PRIVACY POLICY

1. Controller

The controller responsible for data processing on this website is:

Saint Performance Inh. Stäheli

Gartenstrasse 7

9204 Andwil SG

(Further contact information can be found in the Legal Notice of this website.)

2. General Information on Data Processing

We take the protection of your personal data very seriously. Personal data includes all information that can be used to personally identify you, such as your name, contact details, etc. We treat your personal data confidentially and in accordance with applicable data protection regulations, in particular the GDPR, as well as this Privacy Policy.

This Privacy Policy informs you about the nature, scope and purpose of the processing of personal data on our website and in connection with the services we offer.

3. Data Collection When Visiting Our Website

Server Log Files

When you visit our website for informational purposes only, meaning you do not register or otherwise submit information, we automatically collect and store information transmitted by your browser to our server.

This may include, for example, your IP address, the date and time of the request, the page or file accessed, the browser type used and your operating system.

The processing of these server log data is carried out to ensure the security and stability of the website and, where necessary, to analyse technical problems.

The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in ensuring the technically error-free presentation and security of our website.

Log files are automatically deleted after no more than 7 days unless further storage is required for evidentiary purposes, for example in connection with the investigation of misuse or fraud.

Use of Cookies

Our website uses cookies. Cookies are small text files stored on your device.

Some cookies are essential for providing basic website functions, such as session management. These technically necessary cookies are used on the basis of Art. 6(1)(f) GDPR, based on our legitimate interest in providing a functional and optimised website.

Other cookies, for example for analytics or marketing purposes, are only used with your explicit consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG.

Further information about such cookies and your options to object can be found in the relevant sections of this Privacy Policy and in our cookie banner.

4. Contact Form and Contact

If you send us enquiries via the contact form or contact us by email, telephone or messenger service such as WhatsApp, we process the information you provide, such as your name, email address, telephone number and enquiry, in order to process your request and respond to possible follow-up questions.

Certain information in the contact form, such as your name and email address, may be required as mandatory fields so that we can identify and respond to your enquiry. Optional information helps us process your request more precisely.

Depending on the nature of the enquiry, the processing of this contact data is carried out on the basis of Art. 6(1)(b) GDPR for the implementation of pre-contractual measures or performance of a contract, for example in the case of reservation enquiries, or Art. 6(1)(f) GDPR based on our legitimate interest in efficiently processing general enquiries.

We use the data submitted by you in connection with your contact request exclusively to respond to your enquiry and, where applicable, for related technical administration.

Your data will not be disclosed to third parties unless this is necessary to fulfil your request or you have given your consent.

Contact via WhatsApp

If we offer contact via WhatsApp and you use this service to communicate with us, we receive your telephone number registered with WhatsApp and the messages you send.

WhatsApp is a messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Communication via WhatsApp is end-to-end encrypted. Nevertheless, metadata such as sender, recipient and time of communication may be processed by WhatsApp and may be transferred to its parent company, Meta Platforms, in the USA.

We use the data you provide via WhatsApp exclusively to process your specific enquiry.

The legal basis is Art. 6(1)(b) GDPR where the communication relates to the initiation of a contractual relationship, and otherwise Art. 6(1)(f) GDPR.

If you do not wish WhatsApp to receive data relating to you, please use an alternative means of communication such as telephone or email.

We delete data from enquiries once it is no longer required for the purpose for which it was collected. This is generally the case once the conversation with you has ended and your enquiry has been fully resolved.

Statutory retention requirements, for example for business correspondence under commercial and tax law, remain unaffected. In such cases, the data will not be deleted but will be restricted from processing for other purposes.

5. Customer Account – Registration on the Website

If you create a customer account on our website, we process the data you enter during the registration process, such as your name, address, email address and, where applicable, username and password.

A customer account allows you to make future bookings more quickly, view previous reservations and manage your personal data.

The processing of data in connection with registration and use of the customer account is carried out to provide a user-friendly account function and to implement pre-contractual measures or perform a contract pursuant to Art. 6(1)(b) GDPR, as the account facilitates the processing of rental agreements.

Mandatory information is generally marked accordingly. Without this information, an account cannot be created.

We use your customer account data exclusively to manage your user relationship with us and to process the services you have booked.

Customer account data will only be disclosed to third parties where this is necessary for the performance of the contract, as described in the section on bookings and contractual processing below, or where we are legally required to do so.

You may delete your customer account or request its deletion at any time by contacting us.

