Cookie Policy

Aukera Real Estate AG attaches particular importance to data protection. 

This privacy policy clarifies the type, scope and purpose of the processing of personal data within our online offer and the websites, functions and contents connected with it (hereinafter jointly referred to as “online offer” or “website”). This privacy policy applies independently from the domains, systems, platforms, and devices (e.g. desktop or mobile) on which the online offer is executed.

 

 1. Data controller

The data controller within the context of the GDPR, other data protection laws applicable in the member states of the European Union and other regulations of a data protection nature, is:

Aukera Real Estate AG

Goethestraße 89
45130 Essen
Germany

T +49 2018908340
F +49 2018908341

E-Mail: info@aukera.ag
Website: www.aukera.ag

 

2. Definitions

Our privacy policy is based on the terms used by the European legislator for directives and regulations when the General Data Protection Regulation (GDPR) was enacted. Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners.

Therefore, we would like to explain the terms used in advance. The terms used, such as “personal data” or their “processing”, are defined in Art. 4 of the General Data Protection Regulation (GDPR).

In this privacy policy, we use the following terms:

Personal data

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). An identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of such natural person.

Data subject

Data subject means any identified or identifiable natural person whose personal data is processed by the controller.

Processing

Processing means any operation or set of operations performed upon personal data, whether or not by automatic means, such as the collection, recording, organization, sorting, storage, adaptation or alteration, reading, retrieval, use, disclosure by transmission, dissemination or other distribution, comparison or combination, restriction, erasure, deletion or destruction of such data.

Restriction of processing

Restriction of processing means the marking of stored personal data with the objective of limiting their future processing.

Einschränkung der Verarbeitung ist die Markierung gespeicherter personenbezogener Daten mit dem Ziel, ihre künftige Verarbeitung einzuschränken.

Profiling

Profiling means any automated processing of personal data by using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person’s work, economic situation, health, personal preferences, interests, reliability, conduct, location or change of location.

Pseudonymization

Pseudonymization means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without additional information, provided that this additional information is stored separately, and that it is subject to technical and organizational measures which ensure that the personal data is not attributed to an identified or identifiable natural person.

Controller or data controller

Controller or data controller means the natural or legal person, public authority, agency, or any other body which solely or jointly with others determines the purposes and means of the processing of personal data. If the purposes and means of such processing are determined by the law of the European Union or by the law of the member states, the controller or the respective criteria for his/her appointment can be determined according to the law of the European Union or the law of the member states.

Data processor

A data processor is a natural or legal person, public authority, agency, or other body processing personal data on behalf of the controller.

Recipient

The recipient is a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, whether or not it is a third party. Authorities which may receive personal data in the context of a specific investigation mandate according to the law of the European Union or the law of the member states shall, however, not be considered as recipients.

Third party

Third party means any natural or legal person, public authority, agency or body other than the data subject, the data controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the data processor.

Consent

Consent means any freely given specific and informed expression of the data subject’s will in an informed and unequivocal manner, in the form of a declaration or other unequivocal affirmative act by which the data subject signifies his or her consent to the processing of his or her personal data.

Statistical measurement of reach

The statistical measurement of reach includes procedures that primarily serve the purpose of analyzing the use of the website. This includes, for example, information such as the length of the visit to the website, terminal device used, language settings, origin, region, location, or user actions. This can be performed in particular through technologies such as JavaScript, cookies, and tracking pixels.

Tracking

Tracking includes procedures which are mainly about the evaluation of the visitors. This includes in particular any procedures that enable the identification of the user, as well as an analysis of the behavior over a longer period, to assign personal characteristics or interests to the user (profiling). With the help of such user profiles, advertising measures can be targeted and personalized to a specific user as much as possible.Das Tracking umfasst Verfahren, bei welchen in erster Linie die Auswertung der Besucher im Vordergrund stehen. Hierunter fallen insbesondere all jene Verfahren, die eine Identifikation des Nutzers sowie eine Analyse des Verhaltens über einen längeren Zeitraum ermöglichen, um dem Nutzer ggfs. persönliche Merkmale oder Interessen zuzuordnen (Profiling). Anhand solcher ggfs. gebildeter Nutzerprofile können hierbei Werbemaßnahmen gezielter und möglichst personalisiert an einen bestimmten Nutzer ausgespielt werden.

