Privacy Policy

1) Information on the Collection of Personal Data

We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our website. Personal data refers to any information that can be used to identify you personally.

The controller responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is:

Verisana GmbH
Spitalerstraße 9,
20095 Hamburg,
Germany
Tel.: + 49 (0)40 53 79 76 958,
Fax: + 49 (0)40 53 79 76 959,
Email: kontakt@verisana.de

The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website

When you use our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

Website visited
Date and time of access
Amount of data sent in bytes
Source/referrer from which you reached the page
Browser used
Operating system used
IP address used (in anonymized form, if applicable)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of your browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (so-called persistent cookies).

When cookies are set, they collect and process certain user information to varying extents, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can find the duration of the respective cookie storage in the overview of your web browser’s cookie settings.

Some cookies help simplify the ordering process by saving settings (for example, remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies implemented by us, such processing is carried out in accordance with Art. 6 (1) (b) GDPR either for the performance of a contract, in accordance with Art. 6 (1) (a) GDPR if consent has been given, or in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website as well as a customer-friendly and efficient design of the site visit.

We may work with advertising partners who help us make our internet offering more interesting for you. For this purpose, cookies from partner companies (third-party cookies) may also be stored on your hard drive when you visit our website. If we cooperate with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the respective data collected within the following sections.

Please note that you can set your browser to inform you about the setting of cookies and to decide individually on their acceptance, or to exclude the acceptance of cookies for specific cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. Below you will find the corresponding help pages:

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contacting us

When contacting us (e.g. via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective form.

This data is stored and used exclusively for the purpose of responding to your inquiry and for the related technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6 (1) (f) GDPR.

If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR. Your data will be deleted once your inquiry has been fully processed. This is the case when it can be inferred from the circumstances that the relevant matter has been conclusively clarified and provided that no statutory retention obligations apply.

5) Data processing when opening a customer account and for contract execution

In accordance with Art. 6 (1) (b) GDPR, personal data is collected and processed when you provide it to us for the purpose of performing a contract or opening a customer account. The specific data collected can be seen from the respective input forms.

You may request the deletion of your customer account at any time by sending a message to the controller’s address mentioned above. We store and use the data you provide solely for the purpose of fulfilling the contract.

After the complete execution of the contract or deletion of your customer account, your data will be blocked in compliance with statutory tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we are legally permitted to continue using it.

6) Comment function

Within the scope of the comment function on this website, in addition to your comment, information about the time the comment was created and the commentator name you have chosen will be stored and published on this website. Furthermore, your IP address will be logged and stored.

The storage of the IP address is carried out for security reasons and in the event that the person concerned violates the rights of third parties or posts unlawful content through a submitted comment. We require your email address in order to contact you should a third party object to your published content as being unlawful.

The legal bases for the storage of your data are Art. 6 (1) (b) and (f) GDPR. We reserve the right to delete comments if they are objected to by third parties as being unlawful.

7) Use of your data for direct advertising

7.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for receiving the newsletter is your email address. Providing any additional data is voluntary and used only to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter once you have explicitly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm, by clicking a corresponding link, that you wish to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR. When you register for the newsletter, we store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to trace any potential misuse of your email address at a later date. The data collected during registration is used exclusively for the purpose of promotional communication via the newsletter.

You may unsubscribe from the newsletter at any time via the link provided in each newsletter or by sending a corresponding message to the controller mentioned above. After successful unsubscription, your email address will be immediately removed from our mailing list, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this scope, as permitted by law and as explained in this privacy policy.

7.2 Newsletter delivery via Mailchimp

Our email newsletters are sent via the technical service provider The Rocket Science Group, LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (www.mailchimp.com), to whom we transmit the data you provided during newsletter registration. This transfer is carried out in accordance with Art. 6 (1) (f) GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is generally transferred to a Mailchimp server in the USA and stored there.

Mailchimp uses this information to send and statistically evaluate the newsletters on our behalf. For statistical analysis, the emails sent contain so-called web beacons or tracking pixels (one-pixel image files) that are stored on our website. This allows us to determine whether a newsletter message was opened and which links, if any, were clicked. With the help of these web beacons, Mailchimp automatically generates general, non-personalized statistics about the response behavior to newsletter campaigns.

Based on our legitimate interest in analyzing newsletter campaigns to optimize our advertising communication and better tailor it to recipient interests, data of the respective newsletter recipient (email address, time of retrieval, IP address, browser type, and operating system) is also collected and evaluated by means of web beacons in accordance with Art. 6 (1) (f) GDPR. This data enables individual tracking of the newsletter recipient and is processed by Mailchimp for the purpose of automatically generating statistics indicating whether a particular recipient has opened a newsletter message.

