Privacy Policy
Scope
Below, we provide information about data protection when you visit our website.
As a rule, you can use our website without providing personal data.
Where personal data is collected when you visit our websites, we process it exclusively in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Personal data is processed exclusively in accordance with this Data Protection Notice. Separate data protection information for customers and business partners is available via the corresponding link on the website.
This Data Protection Notice applies to the use of the website at efalia-ecm.com and its various subdomains. For linked content provided by other organisations, the privacy notice published on the linked website applies.
Please note that security vulnerabilities may arise when data is transmitted over the internet, and these cannot be completely prevented by the technical design of this website. Complete protection of personal data is not possible when using the internet.
Controller
The controller responsible for processing personal data in connection with the use of this website is:
Efalia GmbH
Obere Kaiserswerther Straße 17
47249 Duisburg
Germany
Telephone: +49 (0) 203 60 888 0
Email: datenschutz.de@efalia.com
Represented by:
Sascha Freiburg, Managing Director
Data Protection Officer
We have appointed the following Data Protection Officer:
Mr Olaf Tenti, Dipl.-Inform.
GDI Gesellschaft für Datenschutz und Informationssicherheit mbH
Alter Schloßweg 30
58119 Hagen, North Rhine-Westphalia
Germany
Telephone: +49 (0)2331/356832-0
Email: datenschutz@gdi-mbh.eu
Website: www.gdi-mbh.eu
Hosting
Our website is operated on our own servers.
When you access our website, data is collected automatically and stored in log files on the server used to host the website. This data may be capable of identifying an individual. The data collected includes:
- the IP address of the requesting computer, in anonymised form;
- the name of the website accessed;
- the date and time of access;
- the volume of data transferred;
- confirmation that access was successful;
- the type of internet browser;
- the version of the internet browser; and
- the operating system used by the browser, including its patch level.
We use the collected data to ensure the website operates smoothly, to maintain IT security and to improve our services. Where there are specific indications of misuse or a security incident, the log data may be analysed retrospectively. Temporary storage of the IP address is necessary to deliver the website to the user’s device. Your IP address must therefore remain stored for the duration of the session.
This data is not combined with other data sources.
The legal basis for collecting this data is Article 6(1)(f) GDPR. Our legitimate interest arises from the purposes described above.
The data is deleted as soon as it is no longer required for the purpose for which it was collected. Where data is collected to make the website available, this is the case when the relevant session ends.
Where data is stored in log files, this technical information is deleted or anonymised no later than 14 days after collection.
The collection of data to provide the website and the storage of data in log files are essential for operating the website. You therefore have no right to object to this processing.
Cookies
In addition to the data referred to above, cookies are used on your computer or device when you use and visit our website.
When you visit our website for the first time, you will be asked whether you consent to the use of cookies and, if so, which categories of cookies you accept.
Cookies are small text files created by your browser on your device to store certain information. They are also used to make our services more pleasant and convenient to use or for analytical purposes.
Most of the cookies we use are known as session cookies. They are used to make the technical functions of our website available to you. After your visit, these cookies are automatically deleted by your browser.
Other cookies remain on your device and enable us to recognise it on your next visit. These are known as persistent or permanent cookies.
When you next access our website using the same device, the information stored in the cookies is read either by our website, in the case of a first-party cookie, or by another website to which the cookie belongs, in the case of a third-party cookie.
These cookies are automatically deleted from your system after a predefined period, which varies depending on the cookie.
The stored and returned information enables the relevant website to recognise that you have previously accessed and visited it using the browser on your device.
We use this information to optimise and display the website in accordance with your preferences. Only the cookie itself is identified on your device.
Any additional storage of personal data takes place only with your express consent or where it is strictly necessary to enable you to use a service that you have requested.
This website uses the following types of cookies, whose scope and function are explained below.
Essential cookies
Strictly necessary cookies enable functions without which you would not be able to use our website as intended. These cookies are used exclusively by us. For example, they may ensure that, as a logged-in user, you remain logged in when accessing different subpages of our website and do not have to enter your login details again each time you open a new page. The legal basis for their use is our legitimate interest under Article 6(1)(f) GDPR.
