Privacy policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for entering into a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only where the following processing activities do not state otherwise.

“Personal data” means any information relating to an identified or identifiable natural person.

Server log files

You can visit our websites without providing information about yourself. Each time our website is accessed, usage data is transmitted by your internet browser to us or to our web host/IT service provider and stored in log data, known as server log files. This data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.

Processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in ensuring the uninterrupted operation of our website and improving our services.

Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the United States. The European Commission has adopted an adequacy decision for Canada. For the United States, an adequacy decision exists in the form of the EU-US Data Privacy Framework, also known as the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This transfer is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.

Contact

Controller

You may contact us at any time. The controller responsible for data processing is: Max Hoch, Flugplatzstr. 12b, 97437 Haßfurt, Germany, telephone 09521 6229132, email info@hair2heart.de.

Contact initiated by the customer by email

If you contact us by email on your own initiative for business purposes, we collect your personal data, such as your name, email address and message, only to the extent that you provide it. The purpose of processing is to handle and respond to your enquiry.

If the contact concerns pre-contractual measures, such as advice relating to a potential purchase or preparation of an offer, or concerns a contract already concluded between you and us, processing is based on Article 6(1)(b) GDPR.

If contact is made for other reasons, processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Article 6(1)(f) GDPR.

We use your email address only to process your enquiry. Your data is subsequently deleted in accordance with statutory retention periods unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we collect your personal data, such as your name, email address and message, only to the extent that you provide it. Processing serves the purpose of contacting you.

If the contact concerns pre-contractual measures, such as advice relating to a potential purchase or preparation of an offer, or concerns a contract already concluded between you and us, processing is based on Article 6(1)(b) GDPR.

If contact is made for other reasons, processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Article 6(1)(f) GDPR.

We use your email address only to process your enquiry. Your data is subsequently deleted in accordance with statutory retention periods unless you have consented to further processing and use.

Customer account and orders

Customer account

When you open a customer account, we collect your personal data to the extent specified there. Processing serves to improve your shopping experience and simplify order processing. Processing is based on your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out before withdrawal. Your customer account will then be deleted.

Collection, processing and disclosure of personal data for orders

When you place an order, we collect and process your personal data only insofar as this is necessary to fulfil and process your order and respond to your enquiries. Providing the data is necessary to conclude the contract. If it is not provided, no contract can be concluded. Processing is based on Article 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data may be disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, order-processing service providers and IT service providers. In all cases, we strictly comply with statutory requirements. The scope of data transmission is limited to the necessary minimum.

Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the United States. The European Commission has adopted an adequacy decision for Canada. For the United States, the TADPF applies. Shopify is not certified under the TADPF. This transfer is based on contractual obligations comparable to the European Commission’s Standard Contractual Clauses.

Reviews and advertising

Data collection when posting a comment or review

When you comment on or review an article or post, we collect your personal data, such as your name, email address and comment, only to the extent that you provide it. Processing serves to enable and display comments and reviews.

By submitting the comment or review, you consent to the processing of the transmitted data. Processing is based on your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out before withdrawal. Your personal data will then be deleted.

Trustami customer reviews

The Trustami trust seal is integrated into this website to display collected reviews and social-media feedback. This serves our legitimate interest in the optimal marketing of our offering on our own website in accordance with Article 6(1)(f) GDPR.

When the Trustami trust seal is loaded, the web server automatically stores access data in a server log file. This includes the name of the website and file accessed, the date and time of access, your shortened IP address, the amount of data transferred, confirmation of successful retrieval, browser type, operating system, referrer URL and requesting provider. This access data is not analysed and is automatically overwritten no later than seven days after the end of your visit.

The Trustami trust seal and the services promoted through it are provided by Trustami GmbH, Schröderstraße 5, 10115 Berlin, Germany. The processing of data collected by Trustami is governed by Trustami’s privacy policy at www.trustami.com/datenschutz.

Use of the email address for newsletters

We use your email address to send information and offers by newsletter where you have expressly consented. Processing is used exclusively for advertising. For this purpose, we process your email address and any other information you voluntarily provide when subscribing to our newsletter.

