This data protection declaration explains how we handle your personal data. The current data protection law, in particular the General Data Protection Regulation (DSGVO), is the guideline. With the exception of the service providers and third-party suppliers that we name in this data protection declaration, we do not pass on any data to third parties. If you have any questions, please do not hesitate to contact us.
Responsible for data processing is
HAIVE UG (haftungsbeschränkt)
Alter Schlachthof 39, F 1
76131 Karlsruhe
Data protection representative
Marius Krämer
E-Mail: marius@heyvie.io
Phone: +49 (0) 15679 529267
Provision of data
As a rule, there is no legal or contractual requirement to provide personal data in order to use our website. If the provision of data is necessary for the conclusion of a contract or if the user is obliged to provide personal data, we will inform you of this circumstance and the consequences of not providing the data in this data protection declaration.
Data transfer to third countries
We may use service providers and third parties located in countries outside the European Union and the European Economic Area. The transfer of personal data to such third countries is based on an adequacy decision of the European Commission (Article 45 GDPR) or we have provided appropriate safeguards to ensure data protection (Article 46 GDPR). Insofar as an adequacy decision of the European Commission exists for the transfer of data to a third country, we point this out in this privacy policy. In all other respects, users can obtain a copy of the appropriate safeguards, insofar as this is not already contained in the data protection declarations of the service providers or third-party providers, from us.
Automated decision-making
If we use automated decision-making including profiling, we will inform you in this privacy statement about this circumstance, about the logic involved and the scope and intended effects of such processing. Otherwise, automated decision-making does not take place.
Processing for other purposes
As a matter of principle, data are only processed for the purposes for which they were collected. If, exceptionally, they are further processed for other purposes, we will inform about these other purposes prior to this further processing and provide all other relevant information (Article 13 (3) GDPR).
Data processing when accessing the website
Each time our website is accessed, the user's browser transmits various data. For the duration of the visit to the website, the following data are processed:
The processing of this data is necessary to deliver the website to the user and to optimize it for the user's terminal device. We do not store any personal data in log files.
Log files are automatically deleted after 30 days. Our website is designed and operated by the provider Webflow Inc, 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA.
On our website, we use technologies to recognize the end device used. These can be cookies, tracking pixels and/or mobile identifiers.
The recognition of an end device can basically take place for different purposes. It may be necessary to provide functions of our website, for example to provide a shopping cart. In addition, the aforementioned technologies may be used to track the behavior of users on the site, for example for advertising purposes. Which technologies we use in detail and for what purposes, we describe separately in this privacy policy.
For a better understanding, we explain below in general terms how cookies, tracking pixels and mobile identifiers work:
Cookies may be necessary for our website to function properly. The legal basis for the use of such cookies is Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest is to provide the functions of our website.
We use cookies that are not necessary for the operation of our website in order to make our offer more user-friendly or to be able to track the use of our website. The legal basis here depends on whether the consent of the user must be obtained or we can invoke a legitimate interest. The user can revoke a given consent at any time, among other things, by means of the settings in his browser.
The user can prevent and object to the processing of data using cookies by making the appropriate settings in his browser. In case of objection, not all functions of our website may be available. We provide separate information on other options for objecting to the processing of personal data using cookies in this data protection declaration. Where appropriate, we provide links with which an objection can be declared. These are labeled "Opt-Out".
Cookiebot
To manage consent from our users, we use the service Cookiebot. Provider: Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark.
Cookiebot is a service that allows us to obtain consent from our users for the use of cookies. Cookiebot automatically stores up to two cookies on the user's terminal device. Firstly, the first-party cookie "CookieConsent", which stores the user's consent. Second, only in the case of "bulk consent" across certain domains, the third-party provider's "CookieConsentBulkTicket" cookie, which stores an encrypted key to activate bulk consent across multiple domains.
The consent of the user is logged and documented by means of storing the anonymized IP address of the user, the browser used ("User Agent"), the website URL, the date and time of consent and the unique encrypted key stored in the data center of the Cybot Cloud vendor, Microsoft Ireland Operations Ltd. in Dublin, Ireland.
The legal basis for the processing is Art. 6 (1) . 1 lit. f) GDPR. Our legitimate interest is to obtain the consent of our users required to store cookies and to prove that we are lawfully processing personal data in connection with the use of cookies.