Functional cookies
Functional cookies enable our website to remember information you have already provided and to offer improved functions on that basis. The legal basis for using these cookies is your consent under Article 6(1)(a) GDPR.
Marketing or tracking cookies
These cookies are used to collect information about the websites visited by users, to create more targeted and effective advertising and to identify the interests of website visitors so that we can make our website more relevant and attractive in future.
Marketing and/or tracking cookies are placed only after you have actively given your consent.
The legal basis for this processing is Article 6(1)(a) GDPR.
Opting out of marketing cookies
You can also manage cookies used for online advertising using tools developed under self-regulatory programmes in many countries, such as YourAdChoices in the United States or Your Online Choices in the European Union.
You can withdraw your consent to cookies at any time with effect for the future by using the consent-management link provided on the website.
You can configure your browser to notify you when cookies are set and to allow cookies only in individual cases, for example third-party cookies. You can also block cookies in specific cases or generally, and enable automatic deletion of cookies when you close the browser. You can delete cookies stored in your browser at any time.
You may also disable cookies generally in your browser at any time.
However, disabling cookies may restrict the functionality of this website.
Deleting cookies
Cookies remain stored on your device until you delete them, which you can do at any time. Expired cookies are also automatically deleted by your browser if it has been configured accordingly. Expired cookies are no longer sent to our servers by your browser and can therefore no longer be used by us.
Information about deleting cookies and managing cookie settings is available for the most common browsers below.
Desktop computer or laptop
Mobile devices
- Google Chrome for Android
- Google Chrome for iOS
- Apple Safari for iOS
- Samsung Internet for Android
- Mozilla Firefox for Android
Unless you have made different settings, cookies required to enable or ensure essential technical functions remain on your device until you close the browser. Other cookies may remain on your device for longer, but for no more than six months.
To protect your privacy, you should regularly review and delete the cookies and browsing history stored on your devices.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection because the address in the browser changes from “http://” to “https://” and a padlock symbol appears in the browser’s address bar.
When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties. The protocols authenticate the other party to the communication and ensure the integrity of the data being transmitted.
Retention period
Unless a more specific retention period is stated in this Data Protection Notice, we retain your personal data until the purpose for processing it no longer applies. If you submit a valid request for erasure or withdraw your consent to processing, your data will be deleted unless we have other legally permissible grounds for retaining it, such as retention periods under tax or commercial law. In that case, the data will be deleted once those grounds no longer apply.
Contact options
You can contact us by email via our website.
In this context, the information contained in your email, including the contact details you provide, is stored and processed so that we can handle your enquiry and respond to any follow-up questions. This data, such as your name and email address, will not be disclosed to third parties without your consent.
The data is not combined with other data collected on this website.
The contact form is transmitted using TLS encryption. The encryption is intended to prevent unauthorised third parties from accessing your personal data.
This data is processed on the basis of Article 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is required in order to take steps before entering into a contract. In all other cases, processing is based on our legitimate interest in dealing effectively with enquiries addressed to us under Article 6(1)(f) GDPR.
The data you provide in your email remains with us until you ask us to delete it, object to the processing or the purpose for storing it no longer applies, for example once your enquiry has been fully processed. Mandatory statutory provisions, particularly retention periods, remain unaffected.
Job applications
You can apply for a position with our company via our website.
We accept digital applications, whether you are applying for an advertised vacancy or making a speculative application. Separate data protection information for applicants is available via the corresponding link on the website.
Transfers of data to third countries
We use various service providers on our website that supply us with different technologies and tools. Some of these providers transfer personal data to countries outside the European Union or European Economic Area, for example the United States, where the level of data protection may not be adequate or substantially equivalent to that provided under European data protection law. Any such transfer of personal data must comply with Articles 44 et seq. GDPR.
An adequacy decision under Article 45(3) GDPR is in place for the United States. Personal data may therefore be transferred from the EU to companies and organisations in the United States that are certified under the EU-U.S. Data Privacy Framework without additional safeguards being required. This adequacy decision serves as the basis for transfers to the US service providers we use.
