cosnova GmbH (referred to below as “we”) appreciates your interest in our company and our products. It is important to us that you feel safe when you visit the websites operated by us (referred to below as: “website”), also in terms of the protection of your personal data.
Please click on the following links to go directly to the corresponding topics.
The controller as defined in the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection legislation is:
Am Limespark 2
Telephone: +49 6196 76156-0
Fax: +49 6196 76156-1298
(b) The controller’s data protection officer is:
When you use the website for information purposes only (i.e., when you do not send us information in any other way), we generally only collect the personal data that your browser sends to our server. We collect the following data that are technically necessary in order to display our website in the version and language that are appropriate for you, to ensure stability and security, and to create general reports about the use of our website (the legal basis is Art. 6 para. 1 S. 1 lit. f of the GDPR):
Date and time of the request
Content of the request (specific page)
Website from which the request originates
The above data will be deleted promptly once it is no longer required for the above purposes, and no later than 30 days after we have collected it.
If you provide us with further personal data, such as in the context of a registration, contact form, survey, competition or for the execution of a contract, we will use these data for the purposes specified, for the purpose of customer administration, and, where necessary, for the purpose of processing and invoicing any business transactions, in each case to the extent required for the given purpose.
If you use our digital testers, we determine your approximate location (to an accuracy of approx. 50km) by means of an IP address that has been anonymised by shortening it and if you scan the QR code, we determine which version of our point of sale you are facing. This data is used exclusively for statistical purposes and is not combined with other data.
If you contact us by e-mail (e.g., at the address listed above), or other means (e.g. Messenger), the personal data transmitted with your e-mail message will be stored. The data will not be shared with third parties. The data will be processed exclusively and for purposes of processing the conversation.
The legal basis for the processing of data transmitted in the course of sending a message are Art. 6 para. 1 S. 1 lit.1 b and lit. f of the GDPR. This data will be used solely for processing the contact request; this also includes our necessary legitimate interest in processing the data within the meaning of Art. 6 para. 1 S. 1 lit. f of the GDPR. The data will be deleted as soon as it is no longer required for the purpose for which it was collected, which is the case when the respective conversation with the user has ended. The conversation ends when it is clear from the circumstances that the matter in question has been conclusively clarified.
In addition to the data mentioned above, cookies are stored on your computer and comparable technologies are implemented when you use our website. Cookies are small text files that are stored on your hard drive via the browser you are using and provide the entity that sets the cookie (in this case, us) with certain information. Cookies cannot be used to run programs or transmit viruses to your computer. They serve the purpose of making the Internet offer more user-friendly and effective as a whole.
The vast majority of cookies are only set with your consent (Art. 6 para. 1 S 1 lit. a of the GDPR. For other cookies, the legal basis is our legitimate interests (Art. 6 para. 1 S 1 lit. f of the GDPR). Our cookie banner informs you which cookies fall into which category.
This website uses the following types of cookies and their scope and function are explained below:
Transient cookies. Transient cookies are automatically deleted when you close your browser. In particular, these include session cookies. They store what is known as a session ID, which allows various requests from your browser to be allocated to the respective session. This way, your computer will automatically be recognised the next time you visit our website. Session cookies are deleted when you log out or close your browser. This type of cookie can be used, for example, to store the contents of your shopping cart in an online shop or your log-in status.
Persistent cookies. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies via the security settings of your browser at any time.
(b) Browser Settings
You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Stored cookies can be deleted in the system settings of your browser. Please note that this may prevent you from being able to use all functionalities of this website.
(c) List of cookies
(d) Revoking cookies
You will find a small cookie icon at the bottom left-hand side of our website that allows you to change your cookie settings at any time.
(a) Sharing with service providers
For certain data processing activities, we sometimes employ service providers who are bound by our instructions and who, without exception, process the data on our behalf and as instructed by us (processing by contract).
(b) Disclosure to public authorities, injured parties and for legal prosecution
If it is required for the clarification of an illegal or fraudulent use of our website or for legal prosecution, personal data will be forwarded to the prosecution authorities and, where applicable, to injured third parties. However, this only occurs if there are indications of illegal or fraudulent behaviour.
The legal basis for this is Art. 6 para. 1 S. lit. b, Art. 6 para. 1 S. 1 lit. c, Art. 6 para. 1 S. 1 lit. d and Art. 6 para. 1 S 1 lit. d and Art. 6 para. 1 S. 1 lit. f of the GDPR.
