Privacy policy

The protection of personal data such as name, address, telephone number, or email is of the utmost importance to us. Therefore, we conduct our web activities in compliance with the General Data Protection Regulation (GDPR) and applicable data protection and data security laws. Below, you will find information on how we handle data, particularly personal data, during your visit to our website.

The responsible person for data processing in accordance with the General Data Protection Regulation (GDPR) and other data protection regulations is

GSG Berlin GmbH, Geneststraße 5, 10829 Berlin

(hereinafter: "GSG")

Phone: +49 (0)30 – 390 93 0

Fax: +49 (0)30 – 390 93 199

Email: info@gsg.de

Managing Directors: Oliver Schlink and Thomas Ostermann

The Data Protection Officer of the controller is

Gisbert Schwarze

Phone: +49 (0)30 440 123 – 267

Fax: +49 (0)30 390 93 – 143

Email: dsb@gsg.de

a) Data Processing When Accessing the Website

When you visit our website, your browser automatically sends information to the server of our website in the background. This information is temporarily stored in a so-called logfile. We generally do not collect or store your full IP address. Collection/storage only occurs in truncated and thus anonymized form.

The following information is collected when accessing our pages without any action on your part:

• Browser type/version
• Operating system used
• The previously visited page (Referrer URL)
• Hostname of the accessing computer
• Time of the server request

We require this data because:

• The smooth connection to the website must be ensured,
• System security and stability need to be evaluated and monitored,
• Various other administrative purposes need to be handled.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest arises from the purposes listed above for data collection.

b) Additional Data Processing When Using the Website with Voluntary Data Submission

The provision of further personal data for services offered on our website is always voluntary (for example, name, address, email address, other contact details, or specific data you provide to us during a property search). These data are used to provide the services you have requested. You alone decide whether you want to voluntarily provide us with this data, for example, in the context of an inquiry or similar. For the use of certain features, we therefore ask for your explicit, voluntary, and revocable consent at any time. In this case, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. Further details can be found in the corresponding sections of this privacy notice below.

c) Obligation to Provide Data

You are not obligated to provide your personal data. However, if you do not provide certain personal data, some functions of our website may not be available to you.

d) Purpose Limitation of Processing

Your data will only be processed for the purposes for which you have provided it, for example, to respond to your contact request via email. If you wish to be called back, we will, of course, need your phone number. If you post a comment on our blog, we will process the data you entered in the input form based on your consent to publish the comment.

e) Cookies and Similar Technologies

If cookies or cookie-like technologies are used in the context of data processing, the storage of information in the end user’s device or access to information already stored in the end user’s device takes place according to § 25 para. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. Further data processing is carried out in accordance with Art. 6 para. 1 GDPR.

If the use of cookies is strictly necessary, it is based on § 25 para. 2 TTDSG, and further data processing is conducted according to Art. 6 para. 1 GDPR.

Your data will not be disclosed to third parties outside the GSG corporate group without your explicit consent. For internal administrative purposes, your data may also be shared with companies belonging to the GSG corporate group (Art. 6 para. 1 sentence 1 lit. f GDPR).

Data will only be transferred to service providers within the framework of data processing agreements in accordance with Art. 28 GDPR and only while adhering to data protection regulations.

Data transfers to a third country will only take place if the specific conditions of Art. 44 et seq. GDPR are met. This means that the processing of your data may only occur based on special guarantees, such as an official finding by the EU Commission that a level of data protection equivalent to that of the EU is ensured, adherence to officially recognized specific contractual obligations, known as "Standard Contractual Clauses," or in individual cases. your consent. If data is transferred to the USA or another country where there is no equivalent level of data protection, we would like to point out that there is a theoretical risk that your data may be processed by US authorities for control and surveillance purposes, without you potentially having legal remedies available.