Where there is no adequacy decision under Article 45(3) GDPR, or where a company or organisation in the United States is not certified under the EU-U.S. Data Privacy Framework, we enter into the European Commission’s Standard Contractual Clauses with the relevant service provider in accordance with Article 46(2)(c) GDPR to protect your data.
Where possible, we also agree additional safeguards intended to ensure an adequate level of data protection in the United States or other third countries.
Where a service provider has approved binding internal data protection rules, known as Binding Corporate Rules or BCRs, which ensure that European data protection standards are observed within the organisation, we do not enter into separate Standard Contractual Clauses with providers covered by those BCRs.
Despite contractual and technical safeguards, the level of data protection in a third country may still not correspond to that in the EU. In such cases, we ask for your consent under Article 49(1)(a) GDPR to transfer personal data to a third country as part of the cookie-consent process, through contact forms or when you register or log in to other services.
Google Maps
We use Google Maps on this website. The service is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, or, where your registered office or place of residence is in the EU, by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Maps is embedded in the website via the Google API so that location information can be visualised and displayed on a map. The files required for this purpose are requested from Google domains including maps.googleapis.com, maps.gstatic.com, fonts.googleapis.com and/or fonts.gstatic.com.
Gstatic is a domain used by Google to load static content under a different domain name in order to reduce bandwidth usage and improve network performance for the end user.
Processing your IP address by Google Maps is technically necessary in order to display the map. Other web services integrated via Google APIs are governed by the relevant Google API sections of this Privacy Notice.
When you visit the website, Google is informed that you have accessed the relevant subpage of our website. The following information is also transmitted:
- your IP address;
- the date and time of the request;
- the time-zone difference from Greenwich Mean Time (GMT);
- the content of the request, meaning the specific page;
- the access status or HTTP status code;
- the volume of data transferred;
- the website from which the request originated, known as the referrer;
- the type and version of the browser used, including the language version; and
- the type and version of the operating system, including the interface used.
This information, including your IP address, is transmitted directly by your browser to a Google server in the United States and stored there.
For transfers to the United States, the provider participates in the EU-U.S. Data Privacy Framework, which is based on an adequacy decision by the European Commission and is intended to ensure compliance with the European level of data protection.
The transfer takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. To prevent the data being associated with your Google profile, you must log out of your Google account before using our website.
Google stores your data as usage profiles and uses it for advertising, market research and/or the needs-based design of its website. Such analysis is carried out in particular, including for users who are not logged in, to provide targeted advertising and to inform other users of the social network about your activities on our website.
You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google.
You can prevent the collection and transmission of personal data to Google, particularly your IP address, and prevent Google from processing this data by disabling scripts in your browser, installing a script blocker or enabling your browser’s “Do Not Track” setting. Google’s security and privacy principles are available in its privacy documentation.
Further information about the purpose and scope of the collection and processing of data by the plug-in provider is available in Google’s privacy policies. These also contain further information about your rights and the settings available to protect your privacy.
We have entered into an agreement with Google on joint processing in relation to Google Maps. The agreement is available through Google’s business privacy documentation.
Data is transferred to the United States on the basis of your consent under Article 6(1)(a) GDPR.
You may withdraw your consent to data processing at any time with effect for the future. To do so, delete your browser cookies or use the link for managing your consent provided in the “Cookies” section of this Privacy Notice. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Google Fonts
The integration of Google Maps causes Google Fonts to be loaded. Google Fonts is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, or, where your registered office or place of residence is in the EU, by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
We have no control over this process.
The files required for this purpose may be requested from Google domains including fonts.googleapis.com, maps.gstatic.com, maps.googleapis.com and/or fonts.gstatic.com.
Gstatic is a domain used by Google to load static content under a different domain name in order to reduce bandwidth usage and improve network performance for the end user.