After deletion of the account, the personal data stored in it will be deleted unless we are required to retain the data due to statutory retention periods or for the processing of ongoing contracts.

In such cases, processing will be restricted to the required purposes.

6. Rental Vehicle Bookings and Contract Processing

You can book rental vehicles or purchase gift cards through our website.

In this context, we collect personal data required to establish and perform the rental or purchase agreement.

Depending on the service, this may include in particular:

Title, name, address, contact details such as email and telephone number, date of birth for age verification, driving licence information such as licence number, validity and place of issue where required for vehicle handover, payment information such as credit card details or bank details, the requested vehicle, rental period and other contractual information where applicable.

We process this data for the purpose of deciding whether to accept your booking, managing the reservation and ultimately performing the concluded contract pursuant to Art. 6(1)(b) GDPR.

Without providing this information, we cannot conclude or perform the rental agreement or sale of the gift card.

Payment Processing

We use the data required for payment, such as the payment method and invoice amount, to process your payment.

Depending on the selected payment method, we may disclose payment information to commissioned payment service providers or banks, such as your credit card provider or PayPal, which process payments on our behalf.

These recipients may process your data under their own responsibility or as processors. Their respective privacy policies apply.

Contract Performance and Customer Service

We also store and use your contractual data to manage your reservation, answer possible questions and provide services relating to your rental agreement, such as booking changes, roadside assistance or claims handling.

We may also use your information to provide you with information relevant to your rental agreement.

In the event of violations during the rental period, such as traffic offences or accidents, we may be legally required to disclose certain information to authorities or insurance companies, for example the driver's name and address to the competent authority.

Retention and Deletion

Your personal data will be stored for as long as necessary to process the contract and comply with statutory obligations.

Relevant contractual documents, such as invoices and rental agreements, are retained for 6 to 10 years after the end of the contract in accordance with commercial and tax law requirements.

Afterwards, the data will be deleted unless it remains necessary for the establishment, exercise or defence of legal claims or you have consented to longer storage.

7. Newsletter

You have the option of subscribing to our newsletter in order to regularly receive information about our offers and promotions.

For this purpose, we require your email address. Additional information, such as your name for personalised communication, is voluntary.

We use the so-called double opt-in procedure for newsletter subscriptions.

After registering, you will receive a confirmation email in which you must click a link to confirm that you wish to receive the newsletter.

This ensures that third-party email addresses cannot be subscribed without authorisation.

Newsletter registrations are logged, including the date and time of registration and confirmation as well as your IP address, so that we can demonstrate consent in accordance with legal requirements pursuant to Art. 6(1)(c) GDPR in conjunction with Art. 5(2) and Art. 7(1) GDPR.

The newsletter is sent on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future by clicking the unsubscribe link included in every newsletter or by contacting us accordingly.

After withdrawal of consent or unsubscribing, the data stored for newsletter distribution, including your email address and any voluntarily provided additional information, will be deleted without undue delay or blocked for newsletter purposes and, where applicable, added to a suppression list to prevent future mailings.

Newsletter for Existing Customers

If you are already a customer and we have received your email address in connection with a vehicle rental or gift card purchase, we reserve the right to send you newsletters or similar advertising information about our own similar products or services without obtaining separate consent.

This is carried out in strict compliance with Section 7(3) UWG and on the basis of our legitimate interest in direct marketing pursuant to Art. 6(1)(f) GDPR.

You will only receive such emails from us if you have not objected.

You may object to the use of your email address for advertising purposes at any time. An unsubscribe link is included in every such email.

You will incur no costs for exercising your right to object other than the transmission costs according to the basic tariff.

Newsletter Service Provider – Mailchimp

We use an external service provider to send our newsletter.

Specifically, newsletters are sent through Mailchimp, a newsletter platform provided by The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

We have entered into a data processing agreement with Mailchimp pursuant to Art. 28 GDPR.

The information you provide when subscribing to the newsletter, such as your email address and, where applicable, your name, is stored on Mailchimp servers in the USA.

Mailchimp uses this information on our behalf to send and analyse newsletters.

Please note that this involves the transfer of your data to a third country, the USA. Please refer to the section on international data transfers in this Privacy Policy.

Mailchimp is certified under the EU-U.S. Data Privacy Framework, meaning that an adequate level of data protection has been recognised by the European Commission.

Mailchimp provides statistical analyses concerning how newsletters are opened and used.

