Which country do we ship for?
We are commited to your privacy. We will never share or sell your data and all of your transaction are secure.
The safeguarding of your privacy is of major importance to us. Therefore, with all activities of the data processing (e.g. collection, processing and transmission) we proceed according to the statutory regulations of European and German data protection law.
The following explanation gives you an overview of which of your data are requested on our websites, in which manner these data are used and forwarded, in which type and manner you can be informed about the information provided to us and which security measures we take for the protection of your data.
The responsible party within the meaning of the regulations under data protection law for all data processing activities carried out via our websites is: Wunderlabel GmbH, Eichendorfstraße 12A, Germany, +44 (0) 2070 996 617, firstname.lastname@example.org
We have not appointed a data protection officer, as the statutory prerequisites for an appointment do not exist in our company.
We request that enquiries relating to the topic of data protection as well as the assertion of rights of data subjects (cf. below) are to be sent to the aforementioned address.
Personal data is all information, which refers to an identified or identifiable natural person ("relevant person") such as e.g. your name, your address, your telephone number, your date of birth, your bank data as well as your IP address.
We principally only collect and use personal data of our users insofar as this is necessary for the provision of a functional website as well as our contents and services. The collection and use of personal data of our users is as a rule only carried out after obtaining the user’s consent. One exception applies in such cases, in which it is not possible to obtain a prior consent for actual reasons and the processing of the data is permitted by statutory regulations.
On our website we offer users the possibility to register by entering personal data. The data are entered in an input mask and transmitted to us and stored. The data are not forwarded to third parties. The following data are processed within the scope of the registration process:
- Telephone number
The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR with the existence of a consent of the user.
If the registration serves to fulfil a contract, of which the user is the contractual party or the execution of pre-contractual measures, then the additional legal basis for the processing of the data is Art. 6 Para. 1 lit. b GDPR.
The registration of the user is necessary in order to fulfil a contract with the user or to carry out pre-contractual measures.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.
This is the case during the registration process in order to fulfil a contract or for the execution of pre-contractual measures if the data are no longer required for the execution of the contract. It may also be necessary to store personal data of the contractual partner after conclusion of the contract in order to satisfy contractual or statutory obligations.
As a user you have the possibility at all times to dissolve the registration. You can have the data stored in relation to you changed at all times. For this purpose please contact us for the contract possibilities offered in the footer of our website.
If the data are necessary in order to fulfil a contract or to carry out pre-contractual measures, a premature deletion of the data is only possible insofar as contractual or statutory obligations do not oppose a deletion.
On our website we keep a contact form available for you via which you can easily contact us by using electronic means and can send your concern to us. We merely collect your name, your telephone number and your e-mail address via the contact form. At the time when the message is sent the following data are moreover stored:
-Time and date on which the contact form was sent
Alternatively, it is possible to contact us via the provided e-mail address. In this case the personal data of the user transmitted with the e-mail will be stored.
We merely use your data to process your concern and can contact you for this purpose under the stated contact data. A use of these data for advertising purposes or a forwarding to third parties is not carried out.
The legal basis for the processing of the data, which are transmitted via the contact form or over the course of the sending of an e-mail, is Art. 6 Para. 1 lit. f GDPR. If the contact aims at the conclusion of a contract then the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR.
The processing of the personal data from the input mask solely serves the purpose for us to process the contact. In the event of a contact by e-mail this shall also constitute the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent a misuse of the contact form and to ensure the safety of our IT systems.
The data will be deleted as soon as they are no longer required in order to achieve the purposes for which they were collected. For the personal data from the input mask of the contact form and those, which were sent by e-mail, this is the case if the respective conversation with the use is ended. The conversation will have been ended if it can be derived from the circumstances that the relevant fact has been finally clarified.
The personal data additionally collected during the sending process will be deleted no later than after a deadline of seven days.
The user has the possibility at all times to revoke his consent to the processing of the personal data. If the user contacts us by e-mail he can therefore object to the storage of his personal data at all times. In such a case the conversation cannot be continued.
All personal data, which were stored over the course of the contact, will be deleted in this case.
Data Collection - Personalised Products
As part of product personalisation, you have the option of uploading your own design/logo or entering the text of your choice into our online configurator. The resulting products can be photographed for advertising purposes and can be forwarded to interested parties as a product sample free of charge. If you would like this personalisation data to be deleted, please send us an express statement to email@example.com.
