Privacy Policy

Privacy policy of ENREGO Energy GmbH 

Thank you for your interest in our company and our services.

We take the protection of your personal data, for example name and address, seriously. Therefore, we ensure through technical and organizational measures that the legal provisions on data protection, in particular those of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) are observed. In the following, we inform you about your rights and the handling of your personal data when visiting our website.

I. Definitions

First, we will give you an overview of the terms used in this privacy policy:

(1) ‘Personal data’ means any information relating to an identified or identifiable natural person, such as names, addresses, telephone numbers or e-mail addresses, which is an expression of the identity of an individual.

(2) ‘Processing’ means any manual or automated operation related to personal data, such as collection, recording, organization, filing, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or making available, alignment, combination, restriction, erasure or destruction.

(3) ‘Profiling’ means any automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.

(4) ‘Controller’ means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

(5) ‘Processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

(6) ‘Recipient’ means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party.

(7) ‘Third party’ means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who are authorized to process the personal data under the direct responsibility of the controller or the processor.

II. Controller/ Data protection officer

ENREGO Energy GmbH
Peterstraße 20A
26655 Westerstede
Germany
E-mail address: info@enrego.de
Tel: +49 (0) 172 189 8497

Hereafter also referred to as “we”.

You can still reach our data protection officer at dataprotection@enrego.de or our postal address with the addition of “the data protection officer.”

III. Processing of personal data

1. Informative visit of our website

In principle, you can visit our website without telling us who you are. We only collect the following data from you: Your IP address, the name of your Internet service provider, the website from which you visit us and information about when you visited our website. We only store your IP address shortened by the last octet. The collection of this data only serves the statistical evaluation of our website and the continuous improvement of our homepage as well as to ensure IT security and protection against unauthorized use. We undertake this data processing on the basis of our legitimate interests (Art. 6 para. 1 p. 1 lit. f) GDPR). This includes in particular ensuring a smooth connection of the website, ensuring a comfortable use of our website as well as the evaluation of system security and stability.

When you request information about us and/or planned or current products, we also ask for your country of origin (Germany or abroad) and your status as an interested party in our products and services. The purpose of collecting this data is to provide you with only those information, product profiles and price information that correspond to your type. Legal basis for the data processing is the implementation of pre-contractual measures pursuant to Art. 6 para. 1 p. 1 lit. b) GDPR.

2. Contact form

You have the possibility to contact us via several contact / message forms provided on the website. When using the form, the name, company, e-mail address, telephone number, the input of a request are required. We need this information to know who the request is from and to be able to respond to it. In addition, you can specify the preferred time of the callback as well as compose another message to us. The legal basis for the processing of your data is your consent, which can be revoked informally at any time, Art. 6 para. 1 p. 1 lit. a) GDPR or the implementation of pre-contractual measures in response to your request, Art. 6 para. 1 p. 1 lit. b) GDPR.

3. Recall

If you would like us to contact you by telephone, you can use several input options on our website to make an appointment to call us back. For this purpose, we process the following personal data: Name, company, e-mail address, telephone number and the input of a request. We need this information to be able to address you personally as well as to contact you by telephone. In addition, you can specify the preferred time of the callback as well as compose another message to us. We need your e-mail address to send you an appointment confirmation for an agreed callback appointment. The legal basis for the processing of your data is your consent, which can be revoked informally at any time, Art. 6 para. 1 p. 1 lit. a) GDPR or the implementation of pre-contractual measures in response to your request, Art. 6 para. 1 p. 1 lit. b) GDPR.

4. Newsletter

In the following, we inform you about the dispatch and the contents of our newsletters. Our newsletters are aimed at various target groups, for example investors and interested parties. With our newsletter we inform you about news in the company and our (future) projects, among other things.

By providing your e-mail address, you have the opportunity to receive regular information about our new products by e-mail.

For the registrations to our newsletters, we use the so-called double opt-in procedure. This means that after you have registered, you will receive a message to the e-mail address you have provided in which you are asked to confirm that you wish to receive the respective newsletter. If you do not confirm your registration, your details will be blocked and deleted within 5 days. In addition, we store your IP addresses used in each case and times of registration and confirmation. This serves the purpose of proving your registration and, if necessary, to be able to clarify a possible misuse of your data.

You can stop receiving our newsletter at any time by using the unsubscribe option in each newsletter and will then automatically no longer be contacted. By doing so, you also revoke your consent to receive the newsletter. Your data that was processed in the context of the newsletter dispatch will then be deleted.