When you visit the website, Google is informed that you have accessed the relevant subpage of our website. The following information is also transmitted:
- your IP address;
- the date and time of the request;
- the time-zone difference from Greenwich Mean Time (GMT);
- the content of the request, meaning the specific page;
- the access status or HTTP status code;
- the volume of data transferred;
- the website from which the request originated, known as the referrer;
- the type and version of the browser used, including the language version; and
- the type and version of the operating system, including the interface used.
This information is transmitted directly by your browser to a Google server. According to Google, it does not store this information and uses it only to provide the requested fonts and to detect and, where necessary, prevent attacks on its IT systems.
Where you have consented to activation of the tools described above and therefore to the loading of Google Fonts, the legal basis for processing is your consent under Article 6(1)(a) GDPR.
For transfers to the United States, the provider participates in the EU-U.S. Data Privacy Framework, which is based on an adequacy decision by the European Commission and is intended to ensure compliance with the European level of data protection.
Further information about the purpose and scope of the collection and processing of data by the plug-in provider is available in Google’s privacy policies. These also contain further information about your rights and the settings available to protect your privacy.
TeamViewer
To assist with support requests, we offer our customers remote maintenance using TeamViewer software. The provider of this software is TeamViewer GmbH, Jahnstraße 30, 73037 Göppingen, Germany.
To use remote maintenance, you must download and run the TeamViewer software from the provider using a link supplied by us. TeamViewer GmbH’s own privacy terms apply to your use of the software, because TeamViewer GmbH is your contractual partner for that use.
TeamViewer enables temporary access to your system, allows your screen to be viewed and enables remote control of your mouse and keyboard. Before granting access, please close all windows containing information that must be protected under data protection law or that is commercially sensitive.
You can end remote maintenance at any time by selecting “Close connection”.
We always treat information obtained through remote maintenance as confidential and protect your trade secrets. Personal data disclosed to us during remote maintenance is neither stored by us nor disclosed to third parties.
We have entered into a data processing agreement with the provider named above. This is an agreement required under data protection law and ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
The legal basis for this processing is Article 6(1)(a) GDPR. This means that the data subject has consented to the processing of personal data relating to them for one or more specific purposes.
TeamViewer’s privacy policy, data protection commitment and End User Licence Agreement, including the data processing agreement, are available on TeamViewer’s website.
Profiles on social networks
Our profiles on the social networks and video platforms listed below are used to communicate actively and in a contemporary manner with customers and interested parties. We use them to provide information about our services, products and special offers relating to our company and its services. Further information about us as the provider of each social-media channel is available in our legal notice.
The following information is provided under Article 13 GDPR in relation to the social-media profiles we operate:
- X: x.com/filedirector
- YouTube: youtube.com/@efaliade
- LinkedIn: linkedin.com/company/efalia-gmbh
X, formerly Twitter
The social network X, formerly Twitter, is operated by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, United States, or, where your registered office or place of residence is in the EU, by Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“Twitter”).
When you visit our social-media profiles, your data may be collected and stored automatically for market-research and advertising purposes. Pseudonymous usage profiles are created from this data. These profiles may be used, for example, to display advertisements within and outside the platforms that are assumed to correspond to your interests. Cookies are generally stored on your device for this purpose.
Information about how cookies function is provided in the relevant platform’s privacy information. Please refer to that information. The cookies store information about visitor behaviour and user interests.
The legal basis for collecting and processing data is your consent under Article 6(1)(a) GDPR, which you may have given or may give to Twitter when accessing its website. You can withdraw your consent to data processing at any time with effect for the future by contacting Twitter directly. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Detailed information about Twitter’s processing and use of data, contact options, your rights and the privacy settings available to you can be found in Twitter’s privacy information.
Because X is not certified under the EU-U.S. Data Privacy Framework, we have entered into Standard Contractual Clauses with X in accordance with Article 46(2)(c) GDPR.
YouTube
The YouTube video platform is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States, or, where your registered office or place of residence is in the EU, by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
The following information does not relate to any direct embedding of YouTube videos on our website.
