Privacy

A. Data Protection

We appreciate your visit to our RUCK online shop and/or the RUCK Academy online education platform and your interest in our company. Our online shop and education platform are designated for commercial users use only and are not intended for private use and not for consumers.

Data protection has a high priority for our management. We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

The visit of our website is generally possible without providing personal data. Insofar as personal data (e.g. name, address or e-mail addresses) is collected on our pages, this is always done on a voluntary basis as far as possible. This data will not be passed on to third parties without your express consent.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible. Below we inform you in detail about the handling of your data.

In this Privay Policy, we refer to various regulations of the GDPR (General Data Protection Regulation of the European Union, see https://gdpr.eu/). Such references shall be considered being made to the UK GDPR accordingly (General Data Protection Regulation of the European Union of the United Kingdom, see https://ico.org.uk/).

Responsible body (Controller):
HELLMUT RUCK GmbH
Daimlerstraße 23
D-75305 Neuenbürg

Telefon: +49 70 82 9 44 20
Telefax: +49 70 82 9 44 22 22
E-Mail: kontakt@hellmut-ruck.de
Web: hellmut-ruck.de

Data Protection Officer:
The data protection officer of the controller is:
Thomas Kroszewski
Daimlerstraße 23
D-75305 Neuenbürg
E-Mail: datenschutz@hellmut-ruck.de

B. Purpose/legal basis of the procressing

Personal data shall only be processed by the controller if:

the data subject has given his/her consent to the processing of personal data concerning him/her for one or more specific purposes. This consent can be revoked at any time. Please address your revocation to our data protection officer using the e-mail address datenschutz@hellmut-ruck.de.
the processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject's request,
the processing is necessary for compliance with a legal obligation to which the controller is subject
processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

1. Access data and hosting

You can visit our websites without providing any personal information. Each time you access a website, the web server only automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred and the requesting provider (access data) and documents the request.

This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. In accordance with Art. 6 para. 1 lit. f GDPR, this serves to protect our legitimate interests in the correct presentation of our offer, which outweigh our interests in the context of a balancing of interests. All access data will be deleted at the latest seven days after the end of your visit to our website.

A third party provider provides us (in accordance with Art.28 GDPR) with the services for hosting and displaying the website. All data collected in the course of using this website or in forms provided for this purpose in the RUCK online shop or the RUCK Academy online education platform, as described below, are processed on its servers. Processing on other servers only takes place within the framework explained here. This service provider is located within a country of the European Union or the European Economic Area.

2. Data collection and use for contract processing, contacting and opening a customer account

We collect personal data when you voluntarily provide it to us in the context of your order, when contacting us (e.g. via contact form or e-mail) or when opening a customer account. A commercial customer may register a customer account for its company; the accounts shall not be registered per employee, but you shall provide details regarding a contact person within your company. Mandatory fields are marked as such because in these cases we absolutely need the data to process the contract, or to process your contact or open a customer account, and you cannot complete the order and/or open an account or send the contact without providing it. Which data is collected can be seen from the respective input forms.

We use the data provided by you in accordance with Art. 6 para. 1 lit. b GDPR to process the contract and handle your enquiries. After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or via a function provided for this purpose in the customer account.

3. Data transfer (also with regard to third countries)

In order to fulfil the contract in accordance with Art. 6 para. 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must register with the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

We also use an external merchandise management system for order and contract processing. The data transfer and processing that takes place in this respect is based on contract processing. The same applies to the transfer of data to our manufacturers or wholesalers in cases where they take over the shipping for us (drop shipment).

All data processing by us or our contract processors will be effected within the UK, the European Union/European Economic Area (based on the existing adequacy decision) or – in case of third countries - in accordance with the applicable GDPR-regulations and with further information provided in this Privacy Policy.

Data transfer to shipping service providers

If you have given us your express consent to do so during or after your order, we will pass on – as far as necessary - your e-mail address and telephone number to the selected shipping service provider (such as DHL) on the basis of this consent in accordance with Art. 6 (1) lit. a GDPR so that the shipping service provider can contact you before delivery for the purpose of delivery notification or coordination.

Consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

4. E-mail newsletters and postal advertising

E-mail advertising with newsletter registration

If you register for our newsletter, we use the data required for this purpose or separately provided by you to send you our e-mail newsletter on a regular basis based on your consent pursuant to Art. 6 par.1 lit. a GDPR.

Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address from the list of recipients, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

Newsletter data

If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter.
To verify your email address, we may use e.g. the so-called double opt-in procedure to ensure that the newsletter is sent in a consensual manner. In the course of this process, the user is given the opportunity to confirm the registration in a legally secure manner by means of a confirmation e-mail. Only if the confirmation is given, the address will be included in the mailing list.

We use this data exclusively for sending the requested information in accordance with the consent declared by you.

The newsletter is sent by a service provider (SendInBlue) as a contract processer on our behalf by a service provider to whom we pass on your e-mail address for this purpose. Your data will be transmitted to SendInBlue GmbH. SendInBlue is prohibited from selling your data and using it for any other purposes than sending newsletters. SendInBlue is a German, certified provider that has been selected and is operating in accordance with the GDPR. You can find more information here: https://de.sendinblue.com/informationen-newsletter-empfaenger/?rtype=n2go

DYou can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter.

