Privacy Policy

The controller responsible for data processing is:

Musikhaus Hermann OHG
Gymnasiumstrasse 2
88400 Biberach

Email: info@musikhaus-hermann.de
Telephone: 07351-9789

Thank you for your interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. Access Data and Hosting

You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically stores a so-called server log file containing, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), thereby documenting the access. This access data is evaluated exclusively to ensure the website operates without disruption and to improve our services. This serves to protect our legitimate interests, which prevail following a balancing of interests, in the proper presentation of our services, in accordance with Art. 6(1)(f) GDPR. All access data is deleted no later than seven days after the end of your visit to our website.

Hosting

Our hosting and website presentation services are provided in part by our service providers acting as data processors on our behalf. Unless otherwise explained in this Privacy Policy, all access data and all data collected through the forms provided for this purpose on this website are processed on their servers. If you have any questions about our service providers or the basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection: the United Kingdom, Canada and the United States.

The European Commission has adopted an adequacy decision for the United States, which serves as the basis for transfers to third countries where the respective service provider is certified. Until our service providers have obtained certification, data transfers continue to rely on the following safeguard: the European Commission's Standard Contractual Clauses.

Our service providers are based in and/or use servers in the following country: Australia.
No adequacy decision by the European Commission has been adopted for this country. Our cooperation with these providers is based on the following safeguards: the European Commission's Standard Contractual Clauses.

2. Data Processing for Contract Fulfilment and Contact

2.1 Data Processing for Contract Fulfilment

For the purpose of fulfilling contracts (including handling enquiries and processing any existing claims under warranty rights, rights relating to defective performance and rights of withdrawal, as well as any statutory update obligations), we collect personal data in accordance with Art. 6(1)(b) GDPR when you voluntarily provide it to us as part of your order. Mandatory fields are marked as such because we require this data to fulfil the contract and cannot dispatch your order without it. The data collected is evident from the respective input forms.

Further information about the processing of your data, particularly its disclosure to our service providers for order, payment and shipping processing, can be found in the following sections of this Privacy Policy. Once the contract has been fully performed, your data will be restricted from further processing and deleted after the expiry of the statutory retention periods under tax and commercial law, in accordance with Art. 6(1)(c) GDPR, unless you have expressly consented to further use of your data under Art. 6(1)(a) GDPR or we reserve the right to use the data beyond this scope where legally permitted and as explained in this statement.

Inventory Management System

We use inventory management systems provided by external service providers to process orders and fulfil contracts. Our service providers act as data processors on our behalf. If you have any questions about our service providers or the basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has not adopted an adequacy decision. Our cooperation with these providers is based on the European Commission's Standard Contractual Clauses.

2.2 Customer Account

If you have given your consent under Art. 6(1)(a) GDPR by choosing to open a customer account, we use your data to create the account and store your information for future orders on our website. You can delete your customer account at any time, either by sending a message using the contact details described in this Privacy Policy or by using the relevant function in your customer account. After your customer account has been deleted, your data will be erased unless you have expressly consented to further use of your data under Art. 6(1)(a) GDPR or we reserve the right to use the data beyond this scope where legally permitted and as explained in this statement.

Contact

As part of our customer communications, we collect personal data to process your enquiries in accordance with Art. 6(1)(b) GDPR when you voluntarily provide it to us when contacting us (e.g. via a contact form, live chat tool or email). Mandatory fields are marked as such because we require this data to process your enquiry. The data collected is evident from the respective input forms. Once your enquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data under Art. 6(1)(a) GDPR or we reserve the right to use the data beyond this scope where legally permitted and as explained in this statement.

3. Data Processing for Shipping Purposes

To fulfil the contract in accordance with Art. 6(1)(b) GDPR, we disclose your data to the shipping service provider responsible for delivery insofar as this is necessary to deliver the goods you have ordered. If you have any questions about our service providers or the basis of our cooperation with them, please contact us using the contact details described in this Privacy Policy.

The same applies to the disclosure of data to our manufacturers or wholesalers when they handle shipping on our behalf (drop shipping). For the purposes of this Privacy Policy, they are considered shipping service providers.