Cookies expire automatically after 12 months from the date of the user's consent and must then be renewed. Otherwise, data is deleted at the end of three years from the end of the year.
In the event of contact, we process the user's details, date and time for the purpose of processing the inquiry, including any queries.
The legal basis for the data processing is Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest is to respond to the requests of our users. Additional legal basis is Art. 6 para. 1 . 1 lit. b) GDPR, if the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures.
The data will be deleted as soon as the request, including any queries, has been answered. We check at regular intervals, but at least every two years, whether any data accrued in connection with contacting us is to be deleted.
Users have the option to register for newslit.s on our site. In doing so, we process the data entered during registration in order to be able to send a confirmation email to the user's email address. After confirmation, we process the data in order to be able to send newslit.s. For the purpose of personalization, we may also process the user's name if the user has provided it.
With the registration, the date and time as well as the IP address of the user are stored in order to be able to prove a registration. We continue to process this data after deregistration for verification purposes and delete it after three years at the end of the year.
The legal basis for the processing is the consent of the user in accordance with Art. 6 (1) . 1 a) GDPR. Otherwise, the processing is carried out in accordance with Art. 6 para. 1 . 1 lit. f) GDPR. Legitimate interests on our part are the sending of newslit.s, personalized addressing of the user and proof that the user has subscribed to the newslit..
To improve our content, we measure how successful our newslit.s are, for example, how often they are opened by users and which links were clicked. For this purpose, emails contain a tracking pixel. We do not track the activities of individual users.
Users can register for our offer on our website. In this context, we process the data entered during registration. We have the e-mail address confirmed by sending a link (double opt-in) to prevent misuse of the registration function. Furthermore, we process the date and time and the IP address of the user for this purpose. For verification purposes, we also process the date, time and IP address of the user when the confirmation link is clicked.
The data is deleted with the deletion of the user account after three years at the end of the year, unless there is a longer legal obligation to retain the data.
The legal basis for the processing is Art. 6 para. 1 U Abs. 1 lit. a) GDPR, insofar as we obtain the consent of the user. If the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, it is based on Art. 6 (1) (1) (b) GDPR. The legal basis in all other respects is Art. 6 (1) (1) (f) GDPR. Our legitimate interest is to enable users to access our offer requiring registration, to protect ourselves against misuse of the registration function and to be able to prove proper registration. After deletion of the user account, our legitimate interest furthermore consists in the defense against possible claims.
When users apply for a job, we process personal data for the purpose of the application process. In addition to the data submitted by the user, we process other data that accrue in the course of the application process (e.g., during an interview). Should we include data in an applicant pool, this will only be done on the basis of the user's prior consent. In this case, the data will be processed beyond the conclusion of the application process so that contact can be made in the event of suitable job offers.
Applicant data is deleted three months after completion of the application process. In the case of inclusion in an applicant pool, the data will be retained for a maximum of two years unless the consent given is revoked beforehand.
The legal basis for the processing is Art. 6 (1) . 1 b) GDPR. In the case of consent given for inclusion in an applicant pool, the processing is based on Art. 6 para. 1 . 1 lit. a) GDPR. After termination of the application process, the processing is based on Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest is the defense against possible claims under the General Equal Treatment Act.
We conduct online surveys on our website. We want to learn more about the interests of our users in order to improve our offer as well as our products and services. It is possible that we will provide information about the associated processing of data in a separate privacy statement, which will then take precedence. If it is a survey that is not personalized, i.e. where neither an individual link to participate is issued nor does the user provide personal data, only the data that is generally generated when using the website is processed. In the case of a personalized survey, we use the information entered by the user to remind him/her if he/she has not completed the survey and to exclude multiple participation. We do not store responses together with data through which the user can be identified. We create anonymous evaluations based on the responses. Insofar as we obtain the user's consent, the legal basis for the processing is Art. 6 (1) . 1 a) GDPR. Otherwise, it is based on Art. 6 (1) (1) (f) GDPR. Our legitimate interest is to improve our offer as well as our products and services.
Stripe
If you choose a payment method of the payment service provider Stripe, the payment is processed via the payment service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to which we pass on your information provided during the ordering process together with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. You can find more information about Stripe's data protection at the URL https://stripe.com/de/privacy.
