PRIVACY POLICY
<p><span style="font-size:16px"><strong>Privacy Policy</strong></span></p>

Responsible for the processing of data is:
Genesis Import GmbH
Gewerbering-Süd 8
97359 Schwarzach am Main
info@genesis-import.de

Phone: +49-9324-671190

Thank you for visiting our online shop. Protection of your privacy is very important to us. Below you will find extensive information about how we handle your data.


1. General Information and Principles of Data Processing


We are pleased that you are visiting our website. The protection of your privacy and of your personal data – so-called personal data – when using our website is a major concern for us.
According to Article 4 No. 1 of the GDPR, personal data includes all information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, but also your IP address.
Data which cannot be connected to your person, such as through anonymisation, is not considered personal data. The processing (e.g. collection, storage, reading, retrieval, use, transmission, deletion or destruction) of personal data in accordance with Article 4 No. 2 of the GDPR always requires a legal basis or your consent.
Personal data that has been processed must be deleted as soon as the purpose of the processing has been achieved and there are no legal retention obligations to be fulfilled.
Here you will find information on how we handle your personal data when you visit our website. To provide the functions and services of our website, it is necessary for us to collect personal data about you.
We will also explain to you the nature and scope of the respective data processing, the purpose and the corresponding legal basis, and the respective storage period.
This privacy policy applies only to this website. It does not apply to other websites to which we merely refer via hyperlink. We cannot assume responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please inform yourself directly on these websites about how your personal data is handled by those companies.

 

2. Provision and Use of the Website / Server Log Files

a) Nature and Scope of Data Processing

If you use this website without otherwise transmitting data to us (e.g. by registering or using the contact form), we collect technically necessary data via server log files, which are automatically transmitted to our server, including:
  • IP address
  • Date and time of the request
  • Name and URL of the retrieved file
  • Website from which access is made (referrer URL)
  • Access status / HTTP status code
  • Browser type
  • Language and version of the browser software
  • Operating system
    This access data is evaluated exclusively for the purpose of ensuring a trouble-free operation of the site and for improving our offer.

b) Purpose and Legal Basis

This processing is technically necessary in order to be able to display our website to you. We also use the data to ensure the security and stability of our website.
The legal basis for this processing is Article 6 (1) (f) of the GDPR. The processing of the aforementioned data is necessary for the provision of a website and therefore serves the legitimate interest of our company.
The evaluation of access data also serves to safeguard our overriding legitimate interests within the scope of a balancing of interests in a correct presentation of our offering.

c) Storage Duration

As soon as the aforementioned personal data is no longer required to display the website, it will be deleted. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Therefore, the user has no right to object in this respect. Further storage may occur in individual cases if required by law.
All access data is deleted at the latest one month after the end of your site visit.

d) Hosting

The services for hosting and displaying the website are partly provided by our service providers within the framework of processing on our behalf. Unless otherwise explained in this privacy policy, all access data as well as all data collected via the forms provided on this website are processed on their servers.
Our service providers are based and/or use servers in the following countries, for which the European Commission has determined by decision an adequate level of data protection: Canada, New Zealand, Japan, United Kingdom, USA.
The adequacy decision for the USA serves as the basis for data transfers to third countries, provided the respective service provider is certified.
Until our service providers are certified, data transfers continue to be based on the following foundation: Standard contractual clauses of the European Commission.
Our service providers are also based in and/or use servers in countries such as Australia, India and Singapore.
For these countries, there is no adequacy decision by the European Commission. Our cooperation with these service providers is based on the following safeguards: Standard contractual clauses of the European Commission.

