–––––––––––––––––––––––––––

Data Protection Declaration

–––––––––––––––––––––––––––

1) Introduction and Contact Details of the Data Controller 1.1 We are pleased that you are visiting our website and thank you for your interest. In the following section, we inform you about the handling of your personal data when using our website. Personal data in this context refers to all data with which you can be personally identified. 1.2 The data controller in charge of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is la fraise rouge GmbH, Großbeerenstraße 64a, 10963 Berlin-Kreuzberg, Germany, Tel.: 0049 (0)30 2535 9812, Fax: 0049 (0)30 2535 9814, E-Mail: info@lafraiserouge.de. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection when Visiting our Website 2.1 In the case of merely informative use of our website, meaning if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our page server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website

• Date and time at the moment of access

• Amount of data sent in bytes

• Source/reference from which you came to the page

• Browser used

• Operating system used

• IP address used (if applicable, in anonymized form)

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use. 2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

3) Hosting & Content Delivery Network 3.1 Amazon Web Services For hosting our website and displaying page content, we use the system of the following provider: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg. Data may also be transmitted to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA. All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

3.2 AWS CloudFront We use a Content Delivery Network of the following provider: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg. This service enables us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 (1) lit. f GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties. Data may also be transmitted to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

4) Cookies To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your end device. Some of these cookies are automatically deleted after the browser is closed (so-called "session cookies"), while other cookies remain on your end device for a longer period and enable the saving of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser. If individual cookies implemented by us also process personal data, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the performance of the contract, in accordance with Art. 6 (1) lit. a GDPR in the event of consent given, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit. You can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance, or you can exclude the acceptance of cookies for certain cases or in general. Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting Us In the context of contacting us (e.g., via contact form or e-mail), personal data is processed exclusively for the purpose of handling and answering your inquiry and only to the extent necessary for this purpose. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively clarified, provided that there are no statutory retention requirements to the contrary.

6) Data Processing when Opening a Customer Account In accordance with Art. 6 (1) lit. b GDPR, personal data will continue to be collected and processed to the extent required if you provide it to us when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website. A deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After the deletion of your customer account, your data will be deleted provided that all contracts concluded through it have been fully processed, no statutory retention periods stand in the way, and there is no continuing legitimate interest in further storage on our part.

7) Use of Customer Data for Direct Marketing Registration for our e-mail newsletter If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters once you have explicitly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified e-mail address. By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 (1) lit. a GDPR. When you register, we save your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter is used strictly for the designated purpose. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending an appropriate message to the data controller mentioned at the beginning. After you have unsubscribed, your e-mail address will be immediately deleted from our newsletter mailing list, unless you have expressly consented to a further use of your data or we reserve the right to a more extensive data use that is legally permitted and about which we inform you in this declaration.

8) Data Processing for Order Management 8.1 Insofar as necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR. If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you provided when placing the order to inform you personally within the framework of our statutory information obligations pursuant to Art. 6 (1) lit. c GDPR. Your contact data will be used strictly for the purpose of communicating updates owed by us and processed by us for this purpose only to the extent necessary for the respective information. To process your order, we also work with the following service provider(s), who support us wholly or partially in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2 PlentyONE For order processing, we use the following provider: PlentyONE GmbH, Johanna-Waescher-Straße 7, 34131 Kassel, Germany. Name, address, and, if applicable, other personal data will be passed on to the provider in accordance with Art. 6 (1) lit. b GDPR exclusively for the purpose of processing the online order. Your data will only be passed on to the extent that this is actually necessary for the processing of the order.

8.3 Disclosure of Personal Data to Shipping Service Providers

• DHL As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany. We pass your e-mail address and/or telephone number on to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification in accordance with Art. 6 (1) lit. a GDPR, provided you have given your explicit consent to this during the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR. The transfer only takes place to the extent necessary for the delivery of the goods. In this case, a prior coordination of the delivery date with the provider or a delivery notification is not possible. The consent can be revoked at any time with effect for the future either towards the controller designated above or towards the provider.

8.4 Use of Payment Service Providers

• Amazon Pay One or more online payment methods of the following provider are available on this website: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg. If you select a payment method of the provider where you pay in advance (such as credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to them in accordance with Art. 6 (1) lit. b GDPR. In this case, the transmission of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

• PayPal One or more online payment methods of the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. If you select a payment method of the provider where you pay in advance, your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to them in accordance with Art. 6 (1) lit. b GDPR. In this case, the transmission of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose. If you choose a payment method where we make an advance delivery, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, zip code, city, date of birth, e-mail address, telephone number, and possibly data regarding an alternative payment method). In order to safeguard our legitimate interest in determining your solvency in such cases, this data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 (1) lit. f GDPR. Based on the personal data you have provided as well as other data (such as shopping cart, invoice amount, order history, payment experiences), the provider checks whether the payment option you have selected can be granted with regard to payment and/or bad debt risks. The credit report can contain probability values (so-called score values). Insofar as score values flow into the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of score values includes, but is not limited to, address data. You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data if this is necessary for contractual payment processing.

