• 0049 (0)5235 97473
  • kundenservice@cantina24.de
  • We love Italy
  • Fast delivery
  • 0049 (0)5235 97473
  • kundenservice@cantina24.de
  • We love Italy
  • Fast delivery

Cantina24 Privacy policy

Please be advised that only the German original of our Datenschutzerklärung is legally valid. This English translation has been provided solely for your convenience. It does not constitute a legal document.

Thank you for your interest in our website. As a member of Verein sicherer und seriöser Internetshopbetreiber e. V., the protection of your personal data is very important to us. In the following, we will inform you in a transparent and understandable language, about data collection and its scope, what your data will be used for and what rights you have.

You have the right to receive information about the origin, the recipient(s) and the purpose of your stored personal data at any time free of charge. You also have the right to request the correction, restriction or deletion as well as the disclosure of this data. If you have any questions about this or data protection, you can contact the person responsible for data processing at any time. The person responsible for data processing is named under point 1 of this data protection declaration. You also have the right to lodge a complaint with the responsible supervisory authority. Your rights in detail and detailed explanations can be found under point 6 of this data protection declaration.

Your data will be collected, stored and processed in compliance with the relevant legal regulations. Personal data are all types of data that can be used to identify you as a person.

1. Who is responsible for data processing?

In the sense of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations, the responsible body is a natural or legal person who alone or together with others decides about the purposes and means of processing personal data (names, contact details etc.).

Responsible for data processing on this website is:

Mario Pacillo

Nederlandpark 1

32825 Blomberg

Germany

Tel.: 0049 (0)5235 97 47 3

E-Mail: kundenservice@cantina24.de

2. What data is collected and processed on our website?

2.1 Automated collection of data:

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer, in so-called server log files. Some of this data is technically necessary to display our website to you. It is not merged with data from other sources. The following data is collected:

  • The pages viewed
  • Browser types and versions used
  • The operating system used by the accessing system
  • The website from which an accessing system reaches our site
  • The date and time the page was accessed
  • The internet service provider of the accessing computer
  • The Internet protocol address used (IP address)

The legal basis for data processing is Art. 6 Para. 1 lit. f of the General Data Protection Regulation (GDPR), which enables us to process the data in the event of a legitimate interest. In this case, our legitimate interest is the reliable and error-free functioning of our website. No other processing of this data takes place.

2.2 Collection of personal data

2.2.1 Data acquisition and processing when opening a customer account and when executing a contract

If you open a customer account on our website, this happens voluntarily. Registration is not a prerequisite for concluding a contract. Data is only collected to the minimum necessary, the mandatory information can be recognized from the correspondingly marked input fields. Deleting the customer account is possible at any time and free of charge. If you request a deletion, please contact the person responsible for data processing. This is mentioned under point 1 of this data protection declaration.

We only use your data for the purpose for which you have registered or for contract execution. The legal basis for data processing is Art. 6 Para. 1 lit. b of the General Data Protection Regulation (GDPR), which enables us to process the data if this is necessary to fulfil a contract with you or to carry out a pre-contractual measure.

The collected customer data will be blocked after completion of the order, after termination of the business relationship or after deletion of your customer account and deleted after tax and commercial retention periods, unless you have consented to further use of your data.

2.2.2 Data collection and processing when using our email address or contact function

For emails or messages via the contact form, we save your data until the processing of your message. The mandatory information in the mask of the contact form can be recognized by the correspondingly marked input fields. The data will only be used for the processing of your request, after the processing your data will be deleted. The legal basis for data processing is Art. 6 Para. 1 lit. f of the General Data Protection Regulation (GDPR), which enables us to process the data in the event of a legitimate interest. In this case, our legitimate interest is to answer your message or process your request.

For emails or messages via the contact form (if available) that aim to initiate a contract, the commercial and tax retention periods of 10 years apply from the end of the calendar year in which the data was collected. After the deadlines have expired, the data will be deleted on a regular basis, unless these are still required to initiate or fulfil the contract or there is a legitimate interest in us to continue storing the data. The legal basis for data processing is Art. 6 Para. 1 lit. b of the General Data Protection Regulation (GDPR), which enables us to process the data if this is necessary to fulfil a contract with you or to carry out a pre-contractual measure.

