Privacy policy

The controller responsible for the processing of personal data on this website is:

autoXperts GmbH
Frankfurter Straße 200
63263 Neu-Isenburg
Germany

E-mail: info@meineplaketten.de

We process personal data only insofar as this is necessary to provide our website, to carry out orders and contracts, to communicate with customers, to comply with legal obligations or on the basis of consent or a legitimate interest.

The respective legal basis is determined in particular by Art. 6(1)(a), (b), (c) or (f) GDPR.

Personal data is disclosed only insofar as this is necessary for the performance of a contract, there is a legal obligation, there is a legitimate interest or you have given your consent.

Our website, databases, e-mail services and essential technical systems are operated on our own server infrastructure, or server infrastructure administered by us, at IONOS in Germany.

Service provider:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

IONOS processes data as a processor within the scope of the hosting and infrastructure services we use.

In particular, IP addresses, technical connection data, server log data and the data arising from the use of our website may be processed in this context.

The processing serves in particular the secure, stable and efficient provision of our online offering on the basis of Art. 6(1)(f) GDPR and, insofar as the processing is necessary for the performance of a contract, on the basis of Art. 6(1)(b) GDPR.

When our website is accessed, technically necessary information may be processed automatically. This may include in particular:

• IP address
• date and time of access
• page or file accessed
• referrer URL
• browser type and browser version
• operating system
• host name or technical device information
• HTTP status and comparable technical information

The processing serves to ensure technical functionality, IT security, error analysis and the prevention of misuse on the basis of Art. 6(1)(f) GDPR.

Server log data is stored only for as long as is necessary for operation, security and error analysis. Where data is needed to investigate a specific security incident, it may be stored until the incident has been finally resolved.

To protect our systems against automated, abusive or unusually frequent requests, IP addresses and other technical characteristics may be processed temporarily.

To limit automated or excessive requests, an IP address may in particular be stored for up to 10 minutes and used to limit further access.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website, our customers and our technical systems.

For customer accounts, the most recent login times may also be stored in order to detect unauthorised access and improve account security.

Protection against click fraud

We automatically check clicks on our paid adverts (e.g. Google Ads) for signs of click fraud – for example, many clicks in quick succession from the same IP address or the same device, access from data centres or via automated browsers, visits in which the page was never loaded, or a conspicuously regular pattern. For this purpose, we process the data listed under “Visits via our adverts” (Section 14) as well as the click identifier appended to the address by the advertising platform (e.g. “gclid”), the campaign and the ad group; the click identifier also serves to ensure that merely reloading the same advert is not counted as a new click. Using the click identifier, we also retrieve from Google Ads the approximate location (country, region, town or district – never the exact address), the device type and the ad position that Google determined for that click, and store this data for 30 days. From this data we calculate a risk score. This does not involve an automated decision having legal effect on you: above a certain score, we open a suspected case, which is reviewed by a human.

If the suspicion is confirmed, we report the clicks concerned to the operator of the advertising platform (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for review and in doing so transmit the times, IP addresses, click identifiers, campaigns and the reasons. We may also exclude individual IP addresses from the delivery of our adverts.

The legal basis is Art. 6(1)(f) GDPR in conjunction with Recital 47 GDPR (prevention of fraud). Our legitimate interest is to protect ourselves against abusive, chargeable clicks and to obtain credits for invalid clicks. So that we can recognise repeated clicks from the same browser even if the IP address changes, we also store a random visitor ID in your browser's storage on every visit (localStorage, key “mp_besucher_id”, 12 months). It contains no information about you or your device, serves only to detect click fraud and to attribute an ad click to a later order, and is not passed on to anyone. We base the storage and reading on Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) (strictly necessary to operate our online shop and to protect it against misuse), and the further processing on Art. 6(1)(f) GDPR. You can delete the ID at any time by deleting your browser's website data for meineplaketten.de, and you can object to the processing under Art. 21 GDPR. The device fingerprint (Section 14) is only included if you have consented to it.

We delete the individual click data after 30 days. If clicks belong to a suspected case, we keep them in the case until it is closed, but no longer than 90 days after the last click. We keep the log of the handling of a case (who decided or reported what and when, without IP addresses) for 2 years as evidence.

