European Standard
DATA PRIVACY
As of: September 13, 2024
Table of Contents
• Overview of processing operations
• Applicable legal frameworks
• Security protocols
• Transmission of personal data
• Data processing in third countries
• Deletion of data
• Use of cookies
• Business Services
• Service providers and services utilized in the course of business operations
• Contact and Inquiry Management
• Newsletter and electronic notifications
• Web analytics, monitoring, and optimization
• Social media presence
• Plugins and embedded functions, as well as content
• Amendment and update of the privacy policy
• Data subject rights
Party responsible
red cable robots GmbH
Represented by Dr. Roland Boumann and Patrik Lemmen
Bullermannshof 11
47441 Moers
Email address:
kontakt@redcablerobots.de
Overview of processing operations
The following overview summarizes the categories of processed data and the purposes of their processing, and references the data subjects concerned.
Types of processed data
• Inventory data.
• Payment data.
• Location data.
• Contact information.
• Content data.
• Contract data.
• Usage data.
• Metadata, communication, and process data.
Categories of data subjects
• Clients.
• Prospective clients.
• Communication partner.
• Users.
• Business partners and contracting parties.
Purposes of processing
• Provision of contractual services and customer support.
• Contact inquiries and communications.
• Direct marketing.
• Range measurement.
• Office and organizational procedures.
• Administration and processing of inquiries.
• Feedback.
• Marketing.
• Profiles with user-specific data.
• Provision of our online services and user-friendliness.
Governing Legal Framework
The following provides an overview of the GDPR legal bases upon which we process personal data. Please note that in addition to GDPR regulations, national data protection requirements in your or our country of residence or registered office may apply. Furthermore, should more specific legal bases be applicable in individual cases, we will inform you of these within the privacy policy.
• Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR) - The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
• Performance of contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR) - Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Legal obligation (Art. 6 para. 1 sentence 1 lit. c) GDPR) - Processing is necessary for compliance with a legal obligation to which the controller is subject.
• Legitimate Interests (Art. 6(1)(f) GDPR) - Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
In addition to the data protection regulations of the GDPR, national data protection regulations apply in Germany. This includes, in particular, the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG), which governs the protection against the misuse of personal data during data processing. The BDSG specifically contains specialized provisions regarding the right of access, the right to erasure, the right to object, the processing of special categories of personal data, processing for alternative purposes, data transfer, and automated individual decision-making, including profiling. Furthermore, it regulates data processing for employment purposes (Section 26 BDSG), specifically concerning the establishment, execution, or termination of employment relationships, as well as employee consent. Additionally, state data protection laws of the individual federal states may apply.
Security protocols
In accordance with statutory requirements and taking into account the state of the art, implementation costs, and the nature, scope, context, and purposes of processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
These measures specifically include safeguarding data confidentiality, integrity, and availability by controlling physical and electronic access to the data, as well as governing data retrieval, entry, transfer, availability protection, and separation. Furthermore, we have established protocols to ensure the execution of data subject rights, data erasure, and rapid response to data security threats. Additionally, we integrate personal data protection directly into the development and selection of hardware, software, and operational processes, adhering to the principles of data protection by design and by default.
Transmission of personal data
Within the scope of our processing of personal data, it may occur that data is transmitted to or disclosed to other entities, companies, legally independent organizational units, or individuals. The recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content integrated into a website. In such cases, we comply with legal requirements and, in particular, conclude corresponding contracts or agreements with the recipients of your data designed to protect your data.
Data processing in third countries
If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA)) or if processing occurs within the framework of utilizing third-party services or through the disclosure or transfer of data to other persons, entities, or undertakings, this shall only be executed in compliance with statutory requirements.
Subject to explicit consent or contractually or legally required transmission, we process or have data processed only in third countries with an recognized level of data protection, contractual obligation through so-called standard contractual clauses of the EU Commission, in the presence of certifications or binding corporate rules (Art. 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).
Deletion of data
The data processed by us will be erased in accordance with statutory requirements as soon as consent for processing is withdrawn or other legal permissions cease to apply (e.g., if the purpose of processing this data no longer exists or the data is not required for the purpose). If the data is not erased because it is required for other legally permissible purposes, its processing will be restricted to these purposes. This means the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons, or whose storage is necessary for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person.
Furthermore, our privacy policy may contain additional details regarding the retention and erasure of data, which shall take precedence for the respective processing operations.
Use of Cookies
Cookies are small text files, or other storage records, that store information on terminal devices and read information from them. For example, they are used to save the login status in a user account, the contents of a shopping cart in an e-shop, the accessed content, or the utilized functions of an online service. Furthermore, cookies can be deployed for various purposes, such as ensuring the functionality, security, and convenience of online services, as well as generating traffic and visitor flow analyses.
