Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide data has no consequences. This only applies if no other information is provided in the following processing operations.

“Personal data” means any information relating to an identified or identifiable natural person.

Server log files

You can visit our website without providing any personal data.

Each time you access our website, usage data is transmitted to us or our web host / IT service provider by your Internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.

The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offer.

Your data may be transferred to third countries outside the European Union for which the EU Commission has issued an adequacy decision.

Contact Us

Responsible person

Please contact us on request. The controller responsible for data processing is: Cartalo Gmbh, Poststraße 2, 40213 Düsseldorf info@cartalo.de

Initiative Contact by the Customer via Email

If you initiate business contact with us via email, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves to handle and respond to your contact request.

If the contact is for the purpose of pre-contractual measures (e.g., consultation in case of purchase interest, offer preparation) or concerns a contract already concluded between you and us, this data processing is based on Article 6(1)(b) GDPR.

If the contact is for other reasons, this data processing is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you based on Article 6(1)(f) GDPR.

We use your email address solely to process your request. Your data will then be deleted in compliance with legal retention periods, unless you have agreed to further processing and use.

Collection and Processing of Applications via Email

Visitors to our site can apply for open vacancies advertised on our website via email. In this process, we collect your personal data only to the extent provided by you. This includes your contact details (e.g., name, email address, phone number), information about your professional qualifications and education, details about professional training, and performance-specific evidence.

The data processing serves the purpose of contacting you and making a decision about establishing an employment relationship with you. Providing the data is necessary to conduct the application process. The processing of your personal data is based on Article 6(1)(b) GDPR in conjunction with § 26(1) BDSG for the execution of pre-contractual measures (carrying out the application process as the initiation of an employment contract).

If you have given us consent to process personal data for inclusion in our applicant pool, for example by ticking a checkbox, the processing is based on Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation.

If special categories of personal data within the meaning of Article 9(1) GDPR are requested from applicants during the application process, such as information about the degree of severe disability, this is done on the basis of Article 9(2)(b) GDPR so that we can exercise our rights and fulfill our obligations arising from labor law and social security and social protection law.

We store your personal data for as long as it is necessary to make a decision about your application. Your data will then be deleted no later than six months unless you have agreed to further processing and use. If an employment relationship follows the application process, the data you provided will be further processed for the purposes of carrying out the employment relationship on the basis of Article 6(1)(b) GDPR in conjunction with § 26(1) BDSG and subsequently transferred to the personnel file.

Collection and Processing When Using the Application Form

When using the application form, we collect your personal data only to the extent provided by you. This includes your contact details (e.g., name, email address, phone number), information about your professional qualifications and education, details about professional training, and performance-specific evidence.

The data processing serves the purpose of contacting you and making a decision about establishing an employment relationship with you. Providing the data is necessary to conduct the application process. The processing of your personal data is based on Article 6(1)(b) GDPR in conjunction with § 26(1) BDSG for the execution of pre-contractual measures (carrying out the application process as the initiation of an employment contract).

If you have given us consent to process personal data for inclusion in our applicant pool, for example by ticking a checkbox, the processing is based on Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation.

If special categories of personal data within the meaning of Article 9(1) GDPR are requested from applicants during the application process, such as information about the degree of severe disability, this is done on the basis of Article 9(2)(b) GDPR so that we can exercise our rights and fulfill our obligations arising from labor law and social security and social protection law.

We store your personal data for as long as it is necessary to make a decision about your application. Your data will then be deleted no later than six months unless you have agreed to further processing and use. If an employment relationship follows the application process, the data you provided will be further processed for the purposes of carrying out the employment relationship on the basis of Article 6(1)(b) GDPR in conjunction with § 26(1) BDSG and subsequently transferred to the personnel file.

Use of Calendly

We use the appointment scheduling feature “Calendly” provided by Calendly LLC (BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA) on our website. When using this feature, we collect and process your personal data (first and last name, email address, and phone number, message text) only to the extent provided by you. The data processing serves the purpose of appointment scheduling and user-friendliness. Calendly uses technologies such as cookies. The following information may be collected and transmitted to Calendly: IP address, date and time of page access, device model, information about the browser you use, the operating system you use, and your location. Your data may be transferred to third countries, such as the USA. For the USA, an adequacy decision of the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Calendly has certified itself under the TADPF and thus committed to complying with European data protection principles. The processing of your personal data for appointment scheduling is based on Article 6(1)(b) GDPR for the fulfillment of the contract concluded with us or for the implementation of pre-contractual measures. The use of cookies or similar technologies occurs with your consent based on § 25(1) sentence 1 TTDSG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data through the use of cookies takes place with your consent based on Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out based on the consent until revocation. For more information on data protection and the use of cookies at Calendly, please visit https://calendly.com/privacy.

