Privacy notice for applicants

1. Privacy Policy

We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to take this opportunity to inform you which of your personal data we collect when you visit our website and for what purposes it is used.

This privacy policy applies to the Smart Reporting GmbH website, which can be accessed under this domain and the various subdomains ("our website").

Objection to advertising emails

We hereby object to the use of the contact data published in the legal notice, the data protection notice and other contact data published on the website for sending unsolicited advertising and information material. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Who is responsible and how can I contact you?

The person responsible

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

Smart Reporting GmbH

Erika-Mann-Straße 69

80636 Munich, Germany

Data Protection Officer

Stephan Krischke, datenschutz@smart-reporting.com

What is it about?

This privacy policy fulfills the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior when visiting a website. Information for which we cannot (or only with disproportionate effort) establish a connection to your person, e.g. through anonymization, is not personal data. The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise or defense of legal claims and in the event of statutory retention obligations.

Who receives my data?

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

• you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR,
• the disclosure is permitted in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 lit. c GDPR, and
• this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 lit. b GDPR.

In order to protect your data and, if necessary, to enable us to transfer data to third countries (outside the EU/EEA), we have concluded data processing agreements based on the European Commission's standard contractual clauses. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent may serve as the legal basis for the transfer to third countries in accordance with Art. 49 para. 1 lit. a) GDPR. This may not apply in the case of data transfer to third countries for which the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR.

As part of the processing operations described in this privacy policy, personal data may be transferred to the USA. The USA does not have an adequate level of data protection (ECJ: Schrems II ruling). In particular, US investigative authorities can oblige US companies to hand over or disclose personal data without the data subjects being able to take effective legal action against this. This means that there is a fundamental possibility that your personal data may be processed by US investigative authorities. We have no influence on these processing activities. In order to protect your data, we have concluded data processing agreements based on the European Commission's standard contractual clauses. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent may serve as the legal basis for the transfer to third countries in accordance with Art. 49 para. 1 lit. a) GDPR. This sometimes does not apply to data transfers to third countries for which the European Commission has issued an adequacy decision in accordance with Art. 45 GDPR.

Do you use cookies?

Cookies are small text files that are sent by us to the browser of your end device and stored there when you visit our website. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses, so that we are able, for example, to recognize the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. You can find detailed information on the cookies used in the cookie settings or in the Consent Manager of this website.

What rights do I have?

Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

• Information in accordance with Art. 15 GDPR about the data stored about you in the form of meaningful information on the details of the processing as well as a copy of your data;
• Correction in accordance with Art. 16 GDPR of incorrect or incomplete data stored by us;
• Erasure pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims
• Restriction of processing pursuant to Art. 18 GDPR if the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you oppose their erasure because you require them for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR.
• Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data on the basis of consent pursuant to Art. 6 para. 1 lit. a GDPR or on the basis of a contract pursuant to Art. 6 para. 1 lit. b GDPR and these have been processed by us using automated procedures. You will receive your data in a structured, commonly used and machine-readable format or we will transmit the data directly to another controller if this is technically feasible.
• Objection pursuant to Art. 21 GDPR to the processing of your personal data, insofar as this is carried out on the basis of Art. 6 para. 1 lit. e, f GDPR and there are reasons for this arising from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding, compelling legitimate grounds for the processing can be demonstrated or the processing is for the establishment, exercise or defense of legal claims. If the right to object does not exist for individual processing operations, this is indicated there.
• Revocation pursuant to Art. 7 para. 3 GDPR of your consent given with effect for the future.
• Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.

How is my data processed in detail?

Provision of the website

Type and scope of processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a log file

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which the access was made (referrer URL)
• Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR.

Purpose and legal basis

The processing is carried out to safeguard our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6 para. lit. f GDPR. The collection of data and storage in log files is absolutely necessary for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 para. 1 GDPR. Insofar as further storage of the log files is required by law, the processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, but it is not technically possible to access our website without providing the data.

Storage Duration

The aforementioned data is stored for the duration of the website display and - for technical reasons - for a maximum of 7 days beyond that.