Stripe reserves the right to perform a credit check based on mathematical-statistical methods in order to safeguard the legitimate interest in determining the User's ability to pay. The personal data necessary for a credit check and obtained in the course of payment processing may be transmitted by Stripe to selected credit agencies, which Stripe discloses to Users upon request. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, these have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Stripe uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding on the authorization to use the selected payment method.
You can object to this processing of your data at any time by sending a message to Stripe or the contracted credit agencies. However, Stripe may still be entitled to process your personal data if this is necessary to process payments in accordance with the contract.
Zapier
We use Zapier, a service of Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA, for the integration of various databases and tools within the scope of our legitimate interest in a technically flawless online offer and its economically efficient design and optimization pursuant to Art.6 para. 1 lit.f GDPR. In the process, your customer data (but not your payment data) is transmitted to Zapier.
Facebook Pixel
For online marketing purposes, we use Facebook Pixel. Provider: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
The Facebook Pixel allows us to play interest-based advertising based on the use of our website via Facebook. For this purpose, a cookie is set on the user's end device, via which the usage can be assigned to an identification number. In addition, further advertising-relevant data of the user such as browser information, device information, the pages visited, the time of the visit and referring URLs are processed. We only receive summary results from Facebook, which we can use to understand how successful our advertising measures are. We use Facebook Pixel without advanced matching.
Users can object to the collection and use of information for interest-based advertising by Facebook on the following pages: http://www.aboutads.info/choices and http://www.youronlinechoices.eu.
Insofar as we obtain the consent of the user, the processing of data is based on the legal basis of Art. 6 (1) . 1 a) GDPR. Otherwise, it is based on Art. 6 (1) (1) (f) GDPR. Our legitimate interest is to be able to show users advertising that is relevant to them.
When using Facebook Pixel, we and Facebook are joint controllers within the meaning of Art. 26 GDPR. We have therefore entered into an agreement with Facebook that specifies who fulfills which obligations under the GDPR. According to this, we are responsible for providing information on the joint processing of personal data in accordance with Art. 13 and 14 GDPR. It is agreed between us and Facebook that Facebook is responsible for enabling the rights under Articles 15 to 20 of the GDPR with respect to personal data stored by Facebook after joint processing.
The joint responsibility agreement can be accessed here: https://www.facebook.com/legal/controller_addendum
Information on how Facebook processes personal data, the information pursuant to Art. 13 GDPR, including the legal basis on which Facebook relies, as well as the user's options for exercising his or her Facebook rights, can be found in Facebook's privacy policy.
Privacy policy of Facebook Pixel without matching
Amazon Cloudfront
We use the content delivery network (CDN) Amazon CloudFront. Provider: Amazon Web Services Inc, P.O.. Box 81226, Seattle, WA 98108-1226.
Content is loaded from servers of the CDN. In order for a connection to be established, it is technically necessary to transfer the user's IP address.
The legal basis for the processing is Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest is to improve the speed and availability of our website.
Privacy policy of Amazon CloudFront
Amazon Web Services
We use the web service AWS. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter referred to as AWS). When you visit our website, your personal data is processed on the servers of AWS. In the process, personal data may also be transmitted to the parent company of AWS in the USA. The data transfer to the USA is based on the EU standard contractual clauses.
The use of AWS is based on Art. 6 (1) lit. f DSGVO. We have a legitimate interest in the most reliable presentation of our website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
Details can be found here
Google Analytics
To analyze the use of our website, we use Google Analytics. Provider: Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
In order to track user activity on the website, a cookie is set on the end device. We use Google Analytics with the anonymize IP extension. The user's IP address is automatically shortened before it is transmitted to servers in the USA. Among other things, the approximate geographic location, terminal device, screen resolution, browser and pages visited, including the length of stay, are evaluated.
Insofar as we obtain the consent of the user, the processing of data is based on the legal basis of Art. 6 (1) . 1 a) GDPR. Otherwise, it is based on Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest is the optimization of our website, the improvement of our offers and online marketing.The data collected by Google Analytics is automatically deleted after 14 months.
Privacy policy of Google Analytics
Google Hosted Libraries
To improve the speed of our website, we use Google Hosted Libraries. Provider: Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
In order to establish a connection with the Google server, it is technically necessary to transfer the user's IP address to Google. Google Hosted Libraries only sets cookies that are necessary to ensure security and to prevent misuse.