Orders

Collection, Processing, and Transfer of Personal Data for Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order as well as to handle your inquiries. Providing the data is required for the conclusion of the contract. Failure to provide the data will result in no contract being concluded. The processing is based on Article 6(1)(b) GDPR and is necessary for the performance of a contract with you. Your data will be transferred, for example, to the shipping companies and dropshipping providers chosen by you, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transmission is limited to a minimum.

Your data may be transferred to third countries outside the European Union for which an adequacy decision by the EU Commission exists.

Advertising

Use of Email Address for Sending Newsletters

We use your email address independently of contract processing exclusively for our own advertising purposes to send newsletters, provided that you have expressly consented to this. The processing is based on Article 6(1)(a) GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out based on the consent until revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Use of Email Address for Sending Direct Advertising

We use your email address, which we have received in the context of the sale of a good or service, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, provided that you have not objected to this use. Providing the email address is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in direct advertising. You can object to the use of your email address for this purpose at any time by notifying us. The contact details for exercising your objection can be found in the imprint. You can also use the link provided in the advertising email for this purpose. This will not incur any costs other than the transmission costs according to the basic rates.

Use of Get Response

We use the service of GetResponse S.A. (Grunwaldzka 413, 80-309 Gdansk, Poland) for sending newsletters as part of order processing. We forward the information provided by you during the newsletter registration (email address, optionally first and last name) to GetResponse. The data processing serves the purpose of sending email advertising and its statistical evaluation. To evaluate newsletter campaigns, the sent newsletters contain a 1×1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine if you have opened the newsletter and if you have clicked on any integrated links. In this context, we collect your personal data such as IP address, browser type, device, and the time. Usage profiles can be created from this data under a pseudonym. The collected data is not used to personally identify you. The collected data is used solely for the statistical evaluation to improve newsletter campaigns. The processing of your personal data is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in a targeted, effective, and user-friendly newsletter system. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation. For more information and the GetResponse privacy policy, please visit: https://www.getresponse.com/de/legal/datenschutz.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that you may not be able to use all the functions of this website to their full extent.

You can find out how to manage cookies (including deactivating them) in the most important browsers using the links below: Chrome: https://support.google.com/accounts/answer/61416?hl=de Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09 Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise specified in the privacy policy below, we only use these technically necessary cookies to make our offering more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

The use of cookies or similar technologies is based on § 25(2) TTDSG. The processing of your personal data is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offering. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

Use of Cookiebot

We use the consent management tool Cookiebot from Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark; “Cookiebot” on our website. The tool enables you to give consents to data processing via the website, particularly the setting of cookies, as well as to exercise your right to withdraw consent already given. The data processing serves the purpose of obtaining necessary consents for data processing and documenting them in order to comply with legal obligations. Cookies may be used for this purpose. The following information, among others, may be collected and transmitted to Cookiebot: anonymized IP address, date and time of consent, URL from which the consent was sent, anonymous, random, and encrypted key, consent status. This data will not be passed on to other third parties. The data processing is carried out to fulfill a legal obligation based on Article 6(1)(c) GDPR. For more information on data protection at Cookiebot, please visit: https://www.cookiebot.com/de/privacy-policy/

Analysis Advertising Tracking Communication

Use of Google Analytics 4

We use the web analysis service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The following information may be collected: IP address, date and time of page access, click path, information about the browser you are using, the device you are using, pages visited, referrer URL (website through which you accessed our website), location data, and purchase activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data that Google has about you.

Your IP address is shortened by us on our own servers beforehand. Google thus receives only pseudonymized data.

Google uses technologies such as cookies, web storage in the browser, and tracking pixels that enable the analysis of your use of the website. The use of cookies or similar technologies occurs with your consent based on § 25(1) sentence 1 TTDSG in conjunction with Article 6(1)(a) GDPR.

The processing of your personal data occurs with your consent based on Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out based on the consent until revocation.

The information generated about your use of this website is generally transferred to a Google server in the USA and stored there. For the USA, an adequacy decision by the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to complying with European data protection principles. Both Google and US government authorities have access to your data.