2.2.3 Newsletter function, data processing and possibility to object

2.2.3.1 You have signed up for our newsletter subscription:

If you subscribe to our free newsletter, data from the registration mask will be transmitted to us. The mandatory information can be recognized from the correspondingly marked input fields and is limited to the required minimum (email address). For the processing of your data, consent is obtained in the registration process and reference is made to this data protection declaration. The legal basis for data processing is Art. 6 Para. 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have given your consent to the processing.

The data will not be passed on to third parties but will only be used for sending newsletters. You can object to the subscription to the newsletter (your consent) at any time in the future. To revoke your consent, there is a link in each newsletter to unsubscribe from the newsletter, but you can also opt out directly from our website. The request to unsubscribe from the newsletter can of course also be addressed directly to the person responsible for data processing. This is mentioned under point 1 of this data protection declaration. After unsubscribing from the newsletter subscription, the data will be deleted unless you have consented to further use, or we reserve the right to continue using it (as explained below under 2.2.3.2), which is permitted by law.

2.2.3.2 When we send newsletters to our existing customers:

If you have purchased goods or services on our website and have stored your email address, we can use this to send you a newsletter, unless you have objected to this. In such a case, the newsletter will only send direct mail for similar goods or services from our range. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG. The legal basis for data processing is Art. 6 Para. 1 lit. f of the General Data Protection Regulation (GDPR), which enables us to process the data in the event of a legitimate interest. In this case, our legitimate interest is to send you personalized advertising. You can object to the use of your data for this purpose at any time with future effect. To object, please contact the person responsible for data processing. This is mentioned under point 1 of this data protection declaration.

2.3 Forwarding the data to third parties to fulfil the contract

2.3.1 Disclosure to shipping service providers in general and credit institution

For payment transactions and, if necessary, for the delivery of goods, we pass on personal data, to the minimum extent required, to service providers (third parties) if this is necessary for the execution of the contract.

If we pass on your data to a shipping service provider (such as DHL, DPD, UPS, Hermes or GLS), the legal basis for this is Art. 6 Para. 1 lit. b of the General Data Protection Regulation (GDPR), which enables us to process the data if this is necessary to fulfil a contract with you or to carry out a pre-contractual measure.

If we pass on your payment data to the commissioned credit institution, the legal basis for this is Art. 6 Para. 1 lit. b of the General Data Protection Regulation (GDPR), which enables us to process the data if this is necessary to fulfil a contract with you or to carry out a pre-contractual measure.

2.3.2 Forwarding of email address and/or telephone number to shipping service providers

2.3.2.1 DHL

If the delivery of your goods is carried out by the shipping service provider DHL and you have expressly agreed to the forwarding of your email address in the ordering process, this will be sent to DHL (Deutsche Post AG, Charles-de-Gaulle-Strasse 20, 53113 Bonn, Germany) to announce the delivery or coordination of the delivery date. The legal basis for data processing is Art. 6 Para. 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have given your consent to the processing. If you do not consent to the forwarding of the email address, delivery will be made in accordance with the conditions of paragraph 2.3.1 of this data protection declaration. An announcement of the delivery or a coordination of the delivery date by DHL is then not possible.

A given consent to the use of data can be revoked at any time for the future. For this purpose, please contact the person responsible for data processing (this is mentioned under point 1 of this data protection declaration) or the shipping service provider directly.

2.3.2.2 UPS

If the delivery of your goods is carried out by the shipping service provider UPS and you have expressly consented to the forwarding of your email address in the ordering process, this will be sent to UPS (United Parcel Service Deutschland Inc. & Co.OHG, Görlitzer Straße 1, 41460 Neuss, Germany) to announce the Delivery or coordination of the delivery date. The legal basis for data processing is Art. 6 Para. 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have given your consent to the processing. If you do not consent to the forwarding of the email address, delivery will be made in accordance with the conditions of paragraph 2.3.1 of this data protection declaration. An announcement of the delivery or a coordination of the delivery date by UPS is then not possible.

