Privacy Policy

 

I. Name and address of the data controller

The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the EU member states, as well as other data protection regulations, is:

Lumenaza GmbH
Chief executives: Dr. Christian Chudoba, Dr. Bernhard Böhmer, Oliver March
Kreuzbergstr. 30, 10965 Berlin
Tel: 030 346 558 200
E-Mail: info@lumenaza.de

II. Name and address of the Data Protection Officer

The data protection officer of the data controller is:

Thomas Vorwerk

Kreuzbergstr. 30, 10965 Berlin
Tel: 030 346 558 200
E-Mail: thomas.vorwerk@lumenaza.de
Website: www.lumenaza.de

III. General information on data processing

1. Scope of personal data processing
We only process personal data of our users if it is necessary to provide a functional website as well as our content and services. We generally collect and use your personal dataonly with your consent. An exception applies in those cases where circumstances prevent us from obtaining your prior consent and the processing of your data is permitted by law.

2. Legal basis for processing personal data
Insofar as we obtain the consent of the data subject for the processing of their personal data, Art. 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data necessary for performance of a contract to which the data subject is a party, Art. 6 Para. 1 lit. b GDPR is the legal basis. This also applies to any processing that may be necessary in the process leading to the establishment of a contractual relationship.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR is the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 Para. 1 lit. d GDPR is the legal basis.

If processing is necessary to ensure a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the person concerned do not outweigh the first-mentioned interest, Art. 6 Para. 1 lit. f GDPR is the legal basis.

3. Data deletion and storage duration
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject. The blocking or deletion of data will also be carried out if a storage deadline required by the referenced legal standards expires, unless data storage is a necessity for concluding or performing a contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing
Every time a user visits our website, our system automatically collects data and information from the accessing computer system. The following data is collected:

(1)    The IP address of the user
(2)    Date and time of access
(3)    Information about the browser type and version used
(4)    Operating system of the user
(5)    Name of the website accessed
(6)    Amount of data transferred
(7)    Http status code

The data will be stored in the log files of our system. Not affected by this are the user's IP addresses or other data that enables allocation of the data to a user. The IP address is only saved in anonymous form in the log files, i.e. it is replaced by an arbitrarily assigned address before it is saved, which no longer allows any reference to a person.

The data is not stored together with any other personal data we may have collected about the user.

2. Legal basis for data processing
The legal basis for the storage of data is Art. 6 Para. 1 lit. f GDPR.

3. Purpose of data processing
The temporary storage of data by the system is necessary to enable delivery of the website to the user's computer.

The stored data, including the anonymised IP address, is stored in log files to ensure the functionality of the website. In addition, the data is used to optimise the website and to ensure the security of our information technology systems. We do not evaluate this data for any marketing purposes.

These purposes also encompass our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f GDPR.

4. Duration of storage
The data will be deleted as soon as it is no longer needed to achieve the purpose for which it was collected. In the case of data collected in order to provide the website, this occurs once the respective session has ended. The log file will be deleted after 5 days at the latest.

5. Objection and removal options
The collection of data for the provision of the website is absolutely necessary for the operation of the website. Consequently, there is no option for the user to object to its collection and retention.

V. Use of cookies

1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored on the Internet browser or by the Internet browser on the user's computer system. If a user visits a website, a cookie can be saved on their operating system. This cookie contains a distinctive character string that enables unique identification of the browser when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require the accessing browser to be identifiable when the user accesses other pages within the site.
The following data is stored and transmitted in cookies:

  • Language settings
  • Entries in the online forms available on our website
  • Login information

Additionally, Google sets cookies on our website, through our use of the Google Analytics services. You can find more information about these cookies in the following section under number VI.

2.  Legal basis for data processing
The legal basis for processing personal data using cookies is Art. 6 Para. 1 lit. f GDPR.

3.  Purpose of data processing
The purpose of using session cookies is to simplify the use of websites for the user. Some features of our website could not be made available if the use of cookies is disallowed. In such cases, it is necessary that the browser is recognised even after changing the page. We also use cookies to identify a user for subsequent visits if they have an account with us.

The user data collected by technically necessary cookies is not used to create user profiles.

Our legitimate interest in the processing of personal data according to Art. 6 Para. 1 lit. f GDPR, also lies in the purposes mentioned before.

4.  Duration of storage, objection and removal options
Cookies are stored on the user's computer and transmitted from there to our site. Therefore, as a user, you have full control of the use of cookies. By changing the settings of your Internet browser, you can disable or restrict the transmission of cookies. Cookies which have already been saved may be deleted at any time. This can also be done automatically. If cookies for our website are deactivated, you may no longer be able to use all of its features.

