Skip to content

FREUDENHAUS

What are you looking for?

Your preferences

Country & language.

Choose your delivery country and language.

Language
Country

United States · EUR €

Cart

Your cart is empty

Privacy policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we explain how we handle your personal data when you use our website. Personal data means any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Lürzer Obertauern GmbH & Co. KG, Ringstraße 74, 5562 Obertauern, Austria, Tel.: 06456 / 72009, Email: webshop@luerzer.at. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when you visit our website

2.1 When you use our website for information purposes only, i.e. without registering or otherwise providing us with information, we collect only the data that your browser transmits to the website server (known as server log files). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • The page of our website visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referral from which you reached the page
  • Browser used
  • Operating system used
  • IP address used (in anonymised form, where applicable)

Processing takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries sent to the controller). You can recognise an encrypted connection by the string “https://” and the padlock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

3.1 Shopify

To host our website and display its content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.2 Cloudflare

We use a Content Delivery Network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content or scripts more quickly through a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

4) Contacting us

4.1 Klaviyo

For review reminders, we use the services of the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

Exclusively on the basis of your express consent in accordance with Art. 6(1)(a) GDPR, we transmit your email address and, where applicable, further customer data to the provider so that it can contact you by email with a review reminder.

You may withdraw your consent at any time with effect for the future by contacting us or the provider.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

4.2 Reviews.io

For review reminders, we use the services of the following provider: REVIEWS.io 2020 GmbH, Skalitzer Str. 104, 10997 Berlin, Germany

Exclusively on the basis of your express consent in accordance with Art. 6(1)(a) GDPR, we transmit your email address and, where applicable, further customer data to the provider so that it can contact you by email with a review reminder.

You may withdraw your consent at any time with effect for the future by contacting us or the provider.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

4.3 When you contact us (e.g. via a contact form or by email), personal data is processed solely for the purpose of handling and responding to your enquiry and only to the extent necessary for that purpose.

The legal basis for processing this data is our legitimate interest in responding to your enquiry in accordance with Art. 6(1)(f) GDPR. If your contact relates to entering into a contract, Art. 6(1)(b) GDPR provides an additional legal basis for processing. Your data will be deleted when the circumstances indicate that the matter has been conclusively resolved, provided that no statutory retention obligations prevent deletion.

5) Data processing when opening a customer account

In accordance with Art. 6(1)(b) GDPR, personal data is also collected and processed to the extent necessary when you provide it to us when opening a customer account. The data required to open an account is shown in the input fields of the relevant form on our website.

You may delete your customer account at any time by sending a message to the controller at the address given above. After your customer account is deleted, your data will be deleted provided that all contracts concluded through it have been fully performed, no statutory retention periods prevent deletion, and we no longer have a legitimate interest in continuing to store the data.

6) Use of customer data for direct marketing

6.1 Subscribing to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only information required to send the newsletter is your email address. Providing further data is voluntary and enables us to address you personally. We use the double opt-in procedure for newsletter subscriptions. This ensures that you receive newsletters only after you have expressly confirmed your consent to receive them by clicking a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. We store the IP address recorded by your Internet Service Provider (ISP), together with the date and time of registration, so that any misuse of your email address can be traced at a later date. The data we collect when you subscribe to the newsletter is used strictly for the stated purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning of this policy. Once you have unsubscribed, your email address will be removed from our newsletter mailing list without delay, unless you have expressly consented to further use of your data or we reserve the right to use the data further in a way permitted by law and explained in this policy.

6.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers by email for goods or services from our range that are similar to those you have already purchased. Under Section 174(4) of the TKG (Austria), we do not have to obtain separate consent from you for this purpose. In this case, data processing takes place solely on the basis of our legitimate interest in personalised direct marketing in accordance with Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you these emails.

You are entitled to object to the use of your email address for the marketing purpose described above at any time with effect for the future by notifying the controller named at the beginning of this policy. You will incur only transmission costs at the basic rates. Upon receipt of your objection, we will stop using your email address for marketing purposes without delay.

6.3 Klaviyo

Our email newsletters and other marketing email communications are sent through this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

On the basis of our legitimate interest in effective and user-friendly email marketing, we disclose the data you provide when subscribing to this provider in accordance with Art. 6(1)(f) GDPR so that it can send emails on our behalf.

Subject to your express consent in accordance with Art. 6(1)(a) GDPR, the provider also statistically evaluates the success of email campaigns using web beacons or tracking pixels in the emails sent. These can measure opening rates and specific interactions with the newsletter content. Device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but is not combined with other datasets.

You may withdraw your consent to email tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

6.4 Shopping cart reminders by email

If you leave your shopping session with us before completing your order, you have the option of receiving a one-time email reminder about the contents of your virtual shopping cart.

