Privacy & Cookie Notice 

PRIVACY NOTICE FOR WEBSITE USERS IN ACCORDANCE WITH ARTICLES 13 AND 14 OF THE GENERAL DATA REGULATION (GDPR)

Eurofighter Jagdflugzeug GmbH operates this website with general information. The following information is intended to provide you with a clear overview of the processing of your personal data and your associated rights.

I. Identity and contact details of the controller

Eurofighter Jagdflugzeug GmbH
Am Söldnermoos 17
85399 Hallbergmoos

Phone: +49 811 80-0
Email: [email protected]

(here after "we", "us" or "our")

II. Contact details of the data protection officer

c/o activeMind.legal Rechtsanwaltsgesellschaft mbH
Potsdamer Straße 3
80802 Munich

Phone: +49 89 919294-900
E-mail: [email protected]

III. Data processing on our website

1. Accessing our website – Provision of the website and creation of log files

  1. Purpose and legal basis/ legitimate interest

    When you access our website information of a general nature is automatically collected. This information (server log files) includes, e.g. the type of web browser, the operating system used, your IP address, referrer URL, date and time of access.

    In particular, they are processed for the following purposes:
    - Ensuring smooth connection setup of the website;
    - Ensuring smooth use of our website;
    - Ensuring and evaluating system security and stability, in particular for abuse detection;
    - Ensuring the technically error-free presentation and optimisation of our website.

    We do not use your data to draw conclusions about you personally. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

    Legal basis for the processing of your personal data in the context of providing the website and the creation of log files is Art. 6 (1) lit. f GDPR – Legitimate Interest.

  2. Recipients of the data

    We contracted an agency for the operation and maintenance of our website, who act as our data processors.

    Third country transfer: Processing also takes place outside the EU, namely in the UK. Guarantees exist in the form of adequacy decision of the European Commission.

    Furthermore, we use technical service providers for the operation and maintenance of our website, who act as our data processors. All service providers are contractually obligated to treat your data confidentially and are mentioned with details in this Privacy Notice and/ or the Cookie Consent Tool.

  3. Duration of storage

    The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In case your personal data are recorded for the purpose of providing the website, this happens as soon as the relevant session has ended.

    If your personal data is stored in log files, they will be erased after one week at the latest. If the log files are stored beyond this period, your personal data will be made anonymous so that it is no longer possible to assign them to you.

  4. Provision prescribed or required

    The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address and the cookie identifier, the services and functionalities of our website are not guaranteed.

  5. Objection and rectification option

    The collection of your personal data for the provision of the website and the storage of your personal data in log files is necessary in order to operate the website. Consequently, you cannot object to this data processing.

2. Contact form and email contact

  1. Purpose and legal basis/ legitimate interest

    On our website there is a contact form which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.

    At the time the message is sent, the following data is also stored:

    - Date and time of the message;

    Alternatively, it is possible to contact us via the e-mail addresses provided. In this case, the user's personal data transmitted with the e-mail will be stored. This includes the date and time the e-mail was sent, e-mail address, IP addresses and information about the servers involved in the e-mail communication.

    In addition, you can contact us via the telephone number provided. In this case, we might collect data like your telephone number. As a matter of principle, we do not record conversations.

    Regardless of the type of communication you choose, we collect the content of your enquiry. Your data is stored for the purpose of individual communication with you.

    Legal basis for the processing of your personal data transmitted in the course of contacting us is Art. 6 (1) lit. f GDPR – Legitimate Interest.

    Our legitimate interest is to facilitate effective communication between you and us.

  2. Recipients of the data

    We contracted an agency for the operation and maintenance of our website, who act as our data processors.

    Third country transfer: Processing also takes place outside the EU, namely in the UK. Guarantees exist in the form of adequacy decision of the European Commission.

  3. Duration of storage

    The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of any personal data sent in the course of contacting us, this happens when your request has been processed and no legal retention periods prevent erasure.

  4. Provision prescribed or required

    The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with your name, email address and the reason for the request.

  5. Objection and rectification option

    You can always object to the processing of your personal data in the context of contacting us for the future. In this case, however, we will not be able to process your request any further. All personal data stored in the context of contacting us will be erased, unless legal retention periods prevent erasure.