3. Data Processing for Contract Execution and for Contact Purposes

Note on Pre-Contractual Data Processing:
In the context of pre-contractual measures (e.g. request for quotation, communication prior to concluding a contract), we also process personal data such as your name, contact details or other voluntarily provided information. This is carried out pursuant to Article 6 (1) (b) of the GDPR for the implementation of pre-contractual measures.
If you have provided explicit consent, the processing is additionally based on Article 6 (1) (a) of the GDPR.
The data will be deleted as soon as it is no longer required for the aforementioned purpose and there are no legal retention obligations. If such obligations exist (e.g. under the German Commercial Code or the Fiscal Code), the data will be deleted after expiry of these periods.

a) Data Processing for Contract Execution

For the purpose of contract execution (including enquiries and handling of any existing warranty and performance disruption claims as well as any statutory update obligations), pursuant to Article 6 (1) Sentence 1 (b) of the GDPR, we collect personal data if you voluntarily provide it to us as part of your order. Mandatory fields are marked as such, because in these cases we necessarily require the data for contract processing and cannot send the order without this information. Which data is collected is evident from the respective input forms.
Further information on the processing of your data, in particular the disclosure to our service providers for order, payment and shipping processing, can be found in the following sections of this privacy policy.
After the contract has been fully executed, your data will be restricted for further processing and deleted after the tax and commercial retention periods have expired in accordance with Article 6 (1) Sentence 1 (c) of the GDPR, unless you have expressly consented to further use of your data pursuant to Article 6 (1) Sentence 1 (a) of the GDPR or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this policy.
Inventory Management System
For order and contract processing, we use inventory management systems of external service providers. Our service providers act on our behalf within the framework of commissioned processing. If you have questions about our service providers and the basis of our cooperation with them, please contact us via the means of communication described in this privacy policy.

b) Customer Account

If you have given your consent pursuant to Article 6 (1) Sentence 1 (a) of the GDPR by choosing to open a customer account, we will use your data for the purpose of opening the customer account and for storing your data for future orders on our website. Deleting your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data pursuant to Article 6 (1) Sentence 1 (a) of the GDPR or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

c) Contacting Us

In the context of customer communication, we collect personal data in order to process your enquiries pursuant to Article 6 (1) Sentence 1 (b) of the GDPR, if you voluntarily provide this data when contacting us (e.g. via contact form or email). Mandatory fields are marked as such because in these cases we necessarily require the data to process your contact request. Which data is collected is evident from the respective input forms. After your enquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data pursuant to Article 6 (1) Sentence 1 (a) of the GDPR or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

4. Data Processing for the Purpose of Shipping Fulfilment

In order to fulfil the contract pursuant to Article 6 (1) Sentence 1 (b) of the GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.
The same applies to the transfer of data to our manufacturers or wholesalers in cases where they handle the shipment for us (drop shipping). They are considered shipping service providers within the meaning of this privacy policy.
Disclosure of Data to Shipping Service Providers for the Purpose of Delivery Notification
If you have given us your explicit consent during or after your order, we will, based on this consent pursuant to Article 6 (1) Sentence 1 (a) of the GDPR, pass on your telephone number to the selected shipping service provider so that they can contact you prior to delivery for the purpose of announcing or coordinating the delivery.
Consent can be withdrawn at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address provided below. After withdrawal, we will delete the data you have provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.
United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany
Dachser SE
Industriestraße 5
Kürnach
Germany

5. Data Processing for Payment Transactions 

a) Data Disclosure to Third Parties

We only disclose your personal data to third parties if:
  • you have given your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR;
  • this is legally permissible and necessary pursuant to Art. 6 para. 1 lit. b GDPR for the fulfilment of a contractual relationship with you or for the implementation of pre-contractual measures;
  • there is a legal obligation to disclose pursuant to Art. 6 para. 1 lit. c GDPR (e.g. to tax authorities, social security institutions, health insurance funds, supervisory authorities or law enforcement agencies);
  • disclosure is necessary pursuant to Art. 6 para. 1 lit. f GDPR to safeguard legitimate interests, provided that your interests or fundamental rights and freedoms do not prevail;
  • we make use of external service providers pursuant to Art. 28 GDPR (so-called processors) who have been contractually obliged to comply with data protection requirements.
We use such service providers in particular in the following areas:
  • IT services (e.g. hosting, maintenance of IT systems),
  • Logistics (e.g. shipping service providers),
  • Telecommunications (e.g. newsletter distribution or customer communication).
In the case of transfer to entities in third countries, i.e. outside the EU or the EEA, we ensure that these entities treat your personal data with the same care as within the EU. A transfer only takes place if there is an adequacy decision by the EU Commission or if appropriate safeguards – in particular the EU Standard Contractual Clauses – have been agreed.
For the processing of payments in our online shop, we cooperate with the following partners: technical service providers, credit institutions, and payment service providers.

