Crescent Europe GmbH
Tel. +49 (0) 7321 27225-0
Fax. +49 (0) 7321 27225-20
Management: Charles S. Ozmun, Matthew S. Ozmun, Seif Bastillo
Responsible: Seif Bastillo
Register court: Local Court Ulm
Register number: HRB 510450
VAT registration number: DE 812 722 745
The author reserves the right not to be responsible for the topicality, correctness, completeness or quality of the information provided. Liability claims regarding damage caused by the use of any information provided, including any kind of information, which is incomplete or incorrect, will therefore be rejected.
All offers are not binding and without obligation. Parts of the pages or the complete publication including all offers and information might be extended, changed or partly or completely deleted by the author without separate announcement.
2. Referrals and links
The author is not responsible for any contents linked or referred to from his pages - unless he has full knowledge of illegal contents and would be able to prevent the visitors of his site from viewing those pages. If any damage occurs by the use of information presented there, only the author of the respective pages might be liable, not the one who has linked to these pages.
The author intended not to use any copyrighted material for the publication or, if not possible, to indicate the copyright of the respective object.
The copyright for any material created by the author is reserved. Any duplication or use of objects such as diagrams, sounds or texts in other electronic or printed publications is not permitted without the author's agreement.
4. Data Privacy Statement
A. Data privacy at a glance
The following information will give you a brief overview of what happens with your personal data when you visit our website. Personal data are all data that can be used to identify you personally. For detailed information on this subject, please see the full Data Privacy Statement below this text.
Data collection on our website
Who is responsible for collecting data on this website?
Your data are collected and processed by the website operator, whose contact information you can find in the Legal Notice of this website.
How do we collect your data?
For one thing, we collect personal information that you communicate to us. This may be information that you enter in a contact form, for instance.
Other information is captured automatically by our IT systems when you visit our website. This is primarily technical information (e.g. your internet browser, operating system or the time of website access). These data are collected automatically as soon as you access our website.
For what purposes do we collect your data?
Part of the data is collected to ensure that our website functions properly. Other data may be used to evaluate your use of the website.
What are your rights with respect to your data?
You have the right to be informed, at any time and free of charge, about the source, recipients and purpose of the personal data concerning you that is held by us. You may also demand the rectification or erasure of these data, or limit their processing. If you have questions about this or another subject relating to data privacy, please contact us using the address in the Legal Notice. In addition, you have the right to lodge a complaint with the responsible supervisory authority.
Analytics tools and third-party tools
When you visit our website, your surfing behaviour may be evaluated for statistical purposes. This is done primarily by means of cookies and so-called analytics tools. Generally, your surfing behaviour will be analysed anonymously, i.e. it cannot be traced back to you. You may object to this form of analysis or prevent it by refraining from using certain tools. See the Data Privacy Statement below for details.
B. General and mandatory information
I. Name and address of the data controller
The data controller within the meaning of the General Data Protection Regulation and other national data protection legislation of the Member States, and of other data protection regulations is:
Crescent Europe GmbH
Phone: +49 (0) 7321 27225-0
Fax: +49 (0) 7321 27225-20
II. Name and address of the Data Protection Officer
The data controller’s Data Protection Officer is:
Crescent Europe GmbH
Phone: +49 (0) 7321 27225-12
Fax: +49 (0) 7321 27225-20
III. General information on data processing
Scope of processing of personal information
We only process our users’ personal information to the extent that this is necessary to maintain a functional website and to provide our content and services. Any regular processing of our users’ personal data requires the users’ consent. The only exception is cases in which obtaining the users’ prior consent is not possible due to substantive reasons or the processing of the information is permitted by law.
Legal basis for the processing of personal data
To the extent that we obtain the data subject’s consent for our processing of personal information, such processing is based on art. 6 par. 1 (a) of the EU General Data Protection Regulation (GDPR).
If personal data are processed to fulfil a contract to which the data subject is party, this is governed by art. 6 par. 1 (b) GDPR. The same applies to processing that is required for activities preceding a contract.
If we must process personal information to fulfil a legal obligation to which our company is subject, this is based on art. 6 par. 1 (c) GDPR.
The legal basis for data processing that is necessary due to vital interests of the data subject or another natural person is art. 6 par. 1 (d) GDPR.
Finally, art. 6 par. 1 (f) GDPR applies where personal data must be processed to protect legitimate interests pursued by our company or a third party, provided that these interests are not overridden by the data subject’s interests or fundamental rights and freedoms.