Disclosure of Data to Shipping Service Providers for Delivery Notifications

If you have given us your explicit consent during or after placing your order, we will, on the basis of that consent under Art. 6(1)(a) GDPR, disclose your email address and telephone number to the selected shipping service provider so that they can contact you before delivery to notify you of the delivery or coordinate it with you.
You may withdraw your consent at any time by sending a message using the contact details described in this Privacy Policy. After withdrawal, we will delete the data you provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this scope where legally permitted and as explained in this statement. If you have any questions about our service providers or the basis of our cooperation with them, please contact us using the contact details described in this Privacy Policy.

4. Data Processing for Payment Processing

When processing payments in our online shop, we work with the following partners: technical service providers, credit institutions and payment service providers.

4.1 Data Processing for Transaction Processing

Depending on the payment method selected, we disclose the data required to process the payment transaction to our technical service providers, the commissioned credit institutions or the selected payment service provider, insofar as this is necessary to process the payment. This is required to fulfil the contract in accordance with Art. 6(1)(b) GDPR. In some cases, payment service providers collect the data required to process the payment themselves, for example on their own website or through technical integration into the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

Depending on the payment method selected, data may be transferred to third countries outside the EU/EEA for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection. If data is transferred to third countries outside the EU/EEA for which the European Commission has not adopted an adequacy decision, our cooperation is based on the European Commission's Standard Contractual Clauses.

If you have any questions about our payment processing partners or the basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.

4.2 Data Processing for Fraud Prevention and Optimisation of Our Payment Processes

Where appropriate, we provide the service providers mentioned above with additional data, which they use together with the data required to process payments for the purposes of fraud prevention and optimising our payment processes (e.g. invoicing, handling disputed payments and supporting accounting). In accordance with Art. 6(1)(f) GDPR, this serves to protect our legitimate interests, which prevail following a balancing of interests, in protecting ourselves against fraud and managing payments efficiently.

4.3 Instalment Payment Option

If you select the instalment payment option and provide the consent required for this purpose under data protection law in accordance with Art. 6(1)(a) GDPR, personal data (first name, surname, address, email address, telephone number, date of birth, IP address and gender) will be transmitted to our partner BNP Paribas S.A., Germany Branch, Schwanthalerstr. 31, 80336 Munich, Germany, together with the data required to process the transaction (product, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and order time), for the purpose of processing this payment method.
To verify the customer's identity and creditworthiness, our partner obtains information from publicly accessible databases and credit reference agencies. For information about the providers from whom information and, where applicable, creditworthiness data are obtained on the basis of mathematical and statistical procedures, as well as further details about the processing of your data after it has been transmitted to our partner BNP Paribas S.A., Germany Branch, please refer to its privacy policy, available here: http://www.bnpparibas.de/de/legals/
Our partner BNP Paribas S.A., Germany Branch, uses the information received about the statistical probability of payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. You may contact our partner BNP Paribas S.A., Germany Branch, to present your point of view and contest the decision. You may withdraw your consent to the disclosure of data given during the ordering process at any time, including without stating a reason, by notifying us. The withdrawal will take effect for the future.

5. Email Marketing

5.1 Email Newsletter Subscription and Newsletter Tracking with Separate Consent

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our email newsletter regularly, on the basis of your consent under Art. 6(1)(a) GDPR. You may unsubscribe from the newsletter at any time, either by sending a message using the contact details provided below or by clicking the designated link in the newsletter. After you unsubscribe, we will remove your email address from the mailing list unless you have expressly consented to further use of your data under Art. 6(1)(a) GDPR or we reserve the right to use the data beyond this scope where legally permitted and as explained in this statement.

If you have also given your consent under Art. 6(1)(a) GDPR to the analysis of our newsletters, we analyse how you interact with our newsletter by measuring, storing and evaluating open rates and click-through rates in order to design future newsletter campaigns ("newsletter tracking").

For this analysis, the emails we send contain single-pixel technologies (e.g. web beacons or tracking pixels) stored on our website. For the analysis, we link these technologies in particular to the following "newsletter data":

• the page from which the page was requested (the so-called referrer URL);
• the date and time of access;
• a description of the type of web browser used;
• the IP address of the requesting device;
• the email address;
• the date and time of subscription and confirmation.