A given consent to the use of data can be revoked at any time for the future. For this purpose, please contact the person responsible for data processing (this is mentioned under point 1 of this data protection declaration) or the shipping service provider directly.

2.3.3 Payment Services

On our website you have the choice of various payment service providers. In the following we inform you which data will be passed on and on which legal basis this happens:

2.3.3.1 Amazon Payment

If you choose this payment service provider, the data and information you provide about your order will be passed on to Amazon Payment (Amazon Payments Europe S.C.A., 5 Rue Plaetis, L-2338 Luxembourg) for the purpose of payment processing. The legal basis for this is Art. 6 Para. 1 lit. b of the General Data Protection Regulation (GDPR), which enables us to process the data if this is necessary to fulfil a contract with you or to carry out a pre-contractual measure.

You can find more information about Amazon Payment's privacy policy at the following Internet address: https://pay.amazon.co.uk/help/201751600

2.3.3.2 PayPal/PayPal Plus

If you choose this payment service provider, the data required for payment will be passed on to PayPal (PayPal Europe, S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). The legal basis for this is Art. 6 Para. 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing and Art. 6 para. 1 lit. b of the General Data Protection Regulation (GDPR), which enables us to process the data if this is necessary to fulfil a contract with you or to carry out a pre-contractual measure. You have the right to withdraw your declaration of consent at any time. Withdrawing your consent will affect the legality, which will not affect processing based on your consent prior to your withdrawal.

If you choose the PayPal Plus payment methods by "credit card", "invoice", "direct debit" or "PayPal installment payment", PayPal reserves the right to obtain credit information from you. A credit report can contain scoring values (= probability values). The so-called scoring values are based on a scientifically recognized mathematical-statistical procedure. Your address data is also (but not exclusively) included in the calculation of the score values.

The legal basis for data processing is Art. 6 Para. 1 lit. f of the General Data Protection Regulation (GDPR), which enables the processing of data in the event of a legitimate interest. In this case, the legitimate interest is to establish your identity or solvency.

You can object to the processing of your personal data at any time. However, PayPal may still be entitled to process, use and transmit the personal data if this is necessary for contractual payment processing by PayPal, is legally required, or is required by a court or an authority.

If you want to object to the use of your data or if you want to notify changes regarding the stored data, you can contact PayPal directly. You can also find more information about PayPal's privacy policy at the following Internet address: https://www.paypal.com/en/webapps/mpp/ua/privacy-full?locale.x=en_GB

2.3.3.3 Sofort Zahlung (Sofortüberweisung)

If you choose this payment service provider, the payment-relevant data and your personal data will be passed on to Sofort GmbH (Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany). Your personal data are first name, last name, address, telephone number, email address and IP address. This data transfer is necessary in order to establish your identity beyond any doubt and thus prevent possible fraud attempts. In addition, you transmit your PIN and a TAN to Sofort GmbH, which uses it to log into your bank account and make a transfer to us. After logging in through Sofort GmbH, the account turnover, the scope of the overdraft facility and the existence of other accounts and their status are automatically checked. After making the transfer, we will be informed of the successful payment.

The legal basis for this is Art. 6 Para. 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing and Art. 6 para. 1 lit. b of the General Data Protection Regulation (GDPR), which enables us to process the data if this is necessary for the performance of a contract with you or for the implementation of a pre-contractual measure. If you want to object to the use of your data or want to notify changes regarding the stored data, you can contact Sofort GmbH directly. You can find more information about the data protection provisions of Sofort GmbH at the following Internet address; by withdrawing your consent, the legality of the processing carried out based on your consent up to the point of withdrawal is not affected: https://www.klarna.com/pay-now/privacy-policy/ or https://www.klarna.com/sofort/datenschutz/

2.3.3.4 Credit card payment via Stripe

If you select the payment method "DEBIT AND CREDIT CARD", the payment is processed by the payment service provider STRIPE INC. 510 Townsend Street, San Francisco, CA 94103, USA., To whom we provide the information you provided during the ordering process, including your name, address, account number, bank number, possibly credit card number, invoice amount, currency and transaction number about your order in accordance with Art. 6 para 1 lit. b Pass on GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider STRIPE INC.