We use the personal data made available by you in order to answer your enquiries, for the processing of your order in our online shop and for the purpose of the technical administration of our websites.
A forwarding, a sale or any other transmission of your personal data to third parties will only be carried out if the forwarding is necessary for the purpose of processing the contract or for settlement purposes or for the collection of remuneration (for example mail order companies or payment service providers) or you have explicitly consented hereto. In addition we are entitled to forward personal data for debt collection purposes and reserve a right to data exchange with protective organisations of business (e.g. Schufa credit agency), this of course only if the statutory prerequisites exist for this purpose.
The legal basis for the transmission of the data to third parties for the purpose of the contract processing or for settlement purposes is Art. 6 Para. 1 lit. b GDPR.
Payment processing via Paypal
For the payment processing in our online shop we use the payment system of the external payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). Insofar as you intend e.g. for pay per credit card or PayPal, a connection is automatically established to the online payment system of PayPal via a technical interface. The payment data entered by you are transmitted via an encrypted connection to PayPal exclusively for the purpose of the payment processing and stored and processed there. The processing of the data is also carried out exclusively for the aforementioned purpose of the payment processing of your order, whereby the payment data of PayPal must, if applicable, be forwarded to the credit institution stated by you in order to trigger off and authorise the payment process.
Payment per SOFORT transfer
In cooperation with SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, we offer you the Sofort bank transfer option "SOFORT". Your personal data entered with the order are forwarded for the purpose of the payment processing via a technical interface to SOFORT GmbH. After sending the order offer you will be automatically forwarded to the payment form of SOFORT GmbH. The further processing of the transaction with your bank will then take place through SOFORT GmbH. SOFORT GmbH will operate hereby as technical service provider that transmits the data, which you enter in the secured payment form, encrypted to your bank. You can find further instructions under data protection law relating to the immediate bank transfer of SOFORT GmbH here.
Forwarding in cases ordered by law
We would like to point out that, at the request of the responsible body in an individual case, we are entitled to provide information about data, insofar as this is necessary for the purpose of criminal prosecution, in order to defend against risks by the police authorities the federal states, in order to fulfil the statutory tasks of the constitutional protection authorities of the federal government and the federal states, of the Federal Investigation Agency [Bundesnachrichtendienst] or the Military Counter Intelligence Agency or to assert the rights to the intellectual property.
On our websites we link to the Social Media platforms Facebook, Instagram and Pinterest. This is carried out via a corresponding symbol on our websites that is marked with the corresponding logo of the respective social media platform and behind which a corresponding link is concealed to our corresponding social media site. Social plugins (such as the Facebook "like it" button) are not integrated hereby.
By our references to the social media services no data are transmitted by you to these services. It concerns normal hyperlinks, via which as a rule no data transmission takes place. If you click on the reference, you will be forwarded directly to our social media-presence at the respective social media service. A data transmission will only take place hereby if you are logged into your user account of the corresponding social media service. You can then link contents of our websites directly with the social media service or share respectively in the event of YouTube view the videos of our YouTube-channel. The respective social media-service will hereby find out, under certain circumstances, which contents you have viewed on our websites.
The following are exclusively responsible for the social media services linked by us:
- for Facebook and its internet presence Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA;
- for Instagram and its internet presence Instagram, LLC, 1601 Willow Rd. Menlo Park, CA 94025, USA;
- for Pinterest and its internet presence Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA;
You can obtain further information about the purpose and the extent of the data collection and about the further processing and use of your data by the respective social media service from the data protection provisions of the respective service. These can be called in the internet:
Under the stated links you will find among others also information about setting possibilities for the protection of your privacy and regarding your further rights with regard to the collection, processing and use of your data by the respective social media service.
We have taken a multitude of security measures in order to adequately protect personal information to a reasonable extent.
Our databases are protected by physical and technical measures as well as process measures, which restrict the access to the information to specially authorised persons in line with this privacy statement. Our information system is located behind a software firewall in order to prevent the access from other networks, which maintain a connection to the internet. Only employees, who require the information in order to fulfil a special task, will receive access to personal information. Our employees are trained with regard to security and data protection practices.