Our website uses an encrypted SSL/TLS connection.

As a result, data transmitted between your browser and our website is protected against unauthorised access during transmission.

We use cookies, local storage, session storage and comparable technologies.

Technically necessary functions

Insofar as storing information on your terminal equipment or accessing such information is strictly necessary to provide functions that you have expressly requested, this is done on the basis of Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

This applies in particular to functions such as:

• cart
• login and customer account
• Checkout
• session management
• Security
• storage of your privacy and cookie settings

No consent is required for these technically necessary functions.

Functions requiring consent

Services or storage that are not technically necessary are, as a rule, only activated after you have given your consent.

The legal basis for access to your terminal equipment is Section 25(1) TDDDG and, for the subsequent processing of personal data, Art. 6(1)(a) GDPR.

You can change or withdraw your consent at any time with effect for the future via the “Cookie settings” accessible on our website.

We use Google Analytics for the statistical analysis of the use of our website; Google Analytics only sets analytics cookies with your consent (see Section 10). Likewise, we only measure with your consent whether a purchase resulted from one of our Google adverts (Section 10). We do not use personalised advertising (remarketing).

Referral links

If you access our website via a referral link and consent to the corresponding category in the cookie settings, we store the attribution to the referral link in your browser's local storage for up to 90 days.

Without your consent, the referral link is not stored permanently on your terminal equipment.

The legal bases are Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

You can withdraw your consent at any time via the cookie settings. Any stored referral link will then be deleted.

Referred customers

If an order results from a referral link, we may store to which participant in the referral programme the order or the customer was attributed.

The processing serves the settlement and administration of the referral programme on the basis of Art. 6(1)(f) GDPR.

The referrer does not receive any names, contact details or details of the products ordered by the referred customer. Only the information required for settlement is displayed, in particular the number of attributed customers or orders and the resulting commissions.

Participants in the referral programme

For participants in the referral programme, we process in particular:

• account data
• referral attributions
• commission data
• payout data
• consent to the terms of participation
• time of consent
• where applicable, IP address and technical evidence data

The processing serves to run the referral programme on the basis of Art. 6(1)(b) GDPR.

Settlement data relevant under tax and commercial law is stored in accordance with the statutory retention periods.

On individual pages of our website, in particular to display low emission zones or locations, we may use Google Maps.

The provider within the European Economic Area is, as a rule, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Maps is only loaded after you have given your consent – either via our cookie settings (category “External media: Google Maps” or “Accept all”) or by clicking “Load map” where the map is shown.

When Google Maps is used, the following data in particular may be transmitted to Google:

• IP address
• browser and device information
• time of access
• technical usage data
• interactions with the map

Google may use further cookies or comparable technologies in this context.

The legal bases are Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future via the cookie settings.

We use Google Analytics 4, a web analytics service, on our website. The provider within the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose is the statistical analysis of how our website is used – for example, which pages are viewed, by which routes visitors find us and how many orders are completed – in order to improve our offering.

Google Analytics is only activated after you have consented via our cookie settings to the category “Statistics: Google Analytics” or have selected “Accept all”. Before you give your consent, Google Analytics does not set any analytics cookies and no analytics data is transmitted to Google. We never transmit names, addresses, e-mail addresses or vehicle registration numbers to Google.

In this context, the following data in particular may be processed:

• IP address (with Google Analytics 4, the IP address is not stored but used only to determine the approximate location)
• pages viewed, time and duration of the visit
• origin of the visit (e.g. referring website)
• browser and device information, screen resolution, language setting
• interactions on the website
• for orders: order number, order value, shipping costs and the name and quantity of the products ordered

After you have given your consent, Google Analytics sets cookies (in particular “_ga” and “_ga_<ID>”) that recognise your browser across several visits. These cookies are stored for up to 2 years unless you delete them beforehand or withdraw your consent. The retention period we have set for user and event data is 14 months. Aggregated standard reports may remain unaffected by this retention period.

The advertising features of Google Analytics and personalised advertising are deactivated in all cases.

The legal bases are Section 25(1) TDDDG and Art. 6(1)(a) GDPR (consent).

Google may also process data in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; the transfer takes place on the basis of the adequacy decision of the European Commission (Art. 45 GDPR). Standard contractual clauses are in place in addition. A data processing agreement has been concluded with Google.

