Privacy Policy

The protection of your personal data is very important to us. When processing this data, Le Service Course strictly complies with the applicable provisions of data protection law of the European Union as well as the data protection law of France.

This privacy policy statement informs you about the data we collect on our websites, the purposes for which we process this data, the recipients to whom we may transfer the data, the legal basis for processing the data, the retention period data, data controllers and your rights.

1. Data controller

The Service Course is responsible for data processing within the meaning of Article 13, paragraph 1, point a) of the General Data Protection Regulation (GDPR)

Le Service Course , Carrer de la Ginestrola, Villelongue dels Monts, 6740, France
Such. : +33 ( 0)756867597
Email: service@leservicecourse.fr

2. Specific information on data processing operations

2.1. Personal data

Article 4(1) GDPR defines personal data as any information relating to an identified or identifiable natural person. Personal data is for example name, address, telephone number, e-mail address, bank details, credit card number.

2.2. Data processing for the execution of a contract

When you place an order with Le Service Course , we need personal data for the processing of the purchase, in particular for the dispatch of the goods ordered, the processing of returns or complaints. We request information about name, address, e-mail address as well as the necessary payment data. Your e-mail address is necessary to confirm receipt of your order, to inform you of the dispatch of your goods or to contact you. Data processing is therefore carried out for the purpose of fulfilling the contract.

You can also contact Le Service Course before the conclusion of the contract and send us a request by e-mail, for example to receive advice from us. In this case, we process the data you have transmitted to us such as e-mail address and name for the purpose of carrying out a pre-contractual measure.

The legal basis for the processing of data for the purpose of the execution of a contract or the execution of a pre-contractual measure following a request by the data subject corresponds to Article 6 (1) point b. ) of the GDPR.

In order to process your order, Le Service Course transmits personal data to service partners such as payment providers (including banks, Paypal, Amazon Pay, credit card companies) and shipping service providers (including Chronopost, DHL, DPD, Hermes, transport company), insofar as this is necessary for the performance of your contract. It is also possible to forward the goods to a supplier who will deliver them directly to you. The data transmitted can only be used by the recipient to fulfill his mission. Any other use is not permitted.

We keep the data necessary for the processing of the contract until the expiry of the legal guarantee periods.

Personal data processed for the purpose of carrying out pre-contractual measures is deleted within 12 months if no contract has been concluded.

2.3. Newsletter

You can subscribe to the Le Service Course newsletter as part of the ordering process or separately via our shop website. We use the double opt-in procedure to confirm your request. This means that we will send you an e-mail containing a link which will allow you, as the holder of the e-mail address, to confirm your subscription to the newsletter. It is only after this confirmation that the subscription to the newsletter will be effective.

We use the data you provide to us for advertising purposes after you subscribe to the Le Service Course newsletter. We store your e-mail address and the language in which you use the Le Service Course online store.

If you have consented to personalized advertising, we also process tracking data about your user behavior when visiting our online store, including data relating to purchases made or canceled and when using our newsletter, in order to personalize our newsletter and our advertising e-mails. In addition, we may use the email address you use to make an attribution to your order history and stored data about individual orders you have placed (for example, your address, shopping carts or shopping behavior). purchase). We also store data on your interests, title, name and date of birth, if and insofar as you have provided this optional information as part of the newsletter registration.

The legal basis for this data processing is Article 6(1)(a) GDPR. Data processing only takes place after explicit consent.

You can revoke your consent at any time with effect for the future. Each newsletter contains an unsubscribe link. By using this unsubscribe link, the newsletter intended for your e-mail address will be canceled directly. In addition, you can revoke your consent at any time by sending an e-mail to service@leservicecourse.fr . The recording of data relating to your e-mail address may be kept for up to three years after your unsubscription for reasons of proof and defense against legal action. The recording in question is then automatically deleted. The legal basis for this data processing is Article 6(1)(f) GDPR.

You can revoke your consent in whole or in part. In particular, you have the possibility to revoke your consent to the personalization of our newsletter only by sending an e-mail to service@leservicecourse.fr . If you limit your revocation to personalization, we may send you our general newsletters.

