Data protection information for the webpages of the International Motor Show (IAA)
We take the protection of your personal data very seriously. The following information outlines how we process your personal data and your rights based on the data protection legislation.
1. Contact data
Organization responsible for data processing (controller):
Verband der Automobilindustrie e. V. (VDA)
Tel.: +49 30 897842-0
Fax: +49 30 897842-600
Questions concerning data protection and your data privacy rights (section 7) may be addressed to firstname.lastname@example.org.
Contact details for our data privacy officer:
Dr. Gregor Scheja
Scheja und Partner Rechtsanwälte mbB
Tel.: +49 228 227226-0 | Mail: email@example.com
2. The sources and data we use
We process only the personal data that are required for the specific purpose for which they are processed (cf. section 3 below). These are data that we have received directly from you (e.g. data that you have entered to subscribe to a newsletter).
3. Why we process your data (purpose of processing) and the legal basis
The personal data mentioned above are processed by us in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG, amended). The VDA represents and promotes the interests of the entire German automotive industry. To this end, the VDA organizes the IAA, which has established itself as the leading trade show for mobility. The trade shows IAA Cars and IAA Commercial Vehicles take place in alternate years.
a) Internet presence:
The VDA wishes, inter alia, to offer a fully functional Internet presence and provide the best possible services on the IAA webpages in order to ensure the smooth running of an attractive trade fair and thus the representation of the interests of the automotive industry. This represents a legitimate interest in the meaning of Article 6(1) f of the GDPR for subsequent data processing (wherever this involves processing of personal data by the VDA):
- Server log files
Every time our Internet presentation is accessed and every time a file stored there is retrieved, this is recorded in a log file. Storing this information serves internal system-related and statistical purposes. The log records the following data: name of the file that was accessed, date and time, volume of data transmitted, notification of successful retrieval, the web browser and the requesting domain. IP addresses of the requesting computer are also logged. The legal basis for processing the data is Article 6(1) f of the GDPR, which permits the processing of data for the performance of a contract or of pre-contractual measures.
As indicated in the cookie banner, you agree to these conditions of use if you click on the “Accept all cookies” button on the cookie banner. If instead, you only click on “Confirm selection and save,” without having clicked on individual cookies or all types of cookies, or without making any declaration, no non-essential cookies will be placed on your device.
We also store your consent and any cookie selection you have made in a cookie on your device so that if you return to our website it will show that you have given consent and the cookie banner will not be displayed again every time you revisit the website.
At any time you can withdraw the consent you have already given, in whole or in part, with future effect. The ways you can do this are described in detail below.
Simply click on the following link to see your cookie settings and change them if necessary.
You cannot deactivate strictly necessary cookies via this link.
Strictly necessary cookies that are required for performing electronic communication or for providing certain functions you wish to use are stored on the basis of Article 6(1) f of the General Data Protection Regulation (GDPR). The website operator has a legitimate interest in storing cookies for technically error-free ant optimized provision of its services. If other cookies (e.g. cookies for analyzing your surfing behavior) are placed on your device, this is done on the basis of your consent and Art. 6(1) a of the GDPR.
We classify cookies into various categories, depending on their functions and purposes:
Strictly necessary (essential) cookies
Essential cookies enable basic functions and are required for the website to operate properly.
Cookie Consent Manager
Displays the cookie consent banner for configuring the cookies. This service does not gather any data about users.
Provider: MANDARIN MEDIEN
Cookie name: mmcm-jar-*
Expiry: Browser session
Data protection policy: https://www.mandarin-medien.de/datenschutz
Retain information about the user’s statuses for all page requests during one browser session.
Provider: Verband der Automobilindustrie e. V.
Cookie name: PHPSESSID
Expiry: Browser session
Data protection policy: https://www.iaa.de/en/cars/data-protection
The website uses a cookie for the watch list function. This cookie records the entries on the watch list. No other data are recorded.
Provider: Verband der Automobilindustrie e. V.
Cookie name: watchlist
Expiry: Browser session
Data protection policy: https://www.iaa.de/en/cars/data-protection
Statistics cookies collect information anonymously. This information helps us to understand how visitors use our website.