When you visit our YouTube channel, your data may be collected and stored automatically for market-research and advertising purposes. Pseudonymous usage profiles are created from this data. These profiles may be used, for example, to display advertisements within and outside the video platform that are assumed to correspond to your interests. Cookies are generally stored on your device for this purpose.
Information about how cookies function is provided in the relevant platform’s privacy information. Please refer to that information. The cookies store information about visitor behaviour and user interests.
We also receive statistical analyses based on the collected data showing which groups of people are interested in individual videos published on YouTube. In particular, we receive viewing figures and information about how long videos are played. The data is provided for statistical analysis in a sufficiently anonymised form that individuals cannot be identified.
This information may include an approximate geographical location, an age group and other aggregated characteristics.
The legal basis for collecting and processing data is your consent under Article 6(1)(a) GDPR, which you may have given or may give to Google when accessing its website. You can withdraw your consent to data processing at any time with effect for the future by contacting Google directly. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
For transfers to the United States, the provider participates in the EU-U.S. Data Privacy Framework, which is based on an adequacy decision by the European Commission and is intended to ensure compliance with the European level of data protection.
Detailed information about Google’s processing and use of data on YouTube, contact options, your rights and the privacy settings available to you can be found in Google’s privacy information.
LinkedIn company profile
For recruitment purposes, we use the professional and careers network LinkedIn and maintain a company profile there. LinkedIn is operated by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, California 94085, United States, or, where your registered office or place of residence is in the EU, by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).
We have entered into a data processing agreement with LinkedIn, which is available through LinkedIn’s legal information.
When you visit our LinkedIn company profile, LinkedIn may automatically collect and store your data for market-research and advertising purposes and to present job vacancies that are assumed to be of interest to you. This is known as Page Insights. Pseudonymous usage and interest profiles are created from this data. Cookies are generally stored on your device for this purpose.
LinkedIn provides information about how cookies function in its privacy notice and cookie policy. Please refer to those documents. The cookies store information about visitor behaviour and user interests.
We also receive statistical analyses based on the collected data showing which groups of people are interested in our company page. The data is processed for statistical purposes in a sufficiently anonymised form that individuals cannot be identified. These analyses may include information such as approximate geographical location, age group and other aggregated characteristics.
The processing of personal data through LinkedIn Page Insights is carried out on the basis of an agreement between joint controllers under Article 26 GDPR. This agreement is available through LinkedIn’s legal information.
Irrespective of the internal responsibilities agreed between LinkedIn and us, you may submit any data-protection enquiry either to us or our Data Protection Officer, or directly to LinkedIn.
Where LinkedIn asks you to consent to data processing, for example by selecting a tick box, the legal basis for processing is Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future by contacting LinkedIn. Processing carried out before withdrawal remains lawful.
To disable LinkedIn advertising cookies, use LinkedIn’s retargeting opt-out settings.
Detailed information about LinkedIn’s processing and use of data, contact options, your rights and the privacy settings available to you can be found in LinkedIn’s privacy policy. LinkedIn’s cookie policy is also available on its website.
For transfers to the United States, the provider participates in the EU-U.S. Data Privacy Framework, which is based on an adequacy decision by the European Commission and is intended to ensure compliance with the European level of data protection.
XING and Kununu profiles
We maintain profiles on XING and Kununu to present our company. XING and Kununu are provided by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.
Our XING profile is used to approach potential employees actively and in a contemporary manner within a professional environment. We also share information about our company and present our organisation publicly through this profile. We provide information about our services, products, special offers and employment opportunities within our company.
Where XING asks you to consent to data processing, for example by selecting a tick box, the legal basis for processing is Article 6(1)(a) GDPR.
Detailed information about the providers’ processing and use of data, contact options, your rights and the privacy settings available to you can be found in XING’s privacy information.
Kununu primarily allows users to submit and read reviews of employers. We also use our Kununu profile to provide information about our company, career opportunities, products and services.
When you visit or otherwise interact with our Kununu page, Kununu may collect users’ personal data, including through the use of cookies. Kununu may also collect data from users who are not logged in or registered with Kununu.
Information about Kununu’s collection and further processing of data can be found in Kununu’s privacy information.
