• a) Personal data: Any information related to an identified or identifiable natural person (“data subject”).
• b) Data subject: Any identified or identifiable natural person whose personal data is processed by the controller.
• c) Processing: Any operation or set of operations performed on personal data, whether automated or not, including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, and more.
• d) Restriction of processing: The act of marking personal data for future processing limitations.
• e) Processor: A person or entity processing personal data on behalf of the controller.
• f) Recipient: A person or entity to whom personal data is disclosed.
• g) Third party: A person or entity other than the data subject, controller, processor, or those authorized by the controller or processor to process personal data.
• h) Consent: Freely given, specific, informed, and unambiguous indication of the data subject's wishes, signifying agreement to the processing of personal data.

• Browser types and versions used
• Operating system of the accessing system
• Referring website
• Sub-websites
• Date and time of access
• Internet protocol address (IP address)
• Internet service provider of the accessing system
• Other similar data and information for IT system security.

• Delivering website content correctly
• Optimizing website content and advertisements
• Ensuring the long-term viability of IT systems and website technology
• Providing law enforcement authorities with information for criminal prosecution in case of a cyber-attack.

Users can register on the controller's website by providing personal data as determined by the respective registration form. The collected personal data are stored for internal use by the controller and may be transferred to processors (e.g., parcel services) for internal purposes attributable to the controller.

Upon registration, the following data are also stored: the user's IP address assigned by the Internet service provider (ISP), and the date and time of registration. This data is stored to prevent misuse of our services and, if necessary, to facilitate the investigation of committed offenses. The storage is crucial for the security of the controller. Data is not shared with third parties unless legally required or for criminal investigation purposes.

Registration with the voluntary provision of personal data allows the controller to offer exclusive content or services to registered users. Users can modify or delete their provided personal data at any time.

Upon request, the data controller will inform the user about the stored personal data. Additionally, the data controller will correct or delete personal data at the user's request, provided there are no statutory storage obligations. The Data Protection Officer, as designated in this declaration, and all controller's employees are available as contact persons for data subjects.

• a) Right of Confirmation: If a data subject wants to confirm the processing of their data, they can contact our Data Protection Officer or another controller's employee at any time.
• b) Right of Access: The data subject has the right to obtain information about:
  • the purposes of processing
  • the categories of personal data processed
  • recipients or categories of recipients
  • the envisaged storage period
  • the right to request rectification, erasure, or restriction
  • the right to lodge a complaint
  • information about data source
  • transfer of data to third countries and related safeguards.
  To exercise this right, the data subject can contact our Data Protection Officer or another controller's employee.
• c) Right to Rectification: The data subject has the right to rectify incomplete personal data. To exercise this right, contact our Data Protection Officer or another controller's employee.
• d) Right to Erasure (Right to be Forgotten): The data subject can request the erasure of personal data if:
  • it's no longer necessary
  • processing is unlawful, but erasure is opposed
  • data is no longer needed, but the data subject requires it for legal claims.
  To request erasure, contact our Data Protection Officer or another controller's employee.
• e) Right of Restriction of Processing: The data subject has the right to restrict processing when:
  • accuracy is contested
  • processing is unlawful, but erasure is opposed
  • data is no longer needed, but the data subject requires it for legal claims.
  To request processing restriction, contact our Data Protection Officer or another controller's employee.
• f) Automated Individual Decision-Making, Including Profiling: The data subject has the right not to be subject to decisions based solely on automated processing, except when necessary for a contract or based on explicit consent. To exercise this right, contact our Data Protection Officer or another controller's employee.
• g) Right to Withdraw Data Protection Consent: The data subject has the right to withdraw consent to personal data processing. To withdraw consent, contact our Data Protection Officer or another controller's employee.