Consent notice: We utilize cookies in strict compliance with legal regulations. Consequently, we obtain prior consent from users unless such consent is not legally required. Specifically, consent is not required if the storage and retrieval of information—including cookies—is strictly necessary to provide the telemedia service (i.e., our online platform) explicitly requested by the user. Revocable consent is clearly communicated to users and includes detailed information regarding the respective cookie usage.
Information on legal bases under data protection law: The legal basis under data protection law on which we process users' personal data using cookies depends on whether we request user consent. If users consent, the legal basis for processing their data is the declared consent. Otherwise, the data processed using cookies will be processed on the basis of our legitimate interests (e.g., in the efficient commercial operation of our online services and improving their usability) or, if this occurs in the context of fulfilling our contractual obligations, when the use of cookies is necessary to meet our contractual commitments. The purposes for which we process cookies are explained throughout this privacy policy or within the scope of our consent and processing workflows.
Storage duration: With regard to the storage duration, a distinction is made between the following types of cookies:
• Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online service and closed their terminal device (e.g., browser or mobile application).
• Permanent Cookies: Permanent cookies remain stored even after the terminal device is closed. This allows, for example, the login status to be saved or preferred content to be displayed directly when the user visits a website again. Likewise, the user data collected with the help of cookies can be used for reach measurement. Unless we provide users with explicit information on the type and storage duration of cookies (e.g., as part of obtaining consent), users should assume that cookies are permanent and the storage period can be up to two years.
General Information on Revocation and Objection (Opt-Out): Users may revoke their given consent at any time and may also object to processing in accordance with the legal requirements of Art. 21 GDPR. Users may also declare their objection through their browser settings, e.g., by disabling the use of cookies (which may also limit the functionality of our online services). An objection to the use of cookies for online marketing purposes can also be declared via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/.
Additional information regarding processing operations, procedures, and services:
• Processing of cookie data based on consent: We employ a cookie consent management procedure through which user consent for the use of cookies—or the processing and providers specified within the cookie consent management framework—can be obtained, managed, and revoked by users. This consent declaration is stored to prevent repetitive prompts and to provide legally required proof of consent. Storage may occur on the server side and/or within a cookie (a so-called opt-in cookie, or via comparable technologies) to map the consent to a specific user or their device. Subject to individual specifications regarding the cookie management service providers, the following terms apply: The retention period of the consent data can be up to two years. In this process, a pseudonymous user identifier is generated and stored alongside the timestamp of consent, details on the scope of consent (e.g., which categories of cookies and/or service providers), as well as the browser, system, and end-user device utilized.
Commercial services
We process data of our contractual and business partners, e.g., customers and prospective clients (collectively referred to as "contractual partners"), within the scope of contractual and comparable legal relationships, as well as associated measures and in the context of communication with the contractual partners (or pre-contractually), e.g., to respond to inquiries.
We process this data in order to fulfill our contractual obligations. This specifically includes the obligations to render the agreed services, any update obligations, and remedies in the event of warranty claims and other performance disruptions. Furthermore, we process the data to safeguard our rights and for the purpose of administrative tasks associated with these obligations, as well as for corporate organization. In addition, we process the data based on our legitimate interests in proper and economically viable business management, as well as security measures to protect our contractual partners and our business operations against abuse and threats to their data, secrets, information, and rights (e.g., involving the participation of telecommunications, transport, and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers, or tax authorities). Under applicable law, we only disclose the data of contractual partners to third parties to the extent necessary for the aforementioned purposes or to fulfill legal obligations. Contractual partners will be informed of other forms of processing, e.g., for marketing purposes, within the scope of this privacy policy.
We inform the contracting parties prior to or during the data collection process (e.g., in online forms) which data is required for the aforementioned purposes by means of special marking (e.g., colors) or symbols (e.g., asterisks or similar), or in person.
We delete the data upon expiration of statutory warranty and comparable obligations, i.e., generally after 4 years, unless the data is stored in a customer account, e.g., for as long as it must be retained for legal archiving reasons. The statutory retention period for tax-relevant documents as well as commercial ledgers, inventories, opening balance sheets, annual financial statements, the operating instructions and other organizational documents required to understand these records, and accounting vouchers is ten years, and for received commercial and business letters and copies of sent commercial and business letters, six years. The retention period begins at the end of the calendar year in which the final entry was made in the ledger, the inventory, the opening balance sheet, the annual financial statements, or the management report was drawn up, the commercial or business letter was received or sent, or the accounting voucher was created, or furthermore, the recording was made or the other documents were created.
