Privacy Policy

Status: 02.08.2023

The following data protection information applies to the online offer at https://flowersforsociety.com

 

Flowers for Society GmbH takes the concerns of data protection very seriously and wants to ensure that your privacy is protected by the use of Flowers for Society GmbH. We therefore collect, process and use your personal data only with your consent or if a legal provision permits this. We will explain to you below, which personal data we collect, save and use for you, and to which survey, storage and use you declare your consent.

 

NAME AND CONTACT DETAILS OF THE CONTROLLER

 

The responsible party is Flowers For Society GmbH, Jungfernstieg 34, 20354 Hamburg, it provides the FFS website, including the online store at the web address https://flowersforsociety.com. In connection with the website and the online store, personal data is processed by us. In the following data protection information, we inform you about the processing of personal data carried out by Flowers For Society GmbH, Jungfernstieg 34, 20354 Hamburg for the website https://flowersforsociety.com in accordance with the GDPR and the Federal Data Protection Act (BDSG 2018)

 

If you have any questions about this data protection information or generally about the processing of your data within the scope of this online offer, please contact: support@flowersforsociety.com

 

Section I. INFORMATION ON THE PROCESSING OF PERSONAL DATA

 

  1. PERSONAL INFORMATION

 

Personal data are all data that contain information about personal or factual circumstances of a particular or determinable customer. This includes, for example, the name, e-mail address, residential address, gender, date of birth, telephone number or age.

 

  1. PURPOSES OF THE COLLECTION AND STORAGE OF PERSONAL DATA

 

We need your personal data for the following purposes:

 

  • When you apply for a job at Flowers for Society,
  • Browser type and version,
  • Website or advertising campaign from which you visit us (Referrer URL),
  • Operating system used,
  • Websites of Flowers for Society you visit,
  • Date and time of your access.

 

  1. AUTOMATIC DATA COLLECTION WITH THE USE OF COOKIES AND STORAGE WITH OTHER DATA

 

Flowers for Society GmbH uses cookies when calling up its websites. A cookie is a small text file that is stored on your computer and allows you to analyze your use of our web pages. The following data are collected automatically by our computer system when our websites are accessed by means of cookies.

 

  • Your Internet address (IP address),
  • Browser type and version,
  • Website or advertising campaign from which you visit us (Referrer URL),
  • Operating system used,
  • Websites of Flowers for Society you visit,
  • Date and time of your access.

 

This data will be stored together with your other data, which you provide us with your consent.

Cookies are used to optimize our websites and our offers.

If you do not wish to use cookies, you can block the use in your browser. It can not be excluded that the functionality of our website will be affected.

If you do not wish to store the cookie data together with your other data, you can inform us according to § 5 of this data protection statement. 

 

  1. USE OF THE WEBSITE

 

When using the website, certain information is sent to the server of our website by the browser used on your end device for technical reasons. This data is stored and processed on our server. We process the data mentioned below for the purpose of providing the website content you have accessed, to ensure the security of the IT infrastructure used, for troubleshooting, to enable and simplify searching on the website and for cookie management.

 

  1. The following data is processed:

 

  • HTTP data HTTP data is protocol data that is technically generated when the website is called up via the Hypertext Transfer Protocol (Secure) (HTTP(S)): This includes IP address, type and version of your Internet browser, operating system used, the page accessed, the previously visited page (referrer URL), date and time of access. HTTP(S) data also accrue on servers of service providers (e.g. when retrieving third-party content).
  • Search function data This is data that you enter into the search functions of our website: This includes all information that you enter as search terms in the respective search form of the website.
  • Cookie setting dataThis includes the data you provide to manage the cookie settings for this website and data assigned to your terminal device when using the cookie settings management function: This includes your consents, your objections (opt-out) and, if applicable, your individual selection for the use of cookies on your end device.
  • Error dataThese are error messages from the server and individual applications that are stored.

 

  1. The legal basis for the processing is our legitimate interest pursuant to Article 6(1)(f) GDPR. Our legitimate interest is the provision of the content and search functions of the website accessed by the user and the management of the cookie settings made by the user, and also to ensure the security of the IT infrastructure used for the provision of the website, in particular to detect, eliminate and document faults (e.g. DDoS attacks) in an evidential manner.