3. General information about data processing

Scope of the processing of personal data

In general, we only collect and use personal data of our users to the extent necessary to provide a functional website and to provide our contents and services. We only collect and use personal data of our users if they have given their consent. Exceptions are made in such cases where prior consent cannot be obtained for factual reasons, and processing of the data is permitted by law. 

Legal basis for the processing of personal data

Insofar as the data subject’s consent for the processing of personal data needs to be obtained, Art. 6 para 1 sentence 1 letter a of the General Data Protection Regulation of the European Union (GDPR) serves as the legal basis.

For the processing of personal data necessary for the performance of a contract of which the data subject is a party, Art. 6 para 1 sentence 1 letter b of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

If the processing of personal data is necessary to fulfill legal obligations our company is subject to, Art. 6 para 1 sentence 1 letter c of the GDPR serves as the legal basis.

If vital interests of the data subject or other natural persons require the processing of personal data, Art. 6 para 1 sentence 1 letter d of the GDPR serves as the legal basis.

If the processing is necessary to attend to a legitimate interest of our company or of a third party, and if the interests, fundamental rights, and freedoms of the data subject do not outweigh this interest, Art. 6 para 1 sentence 1 letter f of the GDPR serves as the legal basis for the processing. 

Data erasure and duration of storage

The data subject’s personal data will be deleted or blocked as soon as the purpose of the storage is no longer given. The data may also be stored if European or national legislators have provided for this in EU regulations, laws, or other regulations to which the data controller is subject.

The data will also be blocked or deleted upon the expiry of a storage period prescribed by the above standards, unless such data must be continued to be stored for the purpose of concluding or fulfilling a contract.

 

4. Technical and organizational measures

In order to ensure that personal data cannot be read, copied, changed or removed without authorization during electronic transmission, while being transported or stored on data carriers, we use a state-of-the-art encryption procedure in accordance with Art. 9 of the GDPR.

For security reasons and for the protection of confidential information, such as the requests you send to our system, this website uses TLS encryption (Transport Layer Security). Data that you transmit to our system cannot be read by third parties without further action.

You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

5. Provision of the website and creation of log files

Whenever our website is opened, our system automatically collects data and information from the system of the computer opening it. 

The following data is collected:

  • information about the browser type and version used
  • the operating system of the user
  • the Internet service provider of the user
  • the user’s IP address
  • the date and time of access
  • websites from which the user’s system accesses our website 
  • websites the user’s system accesses via our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. The data is also stored in the log files of our system. The user’s IP addresses or other data with which the data can be attributed to a user are not affected by this. This data is not stored together with other personal data of the user.

Legal basis for the data processing 

The legal basis for the temporary storage of data and log files is Art. 6 para 1 sentence 1 letter f of the GDPR. The legal basis for the temporary storage of data is Art. 6 para 1 sentence 1 letter f of the GDPR.

Purpose of the data processing

It is necessary that the system temporarily stores the IP address so that the website can be opened on the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. 

The storage in log files serves the purpose of ensuring the functionality of the website. The data also helps us to optimize the website and to ensure the security of our IT systems. The data is not evaluated for marketing purposes in this context.

These purposes also include our legitimate interest in data processing in accordance with Art. 6 Para 1 S. 1 letter f of the GDPR.

Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is over. 

In the case of data storage in log files, this is the case after seven days at the latest. The data may be stored beyond these periods. If this is the case, the IP addresses of the users are deleted or altered so that they can no longer be attributed to the client who opened the website.

Possibility of objection and removal

The collection of data for the provision of the website and the storage of this data in log files is mandatory for the operation of the website. Therefore, the user has no possibility of objecting. 

6. Use of cookies

On this website, we use so-called cookies based on our legitimate interests. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If a user opens a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the user returns to the website. 

Technically necessary cookies

We use cookies to make our website more user-friendly. Some elements of our website require that the browser with which the website is opened be identifiable even after the user has switched to another website.