In addition, we store registration data as part of the double opt-in procedure. The legal basis for the collection and storage of this data is Article 6(1)(f) GDPR. The data processing is carried out in order to prove an existing consent. This is the necessary legitimate interest.

2.4. Customer account

You have the option of creating a Le Service Course customer account. This personal access, protected by a password, offers you a series of useful functions, in particular the consultation of your orders of the last two years, the display and the download of your invoices, the management of the personal data of the customers, the adding and editing different shipping addresses, saving a standard payment method and creating a personal memo or wishlist.

The legal basis for this data processing is Article 6(1)(a) GDPR. Data processing only takes place after explicit consent. The data stored in the customer account is kept as long as you consent. You can revoke your consent at any time with effect for the future. An informal message to the contact details mentioned under point 1 (data controller) is sufficient for this purpose. In the event of withdrawal of consent, your customer account, including the data stored there, will be deleted.

3.Cookies

3.1. What is a cookie ?

"Cookies" are small text files which are stored on your data carrier and contain certain settings and data. We use cookies on our websites to provide you with an optimal user experience, to compile statistics on the use of our websites and to enable marketing activities.

3.2. Personal cookie settings

When you visit the Le Service Course store for the first time or if you have deleted your browser data, we ask you using our cookie consent tool if we can use cookies and, if so, which ones .

Technically necessary cookies are always activated. These cannot be disabled. You are free to decide whether you want to allow comfort cookies or marketing and statistics cookies. The use of these types of cookies is only permitted with your explicit consent. We offer you an overview in which you can make your personal selection for each tool. You must actively consent to the use of these types of cookies in order to enable them. It is also possible to consent to the use of all cookies with a single click.

The Cookie Consent Tool for your personal cookie settings can be accessed at any time via the store's footer. You can make an individual selection at any time and revoke any given consent with effect for the future.

Your personal selection is stored on your data carrier using a cookie. If you do not delete cookies, you will not be asked again the next time you visit our store.

3.3. Technically necessary cookies

Technically necessary cookies are cookies that are mandatory for the use of the website or for which there is a legitimate interest. We use the following technically necessary cookies:

Cookie name	Purpose or function	Period of validity
ID	This cookie contains the session ID. This is necessary in order to be able to attribute the actions of a user on several pages consulted. This is necessary, for example, in order to be able to assign the current shopping cart or the current login to a specific user on several visited pages.	As long as the browser is open
CookieConsent	This cookie contains your personal cookie settings, which you have defined and saved in our cookie consent tool.	1 year from the date of the last saving of cookie settings
domainSwitchSuggestion	This cookie saves the information that the user has already been offered the change of language and therefore domain by a pop-up. This cookie prevents the user from being permanently bothered by this pop-up.	1 year from the display of the pop-up window
CountryTax	This cookie contains country-specific VAT rates based on the country selection made.	24 hours from your action
__cf_bm	This cookie is absolutely necessary for Cloudflare's security features and cannot be disabled. For more information on Cloudflare, see point 8.	24 hours maximum from the last visit to the site
deliveryLocation	This cookie contains the delivery country and postal code specified by the user to calculate the availability and delivery time of express services.	24 hours from your action

3.4. Comfort cookies

Convenience cookies are cookies that make the use of the shop more pleasant and comfortable, for example through additional functions in the shop. We only use comfort cookies if you have given your consent. The webshop can also be used without these convenience cookies. However, the user experience may be significantly worse.

3.4.1. Cart cookie

Cookie name	Purpose or function	Period of validity
BasketStore	This cookie contains the current shopping cart identifier and, if applicable, the assignment of this identifier to a login. The cart ID allows the cart to persist beyond the user's current session. The contents of the basket can therefore be restored even weeks or months after the last visit to the page.	1 year from the last modification of the basket

The shopping cart cookie ensures that your shopping cart and its contents are retained, even after the end of a session. If you close the browser window and want to continue shopping the next day, for example, the contents of the basket are still available.

If you do not allow the installation of this cookie, your shopping cart will be empty after closing the browser window. The entire content of the basket is then lost.

