Privacy Statement

General Notice

This privacy statement explains in detail what happens to your personal data when you visit our website www.ecopv-eu.com. Personal data refers to all data that can be personally identifiable to you. When processing your data, we strictly comply with legal regulations, especially the General Data Protection Regulation (GDPR), and take great care to ensure that your access to our website is absolutely secure.

Responsible Authority

The data protection authority responsible for collecting and processing personal data on this website is:

Name: ECOPV-EU GmbH

Representative: Lin Huang, Managing Director

Street and house number: Frankfurter Str. 70-72

Postal code, city: 65760, Eschborn

Country: Germany

Email: info@ecopv-eu.com

Phone: +49 6196 5835357

 

Access Data (Server Log Files)

 

When you access our website, we automatically collect and store access data in the corresponding server log files, which are data that your browser automatically sends to us. This data includes:

  • The browser type and version of your personal computer
  • Referral URL (the source/referral from where you accessed our website)
  • Date and time of the server request
  • Your personal computer’s current IP address (possibly in anonymous form)
 

In general, we cannot identify individuals based on this data, nor do we intend to do so. The processing of such data is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR), aimed at maintaining our legitimate interests in website stability and functional improvement.

Cookies

To make your website visit more attractive and enable the use of specific functions, we use cookies. These are small text files stored on your terminal device. Cookies do not execute any programs on your computer or spread any viruses.

According to Article 6(1)(f) of the General Data Protection Regulation (GDPR), storing cookies for electronic communication or providing specific functions you require is considered lawful. Our interest in storing cookies to ensure technically error-free and optimized service provision is legitimate. As for other types of cookies (e.g., those used for analyzing your browsing behavior), they will be addressed separately in this privacy statement.

Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit ends. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit. You can configure your browser settings to notify you when cookies are being set, allow cookies only in specific cases, or reject all cookies and automatically delete them when you close your browser. Disabling cookies may limit the functionality of this website.

 

1. Network Analysis Tools and Advertising 

1.1 Google Analytics

Our website uses the web analytics service Google Analytics. The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses “cookies.” These are text files stored on your computer that allow us to analyze your use of our website.

Information generated by cookies about your use of our website is usually transmitted to and stored on Google’s servers in the United States. Your IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

The legal basis for processing your data is the consent you granted through the cookie consent tool, pursuant to Article 6(1)(a) of the GDPR.

a) Data Processing Agreement

We have concluded a data processing agreement with Google and fully comply with the strict requirements of German data protection authorities regarding the use of Google Analytics.

b) Data Retention Period

User and event data associated with cookies, user identifiers (e.g., User ID), or advertising identifiers (e.g., DoubleClick cookies, Android advertising ID) stored by Google will be anonymized or deleted after 14 months. For more information, please refer to the following link:

[https://support.google.com/analytics/answer/7667196?hl=en] (https://support.google.com/analytics/answer/7667196?hl=en)

c) Opt-Out of Data Collection

You can prevent the storage of cookies by adjusting your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to their full extent.

Additionally, you can opt-out of Google Analytics by downloading and installing the browser add-on available at the following link, which prevents Google Analytics from collecting data generated by cookies about your website usage (including your IP address) and processing this data by Google:

[https://tools.google.com/dlpage/gaoptout?hl=en](https://tools.google.com/dlpage/gaoptout?hl=en).

If you delete cookies on your computer, you will need to reset the opt-out cookie. You can find more information about how Google Analytics handles user data in Google’s privacy policy:

[https://support.google.com/analytics/answer/6004245?hl=en] (https://support.google.com/analytics/answer/6004245?hl=en).

For more information about privacy, you can also consult Google’s privacy policy:

[https://policies.google.com/privacy?hl=en&gl=en] (https://policies.google.com/privacy?hl=en&gl=en).

1.2 Google Tag Manager

Our website uses Google Tag Manager provided by Google. Google Tag Manager is a tool that allows marketers to manage website tags through one interface. The implementation tool is a domain without cookies and does not store personal data. The tool is responsible for triggering other tags that may collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, all tracking tags implemented through Google Tag Manager will remain deactivated.

1.3 Google Ads and Google Conversion Tracking

Our website uses Google Ads (formerly known as Google AdWords). Google Ads is an onlineadvertising program provided by Google.