The following data is stored and transmitted in the cookies:

  • Session cookies, which store certain settings of the user
  • Language settings
  • Storing of search terms
  • Log-in data
  • Opt-out cookies, with the information on whether the user has actively consented to the setting of technically necessary and unnecessary cookies.
  • Test cookies, with the information on whether the user allows the setting of cookies in his or her browser
  • Cookies which are used to provide third-party content (maps, fonts) and for user analysis.

 

When accessing our website, an info banner informs the users about the use of technically necessary cookies and refers them to this data protection declaration. In this context, there is also a note on how the storage of cookies can be prevented in the browser settings.

Technically unnecessary cookies

We also use cookies on our website which allow us to analyze the surfing behavior of the users.

For this purpose, the following categories of cookies are used:

  • Cookies from tracking and analysis tools
  • Online map services such as Google Maps and OpenStreetMaps

 

The following data can thus be transmitted: 

  • Entered search terms
  • Frequency of page views
  • Use of website functions

When opening our website, the user is informed about the use of cookies for analysis purposes and needs to give his or her consent to the processing of the personal data used in this context. In the same context, reference is made to this privacy policy.

The user data thus collected is pseudonymized by taking technical precautions. It is therefore no longer to assign the data to the accessing user. The data is not stored together with other personal data of the users.

If the user has given his/her consent to the processing of personal data using cookies for analysis and/or tracking purposes, the legal basis for this is Art. 6 para 1 sentence 1 letter a of the GDPR. 

If the user has given his/her consent to the processing of personal data using technically necessary cookies, the legal basis for this is Art. 6 para 1 sentence 1 letter a of the GDPR. If the user has not given his/her consent, the legal basis is Art. 6 para 1 sentence 1 letter f of the GDPR.

 
Manage your cookie settings
Placed cookies
Elementor

We use Elementor for content creation. This data is not shared with third parties.

NameStorageFunction
Statistics (anonym)  
elementorpersistentSave actions performed by users on the websiteGDPR Cookie Consent

We use GDPR Cookie Consent for managing cookie consents. This data is not shared with third parties.

NameStorageFunction
functional  
cookielawinfo-checkbox-non-necessarysessionchecks whether cookies can be set
viewed_cookie_policypersistentsave when message was shown
cookielawinfo-checkbox-necessarysessionchecks whether cookies can be set
Polylang

We use Polylang for managing the locales. This data is not shared with third parties.

NameStorageFunction
Preferences  
pll_languagepersistentSave language settings
 
Google Fonts

We use Google Fonts to display web fonts. For further information, please read the Google Fonts Privacy Policy.

NameStorageFunction
Marketing/tracking  
Google Fonts APInoneRequest the user’s IP address
 
Google Maps

We use Google Maps for map display. For further information please read the Google Maps Privacy Policy.

NameStorageFunction
Marketing/tracking  
Google Maps APInoneRequest the user’s IP address
 
Miscellaneous
NameStorageFunction
Subject of the investigation  
show_embedded_maps  

This data is not shared with third parties.

7. Contact form and email contact

Based on our legitimate interests, this website uses a contact form which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and will be stored.

This data includes:

  • the email address 
  • the first and last name

At the time the message is sent, the following data is also stored:

  • IP address of the computer used for access
  • Date and time of when the contact form message was sent


For the processing of the data, your consent will be obtained during the sending process, and reference will be made to this privacy policy.

You can also contact us using the provided email address. In this case, we will store the personal data of the user transmitted with the email. 

In this context, the data will be shared with third parties. The data will only be used for processing the conversation.

If the user has given his/her consent to the processing of the data, the legal basis for this is Art. 6 para 1 sentence 1 letter a of the GDPR.

The legal basis for the processing of data transmitted by sending an email is Art. 6 para 1 sentence 1 letter f of the GDPR. If the purpose of the email contact is the conclusion of a contract, Art. 6 para 1 sentence 1 letter b of the GDPR serves as an additional legal basis for the processing.

The processing of the personal data from the input mask is only used for the processing of the approach. In the case of approaching us by email, this also constitutes the legitimate interest in the processing of the data.

Any other personal data processed during the sending process is used to prevent abuse of the contact form and to ensure the security of our information technology systems.

