Privacy Policy
Unless otherwise stated below, the provision of your personal data is not legally or contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other information is given in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and to improve our services.
Your data may be transferred to and processed in third countries outside the EU, in particular to Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
Contact
Controller/Data Protection Officer
Contact us if you wish. The controller for data processing is: Best Textil GmbH, Jettenburger Str. 42, 72770 Reutlingen, Germany, +49 89 12081060, info@bellybutton.com
You can reach our data protection officer directly at: info@bellybutton.com
Customer's proactive contact by e-mail
If you proactively contact us by e-mail for business purposes, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of processing and answering your contact request.
If the contact serves the implementation of pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to the processing of personal data concerning you, which is based on Art. 6 para. 1 lit. f GDPR, for reasons arising from your particular situation.
We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
WhatsApp Business
If you contact us for business purposes via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
Data processing serves the purpose of processing and answering your contact request. For this purpose, we collect and process your mobile phone number stored on WhatsApp, if provided, your name and other data to the extent provided by you. We use a mobile device for the service, in whose address book only data of users who have contacted us via WhatsApp are stored. Thus, no personal data is transferred to WhatsApp without your prior consent to WhatsApp.
Your data will be transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA and stored there. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified itself under the TADPF and has thereby committed itself to comply with European data protection principles. If the contact serves the implementation of pre-contractual measures (e.g. advice on purchase interest, offer creation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in providing quick and easy contact and in answering your request. In this case, you have the right to object at any time to the processing of personal data concerning you, which is based on Art. 6 para. 1 lit. f GDPR, for reasons arising from your particular situation.
We only use your personal data to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Further information on the terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.
Customer account & orders
Customer Account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until withdrawal. Your customer account will then be deleted.
Your data may be transferred to and processed in third countries outside the EU, in particular to Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.
Advertising
Use of your personal data for sending postal advertising
We use your personal data (name, address), which we have received in the context of the sale of a good or service, to send you postal advertising, provided you have not objected to this use. The provision of this data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being able to be concluded.
The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in direct marketing. You can object to this use of your address data at any time by notifying us. The contact details for exercising your right to object can be found in the imprint.
Use of the e-mail address for sending newsletters
We use your e-mail address to send you information and offers via newsletter, provided you have expressly consented to this. The data processing serves exclusively the purpose of advertising. For this purpose, we process your e-mail address and, if applicable, other data that you have voluntarily provided when registering for our newsletter.
The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time, without affecting the legality of the processing carried out on the basis of the consent until withdrawal.
You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your e-mail address in a so-called blacklist to prevent you from receiving newsletter e-mails from us in the future. This storage is based on Art. 6 para. 1 lit. f GDPR due to our and your legitimate interest in preventing the renewed use of your e-mail address for sending our newsletter. You have the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation.
Use of the e-mail address for sending direct advertising
We use your e-mail address, which we have received in the context of the sale of a good or service, for the electronic sending of advertising for our own goods or services that are similar to those you have already purchased from us, provided you have not objected to this use. The provision of the e-mail address is necessary for the conclusion of the contract. Failure to provide it will result in no contract being able to be concluded. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in direct marketing. You can object to this use of your e-mail address at any time by notifying us. The contact details for exercising your right to object can be found in the imprint. You can also use the link provided in the advertising e-mail. This will not incur any costs other than the transmission costs according to the basic rates.
Use of Klaviyo
We use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) for newsletter delivery as part of a commissioned processing arrangement.
We transmit the information you provide during newsletter registration (e-mail address, possibly first and last name) to Klaviyo. The data processing serves the purpose of newsletter delivery and its statistical evaluation.
To evaluate newsletter campaigns, the sent newsletters contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect your personal data such as IP address, browser type and device, and the time. Usage profiles can be created from this data under a pseudonym. The collected data is not used to identify you personally. The collected data is only used for statistical evaluation to improve newsletter campaigns.
Your data is generally transmitted to and stored on Klaviyo servers in the USA. For the USA, an adequacy decision by the EU Commission exists, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified itself under the TADPF and has thereby committed itself to comply with European data protection principles.
The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a targeted, effective, and user-friendly newsletter system. You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation.
Further information on data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice and at https://www.klaviyo.com/legal/data-processing-agreement.
We offer an item availability notification service on our website. If an item is temporarily unavailable, you have the option to enter your e-mail address for the respective item and to be informed by us via e-mail when it becomes available, provided you have consented to this. You will receive a one-time e-mail notification about the availability of the respective item when it becomes available. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time, without affecting the legality of the processing carried out on the basis of the consent until withdrawal. You can unsubscribe from the availability notification at any time by notifying us. Your e-mail address will then be removed from the mailing list.
Shipping service providers Inventory Management
Disclosure of e-mail address to shipping companies for information about shipping status
We disclose your e-mail address to the transport company as part of contract processing, provided you have expressly agreed to this in the order process. The disclosure serves the purpose of informing you by e-mail about the shipping status. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us or the transport company, without affecting the legality of the processing carried out on the basis of the consent until withdrawal.
