(1) The following information explains how we collect personal data when you use our website. Personal data refers to any information that can be used to identify you personally, such as your name, address, email address, and user behavior.

(2) The legal basis for this statement is the General Data Protection Regulation (GDPR).

(3) The controller pursuant to Article 4(7) of the GDPR is:

ChildFund Deutschland e.V.

Alexander Busl

Max-Eyth-Straße 21

72622 Nürtingen

The Data Protection Officer is:

Solidaris Law Firm, LLC

Attorney Alexander Gottwald

Nevinghoff 30

48147 Münster

(4) If we use contracted service providers for specific functions of our service, we will provide you with detailed information below regarding the respective processes. We will also specify the established criteria for the retention period. If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the implications of this in the service description.

When you use the website for informational purposes—that is, when you simply view our website without registering or otherwise providing us with information—we process the personal data that your browser transmits to our server. This processing is necessary to display our website to you and to ensure its stability and security. This legitimate interest serves as the basis for data processing pursuant to Article 6(1)(f) of the GDPR.

The data in question is as follows:

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collected for the provision of the website, this occurs when the respective session ends. In the case of data stored in log files, this occurs after the server’s 14-day retention period has expired. Further storage is possible. In this case, the users’ IP addresses are deleted or anonymized so that the calling client can no longer be identified.

Below, we explain the mechanisms we use to recognize you as a user.

We use cookies: These are small text files that are stored on your hard drive and associated with the browser you are using, and through which certain information is transmitted to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the website more user-friendly and effective overall.

With regard to cookies, a distinction must be made between necessary and non-necessary cookies. Technically necessary cookies are those that are required for the operation of a website and its functions. Technically non-necessary cookies are those that are not strictly necessary for the operation of a website and the provision of specific site functions.

(1) Technically Necessary Tracking Tools

We use the technically necessary tracking tools listed in our cookie banner under the “Necessary” tab, which are absolutely required pursuant to Section 25(2)(2) of the Telecommunications and Digital Services Data Protection Act (TDDDG) in conjunction with Art. 6(1)(f) of the GDPR, as these are necessary for the operation of our website in accordance with their stated purpose.

(2) Technically non-essential tracking tools

We use technically non-essential tracking tools based on Section 25(1) TDDDG, which can be viewed in our cookie banner under the “Statistics” and “Marketing” tabs.

The legal basis for the processing of data in connection with technically non-essential tracking tools and for the transfer of your data to third countries is your consent pursuant to Article 6(1)(f) of the GDPR.

For an explanation of these tracking tools, please refer to the following information regarding the third-party providers we use.

If you do not wish to have cookies processed, you can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all features of this website.

(1) Our website features a contact form that can be used to contact us electronically. If you use this option, the following additional data will be transmitted to us and stored in addition to the data entered in the form:

• The user’s IP address
• Date and time of registration

(2) Your consent is obtained for the processing of the data as part of the submission process, and reference is made to this privacy policy.

(3) Alternatively, you may contact us via the provided email address. In this case, the personal data you transmit via email will be stored. In this context, the data will only be disclosed to third parties if the correspondence requires it. The data will be used exclusively for the purpose of handling the correspondence. 

(4) The processing of personal data from the email/contact form serves solely to handle the contact request. The legal basis for processing the data when sending an email or a message via the contact form is the user’s consent (Art. 6(1)(a) GDPR). The legal basis for processing the additional data transmitted when sending a message via the contact form is Art. 6(1)(f) GDPR. The additional personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our IT systems. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.

(5) The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data from the contact form input field and data sent via email, this is the case when the respective conversation with the user has ended. The conversation is concluded when it can be inferred from the circumstances that the matter in question has been definitively resolved. The personal data additionally collected during the submission process will be deleted no later than seven days after submission.

(1) On our website, we offer users the opportunity to make online donations and sign up for a sponsorship program. 

(2) If a user takes advantage of this option, the data entered in the corresponding form is transmitted to us and stored. The form is provided by Bank für Sozialwirtschaft AG (“BFS”). The data entered is therefore immediately transmitted via an encrypted SSL connection to BFS and the technical service providers used by BFS to provide the form for the purpose of processing the donation. When paying via PayPal (Europe), S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, the bank details you have stored with PayPal are used by PayPal for payment. We do not have access to this data. The data is not shared with any other third parties. 

(3) The following data is collected via the form: Full name (last name, first name) with title (optional title and company name); Address (street, house number, city, postal code, country); Email address; Date of birth; Payment details (IBAN); Donation details (donation recipient, amount, donation purpose, donation receipt requested)

(4) A donation receipt is automatically generated for donations of €25 or more and sent at the beginning of the following year. For this purpose, we process the data to issue and send the corresponding donation receipt.