VI. Use of Google Analytics

1. Scope of processing personal data
On this website, we use Google Analytics, a web analytics service provided by Google LLC (https://about.google/ [retrieved on 2020/09/16], 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google"). In doing so, we use the Google Universal Analytics version, which enables data, sessions and interactions across multiple devices to be assigned to a pseudonymous user ID and thus to analyse the activities of a user across devices.

Google is certified under the Privacy Shield Agreement and thereby guarantees compliance with European data protection law, see https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active (retrieved on 2020/09/16).

Cookies are used via Google Analytics. Cookies are text files stored on your computer that enable analysis of how you use our website. The information generated by the cookie about your usage will generally be transmitted to and stored on a Google server in the USA. On our behalf, Google will use this information to analyse the use of our website by users, to compile reports on activities on this website, and to provide us with other services related to the use of this website and the Internet. Pseudonymous usage profiles of users may be created from the processed data.

We use Google Analytics only with activated IP anonymisation. This means that the IP address of the user is truncated by Google within the member states of the European Union or in other countries that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. The IP address provided by your browser in the context of Google Analytics will not be combined with other data from Google.

On behalf of the operator of this website, Google will use this information to analyse your use of the website, compile reports regarding website activity, and where applicable, provide us with other services related to website and Internet usage.

For further information on data usage by Google, setting and blocking options, please see the following Google websites: https://www.google.com/intl/de/policies/privacy/partners ("How Google uses information from sites or apps that use our services", retrieved on 2020/09/16), https://policies.google.com/technologies/ads ("Advertising", retrieved on 2020/09/16), https://adssettings.google.com/ ("Control the information Google uses to show you ads", retrieved on 2020/09/16).

2. Legal basis for the processing of personal data
The legal basis for the use of Google Analytics is Art. 15 Para. 3 of the German Teleservices Act (TMG) and Art. 6 Para. 1 lit. f GDPR.

3. Purpose of data processing
The purpose of our use of Google Analytics is to evaluate the usage of our website and to compile reports on website activities. These purposes also represent our legitimate interest in data processing.

4. Duration of storage
The data collected and evaluated by Google Analytics is stored for a period of 14 months after the last activity of the user and is then automatically deleted.
 
5. Objection and removal options
You may prevent the use of cookies by configuring the corresponding setting on your browser; however, we would like to inform you that this may prevent you from fully utilising all functions provided on this website. Furthermore, you can prevent the collection of data generated by the cookie and related to the usage of the website (including your IP address) and the processing of this data by Google by downloading and installing the tool that is available at the following link:  https://tools.google.com/dlpage/gaoptout. Opt-out cookies prevent any future collection of your data when you visit this website. In order to prevent data collection by Universal Analytics across multiple devices, you need to perform the opt-out on all systems you are using. You can set the opt-out cookie by clicking here: Google Analytics.

VII. Online forms (request for recall, request from producers, conclude electricity supply contract)

Our website offers you the possibility to get in contact with us. Thus, in addition to the online form for subscribing to our newsletter, you can also use our online forms for general contact or direct contact with our contact persons or the online application. 

1. scope of processing of personal data
If you use the corresponding forms on our website, your personal and other entered data will automatically be transmitted by our web server in an e-mail to the employee responsible for the respective form. If necessary, we will forward your data to the correct recipient within the company to process your request. Your data will not be passed on to third parties.

The personal data transmitted by you via online form will only be collected, processed and used within the scope of and for processing your inquiry. Any processing and use beyond this will only take place with your express consent.

Provided that you have given your consent that we may send you further information, we will process and use your personal data to provide you with interesting and important information. 

a. Request for call
There is a contact form on our website, which you can use to ask us for a phone call. If you use this option, the data entered in the input mask will be transmitted to us and stored. These data are:
- Name (mandatory)
- Telephone number (mandatory)
- E-mail address (mandatory)
- Company (voluntary indication)
- Period of availability (selection menu)
At the time the message is sent, the following data is also stored:

(1) The IP address of the user
(2) Date and time of dispatch

For the processing of the data, your consent will be obtained during the sending process and reference will be made to this privacy policy.

In connection with the data processing, the data will not be passed on to third parties. The data will be processed exclusively for the processing of your request. 

b. Request from producers
On our website you can also contact us as a producer to find out how to connect your plant to our system. If you take this opportunity, the data entered in the input mask will be transmitted to us and stored. These data are:
- First name (mandatory)
- Last name (mandatory)
- Street (mandatory)
- Zip code (mandatory)
- City (mandatory)
- E-mail address (mandatory)
- Telephone number (optional)
- Information on the plant (mandatory information, selection menu)
- Capacity of the plant (mandatory)
- Date of commissioning (voluntary indication)
In addition, the following data is collected during registration:
- IP address of the calling computer
- Date and time of registration
For the processing of the data, your consent will be obtained during the registration process and reference will be made to this privacy policy.