Data erasure and storage period
The personal information concerning the data subject is erased or restricted against further processing once the purpose of the data storage no longer exists. Data may be stored beyond this time if this is required by European or national legislators in Union directives, laws or other regulations to which the data controller is subject. The data are also restricted or erased as soon as a storage period stipulated by one of the aforementioned regulations expires, unless they must be stored longer for the purpose of concluding or fulfilling a contract.
IV. Provision of the website and creation of log files
Description and scope of data processing
Every time a user accesses our website, our system automatically collects data and information from the accessing computer system.
The following data are collected:
(1) Information about the browser type and version
(2) Operating system
(3) Internet service provider
(4) IP address
(5) Date and time of access
(6) Websites from which our website is accessed
(7) Websites which the user accesses from our website
The data are also saved in the log files of our system. They do not include IP addresses or other information that would allow the data to be associated with a user. These data are not held together with other personal information concerning the user.
Legal basis for data processing
The legal basis for the temporary storage of data is art. 6 par. 1 (f) GDPR.
Purpose of data processing
The temporary storage of the IP address by the system is necessary to allow the user’s computer to display the website. For this reason, the user’s IP address must be stored for the duration of the session.
This represents our legitimate interest in the processing of the data according to art. 6 par. 1 (f) GDPR.
The data are deleted as soon as they are no longer required to achieve the purpose for which they were originally collected. Where data are collected to provide our website, this is the case when the respective session ends.
Right to object or withdraw consent
The collection of data for the purpose of providing the website and their storage in log files is necessary for website operation. For this reason, users do not have the option to object to this processing.
a) Description and scope of data processing
In this case, the following data are saved in the cookies and transmitted:
(1) Language settings
(2) Login information
b) Legal basis for data processing
The legal basis for the processing of personal data using cookies is art. 6 par. 1 (f) GDPR.
c) Purpose of data processing
We need cookies for the following applications:
(1) To apply language selections
(2) To remember search terms
The user data collected by means of these cookies are not used to generate user profiles.
The listed purposes represent our legitimate interest in the processing of the personal data according to art. 6 par. 1 (f) GDPR.
d) Storage period, possibility to object or withdraw consent
Cookies are stored on the user’s computer and from there transmitted back to our website. This means that the user has full control over the utilisation of cookies. As a user of our website, you can change your browser settings to prevent or limit the transmission of cookies. Cookies stored on your system can be deleted at any time, including automatically.
You can set your browser to notify you when cookies are saved, or to reject all or certain cookies, e.g. in order to prevent web tracking. By rejecting/deactivating cookies, you can also at any time withdraw your consent to any future placement of cookies on your system. If you deactivate the cookies for our website, you may not be able to use the website’s full functionality.
Click on the links below to find out how to deactivate cookies in the most commonly used browsers:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&answer=95647
Description and scope of data processing
Visitors to our website have the option of subscribing to our free newsletter. We use the double-opt-in process for newsletter subscriptions. This means that, once you have provided your first and last name, email address and preferred form of address, we will send an email to the specified address in which we ask you to confirm your subscription. If you do not confirm, your subscription is deleted automatically. If you confirm that you want to receive the newsletter, we will store your email address until you cancel your subscription. Your email address is stored for the sole purpose of sending you the newsletter. In addition, we will save your IP address and the times at which you subscribed and confirmed your subscription to prevent abuse of your personal information.
The only mandatory information required for a newsletter subscription is your email address. Any other (specially marked) information that we ask for is strictly voluntary and will only be used to personalise the newsletter. This information, too, will be deleted completely if and when you unsubscribe from the newsletter.
During the subscription process we will ask for your consent to the processing of your data and refer to this Data Privacy Statement.
We use CleverReach to distribute our newsletters, a service offered by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. This service allows us to organise and analyse the distribution of our newsletters. The data you provide in order to receive the newsletter, such as your email address, will be stored on CleverReach servers in Germany and/or Ireland.
The distribution of newsletters with CleverReach allows us to analyse the behaviour of our newsletter recipients. Among other things, we can determine how many recipients opened their newsletter and how often they clicked on links in the newsletter. CleverReach supports conversion tracking to analyse if a previously defined action, such as a product purchase, took place after a link was clicked. For details on data analysis by CleverReach, please see https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
If you do not want to be subject to this analysis by CleverReach, you must cancel your newsletter subscription. To do so, simply send us an email stating your request or use the “Unsubscribe” link in the newsletter.
The information you provided when you signed up for the newsletter will be deleted from our servers and the CleverReach servers once you unsubscribe. If this information was transmitted to us for other purposes and in another context, it will continue to be held by us.
For details on the data privacy regulations of CleverReach, please see: https://www.cleverreach.com/de/datenschutz/.