(c) Disclosure in the context of company transactions
In the course of the further development of our business, the structure of our company may change due to changes in the legal form, or due to the establishment, purchase or sale of subsidiaries, parts of the company or components. In case of such transactions, the customer information may be shared with the acquirer or legal successor, together with the part of the business that is to be transferred.
(d) Disclosure to recipients outside the EU
It is possible that we might disclose personal data to countries outside the EU (“third countries”). Any disclosure of data to a recipient in a third country only takes place in accordance with the applicable data protection laws. Insofar as the European Commission has not determined that an adequate level of protection exists in a third country, we will provide the appropriate safeguards to ensure that your data is adequately protected. This can be done in particular by entering into data processing agreements that contain standard EU data protection clauses and provide appropriate safeguards in accordance with the decision of the European Commission (available at: ). Please contact us for further details, such as the text of the EU Standard Contractual Clauses.
The legal basis for the processing is Art. 6 para. 1 S. 1 lit. c in conjunction with Art. 6 para. 3 S. 1 lit. a in conjunction with Art. 7 para. 1 of the GDPR.
On our website, we use the services of Qualtrics LLC, 333 W. River Park Drive, Provo UT 84604, USA to conduct customer, product, and brand satisfaction surveys. We conduct satisfaction surveys to continuously develop and improve our products and services. When you participate in a satisfaction survey, only so-called “Iog data” (date and time stamp/information about your browser and your browser settings/information about your device/usage data) is processed. Participation in a satisfaction survey is voluntary. If you do not want to participate in a satisfaction survey, you can simply close the survey pop-up. The legal basis for this data processing is your consent, Art. 6 para.1 lit. a of the GDPR.
Our website may also contain offers from third parties. If you click on such an offer, we will transfer data to the respective provider to the extent required (e.g., the information that you found this offer on our site and, if applicable, additional information that you have already provided for this purpose on our website).
(b) Social Plug-Ins
When we use so-called “social plug-ins” from social networks like Meta Platforms Ireland Limited or Twitter on our website, we integrate them as follows:
When you visit our website, the social plug-ins are disabled, meaning there is no transmission of any data to the operators of these networks. If you wish to use one of the networks, click on the respective social plug-in in order to establish a direct connection with the server of the respective network.
If you have a user account with the network and are logged in when you enable the social plug-in, the network can correlate your visit to our website with your user account. If you want to prevent this, please log out of the network before enabling the social plug-in.
When you click on the link to an offer or enable a social plug-in, personal data may be transferred to providers in countries that are not part of the European Economic Area and that, in the view of the European Union (“EU”), do not guarantee an “adequate level of protection” that meets EU standards for the processing of personal data. Please bear this in mind before clicking on a link or enabling a social plug-in and thereby initiating a transfer of your data.
The social plug-in remains enabled until you disable it or delete your cookies.
(c) YouTube Videos
We have integrated YouTube videos into our online offer on the basis of our legitimate interests (i.e. interest in optimising our online offer within the meaning of Art. 6 Para. 1 S. lit. f of the GDPR), which are stored on and can be played directly from our website. These are all included in the “extended data protection mode”, which means that no data about you as a user are transferred to YouTube unless you play the videos. The data specified in the following paragraph will only be transmitted when you play the videos. We have no influence on this data transfer.
When you visit the website, YouTube receives your IP address and the information that you have visited the relevant sub-page of our website. This occurs irrespective of whether you are logged in to a user account provided by YouTube or whether no such user account exists. If you are logged in to Google, your personal data will be correlated directly with your account. If you do not wish a correlation to be established with your YouTube profile, you must log out before activating the button. YouTube stores your personal data as user profiles and uses it for the purpose of advertising, market research, and/or the demand-oriented design of its website. Such an analysis is performed, in particular (even for users who are not logged in), in order to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles and must contact YouTube in order to exercise this right.
(d) Google Maps
On our websites, we use the offer of Google Maps on the basis of our legitimate interests (i.e. interest in the optimisation of our online offer as defined in Art. 6 Para. 1 S. lit. f of the GDPR). This allows us to display interactive maps directly on the website and enables you to use the map function conveniently, e.g. when using our storefinder.