For example, it may be possible to analyse whether a newsletter has been opened and which links have been clicked.

We use this information to optimise our newsletter content.

The legal basis for this analysis is our legitimate interest in measuring the success of our newsletter campaigns pursuant to Art. 6(1)(f) GDPR.

If you do not want your usage behaviour to be analysed, you can unsubscribe from the newsletter at any time.

Further information about data protection at Mailchimp can be found in the Mailchimp Privacy Policy.

8. Use of Google Maps

Our website integrates maps provided by Google Maps to display, for example, our location and facilitate route planning.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When using Google Maps on our website, information about your use of this website, such as your IP address, may be transferred to Google servers, including servers located in the USA.

We use Google Maps only with your consent pursuant to Art. 6(1)(a) GDPR.

This means that the map will only be loaded after you have consented to its use via the cookie or consent banner or, where applicable, through an interaction deemed to constitute consent.

Without your consent, no connection to Google Maps will be established and a placeholder will be displayed instead.

When you activate Google Maps, your IP address is transmitted to Google and Google receives information indicating that you have accessed the relevant page on our website.

Google may also store a cookie on your device in order to analyse your usage behaviour.

In this case, Google processes the data under its own responsibility.

Please note that personal data may be transferred to the USA.

Google is certified under the EU-U.S. Data Privacy Framework. We have also entered into Standard Contractual Clauses with Google to ensure an adequate level of data protection.

Further information regarding data protection at Google can be found in Google's Privacy Policy.

9. Use of Google Fonts

This website uses Google Web Fonts provided by Google in order to ensure the consistent display of fonts.

When you access a page, your browser loads the required web fonts into its browser cache so that text and fonts can be displayed correctly.

The provider is Google Ireland Limited, Dublin, Ireland.

For this purpose, your browser establishes a connection to Google's servers.

As a result, Google becomes aware that our website has been accessed via your IP address.

If your browser does not support web fonts, a standard font from your device will be used.

Google Fonts are used in our interest in providing an attractive and consistent presentation of our online offering.

This constitutes a legitimate interest pursuant to Art. 6(1)(f) GDPR.

In this context, personal data, in particular your IP address, may be transferred to Google servers in the USA.

Google is certified under the EU-U.S. Data Privacy Framework and states that data obtained through font requests is used exclusively for the intended purpose and is not combined with other Google services.

Further information about Google Web Fonts can be found at:

https://developers.google.com/fonts/faq

Google's Privacy Policy can be found at:

https://policies.google.com/privacy

10. Integration of YouTube Videos

We have integrated videos from the YouTube platform into our website, for example to provide vehicle presentations or explanatory videos.

YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Where possible, we use YouTube's enhanced privacy mode.

According to YouTube, this mode means that YouTube initially does not set cookies as long as you do not play the video.

Once you start the video, however, YouTube may collect information about you.

This includes, in particular, your IP address, technical information about your browser or device and information about which of our pages you have visited.

If you are logged into YouTube or Google, YouTube may associate the video access with your user account.

Playing a YouTube video may also trigger additional data processing by Google, such as the use of cookies to analyse your usage behaviour.

We have no influence over this data transfer.

YouTube is generally integrated only with your consent pursuant to Art. 6(1)(a) GDPR, which you may provide through our consent management system.

Without consent, YouTube videos will not be automatically loaded.

If you have given your consent, data will be transferred to YouTube and Google as described above.

Please note that personal data may be transferred to the USA.

Google, as the operator of YouTube, is certified under the EU-U.S. Data Privacy Framework. Additional safeguards, such as Standard Contractual Clauses, have also been implemented.

Further information regarding data protection at YouTube can be found in Google's Privacy Policy.

11. Use of Google reCAPTCHA

We use Google reCAPTCHA, a service provided by Google Ireland Limited, Dublin, Ireland, to protect our online forms against spam and misuse.

reCAPTCHA analyses your behaviour on our website, such as mouse movements and entries, as well as various characteristics in order to determine whether an input is being made by a human or an automated bot.

For this purpose, reCAPTCHA executes code in the background and collects various information about your device, including your IP address, time spent on the website and, where applicable, previously stored Google cookies.

This data is transferred to and analysed on Google servers, including servers located in the USA.

reCAPTCHA is used in our interest in IT security and protecting our web forms against abusive automated use and spam pursuant to Art. 6(1)(f) GDPR.

This serves both our protection and the protection of users against unwanted content.

