Privacy | ANGOOR

Data protection regulations of Mamtus Mode GmbH

Your trust in the correct handling of your data is an important prerequisite for the success of our offer. Your data will be processed in compliance with the applicable data protection regulations. With this data protection declaration, we would like to inform you about how your data is processed when you use our website and other offers.

This data protection declaration applies regardless of the domains, systems, platforms and end devices used by us on which our services are offered.

1) Responsible / responsible body is:

Name/Company: Mamtus Mode GmbH

Legal representative: Tarun Sehgal

Street no.: Frankfurterstrasse 70-72

ZIP, city, country: 65760 Eschborn Ts., Germany

Sales tax identification number: DE 258560966

Telephone number: +49 (0)6196 481848

Websites: www.angoor.de and www.angoor-shop.com

E-mail address:request (at) angoor.de

2) Legal basis of processing

Insofar as we obtain the consent of the person concerned for the processing of personal data, Article 6 paragraph 1 lit. a GDPR serves as the legal basis (consent).

When processing personal data that is required to fulfill a contract to which the data subject is a party, Article 6 Paragraph 1 lit. b GDPR represents the legal basis for processing (contractual purpose). This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6 Paragraph 1 lit. c GDPR is the legal basis (legal obligation).

In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 Paragraph 1 lit. d GDPR serves as the legal basis (protection of vital interests).

If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first interest, Article 6 Paragraph 1 lit. f GDPR represents the legal basis for the processing (balancing in the case of legitimate interests) . The legitimate interest of our company lies in the conduct of our business.

3) Collection, storage and processing of access data and log files

Our website is designed in such a way that personal data is only requested when it is really necessary. You can stop using our website at any stage by closing your browser or opening another website.

When you use our website, we collect and use access data/log files such as the

name of your internet service provider,
the page from which you are visiting us or the name of the requested file,
date and time of the request,
amount of data transferred,
message whether the retrieval was successful,
the incomplete IP address (first three blocks of numbers) of the requesting computer,
referring URLs,
browser types used,
operating systems used.

This information is temporarily stored in a so-called log file and recorded without your intervention and stored until it is automatically deleted.

This data is processed for the purpose...

to enable the use of the website (establishing a connection),
of system security
the technical administration of the network infrastructure
as well as to optimize the internet offer

... thus on the basis of our legitimate interests within the meaning of Article 6 Paragraph 1 lit. f GDPR and to protect users and against other unauthorized use. This data will not be passed on to third parties or evaluated in any other way. A personal user profile is not created.

4) Processing of personal data in the context of contractual and own services

Personal data is also collected, stored and processed if you provide it when registering for a customer account or for our newsletter, when placing an order or if you have other questions by contacting us or by e-mail, or if it is used for services or our own advertising purposes.

With the sending of a contact request or the processing, fulfillment and implementation of the purchase or service contract agreed with us on the platform, personal data such as IP address, surname, first name, interest, address, contact data are collected through your entries for the implementation of a legal transaction/contract fulfilment (e-mail, telephone numbers), and possibly location data. Which data (voluntary and mandatory) is collected can be easily understood using the respective input masks. Any customer account can be deleted at any time by unsubscribing or sending a message to us. The data provided will be stored by us and used to process the desired legal transaction. Without your separate consent, we use the data you provide exclusively for the necessary fulfillment and processing of the services offered, for the purpose of fulfilling our contractual obligations and services in accordance with Article 6 Paragraph 1 lit b. GDPR.

Once the services have been fully processed, your data will be blocked for further use and deleted after the retention periods under tax and commercial law have expired, unless you have expressly consented to the further use of your data or there is another legal justification.

Furthermore, personal data is processed when you register for our newsletter. The data you provide for the newsletter (e.g. name and e-mail addresses) will be used by us for our own advertising purposes and for further electronic notifications with advertising information about our products, offers, campaigns and our company for our newsletter after you have informed us about this have expressly consented (double opt-in).

You can unsubscribe from the newsletter at any time via a link set up in the newsletter e-mail or by sending us a message, thereby revoking your consent. After you unsubscribe, your e-mail address will be deleted immediately from our newsletter distribution list.