If you wish to disable data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter. Mailchimp may also use this data in accordance with Art. 6 (1) (f) GDPR based on its own legitimate interest in optimizing the service, as well as for market research purposes (for example, to determine from which countries recipients come). However, Mailchimp does not use the data of our newsletter recipients to contact them directly or to pass it on to third parties.

To protect your data in the USA, we have concluded a data processing agreement (“Data Processing Agreement”) with Mailchimp based on the Standard Contractual Clauses of the European Commission, enabling the transfer of your personal data to Mailchimp. This agreement can be viewed here: Data Processing Agreement.

Mailchimp is also certified under the EU–U.S. Data Privacy Framework (formerly “Privacy Shield”) and is therefore committed to complying with EU data protection requirements. You can view Mailchimp’s privacy policy here: Mailchimp Privacy Policy.

8) Data processing for order handling

To process your order, we work with the service providers listed below who support us, in whole or in part, in the performance of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

8.1 Transfer of personal data to shipping and payment service providers

The personal data we collect will be passed on to the transport company commissioned with the delivery to the extent necessary for the delivery of the goods. Your payment data will be forwarded to the credit institution commissioned with the payment processing where this is necessary for payment purposes. If payment service providers are used, you will be expressly informed about this below. The legal basis for the transfer of data is Art. 6 (1) (b) GDPR.

8.2 Use of payment service providers

– PayPal –

When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal, we forward your payment data as part of the payment process to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). The transfer takes place in accordance with Art. 6 (1) (b) GDPR and only insofar as it is necessary for payment processing.

For certain payment methods, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be transmitted to credit agencies in accordance with Art. 6 (1) (f) GDPR, based on PayPal’s legitimate interest in determining your ability to pay. The result of the credit check regarding the statistical probability of default is used by PayPal for the purpose of deciding whether to provide the respective payment method. Further information, particularly on the credit agencies used, can be found in PayPal’s Privacy Policy: PayPal Privacy Policy.

You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

8.3 Integration of the Trusted Shops Trustbadge

To display our Trusted Shops trustmark and any collected reviews, as well as to offer Trusted Shops products to buyers after an order, the Trusted Shops Trustbadge is integrated into this website.

This serves to protect our overriding legitimate interests in the optimal marketing of our offer by enabling a secure purchase experience, in accordance with Art. 6 (1) (f) GDPR. The Trustbadge and the associated services are provided by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. Further information on data protection by Trusted Shops GmbH can be found here: Trusted Shops Privacy Policy.

When the Trustbadge is accessed, the web server automatically stores a so-called server log file that also contains your IP address, date and time of access, transferred data volume, and the requesting provider (access data), and documents the retrieval. Individual access data is stored in a security database for the analysis of security anomalies. Log files are automatically deleted no later than 90 days after their creation.

Additional personal data is transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. This is necessary for the fulfillment of our and Trusted Shops’ legitimate interests in providing buyer protection linked to the specific order and transactional review services in accordance with Art. 6 (1) (f) GDPR.

9) Use of social media: videos

9.1 Use of YouTube videos

This website uses the YouTube embedding function to display and play videos from the provider “YouTube,” which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

The extended data protection mode is used here, which, according to the provider, only initiates the storage of user information once the video(s) are played. When the playback of embedded YouTube videos is started, YouTube sets cookies to collect information about user behavior. According to YouTube, these serve, among other purposes, to record video statistics, improve user experience, and prevent abusive behavior.

If you are logged into Google, your data will be directly associated with your account when you click on a video. If you do not wish such association with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such evaluation is carried out in particular in accordance with Art. 6 (1) (f) GDPR on the basis of Google’s legitimate interests in displaying personalized advertising, conducting market research, and/or designing its website according to user needs. You have the right to object to the creation of these user profiles, and to exercise this right you must contact YouTube directly.

In connection with the use of YouTube, personal data may also be transmitted to the servers of Google LLC in the United States. Regardless of any playback of embedded videos, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations beyond our control.

In the event that personal data is transmitted to Google LLC, based in the USA, Google LLC is certified under the EU–U.S. Data Privacy Framework (formerly “Privacy Shield”), which ensures compliance with the data protection standards applicable in the EU. A current certificate can be viewed here: Data Privacy Framework List.

Further information on data protection at YouTube can be found in the provider’s privacy policy: Google Privacy Policy.