We have concluded a data processing agreement with CleverReach to fully comply with legal data protection regulations.
The data processed in connection with our newsletter will not be disclosed to third parties. The data are used for the sole purpose of distributing the newsletter.
Legal basis for data processing
The legal basis for data processing following the user’s subscription to our newsletter (during which the user consents to the processing of his/her data) is art. 6 par. 1 (a) GDPR.
The legal basis for the distribution of the newsletter following a purchase of our goods and services is § 7 par. 3 UWG (Protection against Unfair Competition Act).
Purpose of data processing
The user’s email address is collected for the purpose of delivering the newsletter.
The purpose of collecting other personal information during the subscription process is to prevent abuse of the services or the respective email address.
The data are deleted as soon as they are no longer required to achieve the purpose for which they were originally collected. This means the user’s email address is stored while the newsletter subscription is active.
Any other personal data collected during the subscription process are usually deleted after seven days.
Right to object or withdraw consent
You may withdraw your consent, i.e. unsubscribe from the newsletter, at any time. To do so, simply send us an email stating your request or use the “Unsubscribe” link in the newsletter. The lawfulness of data processing performed prior to the withdrawal remains unaffected.
VII. Contact form and email correspondence
Description and scope of data processing
Our website includes a contact form that may be used to send us questions or requests. If a user fills out and submits the form, the data entered in the form are transmitted and stored by us. These data are:
- The user’s name
- The user’s email address
- The user’s question or request
At the time the form is submitted, the following data are also saved:
(1) The user’s IP address
(2) The date and time of registration
When you submit the contact form, we will ask for your consent to the processing of your data and refer to this Data Privacy Statement.
You can also contact us using the email address provided on the website. In this case we will store the personal data you provide with your email.
These data will not be disclosed to third parties. They are used exclusively for the purpose of email correspondence.
Legal basis for data processing
The legal basis for data processing with the user’s consent is art. 6 par. 1 (a) GDPR.
The legal basis for data processing in connection with email correspondence is art. 6 par. 1 (f) GDPR. If the purpose of the email correspondence is to conclude a contract, there is an additional legal basis in art. 6 par. 1 (b) GDPR.
Purpose of data processing
We process the personal information obtained through the input mask solely for the purpose of contacting the sender. In the case of email contact, this also represents the required legitimate interest in data processing.
The other personal data that are processed when the contact form is submitted are used to prevent abuse of the form and ensure the safety of our IT systems.
The data are deleted as soon as they are no longer required to achieve the purpose for which they were originally collected. For personal data from the input mask of the contact form and data transmitted via email, this is the case when the conversation with the user is concluded. The conversation is concluded when circumstances indicate that the discussed issue has been resolved.
Any other personal data collected during submission/dispatch are deleted after seven days at the latest.
Right to object or withdraw consent
Users may withdraw their consent to the processing of personal information at any time. If users contact us by email, they may object to the storage of their personal data at any time. In this case, the email correspondence cannot be continued.
All personal data that were stored in connection with the email contact will be deleted.
VIII. Other plugins and tools
The data controller has integrated the Google AdWords service on this website. Google AdWords is an internet advertising service that allows its customers to place advertisements in Google search results and in the Google advertising network. Google AdWords allows advertisers to define certain key words in advance; an advertisement is only displayed in the Google search results if the search engine is used to find information related to these key words. In the Google advertising network, the advertisements are distributed across relevant websites by an automatic algorithm based on the predefined key words.
Google AdWords is operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Our purpose for using Google AdWords is to promote our website through relevant advertisements on the websites of third companies and in Google search results, and to allow other advertisers to place advertisements on our website.
If a user is directed to our website by a Google ad, Google will place a so-called conversion cookie on the user’s IT system. We have already explained what cookies are. A conversion cookie becomes invalid after 30 days and cannot be used to identify the user. While it is valid, the conversion cookie provides information on whether certain subpages, e.g. the shopping cart of an online shop system, were accessed on our website. The conversion cookie also allows us and Google to determine if a user who accessed our website through an AdWords advertisement has generated revenue, i.e. completed or cancelled a purchase.
Google uses the data and information obtained through conversion cookies to generate visitor statistics for our website. These statistics help us to determine the total number of visitors who reached our website through the AdWords advertisements, i.e. to establish the success or failure of the respective AdWords advertisement and to optimise future AdWords advertisements. Neither our company nor other customers of Google AdWords receive information from Google that could be used to identify the user.
Conversion cookies are used to store personal information such as the websites visited by the user. Every time a user visits our website, personal information including the IP address of the user’s internet connection is transmitted to Google in the United States. Google saves this personal information on servers in the United States. Google may pass on personal data collected via this technical process to third parties.