The legal basis for using the BasketStore cookie is your consent. The access and storage of information on your end device, such as cookies, is based on the consent you have given in accordance with § 25 paragraph 1 TTDSG. The legal basis for the processing of your personal data is the consent you have given in accordance with Article 6(1)(a) GDPR.

The consent you have given can be revoked at any time - with effect for the future - via the cookie settings on our website.

3.5. Marketing and statistics cookies

We use web analytics tools to generate data about the use of our websites in order to improve our store in a targeted manner and ultimately provide a better user experience. We use the web analytics tools Google Analytics and Google Tag Manager provided by Google Ireland Limited ("Google"), whose registered office is at Gordon House, Barrow Street, Dublin 4, Ireland. In connection with these tools, we also use tracking tools from trbo GmbH, Römerstr. 6, 80801 Munich. The aforementioned tools also install cookies, provided that you have given your express consent for this.

You will find out more about the processing of your personal data by Google Analytics, Google Tag Manager and Trbo in point 4 of this privacy policy.

3.6. Technically necessary cookies from third-party providers

When you select certain payment methods such as Amazon Pay or Paypal, cookies are installed to enable payment with each payment method.

When we integrate elements of "Facelift Cloud" into our website such as competitions or an Advent calendar and you visit the corresponding page with your browser, a cookie is placed by "Facelift Cloud" for the purpose of identification as well as to prevent attacks against the "Facelift Cloud" server infrastructure. For more information on “Facelift Cloud”, see point 9.

Cookies are also set if you wish to play YouTube videos associated with The Course Service .

In all these cases, cookies are not initially installed when calling up the page concerned. Cookies are only set as a result of an action on your part, for example when you actively select the Paypal payment method or when you play an embedded YouTube video.

3.7. Legal basis for the use of cookies

The legal basis for the use of technically necessary cookies is Article 6(1)(f) GDPR. The use of these cookies is done in the legitimate interest of ensuring the proper functioning of The Course Service .

The legal basis for the use of comfort cookies (3.4.) and marketing and statistics cookies (3.5.) is Article 6(1)(a) GDPR. You have declared your consent by giving your explicit consent in our cookie consent tool (Cookie Consent Tool): For more information on the cookie consent tool and personal cookie settings, see point 3.2.

3.8. Withdrawal of consent and deletion of cookies

You can revoke your consent to the use of cookies at any time with effect for the future.

You can use the cookie consent tool for this purpose. Your personal cookie settings can be accessed at any time via the store's footer. You can save a selection without comfort cookies and marketing and statistics cookies.

You can also delete all existing cookies in your browser settings. Then, the next time you visit the Le Service Course website, you will be prompted to make a new decision about your personal cookie settings using our cookie consent tool.

4. Marketing and analytics tools

If you have expressly given your consent, Le Service Course installs marketing and analysis tools. They help us to better understand how you use our website, to present personalized content to you and to improve our shop in general. In addition, they also allow us to adapt our marketing measures to your centers of interest and to evaluate the success of these measures. To do this, we install cookies and other technologies, such as local storage and scripts that allow us to save or consult information on your device.

Typically, marketing and analytics tools process the following data:

• - The device's IP address
• - Information from a cookie or information contained in local storage or session storage
• - Mobile device identifier (e.g. device or ad ID)
• - Referrer URL (previously visited pages)
• - The pages consulted (date, time, URL, title, duration of the visit)
• - Downloaded files
• - Links to other websites you have clicked on
• - Technical information: operating system; browser type, version and language; device type, brand, model and resolution
• - Approximate location (country and city if applicable)

You can give us your permission through our cookie consent tool. In the case of analysis and marketing tools, you also authorize the sending of data to third countries such as the United States which do not offer the same level of data protection as the EU. We would like to point out that in the United States the level of data protection has nothing to do with that offered in the European Union due to the applicable American law. In particular, you run the following risks: rights not or poorly applied, no independent data protection organization that can help you enforce these rights. It is also possible that security services based in the United States may access your data. No access limit concerning the principle of proportionality, nor any guarantee of protection of your data is provided. There is no effective legal protection against such access to your data.