Where legally required, we have obtained your consent pursuant to Art. 6 (1) (a) GDPR for the processing of your data as described above. You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please use the objection option described above.

10) Online marketing

10.1 Use of Google Ads Conversion Tracking

This website uses the online advertising program “Google Ads” and, within the framework of Google Ads, the conversion tracking service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our offers on external websites by means of advertising materials (so-called Google AdWords). From the data of the advertising campaigns, we can determine the success of individual advertising measures. Our aim is to show you advertising that is of interest to you, to make our website more appealing to you, and to ensure a fair calculation of advertising costs.

The cookie for conversion tracking is set when a user clicks on a Google Ads advertisement. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not intended to personally identify the user. If a user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie; cookies can therefore not be tracked across the websites of other Ads customers.

The information collected with the help of the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. These customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not wish to participate in tracking, you can block this use by deactivating the Google Conversion Tracking cookie via your internet browser under “user settings.” You will then not be included in the conversion tracking statistics.

We use Google Ads based on our legitimate interest in targeted advertising in accordance with Art. 6 (1) (f) GDPR. In connection with the use of Google Ads, personal data may also be transmitted to the servers of Google LLC in the United States. In such cases, Google LLC is certified under the EU–U.S. Data Privacy Framework (formerly “Privacy Shield”), which ensures compliance with EU data protection standards. A current certificate can be viewed here: Data Privacy Framework List.

Further information on Google’s data protection regulations can be found here: Google Privacy Policy.

You can permanently disable cookies for ad preferences by adjusting your browser settings accordingly or by downloading and installing the browser plug-in available at the following link: Google Ads Plugin.

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have disabled the use of cookies.

11) Web analytics services

11.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so-called “cookies” – text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to and stored on a Google server. This may also result in transmission to the servers of Google LLC in the United States.

This website uses Google (Universal) Analytics exclusively with the extension _anonymizeIp(), which ensures the anonymization of IP addresses by truncation and prevents them from being directly linked to a specific individual. With this extension, your IP address is shortened by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website and internet usage to us. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.

You can prevent the storage of cookies by adjusting your browser settings accordingly. However, please note that in this case you may not be able to fully use all functions of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: Google Analytics Opt-Out Add-on.

As an alternative to the browser plug-in or within browsers on mobile devices, you can click the following link to set an opt-out cookie that will prevent future data collection by Google Analytics within this website: Deactivate Google Analytics. (This opt-out cookie works only in this browser and only for this domain. If you delete your cookies in this browser, you must click this link again.)

Further information about Google (Universal) Analytics can be found here: Google Privacy Policy.

In cases where personal data is transmitted to Google LLC, located in the USA, Google LLC is certified under the EU–U.S. Data Privacy Framework (formerly “Privacy Shield”), which ensures compliance with EU data protection standards. A current certificate can be viewed here: Data Privacy Framework List.

Where legally required, we have obtained your consent in accordance with Art. 6 (1) (a) GDPR for the processing of your data as described above. You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please follow the objection procedure described above.

12) Retargeting / Remarketing / Referral advertising

12.1 Bing Ads (Microsoft Corporation)

This website uses the conversion tracking technology “Bing Ads” from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. A cookie is placed on your computer by Microsoft Bing Ads if you arrive on our website via a Microsoft Bing advertisement. Cookies are small text files stored on your device that expire after 180 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Microsoft and we can recognize that the user clicked on the advertisement and was redirected to a specific page (conversion page).

If personal data is processed in this context, this is done pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in effective marketing. The information collected with the help of the conversion cookie is used to compile conversion statistics showing how many users reached a conversion page after clicking on an advertisement. We thereby receive the total number of users, but no information that would personally identify them.

Microsoft Corporation, based in the USA, is certified under the EU–U.S. Data Privacy Framework (formerly “Privacy Shield”), which ensures compliance with EU data protection standards. If you do not wish to participate in tracking, you can object by disabling the Bing Ads conversion tracking cookie in your internet browser settings. Alternatively, you can check whether Microsoft advertising cookies are set and disable them on the EU consumer opt-out page: YourOnlineChoices.

Further information on Microsoft Bing Ads’ privacy practices can be found here: Microsoft Privacy Statement.

12.2 Google Ads Remarketing

Our website uses the features of Google Ads Remarketing to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

For this purpose, Google places a cookie in your device’s browser that automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. Processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) (f) GDPR.

Further data processing only occurs if you have consented to Google linking your internet and app browsing history with your Google account and using information from your Google account to personalize ads. In this case, if you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form target groups.