9) Web Analytics Services 9.1 Google (Universal) Analytics This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website. By default, Google (Universal) Analytics sets cookies when you visit the website, which are stored as small text blocks on your end device and collect certain information. The scope of this information also includes your IP address, which is, however, shortened by Google by the last digits to exclude any direct personal reference. The information is transmitted to Google servers and processed there. Transmissions to Google LLC based in the USA are also possible in this context. Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide other services relating to website activity and internet usage. The IP address transmitted and shortened by your browser as part of Google Analytics is not merged with other Google data. The data collected in the context of using Google (Universal) Analytics is stored for a period of two months and subsequently deleted. All the processing described above, in particular the setting of cookies on the end device used, only takes place if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR. Without your consent, the use of Google (Universal) Analytics during your site visit will be omitted. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties. Further legal information on Google (Universal) Analytics can be found at https://business.safety.google/intl/en/privacy/, https://policies.google.com/privacy, and https://policies.google.com/technologies/partner-sites.

Demographic Features Google (Universal) Analytics uses the special function "demographic features" and can use it to create statistics that make statements about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the collected data cannot be assigned to any specific person and is deleted after being stored for a period of two months.

Google Signals As an extension to Google (Universal) Analytics, Google Signals can be used on this website to generate cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google can analyze your usage behavior across devices and create database models, including for cross-device conversions, subject to your consent to the use of Google Analytics pursuant to Art. 6 (1) lit. a GDPR. We do not receive any personal data from Google, only statistics. If you wish to stop the cross-device analysis, you can deactivate the "Personalized advertising" function in your Google account settings. Follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764. Further information on Google Signals can be found under the following link: https://support.google.com/analytics/answer/7532985.

UserIDs As an extension to Google (Universal) Analytics, the "UserIDs" function can be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6 (1) lit. a GDPR, have created an account on this website, and log in to this account on different devices, your activities, including conversions, can be analyzed across devices. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

9.2 Google Analytics 4 This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website. By default, Google Analytics 4 sets cookies when you visit the website, which are stored as small text blocks on your end device and collect certain information. The scope of this information also includes your IP address, which is, however, shortened by Google by the last digits to exclude any direct personal reference. The information is transmitted to Google servers and processed there. Transmissions to Google LLC based in the USA are also possible in this context. Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide other services relating to website activity and internet usage. The IP address transmitted and shortened by your browser as part of Google Analytics is not merged with other Google data. The data collected in the context of using Google Analytics 4 is stored for a period of two months and subsequently deleted. All the processing described above, in particular the setting of cookies on the end device used, only takes place if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR. Without your consent, the use of Google Analytics 4 during your site visit will be omitted. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties. Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/en/privacy/, https://policies.google.com/privacy, and https://policies.google.com/technologies/partner-sites.

Demographic Features Google Analytics 4 uses the special function "demographic features" and can use it to create statistics that make statements about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the collected data cannot be assigned to any specific person and is deleted after being stored for a period of two months.

Google Signals As an extension to Google Analytics 4, Google Signals can be used on this website to generate cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google can analyze your usage behavior across devices and create database models, including for cross-device conversions, subject to your consent to the use of Google Analytics pursuant to Art. 6 (1) lit. a GDPR. We do not receive any personal data from Google, only statistics. If you wish to stop the cross-device analysis, you can deactivate the "Personalized advertising" function in your Google account settings. Follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764. Further information on Google Signals can be found under the following link: https://support.google.com/analytics/answer/7532985.

UserIDs As an extension to Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 (1) lit. a GDPR, have created an account on this website, and log in to this account on different devices, your activities, including conversions, can be analyzed across devices. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

10) Retargeting / Remarketing and Conversion Tracking Meta Pixel Within our online offering, we use the "Meta Pixel" service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta"). If a user clicks on an advertisement placed by us on Facebook and/or Instagram, the URL of our linked page is expanded by a parameter using the "Meta Pixel". This URL parameter is then entered into the user's browser after the redirection by a cookie set by our linked page itself. This allows Meta on the one hand to determine the visitors to our online offering as a target group for the display of advertisements (so-called "Ads"). Accordingly, we use the service to display the Facebook and/or Instagram ads placed by us only to those users who have also shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products determined on the basis of the websites visited) that we transmit to Meta (so-called "Custom Audiences"). On the other hand, the "Meta Pixel" can be used to track whether users have been redirected to our website after clicking on an advertisement and what execution actions they take there (so-called "Conversion Tracking"). The collected data is anonymous to us, meaning it does not give us any indication of the identity of the users. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes. All the processing operations described above, in particular the setting of cookies for reading out information on the end device used, will only be executed if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties. The information generated by Meta is usually transmitted to a Meta server and stored there; in this context, a transmission to servers of Meta Platforms Inc. in the USA is also possible. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