b) Data Processing for Transaction Handling

Depending on the selected payment method, we forward the data necessary for processing the payment transaction to our technical service providers acting on our behalf as processors, or to the commissioned credit institutions or the selected payment service provider, insofar as this is necessary for the handling of the payment. This serves the fulfilment of the contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.
In some cases, the payment service providers collect the data required for the processing of the payment themselves, e.g. via their own website or through a technical integration in the order process. The privacy policy of the respective payment service provider applies in this regard.
If you have any questions about our payment processing partners and the basis of our cooperation with them, please contact us via the contact option described in this privacy policy.

c) Data Processing for Fraud Prevention and Optimisation of Our Payment Processes

Where applicable, we provide our service providers with additional data which they, together with the data necessary for payment processing, use on our behalf as processors for the purpose of fraud prevention and the optimisation of our payment processes (e.g. invoicing, handling of disputed payments, support of accounting). This serves, pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, to safeguard our overriding legitimate interests in protecting against fraud and in efficient payment management.

6. Use of Cookies

a) Type, Scope and Purpose of Data Processing

We use cookies. Cookies are small files that are sent from our web server to your device's browser during your visit to our website and stored there.
Some functions of our website cannot be offered without the use of technically necessary cookies. These are strictly required to provide you with the expressly requested telemedia service. The storage of or access to information already stored in your device is legally permissible for this purpose and does not require separate consent.
Other cookies enable us to carry out various analyses. For example, some cookies can recognise the browser you are using upon your next visit to our website and transmit different information to us. This includes, in particular, the collection and processing of your IP address, the time of your visit, device and browser information, and information about your use of our website (e.g. contents of the shopping cart).
We use this information to make our online offering more user-friendly and effective, for example by saving your preferred settings (e.g. country and language settings) or tracking your use of our website. We also use cookies for web analytics, online marketing, and to meet legal obligations (e.g. to provide evidence of your consent).
Please note that consent is required for non-essential cookies. If you do not give your consent, some features of our website may be limited. Any consent you have given remains valid until you change or withdraw it via your device settings.
Types of Cookies:
  • Temporary Cookies / Session Cookies: Automatically deleted once you close your browser. They allow us to recognise your session ID and assign requests to your session.
  • Permanent Cookies: Stored for a longer period and can provide information again on your next visit. The storage duration varies per cookie. You can delete them via your browser settings.
  • Third-party Cookies:
    • Analytical Cookies: Monitor (anonymised) user behaviour.
    • Advertising Cookies: Track user behaviour for advertising and marketing purposes.
    • Social Media Cookies: Enable connections to social networks and sharing of content.

b) Configuring Browser Settings

Most browsers are set by default to accept cookies. You can change this setting and, for example, only accept certain cookies or block all of them. You can also delete stored cookies or set your browser to notify you before cookies are saved. Please note that disabling cookies may result in limited functionality of the website.
Cookie settings for your browser can be found at the following links:
  • Microsoft Edge
  • Safari
  • Chrome
  • Firefox
  • Opera
Note: Disabling cookies may itself require storing a permanent cookie on your device. If this cookie is deleted, you may have to disable cookies again.
Withdrawal of Your Consent: If you have consented to the use of non-essential cookies pursuant to Art. 6 para. 1 lit. a GDPR, you may withdraw your consent at any time, e.g. by sending a message to the contact option provided in the imprint or this privacy policy.

c) Legal Basis

The legal basis for processing personal data when using technically necessary cookies is Art. 6 para. 1 lit. f GDPR (legitimate interest). For all other cookies, processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.

d) Storage Duration

Once the data collected via cookies is no longer necessary for the purposes described above, it is deleted. Longer storage only takes place if required by law.

e) Use of Third-party Technologies (Cookies and Similar Technologies)

We use cookies and other technologies from third-party providers on our website. Unless otherwise stated for individual technologies, this is done based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. After the purpose has been fulfilled and the use of the respective technology has ended, the data collected in this context is deleted. You may withdraw your consent at any time with future effect. Further information can be found in this section.