In connection with the data processing, the data will not be passed on to third parties. The data will be processed exclusively for the processing of your request. 

c. Conclude electricity supply contract
On our website, it is also possible to conclude an electricity supply contract with us via an online form. The data from the input mask is transmitted to us. This data is as follows:
- Information about your electricity consumption in kWh per year, optionally the number of persons in your household
- Salutation (mandatory, drop-down menu)
- Name and first name (mandatory)
- E-mail address (mandatory)
- Date of birth (mandatory) 
- Telephone number (optional)
- Desired username (voluntary specification)
- Address data for delivery address (mandatory)
- if necessary, a different billing address (voluntary information)
- Specification of the supply unit (mandatory entry, selection menu)
- Reason for the change of provider (mandatory information, drop-down menu)
- Last annual power consumption (mandatory)
- Electricity meter number (mandatory)
- Indication of the previous electricity supplier (voluntary indication when changing supplier)
- Current customer number (voluntary information when changing suppliers)
- Desired start of delivery (mandatory information)
- Bank details (account holder, IBAN)

For the processing of the data, your consent will be obtained during the registration process and reference will be made to this privacy policy.

In connection with the data processing, the data will not be passed on to third parties. The data will be processed exclusively for the processing of your request. 

2. legal basis of the data processing
The legal basis for the processing of the data is, as a result of your consent, Art. 6 para. 1 lit. a DSGVO. In the case of inquiries from producers and the conclusion of an electricity supply contract, the data processing also serves to carry out pre-contractual measures and, after the conclusion of a contract, also the fulfilment of a contract, so that the legal basis for the processing of the data is at the same time Art. 6 para. 1 lit. b DSGVO. 

3. purpose of data processing

a. Request for call
The processing of the personal data from the input mask serves us only to process your contact and to call you. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

b. Request from producers    
The processing of the personal data from the input mask serves us solely to process your contact and to be able to call you or contact you by e-mail, if you have provided us with an e-mail address. The processing of the address data and information on your system that you have provided us with serves to enable us to prepare ourselves for the discussion with you in terms of content. The collection of other personal data in the course of the registration process serves to prevent misuse of the services or the e-mail address used. 

c. Conclude electricity supply contract
The processing of the personal data from the input mask serves us solely to conclude and execute the electricity supply contract with you. If you have provided us with your previous electricity supplier and your current customer number, this data serves to terminate your previous contract, provided you have authorized us to do so. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose of their collection. 


a. Request for callback
For the personal data from the input mask of the contact form, this is the case when the respective conversation with you is finished. The conversation is finished when it can be concluded from the circumstances that the matter in question has been finally clarified. If your contact has led to the conclusion of a contract, we will delete the data when they are no longer required for the fulfillment of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations.

b. Request from producers
The personal data from the input mask of the contact form will be deleted when the respective conversation with you is finished. The conversation is finished when it is clear from the circumstances that the matter in question has been finally clarified. If your contact has led to the conclusion of a contract, we will delete the data when they are no longer required for the fulfillment of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations.

c. Conclude electricity supply contract
The data from the input mask for the conclusion of an electricity supply contract are deleted when they are no longer required for the fulfilment of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contracting party in order to comply with contractual or legal obligations.


5. possibility of objection and removal
As long as no contract has been concluded, you have the possibility at any time to revoke your consent to the processing of personal data and to object to the storage of your data. In this case, however, the conversation can no longer be continued or your online order of our electricity can no longer be considered. After the conclusion of a contract  

You can revoke your consent and object to the further storage of your data by contacting us by e-mail at info@lumenaza.de, by phone at +49 30 346 558 200 or by post to Lumenaza GmbH, Kreuzbergstr. 30, 10965 Berlin.

Please note that unencrypted e-mails sent via the Internet are not sufficiently protected against unauthorized access by third parties.

All personal data that we have stored in connection with an online form will be deleted by us. 
 

VIII. E-mail contact

1. Description and scope of data processing
You can contact us via the e-mail addresses published by us on the website or via the mailto links provided by us. In this case, your personal data that is transmitted along with the e-mail will be stored.