 

  1. The data is actively provided by the user himself or automatically by the user-’s browser.

 

  1. Recipients of the personal data are IT service providers (e.g. hosting), which we use under an agreement for order processing. When using the service providers, data may be transferred to third countries outside the EU. The data transfer takes place on the basis of Art. 6 para. 1 letter f, 49 para. 1 p. 1 letter d GDPR is mandatory to ensure the security of our website and your user data.

 

  1. Data is stored in server log files in a form that allows the identification of the data subjects for a maximum period of 14 days, unless a security-relevant event occurs (e.g. a DDoS attack). In the event of a security-relevant event, server log files are stored until the security-relevant event has been eliminated and fully resolved. Search data is automatically deleted after 24 hours at the latest. Cookie management data is deleted after 6 months.

 

  1. It is not possible to use the website without disclosing personal data such as the IP address. Communication via the website without disclosing data is technically not possible.

 

  1. No automated decision-making takes place.

 

  1. USE OF ONLINE SHOP FOR ORDERS

 

  1. SHOPIFY STORE SOFTWARE

 

We use "Shopify" to host our store system and to present our offers and process contracts.

The legal basis is Art. 6 para. 1 lit. b) GDPR (contract initiation/contract processing).

"Shopify" is the service of a group of companies consisting of Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc, Shopify (USA) Inc, Shopify Commerce Singapore Pte. Ltd, and Shopify International Limited. To the extent we are located in the European Economic Area (EEA), processing is performed by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, hereinafter referred to only as "Shopify". However, due to the group of companies, it cannot be ruled out that processing also takes place in Canada and the USA, i.e. outside the EEA. In the case of data transfer to the Canadian Shopify Inc., however, an adequate level of data protection is guaranteed by adequacy decision of the European Commission.

 

Shopify thereby processes the following data on our behalf:

 

  • name
  • billing and, if applicable, delivery address
  • e-mail address
  • payment data
  • company name if applicable
  • telephone number if applicable
  • IP address
  • information about orders
  • information about the merchant stores supported by Shopify that you visit
  • as well as information about your terminal device and your Internet browser

 

In addition, Shopify offers at https://www.shopify.de/legal/datenschutz more detailed data protection information.

 

  1. SHOPIFY WEB ANALYTICS

 

Insofar as we also use the Shopify web analytics service on our website, Shopify stores cookies on your end device via your internet browser. Via these cookies, further information, such as location, time or frequency of your visit to our website is transmitted to a Shopify server and evaluated. If you do not agree with this processing, you have the option to prevent the storage of the cookie by a setting in your Internet browser. You can find more information on this above under "Cookies".

 

  1. GOOGLE ANALYTICS

 

Flowers for Society use Google Analytics, a web analytics service provided by Google, Ireland Limited (“Google”). Google Analytics uses so-called cookies, text files, which are stored on your computer, and which allow an analysis of the use of the website. The information generated by the cookie about your use of this website (including your IP address, but without the last octet) is transferred to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators, and to provide other services related to website usage and internet usage. Google may also transfer this information to third parties as far as this is required by law or if third parties process this data on behalf of Google. Google will in no case associate your IP address with other data from Google. You can prevent the installation of cookies by setting your browser software accordingly or disable Google Analytics directly from http://tools.google.com/dlpage/gaoptout?hl=en; However, we would point out that in this case you may not be able to fully utilize all the functions of this website. By using this website, you agree to the processing of data about you by Google in the manner and for the purposes set out above. The collection and storage of data can be denied at any time with effect for the future according to § 7 of this data protection statement.

  1. Google Ads and Google Conversion Tracking

This website uses Google Ads. Google Ads is an online advertising programme from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use Google Ads to draw attention to our offers using adverts (so-called Google Adwords) on external websites. We can establish how successful individual advertisements are based on the advertising campaign data. We are therefore pursuing the aim of showing you advertising which is of interest to you, making our website more interesting for you, and fairly calculating incurred advertising costs.

As part of Google Ads, we use so-called Conversion Tracking. If you click on an advert displayed by Google, a cookie is placed for conversion tracking. Cookies are small text files which are the internet browser stores on the user’s computer. These cookies expire after 30 days and are not used for personal identification of the user. If the user visits certain pages of this website when the cookie has not yet expired, we and Google can detect that the user clicked on the ad and proceeded to this website.