A cookie from Google is used for loading tools for website analytics and marketing. To meet users’ needs on our website, we create pseudonymized user profiles with the aid of Google Analytics. Google Analytics uses targeting cookies that are stored on your device and can be read by us. This enables us to recognize returning visitors and count them as such, and to find out how frequently our websites are retrieved by various users. The legal basis for the data processing is Art. 6(1) a of the GDPR (consent). Pseudonymized user profiles are created from the processed data. They are not used for personalization or to identify a particular natural person. The information generated by the cookie about your use of our website is usually transferred to and stored on a Google server in the US. However, as we have activated IP anonymization on our website, your IP address is truncated by Google in advance within member states of the European Union. Only in exceptional cases is the full IP address transferred to a Google server in the US and truncated there (you can find further information about the purpose and scope of the data collection at: https://policies.google.com/privacy?hl=en). Google does not associate the IP address transmitted by your browser in the context of Google Analytics with other data.
Google installs the following cookies when you visit our website and consent to the use of the Google Analytics cookie:
Provider: Google Ireland Limited
Cookie name: ga, _gid, _gat_xxx , _dc_gtm_xxx
Expiry: 2 years
Data protection policy: https://policies.google.com/
At any time you can withdraw the consent you have already given, as explained at the beginning in the general section. In addition, you can prevent Google Analytics from recording your data by clicking on the following link: Deactivate Google Analytics. In this case, an opt-out cookie will be placed on your device, which prevents the recording of your data during future visits to this website. You can find more information on how Google Analytics uses user data in Google’s data privacy information: https://support.google.com/analytics/answer/6004245?hl=en. We have concluded an agreement with Google for external data processing and implement the strict provisions of the German data protection authorities in full when using Google Analytics.
Cookies in the “marketing” category are used by third parties or publishers to show you personalized advertising or to measure the success of campaigns. They do so by tracking visitors’ movements across websites.
Facebook Pixel & Custom Audiences
We use Facebook Pixel. This allows users’ behavior to be tracked once they have clicked on a Facebook advertisement and have been redirected to the provider’s website. This process facilitates the analysis of user behavior and helps us tailor our marketing campaigns to user interests. This marketing tool automatically opens a connection to the Facebook server as soon as you have agreed to the use of this cookie (consent is required). By retrieving this pixel from your browser, Facebook can then recognize whether a Facebook advertisement was successful, e.g. whether it has led to an online purchase. We receive only statistical data about this process, which has no link to a specific person. It enables us to record the effectiveness of the Facebook advertisements for statistical and market-research purposes. However, Facebook may store and process the data for its own advertising purposes based on the relevant user profile.
You will find further information about which data are collected and what they are used for, their processing and usage by Facebook, and the options for adjusting your settings to protect your data, in Facebook’s data policy. The Facebook social network is operated by the eponymous company Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, US, or for users of our web pages resident in the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The legal basis for the data processing is Art. 6(1) a of the GDPR (consent). If you have not consented to marketing cookies, the Facebook Pixel & Custom Audiences will not be installed. Moreover, at any time you can withdraw the consent you have already given, as explained at the beginning in the general section.
Provider: Facebook Inc.
Cookie name: fbp, _dpr
Expiry: Browser session
Data protection policy: https://www.facebook.com/privacy/explanation
LinkedIn Insight tag
We use the LinkedIn Insight tag to analyze user behavior and to roll out our marketing campaigns tailored to user interests. The provider is LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The LinkedIn Insight tag creates a LinkedIn browser cookie in the user’s browser and enables collection of the following data for this cookie: IP address, timestamp and page events (e.g. page views). The IP addresses are either truncated or cached (if they are used to reach members via several devices). Members’ login names (user IDs) are removed within seven days to pseudonymize the data. The remaining pseudonymized data are then deleted within 180 days. LinkedIn does not share any personal data with us, and instead only offers us reports (in which you are not identified) on the website target group and advertising performance. You will find further information at: https://www.linkedin.com/help/linkedin/answer/65521.
Provider: LinkedIn Ireland
Cookie name: personalization_id
Expiry: 1 year
Data protection policy: https://www.linkedin.com/legal/sas-terms#additional-terms-for-optional-conversion-tracking
The legal basis for the data procession is Art. 6(1) a of the GDPR (consent). If you have not consented to marketing cookies, the LinkedIn Insight tag will not be placed on your device. Moreover, at any time you can withdraw the consent you have already given, as explained at the beginning in the general section.