You can find more information on STRIPE's data protection at the URL: https://stripe.com/de/privacy

Credit card details are not stored on our website.

3. What are cookies and what data is processed?

3.1 Cookies that are set by our website

Our website uses so-called cookies. Cookies are text files that are saved in the Internet browser or on your computer by the Internet browser. We use cookies to make our website more user-friendly for you. Some elements of our website require that the calling browser can be identified even after a page change. For example, to save and transmit the items in your shopping cart or your login information. Most of the cookies we use are so-called "session cookies", which are automatically deleted when the browser is closed. Some cookies remain stored on your device and enable recognition when you next visit the site (so-called persistent cookies). These are automatically deleted after a specified period of time. You can find more detailed information on individual cookies in the settings of your browser.

The legal basis for data processing is either Art. 6 Para. 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you have consented to the processing, or Art. 6 para. 1 lit. b of the General Data Protection Regulation (GDPR), which enables us to process the data if this is necessary for the performance of a contract with you or for the implementation of a pre-contractual measure, or Art. 6 para. 1 lit. f of the General Data Protection Regulation (GDPR), which enables us to process the data in the event of a legitimate interest. In this case, it is our legitimate interest to offer you a technically error-free and function-optimized website.

If we save other cookies (for example from partner companies or to analyse your surfing behaviour) on your device, we will inform you in detail below.

You can set your browser so that you are informed about the setting of cookies and then only allow these cookies in individual cases. You can also generally exclude the acceptance of cookies or only accept them in certain cases. You can also set your browser so that cookies that are set are deleted after the browser window is closed. The setting options differ depending on the browser. You can find help on the possible settings (for the most common browsers) under the following links:

Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop

Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/12.0/mac/10.14

Chrome: https://support.google.com/chrome/answer/95647?hl=en-GB&hlrm=en

Opera: https://help.opera.com/en/latest/web-preferences/ 

Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

Please note that the functionality of our website may be significantly restricted if cookies are not accepted.

4. Comment functions on our website

For this function, your comment (if specified), your username (nickname), the time when your comment was created, your IP address and your email address are saved. Your data will be stored until the content you commented on has been completely deleted (or had to be deleted for legal reasons). We reserve the right to delete comments that have been found unlawful by third parties.

The legal basis for the storage and processing of your comment, the username and the time of the creation of the comment is Art. 6 Para. 1 lit. a of the General Data Protection Regulation (GDPR), which enables us to process the data if you give us your consent. You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawing your consent will affect the legality, which will not affect processing based on your consent prior to your withdrawal.

The legal basis for the data processing of your IP address and your email address is Art. 6 Para. 1 lit. f of the General Data Protection Regulation (GDPR), which enables us to process the data in the event of a legitimate interest. In this case, it is our legitimate interest to be able to act against you in the event of legal violations such as insults or propaganda. We need the email address in order to contact you if your comment is found to be unlawful by third parties.

5. Webanalytics/Marketing

5.1 Google Analytics

We use the analysis tool Google Analytics on our website. The provider of this analysis tool is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". Cookies are small text files that are stored on your computer and thus enable an analysis of your use of the website. This analysis data is usually transferred to a Google server in the USA and stored there.

The legal basis for data processing is Art. 6 Para. 1 lit. f of the General Data Protection Regulation (GDPR), which enables us to process the data in the event of a legitimate interest. In this case, our legitimate interest is to analyse user behaviour in order to optimize our offer and our advertising.

We would like to point out that the code "gat._anonymizeIp ();" has been added to Google Analytics on this website in order to guarantee anonymous collection of IP addresses (so-called IP masking). By activating IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. The full IP address is only transferred to a Google server in the USA and abbreviated there in exceptional cases. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage.

The IP address transmitted by your internet browser as part of Google Analytics will not be merged with other Google data.

You can prevent cookies from being saved by setting your internet browser accordingly. However, we would like to expressly point out that in this case you may not be able to use all functions of this website to their full extent.

You can prevent data collection by Google Analytics by clicking the link below and downloading the tool offered there:

https://tools.google.com/dlpage/gaoptout?hl=en-GB

You can also prevent data collection by Google Analytics by clicking on the following link, which sets an opt-out cookie that prevents the collection of your data on future visits to this website: Deactivate Google Analytics.

