Privacy policy

Privacy Policy www.gsg.de

NB: This document is a translation of the original German version of our privacy policy. The English translation is provided solely as a courtesy and for your convenience. Although we have prepared this translation to the best of our knowledge, only the German original is authoritative and legally binding, especially if there are any semantic or legal differences between the two versions. The original privacy statement can be found here.

As of: 21 February 2022

The protection of personal data such as name, address, telephone number or email is of the utmost importance to us. Therefore, we conduct our web activities in accordance with the General Data Protection Regulation (GDPR) and the laws on data protection and data security. In the following you will find information on how we handle data, in particular personal data, when you visit our website.

1. Responsible person

The person responsible for data processing within the meaning of the GDPR and other data protection regulations is
Gewerbesiedlungs-Gesellschaft mbH, Geneststraße 5, 10829 Berlin, Germany
(hereinafter: “GSG”)
Tel: +49 (0)30 – 390 93 0
Fax: +49 (0)30 – 390 93 199
Email: info@gsg.de
Managing Director: Oliver Schlink and Sebastian Blecke

2. Data Protection Officer

The data protection officer of the person responsible is

Gisbert Schwarze
Tel.: +49 (0)30 440 123 – 267
Fax: +49 (0)30 390 93 – 143
Email: dsb@gsg.de

3. General information on the use of the website

a) Data processing when accessing the website

When you visit our website, your browser automatically sends information to the server of our website in the background. This information is temporarily stored in a log file. Your IP address is not totally collected or stored by us. A collection/storage is only carried out in a shortened and thus anonymous form.

The following information is collected without your intervention when you visit our pages:

  • Browser type/version
  • Operating system used
  • The previously visited page (Referrer URL)
  • Host name of the accessing computer
  • Time of server request

We need this data because:

  • The smooth connection of the website must be ensured,
  • System security and stability must be evaluated and controlled,
  • Various other administrative purposes can be achieved with it.

Legal basis is Article 6(1) p. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above.

b) Data processing in addition to this when using the website with voluntary data input

Further personal data for services offered on our website is always provided on a voluntary basis (for example, name, address or email address, other contact data or even individual data that you provide to us in the context of a property search). This data is used to provide the services requested by you. You alone decide whether or not you want to voluntarily disclose this data to us, for example in the context of an enquiry or similar. For the use of individual features, we therefore ask for your express and voluntary consent, which can be withdrawn at any time. The legal basis is then Article 6(1) p. 1 lit. a GDPR. See the appropriate sections of this Privacy Notice below for details.

c) Obligation to provide data

You are not obliged to provide your personal data. However, if you do not provide us with individual personal data, you may not be able to access all features of our website.

d) Purpose of the processing

Your details will only be processed for the purposes for which you have provided us with the relevant data, e.g. B. for answering your contact request by e-mail. Of course, if you would like to be called back, we also need your telephone number. If you post a comment on our blog, we will process the data you entered in the input mask on the basis of your consent to the publication of the post.

e) Cookies and similar technologies

If cookies or cookie-like technologies are used in the context of data processing, the storage of information in the end-user’s terminal equipment or the access to information already stored in the end-user’s terminal equipment is effected in accordance with Article 25(1) TTDSG (Federal Act on the Regulation of Data Protection and Privacy in Telecommunications and Telemedia) in connection with Article 6(1) lit. a GDPR and further data processing in accordance with Article 6(1) GDPR.

If the use of cookies is absolutely necessary, this is done on the basis of Article 25(2) TTDSG and the further data processing in accordance with Article 6(1) GDPR.

4. Disclosure of your data and data transfers to third countries

Your data shall not be disclosed to third parties outside the GSG Group without your express consent. For internal administration purposes, your data may also be disclosed to the companies belonging to the GSG Group (Article 6(1) p. 1 lit. f GDPR).

Data is transferred to service providers only within the framework of order processing conditions as defined in Article 28 GDPR and only in compliance with data protection regulations.