Insofar as we utilize third-party providers or platforms to perform our services, the terms and conditions and privacy policies of the respective third-party providers or platforms shall apply to the relationship between the users and the providers.
• Types of data processed: Master data (e.g., names, addresses); Payment data (e.g., bank details, invoices, payment history); Contact data (e.g., email, phone numbers); Contractual data (e.g., contract subject matter, term, customer category).
• Affected parties: Prospective customers; business and contractual partners.
• Purpose of processing: Fulfillment of contractual obligations and customer service; contact requests and communication; office and organizational procedures; management and handling of inquiries.
• Legal bases: Performance of a contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR); Legal obligation (Art. 6 para. 1 sentence 1 lit. c) GDPR); Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Service providers and services utilized in business operations
Within the scope of our business operations, we utilize additional third-party services, platforms, interfaces, or plug-ins (referred to as "services") in compliance with statutory regulations.
• Affected parties: customers; prospective customers; users
• Purpose of processing: Provision of contractual services and customer support; administrative and organizational procedures.
• Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Contact and Inquiry Management
When establishing contact with us (e.g., via mail, contact form, email, telephone, or social media), as well as within the framework of existing user and business relationships, the data of the inquiring parties shall be processed to the extent necessary to respond to the inquiries and implement any requested measures.
• Processed data types: Contact data (e.g., email, telephone numbers); Content data (e.g., entries in online forms); Usage data (e.g., visited websites, interest in content, access times); Meta, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status).
• Affected parties: Communication partners.
• Purpose of processing: contact inquiries and communication; management and handling of inquiries; feedback (e.g., collecting feedback via online form); provision of our online offering and user experience.
• Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Newsletters and electronic notifications
We dispatch newsletters, emails, and other electronic notifications (hereinafter referred to as "newsletters") solely with the consent of the recipients or on a legal basis. If, during registration for the newsletter, its contents are specifically defined, those terms are binding for the user's consent. Otherwise, our newsletters contain information regarding our services and our company.
To subscribe to our newsletters, providing your email address is generally sufficient. However, we may request a name for the purpose of personal address in the newsletter, or additional details if they are required for the administrative purposes of the newsletter.
Double Opt-In Procedure: Registration for our newsletter is systematically conducted via a double opt-in procedure. This means that after registering, you will receive an email requesting confirmation of your registration. This confirmation is required to prevent unauthorized registration using third-party email addresses. Newsletter registrations are logged to verify the registration process in compliance with legal requirements. This logging includes the recording of the registration and confirmation timestamps, as well as the IP address. Any modifications to your data stored with the dispatch service provider are also logged.
Deletion and restriction of processing: Based on our legitimate interests, we may store unsubscribed email addresses for up to three years before deleting them to prove previously granted consent. The processing of this data is restricted to the purpose of potential defense against claims. An individual request for deletion can be made at any time, provided that the former existence of consent is confirmed at the same time. In the case of obligations to permanently observe objections, we reserve the right to store the email address in a blocklist solely for this purpose.
The logging of the registration process is conducted on the basis of our legitimate interests for the purpose of verifying its compliant execution. Insofar as we commission a service provider to dispatch emails, this is carried out on the basis of our legitimate interests in an efficient and secure dispatch system.
Contents: Information about our company, our services, promotions, and offers.
• Processed data types: Inventory data (e.g., names, addresses); contact data (e.g., email, telephone numbers); metadata, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status); usage data (e.g., visited websites, content of interest, access times).
• Affected parties: Communication partners.
• Purpose of processing: Direct marketing (e.g., via email or postal mail).
• Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR).
• Right to Object (Opt-Out): You can cancel the receipt of our newsletter at any time, i.e., revoke your consent or object to further receipt. A link to unsubscribe from the newsletter can be found either at the end of each newsletter, or you can use one of the contact options specified above, preferably email, for this purpose.
Additional information regarding processing operations, procedures, and services:
• Tracking of opening and click rates: The newsletters contain a so-called "web beacon", i.e., a pixel-sized file that is retrieved from our server when the newsletter is opened, or from the server of our delivery service provider if we use one. During this retrieval, technical data, such as information about the browser and your system, as well as your IP address and the time of retrieval, are first collected. This data is utilized for the technical optimization of our newsletter based on technical parameters, target groups, and their reading behavior determined by their access locations (which can be identified via the IP address) or access times. This analysis also includes determining whether the newsletters are opened, when they are opened, and which links are clicked. This information is mapped to individual newsletter recipients and stored in their profiles until deleted. The evaluations enable us to identify the reading habits of our users and to customize our content or to dispatch different content according to our users' interests. The tracking of opening rates and click rates, as well as the storage of measurement results in user profiles – Legal basis: Consent (Art. 6 (1) (a) GDPR).