Direct mail

If we receive your e-mail address in connection with your order of a product or service, we reserve the right to regularly send you offers by e-mail for similar products to those you have already purchased from our product range. You can object to this use of your e-mail address at any time by sending a message to the contact option described above or via a link provided for this purpose in the advertising e-mail. Email address and other contact details will be deleted when the legal retention periods have expired.

Postal advertising

In addition, we reserve the right to use your company name (and the name of the registered contact person) as well as your postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by letter post. This serves to protect our legitimate interests in addressing our customers in an advertising manner in accordance with Art. 6 par. 1 lit. f GDPR. The advertising mailings are provided as part of processing on our behalf by a service provider to whom we pass on your data for this purpose. You can object to the storage and use of your data for these purposes at any time by sending a message to the contact options set out in section A.

5. Data use for payment processing

Assessment of Creditworthiness

In cases, in which (i) we effect our performance of a sale or service contract in advance before your payment and/or (ii) you have chosen unsecured payment methods (e.g. purchase on account, financing, SEPA direct debit), we reserve the right to check the creditworthiness of our customers. Within the scope of a credit check, personal data (e.g. first and last name, address, date of birth) of the customer will be transmitted to commissioned partner companies or directly to a credit agency (e.g. creditPass) to check the customer's solvency. We use – depending on each case – either creditPass, SCHUFA, Creditreform and/or CRIF Bürgel for creditworthiness checks. These credit agencies draw conclusions about the customer’s future payment behaviour with the help of so-called scoring. Scoring is a mathematical-statistical procedure in which a large number of creditworthiness features are analysed and statistically evaluated. If a customer’s credit rating falls below a certain level, we reserve the right regarding incoing or future orders of this customer to exclude certain payment methods with a high risk of default (e.g. purchase on account, financing). For more details regarding the aforementioned credit agencies we refer to the following paragraphs:

creditPass

In the case of orders, we may transmit your data (name, address and, if applicable, date of birth) for the purpose of checking your creditworthiness, obtaining information for assessing the risk of non-payment on the basis of mathematical-statistical procedures using address data and for verifying your address (checking for deliverability) via creditPass to CRIF GmbH Niederlassung Hamburg, Friesenweg 4, Haus 12, 22763 Hamburg/Germany. The legal basis for these transfers is Article 6 par. 1 lit. f GDPR. CRIF GmbH processes the data received and also uses it to provide its contractual partners in the European Economic Area and in Switzerland as well as, if applicable, other third countries (insofar as an adequacy decision of the European Commission exists in respect of these) with information, inter alia, for assessing the creditworthiness of natural persons. Detailed information on the credit agencies within the meaning of Art. 14 GDPR can be found under the following link:www.crif.de/datenschutz

SCHUFA/Creditreform

For the aforementioned assessment of your creditworthiness, we may transfer your data (name, address and, if applicable, date of birth) also to SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden/Germany and/or Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss/Germany, based on Article 6 par. 1 lit. f GDPR.
After the contract has been fully processed, your data processed for this purpose will be deleted unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, as far as permitted by law and as fara as we have informed you in this declaration. Further information on how the aforementioned credit agencies (SCHUFA/Creditreform) handle data can be found at https://www.schufa.de/datenschutz/ and https://www.creditreform.de/datenschutz.

CRIF BÜRGEL

We transmit your personal data (name, address and, if applicable, date of birth) to assess your creditworthiness and/or to prevent fraudulent behaviour to CRIF Bürgel GmbH, Radlkoferstraße 2, 81373 Munich/Germany.
The legal basis for this transfer is Article 6 par. 1 lit. f GDPR. The exchange of data with CRIF BÜRGEL also serves to comply with legal obligations to carry out creditworthiness checks on customers (Sections 505a and 506 of the German Civil Code).

CRIF BÜRGEL processes the data received and also uses it for the purpose of profiling (scoring) in order to provide its contractual partners in the European Economic Area and in Switzerland as well as, where applicable, other third countries (insofar as there is an adequacy decision on these by the European Commission) with information on, among other things, the assessment of the creditworthiness of natural persons. Further information on the activities of CRIF BÜRGEL can be found in the CRIFBÜRGEL information sheet or online at www.crifbuergel.de/de/datenschutz.

Payment service provider

We process payment information for the purpose of payment processing. Depending on the payment method, we forward the payment information to third parties (payment service providers). The legal basis for this data processing is Article 6 par. 1 lit. b GDPR. In order to provide you with different payment methods, we use dlb, PayOne and Apple Pay.

Leasing/Financing

If you select the payment methods "Leasing or Financing", then a credit check will be carried out. For this purpose, we pass on your data to creditPass GmbH (Mehlbeerenstr. 2, 82024 Taufkirchen b. München/Germany) and Leasing Beratung GmbH & Co. KG (Berliner Allee 69, 40212 Düsseldorf/Germany). Information on data protection at creditPass can be found here. The data protection declaration confirmed by you at dlb can be found here.