When you visit the website, Google receives your IP address and the information that you have visited the relevant sub-page of our website. This occurs irrespective of whether you are logged in to a user account provided by Google or whether no such user account exists. If you are logged in to Google, your personal data will be correlated directly with your account. If you do not wish a correlation to be established with your Google profile, you must log out before activating the button. Google stores your data as user profiles and uses it for the purpose of advertising, market research, and/or the demand-oriented design of its website. Such an analysis is performed, in particular (even for users who are not logged in), in order to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles and must contact Google in order to exercise this right.
(e) Use of Google reCAPTCHA
On this website, we also use the reCAPTCHA function by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This feature is designed to protect our website against attacks based on state-of-the-art technology, in particular to distinguish whether an entry is made by a natural person or is fraudulently by means of machine and automated processing. The service includes processing the web request, IP address, browser type, browser language, date and time of your request, and one or several cookies that may identify your browser. The processing is carried out in accordance with Art. 6 para. 1 lit. f of the GDPR on the basis of our legitimate interest in determining individual responsibility on the Internet, avoiding abuse and spam and protecting our website against attacks. As part of the use of Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC. in the USA and the other companies of the Google Group worldwide.
(f) Social plug-ins by Meta Platforms Ireland Limited and Google Ireland Limited
Our websites may use social plug-ins from Meta Platforms Ireland Limited (Ireland).
When you visit a page that contains such a plug-in and it is activated, your browser connects to the provider of the plug-in and the content is loaded from these pages. Your visit to this website may therefore be tracked by Meta Platforms Ireland Limited and Google Ireland Limited, even if you do not actively use the social plug-in feature. If you have a Facebook or Google account, you can use such a social plug-in to share information with your friends. We have no influence on the content of the plug-ins and the transmission of information.
Meta Platforms Ireland Limited provides detailed information on the scope, nature, purpose, and further processing of your data at . Here, you can also find further information about your rights and settings options for protecting your privacy.
(h) Commerce Connector
We wish to tailor the content of our website as closely as possible to your interests and thus improve our service for you. We use so-called tracking technologies to identify usage preferences and particularly popular areas of the website.
We use so-called (re)targeting technologies so that we can tailor our online marketing (e.g., banner advertising) more specifically to your usage-based interests. When you visit other websites that collaborate with the providers of these (re)targeting technologies, these are read and used in order to provide you with information that is as interest-related as possible.
When the above technologies are used, cookies on our website and (in the case of retargeting) on third-party websites record your interest in our products and services. This involves the use of random identifiers (so-called cookie IDs) and similar technologies, which we do not connect with your name, address, or similar information even when this information is known to us (e.g., from an existing contractual relationship), unless you have consented to this.
(b) Google Analytics (basic version)
In the exceptional cases in which personal data is transferred to the USA, we have agreed so-called standard contractual clauses with Google Ireland Limited. The legal basis for the use of Google Analytics is Art. 6 para. 1 S.1 lit. f of the GDPR.
(c) Google Marketing
We only use Google Marketing products (e.g., Search Ad and Display & Video 360) with your express consent, which you can declare by clicking on the “Agree” button in the website’s cookie banner. We store your consent in a cookie on your device so that you are not asked for your consent every time you visit our website, and we also store it on our servers, together with the IP address and time, for legal reasons; we will erase this information or restrict its processing if you withdraw your consent. Google uses personal data to personalise advertisements, and cookies can be used for both personalised and non-personalised advertising. Further information is available at .
(d) Content Square
This website uses ContentSquare S.A.S. technologies to collect interaction data of the website visitor in pseudonymised form for marketing purposes and to optimise the user-friendliness of the website by using cookies. The information generated by the cookie about your use of the website is usually transferred to a ContentSquare server and stored there. The IP address transmitted by your browser is not merged with other data of ContentSquare. ContentSquare guarantees the shortening of your IP address.
You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all functions of our services to their full extent.
Tealium Audience Stream. Within our website, we use “Tealium Audience Stream”, a service provided by Tealium Inc., which has a registered office at Sovereign House, Second Floor, Vastern Road, Reading, RG1 8BT, United Kingdom (Tealium); this service processes data from which user profiles are created using pseudonyms which can follow a person across different devices. For example, the following information is collected: ads viewed and clicked, articles, advertising, number of visitors, subject of the page, etc.