Through Google Ads, we can utilize advertising to draw your attention to our content on external websites and determine the success of individual advertising campaigns. This helps us show you ads that are relevant to your interests, make our website more appealing to you, and optimize our advertising costs.

In Google Ads, we use conversion tracking. Ad materials are transmitted via Google’s “AdServer.” For this purpose, we use AdServer cookies, which require specific parameters measured by cookies, such as ad impressions or user clicks. When you click on ads placed by Google, a cookie for conversion tracking is set. Cookies are small text files stored on a user’s computer. These cookies expire after 30 days and are not used for personal identification. These cookies allow Google to recognize your browser. If you visit certain pages of our website before the cookie expires, Google and we can recognize that you clicked on a specific ad and were redirected to that page.

Each Google Ads client receives a different cookie. Therefore, these cookies cannot be tracked through the websites of Ads clients.

Typically, the following information is stored in cookies as analysis values: unique cookie ID, ad impressions per placement (frequency), last ad impression (related to post-view conversions), and opt-out information (mark indicating that the user does not wish to be contacted again). The information collected via conversion cookies is used to create conversion statistics for Ads clients who have opted for conversion tracking. Ads clients receive the total number of users who clicked on their ads and were redirected to pages with conversion tracking tags. However, they do not receive any information that can be used to personally identify users. If you do not want to participate in tracking, you can easily disable Google conversion tracking cookies through your internet browser’s user settings. Then you will not be included in conversion tracking statistics.

Data collected in aggregated form in your Google Account is based solely on your consent given or revoked within Google (pursuant to Article 6(1)(a) of the GDPR). If the data collection process is not merged with your Google Account (e.g., because you do not have a Google Account or you object to merging), the data collection is based on Article 6(1)(f) of the GDPR. The legitimate interest lies in the anonymous analysis of website visitors for advertising purposes to optimize our website and advertising.

For more information and privacy policy, please refer to Google’s privacy policy:

[https://policies.google.com/technologies/ads?hl=en] (https://policies.google.com/technologies/ads?hl=en).

1.4 Google Remarketing

Our website uses the Google Remarketing feature, combined with the cross-device capabilities of Google Ads and Google DoubleClick.

Google Remarketing analyzes your user behavior on our website, categorizes you into specific target groups for advertising, and displays matching ads to you when you visit other online platforms (i.e., remarketing or retargeting). The advertising target groups created by Google Remarketing can be linked to Google’s cross-device capabilities, allowing personalized advertising messages tailored to your browsing behavior on one device to be displayed on your other devices. If you have given consent, Google will associate your browsing and app history with your Google Account to achieve this. This way, you can see the same personalized advertising messages on any device where you’re signed in with your Google Account.

To support this feature, Google Analytics captures users’ Google authentication IDs and temporarily associates them with our Google Analytics data to define and create target groups for cross-device advertising.

You can permanently opt-out of cross-device remarketing/targeted advertising by disabling personalized advertising in your Google Account by clicking on this

link: [https://www.google.com/settings/ads/onweb/] (https://www.google.com/settings/ads/onweb/).

Data collected in aggregated form in your Google Account is based solely on your consent given or revoked within Google (pursuant to Article 6(1)(a) of the GDPR). If the data collection process is not merged with your Google Account (e.g., because you do not have a Google Account or you object to merging), the data collection is based on Article 6(1)(f) of the GDPR. The legitimate interest lies in the anonymous analysis of website visitors for advertising purposes.

For more information and privacy policy, please refer to Google’s privacy policy:

[https://policies.google.com/technologies/ads?hl=en] (https://policies.google.com/technologies/ads?hl=en).

1.5 Google AdSense

Our website uses Google AdSense, a service provided by Google for displaying advertisements. Google AdSense uses “cookies,” which are stored on your computer and used to display advertisements related to our content and your interests on our website. Google AdSense also uses web beacons (invisible images). Through these web beacons, we can analyze the traffic on our website for statistical purposes and use them for online marketing.

The information generated by cookies and web beacons about your use of the website (including your IP address) and the delivery of advertising will be transmitted to and stored by Google on servers in the United States. This information may be passed on to third parties by Google. However, Google will not associate your IP address with any other data stored by Google.

If you have given consent, personal data storage and processing will be based on Article 6(1)(a) ofthe GDPR. We also have a legitimate interest in analyzing user behavior for the purpose of optimizing our website and advertising, pursuant to Article 6(1)(f) of the GDPR.

