.png)
PRIVACY POLICY
1. Controller
The controller responsible for data processing on this website is:
Momentum Cars
Owner Ali Khayal
Buchenweg 4
2560 Nidau
E-mail: info@momentumcars.ch
(Further contact information can be found in the legal notice of this website.)
2. General Information on Data Processing
We take the protection of your personal data very seriously. Personal data means any information by which you can be personally identified, such as your name, contact details, etc. We treat your personal data confidentially and in accordance with the applicable statutory data protection regulations, in particular the GDPR, as well as this Privacy Policy.
This Privacy Policy informs you about the nature, scope and purpose of the processing of personal data on our website and in connection with the services we offer.
3. Data Collection When Visiting Our Website
Server log files: When you visit our website purely for informational purposes, meaning that you do not register or otherwise submit information, we automatically collect and store information that your browser transmits to our server. This includes, for example, your IP address, the date and time of the request, the page/file accessed, the browser type used and the operating system. The processing of these server log data is carried out in order to ensure the security and stability of the website and, where necessary, to analyse technical problems. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in the technically error-free display and security of the website. The log files are automatically deleted after no later than 7 days, unless further retention is required for evidentiary purposes, for example in the investigation of misuse or fraud.
Use of cookies: Our website uses cookies. These are small text files that are stored on your end device. Some cookies are essential in order to provide basic website functions, such as session management. We use these technically necessary cookies on the basis of Art. 6(1)(f) GDPR, our legitimate interest in a functional and optimised presentation of our offering. Other cookies, for example for analysis or marketing purposes, are only set with your express consent, Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG. Details regarding such cookies and options to object can be found in the relevant sections of this Privacy Policy and/or in our cookie banner.
4. Contact Form and Contacting Us
If you send us enquiries via the contact form or contact us by e-mail, telephone or messenger, for example WhatsApp, the data you provide, such as your name, e-mail address, telephone number and request, will be processed by us for the purpose of handling your enquiry and any follow-up questions. The provision of certain data in the contact form, such as name and e-mail address, may be required as mandatory fields in order for us to assign and respond to your enquiry. Information provided voluntarily helps us to process your request more precisely.
The processing of these contact data is carried out, depending on the nature of the enquiry, on the basis of Art. 6(1)(b) GDPR, performance of pre-contractual measures or fulfilment of a contract, for example in the case of reservation enquiries, or Art. 6(1)(f) GDPR, our legitimate interest in the effective processing of general enquiries. We use the data transmitted by you in the course of contacting us exclusively to respond to your enquiry and, where applicable, for the associated technical administration. Data will not be passed on to third parties unless this is necessary to fulfil your request or you have given your consent.
Contact via WhatsApp: If we offer contact via WhatsApp and you use this channel to communicate with us, we receive from WhatsApp the telephone number registered with WhatsApp and the messages you send to us. WhatsApp is a messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Communication via WhatsApp is end-to-end encrypted; however, metadata, such as sender/recipient and time, may be processed by WhatsApp and, where applicable, transmitted to its parent company, Meta Platforms, USA. We use the data transmitted by you via WhatsApp exclusively to process your specific request. The legal basis is also Art. 6(1)(b) GDPR if the contact serves the initiation of a contract; otherwise, Art. 6(1)(f) GDPR applies. If you do not wish WhatsApp to receive data about you, please use alternative contact methods, such as telephone or e-mail.
We delete your data from enquiries as soon as they are no longer required to achieve the purpose for which they were collected. This is generally the case when the conversation with you has ended and your request has been fully clarified. Statutory retention obligations, for example for business correspondence under commercial and tax law, remain unaffected. In such cases, the data are not deleted but are restricted for other purposes.
5. Customer Account — Registration on the Website
If you create a customer account on our website, we process the data you enter during the registration process, such as your name, address, e-mail address and, where applicable, username and password. A customer account enables you to make future bookings more quickly, view your previous reservations and manage your personal data.
The processing of data in connection with registration and use of the customer account is carried out in order to provide the user-friendly account function and to perform pre-contractual measures or fulfil a contract, Art. 6(1)(b) GDPR, since the account facilitates the handling of rental agreements. Mandatory information is generally marked accordingly; without these data, no account can be created.
We use the data in your customer account exclusively for the administration of your user relationship and for the contractual processing of the services booked by you. Account data are only passed on to third parties insofar as this is necessary for the performance of the contract, see the section on bookings and contractual processing below, or where we are legally obliged to do so.