The newsletter we send contains a so-called pixel tag, which is used to collect technical information such as IP address, browser, operating system, retrieval, retrieval time and clicked links when the customer opens the newsletter. This information is used for technical improvement and better customization of our newsletter service for customers.

In the case of inquiries sent to us via the contact form, e-mail or live chat, personal data will be processed for the processing of contact inquiries and their processing in accordance with Article 6 (1) (b) GDPR.

Which data is collected when using the contact form can be seen from the contact form or depends on your message by email or live chat. This data is stored and used exclusively to answer your request or to contact you and the associated technical administration.

Your data will be deleted after your request has been processed, provided that you wish this and the deletion does not conflict with any statutory retention requirements.

For our own advertising purposes, we reserve the right to use your first and last name, your postal address on the basis of legitimate interests within the meaning of Article 6 (1) (f) GDPR; To save your e-mail address and - insofar as we have received additional information from you as part of the contractual relationship - your title, academic degree, year of birth and your job, industry or business name in summarized lists and for sending interesting offers and information about our to use products. You can object to the storage and use of your data for this purpose at any time by sending us a message.

Without your separate consent, we use the data you provide exclusively for the necessary fulfillment and processing of the services offered and on the basis of legitimate interests. Once the services have been fully processed, your data will be blocked for further use and deleted after the retention periods under tax and commercial law have expired, unless you have expressly consented to the further use of your data or there is another legal justification.

The user will be informed transparently about the scope of any consent to be granted in connection with the registration for the respective service and the consent will be logged. The content of the consent given is made available to the user within the service for retrieval. If you do not give your consent, we ask for your understanding that you may not be able to participate in the respective service.

5) Note on registering for a customer account

The processing of your data is necessary for the implementation of the terms and conditions for using the platform. In other words, in order for you to register as a user of the platform, we need to process your personal data, otherwise we will not be able to manage your registration.

6) Information on the processing, fulfillment and implementation of a purchase contract

We process your data because it is necessary for the implementation of the purchase or service contract. Certain data related to the purchase process are activated only because you expressly request or authorize this, such as storing payment data (credit card) for future purchases or to inform you of the availability of our products. In these cases, the processing of your data is based on the consent you have given. We assume that we have a legitimate interest in carrying out the necessary checks in order to prevent or prevent possible attempts at misuse during your purchase. We consider the processing of this data to be beneficial for all parties involved when it comes to the payment of the purchase, and especially for you, as it allows us to protect you from attempts at misuse by third parties.

7) Disclosure to third parties: payment service providers and shipping companies

Mamtus Mode GmbH will only pass on your data if this is permitted under German or European data protection law. We work particularly closely with some service providers, such as payment service providers (e.g. PayPal and Stripe) or logistics companies (e.g. postal companies like DHL). In principle, these service providers may only process your data under special conditions on our behalf. Insofar as we use them as processors, the service providers only have access to your data to the extent and for the period required for the provision of the respective service.

shipping company

We work together with external shipping service providers (e.g. DHL) to deliver orders. These shipping service providers receive the following data from us to carry out the respective order:

Your Name
Your delivery address
If applicable, your post number (if you want the order to be delivered to a DHL Packstation)
If applicable, your e-mail address (if the shipping service provider would like to inform you by e-mail about the expected delivery date)

payment service provider

We work with payment service providers to guarantee you a secure payment process. These service providers include, for example, PayPal and Stripe. If they process your data outside the European Union, this can result in your data being transmitted to a country with a lower data protection standard than that in the European Union. .

PayPal

There is also the option of completing the payment process with the online payment service PayPal to handle. PayPal makes it possible to make online payments to third parties. The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg. If you choose PayPal as the payment method, your data required for the payment process will be automatically transmitted to PayPal. This regularly involved the following data: name, address, company, e-mail address, IP address.

The data transmitted to PayPal may be transmitted to credit agencies by PayPal. The purpose of this transmission is to check identity and creditworthiness. PayPal may also pass on your data to third parties if this is necessary to fulfill contractual obligations or if the data is to be processed on behalf of the customer. You can read PayPal's privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full/See .

8) Use of cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages out of legitimate interest. These are small text files that are stored on your end device.

