Data protection

Find out more about how we protect your data.

  1. Welcome Page
  2. Data Protection

English

Privacy Statement of bonprix Handelsgesellschaft mbH
Haldesdorfer Straße 61
22179 Hamburg

Data protection is a matter of trust, and your trust and the protection of your privacy are very important to us. This is why we, bonprix Handelsgesellschaft mbH, Haldesdorfer Straße 61, 22179 Hamburg (“bonprix” and/or “we” and/or “controller”) want to inform you with the following data protection information about how we process personal data in our career portal in accordance with the GDPR (General Data Protection Regulation) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG 2018).

Please read our data protection information thoroughly. If you have any questions or comments about this Privacy Statement, feel free to contact us at personal@bonprix.net.

1.     Name and contact data of the responsible data controller
2.     Contact data of data protection officers
3.     Purposes of data processing, legal basis and legitimate interests pursued by the controller or a third party, and categories of recipients
3.1. Online presence and website optimisation (using cookies)
3.1.1.       Cookies – General information
3.1.2.       Intervention options / browser settings
3.1.3.       Consent management by redaxo
3.1.4.       Consent to the use of individual online services / collection of tracking data
3.1.4.1.       Technically required / necessary cookies
3.1.4.2.       Analytical cookies
3.1.4.2.1.   Matomo – Basic tracking
3.1.4.3.       Consent to cookies for marketing purposes
3.2. “Job-Alert” newsletter
3.3. How to contact us
3.4. Social media marketing and social plugins
3.4.1.       Social media marketing
3.4.2.       Social plugins
3.4.2.1.   Facebook “Share”
3.4.2.2.    X “re-post”
3.4.2.3.    LinkedIn “Share”
3.4.2.4.    XING “Share”
3.5. Other categories of recipients
3.5.1.       Contract data processors
3.5.2.       Recipients outside of the EU
4.     Privacy information for applicants 
4.1. Data processing for purposes of the application process
4.2. Data processing for purposes of the international application process
4.3. Storage time
4.4. Recipients of applicant data
5.     Privacy information about the Talent Management system
5.1. Data processing in the Talent Management pool
5.2. Storage time
5.3.Recipients of data
5.4.Updating of data
6.     Your rights as a data subject
7.     Your rights in detail
8.     Data security

 

1. Name and contact data of the responsible data controller

This Privacy Statement applies to data processing carried out by
bonprix Handelsgesellschaft mbH,
Haldesdorfer Straße 61, 22179 Hamburg
Phone: 040 - 64 62 321
E-mail: service@bonprix.net

Executive Board (Managing Directors):
Dr. Torben Hansen (Chief Executive Officer, Managing Director Sales)
Matthias Wlaka 
Dr. Kai Heck 
Carolin Klar
Dr. Marcus Ackermann (Chairman of the Advisory Board)

2. Contact data of data protection officers

You can reach our in-house data protection officer at

bonprix Handelsgesellschaft mbH
Datenschutzbeauftragte
Haldesdorfer Straße 61
22179 Hamburg
E-mail: datenschutz@bonprix.net

3. Purposes of data processing, legal basis and legitimate interests pursued by the controller or a third party, and categories of recipients

The following is a detailed introduction to the way we process data, structured by purposes of data processing and categories of recipients.

3.1. Online presence and website optimisation (using cookies)

3.1.1. Cookies – General information

This website uses cookies. Cookies are small text files which your browser creates automatically, and which are stored on your device (laptop, tablet, smartphone etc.). The cookies contain information that results in connection with the specific device you used. That does not mean, however, that the cookies give us any direct information about your identity. Most of the cookies we use are deleted after the end of the browser session (they are called session cookies). With these, we can provide you with, for example, the watch list function, where you can see a clear overview of all vacancies that are of interest to you. Other cookies remain on your computer and allow us to recognise your computer the next time you visit our site (they are called permanent or cross-session cookies). Among other things, these cookies are used in particular to make our website more user-friendly, effective and safe. Thanks to these files, it is possible, for example, to show you information on this website that is specially tailored to your interests.