Data collected in aggregated form in your Google Account is based solely on your consent given or revoked within Google (pursuant to Article 6(1)(a) of the GDPR).

You can prevent the installation of cookies by appropriately setting your browser software; however, please note that if you do this, you may not be able to fully utilize all the functions of this website. By using this website, you consent to Google processing the data collected about you in the manner and for the purposes described above.

1.6 Google Fonts

Our website uses Google Fonts (formerly known as Google Web Fonts), a service provided by Google.

Google Fonts allows us to use external fonts, specifically Google Fonts. When you visit our website, your web browser loads the required Google fonts into the browser cache. This is necessary so that your browser can display our text in a visually improved manner. If your browser does not support this feature, standard fonts from your computer will be used for display.

The integration of Google Fonts is achieved by calling servers, usually located on Google servers in the United States. Through this, information about which of our pages you have visited will be transmitted to the server. Additionally, Google will store the IP address of the browser on your device. We have no control over the scope and further use of the data collected and processed by Google through the use of Google Fonts.

We use Google Fonts for optimization purposes, especially to improve your user experience on our website and make its design more user-friendly.

This is our legitimate interest in processing the above data by third parties, in accordance with Article 6(1)(f) of the GDPR.

For more information about Google Fonts, please refer to [https://fonts.google.com/](https://fonts.google.com/) and

[https://developers.google.com/fonts/faq?hl=de-DE&csw=1](https://developers.google.com/fonts/faq?hl=de-DE&csw=1).

1.7 WordPress Stats

Our website uses WordPress statistical tools to analyze visitor traffic. WordPress statistics are a sub-feature of the Jetpack plugin. The provider is Automattic Inc., located at 60 29th Street #343, San Francisco, CA 94110-4929, United States.

WordPress statistics use cookies, which are stored on your computer and allow for the analysis of the usage of our website. Information about the usage of our online services generated by cookies will be stored on servers in the United States. The data processed can be used to create user profiles for analysis purposes only, and not for advertising purposes. Before being stored, your IP address will be anonymized.

The “WordPress statistics” cookie will remain on your device until you delete it. You can find more information in Automattic’s privacy policy

[https://automattic.com/privacy/](https://automattic.com/privacy/) and the Jetpack cookie explanation [https://jetpack.com/support/cookies/] (https://jetpack.com/support/cookies/).

Storing the “WordPress statistics” cookie and using this analysis tool is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in anonymously analyzing user behavior to optimize our website and advertising.

Social Media

1.1 Facebook Plugin (Like and Share Buttons)

Our website integrates plugins from the social network Facebook, provided by Facebook Inc., located at 1 Hacker Way, Menlo Park, California 94025, United States. You can recognize the Facebook plugin by the Facebook logo or the “Like” button on our website. An overview of Facebook plugins can be found here:

[https://developers.facebook.com/docs/plugins/?locale=de_DE](https://developers.facebook.com/docs/plugins/?locale=de_DE).

To enhance data protection when you visit our website, Facebook plugins are not integrated without restrictions but are only integrated using HTML links (the so-called “Shariff” solution). This integration ensures that no connection is established with Facebook servers when accessing pages containing such plugins. Only when you click the Facebook button will your browser open a new window to visit the Facebook page, where you can click the “Like” or “Share” button. For detailed information about the purposes and scope of data collection by Facebook, as well as the processing and use of data by Facebook, and your privacy rights and settings options, please refer to Facebook’s privacy policy:

[https://de-de.facebook.com/privacy/explanation] (https://de-de.facebook.com/privacy/explanation).

1.2 Google+ Plugin

Our website uses social plugins provided by Google for the Google+ social network. These plugins include the “+1” button with a white or colored background. An overview of Google plugins and their appearance can be found here [https://developers.google.com/+/plugins] (https://developers.google.com/+/plugins).

To enhance data protection when you visit our website, Google+ plugins are not integrated without restrictions but are only integrated using HTML links (the so-called “Shariff” solution). This integration ensures that no connection is established with Google servers when accessing pages containing such plugins. Only when you click the Google+ button will your browser open a new window to visit the Google page. For detailed information about the purposes and scope of data collection by Google, as well as the processing and use of data by Google, and your privacy rights and settings options, please refer to Google’s privacy policy: [https://policies.google.com/privacy?hl=de](https://policies.google.com/privacy?hl=de).

