Privacy policy

1) Introduction and contact details of the controller

1.1 We are delighted that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our website and when you contact us through our online offerings. Personal data are all data with which you can be personally identified.

1.2 The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

ABSORA GmbH
Paradiesstraße 210
12526 Berlin
Germany

Phone: +49 30 4397369
Email: info@absora.eco

The controller, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data collection when you visit our website

2.1 Server log files

When you use our website purely for information purposes, technically necessary data that your browser transmits to the web server are processed. These may include:

Website visited and content accessed
Date and time of access
Amount of data transferred
Source or referrer from which you reached our website
Browser used
Operating system used
IP address
Technical information about the request and for error diagnosis

The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website in a secure, stable and functional manner.

The data are stored only for as long as is necessary for the stated purposes, unless statutory retention obligations or legitimate reasons for longer storage exist.

2.2 SSL or TLS encryption

For security reasons and to protect the transmission of personal data and other confidential content, this website uses SSL or TLS encryption.

You can recognise an encrypted connection by the character string “https://” in the address bar of your browser.

3) Hosting and technical provision of the website

3.1 Vercel

For the hosting and technical provision of our website, we use services of Vercel Inc., USA (“Vercel”).

In the course of providing our website, in particular IP addresses, the date and time of access, requested content, browser information and other technically necessary connection data may be processed.

Server-side functions of our website, such as forwarding form enquiries (section 5.2), handing over your shopping cart to the checkout (section 3.3) and logging your cookie choice (section 4.3), run on Vercel servers in Frankfurt am Main (Germany).

The processing is based on Art. 6(1)(f) GDPR to safeguard our legitimate interest in providing our website in a secure, stable and high-performance manner.

Insofar as Vercel processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

When Vercel is used, personal data may also be processed outside the European Union or the European Economic Area. Such data transfers take place in compliance with the legal requirements of Art. 44 et seq. GDPR.

For data transfers to the USA, Vercel has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission (Art. 45 GDPR), ensures compliance with the European level of data protection.

Further information on data protection at Vercel is available at:

https://vercel.com/legal/privacy-policy

3.2 Content delivery network and technical infrastructure

Content delivery networks (CDN) and other technical infrastructure services may be used to provide our website quickly and reliably.

For this purpose, we use the globally distributed server network of our hosting provider Vercel (section 3.1). Requests from Europe are generally answered by servers in the European Union.

In this context, technically necessary connection data, in particular IP addresses and information about the content accessed, may be processed.

The processing is based on Art. 6(1)(f) GDPR to safeguard our legitimate interest in the security, stability and performance of our website.

Insofar as external service providers are used for this purpose, the processing takes place in compliance with data protection requirements.

3.3 Online shop and checkout (Shopify)

For our online shop, in particular the management of our product range and the ordering and payment process (checkout), we use the system of Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”). Data may also be processed by Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

Our server retrieves product information, prices and availability directly from Shopify; no data about you are transmitted to Shopify in the process. Your shopping cart is initially stored only in your browser (section 4.2). When you proceed to checkout, our server transmits only the items and quantities in your shopping cart to Shopify and redirects you to the checkout at ecommerce.absora.eco. The data you enter there for your order are processed on Shopify's servers (section 7). The privacy information available there additionally applies to the checkout pages.

The processing is based on Art. 6(1)(b) GDPR insofar as it serves to carry out your order or pre-contractual measures, and otherwise on Art. 6(1)(f) GDPR to safeguard our legitimate interest in the efficient and secure operation of our online shop. Insofar as Shopify processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

For data transfers to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission (Art. 45 GDPR).

4) Cookies and consent management

4.1 General information

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device and enable certain functions of our website.

We distinguish between technically necessary technologies and analytics and marketing technologies.

Technically necessary technologies serve in particular the secure provision and basic functionality of our website.

Insofar as personal data are processed when technically necessary technologies are used, this is done on the basis of the relevant provisions of the GDPR, in particular Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR. Storing information on your device or accessing it is subject to the requirements of Section 25 TDDDG.

Analytics and marketing technologies whose use requires consent are only activated after your prior express consent. In these cases, the processing is based on Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

Using our cookie consent tool, you can decide whether you wish to consent to the use of technologies that require consent.

You can change or withdraw any consent you have given at any time with effect for the future via the cookie settings of our website.

Not accepting optional cookies generally does not prevent you from using the basic functions of our website. However, individual additional functions may be restricted.