You may delete your customer account, or have it deleted, at any time by sending us a corresponding message. After deletion of the account, the personal data stored therein will be deleted unless we are required to continue storing them due to statutory retention periods or for the processing of contracts that are still ongoing. In such cases, processing will be restricted to the necessary purposes.
6. Bookings of Rental Vehicles and Contractual Processing
On our website, you can book rental vehicles or purchase gift cards. In doing so, we collect personal data that are necessary for the establishment and performance of the rental or purchase contract. Depending on the offer, these may include in particular: title, name, address, contact information, e-mail, telephone number, date of birth, for age verification, driving licence data, number, validity, place of issue, insofar as required for vehicle handover, payment information, such as credit card data or bank details, as well as the desired vehicle, rental period and, where applicable, further contractual details.
The processing of these data is carried out for the purpose of deciding whether to accept your booking, managing the reservation and ultimately fulfilling the concluded contract, Art. 6(1)(b) GDPR. Without providing these data, we cannot perform the rental agreement or the sale of the gift card.
Payment processing: We use the data required for payment, such as payment method and invoice amount, to process the payment. Depending on the selected payment method, we pass payment data on to commissioned payment service providers or banks, for example to your credit card company or PayPal, which process the payment on our behalf. These recipients process your data either under their own responsibility or as processors; their respective data protection provisions apply.
Contract performance and customer service: We also store and use your contractual data to manage your reservation, for any queries or services in connection with your rental relationship, such as booking changes, breakdown assistance or claims processing, and to inform you about information relevant to the rental agreement. In the event of violations during the rental period, such as traffic offences or accidents, we may be legally obliged to pass certain data on to authorities or insurance companies, for example the driver’s name and address to the fines authority.
Retention and deletion: Your personal data will be stored for as long as necessary for the processing of the contract and compliance with statutory obligations. Relevant contractual documents, such as invoices and rental agreements, are retained for 6 to 10 years after the end of the contract due to commercial and tax law requirements. Thereafter, the data will be deleted unless they are still required for the establishment, exercise or defence of legal claims or you have consented to longer storage.
7. Newsletter Distribution
You have the option of subscribing to our newsletter in order to receive regular information about our offers and promotions. For this purpose, we require your e-mail address; further details, such as your name for personal address, are voluntary. We use the so-called double opt-in procedure for newsletter distribution: after registering, you receive a confirmation e-mail in which you confirm by clicking on a link that you wish to receive the newsletter. This ensures that no third-party e-mail addresses are registered. Newsletter registrations are logged, including the time of registration and confirmation as well as your IP address, in order to be able to demonstrate consent in accordance with legal requirements, Art. 6(1)(c) GDPR in conjunction with Art. 5(2) and Art. 7(1) GDPR.
The newsletter is sent on the basis of your express consent, Art. 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future by clicking the unsubscribe link included in every newsletter or by sending us a corresponding message. After withdrawal of consent, unsubscribe, your data stored for newsletter distribution, e-mail address and, where applicable, further voluntary information, will be deleted without delay or blocked for newsletter distribution and, where applicable, placed on a suppression list in order to prevent future mailings to you.
Newsletter for existing customers: If you are already our customer and we have received your e-mail address in connection with a vehicle rental or gift card purchase, we reserve the right to send you our newsletter or similar advertising information regarding our own similar offers even without separate consent. This is done in strict compliance with Section 7(3) UWG and on the basis of our legitimate interest in direct advertising, Art. 6(1)(f) GDPR. You will only receive such e-mails from us if you have not objected to this. You may of course object to the use of your e-mail address for advertising purposes at any time. A corresponding unsubscribe link can be found in each such e-mail. You will not incur any costs for the objection other than the transmission costs according to the basic tariff.
Newsletter service provider Mailchimp: We use an external service provider to send our newsletter. Specifically, the newsletter is sent via Mailchimp, a newsletter platform provided by The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. We have concluded a data processing agreement with Mailchimp pursuant to Art. 28 GDPR. The data you enter when subscribing to the newsletter, e-mail address and, where applicable, name, are stored on Mailchimp servers in the USA. Mailchimp uses this information to send and evaluate the newsletters on our behalf. Please note that this involves the transfer of your data to a third country, USA. Please refer to the section on data transfers to third countries in this Privacy Policy. Mailchimp is certified under the EU-U.S. Data Privacy Framework, DPF, which means that an adequate level of data protection is deemed to exist according to the EU Commission.