With the collection and transmission of data via our websites we use the standardised SSL-encryption technology. Personal data are transmitted within the scope of the order process via an SSL encryption, to be recognised by the lock symbol in the browser and in the address bar by the supplement "https://".
You should never pass on your password for the access to our websites to third parties and you should change this password regularly. In addition you should not choose the same password for the access to our websites that you also use on our websites for a password-protected access (e-mail account, online banking etc.). When you have left our sites, you should press the logout and close your browser in order to avoid unauthorised users receiving access to your user account.
With a communication per e-mail the full data security should not be guaranteed by us.
We use so-called cookies on our websites. Cookies are small data volumes in the form of text information, which the web server sends to your browser. These are merely stored on your hard disc. Cookies can respectively only be read by the server, which previously also filed these, and receive information concerning, what you have read and when on a website. Cookies themselves only identify the IP address of your computer and do not store any personal information, such as for example your name. The data stored in the cookies are not linked with your personal data (name, address etc.).
The following data are stored in the cookies hereby and transmitted:
- Language settings
- Items in a shopping basket
- Log-In information
The data of the users that are collected in this manner are pseudonymised by technical precautions. Therefore, an allocation of the data to the calling user is no longer possible. The data are not stored together with other personal data of the users.
You can decide yourself whether you allow cookies. On the one hand, you have by changing your browser settings (mostly to be found under "option" or "settings" in the menus of the browsers) you have the choice to accept all cookies, to be informed when a cookie is set or to reject all cookies. On the other hand, you can via the banner, which is displayed with the when calling our websites for the first time and which refers to this privacy statement, decide freely, whether you would like to grant us the consent for the setting of cookies or reject this.
With the consent via the banner you agree that we will set cookies on your terminal device and may process these for the purposes stated in this privacy statement.
You can revoke the consent at all times to the contact data stated under 1. The lawfulness of the data processing carried out owing to the consent until the revocation shall remain unaffected hereby.
The legal basis for the processing of personal data by using technically necessary cookies, as well as for cookies for analysis purposes is Art. 6 Para. 1 lit. f GDPR.
The user data collected by technically necessary cookies are not used to create user profiles.
The use of the analysis cookies is carried out for the purpose of improving the quality of our website and your consents. Through the analysis cookies we find out how the website is used and can thus consistently optimise our offer.
These purposes always constitute our legitimate interest in the processing of the personal data according to Art. 6 Para. 1 lit. f GDPR.
Several of our services additionally use so-called tracking bugs or also tracking pixel. These mostly only concern 1x1 Pixel measuring Code-Snippets, which are in the position to identify and recognise your browser type via the browser-ID – the individual fingerprint of your browser. This way the service provider can see when and how many users have called the pixel, or whether and when an e-mail was opened or a website was visited.
You can prevent the data entry by these tracking bugs by the fact that you respectively your e-mails open offline or prevent the loading of external graphics in your e-mail programme.
For the despatch of e-mail messages to our customers we use the newsletter service provider MailChimp of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The data named below are processed by MailChimp at our order and for this purpose stored on the servers of MailChimp in the USA. MailChimp uses your data for sending and for evaluating the newsletters. The data protection provisions of the service provider can be called under mailchimp.com/legal/privacy/.
The data from the input mask are transmitted hereby with the registration to the newsletter.
- First and last name
- E-mail address
For the processing of the data within the scope of the registration process your consent will be obtained for the processing of the data by MailChimp and reference will be made to this privacy statement.
If you acquire goods or services on our website and hereby deposit your e-mail address this can subsequently be used by us for sending a newsletter. In such a case exclusively direct advertising will be sent via the newsletter for own similar goods or services.
The legal basis for the processing of the data by our newsletter service provider after the registration for the newsletters with the existence of a consent of the user is Art. 6 Para. 1 lit. a GDPR.
The legal basis for the sending of the newsletter as a result of the sale of goods or services is § 7 Para. 3 UWG [Law governing restraints on unfair competition].
The collection of the user’s e-mail address serves to serve the newsletter.
The data will be deleted as soon as these are no longer required for achieving the purpose for which they were collected. The e-mail address of the user will accordingly be stored fir as long as the subscription for the newsletter is active.
The subscription for the newsletter can be terminated by the relevant user at all times. For this purpose a corresponding link can be found in each newsletter.
A revocation of the consent to the storage of the personal data collected during the registration process is also made possible hereby.
a) We use Google Analytics. What does this mean for your data?