(5) The collected data is necessary for the processing and execution of the donation order and for the administration of the sponsorship. The user’s email address is required to confirm receipt of the donation order. The data is not used for any other purposes. The legal basis for the processing of the data is Art. 6(1)(b) of the GDPR.

(6) The user’s IP address is also stored at the time the form is submitted. We use the IP address to prevent misuse of the donation form. The IP address is used for the purpose of fraud prevention and to prevent unauthorized transactions that could harm third parties. The legal basis for processing the IP address is Art. 6(1)(f) of the GDPR.

(7) The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of bank details, this occurs immediately after the donation amount has been debited. The address data, along with any other data entered, is stored in accordance with tax-related retention obligations after a donation receipt has been generated and sent, if requested, but is blocked for any other use. The IP address additionally collected during the submission process is deleted no later than seven days after collection.

(8) The user has the option to object to the processing of the data at any time. However, please note that if an objection is raised, the donation order can no longer be executed as requested.

(9) The terms and conditions and privacy policies of the respective providers apply to the use of the above-mentioned payment services. We will draw your attention to this separately before you use the respective service.

• You can access the BFS privacy policy via the following link: https://www.sozialbank.de/datenschutz.html.
• You can access PayPal’s privacy policy via the following link: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

(1) If you wish to donate relief supplies through our donation shop, you must provide your personal information in order to complete the transaction; we require this information to process your donation of relief supplies. Mandatory information required for the processing of the contracts is marked separately; additional information is voluntary. We process the data you provide to process your donation of relief supplies. For this purpose, we may pass on your payment details to our bank. The legal basis for this is Art. 6(1)(b) of the GDPR.

(2) Depending on which payment service provider you select during the ordering process, we will forward the payment data collected for this purpose to the financial institution responsible for processing the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account with them; in this case, you must log in to the payment service provider using your login credentials during the ordering process. In this regard, the privacy policy of the respective payment service provider applies.

(3) We may also process the data you provide to inform you about other products in our portfolio or to send you emails containing technical information. The legal basis for this, within the meaning of Art. 6(1)(f) of the GDPR, is our legitimate interest in the further development of our events and in informing interested parties about our offerings. If you do not wish to receive such information, you may revoke your consent by clicking the link provided in every newsletter email or by sending an email to info(at)childfund(dot)de.

(4) We are required by commercial and tax law to store your address, payment, and order data for a period of ten years. However, after two years, we restrict the processing of your data, meaning it will only be used to comply with legal obligations.

(5) To prevent unauthorized access by third parties to your personal data, particularly financial data, the ordering process is encrypted using SSL technology. 

(1) With your consent, you can subscribe to our newsletter, through which we will inform you about our current special offers. The goods and services advertised are listed in the consent form.

(2) Our newsletters are sent via Mailchimp through the service provider Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (hereinafter referred to as “Mailchimp”). The data provided when subscribing to the newsletter (e.g., email address) is stored on Mailchimp’s servers. Mailchimp enables us to analyze the newsletter campaigns. For example, we can see whether and when a newsletter message was opened and which links were clicked, if any. With the help of so-called conversion tracking, it is also possible to analyze whether a predefined action took place after clicking a link (e.g., visiting a specific page, signing up). These analyses are conducted pseudonymously and serve to optimize our newsletter offering. If you do not wish for Mailchimp to perform this analysis, you will not receive the newsletter and must unsubscribe. You will find a link to do so at the end of every newsletter message. Data processing is based on your consent in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect. Further information can be found in Mailchimp’s privacy policy:
https://www.intuit.com/privacy/statement/

(3) We use the so-called double opt-in procedure for subscribing to our newsletter. This means that after you subscribe, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your subscription within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the times of your registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, to investigate any potential misuse of your personal data.

(4) The only mandatory information required to receive the newsletter is your email address. Providing additional, separately marked data is voluntary and is used to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis for this form of data processing is your consent and is Art. 6(1)(a) of the GDPR.

(5) You may revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking the link provided in every newsletter email or by sending a message to the contact information listed in the legal notice.

(6) The information will be stored for as long as you remain subscribed to the newsletter. After you unsubscribe, we will store the data for purely statistical and anonymous purposes. 

Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there. However, if IP anonymization is enabled on this website, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator.

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

(3) You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the “_anonymizeIp()” extension. This shortens IP addresses during processing, thereby preventing any personal identification. If the data collected about you is personally identifiable, this is immediately excluded, and the personal data is promptly deleted.

(5) We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offerings and make them more interesting for you as a user. In the exceptional cases where personal data is transferred to the U.S., Google has submitted to the EU-U.S. Data Privacy Framework, www.dataprivacyframework.gov. The legal basis for the use of Google Analytics is Art. 6(1)(a) of the GDPR.