1.3 Instagram Plugin

Our website integrates features of the Instagram service provided by Instagram Inc., located at 1601 Willow Road, Menlo Park, CA 94025, United States. These plugins are identified in the form of the Instagram logo, such as “Instagram camera,” etc. An overview of Instagram plugins and their appearance can be found here:

[http://blog.instagram.com/post/36222022872/introducing-instagram-badges]  (http://blog.instagram.com/post/36222022872/introducing-instagram-badges).

To enhance data protection when you visit our website, Instagram plugins are not integrated without restrictions but are only integrated using HTML links (the so-called “Shariff” solution). This integration ensures that no connection is established with Instagram servers when accessing pages containing such plugins. Only when you click the Instagram button will your browser open a new window to visit the Instagram page. For detailed information about the purposes and scope of data collection by Instagram, as well as the processing and use of data by Instagram, and your privacy rights and settings options, please refer to Instagram’s privacy policy:

[https://instagram.com/about/legal/privacy/] (https://instagram.com/about/legal/privacy/).

1.4 LinkedIn Plugin

Our website uses features of the LinkedIn social network provided by LinkedIn Corporation, located at 2029 Stierlin Court, Mountain View, CA 94043, United States. To enhance data protection when you visit our website, LinkedIn plugins are not integrated without restrictions but are only integrated using HTML links (the so-called “Shariff” solution). This integration ensures that no connection is established with LinkedIn servers when accessing pages containing such plugins. Only when you click the LinkedIn button will your browser open a new window to visit the LinkedIn page. For detailed information about the purposes and scope of data collection by LinkedIn, as well as the processing and use of data by LinkedIn, and your privacy rights and settings options, please refer to LinkedIn’s privacy policy:

[https://www.linkedin.com/legal/privacy-policy] (https://www.linkedin.com/legal/privacy-policy).

1.5 YouTube Plugin

To integrate and display video content, our website uses plugins from YouTube, provided by YouTube, LLC, located at 901 Cherry Ave., San Bruno, CA 94066, United States. To enhance data protection when you visit our website, YouTube plugins are not integrated without restrictions but are only integrated using HTML links (the so-called “Shariff” solution). This integration ensures that no connection is established with YouTube servers when accessing pages containing such plugins. Only when you click the YouTube button will your browser open a new window to visit the YouTube page, where you can click the “Like” button. For detailed information about the purposes and scope of data collection by YouTube, as well as the processing and use of data by YouTube, and your privacy rights and settings options, please refer to YouTube’s privacy policy:

[https://www.google.de/intl/de/policies/privacy](https://www.google.de/intl/de/policies/privacy)

Google Maps

Our website utilizes the Google Maps service through the API (Application Programming Interface) provided by Google.

To ensure data protection on our website, Google Maps remains deactivated when you initially visit our website. A direct connection to Google servers is only established once you activate Google Maps yourself (consenting in accordance with Article 6(1)(a) of the General Data Protection Regulation). This prevents your data from being transferred to Google upon your first visit to our website.

Upon activation, Google Maps will save your IP address. Subsequently, it is usually transmitted to and stored on Google servers located in the United States. After activating Google Maps, the provider of this website has no influence on these data transfers.

For more information on how user data is handled, please refer to Google’s Privacy Policy:

[https://www.google.de/intl/de/policies/privacy/](https://www.google.de/intl/de/policies/privacy/).

Newsletter

If you have explicitly consented, we will regularly send our newsletter to your email address. To receive our newsletter, you need to provide us with your email address and subsequently verify it. No other data is collected or voluntarily provided. The use of this data is solely for the purpose of sending the newsletter.

The processing of data provided during newsletter registration is carried out based on your consent in accordance with Article 6(1)(a) of the General Data Protection Regulation. The consent granted by you can be revoked at any time. To revoke your consent, simply send an informal notification via email or unsubscribe using the “unsubscribe” link in the newsletter. Revocation will not affect the legality of data processing prior to revocation.

If you continue to provide subscription data to us after unsubscribing, the data entered at the time of unsubscribing will be deleted. If this data is submitted to us elsewhere in another manner, it will continue to remain with us.

Contact Forms

If you contact us via email or contact form, we will save the transmitted data, including your contact information, to process your request or for subsequent inquiries. We will not pass on this data to third parties without your consent.