Mailchimp offers statistical evaluations of how newsletters are opened and used. For example, it can be analysed whether a newsletter message was opened and which links were clicked. We use this information to optimise our newsletter content. The legal basis for this evaluation is our legitimate interest in measuring the success of our newsletter campaigns, Art. 6(1)(f) GDPR. If you do not wish your usage behaviour to be analysed, you can unsubscribe from the newsletter at any time.
Further information on data protection at Mailchimp can be found in Mailchimp’s privacy policy: Mailchimp Privacy Policy, in English.
8. Use of Google Maps
Our website integrates maps from the Google Maps service in order, for example, to show you our location and facilitate route planning. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Through the use of Google Maps on our website, information about your use of this website, such as your IP address, may be transmitted to Google servers, which may also be located in the USA. We use Google Maps only with your consent pursuant to Art. 6(1)(a) GDPR. This means that the map is only loaded after you have consented to its use in the cookie/consent banner, or, where applicable, through an interaction that is deemed to constitute consent. Without your consent, no connection to Google Maps is established and a placeholder is displayed.
If you activate Google Maps, your IP address is transmitted to Google and Google learns that you have accessed the corresponding subpage of our website. In addition, Google may store a cookie on your device in order to analyse your usage behaviour. In this case, the use of Google Maps is carried out under Google’s own responsibility. We point out that this may involve a transfer of data to the USA. Google is certified under the EU-U.S. Data Privacy Framework; we have also concluded standard data protection clauses with Google in order to ensure an adequate level of data protection.
Further information on data protection at Google can be found in Google’s privacy policy.
9. Use of Google Fonts
This website uses so-called Google Web Fonts, provided by Google, for the uniform display of fonts. When you access a page, your browser loads the required web fonts into the browser cache in order to display texts and fonts correctly. The provider is also Google Ireland Limited, Dublin, Ireland.
For this purpose, your browser establishes a connection to Google’s servers. As a result, Google becomes aware that our website was accessed via your IP address. If your browser does not support web fonts, a standard font from your end device will be used.
The use of Google Fonts is in the interest of an attractive and consistent presentation of our online offering. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. In this context, personal data, in particular your IP address, may be transmitted to Google servers in the USA. Google is certified under the EU-U.S. Data Privacy Framework and assures that data from the font request will be used solely for the intended purpose and will not be combined with other Google services.
Further information on Google Web Fonts can be found here: https://developers.google.com/fonts/faq. Google’s privacy policy can be found at https://policies.google.com/privacy.
10. Integration of YouTube Videos
We have embedded videos from the YouTube platform on our website in order, for example, to provide you with vehicle presentations or explanatory videos. The provider of YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Where possible, we use YouTube in extended data protection mode. According to YouTube, this mode means that initially no cookies are set by YouTube as long as you do not play the video. However, as soon as you start the video, YouTube may collect information about you. This includes in particular your IP address, technical data about your browser/end device and the information as to which of our pages you have visited. If you are logged into YouTube or Google, YouTube may associate the video access with your user account. Playing a YouTube video may also trigger further data processing operations by Google, for example the setting of cookies to analyse your usage behaviour. We have no influence on this data transmission.
The integration of YouTube generally takes place only with your consent, Art. 6(1)(a) GDPR, which you may grant via our consent management. Without consent, YouTube videos are not loaded automatically. If you have consented, the data transfer to YouTube/Google takes place as described. Please note that personal data may be transferred to the USA in this context. Google, as the operator of YouTube, is certified under the EU-U.S. DPF; additional protective measures, such as standard contractual clauses, have been taken.
Further information on data protection at YouTube can be found in Google’s privacy policy.
11. Use of Google reCAPTCHA
To protect our online forms against spam and misuse, we use Google reCAPTCHA, a service provided by Google Ireland Limited, Dublin, Ireland. reCAPTCHA analyses your behaviour on our website, for example mouse movements and entries, as well as various characteristics in order to determine whether the input is made by a human or by an automated bot. For this purpose, reCAPTCHA uses code in the background and collects various information about your device, including IP address, time spent on the page and, where applicable, previously set Google cookies. These data are transmitted to Google servers, including in the USA, and evaluated there.