We also link these single-pixel technologies to your email address or IP address and, where applicable, an individual ID. Links contained in the newsletter may also include this ID.

You may unsubscribe from newsletter tracking at any time, either by sending a message using the contact details provided or by clicking the designated link in the newsletter.

This information is stored for as long as you remain subscribed to the newsletter.

5.2 Newsletter Distribution

The newsletter and the newsletter tracking described above may also be sent or carried out by our service providers acting as data processors on our behalf. If you have any questions about our service providers or the basis of our cooperation with them, please contact us using the contact details described in this Privacy Policy.

5.3 Sending Review Requests by Email

If you have given us your explicit consent under Art. 6(1)(a) GDPR during or after placing your order, we use your email address to ask you to review your order through the review system we use. You may withdraw this consent at any time by sending a message using the contact details described in this Privacy Policy or by clicking the designated link in the review request. Once you have withdrawn your consent, we will remove your email address from the mailing list unless you have expressly consented to further use of your data under Art. 6(1)(a) GDPR or we reserve the right to use the data beyond this scope where legally permitted and as explained in this statement.

Review requests may also be sent by our service provider Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops").

When review requests are sent, Trusted Shops provides us with information about their status (e.g. whether the review request has been sent and whether it has been delivered). This is carried out in accordance with Art. 6(1)(f) GDPR to pursue our legitimate interest in receiving information about review invitations so that we can make improvements where appropriate, as well as Trusted Shops' legitimate interest in providing this service.

We are jointly responsible with Trusted Shops for sending review requests and collecting and displaying review and status information.

As part of the joint controllership between us and Trusted Shops, please direct any data protection enquiries and requests to exercise your rights preferably to Trusted Shops. Its contact details can be found here. Further information about data protection is available via the following link here. You may also contact us at any time using the contact details described in this Privacy Policy. If necessary, your enquiry will be forwarded to the other controller for a response.

6. Cookies and Other Technologies

General Information

To make visiting our website attractive and to enable the use of certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of your browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser on your next visit (persistent cookies). You can find the storage duration in the overview in your web browser's cookie settings.

Privacy Protection on End Devices

When you use our online services, we employ strictly necessary technologies to provide the digital service you have expressly requested. Storing information on your device or accessing information already stored on your device does not require consent in this respect.

For functions that are not strictly necessary, storing information on your device or accessing information already stored on your device requires your consent. Please note that if you do not give your consent, certain parts of the website may not be fully usable. Any consent you have given remains in effect until you change or reset the relevant settings on your device.

Any Subsequent Data Processing Through Cookies and Other Technologies

We use technologies that are strictly necessary for the use of certain functions of our website. These technologies collect and process your IP address, the time of your visit, device and browser information, and information about how you use our website. This serves to protect our legitimate interests, which prevail following a balancing of interests, in optimising the presentation of our services, in accordance with Art. 6(1)(f) GDPR.

We also use technologies to fulfil our legal obligations (e.g. to demonstrate that consent to the processing of your personal data has been obtained), as well as for web analytics and online marketing. Further information, including the respective legal basis for data processing, can be found in the following sections of this Privacy Policy.

Cookie Settings

You can find instructions for managing cookie settings in your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of technologies under Art. 6(1)(a) GDPR, you may withdraw your consent at any time by sending a message using the contact details provided in this Privacy Policy.

7. Use of Cookies and Other Technologies

We use the following cookies and other third-party technologies on our website. Unless otherwise stated for an individual technology, these are used on the basis of your consent under Art. 6(1)(a) GDPR. Once the relevant purpose has ceased to exist and we have stopped using the respective technology, the data collected in this context will be deleted. You may withdraw your consent at any time with effect for the future. Further information about your options for withdrawing consent can be found in the section "Cookies and Other Technologies". Further information, including the basis of our cooperation with the individual providers, is provided in the descriptions of the respective technologies. If you have any questions about the providers or the basis of our cooperation with them, please contact us using the contact details described in this Privacy Policy.

Use of Google Services

We use the technologies described below provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information about your use of our website that is automatically collected through Google technologies is generally transmitted to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Unless otherwise stated for an individual technology, data processing is carried out on the basis of an agreement between joint controllers concluded for the respective technology in accordance with Art. 26 GDPR. Further information about data processing by Google can be found in Google's Privacy Policy.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has not adopted an adequacy decision. Our cooperation with these providers is based on the European Commission's Standard Contractual Clauses.