Data transfers to a third country are carried out only if the special conditions of Article 44 et seq. GDPR are met. This means that the processing of your data may then only take place on the basis of special guarantees, such as the officially recognised determination by the EU Commission of a level of data protection corresponding to the EU, the observance of officially recognised special contractual obligations, the so-called “standard contractual clauses”, or in individual cases your consent. If the data is transferred to the USA or another country where there is not an equivalent level of data protection, please note that there is a theoretical risk that your data may be processed by US authorities for control and monitoring purposes, possibly without you having any legal rights.

5. Newsletter

You can subscribe to our free newsletter with your email address. If you subscribe to our newsletter, you will receive regular information about our products, offers and promotions. After registering for the newsletter, you will receive an email asking you to confirm your subscription to the newsletter. This ensures that no third party has misused your data by means of the so-called “double-opt-in principle”. Our newsletter is provided and managed by CleverReach GmbH & Co. KG (Schafjückenweg 2, 26180 Rastede, Germany), a service provider working on our behalf as an order processor in compliance with the requirements of the GDPR. You have the option to unsubscribe from the newsletter at any time, e.g. by unsubscribing on the registration page or using the unsubscribe link in the newsletter. Further information can also be found in the respective newsletter.

Legal basis is Article 6(1) p. 1 lit. a GDPR.

6. Cookies

a) Overview

Cookies are small text files that are sent to your computer along with the data you actually requested from the Internet. This data is stored there and kept ready for later retrieval. There are different types of cookies, such as those that are permanently stored or temporary ones that are stored by the provider on a user’s terminal or by a third party. They enable us to analyse your use of the website or ensure that you have special features at your disposal. These cookies also serve to make our offer more user-friendly, effective and secure. The information obtained also serves the purpose of compiling statistics on the use of our offer. This allows us to adapt our offer to customer requirements. Possible functions include, for example, the display of the history of the pages visited on our website. Further information about cookies can also be found in the “Help” section of your browser. You can also learn more about how cookies work at http://www.allaboutcookies.org/.

b) Which cookies do we use?

We use different types of cookies and similar technologies. Please note that depending on the features and device used, not all of the cookies listed will apply.

Google AdWords Conversion Tracking to run interest-related advertising and to enable an analysis of advertising effectiveness, in particular to find out the total number of users who have clicked on certain ads we have placed (see “7. Google AdWords Conversion Tracking” and “11. Contact Form” for more information);

Google Analytics to analyse traffic and user behaviour on our homepage and to optimise our homepage (see “9. Google Analytics” for more information);
onOffice.de to integrate our contact form (see “12. onOffice” for more information);

When launching videos embedded in YouTube (see “8. YouTube” for more information);

Cookies from WordPress when using the comment function (see “13. Blog and Comments” for more information);

Cookies of the Notepad and Search Agent functions for area search (see “14. Area Search” for more information);

When clicking on the link of the GSG Forest status (more details under “16. Link to the GSG Forest status via Treedom”).

c) Can I disable or prevent the use of cookies in any other way?

You can accept or reject individual or all cookies separately when you first visit our website and then at any time in our cookie settings by setting the “on” or “off” button for the respective cookie and clicking “Save”.

Your preferences set in the cookie settings are stored only on the computer or mobile device. You will need to do this again if you delete your browsing history or if you are using another device or Internet browser.

You can change your cookie settings on our website here:

[borlabs-cookie type=”btn-cookie-preference” title=”Change cookie settings.” item=”link”/]

You can prevent the installation of cookies by setting your browser accordingly. You can find information on changing the settings in the “Help” section of your browser. However, we would like to point out that if you change the settings, you may not be able to use all the features of our website in full.