Each Google Ads advertiser has a different cookie. The cookies cannot be tracked using the website of a Google AdWords client. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads clients who have opted for conversion tracking. Clients are told the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, advertisers do not obtain any information that can be used to personally identify users. If you do not wish to take part in tracking, you can object by deactivating the Google Conversion Tracking cookie in your internet browser under User Settings. You will then not be included in the Conversion Tracking statistics.

You can find more information on Google Ads and Google Conversion Tracking in Google’s Privacy Policy: https://policies.google.com/privacy.

You can adjust your browser settings to be informed of the placing of cookies and to only permit cookies in certain cases, to generally reject the acceptance of cookies for certain cases, and to automatically delete cookies when you close your browser. If you deactivate cookies, the functionality of this website may be restricted.

We have obtained your consent to the processing of your data as indicated above as far as is legally necessary pursuant to Art. 6(1) lit. a GDPR. You can withdraw your consent at any time with effect for the future. In order to withdraw your consent, please follow the process for objecting described above.

The use of Google Remarketing

Google Remarketing is a Google Service which we can use to approach you even after you leave this website. It is therefore possible that you will be shown our adverts when browsing the internet after you have visited our website. Google Remarketing uses both data and information which Google has collected on you beforehand. For this purpose, Google uses so-called cookies which are saved on your device and which track and analyse user behaviour on different websites for Google. You can prevent tracking in several ways:

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Information on Privacy & Terms at Google can be found at https://policies.google.com/privacy.

According to our information, Google does not collate any data obtained via Google Remarketing with personal data which Google may have collected on you. If you do not want your data to be processed by Google Marketing, you can deactivate this by adjusting your settings accordingly at https://www.google.com/settings/ads/onweb/.

Data collected are collated in your Google Account solely on the basis of your consent which you can grant to or withdraw from Google (Art. 6(1) lit. a GDPR). For data collation that cannot be conducted on your Google Account (e.g. because you do not have a Google Account or you have objected to collation), this data collection is based on Art. 6(1) lit. f GDPR. The legitimate interest arises from the website operator having an interest in the anonymised analysis of website visitors for advertising purposes.

 

  1. FACEBOOK PIXEL

 

We use the so-called "Facebook Pixel" of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook Ireland Limited has changed its name to Meta Platforms Ireland Limited). By using this technology, we can serve targeted advertising - using the technology explained above - to our website visitors on Facebook. Furthermore, we receive information about the effectiveness of Facebook ads for statistical and market research purposes and can track whether a user was redirected to our website from a Facebook ad ("conversion") and optimise our advertising campaigns. You can find more information on the processing of your data by Facebook here.

 

  1. INSTAGRAM

 

We maintain a profile on Instagram. The operator is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook Ireland Limited has changed its name to Meta Platforms Ireland Limited). The privacy policy is available here.

 

  1. CONSENT FOR TIKTOK ADVERTISING

 

We use the TikTok Advertising service. TikTok Advertising is an online advertising programme provided by TikTok Information Technologies UK Limited, One London Wall, London EC2Y 5EB ("TikTok"). Through the use of cookies and similar technologies such as device identifiers, information about the use of the FFS App (e.g. information about items viewed) is collected and transmitted to TikTok Information Technologies UK Limited by FFS and TikTok Information Technologies UK Limited under joint responsibility. When using the app, the FFS app determines the device ID of your terminal device and transmits the tracking data to TikTok on this basis. The further processing of the data transmitted to TikTok Information Technologies UK Limited is the sole responsibility of TikTok Information Technologies UK Limited under data protection law. This information transmitted to TikTok can be assigned to your person with the aid of further information that TikTok has stored about you, e.g. due to your ownership of an account on the social network "TikTok". On the basis of the information collected, you can be shown interest- related advertisements on our offers in your TikTok account (retargeting). The information collected may also be aggregated by TikTok and the aggregated information may be used by TikTok for its own advertising purposes and for the advertising purposes of third parties. For example, TikTok may infer certain interests from your browsing behaviour on this website and may also use this information to promote third party offers. TikTok may also combine the information collected with other information that TikTok has collected about you via other websites and / or in connection with the use of the social network "TikTok", so that a profile about you can be stored at TikTok. This profile may be used for advertising purposes. To the extent that TikTok Information Technologies UK Limited processes your data as the sole data controller, there is a possibility that your data may be transferred by TikTok Information Technologies UK Limited to the USA. The European Court of Justice has held in relation to the USA that it is a country with an inadequate level of data protection. In this context, there is a particular risk that your data will be processed by American institutions/authorities for control and monitoring purposes without you having an adequate legal remedy against this. The legal basis for this data processing is Article 6(1)(a) DSGVO (consent).You can find more information about data protection at TikTok here.