However, because the integration of reCAPTCHA involves data being transferred to Google, we obtain your consent pursuant to Art. 6(1)(a) GDPR through our consent banner before reCAPTCHA is activated.

Please note that reCAPTCHA may involve the transfer of personal data to the USA.

Google is certified under the EU-U.S. Data Privacy Framework. We have additionally entered into the Standard Contractual Clauses approved by the European Commission with Google in order to ensure an adequate level of data protection.

Further information about Google reCAPTCHA and the processing of data can be found in Google's Privacy Policy and Terms of Service.

12. Integration of Social Media – Instagram, Facebook, WhatsApp, TikTok and LinkedIn

We maintain online presences on various social media platforms and may also integrate content or links to these services on our website.

This is done in order to present our company on these platforms and communicate with customers, interested parties and users.

Each platform operates its respective service under its own responsibility under data protection law.

When you visit or use functions of such a platform, the privacy policies of the respective provider apply.

Our website may contain social media plugins or links relating to the following providers:

Instagram

Instagram Inc. / Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

Our website may, for example, contain an Instagram logo linking to Instagram or embedded content such as images or videos.

When you access a page containing an Instagram plugin, a connection to Instagram's servers is established.

Instagram is informed which of our pages you have visited and your IP address is transmitted.

If you are logged into your Instagram account, Instagram may associate your visit to our website with your user account.

If you do not want this to happen, log out of Instagram before visiting our website.

Further information can be found in Instagram's Privacy Policy.

Facebook

Facebook / Meta Platforms Ireland Ltd., Dublin, Ireland.

Our website may contain Facebook buttons, such as “Like” or “Share”, or links to our Facebook profile.

These plugins can be recognised by the Facebook logo.

When you access a page containing a Facebook plugin, a connection to Facebook is established and data such as your IP address, browser data and time of access may be transmitted to Facebook.

If you are logged into your Facebook account, Facebook may associate your visit to our website with your profile.

Further information can be found in Facebook's Privacy Policy.

Our website may contain a link for contacting us through WhatsApp, such as a WhatsApp Business button.

Clicking this link opens WhatsApp on your device so that you can send us a message.

There is no direct integration that transfers data to WhatsApp merely by visiting our website.

Data is only transmitted when you actively use the WhatsApp communication channel.

The provider is WhatsApp Ireland Ltd., Dublin, Ireland, a Meta Platforms company.

Please refer to WhatsApp's Privacy Policy for further information.

TikTok

TikTok is provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

TikTok videos may be embedded on our website or we may provide links to our TikTok profile.

When playing a TikTok video on our website or clicking a TikTok link, personal data such as your IP address may be transmitted to TikTok.

TikTok may record your usage behaviour and use cookies.

Information regarding data protection at TikTok can be found in TikTok's Privacy Policy.

LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

Our website may integrate functions of the LinkedIn network, such as the LinkedIn logo as a link or a “Recommend” button.

When you access a page containing a LinkedIn plugin, a connection to LinkedIn's servers is established.

LinkedIn receives information indicating that you visited our website using your IP address.

If you click the LinkedIn “Recommend” button while logged into your LinkedIn account, LinkedIn may associate your visit to our website with your user account.

Further details can be found in LinkedIn's Privacy Policy.

General Information Regarding Social Media

Please note that personal data is transmitted to the respective provider as soon as you use one of these social media functions or access the corresponding platform.

If you do not want social networks to associate your visit to our website with your user account, please log out of the respective accounts before visiting our website and avoid using the plugins.

We ourselves do not receive direct information about the content of the transmitted data or its use by the platforms.

The social networks process data under their own responsibility.

In certain cases, we and providers such as Facebook or Instagram may act as joint controllers pursuant to Art. 26 GDPR for specific statistics, for example Insights data relating to social media pages.

In such cases, the relevant agreements of the respective providers apply.

13. Analytics and Tracking Tools

We use analytics and tracking technologies on our website in order to understand user behaviour and optimise our marketing activities.

Certain tools listed below use cookies or similar technologies to collect information about your usage behaviour.

These tools are only used if you have given us your consent through our cookie or consent banner.

The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG.

You may withdraw your consent at any time through our cookie settings.

The services we use are described below.

Facebook Pixel – Meta Pixel

This website uses the Facebook Pixel provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

The pixel allows us to track the behaviour of visitors after they have reached our website by clicking on a Facebook or Instagram advertisement.