According to legal requirements, storing information on user devices (desktops, smart phones, tablets etc.) - for instance by setting cookies - and retrieving information from user devices (tracking) is generally permitted only after you have given your consent. Legal basis for this is Art. 25 (1) TTDSG (Telecommunications and Telemedia Data Protection Act). However, we do not need your consent if this process of storing/retrieving data is necessary for the content of the website. Legal basis for this is Art. 25 (2) No. 2 TTDSG. Such a necessity exists, for example, with regard to ensuring the following functions/achieving the following purposes:

  • Transfer of information from input fields
  • Managing the watch list
  • Enabling and maintaining the log-in
  • Guaranteeing system security
  • Providing content

With regard to the data processing that is necessary for operating the website, you do not have the right to object.

If these cookies and/or the information contained in them consists of personal data, the legal basis of data processing is Art. 6 (1) f GDPR. Our interest in optimising our website is to be considered legitimate as defined by the above regulation.

3.1.2. Intervention options / browser settings

Of course you can adjust your browser settings so that your browser does not save our cookies on your hard drive any longer or deletes cookies already saved there. To do that, proceed as follows:

In Internet Explorer:

  1. In the “Extras” menu, select “Internet Options”.
  2. Click on the “Data protection” tab.
  3. Now you can manage the security settings for the internet zone. This is where you decide if and which cookies you want to accept or reject.
  4. Click “OK” to confirm your setting.

In Firefox:

  1. In the “Extras” menu, select “Settings”.
  2. Click on “Data protection”.
  3. In the drop-down menu, select the item “Set up by user-defined settings”.
  4. Now you can define whether you want cookies to be accepted, how long you want to keep them, and you can add exceptions for which websites you want to always or never allow to use cookies.
  5. Click “OK” to confirm your setting.

In Google Chrome:

  1. Click the Chrome menu in the toolbar of the browser.
  2. Now select “Settings”.
  3. Click on “Show advanced settings”.
  4. Under “Data protection”, click “Content settings”.
  5. Under “Cookies” you can define the following settings for cookies:
  • Delete cookies
  • Block cookies by default
  • Allow cookies by default
  • Delete cookies and website data after closing the browser by default
  • Allow exceptions for cookies from certain websites or domains

In Safari:

  1. Go to “Settings” and select “Safari”.
  2. Under the heading “Data Protection & Security” you’ll find the option “Always block” under the “Block cookies” tab.
3.1.3. Consent management by redaxo

To manage your settings and document the consent of users of our services, we use the following open-source consent management tool (https://github.com/FriendsOfREDAXO/consent_manager) of FriendsOfREDAXO (https://github.com/FriendsOfREDAXO) (called “Privacy Center”). The Privacy Center is used, among other things, to save the cookie settings for the entire website. With the Privacy Center, we save information about the categories of cookies the website uses, and about whether the users have given or revoked their consent to the use of the individual categories. This lets us prevent cookies from being set in every category in the user’s browser if no consent for the individual categories is given. The consent documented in this way via our Privacy Center is valid for one year.

3.1.4. Consent to the use of individual online services / collection of tracking data

As already explained above in the section on cookies (No. 3.1.1.), we collect and process data collected in connection with the use of cookies in part based on your consent. You give your consent by clicking on the “Select all” button on the banner displayed on our website, which links to these consent texts. By clicking this button, you give your consent to bonprix for storing data on your device (e.g. by setting cookies) or retrieving data from your device. You also have the option of clicking on “Settings” in the banner and managing your consent preferences there. You can change your consent and preferences at any time later on in our Privacy Center. We differentiate between “required cookies”, “analytical cookies”, “personalised cookies” and “marketing cookies”. Data processing activities that are carried out in connection with these marketing functions are described in the following (No. 3.1.4.1. to No. 3.1.4.8 of this Privacy Statement). All consent that you have given by clicking on the “Select all” button shown in the banner can be revoked in the Privacy Center with a click on the respective fields.