You can also find more information about Google's privacy policy at the following Internet address: https://support.google.com/analytics/answer/6004245?hl=en

6. Social media/Plugins

Facebook, Google+, Instagram and Twitter using the "2-click solution."

So-called social plugins ("plugins") from the social networks Facebook, Instagram and Google+ and the microblogging service Twitter are used on our website. These services are provided by Facebook Inc., Google Inc., Instagram LLC. and Twitter Inc. are offered ("Providers").

Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins/?locale=en_US

Google+ is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). An overview of the plugins from Google and their appearance can be found here: https://www.google.com/permissions/logos-trademarks/

Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). An overview of the Twitter buttons and their appearance can be found here: https://about.twitter.com/de/resources/buttons

Instagram is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). An overview of the Instagram plugins and their appearance can be found here: https://about.instagram.com/blog/announcements/introducing-instagram-badges-for-webpage-embedding

In order to increase the protection of your data when visiting our website, the plugins are integrated into the page using the so-called "2-click solution". This integration ensures that when you visit a page on our website that contains such plugins, no connection is yet established with the servers of Facebook, Google, Instagram and Twitter. Your browser will only establish a direct connection to the servers of Google, Facebook, Instagram or Twitter if you activate the plugins and thereby give your consent to the data transfer. The content of the respective plugin is then transmitted directly from the provider to your browser and integrated into the page. By integrating the plugins, the providers receive the information that your browser has called up the corresponding page of our website, even if you do not have a profile with the relevant provider or are not currently logged in. This information (including your IP address) is transmitted from your browser directly to a server of the respective provider in the USA and stored there.

If you are logged into one of the social networks, the providers can assign your visit to our website to your profile on Facebook or Google+. If you interact with the plugins, for example by clicking the "Like" - the "+1" - or the "Tweet" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network or on your Twitter account and displayed there to your contacts.

The purpose and scope of the data collection and the further processing and use of the data by the provider as well as your rights and setting options for protecting your privacy can be found in the data protection regulations of the provider.

Facebook data protection notice: https://www.facebook.com/policy.php

Data protection information from Google: http://www.google.com/intl/de/+/policy/+1button.html

Instagram data protection notice: https://www.facebook.com/help/instagram/155833707900388

Data protection information from Twitter: https://twitter.com/en/privacy

If you do not want Facebook, Google, Instagram or Twitter to assign the data collected via our website directly to your profile in the respective service, you must log out of the corresponding service before activating the plugins.

7. How is the data saved?

The transmission of personal data is only encrypted via an SSL or TLS connection. This applies both to messages via our contact function and to data about your order and payment transactions. With encryption, your sensitive personal data cannot be intercepted and viewed by unauthorized third parties. You can recognize an encrypted connection by the fact that the address line of the browser begins with "https: //" (and the lock symbol in the browser line).

The data that is stored in the systems of our website are secured by passwords and cannot be viewed by unauthorized third parties.

The transmission of data on the Internet, for example when sending an email, is not 100% secure and in some cases can have security gaps.

8. How long will the personal data be saved?

How long your personal data is stored with us sometimes depends on the respective statutory retention period. For messages via our contact function and/or via our email address, your data will be deleted after completion of the processing, unless there is a legitimate interest in us to continue the storage.

The retention periods under commercial and tax law are 10 years from the end of the calendar year in which the data was collected. After the deadlines have expired, the data will be deleted on a regular basis, unless these are still required to initiate or fulfil the contract or there is a legitimate interest in us to continue storing the data.

9. What rights do you have towards the person responsible for data processing?

Below we list the rights that you have under the General Data Protection Regulation (GDPR) against the person responsible for data processing. The person responsible is named under point 1 of this data protection declaration. If personal data is processed by you, you are "data subject" within the meaning of the General Data Protection Regulation (GDPR).