Processing is based on your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

You can unsubscribe at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address on a blocklist to prevent future newsletters being sent to you. This storage is based on Article 6(1)(f) GDPR and our and your legitimate interest in preventing renewed use of your email address for our newsletter. You have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data.

Use of the email address for direct advertising

We use the email address obtained in connection with the sale of goods or services to send electronic advertising for our own goods or services similar to those you have already purchased from us, unless you have objected. Providing the email address is necessary for concluding the contract. If it is not provided, no contract can be concluded. Processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in direct advertising.

You may object to the use of your email address at any time by notifying us. The contact details for exercising your right to object are provided in our Legal Notice. You may also use the link included in the advertising email. No costs are incurred other than transmission costs at the basic rate.

Shipping providers and merchandise management

Disclosure of the email address to shipping companies for shipment-status information

We disclose your email address to the transport company during performance of the contract if you expressly consented during checkout. This disclosure serves to inform you by email about the shipment status. Processing is based on your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of processing carried out before withdrawal.

Use of an external merchandise-management system

For contract processing, we use an external merchandise-management system as part of commissioned processing. The personal data collected with your order is transferred to plentysystems AG, Johanna-Waescher-Straße 7, 34131 Kassel, Germany.

The processing of your personal data serves to perform the contract concluded with you and is based on Article 6(1)(b) GDPR.

Payment service providers and credit information

Use of PayPal

We use the PayPal payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. Processing serves to offer you payment via this service. If you select and use PayPal, the data required for payment processing is transmitted to PayPal to perform the contract using your chosen payment method. Processing is based on Article 6(1)(b) GDPR.

All PayPal transactions are subject to PayPal’s privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Amazon Payments

We use the Amazon Payments service provided by Amazon Payments Europe s.c.a., 38 avenue John F. Kennedy, L-1855 Luxembourg. Processing serves to offer you payment via Amazon Payments.

To integrate this payment service, Amazon Payments must collect, store and analyse data when the website is accessed, such as the IP address, device type, operating system, browser type and device location. Cookies may also be used, enabling your browser to be recognised.

Processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in offering a customer-oriented selection of payment methods. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

If you select and use Amazon Payments, the data required for payment processing is transmitted to Amazon Payments to perform the contract using the chosen payment method. This processing is based on Article 6(1)(b) GDPR. Further information is available at https://pay.amazon.com/de/help/201212490.

Use of Klarna payment options

We use the payment service provided by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. If you select and use payment via Klarna, the data required for payment processing is transmitted to Klarna to perform the contract using the chosen payment method. This processing is based on Article 6(1)(b) GDPR.

Cookies may be stored to enable recognition of your browser. Processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in offering a customer-oriented selection of payment methods. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

“Pay Later” (invoice), “Pay Now” (direct debit, credit card or instant bank transfer), “Financing” (instalment purchase)

For individual payment methods, Klarna reserves the right to obtain credit information from credit agencies using mathematical and statistical methods.

For this purpose, Klarna may transmit personal data required for identity and creditworthiness checks, such as first and last name, address, gender, email address, IP address and order-related data, to a credit agency. Klarna uses the information received about the statistical probability of payment default to make a balanced decision on establishing, performing or terminating the contractual relationship. The credit report may include probability values, known as scores, calculated using scientifically recognised mathematical and statistical methods and based, among other things, on address data. Your legitimate interests are taken into account in accordance with statutory requirements.

Processing serves the purpose of a creditworthiness check when initiating a contract and is based on Article 6(1)(f) GDPR and the overriding legitimate interest in protection against payment default where Klarna provides advance performance. You have the right, on grounds relating to your particular situation, to object to this processing at any time by notifying Klarna. Providing the data is necessary to conclude the contract using your chosen payment method. If it is not provided, the contract cannot be concluded using that payment method.