This allows us to evaluate the effectiveness of Facebook and Instagram advertisements for statistical and market research purposes and optimise future advertising activities.

The Facebook Pixel also enables us to define visitors to our website as a target group for Facebook Ads, known as Custom Audiences, so that personalised advertisements relating to our services may be displayed to you on Facebook or Instagram if you have an account on these platforms.

When you visit our website, the Facebook Pixel collects various information, such as pages accessed, your Facebook ID and, where applicable, conversions such as completed bookings, and transfers this information to Facebook servers.

This data processing only takes place with your consent pursuant to Art. 6(1)(a) GDPR.

If you have given your consent, a corresponding Facebook tracking cookie will be stored or accessed on your device when you visit our website.

The information generated is generally transferred to and stored on Meta servers in the USA.

Meta / Facebook is certified under the EU-U.S. Data Privacy Framework.

In addition, we have agreed to the EU Standard Contractual Clauses with Meta.

Right to Object

You may withdraw your consent at any time with effect for the future by adjusting the relevant cookie settings.

If you have a Facebook account, you may also restrict the use of your data for advertising purposes in your Facebook settings.

Settings for personalised advertising can, for example, be adjusted at:

https://www.facebook.com/settings?tab=ads

or through services such as:

http://www.youronlinechoices.com/de/

Google Ads Conversion Tracking and Remarketing

We use Google Ads, formerly Google AdWords, provided by Google Ireland Ltd., Dublin, Ireland.

Google Ads enables us to display advertisements in the Google search engine and on third-party websites and to determine whether users reach our website through such advertisements and subsequently carry out a particular action, known as a conversion.

For this purpose, Google places a conversion cookie on your device when you click on one of our advertisements.

If you subsequently visit certain pages on our website while the cookie remains valid, Google and we can determine that you clicked on the advertisement and were redirected to our website.

Each Google Ads customer receives a different cookie, meaning that users cannot be tracked across the websites of different Google Ads customers.

The information collected through the conversion cookie is used to compile conversion statistics for us, for example showing how many users performed a particular action.

We do not receive information that enables us to personally identify individual users.

We also use Google Ads Remarketing.

For this purpose, a code, known as a remarketing tag, is integrated into our website.

Using cookies or similar technologies, this code collects pseudonymous information concerning your usage behaviour.

This allows us to display targeted advertising relating to our services to you on other websites within Google's advertising network after you have visited our website.

The use of Google Ads Conversion Tracking and Remarketing is also carried out exclusively with your consent pursuant to Art. 6(1)(a) GDPR.

If you do not want Google Ads to record your usage behaviour, you may reject the relevant cookies through our cookie settings or configure your browser to block cookies from the domain googleadservices.com.

You may also disable interest-based advertisements from Google through Google's Ads Settings:

https://adssettings.google.com

Data collected through Google Ads may be transferred to Google servers in the USA.

Google is certified under the EU-U.S. Data Privacy Framework.

In addition, Standard Contractual Clauses have been concluded with Google.

Further information about Google Ads can be found in Google's Privacy Policy.

14. Applications – Applicant Data

If you apply for a position with us, for example through an online form or by email, we process the application information you submit, such as your cover letter, CV, certificates, name and contact details, in order to decide whether to establish an employment relationship.

The legal basis is Section 26(1) BDSG regarding decisions concerning the establishment of employment relationships and, additionally, Art. 6(1)(b) GDPR concerning general pre-contractual measures.

Internally, your application data is disclosed exclusively to persons responsible for the recruitment process.

Your information will not otherwise be used or disclosed to third parties without your explicit consent.

If your application is successful, the information you provide will be further processed for the purposes of the employment relationship pursuant to Art. 6(1)(b) GDPR in conjunction with Section 26 BDSG.

You may receive additional information concerning data processing during the onboarding process.

If we are unable to offer you a position, your application documents will be deleted no later than 6 months after completion of the application process.

The 6-month retention period serves, in particular, to allow us to defend against potential legal claims, such as claims under the General Equal Treatment Act.

If you have consented to longer storage for inclusion in a talent pool, we will retain your application data in accordance with your consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future.

15. Data Transfers to Third Countries

As described in the preceding sections, we work with certain service providers and integrate services that process personal data outside the European Union, particularly in the USA.

When we transfer data to a so-called third country, we ensure, where no adequacy decision by the European Commission applies, that appropriate safeguards are in place to ensure a level of protection corresponding to European data protection standards pursuant to Art. 44 et seq. GDPR.