6. Cookies and web analysis

In order to make the visit to our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to protect our legitimate interests in an optimised presentation of our offer according to Art. 6 para. 1 p. 1 lit. f GDPR, which prevail in the context of a balancing of interests. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognise your browser on your next visit (persistent cookies). You can find out how long they are stored in the overview in the cookie settings of your web browser. You can set your browser in such a way that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Cookie list

We use technically necessary and other cookies. This allows us to create a personalised experience for you, improve our website navigation and optimise our marketing efforts. To fully enjoy our website experience, please accept all of our cookies. We treat your data with confidence. Furthermore, you can revoke your consent at any time in the cookie settings. If you do not accept cookies, the functionality of our website may be limited, as we then only use the cookies required for basic functionalities.

Essential cookies

These cookies are mandatory for the function of our websites and cannot be deactivated by you.

Cookie: Session | Function: Identification between browser and server for functions such as shopping cart or login | Functional life: Session
Cookie: CSFR Cookies | Function: Secruity cookies for different shop functions | Functional life: Session
Cookie: Basket Cookies | Function: Identification of the shopping basket | Functional life: Session
Cookie: Login Cookie | Function: Identification between browser and server for login fuctions | Functional life: Session
Cookie: Redirect after login | Function: Servers to redirect to the original page after login | Functional life: Session
Timezone: Used to identify the users time zone | Functional life: Session

Other cookies (non-essential/non-mandatory)

With the help of these cookies, our website can offer enhanced functions and we can optimise our marketing measures.

Cookie: Facebook Pixel | Function: Analytics tool to measure the effectiveness of our advertising on Facebook | Functional life: 3 months
Cookie: Google Tag Manager | Function: Conversion and user trackting | Functional life: 12 months
Cookie: Google Ads Marketing | Function: For advertising on Google | Functional life: 12 months
Cookie: Google Analytics | Function: Analysis tool for interaction with the website | Functional life: 12 months
Cookie: eTracker | Function: Analysis tool for interaction with the website | Functional life: 12 months
Cookie: Userlike | Function: Chat tool for communication | Functional life: 12 months
Cookie: BasketToken | Function: Notepad | Functional life: 2 months
Cookie: LanguageDetector | Function: Used to assign to the correct sales channel based on the IP origin of the user | Functional life: 12 months
Cookie: StoreLocator | Functional life: 12 months

Use of Google (Universal) Analytics for web analysis

Insofar as you have given your consent to this in accordance with Art. 6 (1) p. 1 lit. a GDPR, this website uses Google (Universal) Analytics for the purpose of website analysis. The web analytics service is provided by Google Ireland Limited, a company incorporated and operated under the laws of Ireland, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The information automatically collected about your use of this website is usually transmitted to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address is shortened before transmission within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymised IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. After the end of the purpose and the end of the use of Google Analytics by us, the data collected in this context will be deleted.
Insofar as information is transferred to Google servers in the USA , we have concluded the current EU standard contractual clauses.

Google Analytics in Consent Mode:

We use Google's "Consent Mode" (also known as "consent mode").
In Consent Mode, users' personal data is processed by Google for measurement and advertising purposes subject to the user's consent. Consent is obtained from users as part of our online services. Without the user's consent, the data is only processed in aggregated form (i.e. not assigned to individual users or summarised).
Users' personal data is not processed for the placement of adverts or to measure the success of advertising if the consent only includes statistical measurement. Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR); Website: https://support.google.com/analytics/answer/9976101?hl=de.

Etracker

In our RUCK online shop or the RUCK Akademie online education platform, we use etracker, a service provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg. With the help of etracker, we record all visits and conversions to our RUCK online shop or the RUCK Academy online education platform. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Further information on data protection can be found at https://www.etracker.com/datenschutz/ and https://www.etracker.com/datenschutzerklaerung/.

Browser plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can revoke your consent at any time with effect for the future by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. This will prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google.

As an alternative to the browser plugin, you can use this link to prevent Google Analytics from collecting data on this website in the future. This will place an opt-out cookie on your terminal device. If you delete your cookies, you will be asked again to give your consent.

When using some plug-in service providers, personal data may be transferred to servers in third countries outside the EU, such as the USA. In order to make the third country transfer as data protection-friendly as possible, standard contractual clauses have been concluded with providers in insecure third countries if an adequate level of data protection is not guaranteed.

For the service providers that have joined the Trans-Atlantic Data Privacy Framework (TDPF; data protection agreement between the EU and the USA), the conclusion of standard contractual clauses is not required, as an adequate level of data protection is guaranteed for this data processing.
A copy of the standard data protection clauses can be requested by sending an informal e-mail to datenschutz@hellmut-ruck.de.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website: Deactivate Google Analytics.

Live chat tool Userlike

If you use the live chat tool to contact us, the data you voluntarily enter there (name, e-mail address, message) will be processed by us in accordance with Art. 6 (1) lit. b GDPR for the purpose of answering the enquiry within the framework of contract processing. In addition, the use of this tool serves to protect our legitimate interests in effective and improved customer communication in accordance with Art. 6 para. 1 p. 1 lit. f GDPR, which are overriding in the context of a balancing of interests. The data is subsequently deleted. Within the scope of processing on our behalf, the third-party provider Userlike provides the services for us to provide the live chat tool. All data collected in the course of using the chat tool is processed on its servers.