3.1.4.1. Technically required / necessary cookies

These are technical cookies that are necessary for the smooth operation of our website and all functions it offers. They are necessary, among other things, for transferring your application information to our applicant management system, managing your watch list, displaying our news feed, controlling filters, integrating security functions or storing your privacy settings. Your consent is not required for the use of absolutely necessary cookies on our website. Hence, technical cookies cannot be individually deactivated or activated.

3.1.4.2. Analytical cookies

Analytical cookies allow us to measure the performance of our website. With their help, we determine the number of visitors to our website and where they come from. We process the collected data in aggregated form, so it is not possible to identify any particular user of the website. If you deactivated the use of analytical cookies, we cannot analyse the performance of our website and optimise it for your visit.

3.1.4.2.1. Matomo - Basic tracking

For the purpose of needs-based design and continuous optimisation of our career pages, we use Matomo, an open-source, self-hosted software, to collect anonymous usage data for this website.

The data on visitor behaviour are collected in order to identify possible problems like pages not being found, search engine problems or unpopular pages. As soon as the data (number of visitors that see error pages or only one page, etc.) are processed, Matomo generates reports for the website operators, so they can react to any problems (layout changes, new content, etc.). Matomo uses the following data:

  • Anonymised IP addresses with the last two bytes removed (for example 198.51.0.0 rather than 198.51.100.54)
  • Pseudo-anonymised location (based on the shortened IP address)
  • Date and time
  • Title of accessed page
  • URL of accessed page
  • URL of the previous page (if that page permits it)
  • Screen resolution
  • Local time
  • Files that were clicked and downloaded
  • External links
  • Duration of page loading
  • Main language of browser
  • User agent of browser
  • Interactions with forms (but not their content)

Legal basis for this data processing is Art. 6 (1) f GDPR (legitimate interest).

You can object to the use of Matomo as a basic tracking tool at any time in our Privacy Center by deselecting the “Analytical cookies” category.

3.1.4.3. Consent to cookies for marketing purposes

We or our partners use marketing cookies to show you relevant content or advertising on our websites and websites of third parties. This allows us to create what is called pseudonym profiles based on your interests. Direct identification of your person is generally not possible with this information, as it is based solely on pseudonymised data. If you block these cookies, you will receive less relevant content and advertising tailored to your interests.

We are currently not using any marketing cookies of third-party providers.

3.2. “Job-Alert” newsletter

As part of our web presence, we invite you to sign up for our weekly “Job-Alert” newsletter. After you register, you will receive our weekly newsletter informing you of new jobs at bonprix. After you send your newsletter request, you receive a confirmation e-mail asking you to confirm your newsletter request. You are not registered for the newsletter until you activate the confirmation link (this is called a double opt-in procedure). To continue developing our newsletter and for statistical purposes, we collect data through our newsletter about when and how often it was read. We collect this information in pseudonymised form.

The legal basis of this processing activity is Art. 6 (1) a GDPR.

Information about the right of revocation
Of course you can revoke your consent at any time at personal@bonprix.net and/or at the end of every newsletter to unsubscribe from receiving our newsletter in the future, without incurring any costs other than the transfer costs according to basic rates.

3.3. How to contact us

Under the heading “Contact” we provide you with an option for getting in touch with us. This is where you will find our contact form. All of the personal data you voluntarily provide to us as part of your contact inquiry will be used exclusively to process your inquiry. Required information that we need, at a minimum, to assign your inquiry in our system and process it for you are marked with an (*). To protect your data, we transfer them only in https-encrypted form.

Legal bases for this data processing are Art. 6 (1) a, Art. 6 (1) b, Art. 6 (1) c GDPR as well as Art. 6 (1) f GDPR.