Contact form

Type and scope of processing

Personal data is collected when you contact us (e.g. via contact form or email). Which data is collected in the case of a contact form can be seen from the respective contact form. You can also voluntarily provide additional information that you believe is necessary to process the contact request.

When using the contact form, your personal data will not be passed on to third parties.

Purpose and legal basis

Your data is processed using our contact form for the purpose of communicating and processing your request on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. Insofar as your request relates to an existing contractual relationship with us, the processing is carried out for the purpose of fulfilling the contract on the basis of Art. 6 para. 1 lit. b GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the mandatory fields. If you do not wish to provide this data, please contact us by other means.

Storage Duration

If you use the contact form on the basis of your consent, we will store the data collected for each inquiry for a period of three years, starting with the completion of your inquiry or until you withdraw your consent.

If you use the contact form as part of a contractual relationship, we will store the data collected for each inquiry for a period of three years from the end of the contractual relationship.

Contact form for applicants

Type and scope of processing

We collect and process the personal data of applicants. Corresponding data processing may also be carried out electronically, for example when applicants send us application documents by e-mail or via a web form on our website. On our website, we offer you the opportunity to send us applications for advertised vacancies by e-mail.

Your data will also only be stored in an applicant database beyond the current application process if you have given us your separate consent to do so.

Purpose and legal basis

The processing of your data in connection with your application is carried out for the purpose of processing your application and deciding on the establishment of an employment relationship on the basis of Section 26 BDSG. If your application documents are forwarded to third parties, in particular to companies affiliated with us, and if your data is stored beyond the current application process, your data will be processed on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your application without providing the information.

Storage duration

Applicants' data will be deleted after 6 months in the event of a rejection. In the event that you have consented to further storage of your personal data, we will transfer your data to our applicant pool. There the data will be deleted after 24 months.

Technology

SSL/TLS encryption

This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you send to us as the operator. You can recognize an encrypted connection by the fact that the address line of the browser contains "https://" instead of "http://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

AWS Cloudfront

Type and scope of processing

We use AWS CloudFront to properly provide the content of our website. AWS CloudFront is a service of Amazon Web Services, Inc. which acts as a content delivery network (CDN) on our website.

A CDN helps to make the content of our online offering, in particular files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to Amazon Web Services, Inc. servers, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of AWS CloudFront.

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in the secure and efficient provision and optimization of our online offer in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision of the European Commission exists (including US companies that are not certified under the EU-U.S. DPF), we have agreed other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR have been agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).

Storage duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Amazon Web Services, Inc. Further information can be found in the privacy policy for AWS CloudFront: https://aws.amazon.com/de/privacy/.

Google Analytics

Type and scope of processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offering. This includes, for example, the number of visits to our website, subpages visited and the time spent by visitors.

Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognize users.

This information is used, among other things, to compile reports on website activity.

Purpose and legal basis

The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision of the European Commission exists (including US companies that are not certified under the EU-U.S. DPF), we have agreed other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR have been agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).

Storage Duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google Tag Manager

Type and scope of processing

We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and enables us to control the precise integration of services on our website.

This allows us to flexibly integrate additional services in order to evaluate user access to our website.

Purpose and legal basis

The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision of the European Commission exists (including US companies that are not certified under the EU-U.S. DPF), we have agreed other appropriate safeguards with the recipients of the data within the meaning of Art. 44 et seq. GDPR have been agreed. Unless otherwise stated, these are standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 para. 1 sentence 1 lit. a. GDPR, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be risks that are unknown in detail (e.g. data processing by security authorities in the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).

Storage Duration

The specific storage period of the processed data cannot be influenced by us but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

Hotjar

Type and scope of processing

We have integrated Hotjar on our website. Hotjar is a service provided by Hotjar Ltd. and offers optimization tools that analyze the behavior and feedback of users of our website through analysis and feedback tools.

Hotjar uses cookies and other browser technologies to evaluate user behaviour and recognize users.