3. Reach measurement

  1. Purpose and legal basis/ legitimate interest

    We evaluate user behaviour with the help of analysis tools. A more detailed description of the tools can be found in the chapter “Matomo Analytics” of this privacy statement.

    The processing is carried out in accordance with Art. 6 (1) (f) GDPR – Legitimate Interest on the basis of our legitimate interest. The measurement of the reach and the resulting information are suitable for adjusting the web offer.

  2. Recipients of the data

    For details please refer to the chapter of the respective service provider.

  3. Storage duration

    The data is anonymized immediately after collection.

  4. Provision prescribed or required

    For details please refer to the chapter of the respective service provider.

  5. Objection and rectification option

    For details, please refer to the chapter of the respective service provider.

4. Use of Cookies

  1. General Information

    A cookie is a small data set that is created when a website is visited and is temporarily stored on the website user's system. If the server of this website is called up again by the user of the website, the browser of the user of the website sends the previously received cookie back to the server. The server can evaluate the information obtained through this procedure. Cookies can, in particular, make it easier to navigate a website.

    Detailed information on the subject of cookies, and which cookies are used on this website (after consent), can be found in our Cookie Consent Tool, which you can access at any time by clicking on the icon at the bottom left corner of our website.

  2. Deletion of Cookies

    You can change/ revoke your declared consent to the processing of your personal data at any time for the future by proceeding as follows:

    (1)    Change of the consent settings on our website

    On our website, we offer you the possibility to simply revoke the processing of your personal data. To do this, you must click on the Cookie Consent Tool, which you can access at any time by clicking on the icon at the bottom left corner of your website.

    By withdrawing your consent, a further cookie is set on your computer, which indicates which cookies to use/ not use. If you delete this cookie, you will be asked for your consent again the next time you visit our website.

    (2)    Changing the settings of your browser

    Alternatively, you can deactivate or restrict the transmission of cookies in general by changing the settings in your browser. You can delete already stored cookies at any time. This can also be done automatically. IP anonymisation is activated on our website.

    Depending on the provider of your browser, you can find the necessary information under the following links:
    - Mozilla Firefox: https://support.mozilla.org/kb/clear-cookies-and-site-data-firefox
    - Internet Explorer: https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies
    - Google Chrome: https://support.google.com/accounts/answer/61416
    - Opera: http://www.opera.com/help
    - Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac

    Additionally, you can prevent loading of so-called scripts by default. NoScript allows JavaScript, Java and other plugins to run only on trusted domains of your choice. For information and instructions on how to edit this feature, contact your browser vendor (e.g. for Mozilla Firefox: https://addons.mozilla.org/en-GB/firefox/addon/noscript/).

5. Use of technically necessary cookies

  1. Purpose and legal basis/ legitimate interest

    The purpose of using technically necessary cookies is to make it easier for you to use our website. Some functions of our website cannot be offered without the use of cookies. For this, it is necessary that your browser is recognised again after a page change. Your personal data will not be processed in any other way.

    Legal basis for the processing of your personal data in the context of the use of technically necessary cookies is Art. 6 (1) lit. f GDPR – Legitimate Interest.

  2. Recipients of the data

    We use service providers for the operation and maintenance of our website, who act as our data processors.

    All service providers are contractually obligated to treat your data confidentially and are mentioned with details in this Privacy Notice and/ or the Cookie Consent Tool.

  3. Duration of storage

    The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected; this happens, in particular, as soon as the relevant session has ended.

  4. Provision prescribed or required

    The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.

  5. Objection and rectification option

    Cookies are stored on your computer and transmitted from the computer to our website. Therefore, you have complete control over the use of cookies (see chapter “Use of Cookies – Deletion of Cookies”).

    The transmission of flash cookies, however, cannot be prevented by changing the settings of your browser. You will need to make the necessary changes in your Adobe Flash Player settings.

    Technically necessary cookies (Provider: Eurofighter)

    Cookie name

    Description and usage

    Duration of storage

    CookieConsent

    Stores the user's cookie consent state for the current domain.

    13427 days

    eurofighter_session

    This cookie is provided by the framework and used by us to handle sessions.