Further information on the analytics and marketing services we use can be found in the following sections of this privacy policy.

4.2 Technically necessary storage

Similar technologies include, in particular, your browser's local storage (“Local Storage” and “Session Storage”). Without your consent, pursuant to Section 25(2) No. 2 TDDDG we use only the following entries, which are strictly necessary for the functions of our website that you have expressly requested:

“absora-cart:v1” (Local Storage): contents of your shopping cart (items and quantities); stored until you empty the shopping cart or delete the website data in your browser
“absora-checkout-started:v1” (Local Storage): note that you have opened the checkout, so that the purchased items are removed from your shopping cart after successful payment; deleted as soon as the status of the order is known
“absora-pending-checkout” (cookie): identifier of the shopping cart handed over to Shopify, with items and quantities, for the same purpose; storage period 6 days
“absora-consent” (Local Storage): your choice in the cookie banner, when you made it and your consent ID (section 4.3); storage period 12 months
“abl_preloaded” (Session Storage): note that the intro animation has already been shown; deleted when you close the browser window

Insofar as personal data are processed in this context, this is done on the basis of Art. 6(1)(b) GDPR insofar as it serves to carry out an order, and otherwise on the basis of Art. 6(1)(f) GDPR to safeguard our legitimate interest in providing the functions you have requested. Your cookie choice is stored on the basis of Art. 6(1)(c) GDPR so that we can respect your decision on every further page view, as required by law.

4.3 Cookie banner, cookie settings and proof of your consent

Services that store or read information on your device without this being strictly necessary are only used with your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR. These are Google Analytics (section 8.4), the LinkedIn Insight Tag (section 8.5) and YouTube videos (section 8.8).

We ask for your consent on your first visit via a cookie banner, separately for the categories “Statistics” (Google Analytics), “Marketing” (LinkedIn Insight Tag) and “External media” (YouTube videos). There you can accept all optional services, reject them all or select them individually under “Settings”. No services that require consent are loaded before you decide. Your consent is voluntary; without it, you can use our website without restriction – you then load YouTube videos individually with a click (section 8.8). You can withdraw your consent or change your choice at any time with effect for the future by clicking “Cookie settings” in the page footer. We ask you again after 12 months or when the services we use change.

To be able to prove your consent (Art. 7(1) GDPR), we additionally log every choice you make in the cookie banner on our server. We store only a randomly generated consent ID, which you can view in the cookie settings, your choice for each category, the type of choice (all accepted, all rejected or individual), the date and time, the version and language of the banner and the version of our website, which identifies the banner text that was displayed. We do not store your IP address or any information about your browser. The processing is based on Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR. The entries are deleted automatically two years after your last choice.

For storage, we use a database of Upstash, Inc., USA, located in Frankfurt am Main (Germany), which we obtain through our hosting provider Vercel (section 3.1). The processing is based on a data processing agreement pursuant to Art. 28 GDPR. For data transfers to the USA, Upstash has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission (Art. 45 GDPR), ensures compliance with the European level of data protection.

4.4 Browser settings

You can also set your browser so that you are informed when cookies are set, allow cookies only in individual cases or exclude them in general, and delete stored cookies and website data. Please note that without the technically necessary storage, the shopping cart in particular will not work.

5) Contacting us

5.1 Google Calendar

To provide an online appointment booking function, we use, insofar as this function is offered, services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Data may also be processed by Google LLC, USA.

For the purpose of arranging appointments, in particular first and last name, email address and, where applicable, a telephone number and other information for organising the appointment may be processed.

Where the requirements are met, the processing is based on Art. 6(1)(b) GDPR for the implementation of pre-contractual measures or on Art. 6(1)(f) GDPR to safeguard our legitimate interest in efficient appointment organisation.

The data are deleted as soon as they are no longer required for organising the appointment and no statutory retention obligations prevent this.

Further information is available at:

https://policies.google.com/privacy

5.2 Contact via contact form or email

If you contact us via a contact form or by email, we process the personal data you transmit exclusively to the extent necessary to handle and answer your enquiry.

This may include in particular your name, your email address, your company, your telephone number and the messages and project information you transmit.

