Privacy policy

Privacy Policy

Unless stated otherwise below, providing your personal data is neither required by law or by contract, nor necessary to conclude a contract. You are not obliged to provide the data. Not providing it has no consequences. This only applies where the processing operations described below do not state otherwise.
"Personal data" means any information relating to an identified or identifiable natural person.

Server log files
You can visit our web pages without providing any personal information.
Every time our website is accessed, your internet browser transmits usage data to us or to our web host / IT service provider, and this data is stored in log data (so-called server log files). The stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is based on Art. 6 (1) (f) GDPR and our overriding legitimate interest in ensuring trouble-free operation of our website and in improving our offer.

Hosting and shop system
Our shop is operated with the shop system of Shopify International Limited (Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify"). Shopify hosts the website and processes all data collected on it on our behalf, in particular server log files, contact enquiries, customer accounts and order data. The processing is based on Art. 6 (1) (b) GDPR where it serves the performance of a contract with you, and otherwise on Art. 6 (1) (f) GDPR and our legitimate interest in a secure and reliable operation of our shop. Further information can be found in Shopify's privacy policy: https://www.shopify.com/legal/privacy

In this context your data is transferred to Canada and the USA, among other countries. The EU Commission has issued an adequacy decision for data transfers to Canada. For the USA there is an adequacy decision for companies certified under the EU-U.S. Data Privacy Framework.

Contact

Controller
Contact us if you wish. The controller responsible for data processing is: Danny Riewoldt-Liehr, Pfirsichweg 4, 12524 Berlin, Germany, 017673527322, hello@kazemaki.com

Contact initiated by the customer by email
If you contact us by email on your own initiative for business purposes, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to handle and answer your enquiry.
If the contact serves to carry out pre-contractual measures (e.g. advice when you are interested in buying, preparing an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) (b) GDPR.
If the contact is made for other reasons, this data processing is based on Art. 6 (1) (f) GDPR and our overriding legitimate interest in handling and answering your enquiry. In this case you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you that is based on Art. 6 (1) (f) GDPR.
We use your email address only to handle your enquiry. Your data is then deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of getting in contact.
If the contact serves to carry out pre-contractual measures (e.g. advice when you are interested in buying, preparing an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) (b) GDPR.
If the contact is made for other reasons, this data processing is based on Art. 6 (1) (f) GDPR and our overriding legitimate interest in handling and answering your enquiry. In this case you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you that is based on Art. 6 (1) (f) GDPR.
We use your email address only to handle your enquiry. Your data is then deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer account, orders

Customer account
When you open a customer account, we collect your personal data to the extent stated there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6 (1) (a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal. Your customer account is then deleted.

Collection, processing and transfer of personal data for orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your enquiries. Providing the data is necessary to conclude the contract. If it is not provided, no contract can be concluded. The processing is based on Art. 6 (1) (b) GDPR and is necessary for the performance of a contract with you.
Your data is passed on, for example, to the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing and IT service providers. In all cases we strictly observe the legal requirements. The scope of the data transfer is limited to a minimum.

Reviews, advertising

Data collection when writing a comment or a review
When you comment on or review an item or a post, we collect your personal data (name, email address, comment text) only to the extent you provide it. The processing serves the purpose of enabling comments/reviews and displaying them.
To verify your review we also collect the following data: order number.
By submitting the comment/review you consent to the processing of the data transmitted. The processing is based on Art. 6 (1) (a) GDPR with your consent. You can withdraw the consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal. Your personal data is then deleted.

When your comment is published, only the name you provided is published.

In addition, your IP address is stored when you submit the comment, for the purpose of preventing misuse of the comment function and ensuring the security of our IT systems. By submitting the comment you consent to the processing of the data transmitted. The processing is based on Art. 6 (1) (a) GDPR with your consent. You can withdraw the consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal. Your IP address is then deleted.

Use of your email address for sending newsletters
Independently of contract processing, we use your email address exclusively for our own advertising purposes to send newsletters, provided you have expressly agreed to this. The processing is based on Art. 6 (1) (a) GDPR with your consent. You can withdraw the consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal. To do so, you can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address is then removed from the mailing list.

Use of your email address for sending direct advertising
We use your email address, which we received in the course of selling goods or a service, to send you advertising by electronic means for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. Providing the email address is necessary to conclude the contract. If it is not provided, no contract can be concluded. The processing is based on Art. 6 (1) (f) GDPR and our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising the objection can be found in the Legal Notice. You can also use the link provided for this purpose in the advertising email. No costs arise for this other than the transmission costs according to the basic rates.