Google Maps

This website uses Google Maps to visually display geographical information. Google Maps is a service provided by Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This serves to protect our legitimate interests in an optimised presentation of our offer and easy accessibility of our locations, which outweigh our interests in the context of a balancing of interests, in accordance with Art. 6 Para. 1 S. 1 lit. f) GDPR.

When using Google Maps, Google transmits or processes data on the use of the Maps functions by website visitors, which may include in particular the IP address and location data. We have no influence on this data processing. Insofar as information is transferred to Google servers in the USA, we have concluded the current EU standard contractual clauses. In order to deactivate the Google Maps service and thus prevent the transfer of data to Google, you must deactivate the Java Script function in your browser. In this case, Google Maps cannot be used or can only be used to a limited extent. Further information on data processing by Google can be found in Google's privacy policy. The terms of use for Google Maps contain detailed information on the map service.
Data processing is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR, which you can view here.
Google Fonts The script code "Google Fonts" is integrated on this website. Google Fonts is an offer of Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). This serves to protect our legitimate interests in a uniform presentation of the content on our website, which outweigh our interests in the context of a balancing of interests, in accordance with Art. 6 Para. 1 lit. f) GDPR. In this context, a connection is established between the browser you are using and Google’s servers. This enables Google to know that our website has been accessed via your IP address. Insofar as information is transferred to Google servers in the USA, we have concluded the current EU standard contractual clauses.

Bing Maps

This website uses “Bing Maps” to display maps and geographical information. Bing Maps is a service of the company “One Microsoft Way”, Redmond, WA 98052-6399 USA, hereinafter “Microsoft”.
Through “Bing Maps”, data about your use of this website may be transmitted to, collected by and used by Microsoft. With each individual call of “Bing Maps”, a cookie can be set by Microsoft in order to process data and user settings when displaying the page on “Bing Maps”. As a rule, this cookie is not deleted by closing the browser, but expires after a certain time if it has not been deleted by you beforehand.
If you do not agree to this processing of your data, you can deactivate the “Bing Maps” service and thus prevent data transmission to Microsoft. If you wish to prevent the transmission, you must deactivate the Javascript function in your browser. After deactivation, however, you will not be able to use “Bing Maps” or only to a limited extent.
By agreeing to the storage of Bing cookies or accepting all cookies, you consent to the processing of your data by Microsoft for the purposes set out above. The use of “Bing Maps”
and the information obtained via “Bing Maps” is subject to the Microsoft Bing Maps Terms of Use Microsoft Bing Maps and MapPoint Web Service End User Terms of Use and Embedded Maps Service Terms of Use. In addition, the Microsoft Privacy Policy and also the Microsoft Service Agreement apply.

7. advertising and marketing organization

On our RUCK online shop or the RUCK Academy online education platform, “Google Ads”, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland is used. Google Ads offers us the possibility to draw attention to attractive offers of already visited websites with the help of advertising media on external websites.

Google Ads Remarketing

We use Google Ads to advertise this website in Google search results and on third-party websites. For this purpose, the so-called remarketing cookie is set by Google when you visit our website, which automatically enables interest-based advertising by means of a pseudonymous cookieID and on the basis of the pages you have visited. This serves to protect our legitimate interests in the optimal marketing of our website, which outweigh our interests in the context of a balancing of interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. After the end of the purpose and the end of the use of Google Ads Remarketing by us, the data collected in this context will be deleted.
Additional data processing will only take place if you have consented to Google linking your web and app browsing history to your Google Account and using information from your Google Account to 14rganizatio the ads you see on the web. In this case, if they are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data will be temporarily linked by Google with Google Analytics data in order to form target groups.
Google Ads is an offer of Google Ireland Limited, a company incorporated and operated under the laws of Ireland with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). Insofar as information is transferred to Google servers in the USA, we have concluded the current EU standard contractual clauses. You can deactivate the remarketing cookie via this link. In addition, you can obtain information from the Digital Advertising Alliance about the setting of cookies and make settings for this.

Google Analytics 4

We use Google Analytics 4 to perform user analyses based on a pseudonymous user identification number. This identification number does not contain any unique data, such as names or email addresses. It is used to assign analysis information to an end device in order to 14rganizat which content users have accessed within one or various usage processes, which search terms they have used, have accessed again or have interacted with our online offer. The time of use and its duration are also stored, as well as the sources of the users who refer to our online offer and technical aspects of their end devices and browsers. In the process, pseudonymous profiles of users are created with information from the use of various devices and cookies are used where applicable. As part of Analytics, geographic location data is provided at a higher level by collecting the following metadata based on IP search: “city” (and the derived latitude and longitude of the city), “continent”, “country”, “region”, “subcontinent” (and the ID-based equivalents). To ensure the protection of user data in the EU, Google receives and processes all user data via domains and servers within the EU. Users’ IP addresses are not logged and are truncated by the last two digits by default. The s“ortening of the IP address takes place on EU servers for EU users. In addition, all sensitive data collected from users in the EU is deleted before being collected via EU domains and servers; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal basis: consent (Art. 6 para. 1 p. 1 lit. a) GDPR); Website:

https://marketingplatform.google.com/intl/de/about/analytics/; Privacy policy: https://policies.google.com/privacy; Order processing agreement: https://business.safety.google/adsprocessorterms/; Standard contractual clauses (ensuring the level of data protection when processing in third countries): https://business.safety.google/adsprocessorterms; Opt-out: Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, Settings for display of advertising: https://adssettings.google.com/authenticated; Further information: https://privacy.google.com/businesses/adsservices (Types of processing as well as data processed).