Here you can also exercise your data protection rights (e.g. right to erasure) with regard to the data that TikTok Information Technologies UK Limited processes about you as a data controller.

In general, your mobile device (mobile phone, tablet) has a function that allows you to opt in or out of some types of personalised advertising when using apps and thus also to revoke the consent you have given.

 

  1. TIKTOK PIXEL

We use the TikTok Pixel on our website. The TikTok Pixel is a TikTok advertiser tool from the two providers TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom (together "TikTok"). The TikTok Pixel is a snippet of JavaScript code that allows us to understand and track the activities of visitors on our website. To this end, the TikTok Pixel collects and processes information about visitors to our website or the devices they use. The data collected via the TikTok Pixel is used for targeting our ads and improving ad delivery and for personalized advertising. For this purpose, the data collected on our website via the TikTok Pixel is transmitted to TikTok. Some of this data includes information stored on your end device. In addition, cookies are also used via the TikTok Pixel, which store information on your end device. Such storage of information by the TikTok Pixel or access to information already stored on your end device only occurs with your consent.

For more information on how TikTok processes personal data, including the legal basis on which TikTok relies and the options for exercising your rights against TikTok, please see TikTok's privacy policy at https://www.tiktok.com/legal/privacy-policy?lang=en.

  1. NEWSLETTER, RAPIDMAIL

 

As part of our services, we offer you the opportunity to sign up for our newsletter. In order to act in accordance with data protection regulations, we use the so-called double opt-in procedure (DOI procedure): After you have entered your email address in the registration field and given your consent to receive our newsletter, we will send you a confirmation link to the email address you have provided. Only when you click on this confirmation link will your email address be added to our distribution list for sending our newsletter. The legal basis for this data processing is Article 6(1)(a) DSGVO. Note right of withdrawal: You can revoke your consent at any time with effect for the future by sending a message to support@flowersforsociety.com. or using the unsubscribe option at the end of each newsletter. We use rapidmail to send newsletters. The provider is rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau, Germany. The legal basis for data processing is Art. 6 para. 1 lit. a) GDPR. You can revoke this consent at any time with effect for the future. Data will not be transferred to third countries. Among other things, Rapidmail is used to organise and analyse the dispatch of newsletters. The data you enter for the purpose of receiving the newsletter is stored on Rapidmail’s servers in Germany. If you do not want any analysis by Rapidmail, you must unsubscribe from the newsletter. For the purpose of analysis, the emails sent with Rapidmail contain a so-called tracking pixel, which connects to the servers of Rapidmail when the email is opened. In this way, it can be determined whether a newsletter message has been opened. Furthermore, with the help of Rapidmail, we can determine whether and which links in the newsletter message are clicked on. All links in the e-mail are so-called tracking links, with which your clicks can be counted.

If you unsubscribe from the newsletter, your data will also be deleted from the servers of Rapidmail immediately. Unsubscribing from the newsletter is done by clicking on the corresponding link at the end of the newsletter. Further information on Rapidmail can be found at: https://www.rapidmail.de/datenschutz

 

  1. ZENDESKTM

 

We use the ZendeskTM ticket system for our customer support. The legal basis is Art. 6 para. 1 lit. b) GDPR (contract initiation/contract execution). ZendeskTM has its corporate headquarters at 989 Market Street, San Francisco, CA 94103 USA. As we are based in the European Economic Area, the processing is carried out by ZendeskTM Neue Schönhauser Str. 3-5, 10178 Berlin.

 

ZendeskTM processes the following data on our behalf:

 

  • Name
  • Billing and, if applicable, delivery address
  • e-mail address
  • payment data
  • Company name, if applicable
  • Telephone number, if applicable
  • IP address
  • Information about orders
  • Information about the merchant shops supported by ZendeskTM that you visit and information about your device and internet browser.