Google Ads remarketing and conversion tracking
1) Conversion Tracking
We also use Google Ads remarketing. This function enables us to show users of our internet site targeted advertisements on other websites within the Google advertising network (e.g. Google Search, YouTube, or other websites). These ads are tailored to the interests of the user. User interaction with our internet site is evaluated for this purpose. Google stores cookies on the user’s computer in order to perform this analysis and evaluation, on which the interest-related advertising is based. The cookies are used to uniquely identify a web browser on a particular device and not to identify a person. If you subsequently visit other websites in the Google Display Network, you will be shown advertisements that very probably take account of the products or topics you have already viewed.
The legal basis for the data procession is Art. 6(1) a of the GDPR (consent). If you have not consented to marketing cookies, Google Ads will not place them on your computer. Moreover, at any time you can withdraw the consent you have already given, as explained at the beginning in the general section.
Provider: Google Ireland Limited
Cookie name: test_cookie, IDE, _gcl_au, _gcl_aw
Expiry: 15 minutes to 1 year
Data protection policy: https://policies.google.com/privacy?hl=en
Host: doubleclick.net, first party
Twitter Universal Website Tag
Furthermore, we use conversion tracking with Twitter Pixel on our website. This is a tool provided by Twitter Inc., US. It enables us to record our website’s use statistics so that we can optimize the website. In this case Twitter places a cookie on your device if you arrive on our website by clicking on a Twitter advertisement. Conversion tracking facilitates the compilation of statistics and does not serve to identify you personally. Instead, we only want to know which Twitter advertisements and which interactions users have used to visit our website. You can find further information at: https://business.twitter.com/en/help/campaign-measurement-and-analytics/conversion-tracking-for-websites.html. We use Twitter Pixel only with your explicit consent, in accordance with Art. 6(1) a of the GDPR. You can block the placement of cookies by adjusting your browser settings. Furthermore, you can adjust the settings in your personal Twitter account that relate to receiving advertisements: twitter.com/settings/personalization.
Provider: Twitter Inc.
Data protection policy: https://twitter.com/en/privacy
Data are collected for the purposes of analysis, marketing and optimization. The data collected are used by Adform to associate advertising contacts and clicks on advertisements with the resulting use of our website. We may also use the collected data to run advertisements based on your interests (e.g. products viewed).
Provider: Adform A/S
Data protection policy: https://site.adform.com/privacy-center/platform-privacy/opt-out/
Microsoft Ads & Retargeting
This website uses the Microsoft Advertising service of the Microsoft Corporation (US). Microsoft Advertising is an advertising platform on which companies authorize Microsoft and its partners to use automated tools to format advertisements. Microsoft uses UET to set a cookie in visitors’ browsers to analyze the way they use our website. This is a retargeting service enabling websites to be associated with previous visitors. The service collects the following (personal) data: bounce rates, browser language setting, clicked advertisements, conversions, digital signature, duration of visit, engagement metrics, Microsoft Click ID, number of visits, page response times, page title, referrer URL, screen color depth, screen resolution, UET ID tag, URL, cookie information, IP address, event information, and page load time.
You can find further information about these processing activities, the technologies used, the data stored and the duration of storage in the settings of our Consent Management Tool. The legal basis for using Microsoft Advertising is Article 6(1) a of the GDPR (consent).
This service may forward the collected data to another country. Please note that the service may transfer data outside the European Union and the European Economic Area and to a country that may not offer an appropriate level of data protection. If the data are transferred to the US, there is a risk that your data may be processed by US authorities for control and monitoring purposes, and you may not be entitled to legal remedy. Please take note of the information in the section “Data transmission to third countries”. Further information on data protection at Microsoft can be found in Microsoft’s Privacy Statement at https://privacy.microsoft.com/us-en/privacystatement.
You can withdraw your consent at any time, as explained above in the general section. In this case, an opt-out cookie will be placed in your browser, which prevents your data from being collected during future visits to this website.
Microsoft sets the following cookies if you visit our website and consent to the use of the Microsoft Ads cookie:
Provider: Microsoft Corporation
Cookie name: MR, MUID, MMUIDB, _uetsid, _uetvid
Cookie expiry: up to 1 year, 25 days
External media cookies
The contents of video platforms and social media platforms are blocked by default. If cookies from such external media are accepted, access to the contents no longer requires consent to be given manually.
Enables YouTube videos to be played. You can find further information about YouTube in our data protection information, in the section “Social media and plug-ins”.