On our websites we use Google Analytics, a web analysis service of Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", Text files, which are stored on your computer and which enable an analysis of the use of the website by you (cf. 7.). The information generated by the cookie about your use of this website will as a rule be transmitted to a server of Google in the USA and stored there. In the event of the activation of the IP anonymization on this website, your IP address will however have been previously abbreviated by Google within member states of the European Union or in other contracting states of the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and abbreviated there. By order of the operator of this website Google will use this information in order to evaluate your use of the website to compile reports on the website activities and in order to provide further services associated with the website use and the internet use towards the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be aggregated with other data of Google. You can prevent the storage of the cookies by a corresponding setting of your browser software; however we would like to point out to you that in this case you will, if applicable, not be able to use all functions of this website in full. You can in addition prevent the entry of the data generated by the cookie and which refers to your use of the website (incl. your IP address) to Google as well as the processing of these data by Google, by downloading and installing the browser plugin available under the following link (http://tools.google.com/dlpage/gaoptout?hl=gb)
You can prevent the entry by Google Analytics, as an alternative to the installation of the browser plugin, above all in Internet browsers mobile terminal devices, by clicking on the following link:
Deactivate Google Analytics
A so-called Opt-Out-Cookie is filed on your device hereby, which prevents the future entry of your data by Google Analytics when visiting this website.
Please pay attention hereby that should you delete cookies in your browser settings, this may have the consequence that the Opt-Out-Cookie of Google Analytics is also deleted and if applicable must be re-activated by you. You can find more detailed information regarding the functioning of Google Analytics and the conditions of use and data protection provisions that are relevant for this service under www.google.com/analytics/terms/gb.html or under policies.google.com/privacy. We would like to additionally point out to you that on our website Google Analytics is used with the extension anonymizeIP and therefore IP addresses are only further processed abbreviated in order to excluded a reference of a person.
b) On our websites we use so-called Retargeting or Remarketing technologies. What does this mean?
On our websites we use technologies for the so-called Retargeting or Remarketing. This concerns a tracking procedure in the field of the online marketing, with which visitors of a website are marked and subsequently should be addressed again on other websites with specific advertising. We use this new technology in order to design our offer even more attractive and to inform you about current offers, which you have already looked at once before in our online shop, and to remind you of these.
From a technical point of view either an additional cookie is stored on your computer depending on the Retargeting service or cookies set in your browser already anyway are used (cf. 7.), which identify you or your computer or your browser as an internet user via the so-called cookie-ID as a rule anonymously and record your surfing behaviour, in particular which websites you have called in our company. The cookie can then be read by the targeting providers, with which we cooperate (see below), and be evaluated. This leads to the fact that you will also be displayed advertising of our products on other websites or recommendations for comparable products of third party providers e.g. as personalised advertising banner.
With the services DoubleClick Remarketing-Pixel and Facebook-Remarketing so-called Web-Bugs fulfil a similar function as cookies, which however cannot be noticed by you as a user of our websites. Web-Bugs or also "clear GIFs" are small approx. 1*1 Pixel sized GIF-files, which can be hidden in other graphics, e-mails etc. Web-Bugs send your IP address, the internet address (URL), the time at which the Web-Bug was seen, your browser type as well as previously set cookie information to a Web-Server.
The data collected with regard to your surfing behaviour via cookies or Web-Bugs can be used to personally identify you as a visitor to our websites. We only use the data to improve our offer and to evaluate the user behaviour on our websites (e.g. reactions to advertising actions); another use or forwarding to third parties is not carried out. These data are anonymous and not linked with a personal service on your computer or with a database. Under certain circumstances we also use this technology in our newsletter.
In order to prevent Web-Bugs on our websites, you can use tools such as e.g. webwasher, bugnosys or AdBlock. In order to prevent Web-Bugs in our newsletter, please set your mail programme so that in messages no HTML is displayed. Web-Bugs will also be prevented if you read your e-mails offline. Without your explicit consent we will not use Web-Bugs to collect personal data about you without being noticed or to transmit such data to third party providers and marketing platforms.