You can withdraw your consent at any time with effect for the future via the cookie settings. Google Analytics will then no longer be used; the analytics cookies on our domain will be deleted and not set again.

Further information: https://policies.google.com/privacy and https://business.safety.google/adsprocessorterms/

Google Ads conversion measurement: We place adverts via Google Ads (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and would like to know whether a purchase in our shop resulted from one of these adverts. For this purpose, the Google tag is loaded – only with your consent to the category “Advertising measurement: Google Ads” (or “Accept all”) – and a conversion event is sent to Google when an order is completed. Without your consent, nothing is loaded and nothing is transmitted to Google.

In this context, the following data in particular may be processed:

• order number and value of the goods in the order (excluding shipping costs)
• IP address, device and browser information, time
• identifiers in cookies (e.g. “_gcl_au”) by means of which Google attributes the ad click to the purchase

We do not transmit names, addresses, e-mail addresses or vehicle registration numbers to Google. We do not use remarketing or personalised advertising. The cookies are stored for up to 90 days unless you delete them beforehand. The legal bases are Section 25(1) TDDDG and Art. 6(1)(a) GDPR (consent). With regard to transfers to the USA, the information given above about Google applies. You can withdraw your consent at any time with effect for the future via the cookie settings.

You can create a customer account on our website.

In this context, the following data in particular may be processed:

• Name
• Email address
• Address
• access data or authentication information
• saved addresses
• order history
• account settings
• login times
• other information you have stored in the customer account

The processing serves to set up and manage the customer account and to carry out orders on the basis of Art. 6(1)(b) GDPR.

Security-relevant data, for example login times, may additionally be processed on the basis of Art. 6(1)(f) GDPR.

The data of the customer account is, as a rule, stored until the account is deleted. Data that is subject to statutory retention obligations or that continues to be necessary for the performance or documentation of contracts may be stored beyond that.

We offer the option of signing in with an existing Google account.

If you select this function, you will be redirected to Google's sign-in service. After successful sign-in, Google transmits to us the account information you have authorised.

This may include in particular:

• unique user identifier
• Name
• Email address
• where applicable, profile picture

We do not receive your Google password.

Use of Google sign-in is voluntary. Alternatively, you can use the regular sign-in options of our shop.

The processing serves the sign-in requested by you or the setting up of your customer account on the basis of Art. 6(1)(b) GDPR.

We also offer the option of signing in via an existing Microsoft account.

If you select this function, you will be redirected to Microsoft's sign-in service. After successful sign-in, we receive the account data you have authorised.

This may include in particular:

• unique user identifier
• Name
• Email address
• where applicable, further profile data authorised by you

We do not receive your Microsoft password.

The processing serves the sign-in requested by you or the setting up of your customer account on the basis of Art. 6(1)(b) GDPR.

When you order via our online shop, we process the personal data necessary to carry out the order.

This may include in particular:

• First and last name
• billing and delivery address
• Email address
• where applicable, telephone number
• customer and order number
• products ordered
• order and contract data
• payment status
• shipping information
• Number plate
• vehicle data
• information required for personalised products
• communication in connection with the order

The legal basis is Art. 6(1)(b) GDPR.

Insofar as data is processed or retained to fulfil tax, commercial or other legal obligations, this is additionally done on the basis of Art. 6(1)(c) GDPR.

If you enter a voucher code, we store the code entered, the result of the check (valid, or the reason for rejection), the time, the page and your IP address, and assign this data to your order. This allows us to verify whether a voucher was applied correctly and to detect errors in our ordering process. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the correct processing of vouchers. The IP address is deleted after 30 days; entries without an order are deleted completely after 30 days.

Origin of the order

For every order in our shop, we record how you came to us – regardless of whether you have consented to cookies or similar technologies: the address (domain name only) of the website you came from, the page on which you entered our shop, the time, and whether you came via one of our adverts (e.g. Google Ads with campaign number), a referral link or a campaign address. We do not store the ad click identifier with the order (for protection against click fraud, see Section 5). We use this data exclusively for our own analyses of the routes by which orders come about; it is not passed on to third parties. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in planning our advertising and monitoring its success.