Such data will not be transferred to third parties in this context. This data will be used exclusively to conduct the conversation with you. We may redirect the e-mail internally to a designated employee if you have contacted a general e-mail address or the address of an non-responsible or absent employee.

2. Legal basis for data processing
The legal basis for the processing of data transferred in the course of sending an e-mail is Art. 6 Para. 1 lit. f GDPR. If you email us with the intention of entering into contract with us, this creates an additional legal basis for data processing per Art. 6 para. 1 lit. b GDPR.

3. Purpose of the data processing
The processing of the personal data from the e-mail serves us only to process the correspondence. This also constitutes the legitimate interest in processing the data.

4. Duration of storage
The data will be deleted as soon as it is no longer needed to achieve the purpose for which it was collected. This is the case when the conversation with the user ends. The conversation is terminated when the circumstances indicate that the matter in question has been finally resolved.

5. Objection and removal options
You have the possibility to object to the storage of your personal data at any time. For this, you can contact us by e-mailing us at info@lumenaza.de, by phoning us on +49 30 346 558 200 or by sending a letter to Lumenaza GmbH, Kreuzbergstr. 30, 10965 Berlin. We will then immediately delete the data. If you exercise this right, it will not be possible to continue the conversation.

If the data is required to fulfil or establish a contractual relationship with you, premature erasure of data is only possible insofar as contractual or legal obligations do not preclude erasure.

IX. Login area for registered customers

1.    Description and scope of data processing
On our website, we offer our registered customers the option of logging into our closed user area, indicating their user identifiers. The data is entered into an input screen and transmitted to us and stored. This data shall not be passed on to third parties. The following data is collected during login:

  • User name
  • Customer address

At the time of login, the following data is also saved:

  • The user's IP address
  • Date and time of registration

The other personal data processed during the login process serve to prevent misuse of our system and to ensure its security.

1. Legal basis for data processing
The provision of the closed user area and the processing of the login data serves the fulfilment of a contract to which the user is a party. The legal basis for processing is your consent under Art. 6 Para. 1 lit. b GDPR. The legal basis for the processing of the data transmitted during the login process is Art. 6 para. 1 lit. f GDPR.

2. Purpose of the data processing
The registration of the user is necessary for the fulfilment of a contract with the user and for the provision of the contractually agreed contents and applications.

3. Duration of storage
The data will be deleted as soon as it is no longer needed to achieve the purpose for which it was collected. This is the case for data collected during the registration process for fulfilment of a contract or implementation of pre-contractual measures, if the data is no longer necessary for fulfilment of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.

4. Objection and removal options
As a user, you have the option of cancelling the registration at any time. The data stored about you can be changed at any time using your user area account or, if that is not possible, it can be changed by us. To have your account deleted or have a change made, please contact us by email at info@lumenaza.de, by phone on +49 30 346 558 200 or by post to Lumenaza GmbH, Kreuzbergstr. 30, 10965 Berlin.

If the data is required to fulfil or establish a contractual relationship with you, premature erasure of data is only possible insofar as contractual or legal obligations do not preclude erasure.

X. Hosting

1. Description and scope of data processing
We use the following services of a hosting provider: infrastructure and platform services, computing capacity, storage and database services, security and technical maintenance services. In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of visitors to this online offer and of registered members, as described in this data protection declaration for the individual data processing areas.

2. Legal basis for data processing
The legal basis for data processing is Art. 6 Para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (Fulfilment of order processing agreement). Our legitimate interest lies in providing an efficient and secure online service.

3. Purpose of data processing
The purpose of data processing is the operation of this online offer.

XI. Rights of the data subject

If your personal data is processed, you are a data subject in the sense of GDPR and you are entitled to the rights explained in more detail below. Please contact us in all cases with your request: by email to info@lumenaza.de or by phone on +49 30 346 558 200 or by post to Lumenaza GmbH, Kreuzbergstr. 30, 10965 Berlin.

1. Right to information
You can request confirmation from us as to whether personal data concerning you is processed by us. If such processing is taking place, you can request the following information from us:

(1)    the purposes for which the personal data is processed;
(2)    the categories of personal data that are processed;
(3)    the recipients or the categories of recipients to whom your personal data have been or will be disclosed;
(4)    the planned duration of the storage of your personal data or, if specific information is not possible, criteria for determining the storage period;
(5)    the existence of a right to correction or deletion of your personal data, a right to restriction of processing by the data controller or a right to object to this processing;
(6)    the right to lodge a complaint with a supervisory authority;
(7)    all available information about the origin of the data if the personal data is not collected from the data subject.

You have the right to be informed whether your personal information will be transmitted to a third-party country or an international organisation. In this respect, you can request the appropriate guarantees under Art. 46 of the GDPR in relation to the transmission.