Shipping service providers

Transfer of your email address to shipping companies for information on the shipping status
In the course of contract processing we pass your email address on to the transport company, provided you have expressly agreed to this during the ordering process. The transfer serves the purpose of informing you by email about the shipping status. The processing is based on Art. 6 (1) (a) GDPR with your consent. You can withdraw the consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.

Payment service providers, credit check

Use of Amazon Payments
On our website we use the payment service Amazon Payments of Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; "Amazon Payments").
The data processing serves the purpose of being able to offer you payment via the payment service Amazon Payments.
To integrate this payment service, Amazon Payments needs to collect, store and analyse data when the website is accessed (e.g. IP address, device type, operating system, browser type, location of your device). Cookies may also be used for this. The cookies make it possible to recognise your browser.
The processing of your personal data is based on Art. 6 (1) (f) GDPR and our overriding legitimate interest in a customer-oriented offer of different payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
When you select and use "Amazon Payments", the data required for payment processing is transmitted to Amazon Payments in order to fulfil the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR.
Further information on data processing when using the payment service Amazon Payments can be found in the corresponding privacy policy at: https://pay.amazon.com/de/help/201212490

Use of Klarna payment options
On our website we use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna"). When you select and use payment via Klarna, the data required for payment processing is transmitted to Klarna in order to fulfil the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR.

"Pay Later" (invoice), "Pay Now" (payment by direct debit), "Financing" (instalment purchase)
For individual payment methods such as "Pay Later" (invoice), "Pay Now" (payment by direct debit) and "Financing" (instalment purchase), Klarna reserves the right to obtain a credit report where applicable, based on mathematical-statistical methods and using credit agencies.
For this purpose Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address and data connected with the order, to a credit agency for the purpose of identity and credit checks, and uses the information received about the statistical probability of a payment default for a balanced decision on establishing, carrying out or ending the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognised mathematical-statistical methods and whose calculation includes, among other things, address data. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves the purpose of the credit check for initiating a contract. The processing is based on Art. 6 (1) (f) GDPR and our overriding legitimate interest in protection against payment default when Klarna makes advance performance. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you that is based on Art. 6 (1) (f) GDPR, by notifying Klarna. Providing the data is necessary to conclude the contract with the payment method you want. If it is not provided, the contract cannot be concluded with the payment method you have chosen.
Further information, in particular on which credit agencies Klarna passes your personal data on to, can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.

General information on Klarna is available at: https://www.klarna.com/de/. Your personal details are handled by Klarna in accordance with the applicable data protection regulations and as set out in Klarna's privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

Use of SOFORT
For payment processing on our website we use the payment service provider SOFORT GmbH (Theresienhöhe 12, 80339 Munich, Germany; "SOFORT"). Sofort GmbH is a company of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The data processing serves the purpose of being able to offer you different payment methods through payment processing via the payment service provider SOFORT. If you have chosen this payment option, the data required for payment processing is transmitted to SOFORT. This data processing is based on Art. 6 (1) (b) GDPR. Further information on data processing when using the payment service provider SOFORT can be found at https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/.

Cookies

Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be clearly identified when the website is accessed again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By choosing the appropriate technical settings in your internet browser, you can be notified before cookies are set, decide individually whether to accept them, and prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. Please note, however, that you may then not be able to use all functions of this website in full.

Under the following links you can find out how to manage (and also deactivate) cookies in the most important browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies
Unless stated otherwise below in this privacy policy, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, more effective and more secure. Cookies also enable our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognised even after a page change.

The use of cookies or comparable technologies is based on Section 25 (2) TDDDG (German Telecommunications and Digital Services Data Protection Act). The processing of your personal data is based on Art. 6 (1) (f) GDPR and our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Cookie banner and consent management
To obtain and manage your consent we use the cookie banner and the Customer Privacy function of our shop system Shopify (Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland).
The banner enables you to give consent to data processing via the website, in particular to the setting of cookies for analytics and marketing, and to withdraw consent you have already given. You can change your choice at any time via the link "Your Privacy Choices" at the bottom of every page.
Analytics and marketing services (Google Analytics, Google Ads, Meta Pixel and Conversions API) are only activated for visitors from the European Economic Area, the United Kingdom and Switzerland after consent has been given.
For this, the following information may be stored: date and time of the page view, information on the browser and the device you use, anonymised IP address, opt-in and opt-out data.
The data processing is carried out to fulfil a legal obligation on the basis of Art. 6 (1) (c) GDPR.