The processing of data provided in contact forms is based solely on your consent (Article 6(1)(a) of the General Data Protection Regulation). The consent granted by you can be revoked at anytime. To revoke your consent, simply send an informal notification via email. Revocation will not affect the legality of data processing prior to revocation.

Data transmitted via contact forms will be stored with us until you request its deletion, revoke your consent for storage, or no longer require its storage. Mandatory legal provisions (particularly retention periods) remain unaffected.

User Accounts

If you create a user account, you agree to store your historical data, such as name, address, and email address, as well as your usage data (username, password). This allows you to log in to our website using your email address and personal password.

Data Usage and Transmission

The personal data you provide to us (such as your name and address or email address) will not be sold to third parties or marketed in any other way. Your personal data is only used for communication with you and solely for the purpose for which you provided the data to us. For payment processing, we transmit your payment data to the bank responsible for the payment.

Only data automatically collected when accessing our website is used for the purposes mentioned above. No other use of the data will be made. We ensure that your personal data will not be passed on to third parties unless we are legally obligated to do so or with your prior confirmed consent.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content (such as requests you send to us as the site operator), our website uses SSL or TLS encryption. You can recognize an encrypted connection by the change from “http://” to “https://” in the browser address bar, and by the lock icon in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

2 Storage Period

Personal data provided to us through our website will only be retained until the purpose for which it was entrusted to us is achieved. In cases where compliance with commercial and tax retention periods is required, the storage period for certain data may be up to 10 years.

3 Rights of the Data Subject

As the data subject for the processing of your personal data, you have the following rights vis-à-vis the data controller in accordance with legal provisions:

– The right to information- The right to rectification

– The right to erasure

– The right to restriction of processing

– The right to data portability

– The right to object

You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations.

3.1 Right to Withdraw Consent

Many data processing operations can only be carried out with your explicit consent.

If data processing is based on your consent, you have the right to withdraw your consent to data processing at any time, without affecting the lawfulness of processing prior to withdrawal. Data storage for settlement and accounting purposes is not affected by the withdrawal.

3.2 Right to Information

Under Article 15 of the General Data Protection Regulation (GDPR), you have the right to request confirmation from us whether we are processing personal data relating to you. If such processing exists, you have the right to obtain information about the personal data concerning you that we process, the purposes of processing, the categories of personal data processed, recipients or categories of recipients to whom the data has been or will be disclosed, the envisaged storage period for the data, the criteria for determining the storage period, the rights to rectification, erasure, restriction of processing, objection to processing, complaint to supervisory authorities, the source of the data (if not collected from you), and whether automated decision-making, including profiling, is carried out, along with the significance and envisaged consequences of such processing for you.

3.3 Right to Rectification

Under Article 16 of the GDPR, you have the right to request immediate rectification of inaccurate personal data concerning you or completion of incomplete personal data.

3.4 Right to Erasure

Under Article 17 of the GDPR, you have the right to request the erasure of personal data concerning you if one of the following grounds applies:

a) Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

b) You have withdrawn your consent to the processing based on Article 6(1)(a) or Article 9(2)(a) of the General Data Protection Regulation (GDPR), and there is no other legal basis for the processing.

c) You have objected to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or you have objected to the processing pursuant to Article 21(2) of the GDPR.d) Your personal data has been unlawfully processed.

e) Deletion of personal data is necessary to comply with a legal obligation under EU law or the law of a Member State to which we are subject.

For personal data collected for the provision of information society services, the right to deletion does not apply in the following cases:

a) To exercise the right to freedom of expression and information;

b) To fulfill a legal obligation under EU law or the law of a Member State to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in us;

c) For reasons of public interest in the area of public health, pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;

d) For archival purposes in the public interest, scientific or historical research purposes, or statistical purposes, in accordance with Article 89(1) of the GDPR, provided that the right to deletion is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

e) To assert, exercise, or defend legal claims.

If we are obligated to delete your personal data based on the above circumstances, and if we have disclosed your personal data to others, we will take reasonable steps, including technical measures, taking into account available technology and implementation costs, to inform data controllers processing the personal data that you, as the data subject, have requested the deletion of any links to, or copies or replications of, your personal data.