The cookies can be transmitted to a page when it is called up and thus enable the user to be assigned. Cookies help to simplify the use of websites for users (such as storing login data). Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser. Other cookies remain on your end device and enable us or our partner companies to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Laws Cookies can be deleted. If cookies are not accepted, the functionality, in particular the ordering of products on our website, may be restricted.

9) Notice Regarding Web Analytics Services

On the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR, we use the following web analysis services to analyze and optimize our offers:

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, however, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) being sent to Google and the processing of this data by Google by using the browser plugin_cc781905- available under the following link. 5cde-3194-bb3b-136bad5cf58d_download and install.

As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent future detection by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain, delete your cookies in this browser, you have to click this link again): Disable Google Analytics

10) Google Re/Marketing Service Notice

We use the marketing and remarketing services (“Google Marketing Services” for short) on the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. DSGVO). ") of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, ("Google"). Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

The Google marketing services allow us to display advertisements for and on our website in a more targeted manner in order to only present users with advertisements that potentially match their interests. If, for example, a user is shown ads for products that he was interested in on other websites, this is referred to as "remarketing". For these purposes, when our and other websites on which Google marketing services are active are accessed, Google executes a code from Google and so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") are integrated into the website. With their help, an individual cookie is placed on the user's device, ie a small file is saved (comparable technologies can also be used instead of cookies.) The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices. com. This file records which websites the user visits, what content he is interested in and which offers he clicked on, as well as technical information Information on the browser and operating system, referring websites, visit times and other information on the use of the online offer. The IP address of the user is also recorded, whereby we inform Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases completely to a transferred to the Google server in the USA and shortened there. The IP address is not merged with the user's data within other Google offers. The above information can also be linked by Google to such information from other sources. If the user then visits other websites, the ads tailored to his interests can be displayed to him. User data is processed pseudonymously as part of Google Marketing Services. This means that Google does not store and process, for example, the name or e-mail address of the user, but processes the relevant data in relation to cookies within pseudonymous user profiles. This means that from Google's point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google's servers in the USA. The Google marketing services we use include the online advertising program "Google AdWords". In the case of Google AdWords, each AdWords customer receives a different "conversion cookie". This means that cookies cannot be tracked via the websites of AdWords customers. The information obtained with the help of the cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. We can include third-party advertisements based on Google's "AdSense" marketing service. AdSense uses cookies, which allow Google and its partner websites to display advertisements based on user visits to this website or other websites on the Internet We can also use the "Google Tag Manager” to integrate and manage the Google analysis and marketing services on our website. You can find out more about data use for marketing purposes by Google on the overview page:_cc781905-5cde-3194 -bb3b-136bad5cf58d_https://www.google.com/policies/technologies/ads, Google's privacy policy is at https://www.google.com/policies/privacy available. If you wish to object to interest-based advertising by Google Marketing Services, you can use the setting and opt-out options provided by Google: http://www.google.com/ads/preferences.

11) Note on the integration of Google Maps

This website uses Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes and uses data about the use of the map functions by visitors. You can find more information about data processing by Google in the Google data protection information. There you can also change your personal data protection settings in the data protection center.

Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

12) Note on the use of Google Webfonts

In order to display our content correctly and graphically appealing across browsers, we use script libraries and font libraries such as B. Google Web Fonts (https://www.google.com/webfonts/). Google web fonts are transferred to your browser's cache to avoid multiple loading. If the browser does not support Google Webfonts or prevents access, content will be displayed in a standard font.

Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible - although it is currently unclear whether and, if so, for what purposes - that operators of such libraries collect data.

Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

13) General information for using Facebook, Twitter and Instagram

On the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR, we use the following plugins to analyze and optimize our offers:

So-called social plugins ("plugins") from the social networks Facebook, the microblogging services Twitter and Instagram are used on our website. These services are offered by the companies Facebook Inc., Google Inc., Twitter Inc. and Instagram LLC. (" Offerer").

Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins

Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). You can find an overview of the Twitter buttons and their appearance here:_cc781905-5cde-3194-bb3b -136bad5cf58d_https://twitter.com/about/resources/buttons

Instagram is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). You can find an overview of the Instagram buttons and their appearance here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges

If you call up a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook, Twitter or Instagram servers. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider in the USA and stored there.

