Data protection

Privacy Information
Below we inform you how Garpa Garten & Park Einrichtungen GmbH (hereinafter “GARPA” or “we”) uses your personal data, which rights you have and who you can contact if you have any questions regarding data protection.

In most cases, you can decide which personal data you would like to provide to us. However, if you refuse to provide certain data, we may not be able to offer you specific services. Mandatory information that we require to provide our services is marked accordingly.

This information is current as of December 2025. From time to time, we may need to make adjustments due to factual circumstances or legal or regulatory requirements; therefore, please review the privacy information when you next visit our website to ensure you have the most up-to-date version.

Name and contact details of the controller
Garpa Garten & Park Einrichtungen GmbH
Kiehnwiese 1
21039 Escheburg near Hamburg
Germany

Phone: +49 4152 925 200
Fax: +49 4152 925 250
Email: [email protected]

Name and contact details of our Data Protection Officer
If you have a request relating to address blocking, deletion of an address, or a change of address, please contact [email protected].

You can reach our Data Protection Officer at:
Email: [email protected] 

1.    Data processing on our website
We process your personal data when you visit our website and when you contact us. 

1.1.    Visiting our website
Each time you access our website, data is stored that your browser automatically transmits to our server. This includes your IP address, the type and version of the browser used, the time and date of access, as well as the website from which access is made (referrer URL) and the operating system of your device.

Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in ensuring convenient use as well as evaluating the system security and stability and the delivery speed of our website. 

Storage period:  The data mentioned is stored in so-called web server log files and is automatically deleted after seven days by default (log rotation). As part of regular encrypted backups, these log data may additionally be retained for up to 28 days. The maximum retention period is therefore up to 35 days.
In individual cases, storage beyond this period may be necessary insofar as this is required to investigate security incidents, to prevent misuse or fraud, or to pursue legal claims. In these cases, the data will be deleted without undue delay once the respective purpose no longer applies.

1.2.    Cookies 
We use cookies and similar technologies, such as tracking or web bugs or pixels (collectively referred to below as “cookies”). Cookies enable you to be recognised during future visits to the website. We use cookies to design our website and our offerings for you and to make them easier to use. On the one hand, we use cookies that are necessary for the technical operation of our website. In addition, with your consent, we also use cookies that serve to analyse your interaction with our website and our offerings and to integrate external media. 

You can access your cookie settings at any time via the corresponding link in the footer of our website and adjust or withdraw your consent there. Clicking it opens the cookie settings modal.

Further information can be found in our Cookie information.

1.3.    Verification of inputs 
When inputs are made on our website, for example in contact forms, we check whether they are made by humans or by automated programs. For this purpose, we analyse the behaviour of our visitors by recording parameters such as IP address, time spent on the site and mouse movements.

Legal basis: The legal basis for this data processing is Section 25(2) TDDDG and Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in ensuring the security and reliability of our website, in particular to protect it against abusive access by bots. 

2.    Contacting us, consultation appointments (virtual)
2.1.    Contact form
If you contact us electronically, for example by sending us an email, using the contact form on our website or calling us, we process your salutation, your email address, your name, the subject of your enquiry and your other contact details, as well as the information you provide in your enquiry. 

Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in responding to general enquiries. If your contact is made in the context of initiating or performing a contract, we process the aforementioned data on the basis of Art. 6(1) sentence 1 lit. b GDPR.

Storage period: Your data will only be processed in order to respond to your enquiry and will be deleted without undue delay as soon as your enquiry has been resolved, unless a contract has been concluded, statutory retention obligations apply or we have legitimate interests in further storage.

2.2.    Appointment booking
You have the option of arranging appointments with us. For this purpose, we use our own appointment booking tool developed by us. The tool is operated on our servers in Germany and is used to manage appointments and to communicate with our customers.
The data you enter (first name, last name, phone number, email address and the requested appointment) is used exclusively for planning, conducting and following up on the appointment.  To handle appointments, the necessary data is also transmitted to our showroom partners. 

Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. b GDPR. 

Storage period: The data is stored for a period of 90 days and then anonymised.

2.3.    Consultations (virtual)
To conduct virtual consultations, it is necessary to use online conference tools. These tools collect all data that you provide/use in order to use the tools (email address and/or your phone number) as well as the duration of the conference, start and end (time) of participation in the conference, number of participants, other “context information” related to the communication process and all technical data required to handle online communication (IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker as well as the type of connection). If content is exchanged, uploaded or otherwise provided within the tool, this content is also processed. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information shared while using the tool.
Please note that we do not have complete control over the data processing operations of the tools used. Our options depend largely on the corporate policy of the respective provider. For further information on data processing by the respective tools, please refer to the privacy policies of the respective providers, which we have listed below this text.

Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. b GDPR. 

Storage period: The data collected by us directly via the video and conference tools will be deleted from our systems as soon as you request deletion, withdraw your consent to storage or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected. We have no influence on the storage period of your data that is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

3.    Data processing on our social media channels
We maintain a publicly accessible profile on various social media platforms. If you use our profile to interact with us (e.g. like or share a post, follow us, leave a comment or send us a direct message), we process the data you provide to us for the purpose of contacting you. If we like, share or comment on your posts, the data you have published on the respective social media platform will be made accessible on our profile to our followers. All information you enter in your profile is publicly visible, i.e. members who log into the network as well as customers of the social media platform can view it. This also applies to your activities within the service, such as: comments on posts; “likes” and the “follow” function.
Group memberships are also publicly visible. When you share posts, the default setting is that this is done publicly. In the settings, you can restrict the visibility of these posts to your contacts.

Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in staying in contact with our business partners and interested parties and informing them, as well as in modern public relations and market observation. If you contact us via social media because you are interested in our offer, the enquiry also serves to carry out pre-contractual measures at your request; the legal basis is then Art. 6(1) sentence 1 lit. b GDPR.

4.    Data processing when concluding contracts via our online shop
4.1.    Your order via the online shop
If you order products from us, we process the data required for this, such as contact and order data (including salutation, title, first name, last name, billing and delivery address, email address, billing and payment data as well as phone number and date of birth) as well as IT usage data (including order ID, time of order). Without providing your personal data, we cannot process your order.
For the delivery of the order, we work with freight forwarding companies. The following data may be transmitted to the freight forwarding companies commissioned by us for the purpose of delivering the ordered goods or announcing the delivery: details of your delivery address (first name, last name, postal address) as well as your email address and phone number. The freight forwarding company will contact you prior to delivery to inform you of the delivery time or to coordinate delivery details with you.

Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. b GDPR. In addition, processing your email address for online orders is necessary due to a legal requirement in order to confirm receipt of the order to you electronically. In this case, the legal basis is Art. 6(1) sentence 1 lit. c GDPR.

4.2.    Setting up and managing your customer account
You can set up a customer account in our online shop to manage your orders and customer information in a protected area. To create a customer account, you must specify a password of your choice. Together with your email address, this password is used to access your customer account. Within the customer account, your contact and order data (including salutation, title, first name, last name, billing and delivery address, email address, billing and payment data as well as phone number and date of birth) will be stored. 

Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. b GDPR. In addition, we may use your data to optimise our services and for personalised offers if you have consented to this. Processing is then based on Art. 6(1) sentence 1 lit. a GDPR.

Storage period: You can delete your customer account at any time. Please note, however, that this does not automatically result in the deletion of all data visible in the customer account if you have placed an order with us. For example, we must continue to store data about orders placed insofar as warranty rights or guarantees exist with regard to the goods you purchased and these have not yet expired. 

4.3.    Creditworthiness check, scoring
During the order process, we also check your creditworthiness if you select the payment method “purchase on account”. For this purpose, we transmit the following categories of data to credit agencies cooperating with us: name, address, date of birth. We obtain information relevant to creditworthiness regarding your previous payment behaviour and information for assessing the risk of payment default based on mathematical-statistical procedures using address data (scoring) from infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden, Germany. Credit decisions are then made individually by our employees and are not the result of automated processes. If you have already placed an order with us, the data stored about you by us may be supplemented by so-called score values. Scoring means creating a forecast about future events based on collected information and past experience.

Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in minimising the credit default risk associated with this payment method. 

Storage period: The fact and the result of our check is stored in our customer database for the duration of the contractual relationship.

4.4.    Payment processing
To process cashless payment for your orders via our online shop, depending on the payment method you choose, we process payment-related data in addition to your master and contact data (e.g. salutation, name, billing and delivery address, email address), such as (e.g. invoice amount, selected payment method, transaction and authorisation identifiers, date and time of the transaction), which is transmitted to external payment service providers. Please note that these data are processed under the service providers’ own responsibility for processing the payment as well as for verifying legitimacy and for misuse and fraud prevention. Further information on data processing can be found in the privacy notices of the respective payment service providers.

Legal basis: The legal basis for data processing is Art. 6(1) sentence 1 lit. b GDPR. 

4.5.    Debt collection and receivables management
In the event of late payment, we reserve the right, subject to the other legal requirements being met, to transmit the necessary data to a company commissioned to assert the claim. Subject to the other legal requirements being met, we also transmit information about late payment or any default on a claim to credit agencies cooperating with us.