8. Google Fonts

Scope of the processing of personal data

Based on our legitimate interests, we use the Google Fonts service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). In the case of access by users who do not habitually reside in the European Economic Area or Switzerland, requests to Google could be made via servers of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We have no influence on a possible forwarding of requests by Google.

Google Inc. is certified under the Privacy Shield Agreement and thus guarantees to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google Fonts offers an intuitive and robust directory of open source designer web fonts. With an extensive catalog, typography can be seamlessly embedded and integrated into any design project.

The service is used for the integration of fonts (web fonts) on our Internet pages. The integration of the Google Fonts is performed by a server call at Google, usually via the URL https://fonts.google.com. The fonts originate from different designers and are open source.

When users access our online offer, a request is usually sent to a Google server, where it is stored and processed.

Technically, the fonts embedded in our website are stored on a Google server and then loaded from there when the page is called up. By using Google fonts, Google’s servers send the respective files to each user based on the technologies the user’s browser supports.

The connection to Google Fonts is not authenticated. If you visit our website, the Google Fonts service does not send cookies or login information to Google. Requests to the servers of Google Fonts are made to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com, so requests for fonts are always separate from credentials that would otherwise be sent to and may be authenticated on domains of Google, such as google.com or google.de.

Google Fonts logs records of CSS and font file requirements. Google assigns aggregated usage numbers for statistical purposes, information on the popularity of font families, and publishes these results on an analytics page (https://fonts.google.com/analytics).

More information about Google Fonts can be found at https://developers.google.com/fonts/faq 

Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is Art. 6 para 1 sentence 1 letter f and Art. 26 para 3 sentence 1 of the GDPR.

Purpose of the data processing

The data processing is carried out in the interest of the analysis, optimization, and economic operation of the online offer in order to integrate content or service offers from third parties or their content and services.

We use Google Fonts to make our Internet presence independent of the fonts installed on the user’s system, the so-called system fonts, and to ensure a consistent display image on different systems. 

The purpose and scope of the data collection and the further processing and use of the data by Google can be found in Google’s privacy policy at https://policies.google.com/privacy?hl=de 

The data is deleted as soon as it is no longer required for our recording purposes. 

Possibility of objection and removal

Further information on Google’s use of data, as well as options for setting and objecting to such use, can be obtained from Google’s websites https://www.google.com/intl/de/policies/privacy/partners (“Google’s use of data when you use our partners’ websites or apps”), https://www.google.com/policies/technologies/ads (“Use of data for advertising purposes”), https://www.google.de/settings/ads (“Manage information that Google uses to serve ads to you”).

 

9. Google Maps

Based on our legitimate interests, we use the Google Maps service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). In the case of access by users who do not habitually reside in the European Economic Area or Switzerland, requests to Google could be made via servers of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We have no influence on a possible forwarding of requests by Google.

Google Inc. is certified under the Privacy Shield Agreement and thus guarantees to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google Maps is an online map service from Google. The earth’s surface can be viewed as a road map or as an aerial or satellite image.

The service is used for the integration of map data on our Internet pages. The integration of Google Maps is done by a server call at Google via an interface, the Google Maps API.

When a page of our online offer, in which a corresponding map section has been integrated, is accessed, a request is transmitted to a Google server and stored and processed there. By using Google Maps, Google’s servers send the respective data to the user’s browser to display the map material.

The processing of the data by Google takes place within the framework of its data use policy (https://www.google.de/intl/de/policies/privacy/).

In case there is joint responsibility for the processing of the user’s personal data, processing is based on an agreement between Google and us for the joint processing of personal data, known as a Joint Control Contract (JCC). We and Google are therefore jointly and severally responsible for the data processed within the Google Maps API.

The main contents of the agreement on the joint processing of personal data can be found at the URL https://privacy.google.com/intl/de/businesses/mapscontrollerterms/ 

More information about Google Maps can be found at https://support.google.com/maps/

The legal basis for the processing of users’ personal data is Art. 6 para 1 sentence 1 letter f and Art. 26 para 3 sentence 1 of the GDPR. If the user has given his/her consent to the processing of the data, the legal basis for this is Art. 6 para 1 sentence 1 letter a and Art. 7 of the GDPR.