Mandatory information for sending our newsletter is your e-mail address for the purpose of sending the newsletter. In addition, you can also provide us with your title/name/first name/title. The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. a) GDPR.

We use the services of Mailchimp to send out the newsletter.

5. Receiving your personal data in any other way

If we receive your personal data in any other way (e.g. at trade fairs by handing over contact data or recording your data when you are at our business premises), we process your personal data after we have received your consent to process your personal data. In these cases, the legal basis is Art. 6 para. 1 p. 1 lit. a) GDPR. Otherwise, processing of your personal data is permissible insofar as this is necessary to carry out pre-contractual measures and fulfill a contract, cf. Art. Art. 6 para. 1 p. 1 lit. b) GDPR. Finally, we process your personal data pursuant to Art. 6 para. 1 p. 1 lit. f) GDPR insofar as this is necessary to protect our legitimate interests (e.g. to ensure our internal access rules when visiting our business premises), unless your interests or fundamental rights and freedoms requiring the protection of personal data override these.

 

IV. Processing purposes and legal bases

Your personal data will only be collected and processed by us if you have consented to the processing (Art. 6 para. 1 p. 1 lit. a) GDPR), the data processing is necessary due to legal requirements (Art. 6 para. 1 p. 1 lit. c) GDPR), serves the initiation or settlement of a contractual relationship (Art. 6 para. 1 p. 1 lit. b) GDPR) or the data processing is based on our legitimate interests (Art. 6 para. 1 p. 1 lit. f) GDPR).

The respective processing purposes can be found in the individual processing activities under III. of this privacy statement.

 

V. Disclosure of data to third parties and third-party providers

We will not disclose your personal data to third parties unless you consent to the disclosure of your personal data (Art. 6 para. 1 p. 1 lit. a) GDPR), there is a legal obligation to disclose (Art. 6 para. 1 p. 1 lit. c) GDPR, this serves the fulfillment of a contract or implementation of pre-contractual measures, which are carried out at your request (Art. 6 para. 1 p. 1 lit. b) GDPR) or we can invoke legitimate interests in the economic and effective operation of our business operations with regard to this transfer (Art. 6 para. 1 p. 1 lit. f) GDPR).

 

VI. Processing and storage period of the personal data

We process and store your personal data as long as it is necessary for the purposes for which it was collected or otherwise processed, in particular as long as it is necessary for the fulfillment of our contractual and legal obligations. It should be noted that the business relationship may be a continuing obligation that is intended to last for several years.

In the case of data storage for the fulfillment of legal obligations, the following deadlines apply in particular:

  • according to §§ 257 para. 4 HGB, 147 para. 3 AO: 10 years for commercial books and accounting vouchers, beginning with the end of the calendar year in which the last entry was made in the commercial book;
  • according to §§ 257 para. 4 HGB, 147 para. 3 AO: 6 years for commercial letters beginning with the end of the calendar year in which the last entry was made in the commercial book;
  • pursuant to Section 8 (4) GWG: 5 years for records and other evidence relevant under money laundering law, beginning with the end of the calendar year in which the business relationship ends.
 

If you have applied to us, we will store your personal data for as long as is necessary for the decision on your application. Insofar as an employment relationship between you and us does not come about, we may also continue to store the personal data insofar as this is necessary for the defense against possible legal claims. In principle, the application documents are deleted six months after notification of the rejection decision, unless longer storage is necessary (e.g. because an employment relationship has come about or in the event of legal disputes).

 

VII. Your data protection rights

You have the following rights:

  • Request information about your personal data processed by us, Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling;
  • immediately demand the correction of incorrect or completion of your personal data stored by us, Art. 16 GDPR;
  • request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims, Art. 17 GDPR;
  • to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR, Art. 18 GDPR;
  • to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and to request the transfer to another controller, Art. 20 GDPR;
  • to revoke your consent once given to us at any time, Art. 7 para. 3 GDPR. This has the consequence that we may no longer continue the data processing based on this consent for the future;
  • in the event of an automated decision (profiling), the right to express one’s point of view and to challenge the decision, Art. 22 para. 3 GDPR;

complain to a supervisory authority, Art. 77 GDPR. For this purpose, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters. At our company headquarters, the Hamburg Commissioner for Data Protection and Freedom of Information is generally responsible.