Use of an external merchandise management system
We use a merchandise management system for contract processing within the framework of order processing. For this purpose, your personal data collected during the order is transmitted to
Descartes Systems (Germany) GmbH, Martin-Luther-Ring 13, 04109 Leipzig, Germany
.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Payment service providers
Use of PayPal
We use the payment service PayPal from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
All PayPal transactions are subject to the PayPal Privacy Policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables unique identification of the browser when the website is called up again.
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Use of Cookiebot
We use the Consent Management Tool Cookiebot from Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark; "Cookiebot") on our website.
The tool allows you to grant consents for data processing via the website, particularly for setting cookies, and to exercise your right to withdraw previously granted consents. The purpose of data processing is to obtain and document necessary consents for data processing and thus to comply with legal obligations.
Cookies may be used for this purpose. Among other things, the following information may be collected and transmitted to Cookiebot: anonymized IP address, date and time of consent, URL from which the consent was sent, anonymous, random, encrypted key, consent status. This data is not passed on to other third parties.
Data processing is carried out to fulfill a legal obligation based on Art. 6 para. 1 lit. c GDPR.
Further information on data protection at Cookiebot can be found at: https://www.cookiebot.com/de/privacy-policy/
Analysis Ad Tracking Communication
Use of Google Analytics 4
We use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. For this purpose, Google will, on behalf of the operator of this website, use the information obtained to evaluate your use of the website, to compile reports on website activities, and to provide other services related to website and internet usage to the website operator.
Among other things, the following information may be collected: IP address, date and time of page view, click path, information about the browser and device you are using, pages visited, referrer URL (website from which you accessed our website), location data, purchasing activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.
Your IP address will be truncated by us on our own servers beforehand. Google thus receives only pseudonymized data.
The processing of your personal data is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation.
We use the advanced implementation of Consent Mode. Even if consent is not granted, user data is transmitted to Google in the form of "pings". These pings may contain, among other things, the following information: IP address for deriving the IP country (the IP address is not logged), date and time of page view, URL of the visited pages, user agent, referrer URL (website from which our website was accessed), or information about the triggering of website events such as a conversion. Based on this information, Google performs modeling of usage data to enable comprehensive usage analysis despite the denial of consent.
The information generated about your use of this website is usually transmitted to a Google server in the USA and stored there. For the USA, an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place. Google has certified itself under the TADPF and thus committed to complying with European data protection principles. Both Google and US government authorities have access to your data.
Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de.
Use of Hotjar
We use the analysis tool from Hotjar Ltd. (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julians STJ1000, Malta; “Hotjar”) on our website.
The data processing serves the purpose of tailoring, optimizing and analyzing our website according to needs.
The tool records random movements of page visitors on the website. This creates a log of mouse movements, scrolling behavior, dwell time and clicks on the website (so-called heatmap).
For this purpose, Hotjar uses cookies, among other things. The following information, among others, may be collected: IP address (in anonymized form), information about the device you are using (screen size, devices, unique device identifier), information about the browser you are using, location data (country only), preferred language for displaying the website, operating system used. Detailed information on the cookies used, their function and storage period can be found here: https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies.
User profiles are created from this data under a pseudonym. The data is not used to personally identify the website visitor and is not merged with personal data of the bearer of the pseudonym. Hotjar is contractually prohibited from selling the collected data to other third parties.
Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place. Hotjar is not certified under the TADPF. Data transfer takes place, among other things, on the basis of appropriate safeguards. Hotjar will provide you with further information on the measures taken upon request.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation.
Further information on data protection when using Hotjar can be found here: https://www.hotjar.com/legal/policies/privacy#enduserenglish.
Use of Shopify statistics
We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of a commissioned processing arrangement. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. Among other things, the following device information is collected and processed: web browser information, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information about viewed web pages or products, the referrer URL (website from which you accessed our website), and information about how you interact with the website are also collected. Technologies such as cookies, as well as web beacons, tags, and pixels (electronic files for recording information about how you navigate the website) are used for this purpose.
Your data may be transferred to and processed in third countries outside the EU, particularly to Canada and the USA. For Canada, an adequacy decision from the EU Commission exists. For the USA, an adequacy decision from the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), exists. Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the standard contractual clauses of the EU Commission.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz, information on the data processing agreement at https://www.shopify.com/de/legal/dpa, and information on the cookies used at https://www.shopify.com/de/legal/cookies.
You can deactivate the remarketing function "Custom Audiences" here. Further information on the collection and use of data by Meta, on your rights in this regard and options for protecting your privacy can be found in Meta's privacy policy at https://www.facebook.com/about/privacy/.
We use the online advertising program "Google Ads" on our website and, in this context, conversion tracking (visitor action evaluation). Google Conversion Tracking is an analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
If you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and therefore do not serve for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Thus, there is no possibility that cookies can be tracked across the websites of Ads customers.