3.4. Social media marketing and social plugins.

Of course our website is not the only way to find bonprix. We also use different social media channels for targeted marketing of our company.

3.4.1. Social media marketing

For social media marketing purposes, we maintain several company pages on Facebook, Pinterest, Instagram and YouTube, as well as LinkedIn, XING and Kununu.

The underlying marketing purpose is considered a legitimate interest as defined by Art. 6 (1) f GDPR. Responsibility for operation in accordance with data protection regulations must be guaranteed by the providers of these sites.

Please see the Privacy Statements of these providers for information on the purpose and extent of data collection and the further processing and use of data by each of those providers, as well as your rights and setting options regarding this data processing. Here are the links to those Privacy Statements.

On our company’s social media page, you also have the option of contacting us directly using the comments and chat functions, and to recommend content to your friends.

If you log out of social network pages and delete any cookies that were set, you can prevent social networks from correlating information about your visit to our page to your user account with that social network.

Legal basis for this processing is Art. 6 (1) f GDPR unless specified otherwise in the following sections.

Unless specified otherwise in the following sections, we do not use your data and information beyond this extent.

3.4.2. Social Plugins

Our internet presence uses social plugins of different social networks to allow you to personally use our content. Using these plugins, we give you the option of sharing our job ads and content in social networks like Facebook, Instagram, X, LinkedIn or XING.

3.4.2.1. Facebook and Instagram “Share”

There are plugins of the social networks “Facebook” and “Instagram” of Meta Platforms Ireland Limited., 4 Grand Canal Square, Dublin, Ireland ("Meta") integrated in this website. You can recognise the Facebook plugin by the “f” on our page.

If you click the “Facebook” button or the “Instagram” button while you are logged into your Facebook or Instagram account, you can set a link to our pages in your Facebook or Instagram profile. This allows Facebook or Instagram to correlate the visit of our websites with your user account. We point out that we receive no information about the content of transmitted data and their utilisation by Meta. In these cases, further processing of the data collected on bonprix.de is the sole responsibility of the provider. The providers can transfer the data to the USA as part of this processing. The European Court of Justice has determined that the USA are a country with an insufficient level of data protection. In this context, there is a particular risk that your data can be processed by American institutions/authorities for control and surveillance purposes without providing you with sufficient legal recourse against this kind of processing. Further information is available here in the Meta Privacy Statement.

3.4.2.2. X “re-post”

There are also functions provided by Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“X”) integrated in this website. Through the use of X and the “Re-post” function, the websites you visit are correlated with your X account and made known to other users. During this process, data are transferred to X as well. To do so, your internet browser establishes a direct connection to the X servers and transmits your data to X.
We point out that we receive no information about the content of transmitted data and their utilisation by X. In these cases, further processing of the data collected on bonprix.jobs is the sole responsibility of the provider. The providers can transfer the data to the USA as part of this processing. The European Court of Justice has determined that the USA are a country with an insufficient level of data protection. In this context, there is a particular risk that your data can be processed by American institutions/authorities for control and surveillance purposes without providing you with sufficient legal recourse against this kind of processing. Further information is available here in the X Privacy Statement.
You can change data protection settings for X here in the account settings.

3.4.2.3. LinkedIn “Share”

There are also plugins of the social network LinkedIn Corporation, 1000 W Maude Sunnyvale, CA 94085, USA (“LinkedIn”) integrated in this website. If you click the “LinkedIn” button while you are logged into your account, you can set a link to our pages in your LinkedIn profile. This allows LinkedIn to correlate the visit of our websites with your user account. We point out that we receive no information about the content of transmitted data and their utilisation by LinkedIn. In these cases, further processing of the data collected on bonprix.jobs is the sole responsibility of the provider. The providers can transfer the data to the USA as part of this processing. The European Court of Justice has determined that the USA are a country with an insufficient level of data protection. In this context, there is a particular risk that your data can be processed by American institutions/authorities for control and surveillance purposes without providing you with sufficient legal recourse against this kind of processing. Furtherinformation is available here in the LinkedIn Privacy Statement.