Google Analytics

For website analytics, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address is stored on a server located in the EU to derive location data and is then immediately deleted before the traffic is forwarded to other Google servers for processing. Data processing is carried out on the basis of a data processing agreement with Google.

To optimise the marketing of our website, we have enabled the data-sharing settings for "Google products and services". This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. Data sharing with Google under these settings is based on an additional agreement between controllers. We have no influence over Google's subsequent processing of the data.

If you do not consent to the use of Google Analytics under Art. 6(1)(a) GDPR, no cookies will be stored on or read from your device. The data processing described in the preceding paragraphs will not take place. To fill gaps in web analytics through behavioural and conversion modelling, pings containing data (user agent, information about your consent behaviour, screen resolution and IP address) are sent to Google.

Google Ads

For advertising purposes in Google search results and on third-party websites, a so-called Google remarketing cookie is set when you visit our website. It enables interest-based advertising based on the automatic collection and processing of data (IP address, time of visit, device and browser information, and information about your use of our website), using a pseudonymous cookie ID and the pages you have visited. Further data processing only takes place if you have enabled the "personalised advertising" setting in your Google Account. If you are signed in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analytics and event tracking, we use Google Ads conversion tracking to measure your subsequent behaviour when you arrive at our website via a Google Ads advertisement. Cookies may be used for this purpose, and data may be collected (IP address, time of visit, device and browser information, and information about your use of our website based on events defined by us, such as visiting a webpage or subscribing to a newsletter). Usage profiles are created from this data using pseudonyms.

YouTube Video Plugin

To integrate third-party content, the YouTube video plugin collects data (IP address, time of visit, and device and browser information) in the enhanced privacy mode we use. This data is transmitted to Google and subsequently processed by Google only when you play a video.

8. Integration of the Trusted Shops Trustbadge and Other Widgets

Trusted Shops widgets are integrated into this website to display Trusted Shops services (e.g. quality seals and collected reviews) and to offer Trusted Shops products to buyers after they place an order.

This serves to protect our legitimate interests, which prevail following a balancing of interests, in optimising our marketing by enabling a secure shopping experience, in accordance with Art. 6(1)(f) GDPR. The Trustbadge and the services advertised through it are provided by Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with which we are joint controllers under data protection law in accordance with Art. 26 GDPR. Below, we inform you of the essential terms of our arrangement under Art. 26(2) GDPR.

When you interact with the Trustbadge AI+, session cookies are set to store your login status and display the so-called welcome layer, which shows details of the respective online shop (company information, reviews and information about the availability of buyer protection) as well as the #trstd secret. A cookie is set to recognise logged-in users and is stored for a maximum of 400 days after login. In addition, session cookies are set to send push notifications when using the app, provided the user has enabled them. This is necessary for Trusted Shops to provide the digital service you have requested. Trusted Shops is responsible for data processing when you interact with the Trustbadge AI+.

As part of the joint controllership between us and Trusted Shops SE, please direct any data protection enquiries and requests to exercise your rights preferably to Trusted Shops, using the contact details provided in the privacy information. You may also contact either controller of your choice at any time. If necessary, your enquiry will be forwarded to the other controller for a response.

8.1 Data Processing When Integrating the Trustbadge and Other Widgets

The Trustbadge is provided through a US-based CDN (Content Delivery Network) provider. An adequate level of data protection is ensured by an adequacy decision adopted by the European Commission, which is available for the United States here. Service providers based in the United States are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. If the service providers used are not certified under the DPF, Standard Contractual Clauses have been concluded as an appropriate safeguard.

When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which also contains your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), thereby documenting the access. The IP address is anonymised immediately after collection so that the stored data can no longer be associated with you personally. The anonymised data is used in particular for statistical purposes and error analysis.