For more information on terms of use and data protection, please visit https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de.

Use of the Meta Pixel

We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “Meta”) on our website. Meta and we are jointly responsible for the collection of your data when the service is integrated and for the transmission of this data to Meta. This is based on an agreement between us and Meta on the joint processing of personal data, which specifies the respective responsibilities. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools. According to this agreement, we are particularly responsible for fulfilling the information obligations pursuant to Articles 13 and 14 GDPR, for complying with the security requirements of Article 32 GDPR regarding the correct technical implementation and configuration of the service, and for complying with the obligations pursuant to Articles 33 and 34 GDPR to the extent that a data protection breach concerns our obligations under the joint processing agreement. Meta is responsible for enabling the data subject rights pursuant to Articles 15 – 20 GDPR, for complying with the security requirements of Article 32 GDPR regarding the security of the service, and for complying with the obligations pursuant to Articles 33 and 34 GDPR to the extent that a data protection breach concerns Meta’s obligations under the joint processing agreement. The application serves the purpose of targeting visitors to the website with interest-based advertising on the social networks Facebook and Instagram. For this purpose, the Meta Remarketing Tag has been implemented on the website. When visiting the website, a direct connection to the Meta servers is established through this tag. This notifies the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalized, interest-based ads. The application also serves the purpose of creating conversion statistics. We learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag and what actions were taken after being redirected to this website. However, we do not receive any information that can personally identify users. Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and thus committed to complying with European data protection principles. The processing of your personal data is based on your consent pursuant to Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation. You can deactivate the remarketing function “Custom Audiences” here. For more information on the collection and use of data by Meta, your rights in this regard, and ways to protect your privacy, please refer to Meta’s privacy policy at https://www.facebook.com/about/privacy/.

Use of Google Ads Conversion Tracking

We use the online advertising program “Google Ads” and within this context, conversion tracking (visit action evaluation) on our website. Google Conversion Tracking is an analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google). When you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity, do not contain personal data, and therefore do not serve personal identification. If you visit certain pages of our website and the cookie has not expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Therefore, there is no possibility that cookies can be tracked across the websites of different Ads customers. The information obtained using the conversion cookie is used to create conversion statistics. This allows us to determine the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can personally identify users. We use the advanced consent mode implementation. In this mode, user data is also transmitted to Google in the form of “Pings” even without consent. These pings can contain the following information: IP address to derive the IP country (the IP address is not logged), date and time of page access, URL of the visited pages, user agent, referrer URL (website from which our website was accessed), or information about the triggering of website events such as a conversion. Based on this information, Google performs a modeling of user data to enable comprehensive usage analysis despite the refusal of consent. Your data may be transferred to the servers of Google LLC in the USA. For the USA, an adequacy decision by the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to complying with European data protection principles. The use of cookies or similar technologies occurs with your consent based on § 25(1) sentence 1 TTDSG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data occurs with your consent based on Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation. For more information and Google’s privacy policy, please visit: https://www.google.de/policies/privacy/

Use of the Remarketing or “Similar Audiences” Function of Google Inc.

We use the remarketing or “similar audiences” function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. The application serves the purpose of analyzing visitor behavior and interests. To carry out the analysis of website usage, which forms the basis for the creation of interest-based advertisements, Google uses cookies. The visits to the website and anonymized data about the use of the website are collected via the cookies. No personal data of the website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to consider previously accessed product and information areas. Your data may be transferred to the servers of Google LLC in the USA. For the USA, an adequacy decision by the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to complying with European data protection principles. The use of cookies or similar technologies occurs with your consent based on § 25(1) sentence 1 TTDSG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data occurs with your consent based on Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation. For more information on Google Remarketing and the related privacy policy, please visit:https://www.google.com/privacy/ads/.