Analytics, advertising tracking

Use of Google Analytics
On our website we use the web analytics service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
The data processing serves the purpose of analysing this website and its visitors as well as marketing and advertising purposes. For this, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services connected with website and internet use. Among other things, the following information may be collected: IP address, date and time of the page view, click path, information on the browser and the device you use, pages visited, referrer URL (website from which you accessed our website), location data, purchase activities. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of the website. The information generated in this way about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, the EU Commission has issued an adequacy decision that covers companies certified under the EU-U.S. Data Privacy Framework. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/. Both Google and US government authorities have access to your data. Google may link your data with other data, such as your search history, your personal accounts, your usage data from other devices and all other data Google holds about you.
IP anonymisation is activated on this website. As a result, Google shortens your IP address beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.
The processing of your personal data is based on Art. 6 (1) (f) GDPR and our overriding legitimate interest in a needs-based and targeted design of the website. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
You can prevent the collection of the data generated by Google Analytics and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de
To prevent data collection and storage by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when you visit this website. You have to carry out the opt-out on all systems and devices you use for it to work comprehensively. If you delete the opt-out cookie, requests are transmitted to Google again. If you click here, the opt-out cookie is set: Deactivate Google Analytics.
Further information on the terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html and at https://www.google.de/intl/de/policies/ as well as at https://policies.google.com/technologies/cookies?hl=de.

Use of the Meta Pixel
On our website we use the remarketing function "Custom Audiences" of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Facebook").
Meta Platforms Ireland and we are joint controllers for the collection of your data that takes place when the service is integrated and for the transmission of this data to Facebook. The basis for this is an agreement between us and Meta Platforms Ireland on the joint processing of personal data, which sets out the respective responsibilities. The agreement is available at https://www.facebook.com/legal/controller_addendum. According to it, we are responsible in particular for fulfilling the information obligations under Art. 13 and 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Art. 33 and 34 GDPR where a personal data breach affects our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for enabling the rights of data subjects under Art. 15 to 20 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for the obligations under Art. 33 and 34 GDPR where a personal data breach affects the obligations of Meta Platforms Ireland under the joint processing agreement.
The application serves the purpose of addressing visitors to the website in a targeted way with interest-based advertising on the social network Facebook. For this, the Facebook remarketing tag has been implemented on the website. Via this tag a direct connection to the Facebook servers is established when you visit the website. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook, you are then shown personalised, interest-based Facebook ads.
Your data may be transferred to the USA. For the USA, the EU Commission has issued an adequacy decision that covers companies certified under the EU-U.S. Data Privacy Framework. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://www.facebook.com/legal/EU_data_transfer_addendum.
The processing of your personal data is based on Art. 6 (1) (f) GDPR and our overriding legitimate interest in addressing site visitors in a targeted way with interest-based advertising. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you. You can deactivate the remarketing function "Custom Audiences" here.
Further information on the collection and use of data by Facebook, on your rights in this regard and on ways to protect your privacy can be found in Facebook's privacy information at https://www.facebook.com/about/privacy/.

Use of the Meta Conversions API
In addition to the Meta Pixel we use the Conversions API of Meta Platforms Ireland Limited. It is provided by the Shopify app "Facebook & Instagram". With it, events from our shop (for example page views, products viewed, adding to the cart, starting the checkout and purchases) are sent to Meta directly from the server of our shop system rather than from your browser.
Together with the event, the following data may be transmitted: time and type of the event, order value and products, IP address, browser information, Meta click and browser identifiers, and contact data you entered during the order (email address, phone number, name, city, postcode, country). The contact data is hashed before transmission. Meta uses the data to assign the events to a Meta account and to measure and optimise our ads.
Your data is only processed in this way if you have given your consent, on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via "Your Privacy Choices" at the bottom of the page, without affecting the lawfulness of the processing carried out up to the withdrawal. The information given above on the Meta Pixel applies accordingly, including the information on joint controllership and data transfers.