Tealium iQ (Tag Management System). This website uses a Tag Management System (TMS), a service provided by Tealium Inc., which has a registered office at Sovereign House, Second Floor, Vastern Road, Reading, RG1 8BT, United Kingdom (Tealium), in order to dynamically adjust parts of the website. The TMS is necessary for the provision of our services and therefore cannot be disabled. The cookie has a duration of 12 months. The legal basis is a legitimate interest under Art. 6 para. 1 S. 1 lit. f of the GDPR, namely the pursuit of our business purposes.
Within our online offer, the so-called "Pinterest Tag" (individual code snippet) of Pinterest Inc., 635 High Street, Palo Alto, CA, USA, ("Pinterest") is integrated into our website on the basis of Art. 6 para. 1 S.1 lit. f of the GDPR, due to our legitimate interest in the analysis and optimisation of our online offer as well as the demand-oriented use of our Pinterest campaigns. If a Pinterest user sees or clicks on the advertisement, further actions and target groups that have shown interest are tracked. By using this information, we can ensure that Pinterest advertisements are only displayed to Pinterest users who have already shown an interest in our services, and that they match the user's potential interest. This data helps us to measure the conversion of each campaign. This data is used for statistical purposes and helps us to optimise the campaigns.
The data collected does not allow any conclusions about the identity of the respective user. Data is collected on the device information, the operating system used, the IP address of the device used, the time of the call, the type and content of the campaign, the reaction to the respective campaign as well as device IDs consisting of individual features of the device. This enables us to recognise your device on our website.
(g) The Trade Desk
We use the retargeting technology of The UK Trade Desk Ltd. 10th Floor, 1 Bartholomew Close London EC1A 7BL United Kingdom (“The Trade Desk”). This feature serves to present interest-based ads to visitors to the website as part of The Trade Desk’s advertising network. If consent has been given through the cookie banner, when you visit our website, your browser will store cookies and similar technologies that allow you to be recognised when you visit websites that are part of The Trade Desk’s advertising network. These pages may then show you ads related to content you have previously viewed on websites using The Trade Desk’s retargeting technology. According to its own information, The Trade Desk collects pseudonymized data in this process.
If you still do not want to use this retargeting feature, you can disable it. Please note that the deactivation must be done separately for each browser or device using one of the following methods: (i) via the AdChoices icon in the ad banner, (ii) via , (iii) directly at The Trade Desk at , (iv) for mobile apps: and . On our website, you will find a small cookie icon at the bottom left that allows you to change your cookie settings at any time.
(h) Dynamic Yield
We use the services of Dynamic Yield Ltd. (Highlands House, Basingstoke Road, Spencers Wood, Reading, Berkshire, England, RG7 1NT). With the Dynamic Yield recommendation tool, our web offer is optimised based on your consent in accordance with Art. 6 para. 1 lit. a of the GDPR in order to turn your visit to the website into a personalised experience through customised recommendations and content. We use the page content you view to recommend equivalent or thematically related products or other content relevant to you.
The consent given with regard to the use of Dynamic Yield can be revoked here at any time by deselecting the category "Personalisation cookies". Revoke here: Cookie settings. In addition, you can find more information about the tracking technology used via the following link: .
In particular, we evaluate the data for the following purposes:
Conducting performance or profitability comparisons of our websites, count visitors, track awareness of, for example, online advertising posted on the website, partner and affiliated programs, rich media content or special campaigns, measure the areas of the website that are particularly attractive to you, evaluate the origin of online users to optimise our offer locally
(i) Interactive Digital Assistant (Zoovu)
This website offers an Interactive Digital Assistant. This service is provided by Zoovu (Germany) GmbH, Skalitzer Str. 104, 10997 Berlin, Germany. We use this tool on our own responsibility and have entered into a data protection agreement with Zoovu that our customers’ data may only be processed on the basis of our instructions, must not be shared with third parties and must be adequately protected technically.
*When you use the service and if you have given us permission to do so, e.g. by giving us your consent via the tracking banner, we collect the following usage data:
Usage Data: (Services of the Digital Assistant, answering questions, navigation, product recommendations, purchases)
Browser/Operating System/Device Used
The usage data collected (using a cookie ID) is used to improve the Digital Assistant experience, for technical purposes and to improve the service. Your IP address is not collected. It is therefore not possible to determine the identity of the user from the ID used.
If you have not given us permission to do so, e.g. by refusing consent via the tracking banner, only those cookies will be set that are necessary to provide the service, but there will be no tracking of usage as described above.