Legal basis: The legal basis for data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in the efficient enforcement of claims as well as in reducing default risks for future contracts.

5.    Marketing and customer information
5.1.    Newsletter distribution
You can sign up on our website to receive our newsletter. To do so, you must enter your email address in the designated field on our website. You will then receive a notification email. By clicking the link contained in this email, you confirm that you wish to receive our newsletter (double opt-in). If you do not click this confirmation link, you will not receive a newsletter via this channel. Based on the consent you have given, you will receive a newsletter tailored to you with personalised information about our products, events, exhibitions, services or suggestions for participating in promotions or competitions by email. For this purpose, we evaluate your click behaviour within the newsletter (e.g. opening the newsletter) as part of individual user tracking in order to make it more individual and interesting for you. 

Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. a GDPR. You can withdraw your consent to the processing of your data for newsletter distribution at any time with effect for the future. For this purpose, you will find an unsubscribe link in every newsletter. 

Storage period: Your data for sending the newsletter will be stored for as long as you are subscribed to the newsletter. Afterwards, this data will be deleted. 

5.2.    Information for existing customers
In addition, we send advertising emails and advertising by postal mail to existing customers with information about our products and services. To ensure that you only receive advertising information that is presumably of interest to you, we categorise and enrich your customer profile with additional information. We use both statistical information and information about you (e.g. basic data from your customer profile). The aim is to provide you with advertising that is oriented solely to your actual or presumed needs and thus not to burden you with unnecessary advertising.

Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in carrying out needs-based advertising to existing customers. 

Storage period: Please note that you may object at any time to receiving this information and to processing for the purposes of this information, without incurring any costs other than the transmission costs according to the basic tariffs. You have a general right to object without stating reasons pursuant to Art. 21(2) GDPR. You can declare your objection by sending us a message (see the contact details in the section “Name and contact details of the controller”). We will no longer use your data for the above purpose at the latest after your objection.

5.3.    Information for interested parties
We send advertising by postal mail to interested parties with information about our products and services. We process the name and postal address of the interested party for the purpose of sending our catalogue by post. For this purpose, we may pass on the personal data provided to us to service providers commissioned accordingly.

Legal basis:  If interested parties request to receive postal advertising on our website, the legal basis for this data processing is Art. 6(1) sentence 1 lit. b GDPR. In other cases, we receive the necessary contact details for further use from partner service providers or other customers in the course of the “refer-a-friend” campaign. The legal basis for this data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in carrying out postal direct marketing. 

Storage period: Please note that you may object at any time to receiving this information and to processing for the purposes of this information, without incurring any costs other than the transmission costs according to the basic tariffs. You have a general right to object without stating reasons pursuant to Art. 21(2) GDPR. You can declare your objection by sending us a message (see the contact details in the section “Name and contact details of the controller”). We will no longer use your data for the above purpose at the latest after your objection.

5.4.    Refer-a-friend
If you provide us with possible interested parties for our offers (e.g. catalogue request), we collect the personal data you provide for the purpose of acquiring new customers. We process the name and postal address of the interested party for the postal sending of our catalogue as described above. We are also obliged to inform the person you have named that you have provided us with their address data. 

Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in carrying out advertising measures for acquiring new customers.

Storage period: We store your information (information about the interested party and the fact that you recommended the interested party) for as long as is necessary for fulfilling the purpose for evidentiary reasons.

5.5.    Customer surveys
At various points in your shopping experience, you have the opportunity to provide feedback on your experiences with our online shop, our showrooms, our call centre or a catalogue order. The data collected is used only internally and helps us to make your next visit to our website, our showrooms or contact with our call/service centre even better.

Legal basis: Processing is carried out on the basis of your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

5.6.    Competitions
You have the option to participate in various competitions on our website, via our social media channels or from our newsletter. Unless otherwise specified in the respective competition or you have given us further explicit consent, the personal data you provide to us in the course of participation in the competition will be used exclusively to process the competition (e.g. selecting the winner, notifying the winner, sending the prize). Data will only be passed on to third parties if this is necessary for processing the competition (e.g. sending the prize via a freight forwarding company). 

Legal basis: The legal basis for data processing in the context of competitions is generally Art. 6(1) sentence 1 lit. b GDPR. If a declaration of consent is given as part of a competition, Art. 6(1) sentence 1 lit. a GDPR is the legal basis for data processing. 
Storage period: In the case of prizes in kind, the winners’ data will be retained for the duration of the statutory warranty claims in order to arrange rectification or replacement in the event of a defect.