The legal basis of the processing is Art. 6 para. 1 . 1 lit. f) GDPR. Legitimate interest on our part is to shorten the loading times of our website.
Privacy policy of Google Hosted Libraries
Cloudflare
We use the content delivery network (CDN) Cloudflare CDN. Provider: Cloudflare Inc, 101 Townsend Street, San Francisco, California 94107.
Content is loaded from servers of the CDN. In order for a connection to be established, it is technically necessary to transfer the user's IP address.
The legal basis for the processing is Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest is to improve the speed and availability of our website.
Facebook Social Plugins
We integrate content and buttons of the social network Facebook via a plugin on our website. Provider: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
In order to load content from Facebook, it is technically necessary to transfer the user's IP address to the company. If the user is logged into Facebook, the visit to a page can be assigned to the account.
If we obtain the user's consent, the processing of data is based on the legal basis of Art. 6 (1) . 1 a) GDPR. Otherwise, it is based on Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest for the integration of Facebook content and buttons is the user-friendly design of our website.
Privacy policy of Facebook social plugins
We integrate content and buttons of the social network Instagram via a plugin on our website. Provider: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
In order to load content from Instagram, it is technically necessary to transfer the user's IP address to the company. If the user is logged into Instagram, the visit to a page can be assigned to the account.
Insofar as we obtain the consent of the user, the processing of data is based on the legal basis of Art. 6 (1) . 1 a) GDPR. Otherwise, it is based on Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest for the integration of Instagram content and buttons is the user-friendly design of our website.
We integrate content and buttons of the social network Pinterest via a plugin on our website. Provider: Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
In order to load content from Pinterest, it is technically necessary to transmit the user's IP address to the company. If the user is logged into Pinterest, the visit to a page can be assigned to the account.
If we obtain the consent of the user, the processing of data is based on the legal basis of Art. 6 (1) . 1 a) GDPR. Otherwise, it is based on Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest for the integration of Pinterest content and buttons is the user-friendly design of our website.
We integrate messages and buttons of the short message service Twitter via a plugin on our website. Provider: Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland.
In order to load content from Twitter, it is technically necessary to transfer the user's IP address to the company. If the user is logged in to Twitter, the visit to a page can be assigned to the account.
If we obtain the user's consent, the processing of data is based on the legal basis of Art. 6 (1) . 1 a) GDPR. Otherwise, it is based on Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest for the integration of Twitter content and buttons is the user-friendly design of our website.
We integrate content and buttons of the social network LinkedIn via a plugin on our website. Provider: LinkedIn Corp, 1000 W. Maude Ave, Sunnyvale, California 94085, USA.
In order to load content from LinkedIn, it is technically necessary to transfer the user's IP address to the company. If the user is logged in to LinkedIn, the visit to a page can be assigned to the account.
If we obtain the user's consent, the processing of data is based on the legal basis of Art. 6 (1) . 1 a) GDPR. Otherwise, it is based on Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest for the integration of LinkedIn content and buttons is the user-friendly design of our website.
YouTube
We embed videos from YouTube. Provider: Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. We use the extended data protection mode so that YouTube does not track user behavior unless the user watches the video. In order to provide videos, it is technically necessary to transfer the user's IP address to YouTube.
The use of YouTube is based on the legal basis of Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest is to improve the user experience of our website and to display content that is of interest to our users.
You can object to personalized advertising by Google at any time by exercising the following opt-out.
Vimeo
We embed videos from Vimeo on our website. This service is provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011. In order to be able to display videos, it is technically necessary to transfer the user's IP address to Vimeo. In addition, Vimeo processes technical information about the end device used, the website visited, search queries or activities of the user. Vimeo uses the information to display personalized advertising.
Insofar as we obtain the consent of the user, the processing of data is based on the legal basis of Art. 6 (1) . 1 a) GDPR. Otherwise, it is based on Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest is to be able to provide videos on our website.
Users can object to the use of data by Vimeo for personalized advertising at any time by opting out below.
Intercom
We use the messenger service Intercom to communicate with our users. Provider: Intercom Inc, 55 2nd Street, 4th Fl., San Francisco, CA 94105, USA.