Use of the LinkedIn Insight Tag

We use the LinkedIn Insight Tag from LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; “LinkedIn”) on our website for conversion tracking (visit action evaluation) and retargeting (displaying personalized advertisements). The LinkedIn Insight Tag places a unique LinkedIn browser cookie (conversion cookie) in your browser and allows the collection of the following data for this cookie: metadata such as IP address, timestamp, and page events (e.g., page views). These cookies have a limited validity. If you visit certain pages of our website and the cookie has not expired, LinkedIn and we can recognize that you clicked on the ad and were redirected to this page. The LinkedIn Insight Tag also allows LinkedIn to collect data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics (user agent), and timestamp. This data is transmitted to LinkedIn, encrypted, the IP addresses are shortened, and the direct IDs of LinkedIn members are removed within seven days to pseudonymize the data. These remaining pseudonymized data are then deleted by LinkedIn within 90 days. LinkedIn does not share any personal data with us but provides only aggregated reports on the website audience and ad performance. LinkedIn members can control the use of their personal data for advertising purposes in their account settings. The information obtained using the conversion cookie is used to create conversion statistics. This allows us to determine the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). LinkedIn has certified itself under the TADPF and thus committed to complying with European data protection principles. The use of cookies or similar technologies occurs with your consent based on § 25(1) sentence 1 TTDSG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data occurs with your consent based on Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation. For more information on cookies and LinkedIn’s privacy policy, please visit: https://www.linkedin.com/legal/cookie-policy and https://www.linkedin.com/legal/privacy-policy.

Plug-ins and Miscellaneous

Use of Google Tag Manager

We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. This application manages JavaScript tags and HTML tags that are used to implement tracking and analysis tools in particular. The data processing serves the purpose of designing and optimizing our website according to needs. The Google Tag Manager itself does not store cookies, nor does it process personal data. However, it enables the triggering of other tags that can collect and process personal data. For more information on terms of use and data protection, please click here.

Use of Google reCAPTCHA

We use the reCAPTCHA service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. The query serves the purpose of distinguishing input by a human from automated, machine processing. Your input is transmitted to Google and used there. Additionally, the IP address and any other data required by Google for the reCAPTCHA service are transmitted to Google. These data are processed by Google within the European Union and may also be transferred to servers of Google LLC in the USA. For the USA, an adequacy decision by the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to complying with European data protection principles. The use of cookies or similar technologies occurs with your consent based on § 25(1) sentence 1 TTDSG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data occurs with your consent based on Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation. For more information on Google reCAPTCHA and the related privacy policy, please visit: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.

Use of Google Fonts

We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. The data processing serves the purpose of uniform presentation of fonts on our website. To load the fonts, a connection to Google servers is established when the page is called up. Cookies may be used in this process. Your IP address and information about the browser you are using are processed and transmitted to Google. This data is not linked to your Google account. Your data may be transferred to the USA. For the USA, an adequacy decision by the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to complying with European data protection principles. The use of cookies or similar technologies occurs with your consent based on § 25(1) sentence 1 TTDSG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data occurs with your consent based on Article 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until revocation. For more information on data processing and data protection, please visit https://www.google.de/intl/de/policies/ and https://developers.google.com/fonts/faq.

Use of LinkedIn Sales Navigator

We use the Sales Navigator tool from LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; “LinkedIn”) for acquiring business partners as well as for addressing and expanding our contacts and leads. In this process, personal data provided to us by LinkedIn may be collected. This includes, among others, the following information: first and last name, email address, contact information, employer, position, communication content, and business relationships. The data processing serves the purpose of finding suitable business partners and contacting them to present our services. The processing of your personal data is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in targeting suitable business partners and informing them about our services. You have the right to object at any time to this processing of your personal data based on Article 6(1)(f) GDPR for reasons arising from your particular situation. For more information on the functionality as well as the collection and use of your data by LinkedIn, please visit https://business.linkedin.com/de-de/sales-solutions/sales-navigator and https://de.linkedin.com/legal/privacy-policy.

Rights of Data Subjects and Storage Duration

Duration of Storage

After complete contract processing, the data will first be stored for the duration of the warranty period, then considering statutory, especially tax and commercial retention periods, and will be deleted after the period expires, unless you have agreed to further processing and use.

Rights of the Data Subject

If the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability. Additionally, under Article 21(1) GDPR, you have the right to object to processing based on Article 6(1)(f) GDPR, as well as to processing for direct marketing purposes.

Right to Lodge a Complaint with the Supervisory Authority

In accordance with Article 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint with, among others, the supervisory authority responsible for us, which you can contact at the following details:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

P.O. Box 20 04 44

40102 Düsseldorf

Tel.: +49 211/ 38424-0

Fax: +49 211/ 38424-999

Email: poststelle@ldi.nrw.de

Right to Object If the processing of personal data listed here is based on our legitimate interest pursuant to Article 6(1)(f) GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation. After your objection, the processing of the affected data will be terminated unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.

If the processing of personal data is for direct marketing purposes, you can object to this processing at any time by notifying us. After your objection, we will cease the processing of the affected data for direct marketing purposes.