5.7.    Participation in analytics union for end customers
As a participant of “analytics union”, a cooperation of various companies engaged in distance selling, we use a shared system in which your data, together with data of other participants, is evaluated in pseudonymised form by service providers in order to plan interest-based advertising and to identify potential new customers for us and the other participants. The involved companies cooperate as joint controllers pursuant to Art. 26 GDPR and apply pseudonymisation and encryption procedures so that identification is only possible for as long as it is necessary for the purposes described.
You may object to the processing of your data for these purposes at any time in accordance with Art. 21 GDPR. In the event of an objection, your data will be placed on a suppression list in order to ensure that you are no longer included in these marketing measures. Due to pseudonymisation, it may be necessary in individual cases for you to provide additional information so that we can clearly assign and process your rights under Art. 15–20 GDPR.
Further information about “analytics union” can be found at info.analyticsunion.de or from CUSTOMY GmbH & Co. KG, Klarissengasse 4, 48143 Münster, Germany.

Legal basis: The legal basis for data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in carrying out our own advertising measures as well as joint marketing activities with the partner companies of “analytics union” for customer acquisition and customer retention.

5.8.    Customer Match
As part of our advertising activities, we use Customer Match with Google. After you have given your consent pursuant to Art. 6 GDPR, we upload encrypted user data (e.g., email addresses) into lists with our advertising partners. After the upload, the partner system checks for possible matches of the user data. Once the Customer Match lists have been created, the encrypted customer data is automatically deleted by the advertising partner, so that they cannot use it for any further purposes. If the data is already known to the system, the respective user will be assigned to a target audience, which may subsequently be used for advertising purposes. If you no longer wish the processing to take place at a later point in time — for example after you have previously given your consent — please send your withdrawal by email to [email protected] .

Personal Data: Personal data within the meaning of Art. 4 of the General Data Protection Regulation (GDPR) means all information relating to an identified or identifiable natural person. For our purposes within the framework of Customer Match, we primarily process email addresses, but where applicable also telephone numbers, names and/or addresses..

Pseudonymized Data Processing: Within the scope of Customer Match, personal data such as email addresses are pseudonymized. For this purpose, before being transferred to the advertising partner, the data is rendered unreadable using so-called hashing algorithms and altered in such a way that conclusions about the identity of third parties are only possible with a disproportionately high effort. The purpose of this procedure is to ensure that the information used serves exclusively the intended purpose.

Legal Basis: The legal basis for data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in carrying out our own advertising measures as well as joint marketing activities with the partner company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland, for the purpose of acquiring new customers and maintaining existing customer relationships..

6.    Access to the GARPA image archive / image database
You can register for our GARPA image archive and image database (also referred to as the “database”), for example as a press contact, to access image and text files free of charge for editorial purposes. Architects and interior designers can use the database to obtain free technical drawings, image and text files for personal, educational and informational purposes, for preparing offers/quotations for end customers in connection with the sale of GARPA products by the company itself, as well as for use in further training or seminars.
For registration for our database, we use the so-called double opt-in procedure. This means that after registration we send an email to the email address provided in which we ask you to confirm that you wish to register for the database. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses and the times of registration and confirmation in each case. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify possible misuse of your personal data.

Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. b GDPR.

7.    Creation of internal statistics and analyses
We process the personal data that we collect from you in the course of initiating a contract or during the ongoing contractual relationship, as well as usage data relating to our products and services. This processing serves to carry out existing customer analyses that are necessary for the further development and improvement of our offer and our products. In addition, we use these data to create anonymised statistical analyses as well as forecasts and reports. On this basis, we evaluate and optimise our services as well as the quality of our products.

Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in the further development of our offer and our products.

8.    Data processing in the application process
8.1.    Scope and purpose of data processing
We process the data that you provide to us yourself with your application for a position (e.g. with your cover letter, CV and references).
During the application process, we process the following categories of data: master data (e.g. salutation, first name, last name, date of birth, place of residence); documents (e.g. references, certificates, CV, letter of motivation); in the event that you have reimbursable expenses, the data relevant for settlement, e.g. your bank details; as well as communication data (e.g. phone numbers, email, postal address).
Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. b GDPR. Insofar as special categories of personal data are processed (e.g. health data), we process these in accordance with Art. 6(1) sentence 1 lit. b in conjunction with Art. 9(2) lit. b GDPR.
Storage period:  If an application is unsuccessful, the data will generally be deleted six months after completion of the process, unless longer retention obligations apply in individual cases (e.g. for any receipts for travel expense reimbursement) or storage beyond this is necessary to defend against legal claims.
8.2.    Inclusion in the applicant pool
If we do not make you a job offer, there may be the option to include you in our applicant pool. If included, all documents and information from the application will be transferred to the applicant pool in order to contact you in the event of suitable vacancies. 