9.1 Your right to information in accordance with Art. 15 General Data Protection Regulation (GDPR)

You can request information from the person responsible for data processing as to whether your personal data is being processed. If there is such processing, you can also request information about the following purposes for which these personal data are processed; the categories of personal data that are processed; the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed; the planned storage period of the personal data concerning you or, if no specific information is available, the criteria for determining the storage period; the existence of a right to correction or deletion of your personal data, the existence of a right to restriction of processing by the data controller or a right to object to this processing; the existence of a right to lodge a complaint with a supervisory authority (the state data protection officer of the state in which we are based is responsible - you will find addresses and links here); all available information about the origin of the data if the personal data is not collected from the data subject (i.e. you); the existence of automated decision-making, including profiling, in accordance with Art. 22 Para. 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you can request the appropriate guarantees in accordance with Art. 46 General Data Protection Regulation (GDPR) to be informed in connection with the transmission.

9.2 Your right to rectification in accordance with Art. 16 General Data Protection Regulation (GDPR)

You have the right to the person responsible for data processing to correct and/or complete them immediately, provided that the processed personal data relating to you is incorrect or incomplete.

9.3 Your right to deletion in accordance with Art. 17 General Data Protection Regulation (GDPR)

You can request that the person responsible for data processing delete your personal data immediately, and he is obliged to delete this personal data immediately if one of the reasons from Art. 17 (1) GDPR applies.

The right to erasure does not exist if the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims.

9.4 Your right to restriction of processing in accordance with Art. 18 General Data Protection Regulation (GDPR)

You have the right to request that the person responsible for data processing restrict processing, as long as the accuracy of the personal data relating to you is checked, you refuse to delete the personal data and instead request the restriction of the use of personal data, the person responsible for the personal data is no longer required for the purposes of processing, but you need it to assert, exercise or defend legal claims, or if you have objected to processing in accordance with Article 21 (1) GDPR and it is not yet certain whether the controller's legitimate reasons outweigh your reasons.

9.5 Your right to be informed in accordance with Art. 19 General Data Protection Regulation (GDPR)

If you have the right to correction, deletion or restriction of processing against the person responsible for data processing, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, be it because this proves to be impossible or involves a disproportionate effort.

You have the right vis-à-vis the person responsible to be informed about these recipients.

9.6 Your right to data portability in accordance with Art. 20 General Data Protection Regulation (GDPR)

You have the right to receive the personal data concerning you, which you have provided to the person responsible for data processing, in a structured, common and machine-readable format, and you have the right to transfer this data to another person responsible without hindrance from the person responsible for data processing, to which the personal data has been made available, insofar as this is technically feasible. This right to data portability does not apply to processing that is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible for data processing.

The right to data portability must not affect the rights and freedoms of others.

9.7 Your right to withdraw consent declarations in accordance with Art. 77 General Data Protection Regulation (GDPR)

You have the right to revoke your data protection declaration of consent at any time with future effect. In the event of a revocation, the data concerned will be deleted immediately, if there is no legal basis for further processing that does not require consent. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

9.8 The automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effect on you or similarly significantly affects you. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and the person responsible, is permitted by law of the European Union or the Member States to which the person responsible is subject and this law takes appropriate measures to safeguard your rights and Freedoms as well as your legitimate interests or with your express consent.

However, these decisions may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With regard to the cases mentioned in 6.8.1 and 6.8.3, the person responsible for data processing takes appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the person responsible, and to present your own Viewpoint and contested the decision.

9.9 Your right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged violation, if you believe that the processing of your personal data violates the GDPR.

The supervisory authority to which the complaint was submitted will inform the complainant about the status and results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 General Data Protection Regulation (GDPR).

+++++++++++++++++++++++++++++

9.10 RIGHT TO OBJECT

You have the right, for reasons that arise from your particular situation, at any time against the processing of your personal data, which is based on Art. 6 Para. 1 lit. e or f GDPR, to lodge an objection with future effect; this also applies to profiling based on these provisions.

The person responsible for data processing will no longer process your personal data unless he can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected to such direct advertising.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

Regardless of Directive 2002/58 / EC, you have the option of exercising your right to object in connection with the use of information society services using automated procedures that use technical specifications.

+++++++++++++++++++++++++++++

Blomberg, February 26, 2020