3.4.2.4. XING “Share”

There are also plugins of New Work SE (“XING”), Dammtorstraße 30, 20354 Hamburg integrated in this website. If you click the “XING” button while you are logged into your account, you can set a link to our pages in your XING profile. This allows XING to correlate the visit of our websites with your user account. We point out that we receive no information about the content of transmitted data and their utilisation by XING. Further information is available here in the XING Privacy Statement.

3.5. Other categories of recipients

3.5.1. Contract data processors

We use third-party partners/contract data processors, who are required to provide our services and achieve certain purposes. We transmit personal data to these third-party partners if it is necessary to provide our services.

Legal basis for this data processing is Art. 6 (1) b and f GDPR.

3.5.2. Recipients outside of the EU

Applicant data are always processed in computing centres in the Federal Republic of Germany. If data are processed outside of the European Economic Area, this occurs only if the EU Commission has confirmed that the third country has an appropriate data protection level or if other appropriate data protection guarantees (in particular EU Standard Contractual Clauses) of the EU Commission have been established.

4. Privacy information for applicants 

You can use our pages to apply for vacant positions. In the following sections, we inform you of the purposes of data processing, the legal bases and recipients that are part of our applicant management.

4.1. Data processing for purposes of the application process

If you apply for a vacant position with our company via our career portal, we process the following data required to process your application and possibly for employment with our company:

  • Title
  • First name, surname
  • E-mail address
  • Mailing address
  • Date of birth
  • Phone number
  • Application documents (CV, cover letter)
  • Further optional information

We process these data, which you have sent to us as part of your application, to review your suitability for the position (or possibly other vacancies in our company - if your consent is legally required in this context, we will obtain it first) and to proceed with the application process.

If further data are processed during the ongoing application procedure, we will inform you of this processing separately.

The legal basis for processing your personal data in this application process is primarily Art. 26 of the German Federal Data Protection Act (BDSG). It stipulates that it is permissible to process data that are necessary in connection with the decision to establish an employment relationship.

If the data are needed after completion of the application process, possibly for legal proceedings, data can be processed based on the conditions of Art. 6 GDPR in particular to exercise legitimate interests as defined in Art. 6 (1) f GDPR. Our interest in this case is the assertion of or defence against claims.

If during the application process you have consented to further storage of your data for the purpose of being considered for other vacant positions, your data are processed based on your consent, Art. 6 (1) a, 7 GDPR.

If you have received an offer for a position during the application process, your data are transferred from the applicant management system to our personnel information system. Legal basis for this is Art. 26 BDSG

Information about the right of revocation
Of course you can revoke your consent at any time at personal@bonprix.net with effect for the future, without incurring any costs other than the transfer costs according to basic rates.

4.2. Data processing for purposes of the international application process

If you apply for a vacancy within the bonprix group and its European affiliated subsidiaries, you can also apply via our career portal. In such case we will also comply with the relevant local legal requirements when processing your data. We process the following data for the purposes of the application process and possibly for employment with us:

  • Title
  • First name, surname
  • E-mail address
  • Mailing address
  • Phone number
  • Application documents (CV, cover letter)
  • Further optional information

We process this data sent to us as part of our application process, to review your suitability for the position (or possibly other vacancies in our company - if your consent is legally required in this context, we will obtain it first) and to proceed with the application process.

If further data is processed during the ongoing application procedure, we will inform you of this processing separately.

The collection of personal data and further data processing within the international application process takes place via the career portal of bonprix Handelsgesellschaft mbH. The assessment of suitability for a position is carried out internationally jointly by bonprix and its affiliated subsidiaries.

Data processing as part of the international application process is carried out by bonprix Handelsgesellschaft mbH (Germany), bonprix S.r.l. (Italy), bonprix SASU (France), and bonprix sp. z o.o. (Poland) in joint responsibility, Art. 26 GDPR. The essential contractual provisions can be accessed via bonprix Handelsgesellschaft mbH (Germany).