8.2 Data Processing After Order Completion

After an order has been completed, order information (order total, order number and, where applicable, the product purchased) and your email address, hashed using a cryptographic one-way function, are transmitted to Trusted Shops. The legal basis is Art. 6(1)(f) GDPR. This is necessary to verify whether you are already registered for Trusted Shops services and to protect our and Trusted Shops' prevailing legitimate interests in providing buyer protection linked to the specific order and transactional review services, in accordance with Art. 6(1)(f) GDPR. If you are already registered, further processing will take place in accordance with the contractual agreement between you and Trusted Shops. If you are not yet registered for the services, you will then have the opportunity to register for the first time. Further processing after registration is also governed by the contractual agreement with Trusted Shops. If you do not register, all transmitted data will be automatically deleted by Trusted Shops, after which it will no longer be possible to identify you from the data.

Trusted Shops uses service providers for hosting, monitoring and logging. The legal basis is Art. 6(1)(f) GDPR, for the purpose of ensuring uninterrupted operation. Processing may take place in third countries (the United States, the United Kingdom and Israel). An adequate level of data protection is ensured in each case by an adequacy decision adopted by the European Commission, available for the United States here, for the United Kingdom here and for Israel here. Service providers based in the United States are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. If the service providers used are not certified under the DPF, Standard Contractual Clauses have been concluded as an appropriate safeguard.

9. Social Media

Our Online Presence on Facebook (by Meta), Instagram (by Meta) and YouTube

If you have given your consent to the respective social media operator under Art. 6(1)(a) GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media platforms listed above. Usage profiles are created from this data using pseudonyms. These profiles may be used, for example, to display advertisements within and outside the platforms that are presumed to match your interests. Cookies are generally used for this purpose. For detailed information about the processing and use of data by the respective social media operator, as well as contact options, your related rights and settings for protecting your privacy, please refer to the providers' privacy notices linked below. If you still need assistance, you can contact us.

Facebook (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). Information automatically collected by Meta Platforms Ireland about your use of our Facebook (by Meta) online presence is generally transmitted to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing in connection with visits to a Facebook (by Meta) fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (including information about Insights data) is available here.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection: Brazil, the United States, Canada, Japan, South Korea, New Zealand, the United Kingdom and Argentina.

The adequacy decision for the United States serves as the basis for transfers to third countries where the respective service provider is certified. Certification is in place.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico.
No adequacy decision by the European Commission has been adopted for these countries. Our cooperation with these providers is based on the following safeguards: the European Commission's Standard Contractual Clauses.

Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). Information automatically collected by Meta Platforms Ireland about your use of our Instagram online presence is generally transmitted to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in connection with visits to an Instagram (by Meta) fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (including information about Insights data) is available here.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection: Brazil, the United States, Canada, Japan, South Korea, New Zealand, the United Kingdom and Argentina.

The adequacy decision for the United States serves as the basis for transfers to third countries where the respective service provider is certified. Certification is in place.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico.
No adequacy decision by the European Commission has been adopted for these countries. Our cooperation with these providers is based on the following safeguards: the European Commission's Standard Contractual Clauses.

YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information automatically collected by Google about your use of our YouTube online presence is generally transmitted to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has adopted an adequacy decision establishing an adequate level of data protection.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has not adopted an adequacy decision. Our cooperation with these providers is based on the European Commission's Standard Contractual Clauses.

10. Contact Options and Your Rights

10.1 Your Rights

As a data subject, you have the following rights:

• under Art. 15 GDPR, the right to request access to your personal data processed by us, within the scope specified therein;
• under Art. 16 GDPR, the right to request without undue delay the rectification of inaccurate personal data or the completion of personal data stored by us;
• under Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary
  • to exercise the right to freedom of expression and information;
  • to comply with a legal obligation;
  • for reasons of public interest; or
  • for the establishment, exercise or defence of legal claims;
• under Art. 18 GDPR, the right to request restriction of the processing of your personal data where
  • you contest the accuracy of the data;
  • the processing is unlawful, but you oppose the erasure of the data;
  • we no longer need the data, but you require it for the establishment, exercise or defence of legal claims; or
  • you have objected to the processing under Art. 21 GDPR;
• under Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;
• under Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority in your habitual place of residence, your place of work or the place where our company is established.

10.2 Contact Options

If you have any questions about the collection, processing or use of your personal data, or if you wish to request access to, rectification, restriction or erasure of your data, withdraw consent you have given, or object to a particular use of your data, please contact us directly using the contact details in our legal notice.