The use of reCAPTCHA is carried out in the interest of IT security and the protection of our web forms against abusive automated use and spam, Art. 6(1)(f) GDPR. This serves both our protection and the protection of users against unwanted content. However, since the integration of reCAPTCHA is associated with the transfer of data to Google, we obtain your consent for this via our consent banner pursuant to Art. 6(1)(a) GDPR before reCAPTCHA is activated.
Please note that reCAPTCHA may involve the transfer of personal data to the USA. Google is certified under the EU-U.S. DPF; in addition, we have concluded the standard contractual clauses approved by the EU Commission with Google in order to ensure an adequate level of data protection.
Further information on Google reCAPTCHA and data processing can be found in Google’s privacy policy and Google’s terms of use.
12. Integration of Social Media — Instagram, Facebook, WhatsApp, TikTok, LinkedIn
We maintain online presences on various social media platforms and also integrate content or links to these services on our website. This is done in order to present our company there and to communicate with customers, prospective customers and users. The respective platform operates its service under its own responsibility under data protection law. If you visit such a platform or use its functions, the privacy policies of the respective provider apply.
Social media plugins or links belonging to the following providers may be used on our website:
• Instagram: Instagram Inc., Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Our site may, for example, contain a linked Instagram logo or embedded content, images/videos, from Instagram. As soon as you access a page with an Instagram plugin, a connection to Instagram servers is established. Instagram is informed which of our pages you have visited and your IP address is transmitted. If you are logged into your Instagram account, Instagram may associate your visit to our pages with your user account. If you do not wish this to happen, please log out of Instagram. Further details can be found in Instagram’s data policy.
• Facebook: Facebook, Meta Platforms Ireland Ltd., Dublin, Ireland. Our website may contain Facebook buttons, for example “Like” or “Share”, or links to our Facebook profile. You can recognise these plugins by the Facebook logo. When visiting a page with a Facebook plugin, a connection to Facebook is established and data, such as IP address, browser data and time of visit, may be transmitted to Facebook. If you are logged into your Facebook account, Facebook may associate the visit to our pages with your profile. Further information is provided in Facebook’s privacy policy.
• WhatsApp: A link for contacting us via WhatsApp may be integrated on our website, WhatsApp Business button. Clicking this link opens WhatsApp on your device in order to send us a message. There is no direct integration that transmits data to WhatsApp upon page access; data are only transmitted when you actively use the WhatsApp channel, see also the section “Contact via WhatsApp” above. Provider: WhatsApp Ireland Ltd., Dublin, Ireland, a Meta Platforms company. Its privacy policy can be found here.
• TikTok: TikTok, provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. TikTok videos may be embedded on our website or we may link to our TikTok profile. When playing a TikTok video on our site or clicking on a TikTok link, personal data, such as your IP address, may be transmitted to TikTok. In this case, TikTok may record your usage behaviour and set cookies. Information on data protection at TikTok can be found in TikTok’s privacy policy.
• LinkedIn: LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Our website may integrate functions of the LinkedIn network, for example the LinkedIn logo as a link or the “Recommend” button. When accessing a page with a LinkedIn plugin, a connection to LinkedIn servers is established. LinkedIn thereby receives the information that you have visited our website with your IP address. If you click the LinkedIn “Recommend” button and are logged into your LinkedIn account, LinkedIn may associate your visit to our website with your user account. Details can be found in LinkedIn’s privacy policy.
Please note: As soon as you use one of these social media functions or access a corresponding page, personal data are transmitted to the respective provider. If you do not want the social networks to be able to associate your visit to our pages with your user account, please log out of the corresponding accounts before visiting our website and avoid using the plugins. We ourselves receive no direct knowledge of the content of the transmitted data or their use by the platforms. Data processing by the social networks is carried out under the providers’ own responsibility. Where applicable, joint controllerships pursuant to Art. 26 GDPR may exist with some providers, such as Facebook/Instagram, for certain statistics, for example Insights data on fan pages. In such cases, the corresponding agreements of the providers apply, to which we refer in the respective network.