The data is processed jointly. In relation to content that you provide directly on the platform, such as comments, private messages or similar content, New Work SE and Efalia GmbH act as joint controllers under Article 26 GDPR.
The legal basis for processing is your consent under Article 6(1)(a) GDPR, where you have given such consent, and otherwise the pursuit of legitimate interests under Article 6(1)(f) GDPR. Where you contact us, Article 6(1)(b) GDPR may also apply where processing is necessary in order to take steps before entering into a contract.
Our legitimate interest is in communicating with you through our Kununu page and providing information about our company, career opportunities, vacancies, products and services.
Information about how XING and Kununu process your data is available in XING’s privacy policy, which applies to all services provided by New Work SE.
Because only New Work SE has information about the data actually collected and used on the relevant platforms, requests for access and the exercise of other data-subject rights should be addressed directly to New Work SE. You may, of course, also submit such requests to us, in which case we will forward them to the platform operator for further processing.
Through the XING and Kununu platforms, we process only data that you communicate directly to us. This includes comments, enquiries, your user profile, reviews and similar information. This data is retained for as long as the relevant profile remains active.
The data we process is processed only within the European Union or European Economic Area. We do not transfer this data to third countries.
Your rights and how to exercise them
You have the rights set out below and may exercise them against us. To do so, use the contact details provided above or email info.de@efalia.com.
Right of access
Under Article 15 GDPR, you have the right to request information about the personal data we process concerning you. In particular, you may request information about the purposes of processing; the categories of personal data concerned; the categories of recipients to whom your data has been or will be disclosed; the intended retention period; the existence of a right to rectification, erasure, restriction of processing or objection; the existence of a right to lodge a complaint; the source of your data where it was not collected from you; and the existence of automated decision-making, including profiling, together with meaningful information about the details involved where applicable.
Rectification
Under Article 16 GDPR, you have the right to request without delay that inaccurate personal data stored by us be corrected or that incomplete personal data be completed.
Erasure
Under Article 17 GDPR, you have the right to request the erasure of your personal data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.
Restriction of processing
Under Article 18 GDPR, you have the right to request restriction of the processing of your personal data where you dispute the accuracy of the data; the processing is unlawful but you oppose erasure; we no longer need the data but you require it for the establishment, exercise or defence of legal claims; or you have objected to processing under Article 21 GDPR.
Data portability
Under Article 20 GDPR, you have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller.
Withdrawal of consent
Under Article 7(3) GDPR, you have the right to withdraw consent previously given to us at any time. This means that, from that point onwards, we may no longer continue any processing based on that consent.
Please send notice of withdrawal using the contact details provided above or by email to info.de@efalia.com.
Right to object
You have the right, on grounds relating to your particular situation, to object at any time to processing of personal data concerning you that is based on Article 6(1)(e) or (f) GDPR. This also applies to profiling based on those provisions.
The controller will no longer process the personal data concerning you unless the controller can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or unless the processing is required for the establishment, exercise or defence of legal claims.
Where personal data concerning you is processed for direct-marketing purposes, you have the right to object at any time to the processing of that personal data for such marketing. This also applies to profiling to the extent that it is related to direct marketing.
Where you object to processing for direct-marketing purposes, the personal data concerning you will no longer be processed for those purposes.
In connection with the use of information-society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
This does not apply where the decision is necessary for entering into or performing a contract between you and the controller; is authorised by Union or Member State law applicable to the controller, provided that the law contains suitable measures to safeguard your rights, freedoms and legitimate interests; or is based on your explicit consent.
Such decisions must not, however, be based on special categories of personal data under Article 9(1) GDPR unless Article 9(2)(a) or (g) GDPR applies and suitable measures have been taken to protect your rights, freedoms and legitimate interests.
Complaint to a supervisory authority
Under Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority for your usual place of residence, your place of work or the location of our registered office.
Status of this Privacy Notice
The continuing development of the internet means that this Privacy Notice must be amended from time to time. We reserve the right to make appropriate changes at any time.
Last updated: July 2026