Users can reject cookies placed by our website at any time by changing their browser settings as explained above. These changes to the browser settings will also prevent Google from placing a conversion cookie on the user’s IT system. Cookies that have already been placed by Google AdWords can be deleted at any time using the browser or another software.
Users may also object to personalised advertisements provided by Google. To do so, the user must open the URL www.google.de/settings/ads in every browser used and make the desired changes.
For additional information and the current Google data privacy regulations, see https://www.google.de/intl/de/policies/privacy/.
2.1 Type and purpose of processing:
This website uses Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The service allows us to display interactive maps directly on our website for our users’ convenience.
Nähere For more information on data processing by Google, please see the Google data privacy statement. You can change your personal privacy settings in the Google Safety Center.
Click here for detailed instructions on managing your personal data in connection with Google products.
2.2 Legal basis:
The legal basis for the incorporation of Google Maps on our website and the associated data transfer to Google is your consent as per art. 6 par. 1 (a) GDPR.
When you visit our website, Google will receive the information that you accessed the respective subpage of our website. This happens regardless of whether you are logged on to a Google user account. If you are logged on to your Google account, your data will be associated directly with your account.
If you do not want data to be associated with your Google profile, you must log off your Google account before activating the button. Google saves your data in the form of a user profile which it uses for advertisements, market research and/or to optimise its website in line with user requirements. The main purpose of this analysis (even for users that are not logged on) is to provide personalised advertisements and to inform other users of the social network about your activities on our website. You can object to the generation of such user profiles by addressing an appropriate request directly to Google.
2.4 Storage period:
We do not collect any personal information in connection with Google Maps on our website.
2.5 Transfer of data to third countries:
Google processes your data in the United States and has agreed to comply with the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
2.6 Withdrawing consent:
2.7 Mandatory or required provision of data:
The provision of your personal information is voluntary and based on your consent. If you deny us access to your information, you may not be able to use the full functionality of our website.
IX. Google Analytics
This website uses Google Analytics due to our legitimate interest in optimising and analysing our website within the meaning of art. 6 par. 1 (f) GDPR; Google Analytics is operated by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Analytics uses “cookies” – text files that are saved on your terminal device. The information collected by cookies will usually be transmitted to and stored by Google on servers in the United States.
Google LLC complies with European data protection laws and is certified under the Privacy Shield agreement: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
This website supports IP anonymisation. Users’ IP addresses will be truncated/anonymised for member states of the European Union and the European Economic Area as well as for other signatory states of the agreement. Only in exceptional cases will the full IP address be sent to and shortened by Google servers in the USA. This shortening makes it impossible to associate the IP address with the user’s person. Google will not associate the user’s IP address transmitted by the browser with any other data held by Google.
Based on the data processing agreement that we as the website operator have concluded with Google Inc., Google will use this information for the purpose of evaluating website use and website activity and providing other services relating to internet usage.
The data collected by Google on our behalf are used to analyse each visitor’s use of our website, e.g. in order to compile reports on website activity and improve our online presence.
You can prevent the placement of cookies on your device by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website.
Furthermore, you can prevent the data collected by cookies (including your IP address) from being sent to, and used by, Google Inc. by downloading a browser plug-in. The plugin is available under: https://tools.google.com/dlpage/gaoptout?hl=de
Alternatively, click on this link https://support.google.com/analytics/answer/6004245?hl=de to prevent Google Analytics from collecting information about you via this website. By clicking on the link, you will download an “opt-out cookie”. This means your browser must generally permit the placement of cookies. If you regularly delete your cookies, you must click on this link every time you visit this website.
For more information on data usage by Google Inc., please see:
- https://policies.google.com/privacy/partners?hl=de (data collected by Google partners)
- https://adssettings.google.de/authenticated (settings relating to advertisements displayed on your system)
We have concluded a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.
This website uses the “demographics reports” function by Google Analytics. This function compiles reports that contain information on the age, sex and interests of website visitors. These data are collected from personalised advertisements by Google and from visitor data from third-party providers. They cannot be associated with a specific person. You can deactivate this function at any time via the advertisement settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section on objecting to data collection.
X. Rights of the data subject
If personal data concerning you are processed, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis the data controller:
Right of access
You may demand confirmation from the data controller about whether personal data concerning you are processed by us.