Further information, particularly about the credit agencies to which Klarna transmits personal data, is available at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies. General information about Klarna is available at https://www.klarna.com/de/. Klarna processes your personal data in accordance with applicable data-protection law and its privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

Use of the Mollie payment service provider

We use Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, the Netherlands, for payment processing. Processing serves to offer you different payment methods through Mollie. If you select one of Mollie’s payment options, the data required for payment processing is transmitted to Mollie. This includes payment data, such as your bank account or credit card number, your IP address, internet browser and device type and, in some cases, your first and last name, address and information about the goods or services purchased from us. Processing is based on Article 6(1)(b) GDPR. Further information is available at https://www.mollie.com/de/legal/privacy.

Cookies

Our website uses cookies. Cookies are small text files stored in a user’s internet browser or by the browser on the user’s computer system. When a user visits a website, a cookie may be stored on the operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is visited again.

Cookies are stored on your device, so you have full control over their use. By selecting the appropriate technical settings in your browser, you can be notified before cookies are placed, decide whether to accept them in each case and prevent cookies and the data they contain from being stored or transmitted. Cookies already stored can be deleted at any time. Please note that you may then be unable to use all website functions in full.

Information on managing and disabling cookies in the most common browsers:

• Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Microsoft Edge: Microsoft Edge cookie settings
• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
• Safari: Safari cookie settings

Technically necessary cookies

Unless otherwise stated in this Privacy Policy, we use only technically necessary cookies to make our services more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser after a page change and provide services. Some website functions cannot be provided without cookies.

Cookies or comparable technologies are used on the basis of Section 25(2) TDDDG. Personal data is processed on the basis of Article 6(1)(f) GDPR and our overriding legitimate interest in ensuring optimal website functionality and a user-friendly and effective design of our services. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

Use of Cookie Consent Manager CCM19

We use the CCM19 Cookie Consent Manager provided by Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany. This plug-in enables you to consent to data processing through the website, particularly the setting of cookies, and to withdraw consent already given. Processing serves to obtain and document the necessary consent and thereby comply with legal obligations.

Cookies are used for this purpose. Information such as a randomly assigned ID, consent status and the date and time of consent or refusal may be collected, stored and, where applicable, transmitted to CCM19. Data is stored for one year and one month and then deleted. It is not disclosed to other third parties. Processing is necessary for compliance with a legal obligation and is based on Article 6(1)(c) GDPR. Further information is available at https://www.ccm19.de/datenschutzerklaerung.html.

Analytics and advertising tracking

Use of Google Analytics 4

We use Google Analytics provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing serves to analyse this website and its visitors and for marketing and advertising purposes. On behalf of the website operator, Google uses the information obtained to evaluate your use of the website, compile reports on website activity and provide other services relating to website and internet use.

Information collected may include the IP address, date and time of the page view, click path, browser and device information, pages visited, referrer URL, location data and purchasing activity. Google may link your data with other data, such as your search history, personal accounts, usage data from other devices and any other data available to Google.

Google truncates the IP address beforehand within Member States of the European Union or other states party to the Agreement on the European Economic Area.

Processing is based on your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

We also use Google Signals. Google Signals enables cross-device tracking where you have enabled personalised advertising in your account settings and linked your devices to your Google account. This makes it possible to identify the device on which you search for products and whether you later return on another device to complete a purchase.

Cross-device reports contain only aggregated data. We receive only statistics generated using Google Signals. You can disable “personalised ads” in your Google account to prevent cross-device collection and storage. Further information: https://support.google.com/ads/answer/2662922?hl=de and https://support.google.com/analytics/answer/7532985?hl=de.

Information about your use of this website is generally transmitted to and stored on a Google server in the United States. The TADPF applies to the United States. Google is certified under the TADPF and has undertaken to comply with European data-protection principles. Both Google and US government authorities may have access to your data.

Further information is available at https://policies.google.com/technologies/partner-sites, https://policies.google.com/privacy?hl=de&gl=de and https://business.safety.google/privacy/.

Use of Meta Pixel

We use Meta Pixel provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Meta and we are joint controllers for the collection of your data when the service is integrated and its transmission to Meta. The respective responsibilities are set out in a joint-processing agreement at https://de-de.facebook.com/legal/terms/businesstools.