3.5 Right to Restriction of Processing

You have the right under Article 18 of the General Data Protection Regulation (GDPR) to request the restriction (blocking) of the processing of your personal data. You can exercise this right by contacting us at the address provided in the copyright notice. You have the right to request the restriction of processing in the following cases:

a) If you dispute the accuracy of your personal data stored by us, we typically need time to verify. You have the right to request the restriction of the processing of your personal data.

b) If the processing of your personal data by us is/has been conducted unlawfully, you can request the restriction of data processing instead of deletion.

c) If we no longer need your personal data, but you need them to assert, exercise, or defend legal claims, you have the right to request the restriction of the processing of personal data instead of deletion.

d) If you have objected under Article 21(1) of the GDPR, a balance must be struck between your interests and ours. Until it is determined whose interests prevail, you have the right to request the restriction of the processing of personal data.

If you have restricted the processing of your personal data, except for storage, this data may onlybe processed under the following circumstances: with your consent, or for the assertion, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest of the EU or a Member State.

3.6 Right to Notification

If you have asserted your rights regarding rectification, deletion, or restriction of processing to us, we are responsible for notifying all recipients to whom your personal data have been disclosed of these rectifications, deletions, or processing restrictions, unless this is impossible or involves disproportionate effort. Under Article 19 of the GDPR, you have the right to know the identity of these recipients.

3.7 Right Not to be Subject to Automated Decision-Making

Under Article 22 of the GDPR, you have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you. However, this does not apply in the following cases:

a) The decision is necessary for the conclusion or performance of a contract between you and us;

b) The decision is permitted by EU or Member State law to which we are subject, and such laws include appropriate measures to safeguard your rights and freedoms and legitimate interests, or

c) You have given explicit consent.

However, in cases referred to in (a) to (c) above, these decisions may not be based on special categories of personal data as defined in Article 9(1) of the GDPR, unless Article 9(2) applies and appropriate measures have been taken to protect your rights and freedoms and legitimate interests.

In cases referred to in (a) and (c) above, we will take appropriate measures to protect your rights and freedoms and legitimate interests, at least including the right to obtain human intervention, express your own point of view, and contest the decision.

3.8 Right to Data Portability

If processing is based on your consent (under Article 6(1)(a) or Article 9(2)(a) of the GDPR) or on a contract pursuant to Article 6(1)(b) of the GDPR, and is carried out by automated means, you have the right under Article 20 of the GDPR to receive the personal data you provided to us in a structured, commonly used, and machine-readable format, and to request that this data be transmitted to another controller, where technically feasible.

3.9 Right to Object

If we process your personal data based on Article 6(1)(f) of the General Data Protection Regulation (GDPR) for the purpose of balancing interests, you have the right to object to the processing of your personal data at any time based on your specific situation; this also applies to profiling based on this provision. You can find the legal basis for processing in this privacy policy.

If you object, we will no longer process the personal data affected by your objection unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims (pursuant to Article 21(1) of the GDPR).

If your personal data is used for direct marketing activities, you have the right to object at any time to the processing of personal data concerning you for such marketing, including profiling related to such direct marketing activities. If you object, your personal data will no longer be used for direct marketing activities (pursuant to Article 21(2) of the GDPR).

When using information society services, you have the right to exercise your right to object through automated means using technical specifications, without prejudice to Directive 2002/58/EC.

3.10 According to Article 77 of the General Data Protection Regulation,

In case of violations of the GDPR, the data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged infringement. The right to lodge a complaint does not prejudice any other administrative or judicial remedy. The supervisory authority responsible for us is:

Hessian Commissioner for Data Protection and Freedom of Information

Postal address: Postfach 3163, 65021 Wiesbaden

Street address: Gustav-Stresemann-Ring 1, 65189 Wiesbaden

Telephone: 06 11/140 80

Email: poststelle@datenschutz.hessen.de

Website: https://www.datenschutz.hessen.de

Validity and Modification of this Privacy Policy

This privacy policy is effective as of January 22, 2024. We reserve the right to modify this privacy policy at any time in compliance with applicable data protection regulations. This may be necessary to comply with new legal requirements or due to changes to our website or the introduction of new services on the website. The version applicable to your visit is the version at the time of your visit.

If changes are made to this privacy policy, we intend to announce the changes to our privacypolicy on this page so that you are fully informed about what personal data we collect, how we process it, and under what circumstances it may be disclosed.