Intercom is a live chat through which we can contact our users on our website and vice versa. In doing so, we process the user's details, e.g. in order to be able to answer support requests. To improve our service, we evaluate how often messages were displayed and how users interacted with us. For this purpose, Intercom uses technical information such as IP address, browser information, operating system, pages viewed and page elements clicked on, and location data. In addition, a cookie with an individual user ID is set. However, an analysis of user behavior across multiple websites does not take place.
Insofar as we obtain the consent of the user, the processing is carried out on the legal basis of Art. 6 (1) . 1 a) GDPR. If the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, the legal basis is Art. 6 para. 1 . 1 lit. b) GDPR. Otherwise, it is based on Art. 6 (1) (1) (f) GDPR. Our legitimate interest is to deliver a high quality of service and to make our content user-friendly.
Calendly
We use Calendly to schedule appointments. Provider: Calendly LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA.
The user can make an online booking via Calendly by providing personal data (e.g. name, email address, phone number) and selecting an available appointment. In addition, it is possible to specify a request. After a successful booking, the user receives a confirmation and, if applicable, a reminder of an upcoming appointment by e-mail to the address provided.
The legal basis of the processing is Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest is the user-friendly design of our website.
Google Docs
We use Google Docs to publish documents and form queries. Provider: Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
In order to provide the functions, it is technically necessary to transfer the user's IP address to Google. Information that you provide in a form is processed by us.
The legal basis for the processing is Art. 6 para. 1 . 1 lit. f) DSGVO. Legitimate interest on our part is to improve the user experience of our website.
Google Fonts
On our website we use Google Fonts. Provider: Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Fonts are loaded from the Google server. In order to establish a connection to the server, it is technically necessary to transfer the user's IP address.
The legal basis of the processing is Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest is the reduction of loading times and a uniform presentation on different end devices.
Privacy policy of Google Fonts
Google Tag Manager
We use Google Tag Manager to manage our website tags. Provider: Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The Tag Manager is a cookie-less domain that triggers tags from various providers, which in turn collect data. Google Tag Manager does not access this data. In order to trigger tags, it is technically necessary to transmit the user's IP address to Google.
The Google Tag Manager is used on the legal basis of Art. 6 (1) . 1 lit. f) GDPR. Our legitimate interest is the simplified management of third-party services used by us.
Privacy policy of Google Tag Manager
Google Maps
To be able to display geographical maps, we use Google Maps. Provider: Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. In doing so, it is technically necessary to transfer the user's IP address to Google. In addition, the company sets various cookies to identify the user and play out personalized advertising.
Insofar as we obtain the consent of the user, the processing of data is based on the legal basis of Art. 6 (1) . 1 a) GDPR. Otherwise, it is based on Art. 6 para. 1 . 1 lit. f) GDPR. Our legitimate interest is the user-friendly design of our website.
We have concluded a joint responsibility agreement with Google.
Privacy policy of Google Maps
Hotjar
We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf.
For further details, please see the ‘about Hotjar’ section of Hotjar’s support site.
If personal data of the user is processed, he is a data subject within the meaning of the GDPR. Data subjects are entitled to the following rights:
Right of access: the data subject has the right to request confirmation as to whether personal data concerning him or her are being processed. If personal data are processed, the data subject shall have the right to obtain, free of charge, information and a copy of the personal data that are the subject of the processing.
Right to rectification: The data subject has the right to request that inaccurate or incomplete personal data be corrected without delay.
Right to erasure: the data subject has the right to request, in accordance with the law, the erasure without delay of personal data concerning him or her.
Right to restriction of processing: the data subject has the right to request restriction of the processing of personal data concerning him or her in accordance with the law.
Right to data portability: the data subject has the right to obtain the personal data concerning him or her in a structured, commonly used and machine-readable format or to request its transfer to another controller.
Right to object: The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(a)(e) or (f) of the GDPR; this shall also apply to any profiling based on those provisions. If personal data are processed for the purposes of direct marketing, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing; this also applies to profiling where it is related to such direct marketing.
Right of withdrawal: the data subject has the right to withdraw his or her given consent at any time.
Right to lodge a complaint: The data subject has the right to lodge a complaint with a supervisory authority.
Status of the data protection declaration: 24 May 2022