(6) Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Use: www.google.com/analytics/terms/de.html, Privacy Overview: www.google.com/intl/de/analytics/learn/privacy.html, and the Privacy Policy: http://www.google.de/intl/de/policies/privacy.

(7) This website also uses Google Analytics for cross-device analysis of visitor traffic, which is carried out via a user ID. 

(8) Demographic Features in Google Analytics: This website uses the “demographic features” function of Google Analytics. This allows reports to be generated that contain information about the age, gender, and interests of site visitors. This data is derived from interest-based advertising by Google as well as from visitor data provided by third parties. This data cannot be attributed to any specific individual. You can disable this feature at any time via the ad settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to Data Collection.”

Google Tag Manager

(1) We use Google Tag Manager on this website. Google Tag Manager simplifies the integration and use of services for analyzing our website, particularly the setting, configuration, and management of (technically non-essential) cookies. 

(2) Furthermore, Google Tag Manager is responsible for ensuring that the respective technically non-essential cookie processes personal data at the appropriate point; it thus recognizes when personal data is collected by technically non-essential cookies (e.g., from which website the user arrived at this website) and forwards the personal data to the respective tracking tool (e.g., Google Analytics).

(3) In this context, Google Tag Manager generally does not process any personal data; however, it cannot be ruled out that Google Tag Manager may process personal data to a limited extent (e.g., your IP address). Due to the forwarding process, personal data is either not stored at all or only for as long as necessary.

(4) The legal basis for the processing of personal data by Google Tag Manager is therefore governed by the legal basis for the cookie mentioned above (§ 4).

Google reCAPTCHA

(1) On our website, we use Google reCAPTCHA in certain cases. Google reCAPTCHA includes an automated test designed to distinguish users from machines (bots). The security check is intended to prevent these bots from misusing, for example, the comment function or input fields on the website.

(2) As part of the security check performed by Google reCAPTCHA, personal data (IP address and, if applicable, other data required by Google for the reCAPTCHA service) is transmitted to Google.

(3) The legal basis for the use of Google reCAPTCHA is our legitimate interest pursuant to Art. 6(1)(f) of the GDPR in preventing the misuse of certain functions on our website.

(4) For more information on data processing by Google reCAPTCHA, please visit http://www.google.de/intl/de/privacy or https://www.google.com/intl/de/policies/privacy.

Google AdWords and Google Conversion Tracking

(1) This website uses Google AdWords. AdWords is an online advertising program provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

(2) As part of Google AdWords, we use what is known as conversion tracking. When you click on an ad placed by Google, a cookie for conversion tracking is set. Cookies are small text files that the internet browser stores on the user’s computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

(3) Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted into conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily disabling the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

(4) The storage of “conversion cookies” is based on Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

(5) For more information about Google AdWords and Google Conversion Tracking, please refer to Google’s Privacy Policy: www.google.de/policies/privacy/. You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to block the acceptance of cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

Hotjar

(1) This website uses features of the web analytics service Hotjar. The provider is Hotjar Inc., located at Level 2, St. Julian’s Business Centre, 3, Elia Zammit Street, St. Julian’s STJ 1000, Malta.

(2) We use Hotjar to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offering and make it more interesting for you as a user. On behalf of the operator of this website, Hotjar will use this information to evaluate the use of the website, compile reports on website activity, and provide other services related to website and internet usage. The information generated by the cookie regarding your use of this website is generally transmitted to a Hotjar server and stored there.

(3) We use Hotjar’s anonymization feature on this website. This shortens your IP address and ensures that the analytics data is not personally identifiable. We do not combine this data with other personal data.

(4) We use this tool only with your consent, which you can provide via the Consent Manager; the legal basis is Art. 6(1)(a) of the GDPR. You may also opt out of the analytics function by simply enabling the standard “Do Not Track” feature in your browser. In this case, we will not process your personal data in the manner described here. For instructions on how to enable the “Do Not Track” function, please visit this link: www.hotjar.com/legal/compliance/opt-out/.

Facebook Pixel

(1) Our website uses the Facebook Visitor Action Pixel from Facebook, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) for conversion tracking.

(2) This allows the behavior of website visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook advertisement. This enables the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

(3) The collected data is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, allowing a connection to the respective user profile and enabling Facebook to use the data for its own advertising purposes in accordance with Facebook’s Data Use Policy. This allows Facebook to display ads on Facebook pages as well as outside of Facebook. As the site operator, we have no influence over this use of the data.

(4) You can find further information on the protection of your privacy in Facebook’s Privacy Policy: www.facebook.com/about/privacy/. You can also disable the “Custom Audiences” remarketing feature in the Ad Settings section at www.facebook.com/ads/preferences/. To do this, you must be logged into Facebook. If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: www.youronlinechoices.com/de/praferenzmanagement/.