7. Google AdWords conversion tracking

We use Google AdWords Conversion Tracking by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”) in connection with our website and the offers available there in the event that you give your consent (see “Contact form” below) Google AdWords Conversion Tracking is used to analyse the effects of ads. In doing so, Google AdWords shall set a cookie on your computer after your express consent in accordance with Article 25(1) TTDSG. If you visit certain pages of an AdWords customer’s website and the cookie has not expired, Google and the customer can recognise that you clicked on the ad and were redirected to that page. Each AdWords customer receives a different cookie. Cookies cannot be tracked through AdWords customers’ websites. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers will be informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. Google’s privacy statement and more information on how Google AdWords Conversion Tracking works can be found atwww.google.com.

The legal basis for the data processing of your personal data is Article 6(1) p. 1 lit. a GDPR.

8. YouTube

We have included YouTube videos on our website, which are available at http://www.youtube.com. They can be played directly from our website and are loaded by clicking on an image.

The operator of the website http://www.youtube.com and the author of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (YouTube). YouTube is represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use a “two-click solution”. This means that when you visit the corresponding subpage of our offer, no personal data is passed on to the service provider. However, we offer you the possibility to activate the service of the provider via a button, which results in a direct data transfer. Only when you activate the service will the provider receive the information that you have accessed the corresponding subpage of our website. This is done via a cookie, which is set in accordance with Article 25(1) TTDSG only after your express consent.
By clicking on the image and visiting our website, YouTube receives the information that you have accessed the corresponding subpages of our website with the videos embedded on YouTube. In addition, certain personal data is transmitted from you to YouTube, which includes the IP address, date and time of the request, the time zone difference to Greenwich Mean Time (GMT), the content of the request (specific page), the access status/HTTP status code, the amount of data transmitted in each case, the website from which the request came, the browser, the operating system and its interface, and the language and version of the browser software. The transfer of this user data to YouTube takes place regardless of whether you are logged in via a YouTube user account. When you are logged in to Google, your data will be directly assigned to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses it for the purposes of advertising and/or designing its website, as well as for informing other YouTube users about your activities on our website.

Please understand that as a third party, we do not have details of how YouTube uses your data. However, you can find out more directly from YouTube at http://www.youtube.com and Google at https://www.google.de/intl/de/policies/privacy. In the respective data protection declaration available there you will get further information about the purpose and scope of the data collection and its processing as well as about your rights and settings for the protection of your privacy. You have a right to object to the creation of user profiles, and you must contact YouTube directly to exercise them. Google also processes your personal data in the USA.

The legal basis for the data processing of your personal data is your consent (Article 6(1) p. 1 lit. a GDPR).

9. Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter: “Google”) on the basis of your express consent. Google Analytics uses cookies (see “6. Cookies”), which enable an analysis of your use of the website. In accordance with Article 25(1) TTDSG these are only set after your express consent. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, in the event that IP anonymisation is activated on this website, your IP address shall be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases shall the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google shall use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and Internet usage to the website operator.

To the best of our knowledge, the IP address transmitted by your browser as part of Google Analytics shall not be merged with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use all the features of this website. You can also prevent Google collecting the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
We use Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in abbreviated form, so that personal references can be excluded. If the data collected about you is related to a person, this is immediately excluded and the personal data is deleted immediately.

We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user.

This website uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID (“Google Universal Analytics”). You can disable cross-device analysis of your usage in your Google account under “My Data”, “Personal Data”.

We have limited the storage time of Google Analytics data to 14 months. Google’s privacy statement and more information on how Google Analytics works can be found at www.google.com.

The legal basis for the processing of your personal data is Article 6(1) p. 1 lit. a GDPR.

10. Google Tag Manager

Google Tag Manager is also a Google product that allows us to manage website tags through one interface. The Tag Manager is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a domain or cookie-level deactivation has been made, it shall remain active for all tracking tags implemented with Google Tag Manager. We may ask you to allow some product information (such as your account information) to be disclosed to other Google products to enable certain features, such as the addition of new conversion tracking tags for AdWords. In addition, our developers review product usage information from time to time to further optimise the product. However, we shall never disclose such information to other Google products without your consent. See the product usage guidelines for more information. Legal basis is Article 6(1) p. 1 lit. a GDPR.