Google DoubleClick Remarketing-Pixel and Google AdWords Remarketing or "similar target groups"
On our websites we use DoubleClick Remarketing-Pixel and Google AdWords Remarketing or "similar target groups", both services of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA ("Google"). With the help of these services we can display okay your advertising messages in connection with our online shop, e.g. interesting product offers, on the websites of other providers, which also use these services of Google ("Partners" in the Google Display Network). In addition we can remind you with the help of Google AdWords Remarketing by a message on the websites of other providers in the Google Display Network to conclude your order if you recently discontinued an order in our online shop. This is carried out by using the cookie technology (cf. 7.).
Google stores in this respect a small file with a string (so-called cookie-ID) in your browser, in order to note you as a visitor to our websites and to enter further anonymous data about the use of our websites. The cookie-ID is stored by us and merely serves for a clear identification of your browsers and not for the identification of your person. Personal data of you are not entered or stored via these services.
We also use Google Remarketing cross-devices. This means that if you e.g. begin your shopping in our online shop on your smartphone and conclude it on your laptop, we can also reach you with the aforementioned personalised advertising messages on the other device used by you. This is however only carried out if you have agreed towards Google that your web- and app-browser progress is linked by Google with your Google account and information from your Google account is used for the personalisation of advertisements which you see in the web. Google uses in this case the data of these registered users together with Google Analytics data in order to create and define lists of target groups for the cross-device Remarketing. For the support of this function by Google Analytics Google-authenticated IDs of these users are recorded. These data of Google are temporarily linked with our Google Analytics data in order to form our target groups.
Please check the privacy settings of your Google account in order to prevent that Google links your web and app-browser progress with your Google account.
In order to be able to remind you about an interrupted order in our company in the online shop by message, no personal data are transmitted to Google, but merely the fact that you under the entered cookie-ID wanted to carry out an order in our company in the online shop and interrupted this, as well as the total price of the intended order ("shopping basket-hand-over").
You can find further information regarding the Remarketing services of Google, the details of the data processing via these services and the corresponding data protection provisions of Google under www.google.com/policies/technologies/ads/.
On our websites we also use for purposes of Retargeting or Remarketing "Custom Audiences", a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). With the help of this service we can only address you target-oriented with advertising, by so-called Facebook-Ads being placed for visitors to our websites if you visit the social network Facebook.
For this purpose we have implemented so-called Remarketing-Pixel on our websites (cf. 6.) of Facebook. When visiting our websites via the pixel a direct connection will be established to the servers of Facebook. Facebook is in the position to identify you based on the browser-ID as this is linked with other data of you stored at Facebook relating to your user account. Facebook then supplies individualised advertisements coordinated to your needs by us in your Facebook chronology or at another place of Facebook.
We ourselves are not in the position to personally identify you via the Facebook Pixel as a part from your browser-ID no further personal data are stored about the Remarketing-Pixel of Facebook in our company.
You can find further information regarding Custom Audiences of Facebook, the details of the data processing via this service and the data protection provisions of Facebook under www.facebook.com/about/privacy/.
You can deactivate the use of Facebook Remarketing by clicking on the corresponding link in the grey highlighted box further at the bottom in this section. For this purpose you must be logged into you Facebook account.
If you would not like to have advertising generated by the respective targeting service to be displayed to you can object to the use of the Retargeting technology on our websites by having your name removed from the respective targeting service. The corresponding links to the websites of the targeting services cooperating with us are as follows:
Google DoubleClick Remarketing Pixel und Google AdWords Remarketing
For details relating to the data processing by the respective targeting service you can refer to the data protection provisions of this service, which we have linked for you above. By clicking on the link you will receive information regarding how you can object to the use of targeting services on your computer.
Google AdWords Conversion Tracking
On our websites we use the function Google AdWords Conversion Tracking, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). If you click on an AdWords advertisement placed by Google, a so-called Conversion-Tracking-cookie is stored on your computer. This cookie is valid for 30 days and does not contain any personal data so that we cannot identify you personally.
With the help of the Conversion Tracking we and also Google can recognise which AdWords-advertisements you have clicked on and whether you were forwarded to our websites via this advertisement, if you visit our websites and the validity of the cookie has not expired yet. We will receive from Google an own cookie, which differs from cookies of other customers of this Google service so that we can only carry out a range measurement with regard to our cookies and not about all websites of customers of the Google service AdWords. The cookies serve to create an own Conversion statistics about customers, who visit our websites via AdWords-advertisements.