YouTube Videos

(1) We have integrated YouTube videos into our online offering that are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in “enhanced privacy mode” and via a two-click solution, so that no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos is the data listed below transmitted to Google. We have no influence over this data transmission, which may take place to the United States. The United States does not have a level of data protection comparable to that of the EU.

(2) By consenting to play the videos, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data listed in § 2 of this statement is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly assigned to your account. If you do not wish for this data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or to tailor its website to your needs. Such analysis is carried out in particular (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, in which case you must contact YouTube to exercise this right.

(3) Your consent constitutes your agreement within the meaning of Art. 6(1)(a) of the GDPR to the transfer of data to Google.

(4) For further information on the purpose and scope of data collection and its processing by YouTube, please refer to YouTube’s Privacy Policy. There you will also find further information regarding your rights and settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy.

Use of Social Media Plugins

(1) We currently use the following social media plugins: Facebook, Instagram, LinkedIn, and YouTube. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially transferred to the plugin providers. You can identify the plugin provider by the label on the box indicating its initial letter or logo. We give you the option to communicate directly with the plugin provider via the button. Only when you click on the marked field and thereby activate it does the plug-in provider receive the information that you have accessed the corresponding webpage of our online offering. In addition, the data listed under 0 of this statement is transmitted. In the case of Facebook and Instagram, according to the respective providers in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, your personal data is therefore transmitted to the respective plug-in provider and stored there (in the case of U.S. providers, in the United States). Since the plug-in provider collects data primarily via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box.

(2) We have no influence over the data collected or the data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, or the retention periods. We also have no information regarding the deletion of the collected data by the plug-in provider.

(3) The plug-in provider stores the data collected about you as user profiles and uses this data for advertising, market research, and/or to tailor its website to user needs. Such analysis is carried out in particular (including for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, in which case you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with social networks and other users, so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6(1)(f) of the GDPR

(4) Data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect about you is directly assigned to your existing account with the plug-in provider. If you click the activated button and, for example, share the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid any association with your profile at the plug-in provider.

(5) For further information on the purpose and scope of data collection and its processing by the plugin provider, please refer to the privacy policies of these providers listed below. There you will also find further information regarding your rights in this regard and settings options for protecting your privacy.

Addresses of the respective plug-in providers and URLs to their privacy policies:

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; further information on data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other and www.facebook.com/about/privacy/your-info. Facebook has submitted to the EU-U.S. Data Privacy Framework, https://www.privacyshield.gov/EU-US-Framework.

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has complied with the EU-U.S. Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Instagram: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour
, Dublin 2, Ireland; https://help.instagram.com/519522125107875?helpref=page_content

YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; https://www.google.de/intl/de/policies/privacy

You have the following rights with respect to your personal data:

• Right of access: You may request information at any time regarding whether and what personal data we have stored about you. We will provide this information free of charge.
  
  The right of access does not apply, or applies only to a limited extent, if and to the extent that the disclosure of such information would reveal confidential information, such as information subject to professional secrecy. 

   

• Right to rectification: If your stored personal data is inaccurate or incomplete, you have the right to request the rectification of this data at any time.

   

• Right to erasure: You have the right to request the erasure of your personal data if and to the extent that the data is no longer necessary for the purposes for which it was collected or, if the processing is based on your consent, you have withdrawn your consent. In this case, we must cease processing your personal data and remove it from our IT systems and databases.

   

• There is no right to erasure if

  • the data may not be erased due to a legal obligation or must be processed due to a legal obligation;
  • the data processing is necessary for the establishment, exercise, or defense of legal claims.

   

• Right to restriction of processing: You have the right to request the restriction of the processing of your personal data.

   

• Right to data portability: You have the right to receive the data you have provided in a structured, commonly used, and machine-readable format, as well as the right to have this data transmitted to another controller. This right applies only if
  • you have provided the data to us on the basis of consent or pursuant to a contract concluded with you;

  • the processing is carried out using automated means. 

     

• Right to Withdraw Consent: If we process your data based on your consent, you have the right to withdraw this consent at any time with future effect. However, the processing carried out up to that point remains lawful. 

   

• Right to object to processing: If the processing of your data is based on a balancing of interests, you may object to the processing at any time.

You may exercise all of the data subject rights described above by submitting your specific request via email or mail to the Data Protection Officer listed above.

• Right to lodge a complaint with a data protection supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority at any time if you believe that the processing of your personal data violates data protection law. The data protection supervisory authority responsible for us is:
 

Data Protection Authority of Baden-Württemberg

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

Königsstraße 10 a

70173 Stuttgart