13. Analysis and Tracking Tools
We use analysis and tracking technologies on our website in order to understand user behaviour and optimise our marketing measures. Certain tools mentioned below use cookies or similar technologies to collect information about your usage behaviour. These tools are only used if you have given us your consent via the cookie/consent banner. Legal basis: Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG. You may withdraw your consent at any time via our cookie settings. Below, we inform you about the services we use:
Facebook Pixel — Meta Pixel
This website uses the Facebook Pixel of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. With the help of this pixel, the behaviour of page visitors can be tracked after they have been redirected to our website by clicking on a Facebook or Instagram advertisement. This enables us to evaluate the effectiveness of our Facebook/Instagram advertisements for statistical and market research purposes and to optimise future advertising measures. In addition, the Facebook Pixel enables us to determine visitors to our website as a target group for the placement of Facebook ads, so-called Custom Audiences, so that we can display personalised advertising to you on Facebook/Instagram, provided you have an account on these platforms.
When you visit our pages, the Facebook Pixel records various information, such as pages accessed, your Facebook ID and, where applicable, conversions such as completed bookings, and transmits this information to Facebook servers. This data processing is carried out only with your consent, Art. 6(1)(a) GDPR. If you have given your consent, a corresponding tracking cookie from Facebook is stored on or read from your end device when you access our pages. The information generated is generally transmitted to and stored on a Meta server in the USA. Meta, Facebook, is certified under the EU-U.S. Data Privacy Framework; in addition, we have agreed the EU Standard Contractual Clauses with Meta.
Objection options: You may withdraw your consent at any time with effect for the future by adjusting the corresponding cookie settings. If you have a Facebook user account, you can also restrict the use of your data for advertising purposes in Facebook’s settings. Settings for usage-based advertising can, for example, be made here: https://www.facebook.com/settings?tab=ads or via websites such as http://www.youronlinechoices.com/de/, preference management for advertising networks.
Google Ads Conversion Tracking and Remarketing
We use Google Ads, formerly AdWords, provided by Google Ireland Ltd., Dublin, Ireland. Google Ads enables us to place advertisements in the Google search engine and on third-party websites and to track whether users reach our website via such an advertisement and perform a specific action there, conversion. For this purpose, Google places a conversion cookie on your end device when you click on our advertisement. If you subsequently visit certain pages of our website and the cookie is still valid, Google and we can recognise that you clicked on the advertisement and were redirected to our site. Each Ads customer receives a different cookie, so tracking across different websites is not possible. The information obtained using the conversion cookie is used to create conversion statistics for us, for example how many users performed a specific action. We do not receive any information that personally identifies users.
In addition, we use Google Ads Remarketing. In this process, a code, remarketing tag, is integrated into our website, which collects pseudonymous information about your usage behaviour by means of cookies or similar technologies. This enables us to address you again on other websites in the Google advertising network with targeted advertising, so-called remarketing or retargeting. For example, after visiting our site, relevant advertising for our offers may be displayed to you on other pages.
The use of Google Ads Conversion Tracking and Remarketing is also carried out exclusively with your consent, Art. 6(1)(a) GDPR. If you do not want Google Ads to record your usage behaviour, you can reject the corresponding cookies via our cookie settings or configure your browser so that cookies from the domain googleadservices.com are blocked. In addition, you can deactivate interest-based advertisements from Google via the Ads Settings Manager: https://adssettings.google.com.
The data collected by Google Ads may be transmitted to Google servers in the USA. Google is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses have also been concluded with Google.
Further information on Google Ads can be found in Google’s privacy policy.
14. Applications — Applicant Data
If you apply to us, for example via an online form or by e-mail, we process the application data transmitted by you, such as cover letter, CV, references, name, contact details, etc., in order to decide on the establishment of an employment relationship. The legal basis for this is Section 26(1) BDSG, decision on the establishment of an employment relationship, and additionally Art. 6(1)(b) GDPR, general contract initiation.
Your application data will be passed on internally only to the persons responsible for personnel selection. Any further use or disclosure to third parties will not take place without your express consent.
If your application is successful, the data you have provided will be further processed for the purposes of the employment relationship, Art. 6(1)(b) GDPR in conjunction with Section 26 BDSG; you may receive further information in this regard as part of the onboarding process. If we are unable to offer you a position, your documents will be deleted no later than 6 months after completion of the application process. Retention for 6 months takes place in particular in order to be able to defend against possible legal claims, for example claims under the General Equal Treatment Act. If you have consented to longer storage, talent pool, we will retain your application data in accordance with your consent, Art. 6(1)(a) GDPR. You may of course withdraw any consent granted at any time with effect for the future.