If your data are processed, you can demand the following information from the data controller:
(1) the purposes for which personal data are processed;
(2) the categories of personal data that are processed;
(3) the recipients and categories of recipient to whom the personal data have been or will be disclosed;
(4) the planned storage period of the personal data concerning you or, if concrete information is not available, the criteria used to determine the storage period;
(5) the existence of a right to rectification or erasure of the personal data concerning you, of a right to restrict processing by the data controller and of a right to object to such processing;
(6) the existence of a right to lodge a complaint with a supervisory authority;
(7) all available information on the source of the data, if the personal data were not collected from the data subject;
(8) the existence of automated decision-making processes including profiling pursuant to art. 22 par. 1 and 4 GDPR and – at least in these cases – substantive information about the logic involved and the consequences and intended effects of such processing for the data subject.
You may demand information about whether the personal data concerning you are transferred to a third country or international organisation. In this context, you may demand to be informed about the relevant guarantees in connection with this transfer pursuant to art. 46 GDPR.
Right to rectification
You have the right to have your data rectified and/or completed by the data controller, if the processed personal data concerning you are incorrect or incomplete. The data controller must rectify your information without undue delay.
Right to restriction of processing
You may demand the restriction of the processing of personal data concerning you under the following conditions:
(1) If you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
(2) If the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
(3) If the controller no longer needs the personal data for the purposes of the processing, but you need them to establish, exercise or defend legal claims; or
(4) If you have objected to processing pursuant to art. 21 par. 1 GDPR pending the verification whether the legitimate grounds of the controller override yours.
Where processing has been restricted, such personal data concerning you may – with the exception of storage – only be processed with your consent or to establish, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have obtained restriction of processing pursuant to the aforementioned conditions, you will be informed by the controller before the restriction of processing is lifted.
Right to erasure
a) Obligation to erase data
You may demand from the controller the erasure of personal data concerning you without undue delay; the controller is obligated to comply with your demand if one of the following grounds applies:
(1) The personal data concerning you are no longer necessary to achieve the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing is based according to art. 6 par. 1 (a) or art. 9 par. 2 (a) GDPR and there is no other legal ground for the processing.
(3) You object to the processing pursuant to art. 21 par. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to art. 21 par. 2 GDPR.
(4) The personal data concerning you have been unlawfully processed.
(5) The personal data concerning you have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
(6) The personal data concerning you have been collected in relation to the offer of information society services according to art. 8 par. 1 GDPR.
Information to third parties:
Where the controller has made the personal data concerning you public and is obliged pursuant to art. 17 par. 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
The right to erasure does not apply to the extent that processing is necessary
(1) to exercise the right of freedom of expression and information;
(2) to comply with a legal obligation which requires processing by Union or Member State law to which the controller is subject or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health in accordance with art. 9 par. 2 (h) and (i) and art. 9 par. 3 GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with art. 89 par. 1 GDPR in so far as the right referred to in (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(5) to establish, exercise or defend legal claims.
Right to notification
If you have exercised your right to rectification, erasure or restriction of processing vis-à-vis the data controller, the controller is obligated to communicate such rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort.
You have the right to be informed about those recipients by the controller.
Right to data portability
You have the right to receive the personal data concerning you that you provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to whom the personal data have been provided, if:
(1) the processing is based on consent pursuant to art. 6 par. 1 (a) GDPR or art. 9 par. 2 (a) GDPR or on a contract pursuant to art. 6 par. 1 (b) GDPR.
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where this is technically feasible. This right must not adversely affect the rights and freedoms of others.
The right to data portability does not apply to processing of personal data that is necessary to perform a task that is carried out in the public interest or in the exercise of official authority vested in the controller.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data that is based on art. 6 par. 1 (e) or (f) GDPR, including profiling based on those provisions.
The controller will no longer process your personal data unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the data are processed to establish, exercise or defend legal claims.
If your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
In the context of the use of information society services – and notwithstanding Directive 2002/58/EC – you may exercise your right to object by automated means using technical specifications.
Right to withdraw consent
You may withdraw your consent to the processing of your personal data at any time. Such withdrawal does not affect the lawfulness of data processing prior to the withdrawal.
Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
(1) is necessary for entering into, or performance of, a contract between you and a data controller,
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) is based on your explicit consent.
However, these decisions must not be based on special categories of personal data referred to in art. 9 par. 1 GDPR, unless art. 9 par. 2 (a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in (1) and (3), the data controller will implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, place of work or place of the alleged infringement if you believe that the processing of your personal data infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to art. 78 GDPR.
The supervisory authority in charge of data privacy issues is the data protection supervisor of the German state in which our company is registered. Please see the following link for a list of data protection supervisors and their contact information: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
5. Legal validity of this disclaimer
If sections or individual terms of this statement are not legal or correct, the content or validity of the other parts remain uninfluenced by this fact.