Use of Google Ads conversion tracking
On our website we use the online advertising programme "Google Ads" and, as part of it, conversion tracking. Google conversion tracking is an analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, contain no personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked on the ad and were redirected to this page. Every Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked across the websites of Ads customers.
The information obtained with the help of the conversion cookie serves the purpose of creating conversion statistics. We learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to identify users personally.
Your data may be transferred to the servers of Google LLC in the USA. For the USA, the EU Commission has issued an adequacy decision that covers companies certified under the EU-U.S. Data Privacy Framework. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adscontrollerterms/.
The processing of your personal data is based on Art. 6 (1) (f) GDPR and our overriding legitimate interest in addressing site visitors in a targeted way with interest-based advertising. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
You can deactivate personalised advertising in Google's ad settings. Instructions can be found at https://support.google.com/ads/answer/2662922?hl=de
Alternatively, you can prevent the use of cookies by third parties by visiting the opt-out page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and following the further opt-out information given there. You will then not be included in the conversion tracking statistics.
Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/

Enhanced conversions (Google Ads)
As part of Google Ads conversion tracking we use the function "enhanced conversions". It is provided by the Shopify app "Google & YouTube". When you complete an order, contact data you entered (email address, phone number, name and address) is hashed and transmitted to Google. Google compares the hashed data with the data of signed-in Google accounts in order to assign the purchase to a previous click on one of our ads more reliably.
Your data is only processed in this way if you have given your consent, on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time via "Your Privacy Choices" at the bottom of the page, without affecting the lawfulness of the processing carried out up to the withdrawal.

Use of the remarketing or "similar audiences" function of Google Inc.
On our website we use the remarketing or "similar audiences" function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
The application serves the purpose of analysing visitor behaviour and visitor interests. To carry out the analysis of website use, which forms the basis for creating interest-based ads, Google uses cookies. The cookies record visits to the website and anonymised data on the use of the website. No personal data of visitors to the website is stored. If you subsequently visit another website in the Google Display Network, you are shown ads that are highly likely to take into account product and information areas you accessed previously.
Your data may be transferred to servers of Google LLC in the USA. For the USA, the EU Commission has issued an adequacy decision that covers companies certified under the EU-U.S. Data Privacy Framework. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks.
The processing of your personal data is based on Art. 6 (1) (f) GDPR and our overriding legitimate interest in addressing site visitors in a targeted way with interest-based advertising. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
You can permanently deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://support.google.com/ads/answer/7395996?hl=de
Alternatively, you can prevent the use of cookies by third parties by visiting the opt-out page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and following the further opt-out information given there.
Further information on Google remarketing and the corresponding privacy policy can be found at: https://www.google.com/privacy/ads/

Plug-ins and other services

Use of the Google tag
On our website we use the Google tag (Google Tag Manager technology) of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").
This application manages JavaScript tags and HTML tags that are used in particular to implement tracking and analytics tools. The data processing serves the purpose of a needs-based design and the optimisation of our website.
Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables the triggering of other tags that may collect and process personal data.
Further information on the terms of use and data protection can be found here.

Use of YouTube
On our website we use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube"). YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
The function displays videos stored on YouTube in an iFrame on the website. The option "privacy-enhanced mode" is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about this transmitted to YouTube and stored there. Your data may be transferred to the USA. For the USA, the EU Commission has issued an adequacy decision that covers companies certified under the EU-U.S. Data Privacy Framework. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks.
The processing of your personal data is based on Art. 6 (1) (f) GDPR and our overriding legitimate interest in a needs-based and targeted design of the website. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
Further information on the collection and use of data by YouTube and Google, on your rights in this regard and on ways to protect your privacy can be found in YouTube's privacy information at https://www.youtube.com/t/privacy.

Rights of data subjects and storage period

Storage period
After the contract has been fully processed, the data is first stored for the duration of the warranty period, then in compliance with statutory retention periods, in particular those under tax and commercial law, and is deleted once the period has expired, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, to rectification, to erasure, to restriction of processing, to data portability.
In addition, under Art. 21 (1) GDPR you have a right to object to processing based on Art. 6 (1) (f) GDPR and to processing for the purpose of direct advertising.

Right to lodge a complaint with the supervisory authority
Under Art. 77 GDPR you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint, among others, with the supervisory authority responsible for us, which you can reach using the following contact details:

Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Friedrichstr. 219
Visitor entrance: Puttkamerstr. 16-18 (5th floor)
10969 Berlin
Germany
Tel.: +49 30 138890
Fax: +49 30 2155050
Email: mailbox@datenschutz-berlin.de

Right to object
Where the personal data processing listed here is based on our legitimate interest under Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time with effect for the future, on grounds relating to your particular situation.
After an objection, the processing of the data concerned is ended, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for the purpose of direct advertising, you can object to this processing at any time by notifying us. After an objection, we end the processing of the data concerned for the purpose of direct advertising.

Last updated: 3 October 2026