Enhanced Conversions for Google Ads

If users reach the website via our Google ads and subsequently carry out a so-called conversion, data entered by the user such as email address, name, personal address or telephone number may be transmitted to Google, as we use “enhanced conversions” (also called “extended conversions”) from Google. The hashed data transmitted to Google is compared with the user’s existing Google account. In this way, your interactions with ads can be evaluated in order to improve their performance; Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a) GDPR) GDPR); Website: https://support.google.com/google-ads/answer/9888656.

Google Analytics in Consent Mode

We use Google’s “Consent Mode” (also called “Consent Mode”). In this mode, users’ personal data is processed by Google for measurement and advertising purposes subject to the user’s consent. Consent is obtained from users as part of our online services. Without the consent of the user, the data will only be processed in aggregated form (i.e. not assigned to or organization for individual users).
Personal data of the users are not processed for the placement of advertisements or the measurement of advertising success if the consent only includes statistical measurement. Legal basis: consent (Art. 6 para. 1 p. 1 lit. a) GDPR); website: https://support.google.com/analytics/answer/9976101?hl=de.

Facebook Conversion API

We use the “Conversion API” (also called “C API”) from Facebook. This is an interface that sends event data from our server directly to Facebook. The functionality and data processing within the Conversion API corresponds to the functionality and processing within the Facebook Pixel, therefore we refer to data protection information on the Facebook Pixel and target group formation; legal basis: consent (Art. 6 para. 1 p. 1 lit. a) GDPR).

Google Signals

By activating Google signals (Google Analytics function), visitor data from our RUCK online shop or the RUCK Academy online education platform is collected and linked to Google information from accounts of logged-in users. The association of data with logged-in users is used to enable cross-device reporting, cross-device remarketing and cross-device conversion measurement. These include: Cross-platform reporting – linking device and activity data from different sessions using your User ID or Google Signals data to understand user behaviour at each step of the conversion process, from initial contact to conversion and beyond; Remarketing with Google Analytics – creating remarketing audiences from Google Analytics data and sharing those audiences with linked advertising accounts; Demographics and interests – Google Analytics collects additional information about demographics and interests from users who are logged into their Google Accounts and have ad organization enabled; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal basis: consent (Art. 6 para. 1 p. 1 lit. a) GDPR); Website: https://support.google.com/analytics/answer/7532985?hl=de; Privacy policy: https://policies.google.com/privacy; Order processing agreement: https://business.safety.google/adsprocessorterms; Standard contractual clauses (ensuring level of data protection for processing in third countries): https://business.safety.google/adsprocessorterms; Further information: https://privacy.google.com/businesses/adsservices (types of processing as well as data processed).

8. CDN provider

We use CDN (Cloud Delivery Networks) to optimise the loading times of our RUCK online shop or the RUCK Academy online education platform. In this context, we use the CDN service bunny.net of BunnyWay d.o.o.,Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia to optimise and provide our media. Media files such as images and videos used on the RUCK online shops or the RUCK Academy online education platform are provided via bunny.net. bunny.net does not collect, store or distribute any information that could be used in any way to identify users or contain personal information. BunnyCDN is used in the interest of a user-friendly and fast presentation of the RUCK online shops or the RUCK Academy online education platform. The legal basis is the legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Use of social plugins from Facebook, Instagram, Pinterest, Xing