If you are logged in to one of the services, the providers can immediately assign your visit to our website to your profile on Facebook, Twitter or Instagram. If you interact with the plugins, for example by clicking the "Like", the "Tweet" or the "Instagram" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is stored also published in the social network, on your Twitter or Instagram account and displayed to your contacts there.The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your rights in this regard and setting options for the protection of your privacy can be found please refer to the data protection notices of the providers.

Facebook privacy policy: http://www.facebook.com/policy.php

Data protection information from Twitter: https://twitter.com/privac

Privacy notices from Instagram: https://help.instagram.com/155833707900388/

If you do not want Facebook, Twitter or Instagram to directly assign the data collected via our website to your profile in the respective service, you must log out of the relevant service before visiting our website. You can also completely prevent the plugins from loading with add-ons for your browser, e.g. B. with the script blocker "NoScript" (http://noscript.net/).

14) Third Party Services and Content, Sharing and Passing of Data

On the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR, we use the services of third parties to analyze and optimize our offers. In these cases, the third-party providers can perceive the IP address of the user of the third-party content or this is necessary for the implementation of the third-party provider's offers. The third-party providers used can also use so-called pixel tags to evaluate information about visitor traffic and use it for statistical or marketing purposes. This information can also be stored in cookies and on users' end devices. These cookies can then contain technical information about the browser used, operating system, time of visit and other information about the use of our website and can be linked to this information from other sources.

On the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR, we also use various other service providers to fulfill our contract. This includes in particular payment processors, shipping service providers and carriers.

15) Data Security

In order to prevent unauthorized access or disclosure, to ensure data accuracy and to ensure legitimate use of data, we have put in place technical and organizational procedures to secure and protect the data we request online. We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons.

An encrypted transmission of data takes place between your browser and our server. Your personal data will be encrypted in any ordering process using SSL encryption over the Internet.

16) Ways to Contact Us

If there is a contact form on our website, this can be used for electronic contact. Alternatively, you can contact us via the email address provided. If the person concerned contacts us via one of these channels, the personal data you have transmitted will be saved automatically. The storage serves solely for the purposes of processing or contacting the person concerned. A transfer of data to third parties does not take place.

17) Routine deletion and blocking of personal data

The person responsible for processing processes and stores personal data of the person concerned only for as long as this is necessary to achieve the purpose of storage. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible for processing is subject.

As soon as the storage purpose no longer applies or a storage period prescribed by the regulations mentioned expires, the personal data will be blocked or deleted as a matter of routine.

18) Rights of the data subject

Every data subject has the right to information under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR. The restrictions under §§ 34 and 35 BDSG apply to the right to information and the right to erasure. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).

You can revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent that were given to us before the General Data Protection Regulation came into force, i.e. before May 25, 2018. Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected.

Right of objection according to Article 21 GDPR

1. Right to object on a case-by-case basis

You have the right, for reasons that arise from your particular situation, at any time against the processing of personal data concerning you, which is based on Article 6 Para. 1 lit e GDPR (data processing in the public interest) and Article 6 Para. 1 lit f GDPR (data processing on the basis of a balance of interests) takes place to lodge an objection.

If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

2. Right to object to the processing of data for direct marketing purposes

In individual cases, we process your personal data in order to carry out direct advertising. You have the right to object at any time to the processing of your personal data for the purpose of such advertising.

If personal data is processed by you, you are the data subject within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:

right of providing information

You can request confirmation from the person responsible as to whether personal data relating to you is being processed by us. If such processing is present, you can request information from the person responsible for the following information:

the purposes for which the personal data are processed;
the categories of personal data being processed;
the recipients or categories of recipients to whom your personal data has been or will be disclosed;
the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage duration;
the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the person responsible or a right to object to this processing;
the existence of a right of appeal to a supervisory authority;
all available information about the origin of the data if the personal data are not collected from the data subject;
the existence of automated decision-making including profiling in accordance with Art. 22 Para. 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether your personal data is being transmitted to a third country or to an international organization. In this context, you can request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission.

Right to Rectification

You have a right to correction and/or completion to the person responsible if the processed personal data concerning you is incorrect or incomplete. The person responsible must make the correction immediately.