    1 day

    XRSF-TOKEN

    This cookie is provided by Laravel framework and used by us to protect our website from cross-site request forgery.

    1 day

6. Use of technically unnecessary cookies

  1. Purpose and legal basis/ legitimate interest

    We also use such cookies and plug ins on the website that enable an analysis of the user's surfing behaviour (Matomo Analytics) and present video content (YouTube videos). These cookies are used to make the use of the website more efficient, attractive and secure.

    The legal basis for these processing operations is in each case your consent, Art. 6 (1) (a) GDPR .

  2. Recipients of the data

    We use technical service providers for the operation and maintenance of our website, who act as our data processors.

    All service providers are contractually obligated to treat your data confidentially and are mentioned with details in this Privacy Notice and/ or the Cookie Consent Tool.

  3. Storage duration

    For details, please refer to the chapters of the respective service provider.

  4. Provision prescribed or required

    The provision of your data is voluntary, based solely on your consent. However, we would like to point out that in this case you may not be able to use all functions of our website to their full extent.

  5. Objection and rectification option

    Statistics cookies (Provider: Google)

    Cookie name

    Description and usage

    Duration of storage

    td

    This cookie allows integration of Matomo Analytics via Google Tag Manager.

    Session

    Marketing cookies (Provider: YouTube)

    Cookie name

    Description and usage

    Duration of storage

    LASTRESULTENTRY_KEY

    Session

    nextId

    Session

    requests

    Session

    yt.innertube::nextId

    Registers a unique ID to keep statistics of what videos from YouTube the user has seen.

    Persistent

    yt-remote-device-id

    Stores the user's video player preferences using embedded YouTube video

    Persistent

    yt-remote-cast-installed

    Stores the user's video player preferences using embedded YouTube video

    Session

    yt-remote-cast-available

    Stores the user's video player preferences using embedded YouTube video

    Session

    yt-remote-session-app

    Stores the user's video player preferences using embedded YouTube video

    Session

    yt-remote-session-name

    Stores the user's video player preferences using embedded YouTube video

    Session

    yt-remote-fast-check-period

    Stores the user's video player preferences using embedded YouTube video

    Session

    yt-remote-connected-devices

    Stores the user's video player preferences using embedded YouTube video

    Persistent

    ytidb::LASTRESULTENTRY_KEY

    Stores the user's video player preferences using embedded YouTube video

    Session

    yt-remote-device-id

    Stores the user's video player preferences using embedded YouTube video

    Persistent

    yt-remote-cast-installed

    Stores the user's video player preferences using embedded YouTube video

    Session

    yt-remote-device-id

    Stores the user's video player preferences using embedded YouTube video

    Session

    yt-remote-cast-available

    Stores the user's video player preferences using embedded YouTube video

    Session

    yt-remote-session-app

    Stores the user's video player preferences using embedded YouTube video

    Session

    yt-remote-session-name

    Stores the user's video player preferences using embedded YouTube video

    Session

    yt-remote-fast-check-period

    Stores the user's video player preferences using embedded YouTube video

    Session

    yt-remote-connected-devices

    Stores the user's video player preferences using embedded YouTube video

    Persistent

    ytidb::LASTRESULTENTRY_KEY

    Stores the user's video player preferences using embedded YouTube video

    Persistent

    YtIdbMeta#databases

    Persistent

    CONSENT

    Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website.

    2 years

7. Cloudflare Turnstile

  1. Purpose and legal basis/ legitimate interest

    The purpose of the processing of your personal data in the context of the anti-spam and anti-tampering protection using Cloudflare Turnstile is to protect the input fields provided on our website from abusive content (“spam”) by robot programs (“bots”).

    The legal basis for the processing of your personal data in the context of the anti-spam and anti-tampering protection using Cloudflare Turnstile is Art. 6 (1) lit. f GDPR.

  2. Recipients of the data

    The operator of this tool is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA

    Further information on your relevant rights and setting options to protect your privacy can be found in the privacy policy of the provider (https://www.cloudflare.com/trust-hub/gdpr/).