Provider: Google Ireland Limited
Data protection policy: https://policies.google.com/?hl=en
Hosts: youtube.com, google.com
We use hosting and analysis offers from service providers to offer our audio content for listening or downloading and to obtain statistical information on the retrieval of the audio content. For technical reasons, this already involves the transmission of data to the respective providers, such as usage data (e.g. websites visited, interest in content, access times) and meta/communication data (e.g. device information, IP addresses) processed. Detailed information on the processing of data can be found on the data protection notices of the respective provider.
Services used and service providers:
Podigee: Podigee - music and podcast hosting; service provider: Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany; data protection: https://www.podigee.com/de/about/privacy/
Apple Podcast: Apple Podcast, music hosting and widget; service provider: Apple Inc. One Apple Park Way, Cupertino, California, USA, 95014 Privacy: https://www.apple.com/de/legal/privacy/
- Social media and plug-ins
“Recommend this page” function
Our Internet presence supports the social media function “Share this page” or “Recommend this page” via the following social media platforms: Facebook, Twitter.
Our website enables users of social media platforms to share the VDA website with other users of these social networks through the integration of links indicated by the corresponding symbols. By clicking on the relevant link, you leave the VDA website and navigate to the website of the social media platform. Data are exchanged with the above-named social media operators only if the relevant symbol button is clicked. When you click one of these symbol buttons, a page of the relevant social media operator will open in a pop-up window. We wish to point out that data transfer between the user and the provider of the social media platform can already be triggered by this process, and always occurs once you have logged in on a social media platform. We have no knowledge of, and no influence on, which data are transmitted in individual cases to the respective providers by the activation of social plugins, or the purposes for which the data are used there.
Our website uses content from the Twitter networking service. The content is provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When you access a lower-level page containing integrated content from Twitter, a connection to Twitter servers is established so that the content can be displayed. Data are also transmitted to Twitter. If you are logged in to your Twitter account, Twitter is able to attribute your surfing behavior to your account. You will find more detailed information about data processing by Twitter and the settings you can adjust to protect your privacy on https://twitter.com/privacy. Content from Twitter is integrated on the basis of Art. 6(1) f of the GDPR for attractive presentation of our online offerings.
We embed Twitch videos on some of our iaa.de pages. The operator of the relevant plugins is Twitch Interactive, Inc., 350 Bush Street, 2nd Floor, San Francisco, CA 94104, USA (“Twitch” in the following). If you visit a page with the Twitch plugin, a connection to Twitch servers is established. Twitch is informed about which pages you visit. If you are logged in to your Twitch account, Twitch can associate your surfing behavior with you personally. You can prevent this by logging out from your Twitch account in advance.
The legal basis for embedding Twitch and the related transfer of data to Twitch is your consent (Section 6(1) a GDPR). Accessing Twitch automatically establishes a connection to Twitch. Twitch processes your data in the US and has signed up to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. Your personal data are provided voluntarily, solely on the basis of your consent. If you disable access, some functionalities on this website may be restricted.
We also use a plug-in from the provider Walls.io for presenting social media content on our website. The provider is the “Die Socialisten” Social Software Development GmbH, Andreasgasse 6, Top 1, 1070 Wien, Austria. When you visit a lower-level page with social media content presented using Walls.io, a connection is created with Walls.io servers. You will find further information about data processing by Walls.io at: https://walls.io/privacy. You also have the option of sharing the contents presented using Walls.io via the services of the respective social media provider, after you click on them. The information in the section on “Recommend page” function also applies here. Social media content is integrated using Walls.io on the basis of Art. 6(1) f of the GDPR for attractive presentation of our online offerings.
Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Every time you access one of our sites that contains functions of LinkedIn, a connection to LinkedIn’s servers is established. LinkedIn is notified that you have visited our websites with your IP address. If you click on LinkedIn’s “Recommend” button and are logged into your LinkedIn account at the time, LinkedIn is able to attribute your visit on our website to you and your user account. We wish to point out that we as the provider of the websites do not have any knowledge of the content of the transferred data or its use by LinkedIn.
The use of the LinkedIn plug-in is based on Art. 6(1) f of the GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media.
You will find further information on this subject in LinkedIn’s Data Privacy Declaration at: https://www.linkedin.com/legal/privacy-policy.
Our website uses functions of the XING network. The provider is XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany.There is a “XING share button” on the IAA website.
When this internet page is accessed, your browser will open a temporary connection to servers of XING SE (“XING”), to provide the functions of the XING share button (in particular calculation/display of the counter). XING does not store any personal data about you when you access this website. In particular, XING does not store IP addresses. Furthermore, your use patterns are not monitored by cookies in connection with the XING share button.