15. Data Transfers to Third Countries
As can be seen from the preceding sections, we work with certain service providers and/or integrate services that process personal data outside the European Union, EU, in particular in the USA. If we transfer data to a so-called third country, we ensure, insofar as no adequacy decision of the EU Commission exists, by means of appropriate safeguards that a level of protection corresponding to European data protection standards is guaranteed, Art. 44 et seq. GDPR. For this purpose, we make use in particular of the Standard Contractual Clauses, SCC, issued by the EU Commission and, where possible, review additional protective measures.
Since 10 July 2023, an adequacy decision has existed for data transfers to the USA under the new EU-U.S. Data Privacy Framework, DPF. Insofar as our US service providers are certified accordingly, for example Google, Meta, Mailchimp, the level of data protection for the USA is considered adequate according to the assessment of the EU Commission. Irrespective of this, we continue to conclude Standard Contractual Clauses where required.
We nevertheless point out that certain residual risks cannot be entirely ruled out in the case of transfers to third countries, in particular the USA. In particular, US authorities may be able to access personal data under local law without you, as an EU citizen, necessarily having legal remedies available against this. We therefore carry out transfers to third countries only under the conditions mentioned and only insofar as absolutely necessary.
If you have questions about the specific safeguards for transfers to third countries or wish to receive copies of the agreed protection mechanisms, you may contact us.
16. Data Security
We take extensive technical and organisational security measures pursuant to Art. 32 GDPR in order to protect your personal data against accidental or intentional manipulation, loss, destruction or unauthorised access. Our website uses, for example, TLS encryption, recognisable by “https://” in the address line, in order to protect confidential content that you transmit to us. Our security measures are continuously improved in line with technological development. We also pay attention internally to data protection and data security; our employees are bound to confidentiality and we ensure that only authorised persons have access to personal data.
Please note, however, that data transmission on the Internet, for example when communicating by e-mail, may generally have security gaps. Absolute, gap-free protection of data against access by third parties is not possible.
17. Your Rights as a Data Subject
As a person affected by data processing, you have the following data subject rights under the GDPR. To exercise these rights, you may contact us at any time using the contact details provided above:
• Right of access, Art. 15 GDPR: You have the right to obtain information about which personal data we process about you, for what purposes, to which recipients the data may have been disclosed and how long we store them, as well as further information specified in Art. 15 GDPR.
• Right to rectification, Art. 16 GDPR: You have the right to request the immediate rectification of inaccurate personal data stored by us or the completion of incomplete personal data.
• Right to erasure, Art. 17 GDPR: You may request that we delete your personal data if the statutory requirements are met. This is particularly the case if the purpose of the processing no longer applies, you have withdrawn consent previously granted or the processing is unlawful.
• Right to restriction of processing, Art. 18 GDPR: You have the right to request the restriction of the processing of your data as long as, for example, the accuracy of the data is contested by you or you have objected to the processing. In such cases, apart from storage, we may process the data only with your consent or for the establishment, exercise or defence of legal claims.
• Right to data portability, Art. 20 GDPR: You have the right to receive the personal data concerning you that you have provided to us in a commonly used, structured and machine-readable format or, at your request and where technically feasible, to request direct transmission to another controller.
• Right to object, Art. 21 GDPR: You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data if such processing is based on Art. 6(1)(e) or Art. 6(1)(f) GDPR. If you exercise your right to object, we will no longer process the relevant data unless we can demonstrate compelling legitimate grounds that override your interests.
o Objection to direct advertising: In particular, you may object at any time to the processing of your personal data for direct advertising purposes, Art. 21(2) GDPR. In this case, we will no longer use your data for advertising purposes.
• Right to withdraw consent, Art. 7(3) GDPR: If we process your data on the basis of consent, you may withdraw this consent at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out up to that point.
• Right to lodge a complaint with a supervisory authority, Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. For this purpose, you may contact, for example, the data protection officer responsible for us in the Free State of Saxony: Sächsische Datenschutz- und Transparenzbeauftragte, Postfach 11 01 32, 01330 Dresden, e-mail: saechsdsb@slt.sachsen.de, or any other authority responsible for your place of residence.
Note: Exercising the above-mentioned rights is generally free of charge for you. To verify your identity and prevent misuse, we may request additional information from you in the case of access requests. We will endeavour to respond to your requests without undue delay and in any event within the statutory period of one month.
18. Objection to Advertising E-mails
The use of our contact details published as part of the legal notice obligation for the purpose of sending unsolicited advertising and information materials is hereby objected to. As website operators, we expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example spam e-mails or advertising calls.
Status of this Privacy Policy: April 2026.