 

VIII. Use of cookies

We use cookies on our Internet pages. Cookies are small text files that are placed on your terminal device and stored in your browser.

Some cookies are used to make our website and our offer as a whole more user-friendly, effective and secure – for example, to speed up navigation on our site. Access protection, in the areas that are not generally accessible, is also established via cookies. The legal basis for the use of these cookies is Art. 6 para. 1 p. 1 lit. f) GDPR. Among other things, we use so-called “session cookies”. Session cookies are temporary cookie files that are deleted as soon as you leave the website or expire automatically if you have been inactive for more than 15 minutes, i.e. have not done anything on our website. Session cookies are automatically deleted at the end of your visit to our website.

You have several options to block the use of cookies. In your browser settings, you can choose not to allow cookies, to allow cookies to be set only by trusted websites, or to accept cookies only from websites that are actually currently being visited. If you have set your browser to block all cookies, you may not be able to access certain areas of this website. Of course, you can use the basic information on our website without using cookies.

The use of cookies, which are used for range measurement and advertising purposes, only takes place if you have consented to the use of the cookies. The legal basis for the use of these cookies is Art. 6 para. 1 p. 1 lit. a) GDPR.

 

IX. Use of third-party tools

We process your data, among other things, to better place our offers on the market and to obtain information about the use of our website. For these purposes, we cooperate with various service providers to whom we transmit data. We inform you about these individual services in the following.

The legal basis for this data processing is your consent, which can be revoked at any time and informally, Art. 6 para. 1 p. 1 lit. a) GDPR. Your revocation only affects future data processing and does not affect the lawfulness of previous processing.

The appropriate level of data protection when using service providers and processors outside the European Union (EU/EEA) is ensured by compliance with Art. 44 et seq. GDPR. According to Art. 45 GDPR, personal data may be transferred to a third country (e.g., the USA) if the EU Commission has decided that the third country in question offers a level of data protection that complies with the GDPR. The European Commission signed the adequacy decision for the new data protection framework agreement between the U.S. and the European Union (EU) on July 10, 2023. The agreement, also known as the Data Privacy Framework, has thus entered into force. Through the adequacy decision of the European Commission, which has now entered into force pursuant to Article 45(3) of the GDPR, the Commission has confirmed that the U.S. has an adequate level of protection for personal data comparable to that of the EU. Against this background, the transatlantic data transfer between and us and our US service provider may be based on this adequacy decision. The prerequisite is that the US company in question is certified accordingly with the US Department of Commerce. Another legal basis for the transatlantic data transfer is the conclusion of the standard contractual clauses, published by the EU Commission on June 4, 2021 pursuant to Art. 46 para. 2 lit. c) GDPR and obtaining your consent for the transatlantic data transfer pursuant to Art. 49 para. 1 lit. a) GDPR.

1. Google analytics

We use the website analysis service Google Analytics on our website, a web analysis service of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 (“Google”). The legal basis for the use of the analysis tool is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

Google Analytics uses cookies that are stored on your computer and that enable an analysis of your use of the website. Cookies help us to determine the frequency of use and the number of users of our website, as well as to make our offers as comfortable and efficient as possible for you. The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. In doing so, pseudonymous usage profiles of the users can be created from the processed data. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. The information generated by the cookies about your use of our website will be shortened due to the activation of IP anonymization on our website, so that it is no longer possible to draw conclusions about your location. Google will not associate the stored part of your IP address with any other data held by Google.

2. Google ads

We use the marketing and remarketing services of Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04E5WS5, (“Google”). We use this service to better place our offers on the market.

This service is intended to enable us to display advertisements for and on our website in a more targeted manner in order to present you and other users only with ads that are potentially in your interest. If, for example, you or another user are shown a product ad for a product that you were interested in on other websites, this is referred to as “remarketing”. In order to make this possible, a code is executed directly by Google when our website and other websites on which Google Remarketing is integrated are called up. This code integrates so-called ad (re)marketing tags into the website. With their help, an individual cookie or comparable technology is placed on your end device.  This file records which websites you have visited and which content you were interested in or which offers you clicked on. In addition, some technical information about the browser and operating system, referring websites, visit time and other information about the use of the online offer are determined. If the user subsequently visits other websites, he can be shown ads tailored to his interests.

Your data will be processed by Google pseudonymously. This means that Google cannot assign the data directly to a specific person. This does not apply if you have expressly allowed Google to process the data without this pseudonymization. The legal basis for data processing is your explicit consent to data processing, Art. 6 para. 1 lit. a) GDPR.