This information is used, among other things, to compile reports on website activity and to statistically analyze visitor data. Hotjar also records clicks, mouse movements and scroll heights in order to create so-called heat maps and session replays.

In this case, your data will be passed on to the operator of Hotjar, Hotjar Ltd, Hotjar Ltd, Level 2, St Julians Business Center 3 Elia Zammit Street St Julians STJ 3155 Malta.

Purpose and legal basis

Hotjar is used on the basis of your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

Storage Duration

The specific storage period of the processed data cannot be influenced by us, but is determined by Hotjar Ltd. Further information can be found in the privacy policy for Hotjar: https://www.hotjar.com/privacy/.

Rollbar

Type and scope of processing

We use Rollbar from Rollbar, Inc, Rollbar, Inc, 401 Federal St Ste, San Francisco, CA 94107, United States as a bug tracker to detect code errors at an early stage and thus ensure the technical functionality of our online offer. Anonymous information about the device on which the error occurred and the time at which the error was detected is collected. In some cases, user sessions may also be recorded to make it easier to rectify the error. Rollbar, Inc. does not use this data for advertising purposes.

Purpose and legal basis

Rollbar is used on the basis of your consent in accordance with Art. 6 para. 1 lit. a. GDPR and § 25 para. 1 TTDSG.

Storage Duration

The exact storage period varies from case to case. Data is deleted as soon as we have rectified the error and no longer require access to error details. Further information on the storage period on the part of Rollbar, Inc. can be found in the privacy policy for Rollbar: https://docs.rollbar.com/docs/privacy-policy.

Privacy Policy for Applicants

We are pleased that you are interested in us and would like to apply for a position in our company. In the following we would like to provide you with information on the processing of your personal data in connection with your application.

Who is responsible for data processing?

Smart Reporting GmbH

Erika-Mann-Straße 69

80636 Munich, Germany

Phone: +49 89 215 540 210

E-Mail: info@smartreporting.de

You will find further information about our company, details of the persons authorized to represent us and also further contact possibilities in our websites imprint at https://www.smart-reporting.com/en/legal

Which of your data are processed by us? And for what purposes?

We process the data that you have sent us in connection with your application in order to check your suitability for the position (or other open positions in our companies, if applicable) and to carry out the application procedure.

We use the online tools "Teams" from Microsoft Corporation and "zoom" from Zoom Video Communications to conduct job interviews online if required. When using the online tools, various types of data (video, usage and contact data) are processed. More information can be found in the sections "To which recipients will the data be passed on" and "Where will the data be processed?

We do not plan to process special categories of personal data about you. This includes data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as the processing of genetic data, biometric data uniquely identifying a natural person, health data or data concerning the sexual life or sexual orientation of a natural person. If you provide us with such personal data of your own accord, the processing by us also includes such data.

On what legal basis is this based?

The legal basis for the processing of your personal data in this application procedure is primarily Art. 6 para. 1 lit. b) GDPR (§ 26 BDSG only for Germany). According to this, the processing of data, required in connection with the decision to establish an employment relationship, is permissible.

Nevertheless, the use of online tools is an element in the process of conducting an effective job interview, so Art. 6 para. 1 lit. f) GDPR is the legal basis for data processing. In these cases, we are interested in the effective execution of the application procedure online.

If you have given your consent to be included in our applicant pool for a period of 24 months, Art. 6 para. 1 lit. a) GDPR (in conjunction with § 26 para. 2 BDSG for Germany) is the legal basis for our processing.

Should the data be necessary for legal prosecution after the application procedure has been completed, data processing can be carried out on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests in accordance with Art. 6 Para. 1 lit. f) GDPR. In these cases, our interest lies either in asserting or defending claims.

How long is the data stored?

Data of applicants will be deleted in case of a rejection. The deletion period depends on the respective location or country and is 6 months in Germany. In the event that you have agreed to further storage of your personal data, we will transfer your data to our pool of applicants. There the data will be deleted after 24 months. If you have been awarded a job during the application process, the data will be transferred from the applicant data system to our personnel information system.