- Analysis tools
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics cookies are installed, and this analysis tool is used, only if you have given your consent on the basis of Art. 6(1) a of the GDPR. The website operator has a legitimate interest in the analysis of user behavior in order to optimize its web offering and its advertising.
We have activated the IP anonymization function on this website. This means that your IP address is truncated by Google within member states of the European Union and the other member states of the European Economic Area, before transmission to the US. Only in exceptional cases is the complete IP address transmitted to a Google server in the US and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports about the website activities, and to provide the website operator with additional services associated with the website use and internet use. Google will not associate the IP address transmitted by your browser in the context of Google Analytics with other data.
You can prevent the installation of cookies by adjusting your browser settings; however, we wish to point out that in this case you may not be able to make full use of all the functions of this website. Furthermore, you can prevent transmission of the data that are generated by the cookies and relate to your use of the website (incl. your IP address) to Google and the processing of these data by Google, by downloading and installing the browser plug-in available from the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
On this website we use the tool Adform from the firm Adform A/S, Wildersgade 10B, sal. 1, DK-1408 Copenhagen, Denmark, to collect data for the purposes of analysis, marketing and optimization, which helps us improve our marketing measures, our website and our app. The data collected are used by Adform to link advertising contacts and clicks on advertisements with the resulting use of our website. In this way we can determine whether internet users who have seen our ads then visit our website, and to identify which products they are interested in. This helps us to make more efficient use of our advertising budget. We may also use the collected data to run advertisements based on your interests (e.g. products viewed). The collection of data involves the use of pseudonymous online identification numbers (online IDs) such as cookie IDs, IP address, device IDs, advertising ID / IDFA (e.g. on Android or Apple smartphones). During this process no data are stored that can be unequivocally attributed to users, such as name or address. All the IDs we use enable only recognition of your device, your internet browser or the app being used. The data collected are not used to identify you personally as a user of our website or app without your specific consent. The legal basis for the data processing is Art. 6(1) (a) and 1 (f) of the GDPR in conjunction with Section 15(3) of the German Telemedia Act (TMG). If you wish your data not to be collected by Adform, you can proceed as follows:
Under the following links you will find instructions for deactivating data collection on your computer or mobile device:
English version: https://site.adform.com/privacy-center/platform-privacy/opt-out/
IAA exhibitor online registration
If you use the pages for the IAA exhibitor online registration, we would like to inform you about the following additions, as you are leaving the area of the iaa.de website: The VDA would like, inter alia, to offer, by means of fully functional IAA exhibitor registration pages, smooth and convenient registration for the IAA and thus to represent the interests of the automotive industry. This represents a legitimate interest in the meaning of Art. 6(1) f of the GDPR for the following types of data processing (wherever this is processing of personal data by the VDA):
Server log files: Every access to our web presentation and each retrieval of a stored file will be logged. The storage serves internal system-related and statistical purposes. The following information are logged: name of the retrieved file, date and time of the retrieval, amount of data transferred, message about successful retrieval, web browser and requesting domain. In addition, the IP addresses of the requesting domain are logged. The basis for the processing of data is Article 6(1) f of the GDPR, which allows the processing of data to fulfill a contract or precontractual measures.
Cookies: To be able to offer our services, we use three types of cookies:
All cookies are encrypted and do not contain any personal information. All cookies must be accepted in order for our service to work properly. Your data remains stored in the cookie file in your browser. Depending on your browser settings, the cookies might be deleted upon closing the browser program. If you do not wish to accept the cookies, please change your browser settings accordingly. However, this may have the effect that not all our services and interactive features on our website will be accessible to you.
We have concluded a contract with Google on contract data processing, and implement the strict requirements of the German data protection authorities in full in our use of Google Analytics.
b) IAA services:
On its websites used for realizing the IAA and for enhancing the attractiveness of the trade show, the VDA also offers a range of services in connection with the IAA:
- Registration of exhibitors and co-exhibitors:
Interested firms register for the IAA as exhibitors by using the registration function for exhibitors and co-exhibitors. The data required for registration are provided by the exhibitor during online registration. The data are processed for the purpose of performing the contract pursuant to Article 6(1) b of the GDPR. During this procedure, the VDA deploys service providers in accordance with section 4 below.