Web analytics, monitoring, and optimization
Web analytics (also referred to as "reach measurement") is used to evaluate the visitor flows of our online offering and can include behavioral, interest, or demographic information about the visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can, for example, identify at which times our online offering or its functions or content are most frequently utilized or prompt repeat usage. Likewise, we can track which areas require optimization.
In addition to web analytics, we may also employ testing procedures to evaluate and optimize different versions of our online platform or its individual components.
Unless otherwise specified below, profiles (i.e., compiled data regarding a user transaction) may be created for these purposes, and information may be stored in and retrieved from a browser or end-user device. The collected data includes, in particular, visited websites and elements used therein, as well as technical specifications, such as the browser used, the computer system used, and data regarding usage times. If users have consented to the collection of their location data either to us or to the providers of the services we utilize, location data may also be processed.
User IP addresses are also logged. However, we utilize an IP masking protocol (i.e., pseudonymization via truncation of the IP address) to ensure user data protection. Generally, no plaintext user data (such as email addresses or names) is processed or stored within the scope of web analytics, A/B testing, and optimization; pseudonymized identifiers are used instead. Consequently, neither our organization nor the providers of the integrated software tools have access to the actual identity of the users, but only to the specific profile data recorded for the execution of the respective processes.
• Processed data categories: Usage data (e.g., visited websites, interest in content, access times); metadata, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status).
• Affected persons: Users (e.g., website visitors, users of online services).
• Purposes of processing: reach measurement (e.g., access statistics, recognition of returning visitors); profiles with user-related information (creation of user profiles).
• Security measures: IP masking (pseudonymization of the IP address).
Social media presence
We maintain online presences within social networks and process user data within this framework to communicate with active users there or to offer information about our services.
Please note that user data may be processed outside the European Union. This may present risks for users, as it could, for example, complicate the enforcement of user rights.
Furthermore, user data within social networks is typically processed for market research and promotional purposes. For instance, user profiles can be generated based on user behavior and the resulting interests of the users. These user profiles can, in turn, be used to distribute advertisements both within and outside the networks that presumably correspond to the users' interests. For these purposes, cookies are generally stored on the users' devices, recording user behavior and interests. Additionally, data may be stored in these user profiles independently of the devices used by the users (particularly if the users are members of the respective platforms and are logged into them).
For a detailed description of the respective processing methods and the opt-out options, please refer to the privacy policies and specifications of the operators of the respective networks.
We also point out that in the event of requests for information and the assertion of data subject rights, these can be asserted most effectively with the providers. Only the respective providers have access to the user data and can directly take appropriate measures and provide information. Should you nevertheless require assistance, please contact us.
• Processed data types: Contact data (e.g., email, telephone numbers); Content data (e.g., entries in online forms); Usage data (e.g., visited websites, interest in content, access times); Meta, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status).
• Affected persons: Users (e.g., website visitors, users of online services).
• Purposes of processing: Contact inquiries and communication; feedback (e.g., collection of feedback via online form); marketing.
• Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Additional information regarding processing operations, procedures, and services:
• Facebook Pages: Profiles within the social network Facebook - We are jointly responsible with Meta Platforms Ireland Limited for the collection (but not the further processing) of data from visitors to our Facebook page (so-called "Fanpage"). This data includes information about the types of content users view or interact with, or the actions they take (see under "Things you and others do and provide" in the Facebook Data Policy: https://www.facebook.com/policy), as well as information about the devices used by users (e.g., IP addresses, operating system, browser type, language settings, cookie data; see under "Device Information" in the Facebook Data Policy: https://www.facebook.com/policy). As explained in the Facebook Data Policy under "How do we use this information?", Facebook also collects and uses information to provide analysis services, known as "Page Insights", for page operators so that they obtain insights into how people interact with their pages and the content associated with them. We have entered into a specific agreement with Facebook ("Page Insights Controller Addendum", https://www.facebook.com/legal/terms/page_controller_addendum), which in particular regulates the security measures Facebook must observe and in which Facebook has agreed to fulfill data subject rights (i.e., users can, for example, direct requests for information or deletion directly to Facebook). The rights of users (in particular to information, deletion, objection, and complaint to the competent supervisory authority) are not restricted by the agreements with Facebook. Further information can be found in the "Information about Page Insights" (https://www.facebook.com/legal/terms/information_about_page_insights_data); Service Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal Basis: Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Standard Contractual Clauses (guaranteeing the level of data protection in the event of processing in third countries): https://www.facebook.com/legal/EU_data_transfer_addendum; Further Information: Joint Controller Agreement: https://www.facebook.com/legal/terms/information_about_page_insights_data. The joint controller relationship is limited to the collection by and transfer of data to Meta Platforms Ireland Limited, a company based in the EU. The subsequent processing of the data is the sole responsibility of Meta Platforms Ireland Limited, which specifically concerns the transfer of the data to the parent company Meta Platforms, Inc. in the USA (based on the Standard Contractual Clauses concluded between Meta Platforms Ireland Limited and Meta Platforms, Inc.).