7. Tracking and Analysis Tools

a) Use of Adobe Services

We use technologies from Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland ("Adobe"). The information collected automatically by Adobe technologies about your use of our website is generally transmitted to and stored on a server of Adobe, Inc., 345 Park Avenue, San Jose, CA 95110-2704, USA. IP addresses are anonymised by appropriate settings. Data processing is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR.
Adobe Fonts: To ensure uniform presentation of fonts on our website, data (IP address, time of visit, device and browser information) is transmitted to and processed by Adobe.

b) Use of Google Services

We use various technologies from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information collected through Google technologies is generally transmitted to and stored on servers of Google LLC in the USA. Data processing is carried out partly on the basis of a data processing agreement and partly on the basis of joint responsibility pursuant to Art. 26 GDPR.

Google Analytics: To analyse website usage, data (IP address, time of visit, device and browser information, usage behaviour) is collected and pseudonymised. The IP address is stored within the EU for location determination and then deleted.
Google Ads (Conversion Tracking): If you visit our website via a Google ad, we use cookies to track your behaviour on the site (e.g. newsletter registration, page visits) to evaluate the effectiveness of our campaigns.
Google Maps: For displaying geographical maps, Google collects data such as IP address and location data. We have no control over subsequent data processing by Google.
Google Tag Manager: Enables the management of various tags and services on our website. Personal data such as IP address may be processed. Processing is based on a data processing agreement.
Google AdSense: We use the online advertising service Google AdSense, which can present you with advertising tailored to your interests. Google AdSense is a web analytics service provided by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use this service to show you advertising that may be of interest to you in order to make our website more interesting for you. For this purpose, statistical information about you is collected, which is processed by our advertising partners. These advertisements can be identified by the "Google Ads" notice in the respective advertisement.
YouTube Video Plugin: To display videos, we use YouTube in extended data protection mode. Data (IP address, time, device type) is only transmitted when you actively play the video.

c) Use of Facebook/Meta Services

We use services from Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Facebook (by Meta)"). This includes the use of the Facebook Pixel, which collects pseudonymised data (e.g. IP address, device information, website activity) and transfers it to Meta. Within the framework of advanced matching, hashed data (e.g. name, email address) is used to identify individuals.
This data is used to generate usage statistics (Facebook Analytics), for targeted advertising (Facebook Ads, Custom Audiences) and for remarketing. Processing is carried out partly under joint responsibility (Art. 26 GDPR) and partly within a processing agreement.
Data transfers to Meta servers in third countries such as the USA are based on an adequacy decision of the EU Commission, provided certification exists. In other cases, we rely on the EU Standard Contractual Clauses.

d) Use of Cookie Consent Tools

Consentmanager
We have integrated the consent management tool "consentmanager" (www.consentmanager.net) from consentmanager AB, Håltgelvågen 1b, 72348 Västerås, Sweden, mail@consentmanager.net, on our website to request consent for data processing or the use of cookies or similar functions. Using "consentmanager," you have the option of granting or denying your consent for certain functionalities of our website, e.g., for the purpose of integrating external elements, integrating streaming content, statistical analysis, reach measurement, and personalized advertising. Using "consentmanager," you can grant or deny your consent for all functions, or grant your consent for individual purposes or functions. You can also change the settings you have made retrospectively. The purpose of integrating "consentmanager" is to allow users of our website to decide on the aforementioned matters and to offer the option of changing previously configured settings as part of their continued use of our website. When using "consentmanager," personal data and information about the end devices used (IP address, language, browser, etc.) are processed and sent to consentmanager AB. Information about the settings you have configured is also stored on your device.
The legal basis for processing is Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR, insofar as the processing serves to fulfill the statutory obligations to provide evidence for the granting of consent. Otherwise, Art. 6 (1) (f) GDPR is the relevant legal basis. Our legitimate interests in processing lie in storing user settings and preferences regarding the use of cookies and evaluating consent rates. Consent will be requested again no later than 24 months after the user settings have been made. The user settings made will then be stored again for this period unless you yourself delete the information about your user settings in the device capacities provided for this purpose.
You can object to processing if the processing is based on Art. 6 (1) (f) GDPR. Your right of objection exists for reasons arising from your particular situation. To object, please send an email to mail@consentmanager.net.


