://policies.google.com/technologies/partner-sites)

10.2 Google Ads Conversion Tracking

We also use Google Ads Conversion Tracking, a service from Google Ireland Limited. This tool allows us to measure the effectiveness of our Google Ads by placing a cookie when you click on one of our ads. If you proceed to perform an action, such as completing a purchase, this is recorded, allowing us to measure conversion rates.

Data processing for Google Ads Conversion Tracking is based on your consent, in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time via our "Cookie-Consent-Tool."

For more information on Google’s data policies and processing, please visit:  

[https://policies.google.com/technologies/partner-sites](https://policies.google.com/technologies/partner-sites)

11) Site Functionalities

11.1 YouTube

This website integrates plugins from YouTube, provided by Google Ireland Limited. This allows for the display and playback of videos directly on our site. Upon accessing a page containing a YouTube plugin, a connection to YouTube’s servers is established, and certain information, such as your IP address, is transmitted to Google.

The use of YouTube on our website requires your explicit consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time via our "Cookie-Consent-Tool."

For data transfers to the USA, Google has committed to the EU-US Data Privacy Framework. More information can be found here:  

[https://www.google.com/intl/en/policies/privacy/](https://www.google.com/intl/en/policies/privacy/)

11.2 Facebook Connect

On our website, we offer the option of registering via the Facebook Connect single sign-on service. This service is provided by Meta Platforms Ireland Ltd. If you choose to use Facebook Connect, your Facebook account data (e.g., name, email address, etc.) will be shared with us for account registration purposes. This data sharing requires your explicit consent, which is collected in accordance with Art. 6 (1) lit. a GDPR.

You can revoke your consent at any time. For more information on how Meta Platforms processes your data, refer to:  

[https://www.facebook.com/about/privacy](https://www.facebook.com/about/privacy)

12) Tools and Miscellaneous

Cookie-Consent-Tool

This website uses a cookie consent tool to collect effective user consent for cookies and cookie-based applications. The "cookie consent tool" is displayed as an interactive user interface where users can select their consent for certain cookies and/or cookie-based applications by ticking a checkbox. Only cookies that require consent are loaded if the user grants the relevant consent through ticking the checkbox. This ensures that such cookies are set only on the user’s device if they give their explicit consent.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is not processed during this process.

If, in an individual case, personal data is processed for the purpose of storing, assigning, or logging cookie settings (e.g., the IP address), this is done in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in managing legally compliant, user-specific, and user-friendly cookie consent.

Further legal grounds for processing are Art. 6 (1) lit. c GDPR. As the controller, we are legally obligated to make the use of technically non-essential cookies dependent on the user’s consent.

Where necessary, we have signed a data processing agreement with the provider to ensure the protection of our website visitors' data and to prevent unauthorized disclosure to third parties.

Further information about the operator and settings of the cookie consent tool can be found directly in the respective user interface on our website.

---

13) Rights of the Data Subject

13.1 The applicable data protection law grants you various rights (rights of access and intervention) regarding the processing of your personal data, which are outlined below. For the conditions under which you may exercise these rights, please refer to the specified legal bases:

- Right of access according to Art. 15 GDPR;

- Right to rectification according to Art. 16 GDPR;

- Right to erasure according to Art. 17 GDPR;

- Right to restriction of processing according to Art. 18 GDPR;

- Right to be informed according to Art. 19 GDPR;

- Right to data portability according to Art. 20 GDPR;

- Right to withdraw consent according to Art. 7 (3) GDPR;

- Right to lodge a complaint according to Art. 77 GDPR.

13.2 Right to Object

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION WITH FUTURE EFFECT.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE THIS RIGHT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING YOUR DATA FOR DIRECT MARKETING PURPOSES.

---

14) Duration of Storage of Personal Data

The duration of the storage of personal data depends on the relevant legal basis, the processing purpose, and—if applicable—further statutory retention periods (e.g., commercial and tax law retention periods).

When processing personal data based on explicit consent according to Art. 6 (1) lit. a GDPR, the data will be stored until the individual withdraws their consent.

If statutory retention periods apply to data processed under contractual or similar obligations based on Art. 6 (1) lit. b GDPR, such data will be routinely deleted after the expiration of those retention periods, provided they are no longer needed for contract performance or initiation, and no legitimate interest in continuing storage exists.

In cases where personal data is processed based on Art. 6 (1) lit. f GDPR, it will be stored until the individual exercises their right to object according to Art. 21 (1) GDPR unless we can demonstrate compelling legitimate grounds for the processing that override the individual’s interests, rights, and freedoms, or if the processing is for the establishment, exercise, or defense of legal claims.

If personal data is processed for direct marketing purposes based on Art. 6 (1) lit. f GDPR, it will be stored until the individual exercises their right to object according to Art. 21 (2) GDPR.

Unless otherwise indicated in the specific processing situations described in this privacy policy, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

---

© IT-Recht Kanzlei