In addition, we use services provided by Bazaarvoice Inc., Austin, United States to provide evaluation functions and to evaluate the findings. The evaluation is voluntary and can be done by providing a nickname. You do not have to provide your name. We also use other features offered by Bazaarvoice: To research social media content that is tagged with our content, websites and social media presences, to check whether certain content is worth sharing there, to contact post authors, and to upload content and to integrate it in our social media presences. Our service provider, Bazaarvoice, may also process your personal data in the United States. We have entered into standard data protection clauses with Bazaarvoice in this regard. For more information about Bazaarvoice’s processing of your data, please see the Privacy Notice at .
We use the tracking technology of Linkster GmbH, Colonnaden 5, 20354 Hamburg on this page to measure, visualise and invoice insights in partnerships and advertising channels.
If you have provided your consent via the cookie banner, cookies are set in your browser, which are read out in the event of a transaction. Information submitted includes the URL of the website, on which an advertising material is placed (referrer URL), the browser identifier (user agent) of your device (including information about the device type and operating system), the IP address of the device (this IP address is hashed by us before storage), HTTP header (data packet automatically transmitted by your browser with various technical information), the time of the request and, if previously stored on the device, the cookie with its content. If necessary, the stored touch points can be compiled into a sequence chain (user journey). In the case of an action request, the order number and the cart value of your order are usually also transmitted and saved by us. In addition, the following values can be transmitted and saved: Your account number, new customer information, age and gender and the information you provided in a customer survey.
The legal basis for our processing is Art. 6 para. 1 S. 1 lit. a of the GDPR.
(m) Facebook Business Tools and Facebook Ads Manager, sharing of event data
We use Facebook Business Tools and the Facebook Ads Manager, which are provided by Meta Platforms Ireland Limited (Ireland). These allow us to define when and where ads should be placed on Facebook, Instagram and on websites and to track how successful our ad campaigns are. In this context, we disclose so-called "event data" for the targeting of our advertising campaigns with the consent you have granted via our cookie banner, Article 6 para. 1 S. 1 lit. f of the GDPR. These data are shared in hashed form only. They include, in particular, your e-mail address, postcode, and city.
(n) Meta Platforms Ireland Limited Retargeting (Website Custom Audience)
A Meta Platforms Ireland Limited pixel is integrated into this website (website custom audience pixel). If you have given your consent, this pixel collects information about the use of this website (e.g. information about items viewed) by us and Meta Platforms Ireland Limited in joint responsibility and transmits it to Meta Platforms Ireland Limited. This information may be attributed to you personally with the help of other information about you that Meta Platforms Ireland Limited has stored based on an account you own on the social network “Facebook”, for example. The information collected via the pixel can be used to display interest-related advertising for our offers in your Facebook account (retargeting). The information collected via the pixel may also be aggregated by Meta Platforms Ireland Limited and the aggregated information may be used by Meta Platforms Ireland Limited for its own advertising purposes and for the advertising purposes of third parties. In this way, Meta Platforms Ireland Limited can determine certain interests from your browsing behaviour on this website, for example, and may also use this information to promote third-party offers. Meta Platforms Ireland Limited may also combine the information collected via the pixel with other information that Meta Platforms Ireland Limited has collected about you through other websites and/or in connection with your use of the social network “Facebook” so that a profile about you can be stored at Meta. This profile may be used for advertising purposes. Meta Platforms Ireland Limited is solely responsible for the permanent storage and the displayed further processing of tracking data collected via the website custom audience pixel used on this website. The legal basis for this data processing is Art. 6 para. 1 S. 1 lit. f of the GDPR.
For more information on data protection at Meta Platforms Ireland Limited, please click here: . Here you will also find information about how to assert your rights (e.g. right to erasure) with regard to Meta Platforms Ireland Limited. You can withdraw consent to the transfer of the data to Meta Platforms Ireland Limited by using the pixel on this website at .
This website incorporates functions of the Twitter service. These functions are provided by Twitter International Limited (Ireland) ("Twitter"). By using Twitter and the "Retweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter during this process. For this purpose, your Internet browser establishes a direct connection to the Twitter servers and transmits data to Twitter. We would like to point out that we have no knowledge of the content of the transmitted data or its use by Twitter.
