data protection

Further information for users

Legal basis for processing

The provider may only process personal data of users if one of the following applies:

• Users have given their consent for one or more specific purposes. Note: In some jurisdictions the Owner may be allowed to process Personal Data until the User objects to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. However, this shall not apply where the processing of Personal Data is subject to European Data Protection Law;
• the data collection is necessary for the performance of a contract with the user and/or for pre-contractual measures arising from this;
• the processing is necessary for compliance with a legal obligation to which the provider is subject;
• the processing is related to a task carried out in the public interest or in the exercise of official authority vested in the provider;
• the processing is necessary to protect the legitimate interests of the provider or a third party.

In any case, the provider will gladly provide information about the specific legal basis on which the processing is based, in particular whether the provision of personal data is a legal or contractual obligation or a prerequisite for entering into a contract.

Further information on length of stay

Unless otherwise specified in this document, Personal Data will be processed and stored for as long as necessary to fulfill the purposes for which it was collected and may be retained for longer periods if required by a legal obligation or based on the User's consent.

Therefore:

• Personal data collected for the purpose of fulfilling a contract concluded between the provider and the user will be stored until this contract has been fully fulfilled.
• Personal Data collected to pursue the legitimate interests pursued by the Owner will be retained for as long as necessary to fulfil such purposes. Users may find more information about the Owner's legitimate interests in the relevant sections of this document or by contacting the Owner.

Furthermore, the Owner is allowed to store Personal Data for a longer period if the User has consented to such processing, as long as the consent is not withdrawn. In addition, the Owner may be obliged to retain Personal Data for a longer period if this is necessary to fulfill a legal obligation or upon order of an authority.

After the retention period has expired, personal data will be deleted. Therefore, the right to information, the right to erasure, the right to rectification and the right to data portability cannot be asserted after the retention period has expired.

The rights of users

Users may exercise certain rights regarding their Data processed by the Owner.

To the extent permitted by law, users have the right to do the following:

• Revoke consent at any time. If the user has previously consented to the processing of personal data, he or she can revoke his or her consent at any time.
• Object to the processing of their data. The user has the right to object to the processing of his data if the processing is based on a legal basis other than consent.
• Obtain information regarding their data. The user has the right to know whether the data is being processed by the provider, to obtain information about certain aspects of the processing and to obtain a copy of the data.
• Check and have it corrected. The user has the right to check the accuracy of his data and to request that it be updated or corrected.
• Request restriction of the processing of their data. Users have the right to restrict the processing of their data. In this case, the provider will not process the data for any purpose other than storage.
• Request deletion or other removal of personal data. Users have the right to request that the provider delete their data.
• Receive your data and have it transferred to another responsible party. The user has the right to receive his data in a structured, common and machine-readable format and, if technically possible, to have it transmitted to another responsible party without hindrance.
• Submit a complaint. Users have the right to submit a complaint to the competent supervisory authority.

Users also have the right to obtain information about the legal basis of Data transfers abroad or to an international organization governed by public international law or set up by two or more countries, such as the UN, as well as about the security measures taken by the Owner to protect their Data.

Details on the right to object to processing

Where personal data is processed in the public interest, in the exercise of an official authority vested in the owner or to safeguard the legitimate interests pursued by the owner, the user may object to such processing by providing a justification related to his or her particular situation.

Users are informed that they can object to the processing of personal data for direct marketing purposes at any time and free of charge without giving reasons. If the User objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes. Users can find out whether the Owner processes personal data for direct marketing purposes by checking the relevant sections of this document.

How the rights can be exercised

Any requests to exercise User rights may be directed to the Owner using the contact details provided in this document. These requests may be made free of charge and will be answered by the Owner as soon as possible and at the latest within one month, providing Users with the information required by law. Any rectification or erasure of Personal Data or restriction of processing will be communicated by the Owner to all recipients to whom the Personal Data was disclosed, if any, unless doing so should prove impossible or involve disproportionate efforts. The Owner will inform the User of such recipients if the User requests it.