In connection with the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC in the United States. You can permanently disable cookies for ad preferences by downloading and installing the browser plug-in available at the following link: Google Ads Settings.

Alternatively, you can visit the Digital Advertising Alliance website at www.aboutads.info to learn more about cookie usage and manage your settings. Finally, you can configure your browser to notify you when cookies are being set and decide individually whether to accept them, or to exclude cookie acceptance in specific cases or in general. Please note that disabling cookies may limit the functionality of our website.

In cases where personal data is transmitted to Google LLC, based in the USA, Google LLC is certified under the EU–U.S. Data Privacy Framework (formerly “Privacy Shield”). A current certificate can be viewed here: Data Privacy Framework List.

Further information and Google’s advertising privacy policies can be found here: Google Advertising Policies.

13) Use of a live chat system

13.1 TidioChat (Tidio Ltd.)

On this website, anonymized data is collected and stored using technologies of Tidio Ltd., 220C Blythe Road, W14 0HH, London, United Kingdom (www.tidio.com) for the purpose of web analytics and operating the live chat system. This system serves to answer live support inquiries in real time.

From this anonymized data, usage profiles can be created under a pseudonym. Cookies may be used for this purpose—small text files that are stored locally in the cache of the site visitor’s internet browser. Cookies enable the recognition of the internet browser. If the information collected in this way has a personal reference, processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in effective customer support and the statistical analysis of user behavior for optimization purposes.

The data collected using TidioChat technologies will not be used, without separately granted consent, to personally identify the visitor to this website, nor will it be merged with personal data about the bearer of the pseudonym. To avoid the storage of TidioChat cookies, you can configure your internet browser so that no cookies are stored on your computer in the future or cookies that have already been stored are deleted. However, disabling all cookies may result in some functions on our websites no longer being executable.

You may object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with effect for the future by sending us your objection informally by email to kontakt@verisana.de.

14) Rights of the data subject

14.1 General rights of the data subject

The applicable data protection law grants you comprehensive rights with respect to the processing of your personal data by the controller (rights of access and intervention), which we inform you about below:

Right of access pursuant to Art. 15 GDPR: You have the right to obtain information about the personal data we process concerning you, the purposes of the processing, the categories of data, recipients, storage period, origin of the data, and the existence of automated decision-making.
Right to rectification pursuant to Art. 16 GDPR: You have the right to immediate correction of inaccurate personal data and completion of incomplete personal data.
Right to erasure pursuant to Art. 17 GDPR: You have the right to request the deletion of your personal data insofar as there is no legal obligation to retain it or we require the data for the establishment, exercise, or defense of legal claims.
Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your data, for example, if you contest the accuracy of the data or object to erasure due to unlawful processing.
Right to notification pursuant to Art. 19 GDPR: If you have exercised your right to rectification, erasure, or restriction of processing, we will notify all recipients to whom personal data has been disclosed, unless this proves impossible or involves disproportionate effort.
Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format or to request the transfer of that data to another controller.
Right to withdraw consent pursuant to Art. 7 (3) GDPR: You may withdraw consent that you have previously given at any time with effect for the future. The lawfulness of processing based on consent before its withdrawal remains unaffected.
Right to lodge a complaint pursuant to Art. 77 GDPR: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement.

14.2 Right to object

If we process your personal data based on our overriding legitimate interest within the framework of a balancing of interests, you have the right to object to this processing at any time on grounds relating to your particular situation, with effect for the future.

If you exercise your right to object, we will stop processing the affected data. However, further processing remains reserved if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If your personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such advertising purposes. You may exercise your objection as described above. If you exercise your right to object, we will cease processing the affected data for direct marketing purposes.

15) Duration of the storage of personal data

The duration of the storage of personal data is determined based on the respective legal basis, the purpose of processing, and – where applicable – also in accordance with the statutory retention periods (e.g. commercial and tax law retention periods).

When processing personal data based on explicit consent pursuant to Art. 6 (1) (a) GDPR, such data will be stored until the data subject withdraws their consent.

If statutory retention periods apply to data that is processed in connection with contractual or quasi-contractual obligations pursuant to Art. 6 (1) (b) GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the performance or initiation of a contract and/or there is no legitimate interest in continued storage.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, this data will be stored until the data subject exercises their right to object pursuant to Art. 21 (1) GDPR, unless there are compelling legitimate grounds for processing that outweigh the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, this data will be stored until the data subject exercises their right to object pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the information contained in this privacy policy regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.