e) Use of WhatsApp

We offer you the opportunity to contact us via the WhatsApp messenger service. WhatsApp is a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
When using WhatsApp, in addition to so-called metadata that provides information about the circumstances of the communication (e.g., telephone number, time stamp), communication content may also be transmitted to WhatsApp outside the European Union.
WhatsApp undertakes to conclude so-called EU standard data protection clauses within the meaning of Art. 46 GDPR. Based on this contractual framework, recipients in third countries are also obliged to comply with a data protection standard that essentially corresponds to the European standard. However, it should be noted that actual compliance with the requirements arising from the EU standard data protection clauses cannot be guaranteed in every case (e.g., due to official access to the data in the recipient country).
The use of WhatsApp is voluntary. You can also contact us at any time via other communication channels, e.g., by email. The legal basis is your consent in accordance with Art. 6 (1) (a) GDPR.
Further information on data protection at WhatsApp:
https://www.whatsapp.com/privacy


8. Social Media

a) Social Buttons for Facebook (by Meta), Instagram (by Meta), Youtube, TikTok, Pinterest

Our website includes social buttons from social networks. These are embedded as HTML links only, so that no connection to the servers of the respective provider is established when you access our website. When you click on one of the buttons, the corresponding social network page opens in a new window of your browser. There you can, for example, click the like or share button.

b) Our Online Presence on Facebook (by Meta), Instagram (by Meta), YouTube, Pinterest

If you have given your consent to the respective social media provider in accordance with Art. 6 (1) (a) GDPR, when you visit our online presence on the social media mentioned above, your data will be automatically collected and stored for market research and advertising purposes, from which user profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are usually used for this purpose. For detailed information on the processing and use of data by the respective social media provider, as well as a contact option and your rights and settings options for the protection of your privacy, please refer to the provider's privacy policies linked below. Should you still require assistance in this regard, please contact us.
Facebook (by Meta) is provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (hereafter "Meta Platforms Ireland ") The information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is usually transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. Data processing in the context of a visit to a Facebook (by Meta) fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (information on Insights data) can be found here.
Our service providers are located and/or use servers in the following countries, for which the European Commission has established an adequate level of data protection by decision: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.
The adequacy decision for the USA applies as the basis for third country transfers, provided that the respective service provider is certified. Certification is available.
Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.
There is no adequacy decision for these countries by the European Commission. Our cooperation with them is based on these safeguards:  Standard data protection clauses of the European Commission.
Instagram (by Meta) is provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (hereafter "Meta Platforms Ireland ") The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is typically transferred to and stored on a server at Meta Platforms Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing in the context of a visit to an Instagram (by Meta) fan page is based on an agreement between joint controllers in accordance with art. 26 DSGVO. Further information (information on Insights data) can be found here.
Our service providers are located and/or use servers in the following countries, for which the European Commission has established an adequate level of data protection by decision: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina:
The adequacy decision for the USA applies as the basis for third country transfers, provided that the respective service provider is certified. Certification is available.
Our service providers are located and/or use servers in these countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico:
There is no adequacy decision for these countries by the European Commission. Our cooperation with them is based on these safeguards:  Standard data protection clauses of the European Commission.
YouTube is provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (hereafter "Google"). The information automatically collected by Google about your use of our online presence on YouTube is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there.
Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has established by decision an adequate level of data protection.
Our service providers are located and/or use servers in countries outside the EU and the EEA. For these countries there is no adequacy decision by the European Commission. Our cooperation is based on standard data protection clauses adopted by the European Commission.
Pinterest is provided by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (hereafter "Pinterest"). The information automatically collected by Pinterest about your use of our online presence on Pinterest is usually transferred to and stored on a server of Pinterest, Inc, 505 Brannan St, San Francisco, CA 94107, USA.
Our service providers are located and/or use servers in countries outside the EU and the EEA for which the European Commission has established by decision an adequate level of data protection.
Our service providers are located and/or use servers in countries outside the EU and the EEA. For these countries there is no adequacy decision by the European Commission. Our cooperation is based on standard data protection clauses adopted by the European Commission.
Tik Tok: On our TikTok channel, we present our services in short form and inform you about ongoing promotions. In doing so, personal data of the user is processed by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok"). TikTok's privacy policy can be found at: https://www.tiktok.com/legal/privacy-policy?lang=de-DE
TikTok's analytics features allow us to measure the performance of our channel. For this purpose, TikTok provides us with the following information in statistical form: Audiences (e.g. characteristics of target groups for the delivery of advertisements such as age, gender and country), interactions (e.g. likes, duration of playback of videos), referral information (e.g. from where the users came to the video), conclusions about individual users and access to individual user profiles by us are not possible.
To learn more about TikTok's analytics features, visit: https://ads.tiktok.com/marketing_api/docs?rid=bfu8bedbv2c&id=100509