We do not store this data on your terminal equipment without your consent; during your visit it is held only in the page's working memory and is transmitted to our server when payment is started, so that it can be assigned to your order even after a redirect to the payment provider. With your consent to “Statistics” or “Advertising measurement”, we additionally store it in session storage until the browser tab is closed (Section 25(1) TDDDG). You can object to the processing at any time (Art. 21 GDPR). The data is deleted together with the order data.

Visits via our adverts

If you come to us via one of our paid adverts (e.g. Google Ads), we log this visit: time, IP address, the browser identifier transmitted by your browser (from which device type, operating system and browser are derived) and preferred language (e.g. “de-DE”), the campaign, the landing page, the pages viewed during the visit, the length of stay (up to 60 minutes) and whether a purchase was made. From the IP address we determine the approximate location (town and federal state of the internet connection) using a database on our own server; the IP address is not transmitted to anyone for this purpose. Our legitimate interest (Art. 6(1)(f) GDPR) lies in detecting abusive clicks on our chargeable adverts (click fraud) and in assessing the benefit of our advertising. In addition, the random visitor ID from Section 5 (Protection against click fraud) is used. Beyond that, nothing is stored on or read from your terminal equipment for this purpose without your consent. The data is deleted after 30 days.

Only if you allow “Own analysis: device and usage” in the cookie banner do we additionally obtain detailed information about the device (device model and operating system version, insofar as your browser provides them on request, as well as screen size and pixel density) and measure how long the page took to load, when you first interacted with the page and how far you scrolled. In addition, from technical characteristics of your device (screen, time zone, language settings, processor and memory information, graphics card and a test drawing by the browser) we form a check value (device fingerprint) from which these characteristics cannot be reconstructed. Together with the visitor ID from Section 5, it serves to recognise repeated visits from the same device even if the IP address changes – in particular repeated clicks on our adverts – and to attribute a visit to a later order. We assign this data to the visit and, where applicable, to your order and use it exclusively ourselves to understand errors and drop-offs in our shop; it is not passed on to any third parties. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR), which you can withdraw at any time via the “Cookie settings”. The data is deleted on our server after 30 days and, where attached to an order, together with the order data.

Abandoned and failed purchase attempts

When you start the ordering process (sticker designer, cart or checkout), we record which steps were completed, how long you spent there, whether the registration certificate could be uploaded (only the file type and size and the upload duration, not the file content), which notices or error messages were displayed to you and whether the payment was aborted: time, amount, items (item number and quantity), country of delivery, payment method, the page of the ordering process, the origin of the visit (see above), the error message and – if you have already entered it – your e-mail address. This allows us to detect errors in our ordering process even if nobody points them out to us. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a functioning ordering process. We do not use this data to contact you for advertising purposes. It is deleted after 30 days, or after 7 days in the case of a successful order; the order itself remains unaffected.

To check whether a vehicle meets the requirements for a particular emissions sticker, you can send us a registration certificate or other suitable vehicle documents.

In doing so, we process the data contained in the document only insofar as it is necessary for checking, processing and documenting the order.

This may include in particular:

• Number plate
• vehicle type
• fuel type
• emissions or pollutant class
• vehicle classification codes
• first registration
• technical vehicle data
• vehicle identification number, insofar as it is contained in the document submitted
• other information required for classification

The legal basis is Art. 6(1)(b) GDPR.

Photos of vehicle documents may contain additional information automatically stored by the recording device (metadata, e.g. time of recording, device or place of recording). We do not evaluate this information; it is stored with the file. If you do not want this, you can remove it before uploading or upload a scan or a PDF.

Automatic text recognition and preliminary check

Uploaded vehicle documents may be read automatically by systems operated by ourselves and processed to support the check of eligibility for a sticker.

This processing takes place on our own server infrastructure at IONOS in Germany. No external AI or OCR service provider is used for text recognition.

The automatic processing serves the faster capture and preliminary check of the information contained in the vehicle document.

Rejections of a requested emissions sticker are not based solely on an automated decision. Doubtful or negative results are reviewed by a human.

Storage period

Vehicle documents and data obtained from them are stored only for as long as they are necessary for processing the order, documenting the proper issue of the sticker, handling possible complaints or asserting or defending legal claims.