11. Contact Form

You will find a contact form on our website, which you can use to contact us or initiate a property search. In the form, you can enter your contact details as well as information about your search criteria. We use this data to process your enquiry, to report to you and, if necessary, to further cooperate with us. In order to process your contact request, your personal data specified in the contact form shall be forwarded to the subsidiary of the GSG Group of companies GSG Asset Management GmbH, Geneststraße 5, 10829 Berlin. Your voluntary consent, which can be withdrawn at any time and which we ask for when you submit the form, includes your consent to the use of Google AdWords Conversion Tracking (see “Google AdWords Conversion Tracking” above). The contact form is integrated as an iframe of our service provider onOffice (see below “12. onOffice”). Your data shall be transmitted to onOffice when the contact form is sent. Legal basis is Article 6(1) p. 1 lit. a GDPR.

12. onOffice

We want to make our properties available to you conveniently and directly on our website. We therefore use a contact form from onOffice (onOffice GmbH, Charlottenburger Allee 5, 52068 Aachen, Germany) that is integrated via an iframe and feeds the enquiries directly into our system. When the contact form is activated, onOffice receives information that your browser automatically transmits (including your IP address) and may transfer its own cookies to your end device or read out existing cookies. The cookies are set in accordance with Article 25(1) TTDSG only after your express consent. The service provider acts as an order processor in compliance with the requirements of the GDPR. For details on how onOffice handles your data, please refer to the onOffice privacy statement on de.onoffice.com.

The legal basis for the processing of your personal data is Article 6(1) p. 1 lit. a GDPR.

13. Blog and Comments

You can view our blog on our website and post comments on blog posts. In order to edit your posts, we save the data you entered and then add the post to our blog as a comment. It is stored as long as the comment is available on the website. In accordance with Article 25(1) TTDSG, we use cookies with your express consent. These serve to make the website user-friendly, so that the visitor does not have to re-enter all their data if they want to leave another comment. More information on this can be found here: https://wordpress.org/support/article/cookies/

In order to post a comment, we need your consent, which you declare voluntarily by clicking on the correspondingly marked button and which can be withdrawn at any time.

The legal basis for the processing of your personal data is Article 6(1) p. 1 lit. a GDPR.

14. Area search

On our homepage you can use the area search to quickly and easily find interesting properties that meet your requirements. When carrying out an area search, you can place properties on a virtual notepad. Based on your consent, the notepad feature uses cookies to help you manage search results (see also “6. Cookies”). The cookies are used only after your express consent in accordance with Article 25(1) TTDSG. Individual search results can therefore be easily found again. When carrying out an area search, you also have the option of using our search agent. Based on your express consent, the search agent shall notify you by email when new results are available for a search you have set. In order to be informed about new offers in this way, we ask you to store and confirm your email address in the so-called double-opt-in procedure.

The legal basis for the processing of your personal data is Article 6(1) p. 1 lit. a GDPR.

15. Podigee Podcast

We use the podcast hosting service Podigee of Podigee GmbH, Schlesische Strasse 20, 10997 Berlin, Germany. The podcasts are loaded from Podigee or transmitted via Podigee. The service provider acts as an order processor in compliance with the requirements of the GDPR.
The player is integrated via iframe, which allows Podigee to collect data after clicking on the link, which your browser automatically transfers.
We use a “two-click solution”. This means that before clicking on the link to the Podigee Podcast, no data is transferred and no cookies are stored on your device. However, we offer you the possibility to activate the service of the provider via a button, which results in a direct data transfer. Only when you activate the service will the provider receive the information that you have accessed the corresponding subpage of our website. This is done via a cookie, which is set in accordance with Article 25(1) TTDSG only after your express consent.
Podigee processes IP addresses and device information to enable podcast downloads/playbacks and to obtain statistical data such as hits. This data is anonymised or pseudonymised before being stored in Podigee’s database, unless it is necessary for the provision of the podcasts.
Further information and possible objections can be found in the Podigee privacy statement: https://www.podigee.com/de/about/privacy/.
The legal basis for the processing of your personal data is Article 6(1) p. 1 lit. f GDPR. Our legitimate interest is the secure and efficient provision, analysis and optimisation of our podcast services.