You can revoke your consent or change your choices at any time by accessing the Cookie Consent Tool via the "Cookie Settings" link under the "About The Course Service " option in the footer. website page.

4.1. Google Analytics and Google Tag Manager

If you agree, The Course Service uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”) located at Gordon House, Barrow Street, Dublin 4, Ireland for persons located in Europe , in the Middle East and Africa (EMEA), and by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA for all other persons. Google Analytics uses tracking cookies, local storage and scripts to analyze your use of the website. The information collected with your help about your use of this website is usually sent to a Google server in the United States and stored there. The Course Service uses Google Analytics with the “anonymizeIP” parameter. Thus, IP addresses are only partially processed by Google Analytics to avoid any direct individualization of users.

The following data is processed by Google Analytics:

• - The IP address (which is however anonymized before processing)
• - Referrer URL (previously visited pages)
• - The pages consulted (date, time, URL, title, duration of the visit)
• - Downloaded files
• - Links to other websites you have clicked on
• - The achievement of certain objectives if necessary (conversions)
• - Technical information: operating system; browser type, version and language; device type, brand, model and resolution
• - Approximate location (country and city if applicable, assuming the IP address has been anonymized)

The storage period for cookies is a minimum of 14 months and a maximum of 26 months.

Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide the website operator with additional services relating to the website. use of the site and the use of the Internet.

In addition to revoking your consent, you can prevent the storage of cookies by configuring your browser software. However, we would like to point out that in this case you will not be able to use all the functions of this website. You can also prevent Google from collecting and processing the data generated by cookies and data about your use of the website (including your IP address) by downloading and installing the browser plug-in available via the following link: Browser add-on to disable Google Analytics .

To integrate Google Analytics, we use Google Tag Manager offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for those located in the European Union and Switzerland, and by Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA (“Google”) for all other persons. This tool takes care of activating Google Analytics via a script and ensuring proper integration. Google Tag Manager temporarily processes the connection data that is required when establishing the communication. Google Tag Manager does not analyze your usage patterns.

We have entered into an order data processing contract with Google Ireland Limited. In the event that personal data is transmitted to the United States, Google Ireland Limited and Google LLC have implemented standard contractual clauses (module 3). When we ask for your consent, we also ask for your express consent to send your data to the United States.

Further information can be found in Google's privacy statement.

4.2. Google Optimize

If you have consented to its use, The Course Service uses the Google Optimize service for analysis purposes, which is offered for people in Europe, the Middle East and Africa (EMEA) by Google Ireland Limited (" Google") whose registered office is at Gordon House, Barrow Street, Dublin 4, Ireland, and for all other persons by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Optimize is used to stage different variations of our website and its content (eg different positions of elements, different colors, fonts, buttons, text lengths, paragraphs, titles, graphics, images) and to analyze their effects and differences (e.g. reduced bounce rate, increased dwell time) with respect to user behavior (so-called A/B testing). This helps us to improve our website and make it more attractive to our users. For this purpose, data and analyzes from Google Analytics (4.1) may also be used to assess the success or failure of a test. Google Optimize uses cookies and scripts. The information collected with their help about your use of this website is usually transferred to a Google server in the USA and stored there.

The following data is processed by Google Optimize:

• - User ID (for the duration of participation in the A/B test);
• - Clicks on Google ads and related advertising campaign information;
• - IP address (which is however made anonymous before any further processing);
• - Referrer URL (previously visited page);
• - Pages viewed (date, time, URL, title, time spent);
• - Downloaded files;
• - clicked links to other websites;
• - Achievement of specific objectives (conversions);
• - Technical information: Operating system; Browser type, version and language; Device type, brand, model and resolution;
• - Approximate location (country and city, if applicable, based on anonymized IP address).

The storage period of cookies is at least 10 seconds and does not exceed 3 months.

In order to integrate Google Optimize, we use the Google Tag Manager, which is offered for persons in the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all others by Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA ("Google"). The Google Tag Manager supports the activation of Google Optimize by means of a script and ensures the correct integration of the tool. The Google Tag Manager only temporarily processes connection data that is inevitably generated by establishing the connection. A usage analysis by the Google Tag Manager itself does not take place.