Right to restriction of processing

Under the following conditions, you can request the restriction of the processing of your personal data:

if you contest the accuracy of the personal data concerning you for a period that enables the person responsible to check the accuracy of the personal data;
the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
the person responsible no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
if you have lodged an objection to the processing pursuant to Art. 21 Para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State are processed. If the restriction of processing has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.

Right to Erasure

You can request the person responsible to delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:

The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
You revoke your consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR and there is no other legal basis for the processing.
You object to the processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Article 21 (2) GDPR.
The personal data concerning you have been processed unlawfully.
The deletion of the personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
The personal data concerning you was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

If the person responsible has made the personal data relating to you public and is obliged to delete it in accordance with Art. 17 (1) GDPR, he shall take appropriate measures, including technical measures, to protect the person responsible for data processing, taking into account the available technology and the implementation costs , who process the personal data, that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.

The right to erasure does not exist if processing is necessary

to exercise the right to freedom of expression and information;
to fulfill a legal obligation that requires processing under Union or Member State law to which the controller is subject, or to perform a task that is in the public interest or in the exercise of official authority that has been delegated to the controller;
for reasons of public interest in the field of public health in accordance with Article 9 Paragraph 2 lit. h and i and Article 9 Paragraph 3 GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para
to assert, exercise or defend legal claims.

right to information

If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients by the person responsible.

Right to data portability

You have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, common and machine-readable format. In addition, you have the right to transmit this data to another person responsible without hindrance by the person responsible for providing the personal data, provided that

the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and
the processing is carried out using automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible. The freedoms and rights of other people must not be impaired by this.

The right to data portability does not apply to processing of personal data that is required to perform a task that is in the public interest or in the exercise of official authority that has been assigned to the controller.

Right to object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 Paragraph 1 lit. e or f GDPR; this also applies to profiling based on these provisions.

The person responsible no longer processes the personal data relating to you unless he can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you is processed in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

If you object to the processing for direct marketing purposes, the personal data relating to you will no longer be processed for these purposes.

In connection with the use of information society services, you have the option – notwithstanding Directive 2002/58/EC – to exercise your right to object by means of automated procedures that use technical specifications.

Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.

Automated individual decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

is necessary for the conclusion or performance of a contract between you and the person responsible,
is permitted on the basis of legal provisions of the Union or the Member States to which the person responsible is subject and these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests or
takes place with your express consent.

However, these decisions must not be based on special categories of personal data pursuant to Article 9 Paragraph 1 GDPR unless Article 9 Paragraph 2 lit. a or g applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With regard to the in a. and c. In the cases mentioned, the person responsible shall take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the person responsible, to express his or her point of view and to contest the decision.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR violates.

The supervisory authority to which the complaint was lodged will inform the complainant about the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

19) Disclosure of data to third parties

Any other transfer to third parties than that described in this data protection declaration - not even in excerpts - for commercial or non-commercial purposes does not take place. Something else only applies if you have given your express consent or if the data transfer is justified on the basis of the applicable legal provisions. There is no comparison with other databases.

20) Duration of storage of personal data

We process and store your personal data for as long as it is necessary to fulfill our contractual and legal obligations. Personal data is therefore stored for the duration of the respective statutory retention period. If the data is no longer required for the fulfillment of contractual or legal obligations, they are regularly deleted, unless their — temporary — further processing is necessary for the following purposes:

Fulfillment of storage obligations under commercial and tax law: The storage and documentation periods specified there are two to ten years.

Preservation of evidence within the framework of the statutory statute of limitations. According to §§195ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being 3 years.

21) Questions and Notes

If you have further questions about data protection in our offers and services, you can contact us via the e-mail addresses provided. We will then try to answer your questions and resolve any concerns you may have.

The version of the data protection declaration available online at the time of your visit always applies to the use of our website. We reserve the right to change this data protection declaration at any time in compliance with the applicable data protection regulations. You should therefore visit our website regularly and take note of any changes.

22) Accessibility of the data protection declaration

You can access and print out the current version of this data protection declaration under the link "Privacy Policy". www.angoor.de/datenschutz

As of February 15, 2020