9. Newsletter

a) Type and Scope of Data Processing

On our website, you have the option to subscribe to a free regular email newsletter. In order to send the newsletter regularly, we require your email address.
We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter if you have explicitly confirmed that you consent to receiving newsletters. We will then send you a confirmation email asking you to confirm that you wish to receive our newsletter by clicking on the relevant link.
This ensures that only you as the owner of the specified email address can register for the newsletter. Your confirmation must be provided promptly after receiving the confirmation email, otherwise your newsletter registration will be automatically deleted from our database.
If you subscribe to the newsletter, we collect and store the data you enter in the input form (e.g. surname, first name, email address).
When registering for the newsletter, we also store the IP address entered by your internet service provider (ISP) as well as the date and time of registration, to enable us to trace possible misuse of your email address at a later date. For the confirmation email sent for verification purposes (double opt-in), we also store the date and time of the click on the confirmation link and the IP address provided by your ISP.
If you have additionally given us your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR to analyse our newsletters, we also analyse your interaction with our newsletter by measuring, storing and evaluating open rates and click rates for the purpose of future newsletter campaigns (“newsletter tracking”).
The emails sent for this purpose contain one-pixel technologies (e.g. web beacons or tracking pixels) that are stored on our website. For analysis, we link in particular the following "newsletter data":
  • the page from which the page was requested (so-called referrer URL),
  • the date and time of access,
  • the description of the type of web browser used,
  • the IP address of the requesting device,
  • the email address,
  • the date and time of registration and confirmation,
  • and the one-pixel technologies with your email address or your IP address and, where applicable, an individual ID. Links contained in the newsletter may also include this ID.
Newsletter tracking can be deactivated at any time by sending a message to the contact option provided below or via a designated link in the newsletter.

b) Purpose and Legal Basis

The data collected during the newsletter registration is used exclusively for marketing purposes via the newsletter. The processing of your email address for newsletter dispatch is based on your freely given and revocable consent according to Art. 6 para. 1 lit. a GDPR and § 7 para. 2 no. 3 UWG.
In addition, processing is carried out pursuant to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in documenting the required consent.

c) Storage Duration

Your email address will be stored for as long as you are subscribed to the newsletter. After unsubscribing from the newsletter, your email address will be deleted from the recipient list, unless you have explicitly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

10. Application Opportunity

a) Type and Scope of Data Processing

You can apply via our website or by email. When you apply, we collect and store the data you enter into the input form or send to us by email.

b) Purpose and Legal Basis

We process your data solely for the purpose of handling your application. There is no transfer to third parties. The legal basis for the processing is Art. 88 para. 1 GDPR in conjunction with § 26 BDSG and additionally Art. 6 para. 1 lit. b GDPR. If you grant us consent to be included in our applicant pool, the legal basis is Art. 6 para. 1 lit. a GDPR.

c) Storage Duration

If we are unable to offer you a position, we will store your data for a maximum of six months after the application process has ended, taking into account § 61b para. 1 ArbGG in conjunction with § 15 AGG. The start of the period is the date on which the rejection letter is received. If you have granted us consent to be included in our applicant pool, we will store your data for a maximum of two years.

d) Data Disclosure

Your data will only be made available to departments involved in the decision-making process (relevant HR and specialist departments, management, works council). Furthermore, we are obliged to transfer your data to public bodies and institutions (e.g. public prosecutor’s office, police, supervisory authorities, tax office, social security agencies, etc.) when required.
Other data recipients may be those entities to whom you have granted us consent to transfer your data.