We have entered into a data processing agreement with Google Ireland Limited for the use of Google Optimize and Google Tag Manager. Google Ireland Limited and Google LLC have entered into standard contractual clauses (module 3) for the event that personal data is transferred to the United States. We also seek your express consent for the transfer of data to the United States as part of the declaration of consent.

5. Social media platforms

On the Le Service Course website you will find links to the social media platforms of Facebook, Youtube, Instagram and Twitter where Le Service Course is represented and offers content. These are static links. The Course Service does not use social media plugins.

The Service Course is present in social media to get in touch with our customers, interested parties and other users and to inform them about products, events or competitions. We draw your attention to the fact that personal data is collected and processed by the respective provider when you visit the corresponding pages. The legal basis for the processing of users' personal data is Article 6(1)(f) GDPR. The legitimate interest of Le Service Course is the optimal design and improvement of the presentation of the company.

If you use our offers in the respective social network as a logged-in member, you have given your consent to the processing of data in accordance with Article 6 (1) (a) GDPR vis-à-vis the social media platform . In order to understand our activities and improve them, we use corresponding evaluations in the form of statistics that the respective provider makes available to us.

5.1. Facebook

The Service Course uses the technical platform of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for the aforementioned information service.

Please note that you use this Facebook page and its functions on your own responsibility. This applies in particular to the use of interactive functions (eg comments, sharing, rating).

When you visit our Facebook page, Facebook collects, among other things, your IP address. This and other information is used to provide us, as operators of the Facebook pages, with statistical data on the use of our Facebook page. More information is available on Facebook with the following link:

https://www.facebook.com/help/pages/insights

Data collected about you through this process may be stored and processed by Facebook Ltd. outside the European Union. We cannot provide information on whether and how Facebook uses data from visitors to our Facebook page for its own purposes. We also do not know whether your data is passed on to third parties, merged with data from other Facebook offers, how long Facebook retains the data and whether page visits are assigned to individual users. You can read what information Facebook actually receives and how it uses it in Facebook's Data Use Policy. You will also find further contact options for Facebook as well as setting options for advertisements in the data usage guidelines. You can find the data usage guidelines here:

https://www.facebook.com/about/privacy

You can find Facebook's full data policy here:

https://www.facebook.com/full_data_use_policy

The Course Service does not collect or process any other data from your direct use of Facebook. Data processing is only possible in the case of raffles or prize draws. In these cases, we use the contact details, for example to contact the winners of our prize draws. The Course Service uses the Facebook Insights software for the general evaluation of the Facebook page. The data is provided to us anonymously by Facebook and does not allow us to draw any conclusions about individual users. As mentioned above, we use this statistical data from Facebook Insights to design and improve our offer on Facebook accordingly.

According to information provided by Facebook, Facebook saves your IP address when you visit our Facebook page. According to Facebook, this data is anonymized and deleted after a storage period of 90 days (German IP addresses). In addition, Facebook stores information about the terminals you use for the visit. The assignment of IP addresses may possibly lead to the identification of individual users.

Facebook stores cookies with your Facebook ID on your end device when you are logged in to Facebook. This cookie allows Facebook to track the pages you have visited on Facebook. This applies to the Facebook page of Le Service Course as well as to the Facebook pages of other providers. If you use a Facebook button integrated into a website, Facebook can associate this use with your profile. This enables Facebook to show you advertisements that result from your user behavior.

You can avoid this by logging out of Facebook before visiting the Le Service Course Facebook page and disabling the “stay logged in” function. You must also delete all cookies from your terminal device and restart your browser. You can then use our Facebook page without your Facebook ID being processed.

If you want to use Facebook functions to interact with us (like, comment, share, send a message, etc.), a login screen is displayed. This form of interaction is only possible for registered members of Facebook. However, as soon as you are logged in again, Facebook will recognize you as a user again. For more information on Facebook's data policy, please see the following link:

https://www.facebook.com/about/privacy

5.2. instagram

The Service Course uses the technical platform of Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland or Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) for the aforementioned service. Instagram stores personal data about you when you visit this page.