For more information about Google’s use of data for marketing purposes, please visit the overview page: www.google.com/policies/technologies/ads, Google’s privacy policy is available at www.google.com/policies/privacy.

3. Google maps

Our websites use the map service Google Maps from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

Google Maps is deactivated as the default setting, so that no personal data is initially passed on to Google when you call up the page. Only by clicking on the map section and confirming a note again, you activate the map and give consent to data processing (Art. 6 para. 1 lit. a)  GDPR, § 25 para. 1 TTDSG). After activation, the content of Google Maps is transmitted directly to your browser and integrated into the website by it (so-called 2-click solution). Google Maps can be deactivated at any time by clicking on it again and the consent can thus be revoked.

When the map section is activated, the provider receives the information that you have accessed our website. This occurs regardless of whether you have set up a user account with Google and are logged in there. If you are logged in to Google with an existing user account while visiting our website, Google may also be able to associate your visit to our website with your user behavior. In addition, further cookies may be sent to your browser by Google. We would like to point out that we, as the provider of our websites, do not have precise knowledge of the content of the transmitted data and its use by Google, nor do we have the possibility to further restrict the transmission of data to Google and its partners. According to the information provided by Google, Google stores the data as user profiles and uses them for purposes of advertising, market research and / or tailored design of your web pages. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising.

The purpose and scope of the data collection and the further processing and use of the data including the deletion periods by Google as well as your rights in this regard and setting options for protecting your privacy can be found in the information provided by Google, e.g. the privacy policy at https://www.google.com/intl/de/policies/privacy/. We do not store any data ourselves from this processing.

4. Google Fonts

We use Google Fonts from Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA on our website. We have integrated the Google Fonts locally, i.e. on our web server – not on Google’s servers. This means that there is no connection to Google servers and therefore no data is transmitted or stored. The legal basis for the local use of Google Fonts is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR in an optimal presentation of our website.

 

X. Social media

We operate the following company presences in the social networks in order to be able to communicate with the customers, interested parties and users active there (hereinafter also jointly: visitors) and to inform them about our projects and services. You can find our corporate presences on the following social networks:

    • YouTube
    • Facebook
    • X (Twitter)
    • LinkedIn

We cannot trace which user data the social networks collect. We have no influence on the data processing that takes place for this purpose, cannot prevent it, and also do not gain access to the underlying data. We also do not have full access to your profile data. We can only see the public information of your profile. You decide on the specific public information in each case in your social network settings.

We receive anonymous statistics from the social networks (e.g. followers on the use and utilization of our company page. The legal basis for the transmission of your data within the respective social networks is your consent, which can be revoked at any time and informally, Art. 6 para. 1 p. 1 lit. a) GDPR. The legal basis for the use of statistical data is Art. 6 para. 1 p. 1 lit. f) GDPR.

We use these statistics, from which we cannot draw any conclusions about individual users, to constantly improve our online offering in the social networks and to better respond to visitors’ interests. We cannot link the statistical data with the profile data of our visitors.

We receive your personal data via the social networks if you actively communicate this to us via a personal message. We use your data (e.g. first name, last name, user name, e-mail address) to respond to your request. Your data will be stored until this purpose is fulfilled. The legal basis for processing in the case of an active approach by you, is your consent in the sense of Art. 6 para. 1 p. 1 lit. a) GDPR. If your message is in connection with a (pre-)contractual relationship with us, the legal basis for data processing is Art. 6 para. 1 p. 1 lit. b) GDPR.

The legal basis for data traffic to a third country is in accordance with Art. 44ff GDPR. The appropriate level of data protection when using service providers and processors outside the European Union (EU/EEA) is ensured by compliance with Art. 44 et seq. GDPR. According to Art. 45 GDPR, personal data may be transferred to a third country (e.g., the USA) if the EU Commission has decided that the third country in question offers a level of data protection that complies with the GDPR. The European Commission signed the adequacy decision for the new data protection framework agreement between the U.S. and the European Union (EU) on July 10, 2023. The agreement, also known as the Data Privacy Framework, has thus entered into force. Through the adequacy decision of the European Commission, which has now entered into force pursuant to Article 45(3) of the GDPR, the Commission has confirmed that the U.S. has an adequate level of protection for personal data comparable to that of the EU. Against this background, the transatlantic data transfer between and us and our US service provider may be based on this adequacy decision. The prerequisite is that the US company in question is certified accordingly with the US Department of Commerce. Another legal basis for the transatlantic data transfer is the conclusion of the standard contractual clauses, published by the EU Commission on June 4, 2021 pursuant to Art. 46 para. 2 lit. c) GDPR and obtaining your consent for the transatlantic data transfer pursuant to Art. 49 para. 1 lit. a) GDPR.