So-called social plugins ("plugins") from social networks are used on our website.
When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Facebook, Google, Pinterest and XING or Instagram. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has called up the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider (possibly in the USA) and stored there. If you are logged in to one of the services, the providers can directly assign your visit to our website to your profile in the respective social network. If you interact with the plugins, for example by clicking the "Like" or "Share" button, the corresponding information is also transmitted directly to a server of the providers and stored there. The information is also published on the social network and displayed there to your contacts. This serves to protect our legitimate interests in optimal marketing of our offer, which outweigh our interests in the context of a balancing of interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR.
Furthermore, user data is usually processed for market research and advertising purposes. For example, usage profiles can be created from the usage behaviour and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behaviour and the interests of the users are stored. Furthermore, data may also be stored in the usage profiles irrespective of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
The processing of users' personal data is based on our legitimate interests in effectively informing users and communicating with users pursuant to Art. 6 para. 1 lit. f. GDPR. If the users are asked by the respective providers of the platforms for consent to the aforementioned data processing, the legal basis of the processing is Art. 6 para. 1 lit. a., Art. 7 GDPR.
For a detailed description of the respective processing and the opt-out options, please refer to the information of the providers linked below.
The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages, as well as a contact option and your rights and setting options in this respect to protect your privacy, can be found in the data protection information of the providers:
Our online presence on Facebook, Youtube, Instagram, Pinterest, Xing
Our presence on social networks and platforms serves to improve active communication with our customers and interested parties. We provide information there about our products and ongoing special promotions.
When visiting our online presences in social media, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally used on your terminal device for this purpose. Visitor behaviour and user interests are stored in these cookies. This serves according to Art. 6 Para. 1 lit. f. GDPR, this serves to protect our legitimate interests in an optimised presentation of our offer and effective communication with customers and interested parties, which prevail in the context of a balancing of interests. If you are asked by the respective social media platform operators for consent (agreement) to data processing, e.g. by means of a checkbox, the legal basis for data processing is Art. 6 (1) lit. a GDPR.
Insofar as the aforementioned social media platforms have their headquarters in the USA, the following applies: Our data processing partly involves the transfer of data to third countries (i.e. countries that are neither members of the European Union nor of the European Economic Area). Some third countries are certified by the European Commission through so-called adequacy decisions as having a data protection standard that is comparable to the level in the European Economic Area. The prerequisite for this is that they have joined the Trans-Atlantic Data Privacy Framework (TDPF; data protection agreement between the EU and the USA). Please note that this does not apply to all third countries.
We implement appropriate safeguards, including the conclusion of EU standard data protection clauses, in the event that personal data is processed outside the EU and no adequacy decision has been taken by the European Commission. The contractual text of the
EU standard data protection clauses as well as the adequacy decisions can be found on the websites of the European Commission, the EU standard data protection clauses can be accessed here, the adequacy decisions can be accessed here.

For detailed information on the processing and use of data by the providers on their sites, as well as a contact option and your rights and setting options in this regard to protect your privacy, in particular opt-out options, please refer to the data protection notices of the providers linked below. Should you still require assistance in this regard, you can contact us.

Facebook: https://www.facebook.com/about/privacy/
Google/ YouTube: https://policies.google.com/privacy?hl=en-GB
Instagram: https://help.instagram.com/519522125107875

Possibility of objection (opt-out):

Facebook: https://www.facebook.com/settings?tab=ads
Google/ YouTube: https://adssettings.google.com/authenticated
Instagram: https://help.instagram.com/519522125107875

Facebook

Data subject rights can be asserted with Facebook Ireland as well as with RUCK. According to Art. 26 of the GDPR, Facebook and RUCK have a joint responsibility Page Controller Addendum.

Facebook Ireland provides the essence of the Page Insights Supplement to data subjects,

RUCK as operator does not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR, including legal basis, identity of the controller and storage period of cookies on user terminals.

Consent for Facebook Retargeting (Website Custom Audience)

A pixel of Facebook Ireland Limited is integrated into this website (website custom audience pixel). Through this pixel, information about the use of this website (e.g. information about viewed articles) is collected by Facebook Ireland Limited. This information can be assigned to your person with the help of further information that Facebook Ireland Limited has stored about you, e.g. due to your ownership of an account on the social network "Facebook". The information collected via the pixel can be used to display interest-based advertisements about our offers in your Facebook account (retargeting). The information collected via the pixel may also be aggregated by Facebook Ireland Limited and the aggregated information may be used by Facebook Ireland Limited for its own web purposes as well as for advertising purposes of third parties. For example, Facebook Ireland Limited may infer certain interests from your browsing behaviour on this website and may also use this information to promote third party offers. Facebook Ireland Limited may also combine the information collected via the pixel with other information that Facebook Ireland Limited has collected about you via other websites and / or in connection with your use of the social network "Facebook", so that a profile about you may be stored by Facebook Ireland Limited. This profile may be used for advertising purposes. You can find more information about data protection at Facebook Ireland Limited here: www.facebook.com/policy.php.
The legal basis for this data processing is Article 6(1)(a) GDPR (consent).

Instagram

Plugins of the social network Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA (“Instagram”) are also integrated on this website. You can recognise the Instagram plugin by the "Instagram button" on our site.

If you click on the "Instagram button" while logged into your Instagram account, you can link the content of our pages to your Instagram profile. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that we have no knowledge of the content of the transmitted data or its use by Instagram. For further information, please refer to Instagram's privacy policy: https://instagram.com/about/legal/privacy.

YouTube Video Plugins

Third-party content is embedded on this website. This content is provided by Google ("Provider"). YouTube is a service of Google Ireland Limited, a company incorporated and operated under the laws of Ireland, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
For videos from YouTube that are embedded on our site, the extended data protection setting is activated. This means that no information from website visitors is collected and stored by YouTube unless they play the video. The integration of the videos serves to protect our legitimate interests in the optimal marketing of our offer, which outweigh our interests in the context of a balancing of interests pursuant to Art. 6 para. 1 p. 1 lit. f GDPR.

Vimeo Video Plugins

Third-party content is embedded on this website. This content is provided by Vimeo LLC ("provider"). The integration of Videso serves to protect our legitimate interests in an optimal marketing of our offer according to Art. 6 para. 1 p. 1 lit. f GDPR, which prevail in the context of a balancing of interests. Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York 10011, USA ("Vimeo"). The Google Analytics tracking tool is automatically integrated into videos from Vimeo that are embedded on our site. We have no influence on the tracking settings and the analysis results collected via this and cannot view them. In addition, web beacons are set for website visitors via the embedding of Vimeo videos.
To prevent Google Analytics tracking cookies from being set, you can prevent cookies from being stored by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in, you can visit https://tools.google.com/dlpage/gaoptout?hl=de, to prevent Google Analytics from collecting data on this website in the future. This will place an opt-out cookie on your terminal device. If you delete your cookies, you must click the link again.