Insofar as individual data or documents are subject to a statutory retention obligation, they are stored for the duration of that obligation.

Once the respective purpose no longer applies and any applicable retention or limitation periods have expired, the data is deleted, insofar as there is no other legal basis for its storage.

We also sell products via external marketplaces such as Amazon and eBay.

Order data from these marketplaces may be transferred to our own systems via the interfaces provided by the platforms and processed there.

In these cases, the data originates from the respective marketplace.

This may include in particular:

• name or buyer identifier provided by the platform
• delivery address
• where applicable, billing address
• e-mail address provided by the platform
• Order number
• products ordered
• order and payment status
• shipping information
• other information required to process the order

We use this data in particular for:

• order processing
• personalisation of ordered products
• creation of invoices
• creation of shipping labels
• shipping
• customer communication
• handling of complaints
• fulfilment of obligations under commercial and tax law

The legal bases are Art. 6(1)(b) GDPR and, insofar as legal obligations are fulfilled, Art. 6(1)(c) GDPR.

The data protection provisions of the respective platform operator additionally apply to data processing within the respective marketplace platform.

We use external payment service providers to process payments.

Depending on the payment method selected, the following payment methods in particular may be offered:

• PayPal
• Credit card
• Apple Pay
• Google Pay
• Stripe-based payment methods

Payment may be processed in particular via PayPal and/or Stripe.

When a payment is made, the data required to carry out the transaction is transmitted to the payment service provider used in each case.

This may include in particular:

• Name
• Billing address
• Email address
• Order number
• payment amount
• currency
• transaction data
• where applicable, other data required for payment processing

Complete credit card or wallet access data is, as a rule, processed directly by the respective payment service provider or wallet provider and is not stored by us in plain text.

The legal basis for the processing required for payment processing is Art. 6(1)(b) GDPR.

Depending on the payment method selected, PayPal, Stripe, Apple or Google may additionally process personal data in accordance with their own data protection provisions.

For the delivery of physical orders, we transmit the data required for shipping to the shipping service provider used in each case.

This may include in particular:

• Name
• delivery address
• shipping or order number
• insofar as necessary for delivery or shipment notification, e-mail address or telephone number

The following shipping service providers in particular may be used:

• Deutsche Post
• DHL
• DPD

The processing serves the performance of the contract on the basis of Art. 6(1)(b) GDPR.

If you contact us by e-mail or via a contact form, we process the information you provide in order to handle your enquiry.

This may include in particular:

• Name
• Email address
• message
• Order number
• other information provided voluntarily

If your enquiry relates to an existing or planned contract, the processing is carried out on the basis of Art. 6(1)(b) GDPR.

For other enquiries, the processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of and response to incoming enquiries.

Read tracking for our individual e-mails

E-mails that we write to you personally about your order or enquiry (for example, a query about the registration certificate) contain an invisible tracking pixel, and links in them are briefly redirected via our server. This allows us to see whether our message was opened and a link was clicked, and to follow up if necessary before your order is delayed. Only the number, time and the target clicked are stored – no IP address and no information about the browser or device. We do not measure automatically sent e-mails (for example, order and shipping confirmations).

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in being able to verify whether a message necessary for processing your order has reached you. You can object to this at any time (Art. 21 GDPR), for example with a short message to us, or prevent the measurement by switching off the loading of images in your e-mail program. The data is deleted together with the e-mail log.

If you submit a complaint, we process the data necessary for checking and handling it.

In addition to your contact and order data, this may include images, documents or other attachments uploaded by you.

The processing serves the performance of the contractual relationship and the handling of possible statutory claims in respect of defects on the basis of Art. 6(1)(b) GDPR.

Insofar as data is required for asserting or defending legal claims, the processing may additionally be carried out on the basis of Art. 6(1)(f) GDPR.

If you request a callback via our website, we process the contact information you provide as well as the information necessary for handling the request.

The data of a completed callback request is, as a rule, deleted after no more than 90 days, unless further retention is necessary on account of a contractual relationship, a complaint or legal obligations.

Depending on the content of the request, the legal basis is Art. 6(1)(b) or (f) GDPR.

If you use our service for enquiring about the order status, we process the identification or order data you enter in order to identify the order concerned and display its current status.