The Service Course , as a responsible party, has entered into an agreement with Facebook, which also regulates the conditions of use of the Instagram page. Instagram's terms of service on https://help.instagram.com/581066165581870 and the other terms and policies listed there at the end are fundamental.

By processing the information, Facebook is able to serve advertisements for its users via its own network. At the same time, the processing of data by Facebook allows Le Service Course to use the statistics provided by Facebook. In this way, Le Service Course can optimally design its own content and better reach its users. Some of these statistics include demographic and geographic information. However, The Course Service has no influence on the underlying data. We are not aware of all of this data.

It is likely that the data collected about you will be stored and processed by Facebook Ltd. outside the European Union.

As an Instagram user, you can influence the storage of data and the recording of user behavior by Instagram in your profile settings.

Instagram users can influence the extent to which their user behavior can be recorded, in the advertising preferences settings, when they visit our Instagram page.

Further information can be found in the Facebook and Instagram settings:

https://www.facebook.com/login.php?next

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/

or the form relating to the right of opposition at the following address

https://www.facebook.com/help/contact/1994830130782319

If you want to prevent the setting of cookies by Facebook and the associated processing of your data, configure your browser in such a way that no cookies from third-party providers or from Facebook are allowed.

For more information on Facebook's processing of personal data on Instagram, please see their privacy policy at: https://help.instagram.com/519522125107875 Or http://instagram.com/about/legal/privacy/ .

5.3. Youtube

On the website of Le Service Course , for example, videos of the corresponding brands are displayed for certain articles and brand shops. The videos are made available on the video portal of YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, (YouTube) by the brands. The Service Course also has its own YouTube channel.

YouTube is a subsidiary of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

The videos are used by Le Service Course exclusively within the framework of the “extended mode of data protection”. According to Youtube, this function only transmits user data to Youtube when a video is actually started.

If you start a video as a logged in YouTube member, the video call is tied to your YouTube account. You can prevent the linking of this information if you log out of your customer account with YouTube before visiting our website. You can also make the necessary settings in your YouTube user account.

Youtube places permanent cookies on your device to ensure functionality and to analyze user behavior, according to its own statement. You can prevent the storage of cookies on your device by making the corresponding settings in your browser.

The following link will provide you with more information about data collection by Google and your rights vis-à-vis Google:

https://policies.google.com/privacy

5.4. Other information

If you wish to assert your data subject rights vis-à-vis the mentioned social media platforms, it is advisable to contact the respective platform directly with your request for information. Even if a joint responsibility arises from the cooperation between Le Service Course and the various platforms, the latter alone have the possibility of providing you with complete information on the data that you have recorded there. However, if you need our help, you can contact us at any time.

If you have any questions about data protection, please contact our data protection officer at service@leservicecourse.fr

If you have questions about an order in progress or need advice on a product, please contact our competent service team exclusively. You will find information on how to contact us here: https://le-service-course.fr/pages/contact

For data protection reasons, we do not make our customer service available via "social media platforms".

6. Your rights as a user

We would like to summarize your rights under the General Data Protection Regulation below.

6.1. Right to revoke the declaration of consent under data protection law (Art. 7 para. 3 GDPR).

You have the right to revoke your consents at any time. The withdrawal of consent does not affect the legitimacy of the processing carried out on the basis of the consent until the withdrawal. You will be informed of this before giving your consent.

6.2. Right to information (Article 15 GDPR)

Under Article 15 of the GDPR, you have the right to request confirmation from us whether or not we are processing personal data relating to you. If this is the case, you have a right of access to this personal data and to the following information:

- the purposes for which we process this data;
- the categories of personal data we process;
- to whom these personal data have been or will be disclosed, in particular if they are recipients in third countries or international organisations;
- if possible, the planned duration of the storage of the personal data or, if this is not possible, the criteria for determining this duration;
- the existence of a right to rectify or delete personal data concerning you or to limit processing or a right to object to processing by us;
- the existence of a right of appeal to a supervisory authority;
- where the personal data is not collected from you, all available information on the origin of the data;
- whether automated decision-making, including profiling in accordance with Article 22(1) and (4) GDPR, takes place and, if so, meaningful information about the logic involved and the scope and effects intended for this treatment on you.
- If personal data is transferred to a third country or an international organization, you have the right to be informed of the appropriate safeguards which ensure that the provisions of the GDPR are also complied with by these recipients.