We would like to point out that Vimeo may use Google Analytics and refer to the privacy policy (https://policies.google.com/privacy) as well as opt-out options for Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=de) or Google's settings for data use for marketing purposes (https://adssettings.google.com/).
The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages, as well as a contact option and your rights and setting options in this respect to protect your privacy, can be found in the data protection information of the providers:

Zweck und Umfang der Datenerhebung und die weitere Verarbeitung und Nutzung der Daten durch die Anbieter auf deren Seiten sowie eine Kontaktmöglichkeit und Ihre diesbezüglichen Rechte und Einstellungsmöglichkeiten zum Schutz Ihrer Privatsphäre entnehmen Sie bitte den Datenschutzhinweisen der Anbieter:

https://www.facebook.com/policy.php
https://help.instagram.com/155833707900388
https://policy.pinterest.com/en/privacy-policy
https://policies.google.com/privacy
https://privacy.xing.com/
https://vimeo.com/privacy

If you do not want the social networks to directly assign the data collected via our website to your profile in the respective service, you must log out of the corresponding service before visiting our website. You can also completely prevent the loading of the plugins with add-ons for your browser, e.g. with the script blocker "NoScript".

10. Sending assessment reminders by e-mai

Rating reminder by Trusted Shops

If you have given us your express consent to this during or after your order in accordance with Art. 6 par. 1 lit. a GDPR, we will transmit your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne/Germany (www.trustedshops.de) so that they can send you a rating reminder by e-mail. This consent can be revoked at any time by sending a message to the contact option described below or directly to Trusted Shops.

11. server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of concrete indications of illegal use.

12. SSL encryption

For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, this site uses SSL encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

C. Online education plattform

Thank you for your interest in the online courses of the RUCK Academy. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Participation in our online courses is only possible by entering your first and last name and e-mail address. We would like to point out that data transmission on the internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible. Therefore, we would like to inform you at this point about the processing of your personal data in connection with the implementation of our online courses and what rights you have.

1. Purpose/legal basis of the processing

Personal data shall only be processed by the controller if:

the data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes,
the processing is necessary for the performance of a contract (e.g. implementation of online courses) Art. 6 para. 1 lit. b GDPR, to which the data subject is party, or for the performance of pre-contractual measures, which are carried out at the request of the data subject,
the processing is necessary for compliance with a legal obligation to which the controller is subject
the processing is necessary for the purposes of the legitimate interests of the controller Art. 6 par.1 lit.f GDPR or a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

Insofar as personal data of employees of our company are processed, Section 26 BDSG is the legal basis for data processing. If, in connection with the use of the online course tool, personal data is not required for the establishment, implementation or termination of the employment relationship, but is nevertheless an elementary component of the use of the online course tool, the legal basis for data processing is Art. 6 par.1 lit.f GDPR. In these cases, our interest lies in the effective implementation of online courses.

2. What data is processed?

When using the online course tool, various types of data are processed. The scope of the data also depends on the data you enter yourself before or during participation in an online meeting. The following personal data are subject to processing:

Mandatory fields (first and last name, email address)
User information (webinar data, including display name, chat history, webinar time(s) and duration of participation)
Technical data (e.g. IP addresses)
Recordings of webinars
Voice and video data (of an participant only as far as he/she uses the audio functions e.g. for a comment/question; video footage showing a participant will only be transmitted to other participants if the participant turns his/her camera on, but will not be archived/stored)

Note: To join an online meeting or enter the meeting room, you must at least provide details of your name and email address.

3. Scope of the processing

Our service provider edudip GmbH, Jülicher Str. 306, 52070 Aachen, Germany processes (as a contract processor, Art.28 GDPR) your access and registration data (cookies) in the context of participation in online courses for the purpose of access control and for the purpose of evaluation of online courses by the RUCK Academy.

If we want to record online courses, we will tell you transparently in advance and - where necessary - ask for consent.
If it is necessary for the purposes of logging outcomes of an online course, we will log chat content. However, this will not usually be the case.
In the case of online courses, we may also process questions asked by online course participants for the purposes of recording and following up online courses.

4. Passing on your data

In principle, only those persons have access to your data who need it for the smooth running of our online courses, e.g. the organisers and moderators of the online courses. Furthermore, our IT department has access to your data for exclusively technical processing.
Personal data processed in connection with participation in online courses will not be passed on to third parties unless it is necessary to be passed on. Please note that content from online courses, as well as from personal meetings, is often used to communicate information with customers, interested parties or third parties and is therefore intended for disclosure.
The provider of the online course tool (edudip GmbH) necessarily receives knowledge of your data insofar as this is provided for in our order processing agreement with the provider.
All data processing by us or our contract processors will be effected within the UK, the European Union/European Economic Area (based on the existing adequacy decision) or – in case of third countries - in accordance with the applicable GDPR-regulations and with further information provided in this Privacy Policy.