• LinkedIn: Social network; Service provider: LinkedIn Ireland Unlimited Company, Wilton Plaza Wilton Place, Dublin 2, Ireland; Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); Website: https://www.linkedin.com; Privacy Policy: https://www.linkedin.com/legal/privacy-policy; Data Processing Agreement: https://legal.linkedin.com/dpa; Standard Contractual Clauses (guarantee of data protection level for processing in third countries): https://legal.linkedin.com/dpa; Opt-out option: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Plugins, embedded functions, and integrated content
We integrate functional and content elements into our online services that are sourced from the servers of their respective providers (hereinafter referred to as "third-party providers"). These may include, for example, graphics, videos, or city maps (hereinafter consistently referred to as "content").
Integration always presupposes that the third-party providers of this content process the user's IP address, since without the IP address they would be unable to transmit the content to the user's browser. The IP address is therefore required for the rendering of this content or these functions. We endeavor to use only such content whose respective providers utilize the IP address solely for content delivery. Third-party providers may also use so-called pixel tags (invisible graphics, also referred to as "web beacons") for statistical or marketing purposes. These pixel tags enable the evaluation of information, such as visitor traffic on the pages of this website. Furthermore, the pseudonymous information may be stored in cookies on the user's device and may contain, among other things, technical information regarding the browser and operating system, referring websites, visit time, and other data regarding the use of our online offering, as well as being linked to similar information from other sources.
• Processed data types: Usage data (e.g., visited websites, interest in content, access times); metadata, communication, and process data (e.g., IP addresses, timestamps, identification numbers, consent status); master data (e.g., names, addresses); contact data (e.g., email, telephone numbers); content data (e.g., entries in online forms); location data (information on the geographic position of a device or person).
• Affected persons: Users (e.g., website visitors, users of online services).
• Purposes of processing: Provision of our online services and user-friendliness.
• Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Additional information regarding processing operations, procedures, and services:
• Google Maps: We integrate the maps of the "Google Maps" service provided by Google. The processed data may include, in particular, IP addresses and location data of the users; Service Provider: Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland; Legal Basis: Legitimate Interests (Art. 6 (1) (f) GDPR); Website: https://mapsplatform.google.com/; Privacy Policy: https://policies.google.com/privacy.
• YouTube Videos: Video content; Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal Basis: Legitimate Interests (Art. 6 (1) (f) GDPR); Website: https://www.youtube.com; Privacy Policy: https://policies.google.com/privacy; Opt-Out: Opt-Out Plugin: https://tools.google.com/dlpage/gaoptout?hl=en, Settings for Advertisement Display: https://adssettings.google.com/authenticated.
Revision and Update of the Data Protection Directive
We advise you to regularly review the content of our data privacy policy. We will update the privacy policy as soon as modifications to our data processing operations render this necessary. We will notify you as soon as such changes require your active cooperation (e.g., consent) or any other form of individual notification.
Insofar as we provide addresses and contact information of companies and organizations in this privacy policy, please note that these addresses are subject to change over time, and we request that you verify the details prior to establishing contact.
Data subject rights
As a data subject under the GDPR, you are entitled to various rights, which arise in particular from Articles 15 to 21 of the GDPR:
• Right to object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
• Right of withdrawal of consent: You have the right to withdraw any consent given at any time.
• Right of access: You have the right to request confirmation as to whether relevant data is being processed, and to access this data as well as obtain further information and a copy of the data in accordance with statutory requirements.
• Right to rectification: In accordance with statutory requirements, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you.
• Right to erasure and restriction of processing: In accordance with statutory provisions, you have the right to demand that data concerning you be erased without delay, or alternatively, in accordance with statutory provisions, to demand a restriction of the processing of the data.
• Right to data portability: You have the right to receive the data concerning you that you have provided to us, in a structured, commonly used, and machine-readable format, or to demand its transmission to another data controller, in accordance with legal requirements.
• Complaint to a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, your place of work, or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the provisions of the GDPR.