In the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. This is because only they have access to the complete information and data of the users.

Insofar as we receive personal data from you via a social network, this is processed under joint responsibility with the respective social network.

Information about the data collection and further processing by the respective social network can be found in the links below.

1. YouTube

We have integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television shows, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time you call up one of the individual pages of our website on which a YouTube component (YouTube video) has been integrated, the Internet browser on your information technology system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. Within the scope of this technical procedure, YouTube and Google receive knowledge about which specific subpage of our website you are visiting. If you are logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website you are visiting when you call up a subpage that contains a YouTube video. This information is collected by YouTube and Google and assigned to your respective YouTube account. YouTube and Google always receive information via the YouTube component that you have visited our website if you are simultaneously logged into YouTube at the time of calling up our website; this takes place regardless of whether a YouTube video is clicked or not. If the data subject does not want this information to be transmitted to YouTube and Google, he or she can prevent the transmission by logging out of his or her YouTube account before accessing our website.

The privacy policy published by YouTube, which is available at https://www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.

The legal basis for data processing is your consent, Art. 6 para. 1 p. 1 lit. a) GDPR.

2. Facebook

Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland

In what way Facebook uses data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties, is not conclusively and clearly stated by Facebook and is not known to us.

When you access a Facebook page, the IP address assigned to your end device is transmitted to Facebook. According to Facebook, this IP address is anonymized (for IP addresses originating from Germany). Facebook also stores information about the end devices of its users, unless this function has been deactivated by you; this may allow Facebook to assign IP addresses to individual users.

If you are currently logged in to Facebook as a user, a cookie with your Facebook ID is stored on your end device. This enables Facebook to track that you have visited this page and how you have used it. This also applies to all other Facebook pages. Via Facebook buttons embedded in websites, it is possible for Facebook to record your visits to these website pages and assign them to your Facebook profile. Based on this data, content or advertising can be offered tailored to you.

If you want to avoid this, you should log out of Facebook or disable the “stay logged in” feature, delete the cookies present on your device, and exit and restart your browser. In this way, Facebook will delete information through which you can be directly identified. This will allow you to use our Facebook page without revealing your Facebook identifier. When you access interactive features of the page (like, comment, share, message, etc.), a Facebook login screen will appear. After any login, you will again be recognizable to Facebook as a specific user.

For more information about interest-based advertising on Facebook and Facebook’s privacy policy, click here: For more information see: https://www.facebook.com/policy

3. X (Twitter)

Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland: For more information, please visit: https://twitter.com/de/privacy

4. LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA. For more information, please visit: https://www.linkedin.com/legal/privacy-policy

 

XI. Necessity of providing personal data

Within the scope of using the website and its functions, you must provide us with those personal data that are necessary for the respective use and/or that we are legally obligated to collect, Art. 13 para. 2 lit. e) GDPR. Without this data, it will generally not be possible to use the functions, request our services or contact us.

 

XII. Existence of automated decision making

As part of the use of our website, no fully automated decision-making (profiling) pursuant to Art. 22, Art. 13 para. 2 lit. f), Art. 14 para. 2 lit. g) GDPR takes place. Should we use these procedures in individual cases, we will inform you about this separately if this is required by law.

 

XIII. Amendment of the privacy policy

This data protection declaration has the status of September, 2023. Due to the further development of our website and offers or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy.

 

XIV. Information about your right to object according to Art. 21 GDPR

1. Right to object on a case-by-case basis

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 p. 1 lit. e) or f) GDPR; this also applies to profiling used on the basis of this provision within the meaning of Art. 4 para. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

2. Right to object to the processing of data for advertising purposes

In individual cases, we process your personal data for the purpose of direct marketing. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct advertising.

If you object to processing for these purposes, we will no longer process your personal data for these purposes.

3. Right to object to processing for scientific or historical research purposes or for statistical purposes.

You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for scientific or historical research purposes or for statistical research purposes pursuant to Article 89 para. 1 GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.