The information collected with the help of the conversion cookie serves the purpose of creating conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag. However, we do not receive any information that allows users to be personally identified. We use the extended implementation of consent mode (Advanced Consent Mode). Here, even if consent is not given, user data is transmitted to Google in the form of "pings". These pings may contain, among other things, the following information: IP address to derive the IP country (the IP address is not logged), date and time of the page view, URL of the visited pages, user agent, referrer URL (website from which our website was accessed) or information about the triggering of website events such as a conversion. Based on this information, Google models user data to enable comprehensive usage analysis despite the denial of consent.
Your data may be transmitted to Google LLC servers in the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to complying with European data protection principles.
Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/
Use of the Pinterest Tag
We use the Pinterest Tag from Pinterest Europe Limited (Palmerston House, 2nd, Fenian Street, Floor, Dublin 2, Ireland "Pinterest") on our website.
The application serves the purpose of targeting website visitors with interest-based advertising on the social network Pinterest. For this purpose, the Pinterest conversion tag has been implemented on the website. This tag establishes a direct connection to Pinterest's servers when you visit the website. This transmits to Pinterest's server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged in to the social network. When you visit Pinterest, you will then be shown personalized, interest-based Pinterest ads.
If you access our website via a Pin on the social network Pinterest, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity, do not contain any personal data and therefore do not serve for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognize that you clicked on the Pin and were redirected to this page. The information collected with the help of the conversion cookie serves the purpose of creating conversion statistics and thus optimizing our website. The following information, among others, can be processed: total number of users who clicked on one of our Pins and were redirected to our website, subpages visited on our website (e.g. category or product pages), search queries on our website, your shopping cart contents, completed transactions.
Your data may be transferred to the USA. There is an adequacy decision by the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF. Data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation.
Further information on the collection and use of data by Pinterest, on your rights in this regard and options for protecting your privacy can be found in Pinterest's privacy policy at https://policy.pinterest.com/de/privacy-policy.
Use of TikTok Pixel
We use the TikTok Pixel from TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; "TikTok Ireland") and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; "TikTok UK") on our website. Both companies are joint controllers for data processing (hereinafter "TikTok").
The data processing serves the purpose of identifying and analyzing our customers' website accesses and for better customer engagement through targeted advertising and evaluating the effectiveness of advertisements on TikTok. For this purpose, TikTok uses technologies such as cookies and pixels that enable your browser to be recognized. The following information, among others, can be collected and transmitted to TikTok: date and time of visit, information about the browser and device type you are using, screen resolution, IP address. TikTok can assign this information to your personal TikTok user account. User profiles can be created from the data collected in this way using pseudonyms. However, personal identification of users is not possible.
Your data may be transferred to third countries, such as the USA. There is an adequacy decision by the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified under the TADPF. Data transfer to the USA and to third countries without an adequacy decision takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation.
Further information on data protection can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/de and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.
We use the live chat system from Zendesk Inc. (1019 Market Street, 6th Floor, San Francisco, California 94103, USA; "Zendesk") on our website.
The system serves the purpose of communication between you and us as the provider. User profiles can be created from this data under a pseudonym. Cookies are used for this purpose. The cookies enable the recognition of the internet browser.
Your data may be transmitted to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Zendesk has certified itself under the TADPF and has thus committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 (1) Sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation.
Further information on the collection and use of data by Zendesk, on your rights in this regard and options for protecting your privacy can be found in Zendesk's privacy policy at https://www.zendesk.com/company/customers-partners/privacy-policy/.
Plug-ins and other services
We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application manages JavaScript and HTML tags used to implement tracking and analysis tools, among other things. Data processing serves the purpose of designing and optimizing our website to meet needs.
Google Tag Manager itself does not store cookies or process personal data. However, it enables the triggering of other tags that can collect and process personal data.
Further information on terms of use and data protection can be found here.
Data Subject Rights and Storage Period
Duration of storage
After complete contract processing, the data will initially be stored for the duration of the warranty period, then taking into account statutory, in particular tax and commercial law, retention periods and then deleted after the expiry of the period, unless you have consented to further processing and use.
Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, rectification, erasure, restriction of processing, data portability.
In addition, you have a right to object to processing based on Art. 6 (1) f GDPR and to processing for the purpose of direct marketing, in accordance with Art. 21 (1) GDPR.
Right to lodge a complaint with the supervisory authority
According to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
You can, among other things, lodge a complaint with the supervisory authority responsible for us, which you can reach at the following contact details:
State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW)
Lautenschlagerstraße 20
70173 Stuttgart
Tel.: +49 711 615541-0
Fax: +49 711 615541-15
Email: poststelle@lfdi.bwl.de
Internet: https://www.baden-wuerttemberg.datenschutz.de/
Right to object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time with effect for the future, for reasons arising from your particular situation.
After an objection has been made, the processing of the data concerned will be terminated, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.
If personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. After an objection has been made, we will cease processing the data concerned for direct marketing purposes.
Last updated: 27.08.2025