    Third country transfer: Processing also takes place outside the EU, namely in the U.S. Guarantees exist in the form of concluded standard contractual clauses. The guarantee of an approximately equal level of data protection as within the EU is carried out as best as possible via the technical restriction of the data transfer. The standard contractual clauses can be viewed here: https://www.cloudflare.com/privacypolicy/.

  3. Duration of storage

    Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected.

  4. Provision prescribed or required

    The provision of the aforementioned personal data is neither legally nor contractually required. However, without this tool, the services and functionalities of our website are not secured.

  5. Objection and rectification option

    The processing of your personal data in the context of the anti-spam and anti-tampering protection using Cloudflare Turnstile is absolutely necessary for the protection of the input fields provided on our website. Consequently, you cannot object to this processing.

8. Matomo Analytics

  1. Purpose and legal basis/ legitimate interest

    With the help of this tool, the behaviour of visitors to our website can be evaluated and interests can be analysed. The processing of your personal data enables us to optimise i.a the user-friendliness of our website. For this purpose, we create a pseudonymous user profile.

    Further information on your relevant rights and setting options to protect your privacy can be found in the privacy policy of the software Matomo Analytics that is provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand (https://matomo.org/docs/privacy/).

    Legal basis for the processing of your personal data in the context of the use of Matomo Analytics by means of so-called “tracking cookies” is your declared consent in accordance with Art. 6 (1) lit. a GDPR.

  2. Recipients of the data

    We use service providers for the operation and maintenance of our website, who act as our data processors.

    Third country transfer: Processing also takes place outside the EU, namely in New Zealand. Guarantees exist in the form of adequacy decision of the European Commission.

  3. Duration of storage

    Your personal data will be erased as soon as you withdraw your declared consent, or your personal data are no longer necessary to achieve the purpose for which they were collected.

  4. Provision prescribed or required

    The declaration of your consent to the processing of your personal data in the context of the use of Matomo Analytics is neither legally nor contractually required. However, if you reject this function, you might not be able to use all website functions to their full extent. Furthermore, we cannot further optimise and improve our services without the provision of your data.

  5. Objection and rectification option

    For details please refer to the chapter “6) Use of technically unnecessary cookies”.

9. Usercentrics (“Cookiebot”)

  1. Purpose & Legal Basis / Legitimate Interest

    Cookiebot processes personal data to manage cookie consent, keep a scan of cookies/trackers, and ensure the website’s functionality aligns with user preferences.

    The legal basis for the processing of your personal data in this context is
    - Art. 6 (1) lit. a GDPR: processing relies primarily on users granting consent via cookie settings
    - Art. 6 (1) lit. b GDPR: where required to fulfil a service contract.
    - Art. 6 (1) lit. f GDPR: applied when processing is necessary and interests are balanced.

  2. Recipients of the Data & Third‑Country Transfers

    Personal data (like cookie scans, consent logs, IPs, browser user-agent, geolocation) is shared with Cookiebot's processor, Usercentrics A/S.

    Third‑Country Transfers: Cookiebot indicates in its scan report if cookies send data to non-EU (“third”) countries and whether those countries are considered GDPR‑“adequate.” For non‑adequate countries (e.g., U.S.), it is recommended to avoid usage of tracking that sends personal data there or to inform users and assess risks.

  3. Duration of Storage

    End‑User Data: Stored for 12 months after registration, or until cancellation if earlier.

  4. Provision Prescribed or Required

    There is no statutory requirement obliging users to provide personal data; however, certain processing is necessary to offer Cookiebot services (e.g., tracking consent).

    Failure to provide consent may result in the inability to use Cookiebot’s consent management functions. (Implied by “necessary to provide a functioning website and our content and services.”).

  5. Objection & Rectification Options

    Withdrawal of Consent: users can change or withdraw consent as easily as they granted it. Cookiebot provides a “Privacy trigger” banner and a “Cookie Declaration” page to enable this.

    Rectification: Users can request correction of inaccurate data (e.g., browser state, preferences) under GDPR principles.

10. YouTube videos

  1. Purpose and legal basis/ legitimate interest

    The processing of your personal data by means of the integration of YouTube videos serves the purpose of providing an appealing, uniform presentation of video content on our website, independent of your terminal device.