16. Link to GSG forest inventory via Treedom

GSG Berlin supports small farmers in Cameroon with social and ecological tree planting. In addition to CO₂ storage, GSG Berlin is making a further contribution to sustainable development by planting the GSG Forest. You can view the respective status of our forest by clicking on the corresponding link on our website.

If you click on the relevant link to the GSG Forest on our website, you leave the area of legal data protection we are responsible for and enter the sphere of legal data protection responsibility of the provider Treedom, who plants the trees for us. Treedom itself uses Mapbox, Inc., 740 15th Street NW, Washington DC 20005, USA, which uses a map to visualise the trees planted. GSG itself has no contractual relationship with Mapbox.

We use a “two-click solution”. This means that before clicking on the link to the GSG Forest status via Treedom, no data will be transmitted to Treedom and no cookies will be stored on your device. However, we offer you the possibility to activate the service of the provider via a button, which results in a direct data transfer. Only when you activate the service will the provider receive the information that you have accessed the corresponding subpage of our website. This is done via a cookie, which is set in accordance with Article 25(1) TTDSG only after your express consent. Treedom also receives all information that your browser automatically transfers (including your IP address). This also happens if you do not have a Treedom user account. If you are logged in to Treedom, your data will be directly assigned to your account. If you do not wish to be associated with your Treedom user account, you must log out before clicking on the link.

The collection and processing of this data is exclusively the responsibility of Treedom S.R.L., Viale Augusto Righi 66, 50137 Florence, Italy. We are not aware of any further details regarding the processing of personal data in Treedom’s area of responsibility or any possible data processing in the USA. GSG does not have any influence over Treedom’s data processing. For information about Treedom’s processing of personal data, please refer to Treedom’s Privacy Policy: https://www.treedom.net/de/page/privacy

The legal basis for the processing of your personal data is Article 6(1) p. 1 lit. a GDPR.

17. Presences in social networks

We maintain an online presence on social networks (social media) and process user data in this context in order to communicate with users active there or to offer information about us.

We would like to point out that data from users outside the European Union, in particular the USA, can be processed. This may result in risks for users because, for example, it could make it more difficult to enforce users’ rights (see also under “4. Disclosure of your data and data transfers to third countries”).

Furthermore, the data of the users within social networks are usually processed for market research and advertising purposes. For example, usage profiles can be created based on the usage behaviour and the resulting interests of the users. The usage profiles can be used, for example, to run ads inside and outside the networks that are presumed to correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ devices, in which the usage behaviour and the interests of the users are stored. Furthermore, data can be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

For a detailed presentation of the respective processing forms and the possibilities of opposition (opt-out), we refer to the data protection declarations and details of the operators of the respective networks.
We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the social network operators directly. In the event of requests for information and the assertion of data subject rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. If you still need help, you can contact us.

The data processing carried out by social networks may be based on different legal bases, which must be specified by the operators of social networks.

a) LinkedIn page

Social network and service providers: LinkedIn Ireland Unlimited Company, Wilton place, Dublin 2, Ireland; website: https://www.linkedin.com; Privacy Policy: https://www.linkedin.com/legal/privacy-policy; possibility of opposition (opt-out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

GSG has concluded the current standard contractual clauses with LinkedIn. The concluded data processing agreement can be found at https://de.linkedin.com/legal/l/dpa.

The types of data processed include: Contact data (e.g. email, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. visited websites, interest in content, access times), meta/communication data (e.g. device information, IP addresses).

The legal basis for processing is Article 6(1) p. 1 lit. a and f GDPR. Our legitimate interests and purposes of processing are contact requests and communication, feedback (e.g. collection of feedback via online form) and marketing.

b) YouTube channel

Social network and video platform; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent Company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy Policy: https://policies.google.com/privacy; possibility of opposition (opt-out): https://adssettings.google.com/authenticated.