11) Site Functionalities 11.1 Login With Amazon On our website, we provide a single sign-on function from the following provider: Amazon EU S.a. r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg. In addition to transmitting data to the aforementioned provider location, data may also be transmitted to: Amazon.com Inc., USA. If you have an account with the provider, you can use this account data to log in to create a user account or to register on our website. When you visit this site, a direct connection between your browser and the provider's servers can be established via this login function, even if you do not have an account with the provider or are not logged into one. The provider thus receives the information that you have visited our site. The information collected in this respect (possibly including your IP address) is transmitted by your browser directly to a server of the provider and stored there. However, the information is not used to personally identify you and is not passed on to third parties. These data processing operations take place in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in a user-friendly and interactive design of our online presence. If you press the login button to register on our website using your account data with the provider, the provider will transmit the general and publicly accessible information stored in your account (user ID, name, address, e-mail address, age, and gender) to us exclusively on the basis of your express consent pursuant to Art. 6 (1) lit. a GDPR.We store and use the data transmitted by the provider to set up a user account with the necessary data (salutation, first name, last name, address data, country, e-mail address, date of birth), provided you have shared this with the provider. Conversely, on the basis of your consent, data (e.g., information on your surfing or purchasing behavior) can be transferred from us to your account with the provider. The granted consent can be revoked at any time with effect for the future by notifying us. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

11.2 Google reCAPTCHA On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transmitted to: Google LLC, USA. For the visual design of the Captcha window, the provider uses "Google Fonts", which are fonts loaded by Google from the internet. In this context, there is no processing of further information other than the aforementioned data, which is already transmitted to Google via the functionality of ReCaptcha. The service checks whether an input is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks, as well as similar automated malicious accesses. In order to ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the end device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this to the provider's servers for evaluation. Cookies can be used here, meaning small text files that are stored in the browser of the end device. Insofar as the processing described above takes place on the basis of cookies, these will only be set if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in determining individual self-responsibility on the internet and preventing abuse and spam in accordance with Art. 6 (1) lit. f GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

12) Tools and Miscellaneous Cookie Consent Tool This website uses a so-called "Cookie Consent Tool" to obtain effective user consent for cookies subject to consent and cookie-based applications. The "Cookie Consent Tool" is displayed to users when they visit the site in the form of an interactive user interface, on which consent can be given for certain cookies and/or cookie-based applications by ticking boxes. By using the tool, all cookies/services subject to consent are only loaded if the respective user gives corresponding consent by ticking the box. This ensures that such cookies are only set on the respective user's end device if consent has been granted. The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context. If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies, and consequently in a legally compliant design of our website. A further legal basis for processing is Art. 6 (1) lit. c GDPR. As the data controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent. Insofar as necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties. Further information on the operator and the setting options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

13) Rights of the Data Subject 13.1 The applicable data protection law grants you comprehensive rights (rights of information and intervention) vis-à-vis the data controller regarding the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:

• Right of access pursuant to Art. 15 GDPR;

• Right to rectification pursuant to Art. 16 GDPR;

• Right to erasure pursuant to Art. 17 GDPR;

• Right to restriction of processing pursuant to Art. 18 GDPR;

• Right to notification pursuant to Art. 19 GDPR;

• Right to data portability pursuant to Art. 20 GDPR;

• Right to withdraw consent given pursuant to Art. 7 (3) GDPR;

• Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 RIGHT TO OBJECT IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR THE PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

14) Duration of Storage of Personal Data The duration of the storage of personal data is determined by the respective legal basis, the processing purpose, and, if applicable, additionally by the respective statutory retention period (e.g., retention periods under commercial and tax law). When processing personal data on the basis of explicit consent pursuant to Art. 6 (1) lit. a GDPR, the data concerned will be stored until you revoke your consent. If there are statutory retention periods for data that is processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 (1) lit. b GDPR, this data is routinely deleted after expiry of the retention periods, provided that it is no longer required for contract fulfillment or contract initiation and/or there is no legitimate interest on our part in its continued storage. When processing personal data on the basis of Art. 6 (1) lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can prove compelling reasons worthy of protection for the processing which outweigh your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims. When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 (2) GDPR. Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Copyright notice: This privacy policy has been created by the specialist lawyers of IT-Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de)

Stand: 04.08.2026, 08:55:23