 

In addition, ZendeskTM provides more detailed privacy information at https://www.zendesk.de/company/agreements-and-terms/privacy-policy/.

 

Section II. DATA PROCESSING UPON ESTABLISHMENT OR TERMINATION OF A CONTRACT

 

When you register with one of our services and/or enter into a contract with us (e.g. purchase a product from us), we process the data required for the conclusion, performance or termination of the contract. This includes:

 

  • Salutation
  • First name, last name
  • Billing and delivery address
  • E-mail address
  • Billing and payment information
  • Date of birth
  • Telephone number

 

The legal basis for this is Article 6(1)(a) and (b) GDPR, i.e. you provide us with the information on the basis of the respective contractual relationship (e.g. management of the customer/user account, processing of a purchase contract) between you and us. We are also obliged to process your e-mail address in the event of a purchase via our websites/apps due to legal requirements in the German Civil Code (BGB) to send an electronic order confirmation (Article 6(1)(c) GDPR). We store the data collected for contract processing - unless we use it for our own marketing purposes - for the duration of the respective contract and until the expiry of the respective statutory or possible contractual warranty and guarantee rights. After expiry of this period, we retain the information required by commercial and tax law relating to the contractual relationship for the periods specified by law. For this period, the data will be processed again solely in the event of an audit by the tax authorities.

 

  1. DATA PROCESSING DURING THE EXECUTION OF A CONTRACT

 

When processing a purchase contract via our services, the following data processing is also required:
Payment data is passed on to the payment service providers commissioned by us so that they can process the respective payment(s). We pass on details of the shipping address to logistics companies and shipping partners commissioned by us so that the order can be delivered. In order to ensure that the goods are delivered according to your wishes, we may transmit your e-mail address and, if applicable, telephone number to the logistics company and/or shipping partner commissioned by us to carry out the delivery. If necessary, they will contact you in advance of the delivery in order to coordinate the details of the delivery with you. The respective data will be transmitted solely for this purpose and will not be used for other purposes after delivery and will be deleted after expiry of existing commercial and tax retention obligations.

 

  1. TRANSMISSION OF INFORMATION TO TRANSPORT SERVICE PROVIDERS/SHIPPING PARTNERS

 

For the purpose of shipping ordered goods, we work together with logistics service providers/transport companies and/or shipping partners: The following data may be transmitted to them for the purpose of delivery of the ordered goods or for the purpose of shipment notification: First name, last name, postal address and, if applicable, the e- mail address and, if applicable, the telephone number. The legal basis for the processing is Art. 6(1)(b) GDPR.

 

  1. TRANSMISSION OF INFORMATION TO PARTNER COMPANIES

 

In order to fulfill our obligations arising from the purchase contract concluded with you, we work together with partner companies, in particular fulfillment partners. We transmit to them the data required for the execution of the contract (e.g. first name, last name, billing and delivery address, e-mail address, billing and payment data, date of birth, telephone number).

 

Section III. DATA PROCESSING FOR ADVERTISING PURPOSES, USE OF ADVERTISING SERVICES

 

  1. OWN ADVERTISING PURPOSES - POSTAL ADVERTISING

 

We generally have a legitimate interest in using certain information for marketing purposes in order to provide you with relevant offers. We process the following information for postal advertising for our own marketing purposes as well as for marketing purposes of third parties: first name, last name, postal address, year of birth. We are also entitled to store additional personal information about you for our own marketing purposes and for the marketing purposes of third parties, in compliance with the legal requirements. The aim is to send you advertising that is geared solely to your actual or presumed needs/interests and accordingly not to bother you with advertising that is not relevant to you. A transmission of the stored data to third parties does not take place. In addition, FFS pseudonymizes / anonymizes personal data collected about you for the purpose of using the pseudonymized / anonymized data for its own marketing purposes as well as for marketing purposes of third parties (advertisers). The pseudonymized / anonymized data can also be used to advertise to you individually online, whereby the control of the advertising can be carried out by third-party service providers and/or agencies. The legal basis for the use of personal data for marketing purposes is Art. 6(1)(f) GDPR.

 

  1. REFERENCE TO THE RIGHT TO OBJECT

 

You can object to the use of your personal information for the aforementioned marketing purposes at any time free of charge with effect for the future at support@flowersforsociety.com. If you object, your data will be blocked for further data processing for advertising purposes. We would like to point out that in exceptional cases, advertising material may still be sent temporarily after receipt of your objection. This is technically due to the necessary lead time within the selection process and does not mean that we have not implemented your objection.