In order to object to the participation in the Google AdWords Conversion Tracking you must deactivate the storage of Google Tracking cookies by a corresponding setting in your browser. You will then not be included in our Conversion-Tracking statistics.
You can find further information regarding Google AdWords Conversion Tracking, the details of the data processing via this service and the corresponding data protection provisions of Google under www.google.com/policies/technologies/ads/
All services are used for advertising and marketing purposes with the aim of designing our offer more attractive and to give you a lovely shopping experience. As previously described with the individual services, we take your right to data protection seriously by the fact that you can object to all services and we inform you in advance of these data protection notices. The legal basis for the aforementioned data processing activities is Art. 6 Para. 1 lit. f GDPR.
If personal data of you are processed, you are the data subject within the meaning of GDPR and you are entitled to the following rights towards the responsible party:
Information, rectification, limitation to the processing and deletion
You have the right at all times to free information about the data stored in our company with regard to your person, their origin and recipients as well as the purpose of the data processing via our websites. In addition, you have the right to rectification, deletion and limitation to the processing of your personal data, if the statutory prerequisites exist for this purpose.
Right to data portability
You have the right to receive the personal data relating to you, which you have provided to us as responsible party in a structured, common and machine-readable format. We can fulfil this right by provision of a csv-export of the customer data processed about you.
Right to notification
If you have asserted the right to rectification, deletion or limitation to the processing towards the responsible party, it is obligated to inform all recipients, to whom the personal data relating to you was disclosed about this correction or deletion of the data or limitation to the processing unless this proves to be impossible or is associated with a disproportionate amount of work.
You are entitled to the right towards the responsible party to be informed about these recipients.
Right of objection
You have the right, for reasons, which arise from your particular situation, to file an objection at all times against the processing of the personal data relating to you, which is carried out owing to Art. 6 Para. 1 lit. e or lit. f GDPR; this shall also apply to a profiling supported on these provisions.
The responsible party is no longer responsible for the personal data relating to you, unless it can prove essential reasons worthy of protection for the processing, which outweigh your interests, rights and freedom, or the processing serves the assertion, exercising or defence of legal claims.
If the personal data relating to you are processed in order to operate direct advertising, you have the right to file an objection at all times against the processing of the personal data relating to you for the purpose of such advertising; this shall also apply to the profiling, insofar as associated with such direct advertising.
If you object to the processing for purposes of the direct advertising then the personal data relating to you will no longer be processed for this purpose.
You have the possibility in connection with the use of services for the information society – irrespective of the Directive 2002/58/EC – to exercise your right of objection by means of automatic processes, with which technical specifications are used.
The ability to revoke declarations of consent under data protection law
In addition, you can revoke your granted consents at all times with effect for the future towards us under the contact data stated below.
Automatic decision in an individual case including profiling
You have the right not to be submitted to a decision exclusively based on an automatic processing – including profiling –, which shall have legal effect towards you or substantially impair you in a similar manner. This shall not apply if the decision
(1) is necessary for the conclusion or the fulfilment of a contract between you and the responsible party.
(2) owing to legal regulations of the Union or the member states, which the responsible party has to comply with, is permitted and these legal regulations include reasonable measures for safeguarding your rights and freedom as well as your legitimate interests or
(3) is carried out with your explicit consent.
However, these decisions may not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, if Art. 9 Para. 2 lit. a or g do not apply and appropriate measures were taken for the protection of the rights and freedom as well as your legitimate interests.
With regard to the cases stated in (1) and (3) the responsible party will take appropriate measures in order to safeguard the rights and freedom as well as your legitimate interests, which shall in particular include the right to achieve the intervention of a person on the part of the responsible party, for presentation of the own point of view and to contestation of the decision
Right to lodge a complaint at a supervisory authority
Irrespective of a legal remedy otherwise under administrative law or in court you are entitled to the right to lodge a complaint at a supervisory authority, in particular in the member state of your place of abode, your workplace or the location of the presumed breach, if you are of the opinion that the processing of the personal data relating to you breaches the EU-General Data Protection Regulation.
The supervisory authority, at which the complaint is lodged informs the complainant about the status and the results of the complaint including the possibility of a court legal remedy according to Art. 78 GDPR.
We reserve the right to change this privacy statement for due reasons and without prior announcement. Therefore, please inform yourself regularly on this site about possible changes to this privacy statement.