11. Registration Option

a) Type and Scope of Data Processing

On our website, you can register. When registering, we collect and store the data you enter into the input form (e.g. surname, first name, email address). There is no transfer to third parties.

b) Purpose and Legal Basis

Your registration is necessary for using certain content and services on our website, or for fulfilling a contract or implementing pre-contractual measures. After registration, you may at any time modify or completely delete your personal data stored at the time of registration.
The legal basis for processing is, in the case of your consent, Art. 6 para. 1 lit. a GDPR. If your registration is intended to prepare for a contract, Art. 6 para. 1 lit. b GDPR is an additional legal basis.

c) Storage Duration

The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Legal retention periods remain unaffected.

12. Contact Form

a) Type and Scope of Data Processing

On our website, we offer you the opportunity to contact us via a provided form. During the submission process of your enquiry via the contact form, we refer to this privacy policy to obtain your consent.
If you use the contact form, the following personal data will be processed:
  • First name
  • Surname
  • Email address
  • Telephone number
  • Subject
  • Additional information
  • Content of the message

b) Purpose and Legal Basis

Providing your email address serves the purpose of responding to your enquiry by email. When using the contact form, your personal data will not be disclosed to third parties.
The legal basis for processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR, based on the consent you provide voluntarily and which you may revoke at any time with effect for the future.

c) Storage Duration

The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for the data storage no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions – in particular retention periods under the German Commercial Code (HGB) or the Fiscal Code (AO) – remain unaffected.

13. Contact Options via Email

a) Type and Scope of Data Processing

You can contact us via email. In doing so, we collect only the email address used to contact us and any personal data you voluntarily provide in your message.

b) Purpose and Legal Basis

The purpose of data processing is to enable us to respond appropriately to your enquiry. The legal basis is Art. 6 para. 1 lit. f GDPR. There is a legitimate interest in processing the personal data mentioned above in order to handle your concern appropriately.

c) Storage Duration

The duration of storage of the above-mentioned data depends on the background of your contact. Your personal data will be regularly deleted once the purpose of the communication no longer applies and storage is no longer necessary. This may result, for example, from completing the processing of your enquiry.

14. Contact Options and Your Rights

a) Your Rights

As a data subject, you have the following rights:
  • In accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent described therein;
  • In accordance with Art. 16 GDPR, the right to demand the correction of inaccurate or the completion of your personal data stored by us without delay;
  • In accordance with Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is necessary:
    • for exercising the right of freedom of expression and information;
    • for compliance with a legal obligation;
    • for reasons of public interest; or
    • for the establishment, exercise or defence of legal claims;
  • In accordance with Art. 18 GDPR, the right to request the restriction of processing of your personal data where:
    • the accuracy of the data is contested by you;
    • the processing is unlawful, but you oppose its erasure;
    • we no longer need the data, but you require it for the establishment, exercise or defence of legal claims; or
    • you have objected to processing pursuant to Art. 21 GDPR;
  • In accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller;
  • In accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your habitual residence, workplace or our company headquarters.

Right to Object

Where we process personal data as explained above in order to safeguard our legitimate interests that prevail in a balancing of interests, you may object to this processing with future effect. If processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. If processing is carried out for other purposes, you only have the right to object on grounds relating to your particular situation.
After you exercise your right to object, we will not continue to process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves the establishment, exercise or defence of legal claims.
This does not apply if the processing is for direct marketing purposes. In that case, we will no longer process your personal data for that purpose.

b) Contact Options

If you have any questions regarding the collection, processing or use of your personal data, or if you wish to request information, correction, restriction or deletion of data, or revoke any consents given or object to a particular use of data, please contact us directly using the contact details provided in our legal notice.

München, 31.03.2025
Recht 24/7 Schröder Rechtsanwaltsgesellschaft mbH