    The legal basis for the processing of your personal data by means of the integration of YouTube videos in our website, is Art. 6 (1) lit. a GDPR.

  2. Recipients of the data & third country transfer

    The operator of this plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066 that is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells YouTube which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to your account. You can prevent this by logging out of your YouTube account beforehand.

    If a YouTube video is started, the provider uses cookies that collect information about user behaviour.

    Further information on your relevant rights and setting options to protect your privacy can be found in the privacy policy of the provider (https://policies.google.com/privacy ).

    Third country transfer: Processing also takes place outside the EU, namely in the U.S. Guarantees exist in the form of concluded standard contractual clauses. The guarantee of an approximately equal level of data protection as within the EU is carried out as best as possible via the technical restriction of the data transfer. The standard contractual clauses can be viewed here: https://www.youtube.com/static?template=terms .

  3. Duration of storage

    We implement YouTube videos in our website using the advanced privacy mode. This mode ensures that no further information about your visit to our website is stored beyond the integration. Your personal data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. This is the case at the latest after the end of your visit to our website.

  4. Provision prescribed or required

    The declaration of your consent to the processing of your personal data in the context of the presentation of video content is neither legally nor contractually required. However, if you reject this function, you might not be able to use all website’s functions to their full extent.

  5. Objection and rectification option

    For details please refer to the chapter “Use of Cookies – Deletion of Cookies”.

IV. DATA PROCESSING ON OUR SOCIAL MEDIA PROFILES

You use our company pages and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. comment, share, like/ rate).

We operate a company accounts on

Platform name

Service Provider

Responsible for the European area

Facebook

Meta Platforms Inc.

Meta Platforms Ireland Limited

(4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland)

Instagram

LinkedIn

LinkedIn Inc.

LinkedIn Unlimited Company

(Wilton Place, Dublin 2, Ireland)

YouTube

YouTube, LLC

(a subsidiary of Google LLC)

Google Ireland Limited

(Gordon House, Barrow Street, Dublin 4, Ireland)

X

X Corp.

X Internet Unlimited Company

(One Cumberland Place, Fenian Street, Dublin 2, Ireland)

  1. Purpose and legal basis/ legitimate interest

    We maintain this company pages to
    - inform users, interested parties and customers about our company and events;
    - offer users the opportunity to communicate with us;
    - record our company history.

    The processing of your personal data is based on Art. 6 (1) (f) GDPR – Legitimate interest. Our legitimate interest exists exclusively for marketing purposes such as
    - better accessibility of target groups,
    - increasing visibility,
    - image building,
    - user information,
    - employer branding.

    Use of Insights and Statistics:

    We use the analytics tools provided by the social media platforms to better understand how users interact with our profiles, posts and content. These statistics are generally aggregated and anonymised and help us evaluate reach, engagement, audience demographics and performance trends. The insights we receive are strictly statistical in nature and do not allow us to identify individual users unless the platform explicitly provides such information and you have chosen to make it visible through your account settings.

    The data used for this purpose is collected and processed by the respective social media providers.

    In this context we act as joint controllers with the following social media providers:

    - Facebook Page Insights:
    https://www.facebook.com/legal/controller_addendum

    - Instagram Insights:
    With regard to Instagram Insights, please refer to the information in the Facebook Insights above.

    - LinkedIn Analytics:
    https://legal.linkedin.com/pages-joint-controller-addendum

    Below you will find more information about the processing of your data and what options you have to manage your preferences:

    - Facebook Page Insights:
    www.facebook.com/legal/terms/information_about_page_insights_data

    Instagram Insights:
    help.instagram.com/1533933820244654

    LinkedIn Analytics:
    www.linkedin.com/help/linkedin/answer/a547077

    YouTube Analytics (Google):
    support.google.com/youtube/topic/3024165

    X Analytics:
    help.x.com/en/using-x/x-analytics

  1. Recipients of the data & third country transfer

    Platform name

    Recipients of the data

    Third country transfer

    Facebook

    Meta Platforms Ireland Limited

    The parent company Meta Platforms Inc. is based in the USA, which means that a transfer to the USA cannot be ruled out.

    Instagram

    LinkedIn

    LinkedIn Inc.