2. Right to rectification
You have a right to rectification and/or integration with respect to the data controller if your processed personal data is incorrect or incomplete. We will carry out the rectification immediately after your notification.

3. Right to restrict processing
Under the following conditions, you may request that the processing of your personal data be restricted:

(1)    if you contest the accuracy of your personal data for a period that enables the data controller to check the accuracy of the personal data;
(2)    the processing is unlawful and you reject the deletion of the personal data and instead request that the use of the personal data be restricted;
(3)    the data controller no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
(4)    if you object to processing in accordance with Art. 21 Para. 1 GDPR and it has not yet been established whether the legitimate reasons for the data controller to process your data outweigh your right to object.

If the processing of your personal data has been restricted, then - apart from its storage - this data may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person, or for reasons of an important public interest on the part of the European Union or a member state. If the limitation of the processing has been restricted for any of the conditions listed above, you will be notified by the data controller before the restriction has been lifted.

4. Right to deletion
a)    Obligation to delete
You can request the data controller to delete your personal data immediately, and the data controller is obliged to delete this data immediately if one of the following reasons applies:
(1)    your personal data is no longer necessary for the purposes for which they were collected or otherwise processed;
(2)    you revoke your consent upon which its processing was based in accordance with Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR and there is no other legal basis for its continued processing;
(3)    you object to processing in accordance with Art. 21 Para. 1 GDPR, and there are no overriding legitimate reasons for its continued processing, or you submit an objection to its processing in accordance with Art. 21 Para. 2 GDPR;
(4)    your personal data has been processed unlawfully;
(5)    the deletion of personal data relating to you is required in order to comply with legal obligations according to EU law or national law of the member states to which the data controller is subject, or
(6)    your personal data has been collected in connection with services offered by an information company as per Art. 8 Para. 1 GDPR.

b)    Information to third parties
If we have made personal data public that concerns you and if we are obliged to delete it pursuant to Art. 17 Para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process personal data, that you, as person concerned, have requested the deletion of all links to this personal data or of copies or replications of this personal data.

c)    Exceptions
The right to deletion does not exist insofar as processing is necessary
(1)    to exercise the right to freedom of expression and information;
(2)    to fulfil a legal obligation that requires processing in accordance with the law of the European Union or the member states to which the data controller is subject, or to perform a task that is in the public interest or in the exercise of official authority that has been transferred to the data controller;
(3)    for reasons of public interest in the area of public health in accordance with Art. 9 Para. 2 lit. h and i, as well as Art. 9 Para. 3 GDPR;
(4)    for archiving, scientific or historical research purposes in the public interest or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, to the extent that the law referred to in section (a) is likely to render impossible or seriously prejudice the attainment of the objectives of such processing, or
(5)    to assert, exercise or defend legal claims.

5. Right to be informed
If you have exercised your right to correction, deletion or to restrict processing, we shall inform all recipients to whom the your personal data has been disclosed of this correction or deletion or restriction on processing, unless this proves impossible or involves disproportionate effort.

It is your right to be informed regarding such recipients.

6. Right to data portability
You have the right to receive your personal data provided to us in a structured, common and machine-readable format. Moreover, you have the right to transmit this data to another data controller without any obstruction from the data controller to whom the personal data has been given, if

(1)    the processing is based on consent given in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on the basis of a contract in accordance with Art. 6 Para. 1 lit. b GDPR and
(2)    the processing is carried out using automated procedures.

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly by us to another data controller, insofar as this is technically feasible. This action must not affect the freedoms and rights of other persons.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the data controller.

7. Right to object
You have the right to object to the processing of your personal data at any time for reasons arising from your specific situation, which is carried out in accordance with Art. 6 Para. 1 lit. e or f GDPR.

The data controller will no longer process the personal data that concerns you, unless the party can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing; this also applies to profiling insofar as it is associated with such direct marketing. If you object to your data being processed for direct marketing purposes, your personal data will no longer be processed for such purposes.

In the context of the use of information company services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object using an automated process.

8. Right to revoke the consent under data protection law
You have the right to withdraw your consent at any time. This revocation will not affect the lawfulness of any processing done beforehand.

9. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the member state where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you violates the GDPR.

The supervisory authority with which the appeal has been filed shall inform the appellant of the status and results of the appeal, including the possibility of a judicial remedy under Art. 78 GDPR.

 

 

 

Any questions?
We would love to talk to you.
Thomas Vorwerk  
+49 30 346 558 200
Stay updated with our Newsletter
I have read and accepted the data protection notice.