Legal basis: The legal basis for this data processing is Art. 6(1) sentence 1 lit. a GDPR. 

Storage period: The data in the applicant pool will be irreversibly deleted no later than two years after consent is given.

9.    Disclosure of your personal data
We only disclose your data if we are legally permitted to do so. If we transfer your data to a country that is neither part of the EU nor the EEA and for which there is no adequacy decision by the EU Commission, we will take all necessary measures to safeguard the respective data processing. This includes, for example, the EU Commission’s standard contractual clauses.
We may disclose your data as follows, unless already stated separately above:

• For hosting and operating our website and online shop, we use the service provider centron GmbH, Heganger 29, 96103 Hallstadt, Germany.
• To protect our forms against misuse, we use Cloudflare Turnstile and the Content Delivery Network (CDN) of the service provider Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich, Germany. In individual cases, temporary processing of personal data in the USA cannot be ruled out. The provider is certified under the EU-U.S. Data Privacy Framework. In addition, standard contractual clauses have been concluded.
• Consents for cookies and comparable technologies are obtained and managed via the standard cookie consent banner integrated in the shop system used (Shopware).
• For creditworthiness checks, personal data may be transmitted to Experian Deutschland GmbH, Landsberger Straße 290a, 80687 Munich, Germany.
• For processing cashless payments, we use the services of the payment service provider Adyen N.V., Simon Carmiggeltstraat 6–50, 1011 DJ Amsterdam, Netherlands.
• As an online conference tool, we use Microsoft Teams provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. In individual cases, temporary processing of personal data in the USA cannot be ruled out. The provider is certified under the EU-U.S. Data Privacy Framework. In addition, standard contractual clauses have been concluded.
• For sending our newsletters and information to existing customers, we use the service “Maileon” of XQueue GmbH, Christian-Pleß-Str. 11-13, 63069 Offenbach am Main, Germany.
• For our social media presence, we maintain a profile on the social network Pinterest. The network is operated by Pinterest Europe Ltd., Palmerston House, Fenian Street, Dublin 2, Ireland. In individual cases, temporary processing of personal data in the USA cannot be ruled out. Therefore, corresponding standard contractual clauses have been agreed as an additional measure.
• For our social media presence, we maintain a profile on the social network LinkedIn. The network is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. In individual cases, temporary processing of personal data in the USA cannot be ruled out. Therefore, corresponding standard contractual clauses have been agreed as an additional measure.
• For our social media presence, we maintain a profile on the social networks Facebook and Instagram. Both networks are operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. In individual cases, temporary processing of personal data in the USA cannot be ruled out. Therefore, corresponding standard contractual clauses have been agreed as an additional measure.
• For our presence on the video platform YouTube, we use the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland, as the operator of YouTube. In individual cases, temporary processing of personal data in the USA or other third countries cannot be ruled out. Therefore, corresponding standard contractual clauses have been agreed as an additional measure.
• To manage and process applications, we use the HR management software Personio. The provider is Personio SE & Co. KG, Rundfunkplatz 4, 80335 Munich, Germany.
• For the purpose of fulfilling the purchase contract, personal data is transmitted to the freight forwarding companies commissioned by us for the purpose of delivering the ordered goods or announcing the delivery. The freight forwarding company will contact you prior to delivery to inform you of the delivery time or to coordinate delivery details with you.

10.    Retention period
Unless already stated separately above, we store your personal data for as long as is necessary to achieve the respective purpose, in particular to fulfil our legal and contractual obligations. After the purpose has been achieved, these data are deleted unless the law permits further storage for certain purposes, including the defence of legal claims. In addition, we may have to store your data for billing purposes. In this context, we are subject to statutory retention and documentation obligations requiring us to retain records for between two and ten years.

11.    Your rights
As a data subject, you have the following rights, provided that the respective legal requirements are met:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)

In addition, pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority of your choice regarding our data processing. Our registered office is in Schleswig-Holstein. The supervisory authority responsible for us is: Unabhängiges Landeszentrum für Datenschutz, Postfach 71 16, 24171 Kiel, Germany.

Furthermore, you have the right to object (Art. 21 GDPR) if we process data on the basis of Art. 6(1) sentence 1 lit. f GDPR. Please note that where processing is carried out for purposes other than direct marketing, reasons must be provided arising from your particular situation. You can declare your objection by sending us a message (see the contact details in the section “Name and contact details of the controller”).

If we process data concerning you on the basis of your consent, you can withdraw your consent with effect for the future. You can declare your withdrawal by sending us a message (see the contact details in the section “Name and contact details of the controller”).

Matomo