    In accordance with the LinkedIn Privacy Policy, personal data is also processed by LinkedIn in the USA or other third countries. LinkedIn only transfers personal data to countries for which an adequacy decision has been issued by the European Commission in accordance with Art. 45 GDPR or on the basis of suitable guarantees in accordance with Art. 46 GDPR.

    YouTube

    YouTube, LLC;

    Google, LLC

    The data collected about you in this context is processed by Google Ireland Limited and YouTube, LLC. The parent company Google, LLC is based in the USA. Therefore, data may be transferred to countries outside the EU. For further information please refer to https://policies.google.com/privacy.

    X

    X Corp.

    Information is transferred to X Corp in the USA as well as to other affiliated companies and external partners outside the EU.

    Facebook, Instagram and YouTube: The European Commission has issued an adequacy decision for the USA, which is effective for companies certified under the Data Privacy Framework. Meta Platforms Inc., LinkedIn and Google, LLC are certified in accordance with this framework and bases the transfer to the USA on the adequacy decision.

    X: Transfers are based on user consent and the use of Standard Contractual Clauses (SCCs) approved by the European Commission.

  2. Duration of storage

    We store your personal data only for as long as necessary to fulfil the purposes outlined above.

    When you interact with our social media profiles, your data may also be processed according to the respective privacy policies of the platforms we use. Each platform determines its own retention periods and processing purposes (see below).

    If you maintain an account with one of these providers, you can often manage the use and storage of your personal data directly within your profile settings. This includes options such as controlling ad preferences, managing stored information or deleting your account. For more details, please refer to the respective account settings pages:

    Facebook:
    Privacy Policy – www.facebook.com/privacy/explanation
    Account Settings – www.facebook.com/settings

    Instagram:
    Privacy Policy – https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect
    Account Settings – www.instagram.com/accounts/privacy_and_security/

    LinkedIn:
    Privacy Policy – www.linkedin.com/legal/privacy-policy
    Account Settings – www.linkedin.com/psettings/

    YouTube (Google):
    Privacy Policy
    Google Account Settings – myaccount.google.com/

    X:
    Privacy Policy – help.x.com/en-us/terms/privacy
    Account Settings – x.com/settings

  3. Provision prescribed or required

    The provision of your personal data is not required by law or contract. However, you cannot interact with us or our content without providing your personal data.

  4. Objection and rectification option

    Please read the information about your right to object according to Art. 21 GDPR under “V. Information on the rights of data subjects – 5. Right to Object (Art. 21 GDPR).

V. INFORMATION ON THE RIGHTS OF DATA SUBJECTS

  1. Right of Access (Art. 15 GDPR)

    You have the right to request confirmation from the controller as to whether personal data concerning you is being processed. Where this is the case, you are entitled to access the personal data as well as information about its processing.

  2. Right to Rectification (Art. 16 GDPR)

    You have the right to request the correction of inaccurate personal data concerning you without undue delay. Where necessary, you may also request the completion of incomplete personal data.

  3. Right to Erasure (Art. 17 GDPR)

    You have the right to request the deletion of your personal data where one of the grounds specified in Art. 17 GDPR applies.

  4. Right to Restriction of Processing (Art. 18 GDPR)

    You have the right to request the restriction of processing where one of the conditions listed in Art. 18 GDPR applies, e.g., if you have objected to the processing, for the duration of the controller’s review.

  5. Right to Lodge a Complaint (Art. 77 GDPR in conjunction with §19 BDSG (Federal Data Protection Law))

    Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR. You may submit the complaint to the supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

    A list of supervisory authorities (for the non-public sector) with address can be found at: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html .

VI. INFORMATION ON THE RIGHT TO OBJECT IN TERMS OF ART.21 GDPR

Right to Object on a case-by-case basis

The data subject has the right, on grounds relating to their particular situation, to object at any time to the processing of their personal data which is carried out on the basis of Art. 6(1) (f) GDPR (data processing on the basis of a balance of interest); this also applies to profiling based on this provision within the meaning of Art.4 No.4 GDPR by contacting the controller via [email protected]  The controller shall then no longer process the data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing is required for the establishment, exercise, or defence of legal claims (Art. 21 GDPR).