On our website, we offer a contact form for consultation enquiries, a form for rental enquiries for our SONOCAT measuring device and a withdrawal form. Mandatory fields are your name, your email address and your message, and on the withdrawal form your order number instead of the message; without this information we cannot process your enquiry. All other information (such as company, telephone number or industry) is voluntary. Your details are transmitted to us by email (section 5.4). After a consultation or rental enquiry, we send you an automatic confirmation of receipt to the email address you provided. To protect against misuse, your IP address is also processed briefly in our server's memory when you submit a form in order to limit the number of enquiries; it is not stored permanently. This is done on the basis of Art. 6(1)(f) GDPR to safeguard our legitimate interest in preventing misuse.

The processing is based on Art. 6(1)(f) GDPR to safeguard our legitimate interest in handling incoming enquiries.

Where the requirements are met and your enquiry is aimed at the initiation or performance of a contractual relationship with you, the processing is based on Art. 6(1)(b) GDPR.

Your data are deleted as soon as they are no longer required to handle your enquiry and no statutory retention obligations prevent this.

5.3 Contact via LinkedIn Lead Gen Forms

We use LinkedIn Lead Gen Forms to give prospective customers the opportunity to send enquiries about our products, technologies and services directly via LinkedIn.

The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

When you submit a LinkedIn Lead Gen Form, we receive the personal data you transmit. This may include in particular the following information:

First and last name
Business email address
Company
Job title
Telephone number, if requested
Information about your technical enquiry or your project

We use these data to handle your enquiry, to contact you and to assess possible technical solutions and potential business cooperation.

The processing is based on Art. 6(1)(f) GDPR to safeguard our legitimate interest in handling business enquiries. Where the requirements are met, the processing may also be based on Art. 6(1)(b) GDPR.

Your data will only be used to send an email newsletter if separate, valid consent has been given for this.

The transmitted data are deleted as soon as they are no longer required for the stated purposes and no statutory retention obligations prevent this.

LinkedIn also processes personal data under its own responsibility. Further information can be found in LinkedIn's privacy policy:

https://www.linkedin.com/legal/privacy-policy

5.4 Google Workspace

For sending and receiving emails, including the enquiries submitted via our forms and the confirmations of receipt, we use Google Workspace, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Data may also be processed by Google LLC, USA.

The processing is based on Art. 6(1)(f) GDPR to safeguard our legitimate interest in reliable and secure email communication. Insofar as Google processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

For data transfers to the USA, Google has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission (Art. 45 GDPR), ensures compliance with the European level of data protection.

6) Use of customer data for direct marketing

6.1 Subscribing to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our products, services and offers.

The only mandatory information for sending the newsletter is your email address. Further information is voluntary and may be used to address you personally.

We use the double opt-in procedure for sending the newsletter. After subscribing, you will receive an email with a confirmation link. Your subscription only becomes effective once you have clicked this link.

Your data are processed on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

To prove your consent, the IP address and the date and time of subscription and confirmation may be stored.

You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link in the newsletter or by sending us a message.

After you unsubscribe, your data will be deleted from the newsletter distribution list unless statutory retention obligations or other permissible reasons for further storage exist.

7) Data processing for order handling

7.1 General information on order handling

Insofar as this is necessary for the performance of a contract, we process personal data for order handling, delivery and payment processing pursuant to Art. 6(1)(b) GDPR.

This may include in particular name, billing and delivery address, contact details, order information and payment information.

Insofar as necessary for the performance of the contract, personal data are transmitted to commissioned shipping companies, payment service providers and other service providers involved in order handling.

If we are required by law to inform you about updates to products, we process the contact details required for this on the basis of Art. 6(1)(c) GDPR.

7.2 Post & DHL shipping

We use services of Post & DHL to prepare and carry out shipping.

Insofar as this is necessary for delivery, we transmit personal data, in particular name and delivery address, to the responsible shipping service provider.

The processing is based on Art. 6(1)(b) GDPR for the performance of the purchase contract.

Data are only passed on insofar as this is necessary for carrying out the shipment.

7.3 Shopify Payments

To process online payments, we use Shopify Payments, a payment service of Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland.

In the course of payment processing, in particular the following data may be processed:

Name
Billing address
Payment information
Transaction data
Order information

Insofar as necessary for payment processing, these data are processed and transmitted on the basis of Art. 6(1)(b) GDPR.

The data are processed exclusively to the extent necessary for payment processing and for compliance with legal obligations.

Further information on data protection at Shopify is available at:

https://www.shopify.com/legal/privacy

8) Website functionalities, analytics and marketing

8.1 Judge.me

Insofar as customer reviews via Judge.me are embedded on our website, we use services of Judge.me Ltd., United Kingdom.