6.3. Right to rectification (Article 16 GDPR)

You can ask us to rectify any inaccurate data concerning you without delay. Taking into account the purposes of the processing, you also have the right to request that incomplete personal data be completed, including by means of a supplementary declaration.

6.4. Right to erasure or “right to be forgotten” (Article 17 GDPR)

You have the right to ask us to delete the data immediately if one of the following reasons applies:

- The data is no longer necessary for the purposes for which it was collected or otherwise processed.
- You withdraw your consent on which the processing was based and there is no other legal basis for the processing.
- You object to the processing on grounds relating to your particular situation pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing.
- You object to the processing for direct marketing purposes pursuant to Article 21(2) GDPR.
- The data has been processed unlawfully.
- The deletion of the data is necessary to comply with a legal obligation under European or German law.
- The data was collected in relation to services offered by the information society in accordance with Article 8(1) GDPR.

If we have made your data public and are compelled to delete it, we will take reasonable steps, taking into account available technology and implementation costs, to notify those responsible that you have requested its deletion.

6.5. Right to restriction of processing (Article 18 GDPR)

Pursuant to Article 18 of the GDPR, we may only process data restrictedly in the following cases. This is the case when:

- You dispute the accuracy of your data until we are able to verify it;
- The processing is unlawful and you refuse the deletion of your data and instead request the limitation of the use of personal data;
- We no longer need the data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or
- you object to the processing in accordance with Article 21(1) of the GDPR on grounds relating to your particular situation, and as long as it is not yet clear whether the legitimate grounds for the processing by us prevail about your interests.

If the processing has been restricted, we can only store this data. Any processing beyond this framework is then only permitted with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

You can revoke your consent given in this context at any time.

You will be informed by us before the restriction is lifted.

6.6. Notification obligation (Art. 19 GDPR)

We are obliged to inform all recipients to whom your data has been communicated of a rectification or deletion of your data or of a restriction of processing. This does not apply if this proves impossible or if it involves disproportionate means. We will provide you with the names of these recipients if you so request.

6.7. Right to data portability (Article 20 GDPR)

You have the right to receive the data about you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to have us transfer this data to a third party, provided

- Whether the data processing is based on your consent or on a contract and
- that the processing is carried out using automated procedures.

In doing so, you can request that we transfer your data directly to the third party, insofar as this is technically possible. This right must not infringe the rights and freedoms of other persons.

6.8. Automated individual decision, including profiling (Article 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing – including profiling – where it produces legal effects concerning or similarly affecting you. This does not apply if:

- You have previously given your express consent to this or
- if the decision is necessary for entering into or performance of a contract between us or
- if the applicable legal provisions allow it and if these provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests.

In the first two cases, we will take reasonable steps to protect your rights and freedoms and your legitimate interests. It is up to you here to explain your own position, to challenge the automatic decision and to request the intervention of one of our collaborators.

6.9. Right to object (Article 21 GDPR)

If we process your data on the basis of a legitimate interest (Article 6(1)(f) GDPR), you have the right to object if the reasons for this result from your particular situation. This also applies to profiling based on these provisions. In this case, we will no longer process your data, unless we can demonstrate compelling legitimate grounds for the processing. This must override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process your data for direct marketing purposes, you can object to the processing of this data. This also applies to profiling insofar as it is related to this direct advertising.

After your objection, your data will no longer be processed for these purposes.

To object, simply send an informal message to the contact details indicated in point 1 (data controller).

6.10. Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you believe that the processing of the data about you violates the General Data Protection Regulation. This approach is without prejudice to any other administrative or judicial remedy to which you may claim.