- Exhibitor directory:
Exhibitors and co-exhibitors at the IAA are listed in the exhibitor directory on the IAA website and in the official app. The name of the firm and the stand number are required items. The exhibitor/co-exhibitor may decide whether further information about the company is to be published. The legal basis for the data processing is Article 6(1) b of the GDPR (performance of a contract).
- New Products Directory:
Exhibitors/co-exhibitors have the option of publishing new products/premieres. To do so, interested exhibitors/co-exhibitors must fill out an online form. The data required for the New Products Directory service are processed; the legal basis for this is performance of a contract in accordance with Article 6(1) b of the GDPR.
- Press accreditation:
Journalists have the option of accreditation for the IAA. The data required for this procedure can be entered in an online registration form. The data are processed for the purpose of accreditation in accordance with Article 6(1) b of the GDPR.
- Electronic press boxes:
Exhibitors can publish their own press releases on the IAA website. The data entered by the exhibitor are processed for performing this service in accordance with Article 6(1) b of the GDPR (performance of a contract).
- Ordering the newsletter:
The VDA offers free newsletters about the IAA and the New Mobility World. Subscription to the newsletters is voluntary and may be cancelled at any time. The information necessary for dispatching a newsletter can be entered in an online form. By ordering a newsletter you agree to the processing of your data for the purpose of dispatching the newsletter. You can cancel your subscription at any time. Every newsletter provides an opportunity to cancel the subscription. The legal basis for the processing is Article 6(1) a of the GDPR.
- Holding specialist events and information events:
During the IAA, specialist events and information events for which participants can register are held as forums for expert and political debate on the topics of the automotive industry. For registration, the data required must be entered in a contact form. The data are processed in order to perform contractual obligations (Article 6(1) b of the GDPR). If such an event is filmed and/or photographed, by participating you give the VDA your consent to the creation, processing and use of the image, video and sound recordings for documentation purposes and within the scope of the press and publicity work surrounding the IAA. Your data are stored until you inform us that you withdraw your consent. If you do not agree to this, please contact us at firstname.lastname@example.org.
4. Who obtains my Data
Access to your data within the VDA is restricted to those persons and departments that need to access them in order to fulfill the purpose of the processing. In some cases (e.g. for hosting services or for dispatching newsletters) the VDA deploys service providers that process data on our behalf for this purpose. We deploy these service providers only if they follow our written data protection instructions and guarantee that they comply with the requirements of the EU General Data Protection Regulation (and of the German Federal Data Protection Act).
We endeavor to take all technical and organizational measures in order to store your personal data so that they are inaccessible to third parties.
6. How long my data are stored for
The period for which your data are stored depends on the purpose of the data processing. Accordingly, we store your data only for as long as is required for the purposes for which they are processed.
If the data are no longer required in order to fulfill the purpose, they are deleted regularly unless the further processing is required for the purpose of complying with retention obligations under commercial or taxation law, or in order to keep documentary evidence in compliance with the statute of limitations.
7. Your rights arising from data protection
Access to information, rectification, erasure, limitation of processing, objection, data portability, complaints
You have the right free of charge and at any time to obtain information about the origin, recipient(s) and purpose of your stored personal data in accordance with Article 15 of the GDPR. Furthermore, you have the right to rectification under Article 16 of the GDPR, to erasure under Article 17 of the GDPR, and to restriction of processing under Article 18 of the GDPR, the right to object to processing based on Article 21 of the GDPR, and the right to data portability based on Article 20 of the GDPR. In the case of the right to access to your information and the right to erasure, restrictions apply pursuant to Sections 34 and 35 of the German Federal Data Protection Act (BDSG). You can address questions at any time about any aspect of your data privacy rights to email@example.com. Additional contact details of the data controller and our data privacy officer can be found in section 1 above. In the case of infringements of data protection regulations, you are entitled to lodge a complaint with a competent supervisory authority in accordance with Article 77 of the GDPR in conjunction with Section 19 of the BDSG.
You can withdraw your consent given to us to data processing at any time by sending us an informal message via e-mail to firstname.lastname@example.org (for additional contact details, see section 1 above). Withdrawal of your consent applies solely to the future. Any processing of your data, which has already taken place on the basis of the consent you gave, before withdrawal of your consent, remains lawful.
Right to object under Article 21 of the EU GDPR
You can object to processing of your personal data for the purposes of advertising – including profiling related to direct marketing – at any time without giving reasons.
Furthermore, you have a general right to object (cf. Article 21(1) of the GDPR). In this case, reasons for the objection to data processing must be given.