When such content is displayed, technical information, including the IP address and browser information, may be transmitted to the provider.

The processing is based on the relevant data protection provisions. Insofar as consent is required for the embedding, the processing only takes place after this consent has been given.

Further information can be found in the provider's privacy information.

8.2 Google Customer Reviews

Insofar as we use the Google Customer Reviews programme, we work with Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

As part of this programme, customers may be asked after a purchase whether they would like to take part in a review of their purchasing experience.

If you expressly consent, your email address may be transmitted to Google so that Google can send you a corresponding review request.

The processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future.

Further information is available at:

https://business.safety.google/intl/de/privacy/

8.3 n8n

Insofar as we use n8n to automate and synchronise internal workflows, we use services of n8n GmbH, Novalisstraße 10, 10115 Berlin, Germany, or a correspondingly configured technical infrastructure of our own.

In the course of these processes, personal data may be processed insofar as this is necessary for the respective function.

The processing is based on the legal basis applicable to the respective processing operation, in particular Art. 6(1)(b) or (f) GDPR.

Insofar as external service providers process personal data on our behalf, this is done in compliance with the requirements of Art. 28 GDPR.

8.4 Google Analytics 4

Our website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Data may also be processed by Google LLC, USA.

Google Analytics enables us to evaluate the use of our website statistically and to improve our online offering.

In particular, the following information may be processed:

Pages accessed
Duration and frequency of website visits
Interactions with website content
Technical information about browser and device
Approximate geographical origin
Source of website visits
Events and conversions

Google Analytics may use cookies and similar technologies to evaluate the use of our website.

To recognise your browser, Google Analytics sets the cookies “_ga” (distinguishing visitors) and “_ga_<ID>” (storing the session state), each with a storage period of 2 years. The usage data collected are automatically deleted by Google after 14 months at the latest.

We use Google Analytics in a data-minimising way: the script is only loaded after your consent in the “Statistics” category of the cookie banner (section 4.3), the “Google Signals” function and ad personalisation are deactivated, and Google's Consent Mode excludes any storage and use of the data for advertising purposes.

Insofar as consent is required for this, it is used exclusively after your prior express consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

You can withdraw your consent at any time with effect for the future via the cookie settings of our website. Google Analytics is then deactivated immediately, and the cookies “_ga” and “_ga_<ID>” are deleted.

For the processing of IP addresses, Google Analytics 4 provides technical measures intended to ensure that IP addresses are not permanently logged or stored. Nevertheless, the IP address may be processed in the course of the technical transmission.

Insofar as Google processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

The use of Google Analytics may involve the processing of personal data outside the European Union or the European Economic Area. In this case, the legal requirements of Art. 44 et seq. GDPR are observed. For data transfers to the USA, Google has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission (Art. 45 GDPR), ensures compliance with the European level of data protection.

Further information is available at:

https://policies.google.com/privacy

8.5 LinkedIn Insight Tag

Our website uses the LinkedIn Insight Tag, a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

Data may also be processed by LinkedIn Corporation, USA.

The LinkedIn Insight Tag allows us to analyse the effectiveness of our advertising campaigns on LinkedIn and to understand which interactions users carry out on our website after contact with an advertisement.

The service may also be used to build target audiences for advertising measures, insofar as the corresponding functions are activated.

In addition, we receive aggregated, anonymised statistics from LinkedIn on the professional background of our visitors (e.g. industry or job function), which do not allow any conclusions to be drawn about individual persons.

In particular, the following data may be processed:

IP address
Browser and device information
Pages accessed
Information about website interactions
Information about advertising campaigns and conversions

The LinkedIn Insight Tag may use cookies and similar technologies.

On our website, these are the cookies “li_fat_id” (storage period 30 days) and “li_giant” (storage period 7 days). In addition, LinkedIn sets cookies on linkedin.com (including “bcookie”, “lidc”, “li_sugr”, “UserMatchHistory”, “AnalyticsSyncHistory”, “lms_ads” and “lms_analytics”) with storage periods between 24 hours and 1 year. The LinkedIn Insight Tag is only loaded after you have consented to the “Marketing” category in the cookie banner (section 4.3).

Insofar as consent is required for this, the processing takes place exclusively after your prior express consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

You can withdraw your consent at any time with effect for the future via the cookie settings of our website. We then delete the cookies “li_fat_id” and “li_giant” and reload the page so that the LinkedIn Insight Tag no longer runs. You can delete LinkedIn's cookies on linkedin.com via your browser settings.