 

The data processing is carried out in the interest of the analysis, optimization, and economic operation of the online offer in order to integrate content or service offers from third parties or their content and services.

We use Google Maps to integrate verified map data into our online presence.

The purpose and scope of the data collection and the further processing and use of the data by Google can be found in Google’s privacy policy at https://policies.google.com/privacy?hl=en 

Further information on Google’s use of data, as well as options for setting and objecting to such use, can be obtained from Google’s https://www.google.com/intl/de/policies/privacy/partners (“Google’s use of data when you use our partners’ websites or apps”) https://www.google.com/policies/technologies/ads (“Use of data for advertising purposes”) https://www.google.de/settings/ads (“Manage information that Google uses to serve ads to you”).

 

10. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights against the data controller:

Right to information

You can request the data controller to confirm whether we are processing personal data concerning you. 

If such processing is ongoing, you may request the following information from the data controller:

(1) the purposes for which the personal data is processed;

(2) the categories of personal data processed;

(3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;

(4) the intended duration of storage of personal data relating to you or, if specific details cannot be given, criteria for determining the duration of storage;

(5) the existence of a right of rectification or erasure of personal data relating to you, a right to the restriction of the processing by the controller or a right to object to such processing; 

(6) the existence of a right of appeal to a supervisory authority;

(7) all available information on the origin of the data, if the personal data is not collected from the data subject;

(8) the existence of automated decision making, including profiling, in accordance with Art. 22 para 1 and Art. 4 of the GDPR and, at least in these cases, meaningful information on the logic involved, as well as about the scope and intended effects of such processing on the data subject.

 

You have the right to request information if personal data concerning you is transferred to a third country or to an international organization. In this connection, you may request to be informed of the appropriate guarantees pursuant to Art. 46 of the GDPR in connection with the transfer.

 
Right to rectification 

If the personal data processed concerning you is incorrect or incomplete, you have the right to ask the data controller to correct and/or complete the data. The data controller shall make the correction without delay.

Right to restriction of processing

You may request the restriction of the processing of personal data concerning you under the following conditions:

(1) if you dispute the accuracy of the personal data concerning you for a period of time which enables the data controller to verify the accuracy of the personal data;

(2) if the processing is unlawful, and you object to the deletion of the personal data, but request the restriction of the use of the personal data instead;

(3) the data controller no longer needs the personal data for the purposes of the processing, but you need it for the purpose of exercising or defending legal claims; or

(4) if you have filed an objection to the processing in accordance with Art. 21 para 1 of the GDPR, and it has not yet been decided whether the legitimate reasons named by the data controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data may only be processed with your consent or for the purpose of pursuing, exercising or defending legal claims or protecting the rights of another natural or legal person, or on grounds of an important public interest of the European Union or of a member state, but may still be stored.

If the restriction on processing has been restricted in accordance with the above conditions, the data controller shall inform you before the restriction is lifted.

 
Right to erasure

You may request that the data controller deletes personal data concerning you without delay, and the data controller is obliged to immediately delete such data if one of the following reasons applies:

(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.

(2) Your consent on which the processing was based in accordance with Art. 6 para 1 sentence 1 letter a or Art. 9 para 2 letter a of the GDPR is revoked, and there is no other legal basis for the processing. 

(3) You file an objection to the processing in accordance with Art. 21 para 1 of the GDPR, and there are no higher-ranking legitimate grounds for processing, or you file an objection to the processing in accordance with Art. 21 para 2 of the GDPR. 

(4) Your personal data has been processed unlawfully. 

(5) The erasure of personal data concerning you is necessary to comply with a legal obligation in accordance with the law of the European Union or of the member states which the data controller is subject to. 

(6) The personal data concerning you has been collected in relation to information society services offered in accordance with Art. 8 para 1 of the GDPR.

 
Information to third parties

If the data controller has made public the personal data concerning you, and if he/she is obliged to delete such data in accordance with Art. 17 para 1 of the GDPR, he/she shall take reasonable measures, including technical measures, taking into account any available technology and the implementation costs, to inform data controllers processing the personal data that you, as a data subject, have requested them to delete all links to this personal data or copies or replications of this personal data. 