The only information required to send this reminder is your email address. Providing further data is voluntary and may enable us to address you personally. We use the double opt-in procedure for sending these emails. This ensures that you receive a notification only after you have expressly confirmed your consent by clicking a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR to send a shopping cart reminder. We store the IP address recorded by your Internet Service Provider (ISP), together with the date and time of registration, so that any misuse of your email address can be traced at a later date. The data we collect when you register for our email notification service is used strictly for the stated purpose.

You can unsubscribe from shopping cart reminders at any time by sending a corresponding message to the controller named at the beginning of this policy. Once you have unsubscribed, your email address will be removed without delay from the mailing list we maintain for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data further in a way permitted by law and explained in this policy.

7) Data processing for order fulfilment

7.1 To the extent necessary to perform the contract for delivery and payment purposes, the personal data we collect is disclosed to the transport company and credit institution commissioned by us in accordance with Art. 6(1)(b) GDPR.

If, under a corresponding contract, we are required to provide you with updates for goods with digital elements or for digital products, we process the contact details you provided when ordering in order to inform you personally as part of our statutory information obligations in accordance with Art. 6(1)(c) GDPR. Your contact details are used strictly for communications about updates that we are required to provide and are processed by us for this purpose only to the extent necessary for the relevant information.

7.2 Disclosure of personal data to shipping service providers

- Österreichische Post

We use the following provider as our transport service provider: Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria

In accordance with Art. 6(1)(a) GDPR, we disclose your email address and/or telephone number to the provider before the goods are delivered in order to arrange a delivery date or provide a delivery notification, provided that you have expressly consented to this during the ordering process. Otherwise, we disclose only the recipient's name and delivery address to the provider for delivery purposes in accordance with Art. 6(1)(b) GDPR. Disclosure takes place only to the extent necessary to deliver the goods. In this case, it is not possible to arrange the delivery date with the provider in advance or to provide a delivery notification.

You may withdraw your consent at any time with effect for the future by contacting the controller named above or the provider.

7.3 Use of payment service providers (payment services)

- Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

If you select a payment method from the provider that requires you to pay in advance (such as payment by credit card), the payment details you provide during the ordering process (including your name, address, bank and payment card information, currency and transaction number), together with information about the contents of your order, will be disclosed to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data is disclosed solely for the purpose of processing the payment with the provider and only to the extent necessary for that purpose.

8) Web analytics services

8.1 Shopify Analytics

This website uses the web analytics service of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including information about the device used, such as the IP address and browser information. This data is evaluated for statistical analyses of user behaviour on our website and to create pseudonymised usage profiles. Pseudonymisation generally prevents direct identification of individuals. The data is not combined with directly identifying data about you collected by other means.

All processing described above, in particular the reading or storage of information on the device used, takes place only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

8.2 Shopify Network Intelligence

This website uses the “Shopify Network Intelligence” feature of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)

Through this feature, certain customer data (order and search histories, location information and transaction details), to the extent collected, is automatically transmitted to Shopify in pseudonymised form, prepared by Shopify and then processed for statistical and analytical purposes.

The analysis results may also include pseudonymised data from customers of other Shopify merchants. However, no merchant receives individual access to such third-party datasets outside its own customer base.

During processing, Shopify does not obtain access to directly identifying data, but automatically encrypts the information using a special algorithm during the transmission process.

Processing takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in statistically evaluating our shop's reach and the response to our offering for optimisation purposes.

As part of the processing described above, data may also be transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

Further details about the processing described above can be found in Shopify's privacy policy: https://www.shopify.com/de/legal/privacy/consumers?country=de&lang=de

8.3 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies that are stored on your device as small text files and collect certain information. This information also includes your IP address, although Google truncates its final digits to prevent direct identification of individuals.

The information is transmitted to Google's servers and processed further there. Transfers to Google LLC, based in the USA, are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us and provide other services relating to website and internet use. The truncated IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. The data collected through the use of Google Analytics 4 is stored for two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To exercise your right to withdraw consent, please disable this service using the cookie consent tool provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further legal information about Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites

Demographics
Google Analytics 4 uses the special “demographics” feature to generate statistics about the age, gender and interests of website visitors. This is done by analysing advertising and information from third-party providers. It enables target groups for marketing activities to be identified. However, the collected data cannot be attributed to a specific person and is deleted after being stored for two months.

Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalised advertising and linked your devices to your Google account, Google may analyse your usage behaviour across devices and create database models, including models of cross-device conversions, subject to your consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the “Personalised advertising” feature in your Google account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the “UserIDs” feature may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6(1)(a) GDPR, created an account on this website and sign in to that account on different devices, your activities, including conversions, may be analysed across devices.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

9) Retargeting/remarketing and conversion tracking

9.1 Meta Pixel with advanced matching

As part of our online offering, we use the “Meta Pixel” service in advanced matching mode from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”)

If a user clicks on an advertisement we have placed on Facebook or Instagram, Meta Pixel adds a parameter to the URL of our linked page. After the redirect, this URL parameter is then stored in the user's browser by a cookie set by our linked page itself. This cookie also captures specific customer data, such as the email address, that we collect on our website linked to the Facebook or Instagram advertisement during processes such as completed purchases, account logins or registrations (advanced matching). The cookie is then read and enables the transmission of the data, including the specific customer data, to Meta.