We are responsible in particular for complying with the information obligations under Articles 13 and 14 GDPR, the correct technical implementation and configuration under Article 32 GDPR and the obligations under Articles 33 and 34 GDPR insofar as a personal-data breach concerns our obligations under the agreement. Meta is responsible for enabling data-subject rights under Articles 15 to 20 GDPR, the security of the service under Article 32 GDPR and the obligations under Articles 33 and 34 GDPR insofar as a breach concerns Meta’s obligations.

The application serves to target website visitors with interest-based advertising on Facebook and Instagram. The remarketing tag establishes a direct connection to Meta’s servers when you visit the website and communicates which pages you have visited. Meta assigns this information to your Facebook and/or Instagram account. When you visit these social networks, personalised advertisements may be displayed.

The application also serves to create conversion statistics. We learn the total number of users who clicked an advertisement and were redirected to a page containing a conversion-tracking tag and the actions taken afterwards. We do not receive information that personally identifies individual users.

Your data may be transferred to the United States. Meta is certified under the TADPF. Processing is based on your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal. You can disable the “Custom Audiences” remarketing function. Further information is available in Meta’s privacy policy.

Use of Google Ads conversion tracking

We use the Google Ads online advertising programme and its conversion tracking provided by Google Ireland Limited. When you click an advertisement placed by Google, a conversion cookie is stored on your device. These cookies have limited validity, contain no personal data and are not used for personal identification. If you visit certain pages before the cookie expires, Google and we can recognise that you clicked the advertisement and were redirected to that page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of different Ads customers.

The information obtained through the conversion cookie serves to compile conversion statistics. We learn the total number of users who clicked an advertisement and were redirected to a page containing a conversion-tracking tag, but we do not receive information that personally identifies individual users.

Your data may be transferred to Google LLC servers in the United States. Google is certified under the TADPF. Cookies or comparable technologies are used with your consent on the basis of Section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. Personal data is processed with your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal. Further information: https://www.google.de/policies/privacy/ and https://business.safety.google/privacy/.

Use of Google remarketing or similar audiences

We use Google Ireland Limited’s remarketing or similar-audiences function. This application serves to analyse visitor behaviour and interests. Google uses cookies to analyse website use as a basis for interest-based advertising. The cookies record visits and anonymised usage data; no personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, advertisements may be shown that are likely to reflect product and information areas previously viewed.

Your data may be transferred to Google LLC servers in the United States. Google is certified under the TADPF. Cookies or comparable technologies and personal data are processed with your consent on the basis of Section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. You may withdraw your consent at any time. Further information: https://www.google.com/privacy/ads/ and https://business.safety.google/privacy/.

Use of the Pinterest tag

We use the Pinterest tag provided by Pinterest Europe Limited, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. The application serves to target website visitors with interest-based advertising on Pinterest. The conversion tag establishes a direct connection to Pinterest’s servers when you visit the website and communicates which pages you have visited. If you are logged in to Pinterest, Pinterest may associate the information with your account and show personalised advertisements.

If you reach our website via a pin, a conversion cookie is stored on your device. It has limited validity, contains no personal data and is not used for personal identification. If you visit certain pages before the cookie expires, Pinterest and we can recognise that you clicked the pin. The information serves to compile conversion statistics and optimise our website. This may include the number of redirected users, category or product pages visited, search queries, shopping-cart contents and completed transactions.

Your data may be transferred to the United States. Pinterest is not certified under the TADPF. Transfer is based, among other things, on Standard Contractual Clauses: European Commission Standard Contractual Clauses.

Cookies or comparable technologies and personal data are processed with your consent on the basis of Section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. You may withdraw your consent at any time. Further information: https://policy.pinterest.com/de/privacy-policy.

Plug-ins and other services

Use of Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited. This application manages JavaScript and HTML tags used particularly to implement tracking and analytics tools. Processing serves to design and optimise our website according to requirements. Google Tag Manager itself does not store cookies or process personal data, but it can trigger other tags that collect and process personal data. Further information: Google Tag Manager use policy.