Exceptions

The right of cancellation does not exist if the processing is necessary

(1) for exercising one’s right to freedom of expression and information;

(2) to comply with a legal obligation the processing is subject to according to the law of the European Union or national law to which the controller is subject or in order to perform a task carried out in the public interest or in the exercise of official authority conferred to the controller;

(3) for reasons of public interest in the field of public health pursuant to Art. 9 para 2 letters h and i and Art. 9 para 3 of the GDPR;

(4) for archival purposes in the public interest, scientific, historical research, or statistical purposes pursuant to Art. 89 para 1 of the GDPR, insofar as the law referred to in Section a) is likely to render impossible or seriously harm the attainment of the objectives of such processing, or

(5) to assert, exercise or defend legal claims.

Right to be informed

If you have asserted the right to rectify, erase or limit the processing against the data controller, the data controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or limitation of processing, unless this proves to be impossible or cannot be done without disproportionate effort.

You have the right to ask the data controller to disclose the identities of these recipients.

Right to data portability

Upon your request, the data controller must provide you with the personal data concerning you in a structured, commonly used, and machine-readable format. Furthermore, you have the right to have this data transmitted to another data controller without interference of the data controller to whom the personal data has been made available, provided that

(1) the processing is based on a consent pursuant to Art. 6 para 1 sentence 1 letter a of the GDPR or Art. 9 para 2 letter a of the GDPR or on a contract pursuant to Art. 6 para 1 sentence 1 letter b of the GDPR and

(2) the processing is carried out by means of automated procedures.

Exercising this right, you also have the right to arrange that the personal data concerning you be transferred directly from one data controller to another if this is technically feasible. The freedoms and rights of other persons may not be restrained by exercising this right.

The right to data portability does not apply to processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority conferred to the controller.

11. Right to object

You are entitled, for reasons arising from your particular situation, to object to the processing of personal data concerning you which is carried out pursuant to Article 6 para 1 sentence 1 letter e or f of the GDPR at any time; this also applies to profiling based on these provisions. 

The data controller shall no longer process your personal data, unless he/she can provide compelling legitimate reasons for processing outweighing your interests, rights, and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If your personal data is processed for direct marketing purposes, you shall have the right to object at any time to processing of your personal data for such marketing, including profiling to the extent that it relates to such direct marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You may exercise your right of objection in connection with the use of information society services by means of automated procedures involving technical specifications, without prejudice to Directive 2002/58/EC.

You also have the right to object to the processing of your personal data, for reasons arising from your particular situation, for the purposes of scientific or historical research or for statistical purposes in accordance with Art. 89 para 1 of the GDPR.

Your right to object may be limited to the extent that it is likely to make the realization of the research or statistical purposes impossible or to seriously impair such research and statistical purposes, and to the extent the limitation is necessary for the fulfillment of the research or statistical purposes.

12. Right to withdraw consent according to data protection laws

You have the right to revoke your consent according to data protection laws at any time. Your revocation of consent does not affect the lawfulness of the processing up to the date of revocation.

13. Automated decision in individual cases, including profiling

You have the right not to be subject to a decision which is solely based on automated processing, including profiling, having legal effect on you, or significantly affecting you in a similar manner. This shall not apply if the decision 

(1) is necessary for the conclusion or fulfillment of a contract between you and the data controller;

(2) is authorized by the law of the European Union or the law of the member states which the data controller is subject to, and such law contains appropriate measures to safeguard your rights and freedoms, as well as your legitimate interests; or

(3) is made with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para 1 of the GDPR, unless Art. 9 para 2 letter a or g of the GDPR applies, and appropriate measures have been taken to protect rights and freedoms and your legitimate interests.

With regard to the cases referred to in (1) and (3), the data controller shall take appropriate measures to safeguard the rights and freedoms and your legitimate interests, which shall include at least the right to obtain the intervention of one of the data controller’s employees, to express his/her point of view and to challenge the decision.

14. Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement, if you feel that the processing of personal data concerning you constitutes an infringement of the GDPR. 

The supervisory authority to which the complaint has been filed shall inform the complainant about the status and the results of the complaint, including the possibility of legal remedies according to Art. 78 of the GDPR.