To which recipients will the data be transferred?

We use a specialized software provider for the application process. This provider acts as a service provider for us and may also receive knowledge of your personal data in connection with the hosting of the system and the online application portal, the maintenance and care of the systems. We have concluded a so-called order processing agreement with this provider, which ensures that the data processing is carried out in a permissible manner.

Your applicant data will be screened by the personnel department after receiving your application. Suitable applications are then forwarded internally (across all locations) to the person responsible for the respective open position. The further procedure is then coordinated. Within the company, only those persons who need access to your data for the proper processing of our application procedure have access to it.

Any audio, video or chat content is also only processed during the respective online meeting. We have concluded so-called order data processing agreements with the providers of the online meeting tools in order to guarantee sufficient data security.

Your applicant data may also be disclosed to third parties if we are legally obliged to do so - e.g. by court order (legal basis for processing: Art. 6 Para. 1 lit. c) GDPR) or if this is necessary to support criminal or legal investigations or other legal inquiries or proceedings in Germany or abroad or to fulfil our legitimate interests (legal basis for processing: Art. 6 Para. 1 lit. f) GDPR).

Where is the data processed?

The data that we collect and process as a result of your use of the software may be transferred to, and stored at, a destination outside the UK or the European Economic Area (EEA). We ensure an adequate level of data protection through the use of the EU standard contractual clauses within the meaning of Art. 46 (2) lit. c GDPR.

However, the data is encrypted during transport over the Internet and thus protected against unauthorized access by third parties.

Consequences of not providing the data

The provision of personal data is necessary in order to carry out the application procedure and later to conclude an employment contract with you. You are not obliged to provide us with this personal data. If you do not provide us with the personal data required for the selection process or the conclusion of an employment contract, we may not be able to consider you in the application process.

Your rights as a "data subject“

Right of access to information

You have the right to be informed about the personal data we process about you.

In the case of a request for information that is not made in writing, we ask for your understanding that we may then require you to provide evidence that proves that you are the person you claim to be.

Right to correction or deletion

Furthermore, you have the right to correct or delete the processing, as far as you are legally entitled to do so.

Right of notification

If you have asserted the right to correction, deletion or restriction of processing towards us, we are obliged to notify all recipients to whom we have disclosed personal data concerning you of this correction, deletion or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

Right to limitation of processing

You have the right to request us to restrict processing if one of the following conditions is met:

• You contest the accuracy of the personal data, for a period of time that allows us to verify the accuracy of the personal data.
• The processing is unlawful, you object to the deletion of the personal data and instead demand the restriction of the use of the personal data.
• We no longer need the personal data for the purposes of the processing, but you need it to assert, exercise or defend legal claims.
• You have lodged an objection to the processing in accordance with Art. 21 para. 1 GDPR and it is not yet clear whether our legitimate reasons outweigh yours.

If the processing of personal data relating to you has been restricted, such data - apart from being stored - may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.

If the restriction on processing has been restricted in accordance with the above-mentioned conditions, you will be informed by us before the restriction is lifted.

Your right to restrict processing may be limited to the extent that it is likely to make it impossible or seriously prejudicial to the achievement of research or statistical purposes and that the restriction is necessary for the achievement of the research or statistical purposes.

Right to data transferability

You have the right to receive the personal data concerning you that you have provided us in a structured, common and machine-readable format. You also have the right to have this data communicated to another person in charge without hindrance by us, provided that

• the processing is based on a consent pursuant to Art. 6 para. 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR and
• the processing is carried out using automated procedures.

In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

Opposition to processing

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, which is carried out pursuant to art. 6, para. 1, lit. e) or f) of the DPA. We will no longer process the personal data concerning you unless we can demonstrate compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

Right to revoke the declaration of consent under data protection law

You have the right to revoke your data protection declaration of consent at any time. Revocation of your consent does not affect the legality of the processing that has taken place on the basis of your consent until revocation.

Right of complaint

You have the right to complain about the processing of personal data by us to a data protection supervisory authority.