In the course of use, personal data may also be processed outside the European Union or the European Economic Area. Such data transfers take place in compliance with the legal requirements of Art. 44 et seq. GDPR. For data transfers to the USA, LinkedIn Corporation has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission (Art. 45 GDPR), ensures compliance with the European level of data protection.

Further information is available at:

https://www.linkedin.com/legal/privacy-policy

8.6 Google Tag Manager

Our website uses Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used for the technical management and integration of website tags, in particular for analytics and marketing services.

Google Tag Manager itself is not used to create independent user profiles. However, technical data may be processed when it is provided. Services integrated via Google Tag Manager may process personal data according to their respective function.

Insofar as analytics or marketing services that require consent are integrated via Google Tag Manager, they are only activated once the required consent has been given.

Further information on the processing of personal data by the integrated services can be found in the corresponding sections of this privacy policy.

Further information about Google is available at:

https://policies.google.com/privacy

8.7 Vercel Web Analytics

For the statistical evaluation of page views, we also use Vercel Web Analytics, a service of our hosting provider Vercel (section 3.1).

Vercel Web Analytics does not set cookies and does not store any information on your device. For each page view, only the time, the page accessed, the referring website, your approximate location (country, region, city), operating system, browser and device type are recorded. To be able to count visitors, a hash value is generated from your request and discarded after 24 hours. We only receive aggregated statistics that do not allow any conclusions to be drawn about individual persons.

The processing is based on Art. 6(1)(f) GDPR to safeguard our legitimate interest in designing and improving our website in line with demand. The information on data processing and data transfers to the USA in section 3.1 applies accordingly.

8.8 YouTube videos

We embed videos from the YouTube platform on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Data may also be processed by Google LLC, USA.

When the page is called up, only a preview image stored on our server is displayed, and no connection to YouTube is established. The video is only loaded when you click on the preview image, and then in YouTube's privacy-enhanced mode (youtube-nocookie.com). If you have consented to the “External media” category in the cookie banner (section 4.3), it plays immediately. Otherwise, we first inform you about the data transfer, and the video is only loaded when you then click “Load video” (two-click solution).

In this process, in particular your IP address, the address of our website and technical information about your browser are transmitted to Google. YouTube may also store or read information on your device, for example in your browser's local storage and IndexedDB (e.g. “ytidb::LAST_RESULT_ENTRY_KEY” and “YtIdbMeta”), to enable playback, compile usage statistics and prevent misuse. These entries remain until you delete them in your browser. If you are logged into a Google account at the same time, Google may assign the call to your account.

The processing is based on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Consent given in the cookie banner is valid for 12 months; you can withdraw it at any time with effect for the future by clicking “Cookie settings” in the page footer – a video that has already loaded is then removed immediately. Consent given via “Load video” applies only to the respective page view and is not stored; you can withdraw it by leaving or reloading the page.

Further information on data protection at Google and YouTube is available at:

https://policies.google.com/privacy

9) Rights of data subjects

9.1 Rights of data subjects

Under the applicable data protection regulations, you have in particular the following rights, subject to the respective statutory requirements:

Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to notification pursuant to Art. 19 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to withdraw consent given pursuant to Art. 7(3) GDPR
Right to object pursuant to Art. 21 GDPR
Right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR

9.2 Right to object

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THIS PURPOSE.

AFTER SUCH AN OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING.

10) Duration of storage of personal data

The duration of storage of personal data depends on the respective legal basis, the purpose of the processing and any statutory retention periods that may apply.

Where processing is based on your consent pursuant to Art. 6(1)(a) GDPR, we generally store your data for as long as is necessary for the respective purpose or until you withdraw your consent, unless there is another legal basis for further processing.

Where processing is based on Art. 6(1)(b) GDPR, personal data are deleted as soon as they are no longer required for the performance or initiation of the contractual relationship and no statutory retention obligations prevent this.

Where processing is based on Art. 6(1)(f) GDPR, personal data are deleted as soon as the legitimate interests in the processing cease to apply or an effective objection has been made, unless compelling legitimate grounds or legal obligations justify further processing.

Personal data processed for the purpose of direct marketing are no longer used for this purpose after an effective objection.

Unless more specific information on the storage period is given in the individual sections of this privacy policy, we delete personal data as soon as they are no longer required for the respective processing purposes and no statutory retention obligations prevent this.

Last updated: 29/10/2026