We use a pixel by the provider TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, together with TikTok Information Technologies UK Limited, Aviation House, 125 Kingsway Holborn, London, WC2B 6NH, United Kingdom) on this website. This is a code that we have implemented on our website. With the help of this code, providing that you consent, a connection to the TikTok servers will be established when you visit our website in order to track your behaviour on our website. Personal data such as the IP address and other information such as the device ID, device type and operating system can also be transferred to TikTok. TikTok uses e-mail or other login or device information to identify users of our website and to assign their actions to a TikTok user account.
TikTok uses this data to display advertising to its users in a targeted and personalised manner and to create interest-based user profiles. The data collected will only be used by us as part of the measurement of the effectiveness of advertising placements.
In principle, your data will be processed within the EU or the EEA. A corresponding data protection agreement has been concluded with TikTok for this purpose. If personal data are transferred to countries outside the EU or the EEA, TikTok sets the so-called Standard Contractual Clauses unless the personal data is transferred to countries for which an adequacy decision has been adopted by the European Commission.
(q) TikTok Business Tools and TikTok Ad Manager, sharing event data
We also use the TikTok Business Tools and the TikTok Ads Manager of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. These allow us to define when and where ads should be placed and to track how successful our ad campaigns are. To this end and with the consent you provide via our cookie banner, Art. 6 para. 1 S. 1 lit. f of the GDPR, we share so-called “event data” for the targeting of our ad campaigns. These data are shared in hashed form only. They include, in particular, your e-mail address, postcode, and city.
We also maintain corporate presences on social networks such as Facebook and Instagram, to which we provide links on our website. When you access the relevant networks and platforms, the terms and conditions as well as the data processing guidelines of the respective operators apply, over which we have no influence. When you do so, data may also be processed outside the European Union. Meta Platforms Ireland Limited and we are “joint controllers” for certain processing at Facebook. Our privacy notices on the respective social network will provide you with more information.
The data protection notices in the respective networks apply to the activities of cosnova corporate influencers.
(a) Right of access to information
You have the right to request information at any time about the personal data we process to the extent that they concern you and to obtain this information upon request at any time within the scope of Art. 15 of the GDPR. To do so, you can send a request by post or e-mail to the contact address provided.
(b) Right to rectification of incorrect data
You have the right to demand that we rectify, without undue delay, the personal data that concerns you in accordance with Art. 16 of the GDPR if it is incorrect. Please contact us at the address provided to do so.
(c) Right to erasure
You have the right, under the conditions described in Art. 17 of the GDPR, to demand that we erase the personal data concerning you. These conditions provide in particular for a right of erasure if the personal data is no longer required for the purposes for which it was collected or otherwise processed, and in cases of unlawful processing, withdrawal or the existence of an obligation to erase the data under European Union law or the law of the member state to which we are subject. To exercise your right of erasure, please contact us at the address provided.
(d) Right to restriction of processing
You have the right to demand that we restrict our processing in accordance with Art. 18 of the GDPR. This right exists in particular if the accuracy of the personal data is disputed between the user and us, for the period of time required to verify its accuracy, and if the user requests restricted processing instead of erasure if there is an existing right to erasure; also if the data is no longer required for the purposes we pursue, but the user needs it to assert, exercise or defend legal claims, and if the successful exercise of an objection is still disputed between us and the user. To exercise your right to restrict processing, please contact us at the address provided.
(e) Right to data portability
You have the right to obtain from us the personal data that concern you and that you provided to us and to receive these data in a structured, commonly used, and machine-readable format in accordance with Art. 20 of the GDPR. To exercise your right to data portability, please contact us at the address provided.
(f) Right to object
You have the right to object at any time on grounds arising from your particular situation to the processing of personal data relating to you which is carried out, amongst other things, on the basis of Art. 6 para. 1 S. 1 lit. e or lit. f of the GDPR in accordance with Art. 21 of the GDPR. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms or the processing serves the establishment, exercise, or defence of legal claims.
(g) Right to withdraw consent (in the event of consent having been provided)
You have the right to withdraw consent in accordance with Art. 7 para. 3 of the GDPR with effect for the future. Withdrawal of consent does not affect the lawfulness of the processing carried out until its withdrawal on the basis of the consent.
(h) Right to lodge a complaint
You also have the right to address complaints to the supervisory authorities for data protection. Our competent supervisory authority is:
Der Hessische Datenschutzbeauftragte (The Hessian Data Protection Commissioner)
Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany
P.O. Box 31 63, 65021 Wiesbaden, Germany
Telephone: +49 611 14080
Fax: +49 611 1408 – 900