For this purpose, we use in particular the Standard Contractual Clauses issued by the European Commission and, where possible, assess additional protective measures.

An adequacy decision for transfers of personal data to the USA under the new EU-U.S. Data Privacy Framework has been in place since 10 July 2023.

Where our US service providers are certified under this framework, such as Google, Meta and Mailchimp, the European Commission considers the level of data protection in the USA to be adequate.

Independently of this, we continue to conclude Standard Contractual Clauses where required.

Nevertheless, we would like to point out that certain residual risks cannot be completely excluded when transferring data to third countries, particularly the USA.

In particular, US authorities may, under applicable US law, be able to access personal data without EU citizens necessarily having equivalent legal remedies available to them.

We therefore transfer personal data to third countries only under the conditions described above and where such transfers are necessary.

If you have questions about the specific safeguards relating to international data transfers or would like copies of the agreed protective measures, you may contact us.

16. Data Security

We implement extensive technical and organisational security measures pursuant to Art. 32 GDPR to protect your personal data against accidental or intentional manipulation, loss, destruction or unauthorised access.

For example, our website uses TLS encryption, identifiable by “https://” in your browser's address bar, in order to protect confidential information you transmit to us.

Our security measures are continuously improved in line with technological developments.

We also place a strong emphasis on data protection and data security internally.

Our employees are obliged to maintain confidentiality, and we ensure that only authorised persons have access to personal data.

Please note, however, that data transmission over the internet, for example communication by email, may generally involve security vulnerabilities.

Complete protection of data against access by third parties cannot be guaranteed.

17. Your Rights as a Data Subject

As a person affected by the processing of personal data, you have the following rights under the GDPR.

You may contact us at any time using the contact information provided above in order to exercise these rights.

Right of Access – Art. 15 GDPR

You have the right to obtain information about the personal data we process concerning you, the purposes of processing, the recipients to whom the data may have been disclosed, the duration of storage and other information specified in Art. 15 GDPR.

Right to Rectification – Art. 16 GDPR

You have the right to request the immediate correction of inaccurate personal data stored by us and the completion of incomplete personal data.

Right to Erasure – Art. 17 GDPR

You may request the deletion of your personal data where the statutory requirements are met.

This applies in particular where the purpose of processing no longer exists, you have withdrawn your consent or the processing was unlawful.

Right to Restriction of Processing – Art. 18 GDPR

You have the right to request restriction of the processing of your data, for example while the accuracy of your data is being disputed or where you have objected to processing.

In such cases, apart from storage, the data may only be processed with your consent or for the establishment, exercise or defence of legal claims.

Right to Data Portability – Art. 20 GDPR

You have the right to receive personal data concerning you that you have provided to us in a commonly used, structured and machine-readable format.

At your request and where technically feasible, you may also request the direct transfer of this data to another controller.

Right to Object – Art. 21 GDPR

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data where such processing is based on Art. 6(1)(e) or Art. 6(1)(f) GDPR.

If you exercise your right to object, we will no longer process the relevant personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests.

Objection to Direct Marketing

In particular, you may object at any time to the processing of your personal data for direct marketing purposes pursuant to Art. 21(2) GDPR.

In this case, we will no longer use your data for advertising purposes.

Right to Withdraw Consent – Art. 7(3) GDPR

Where we process your data on the basis of consent, you may withdraw that consent at any time with effect for the future.

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Right to Lodge a Complaint with a Supervisory Authority – Art. 77 GDPR

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a data protection supervisory authority.

For example, you may contact the Saxon Data Protection and Transparency Commissioner responsible for us:

Sächsische Datenschutz- und Transparenzbeauftragte
Postfach 11 01 32
01330 Dresden
Germany

Email: saechsdsb@slt.sachsen.de

Alternatively, you may contact any other supervisory authority responsible for your place of residence.

Note

Exercising the rights described above is generally free of charge.

In order to verify your identity and prevent misuse, we may request additional information from you when processing access requests.

We will endeavour to process your requests without undue delay and no later than within the statutory period of one month.

18. Objection to Advertising Emails

The use of contact information published as part of our legal notice obligations for the purpose of sending unsolicited advertising or informational materials is hereby expressly prohibited.

As the website operator, we expressly reserve the right to take legal action in the event of unsolicited advertising communications, such as spam emails or advertising calls.

Last updated: August 2026