D. Rights of the data subject

Right to confirmationg

Every data subject has the right under the General Data Protection Regulation to obtain confirmation from the controller as to whether or not personal data relating to him or her are being processed. You can exercise this right by contacting our data protection officer.

Right of withdrawal

Pursuant to Article 13(2)(c) of the GDPR, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal, if the processing is based on Article 6(1)(a) or Article 9(2)(a)

Right to information

Article 15 of the GDPR includes the following rights:

The data subject shall have the right to obtain from the controller confirmation as to whether personal data concerning him or her are being processed and, if so, the right to obtain access to those personal data and the following information:

a) the purposes of the processing;
b) the categories of personal data processed;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations;
d) if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration;
e) the existence of a right to obtain the rectification or erasure of personal data concerning him or her, or the restriction of processing by the controller, or a right to object to such processing;
f) the existence of a right of appeal to a supervisory authority;
g) where the personal data are not collected from the data subject, any available information on the origin of the data;
h) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

(2) Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards referred to in Article 46 in relation to the transfer.

(3) The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on the administrative costs. Where the data subject makes the request electronically, the information shall be provided in a commonly used electronic format, unless the data subject indicates otherwise.

(4) The right to obtain a copy under subsection (3) shall not prejudice the rights and freedoms of other persons

Right of rectification

Pursuant to Article 16 of the GDPR, the data subject has the right to obtain from the controller the rectification without delay of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration.

Right to erasure (right to be forgotten)

Article 17 of the GDPR includes the following rights:

The data subject shall have the right to obtain from the controller the erasure without delay of personal data concerning him or her, and the controller shall be obliged to erase personal data without delay where one of the following reasons applies:

a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
b) the data subject withdraws the consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) and there is no other legal basis for the processing.
c) the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2).
d) the personal data have been processed unlawfully.
e) the erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
f) the personal data have been collected in relation to information society services offered in accordance with Article 8(1).

Where the controller has made the personal data public and is obliged to erase it pursuant to paragraph 1, it shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that a data subject has requested that they erase all links to, or copies or replications of, that personal data.

(2) Paragraphs 1 and 2 shall not apply insofar as the processing is necessary to
a) to exercise the right to freedom of expression and information;
b) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
c)for reasons of public interest in the field of public health as referred to in Article 9(2)(h) and (i) and Article 9(3);
d) for archiving, scientific or historical research purposes in the public interest, or for statistical purposes pursuant to Article 89 paragraph 1, to the extent that the right referred to in paragraph 1 is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
e) the data subject has objected to the processing pursuant to Article 21(1) as long as it is not yet established whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted in accordance with paragraph 1, those personal data may be processed, apart from being stored, only with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State.

A data subject who has obtained a restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction is lifted.

Right to data portability

Article 20 of the GDPR includes the following rights:

(1) The data subject shall have the right to receive personal data concerning him or her which he or she has provided to a controller in a structured, commonly used and machine-readable format and shall have the right to transmit such data to another controller without hindrance from the controller to whom the personal data have been provided, provided that:

a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b); and
b) the processing is carried out with the aid of automated procedures.
When exercising their right to data portability in accordance with paragraph 1, the data subject shall have the right to obtain that the personal data be transferred directly from one controller to another controller, where technically feasible.

(2) WThe exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

(3) The right referred to in paragraph 2 shall not affect the rights and freedoms of other persons.

Right to object

Art. 21 GDPR includes the following rights:

(1) The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her carried out on the basis of Article 6(1)(e) or (f), including profiling based on those provisions. The controller shall no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

(2) If personal data are processed for the purpose of direct marketing, the data subject shall have the right to object at any time to processing of personal data concerning him or her for the purpose of such marketing; this shall also apply to profiling insofar as it is related to such direct marketing.

(3) If the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for these purposes.

(4) The data subject shall be expressly informed of the right referred to in paragraphs 1 and 2 at the latest at the time of the first communication with him or her; this information shall be given in a comprehensible form separate from other information.

(5) In the context of the use of information society services, notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object by means of automated procedures using technical specifications.

(6) The data subject shall have the right to object, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1), unless the processing is necessary for the performance of a task carried out in the public interest.

Right of appeal

In accordance with Art. 77 GDPR, you have the right to complain to the supervisory authority. The competent authority for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Königstraße 10a, 70173 Stuttgart/Germany, Tel.: 0711/61 55 41 - 0, Fax: 0711/61 55 41 - 15, E-Mail: poststelle@lfdi.bwl.de, Internet: https://www.baden-wuerttemberg.datenschutz.de). If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction or deletion of data as well as revocation of any consent given or objection to a specific use of data, please contact our company data protection officer.

Storage period for personal data

The controller shall process and store personal data of the data subject only for the period of time necessary to achieve the purpose of the storage or if this is mandatory under the General Data Protection Regulation or other legal provisions to which the controller is subject.
If the purpose of storage no longer applies or the legally prescribed storage periods expire, the personal data will be blocked or deleted in accordance with the statutory provisions.

Current Version: September 2023 (We will review and update our Privay Policy from time to time and will inform our registered users in case significant changes would be made to their disadvantage)