 

  1. NEWSLETTER

 

As part of our services, we offer you the opportunity to sign up for our newsletter. In order to act in accordance with data protection regulations, we use the so-called double opt-in procedure (DOI procedure): After you have entered your email address in the registration field and given your consent to receive our newsletter, we will send you a confirmation link to the email address you have provided. Only when you click on this confirmation link will your email address be added to our distribution list for sending our newsletter. The legal basis for this data processing is Article 6(1)(a) GDPR.

 

  1. NOTE RIGHT OF WITHDRAWAL

 

You can revoke your consent at any time with effect for the future by sending a message to support@flowersforsociety.com or using the unsubscribe option at the end of each newsletter.

 

 

  1. OBJECTION, CORRECTION AND DELETION OF DATA

 

You may at any time revoke your consent, which you have given to us for the use, processing and transmission of your personal data for marketing purposes (e.g., electronic newsletters or offers) or any other purpose without effect for a particular form or term. In addition, as far as we use your data within the legally permissible framework for, for example, postal marketing measures, you can object to this use. You may also request the correction of your data if they are incorrect. In all cases, please contact: Flowers for Society GmbH, Jungfernstieg 34, 20354 Hamburg, email: legal@flowersforsociety.com 

After a revocation, we will delete your data and refrain from sending further advertisements.

 

  1. TRANSFER OF PERSONAL DATA TO THIRD PARTIES

 

For the processing of your information requirements, it is sometimes necessary to transfer your personal data to third parties. The data passed on to third parties are used exclusively by them for the fulfillment of their obligations or tasks. Transfers to state institutions or authorities are only required under mandatory national legislation.

 

  1. DURATION OF DATA STORAGE

 

Your personal data will be kept if your consent to use for marketing purposes is available. Sometimes additional data storage may be necessary due to legal requirements.

 

  1. DATA SECURITY

 

We have established technical and organizational security precautions to protect your data, in particular against loss, manipulation or unauthorized access. We regularly adapt our safety precautions to the continuous technical development.

 

  1. INFORMATION

 

You have the right at any time to request free information about your stored data. If your data are incorrect or unjustly stored, we will gladly correct, block or delete them. Please also inform us as soon as changes have occurred to your personal data. Please send your inquiries, questions, complaints or suggestions regarding data protection by mail to: legal@flowersforsociety.com

 

  1. AGREEMENT

 

By confirming this Privacy Policy, you agree to the use of your information as described in the foregoing Terms.

 

Section IV. INFORMATION ABOUT YOUR RIGHTS (DATA SUBJECT RIGHTS)

 

With regard to the handling of your personal data, you have the rights granted by law as listed below. To assert your rights, please use the contact options listed in Section I Item 2, making sure that it is possible to clearly identify you. As a rule, it is sufficient to specify the e-mail account with which you have been in contact with us so far. In addition to the right to revoke the consent you have given to us, you have the following additional rights if the respective legal requirements are met:

 

  • the right to information about your personal data stored by us (Article 15 GDPR), in particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data if it has not been collected directly from you;
  • the right to have inaccurate data corrected or to have correct data completed (Article 16 GDPR);
  • the right to have your data stored by us deleted (Article 17 GDPR), insofar as no legal or contractual retention periods or other legal obligations or rights to further storage are to be observed by us;
  • the right to restrict the processing of your data (Article 18 GDPR), insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure; the controller no longer requires the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Article 21 GDPR;
  • the right to data portability (Article 20 GDPR), i.e. the right to have selected data stored by us about you transferred in a common, machine-readable format, or to request the transfer to another controller;
  • the right to lodge a complaint with a supervisory authority; you have the right to lodge a complaint with a data protection supervisory authority. For this purpose, you may contact the supervisory authority of your usual place of residence or the place where the infringement took place. Alternatively, you can also contact the data protection authority responsible for us:


The Hamburg Commissioner for Data Protection and Freedom of Information Ludwig-Erhard-Str 22, 7th floor
20459 Hamburg
Tel.: 040 / 428 54 - 4040
Fax: 040 / 428 54 - 4000
E-mail: mailbox@datenschutz.hamburg.de