The legal basis for the processing of your personal data in this application procedure is primarily Art. 6 para. 1 lit. b GDPR. According to this, data processing that is necessary for the implementation of pre-contractual measures that are carried out at the request of the data subject is permitted.

If the data is needed after completion of the application process, possibly for legal proceedings, data can be processed based on the conditions of Art. 6 GDPR in particular to exercise legitimate interests as defined in Art. 6 (1) f GDPR. Our interest in this case is the assertion of or defence against claims.

If during the application process you have consented to further storage of your data for the purpose of being considered for other vacant positions, your data is processed based on your consent, Art. 6 (1) a, 7 GDPR.

In case you have received an offer for a position during the application process, your data are transferred from the applicant management system to our personnel information system of the affiliated subsidiary responsible for the execution of the employment contract. Legal basis for this is Art. 6 (1) b GDPR.

Information about the right of revocation
Of course you can revoke your consent at any time at personal@bonprix.net with effect for the future, without incurring any costs other than the transfer costs according to basic rates.

4.3. Storage time

The duration for which we store the data collected about you depends on the purpose for which we process the data. We store the data for as long as necessary to achieve the intended purpose. If we are required to store certain categories of data for a particular time period due to legal obligations (e.g. tax law obligations), we continue to store the data after they are no longer needed for achieving the respective purpose, but only for the purpose of complying with the legal obligation. In these cases, the data are blocked from access.

Examples of storage times:

  • Applicant data: We generally store your applicant data for six months. If you are rejected for the position, the data are anonymised. If you have consented to further storage of your personal data, we will add your data to our talent pool (see No. 5). There, the data are deleted after a period of two years.
  • Employee data: Generally for the duration of the employee relationship, unless longer retention periods are mandated by law.

4.4. Recipients of applicant data

Your application data are reviewed by our personnel department after we receive them. Suitable applications are then transferred internally to the department heads responsible for the open position. If according to legal regulations your consent is required and we have obtained it, the application documents may also be forwarded to other responsible persons in other departments. As a general rule in our company, only those persons have access to your data who need them for the proper processing of our application procedure. This also includes the members of employee representation. As part of system upkeep and maintenance, persons entrusted with this task may become aware of your data. These persons or any service providers are obligated to maintain data secrecy.

5. Privacy information about the Talent Management system 

The following special data protection information applies to the Talent Management pool.

5.1. Data processing in the Talent Management pool

The bonprix talent pool is a candidate management system of bonprix Handelsgesellschaft mbH (Haldesdorfer Straße 61, 22179 Hamburg) which is focused on acquiring talent. The talent pool allows us to simplify the process of contacting talented persons and making them transparent for future development and exciting challenges within our company. To do that, we
e-mail selected persons invitations and information on professional and career events as well as current events at bonprix via their profile in the talent pool and upon request. Finally, we notify you of special job offers at bonprix.

In order to offer the candidates the listed advantages and to administer the talent management, our system needs to process certain personal data. 

The following data you provide are processed.

  • Title, surname, first name
  • Image data
  • E-mail address
  • Mailing address
  • Phone number
  • Personal data (e.g. about your training)
  • Interests
  • Competences (future) salary requirements, annexes

For students: Using a test for determining potential, an additional aptitude test is administered once to determine the suitability of the talent. In this process, a result score is determined and saved. This type of data processing is based on Art. 6 (1) a GDPR (consent). 

5.2. Storage time

We will store your data for a maximum of two years after entry into the talent pool. Independently of that, if your personal data are stored in the talent pool, they are deleted according to the applicable data protection principles referenced above, with the understanding that we will ask you per e-mail to update your data if you have not modified or used your profile over a period of six months. If you do not update your profile within one month following that e-mail, we will remove you from the talent pool and delete your personal data. In addition, we will contact you shortly before the end of the two years since your entry to find out whether you would like to remain in the talent pool.