We use Meta Pixel with advanced matching to make our advertisements (“ads”) on Facebook and/or Instagram more effective and to ensure that they correspond to users' interests or to specific characteristics (e.g. interests in particular topics or products determined from the websites visited) that we transmit to Meta (“Custom Audiences”).

We also analyse the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an advertisement (conversion). Compared with the standard version of Meta Pixel, the advanced matching feature helps us measure the effectiveness of our advertising campaigns more accurately by recording more attributed conversions.

All transmitted data is stored and processed by Meta so that it can be linked to the relevant user profile and Meta can use the data for its own advertising purposes in accordance with Meta's data use policy (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to display advertisements on and off Facebook.

All processing described above, in particular the setting of cookies to read information on the device used, takes place only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

The information generated by Meta is generally transmitted to and stored on a Meta server; in this context, it may also be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

9.2 Google Ads conversion tracking

This website uses the online advertising programme “Google Ads” and, as part of Google Ads, the conversion tracking service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

We use Google Ads to draw attention to our offers on external websites through advertising materials (known as Google Adwords). Using the advertising campaign data, we can determine how successful the individual advertising measures are. Our aim is to show you advertising that interests you, make our website more appealing to you and ensure a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an Ads advertisement placed by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advertisement and was redirected to that page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie, which also includes your IP address, is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their advertisement and were redirected to a page with a conversion tracking tag. However, they do not receive any information that enables them to identify users personally.

When Google Ads is used, personal data may also be transferred to the servers of Google LLC in the USA.

Details about the processing triggered by Google Ads conversion tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies to read information on the device used, takes place only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de

To tailor our advertising more closely to the interests of users whose data we have received in the context of business or similar relationships, we use a customer matching feature within Google Ads. For this purpose, we electronically transmit one or more files containing aggregated customer data (primarily email addresses and telephone numbers) to Google. Google does not obtain access to directly identifying data; instead, it automatically encrypts the information in the customer files using a special algorithm during the transmission process. Google can then use the encrypted information only to match it to existing Google accounts created by the individuals concerned. This enables personalised advertising to be displayed across all Google services linked to the relevant Google account.

Customer data is transmitted to Google only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw this consent from us at any time with effect for the future. Further information about Google's data protection measures relating to the customer matching feature can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google's privacy policies can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

10) Website features

10.1 Google Web Fonts

This website uses web fonts from the following provider to ensure a consistent display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you access a page, your browser loads the required web fonts into its browser cache to display text and fonts correctly and establishes a direct connection to the provider's servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transferred to: Google LLC, USA

Personal data is processed when connecting to the font provider only if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service using the cookie consent tool provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Further information about Google's privacy policies can be found here: https://business.safety.google/intl/de/privacy/

10.2 - hCaptcha

On this website, we use the CAPTCHA service of the following provider: Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA

The service checks whether an entry is made by a natural person or abusively through machine-based and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is performed by a human and not an automated bot, the provider collects the IP address of the device used, identifying data about the browser and operating system types used, and the date and duration of the visit, and transmits this information to the provider's servers for analysis.

The legal basis is our legitimate interest in establishing that actions on the internet are performed by individuals acting on their own responsibility and in preventing misuse and spam in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

11) Rights of the data subject

11.1 Applicable data protection law grants you the following rights as a data subject against the controller in relation to the processing of your personal data (rights of access and intervention). The conditions for exercising each right are set out in the legal basis cited:

  • Right of access in accordance with Art. 15 GDPR;
  • Right to rectification in accordance with Art. 16 GDPR;
  • Right to erasure in accordance with Art. 17 GDPR;
  • Right to restriction of processing in accordance with Art. 18 GDPR;
  • Right to be informed in accordance with Art. 19 GDPR;
  • Right to data portability in accordance with Art. 20 GDPR;
  • Right to withdraw consent in accordance with Art. 7(3) GDPR;
  • Right to lodge a complaint in accordance with Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

12) Retention period for personal data

The length of time for which personal data is stored is determined by the applicable legal basis, the purpose of processing and, where relevant, the applicable statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of express consent in accordance with Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with contractual or similar obligations on the basis of Art. 6(1)(b) GDPR, this data is routinely deleted after the retention periods expire, provided that it is no longer necessary to perform or initiate a contract and/or we no longer have a legitimate interest in continuing to store it.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(2) GDPR.

Unless otherwise stated in the other information in this policy concerning specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.