The processing serves the performance of the contract on the basis of Art. 6(1)(b) GDPR.

You can voluntarily subscribe to our newsletter.

For this purpose, we process in particular your e-mail address and, where applicable, other data you provide voluntarily.

The processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future, in particular via the unsubscribe link in every newsletter e-mail.

The withdrawal does not affect the lawfulness of the processing carried out on the basis of your consent before its withdrawal.

Measurement of opens and clicks

Our newsletters contain an invisible tracking pixel and links that are briefly redirected via our server. This tells us, for each recipient, whether and when a newsletter was opened and which link was clicked. For this purpose, we store only the number, the time and the target clicked – no IP address and no information about the browser or device.

We use this data to identify which content interests our readers and to improve the newsletter. The measurement is part of your consent to the newsletter (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Unsubscribing also ends the measurement; you can also prevent it by switching off the loading of images in your e-mail program.

We do not create usage profiles from this data and do not combine it with other data.

After an order in our shop, we may invite you to review your order – by e-mail, by telephone or, only if you have consented beforehand, via WhatsApp. The invitation contains a personal link; a customer account is not required.

If you submit a review, we process the stars awarded per product, your title and text, the time and the assignment to your order. Published are the stars, title, text, date and – at your choice – your first name with the initial of your surname or “Anonymous”. Your e-mail address and order data are not published.

Every review is checked for unlawful content before publication. Only customers with an order in our shop can submit reviews.

The invitation is based on our legitimate interest in customer feedback (Art. 6(1)(f) GDPR, Section 7(3) of the German Act against Unfair Competition (UWG)) or, in the case of WhatsApp, on your consent (Art. 6(1)(a) GDPR). The processing and publication of your review is based on your consent, which you give by submitting it (Art. 6(1)(a) GDPR). You can object to the invitation at any time and request the deletion of your review.

Personal data is, as a rule, deleted as soon as the purpose of its processing no longer applies and there is no statutory retention obligation or other legal basis for further storage.

Depending on the type of documents, retention obligations under commercial and tax law in particular may apply.

Accounting records, in particular invoices and payment-related records, are, as a rule, retained for the statutory period of eight years.

Commercial or business letters and comparable business correspondence may, as a rule, be subject to a statutory retention obligation of six years.

Other personal data is not stored for these periods merely for that reason. What matters is whether the specific item of data forms part of a document subject to a statutory retention obligation or is still required for other legal reasons.

After expiry of the respective statutory or necessary storage period, the data is deleted or restricted in accordance with the statutory requirements.

Individual service providers used by us or their affiliated companies may also process personal data outside the European Economic Area.

This may be the case in particular with services provided by Google, Microsoft, PayPal, Stripe, Apple or their affiliated companies.

Insofar as personal data is transferred to a third country, this is done only in compliance with the statutory requirements of Art. 44 et seq. GDPR.

A transfer to the USA may take place in particular on the basis of an adequacy decision of the European Commission under the EU-U.S. Data Privacy Framework, provided that the respective recipient is certified accordingly.

Insofar as no relevant adequacy decision exists, standard contractual clauses approved by the European Commission or other appropriate safeguards in particular may be used.

Subject to the statutory requirements, you have in particular the following rights:

• right of access pursuant to Art. 15 GDPR
• right to rectification pursuant to Art. 16 GDPR
• right to erasure pursuant to Art. 17 GDPR
• right to restriction of processing pursuant to Art. 18 GDPR
• right to data portability pursuant to Art. 20 GDPR
• right to object pursuant to Art. 21 GDPR
• right to withdraw consent given pursuant to Art. 7(3) GDPR
• right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR

To exercise your rights, you can contact the following address:

info@meineplaketten.de

Withdrawal of consent

You can withdraw consent you have given at any time with effect for the future.

The lawfulness of the processing carried out up to the withdrawal remains unaffected.

Right to object under Art. 21 GDPR

Insofar as we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

Where personal data is processed for the purposes of direct marketing, you can object to this processing at any time.

You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes data protection law.

The supervisory authority competent for us is in particular:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information)
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany

E-mail: poststelle@datenschutz.hessen.de

We may amend this privacy policy if our data processing, the services used or the legal requirements change.

The current version published on this website applies in each case.