5.3. Recipients of data

The personal data stored in the talent pool are only accessible to authorised employees of the personnel marketing and recruiting teams. These employees are permitted to use the data only for the purposes listed above. When you enter into an application process, your data are shared with the respective company unit. Of course your personal data are kept strictly confidential. 

Participation in the Talent Management system is voluntary. Legal basis for the processing of personal data of employees of bonprix Handelsgesellschaft mbH is Art 26 BDSG in connection with the applicable company regulations; for everyone else, the basis is separately given consent according to Art. 6 (1) a GDPR, which is obtained with the registration process based on the data protection information presented here. As soon as the talent has initiated an application process, the information on the application process, which you can review under No. 4, apply as well.

5.4. Updating of data

You can delete your data in the talent pool yourself in your profile at any time without stating reasons. Also, you can update your data yourself via manual entry or an automated CV upload, or link to the listed business networks. If you encounter problems regarding the updating or deleting of your data, please contact either your personal support or personal@bonprix.net. 

6. Your rights as a data subject

In the context of our processing of your personal data, you have certain rights as a data subject. You have the right to receive information on the data we have stored about you. Also, you can revoke any consent you have given us and object to individual data processing activities. You further have the right to have incorrect data corrected, and you can request that we send you certain data in a commonly used electronic format. You also have the right to have us delete the data we have stored about you. In this regard, please be aware that we may be legally obligated to continue to store your data despite your exercising your right to deletion. Furthermore, in individual constellations we have an interest in continuing to store your data that outweighs your interest in their deletion (e.g. if we have outstanding claims against you).

7. Your rights in detail

If you want to exercise your rights as a data subject, please address your request in writing or text form to:

Bonprix Handelsgesellschaft mbH
- Personnel Department -
Haldesdorfer Straße 61
22179 Hamburg

or by e-mail to personal@bonprix.net

Aside from the right to revoke any consent you have given us, you have the following further rights, contingent on the applicable legal prerequisites:

  • Right to information

You have the right to information about your personal data we have stored about you (Art. 15 GDPR), in particular you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or are being disclosed, the planned storage time, and the origin of your data if they were not collected directly from you.

  • Right to correction

You have the right to correction of incorrect data or completion of incomplete data (Art. 16 GDPR).

  • Right to deletion

You have the right to request deletion of the data we have stored about you at any time, (Art. 17 GDPR), as long as we are not required to comply with any legal or contractual retention times or other legal obligations or rights to further storage (e.g. if we have outstanding claims against you).

  • Right to restriction of processing

If the legal prerequisites of Art. 18 GDPR are fulfilled, you have the right to request restriction of processing of your data at any time (Art. 18 GDPR). This is the case, in particular, if you contest the correctness of the data, the processing is unlawful but you object to deletion, if the controller no longer needs the data, but you need them to exercise, enforce or defend legal claims, or if you have objected to processing as defined in Art. 21 GDPR.

  • Right to data portability

You have the right to data portability (Art. 20 GDPR), i.e. the right to have certain data we have stored about you transmitted to you in a commonly used, machine-readable format, or to request that we transmit the data to another controller.

  • Right to complain

You have the right to complain to a supervisory authority. Generally, you can turn to the supervisory authority at your usual place of residence or your workplace, or at the location of our company’s registered office.

8. Data security

All data you transmit to us personally are transmitted with the generally used and secure SSL (Secure Socket Layer) standard. SSL is a secure and tested standard, which is also used in online banking, for example. You can recognise a secure SSL connection, among other things, by the “s” appended to the http (https://...) in the address bar of your browser or by the lock symbol in the upper or lower area of your browser.

In all other respects, we use suitable technical and organisational security measures to keep your personal data we have stored safe from manipulation, partial or complete loss, and unauthorised third-party access. Our security measures are continuously improved to keep pace with technological developments.

 

Last updated: 15/07/2024