Use of Google reCAPTCHA

We use reCAPTCHA provided by Google Ireland Limited under a data-processing agreement. The check serves to distinguish human input from automated processing. Your input, IP address and any other data required for reCAPTCHA are transmitted to and processed by Google. Google processes the data within the European Union and may also transmit it to Google LLC servers in the United States. Google is certified under the TADPF.

Cookies or comparable technologies and personal data are processed with your consent on the basis of Section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Use of Google invisible reCAPTCHA

We use invisible reCAPTCHA provided by Google Ireland Limited to distinguish human input from automated processing. In the background, Google collects and analyses usage data to distinguish regular users from bots. Your input, IP address and any other required data are transmitted to and processed by Google.

The data is processed within the European Union and may also be transferred to the United States. Google is certified under the TADPF. Cookies or comparable technologies and personal data are processed with your consent on the basis of Section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. You may withdraw your consent at any time. Further information: Google reCAPTCHA and Google Privacy.

Use of Cloudflare

We use the Cloudflare CDN content-delivery network provided by Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, United States. This is a cross-regional network of servers in different data centres to which our web server connects and through which certain website content is delivered. Processing serves to optimise loading times and make our offering more user-friendly.

Information collected may include the IP address, system-configuration information and information about traffic to and from customer websites, known as server log files. Your data may be transferred to the United States. Cloudflare is certified under the TADPF.

Processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in a needs-based and targeted design of the website. You have the right, on grounds relating to your particular situation, to object at any time to this processing. Further information: Cloudflare privacy policy.

Use of Google Maps

We use Google Maps provided by Google Ireland Limited to display geographical information and interactive maps. When pages containing embedded maps are accessed, Google also collects, processes and uses visitor data. Your data may be transferred to the United States. Google is certified under the TADPF.

Cookies or comparable technologies and personal data are processed with your consent on the basis of Section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. You may withdraw your consent at any time. Further information is available in Google’s privacy policy. You can also change your settings in Google’s privacy centre to manage and protect data processed by Google.

Use of YouTube

We use the function for embedding YouTube videos provided by Google Ireland Limited. YouTube is affiliated with Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. Videos are displayed in an iFrame with enhanced privacy mode enabled. As a result, YouTube does not store information about website visitors until they play a video. Only when you watch a video is information transmitted to and stored by YouTube.

Your data may be transferred to the United States. YouTube is certified under the TADPF. Cookies or comparable technologies and personal data are processed with your consent on the basis of Section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. You may withdraw your consent at any time. Further information: https://www.youtube.com/t/privacy.

Use of Google Fonts

We use Google Fonts provided by Google Ireland Limited to display fonts consistently on our website. To load the fonts, a connection to Google servers is established when a page is accessed. Cookies may be used. Your IP address and information about your browser may be processed and transmitted to Google. This data is not linked to your Google account.

Your data may be transferred to the United States. Google is certified under the TADPF. Cookies or comparable technologies and personal data are processed with your consent on the basis of Section 25(1), sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. You may withdraw your consent at any time. Further information: Google policies and Google Fonts FAQ.

Data-subject rights and storage period

Storage period

After the contract has been fully processed, data is initially stored for the statutory warranty period. It is then retained in accordance with statutory retention periods, particularly under tax and commercial law, and deleted after those periods expire unless you have consented to further processing and use.

Rights of the data subject

If the statutory requirements are met, you have the rights under Articles 15 to 20 GDPR to access, rectification, erasure, restriction of processing and data portability. Under Article 21(1) GDPR, you also have the right to object to processing based on Article 6(1)(f) GDPR and to processing for direct-marketing purposes.

Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that your personal data is not being processed lawfully.

You may, among others, contact the supervisory authority responsible for us:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Telephone: +49 981 1800930
Fax: +49 981 180093800
Email: poststelle@lda.bayern.de

Right to object

If the processing described here is based on our legitimate interests under Article 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time with effect for the future.

After an objection, processing of the affected data will cease unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms or processing serves to establish, exercise or defend legal claims.

If personal data is processed for direct-marketing purposes, you may object at any time by notifying us. Following your objection, we will stop processing the affected data for direct marketing.