The types of data processed include: Usage data (e.g. visited websites, interest in content, access times), meta/communication data (e.g. device information, IP addresses).

The legal basis for processing is Article 6(1) p. 1 lit. f GDPR. Our legitimate interest and purpose of processing is marketing.

c) Xing page

Social network and service providers: XING AG, Dammtorstraße 29–32, 20354 Hamburg, Germany; website: https://www.xing.de; Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.

The types of data processed include: Contact data (e.g. email, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. visited websites, interest in content, access times), meta/communication data (e.g. device information, IP addresses).

The legal basis for processing is Article 6(1) p. 1 lit. a and f GDPR. Our legitimate interests and purposes of processing are contact requests and communication, feedback (e.g. collection of feedback via online form) and marketing.

d) Facebook page

We are jointly responsible with Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) for the collection (but not the further processing) of data of visitors to our Facebook page (so-called “Fanpage”).
This data includes information about the types of content users view or interact with, or the actions they take (see under “Things you and others do and provide” in the Facebook Data Policy: https://www.facebook.com/policy), as well as information about the devices users use (including IP addresses, operating system, browser type, language settings, cookie data; see under “Device information” in the Facebook Data Policy: https://www.facebook.com/policy). As explained in the Facebook Data Policy under “How do we use this information?”, Facebook also collects and uses information to provide analytics services, called “Page Insights”, to page operators so that they can learn about how people interact with their pages and with the content they are connected to.

We have entered into a special agreement with Facebook (“Information about Page Insights”, https://www.facebook.com/legal/terms/page_controller_addendum), which specifically governs which security measures Facebook must comply with and in which Facebook has agreed to comply with the rights of affected persons (i.e. users can, for example, send information or deletion requests directly to Facebook). The rights of the users (in particular to information, deletion, objection and complaint to the responsible supervisory authority) are not restricted by the agreements with Facebook. Further information can be found in the “Information about Page Insights” (https://www.facebook.com/legal/terms/information_about_page_insights_data).
The types of data processed include: Contact data (e.g. email, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. visited websites, interest in content, access times), meta/communication data (e.g. device information, IP addresses).

The legal basis for processing is Article 6(1) p. 1 lit. a and f GDPR. Our legitimate interests and purposes of processing are contact requests and communication, feedback (e.g. collection of feedback via online form) and marketing.

18. Security

We attach great importance to the highest possible security of our system and use modern data storage and security techniques to optimally protect your data. Our security measures are continuously improved in line with technological developments. Nevertheless, we would like to point out that data transmission on the Internet can have security gaps. As we know, a complete protection of the data from access by third parties is not possible and lies outside our sphere of influence.

19. Storage time

Your personal data shall be deleted or blocked as soon as the respective purpose of the storage no longer applies (see also under “9. Google Analytics”). Storage beyond this shall take place only if this is provided for in laws and other relevant legal requirements. If storage periods result from such legal provisions, the personal data shall be deleted or blocked after the expiry of these periods if the data is not required for the conclusion or fulfilment of a contract.

20. Your rights

Insofar as we obtain your express and voluntary consent for the use of individual features on our website, Article 6(1) p. 1 lit. a GDPR is the legal basis for data processing. You can revoke your consent given for this purpose at any time with effect for the future by contacting us using the contact details given in this privacy policy under “1. Person responsible”.

Upon request, you will receive information about the personal data that has been stored about you. In addition, you have a right to correct incorrect data, delete personal data, restrict processing, and object to processing and data transmission. You also have the right to withdraw any consent you provide voluntarily (see also above under “20. Legal basis”). You can exercise this right with us under the contact details given in this privacy policy (see above under “1. Responsible person”). For this and for any questions or comments regarding this privacy policy, please contact our data protection officer using the contact information provided above. You also have the right to complain to the responsible supervisory authority.