You have the option to subscribe to our free newsletter by providing your email address. If you subscribe to our newsletter, you will receive regular information about our products, offers, and promotions. After subscribing to the newsletter, you will receive an email asking you to confirm your subscription. This ensures, through the so-called "double opt-in principle," that no third party has misused your data. The provision and management of our newsletter is carried out by Clever Reach GmbH & Co. KG (Schafjückenweg 2, 26180 Rastede, Germany), a service provider acting on our behalf as a data processor in compliance with the requirements of the General Data Protection Regulation. You can unsubscribe from the newsletter at any time, for example, by using the unsubscribe option on the registration page or the unsubscribe link in the newsletter. More information can also be found in the respective newsletter.

The legal basis for processing is Art. 6 para. 1 sentence 1 lit. a GDPR.

a) Overview

Cookies are small text files that are transmitted to your computer along with the requested data from the internet. These data are stored there and made available for future retrieval. There are various types of cookies, including those that are permanently stored and temporary ones, as well as those that are placed on a user's device by the provider or by a third party. They enable an analysis of your use of the website and ensure that special functions are available to you. These cookies also help to make our offering more user-friendly, effective, and secure. The information collected is also used to create statistics about the usage of our services, allowing us to adapt our offering to customer preferences. Possible functions include displaying the history of pages visited on our website. Further information about cookies can also be found in the "Help" menu of your browser. You can learn more about how cookies work at http://www.allaboutcookies.org/.

b) Which Cookies Do We Use?

We use various types of cookies and similar technologies. Please note that, depending on the functions you use and the device you employ, not all of the cookies listed here may be utilized:

Google AdWords Conversion Tracking to display interest-based advertising and enable analysis of advertising effectiveness, particularly to determine the total number of users who have clicked on specific ads we have placed (see "7. Google AdWords Conversion Tracking" and "11. Contact Form" for more details);

Google Analytics to analyze traffic and user behavior on our homepage and optimize our website (see "9. Google Analytics" for more details);

onOffice.de to integrate our contact form (see "12. onOffice" for more details);

when starting embedded YouTube videos (see "8. YouTube" for more details);

CWordPress cookies when using the comment function (see "13. Blog and Comments" for more details).

Cookies for the bookmark and search agent functions for area searches (see "14. Area Search" for more details);

when clicking the link to the GSG Forest inventory (see "16. Link to the GSG Forest Inventory via Treedom" for more details).

c) Can I deactivate the use of cookies or prevent it in other ways?

You can accept or reject individual or all cookies separately during your first visit to our website and at any time thereafter in our cookie settings by toggling the respective cookie switch to "On" or "Off" and clicking "Save."

Your preferences made in the cookie settings are stored only on the respective computer or mobile device. Therefore, you will need to make these preferences again if you delete your browser history or use a different device or internet browser.

You can change your cookie settings on our website here: Change Cookie Settings.

You can prevent the installation of cookies by adjusting the settings of your browser. Instructions for changing the settings can be found in the "Help" function of your browser. However, we would like to point out that if you change the settings, you may not be able to use all the functions of our website fully.

d) Legal Basis

If cookies are used, the data processing is generally based on your consent according to § 25 para. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. If we consider the use of cookies to be strictly necessary, it is based on § 25 para. 2 no. 2 TTDSG. Further processing of your personal data is carried out according to Art. 6 para. 1 GDPR.

In connection with our website and the offers available there, we use Google AdWords Conversion Tracking from Google Ireland Limited, Google Building Gordon House, 4 Barrow St, if you provide your consent (see below "Contact Form"). Dublin, D04 E5W5, Ireland (hereinafter referred to as "Google"). Google AdWords Conversion Tracking is used to analyze the effects of advertisements. With your explicit consent pursuant to § 25 para. 1 TTDSG, a cookie is set on your computer by Google AdWords. If you visit certain pages of an AdWords customer's website and the cookie has not yet expired, Google and the customer can see that you clicked on the ad and were redirected to that page. Each AdWords customer receives a different cookie, so cookies cannot be tracked across the websites of AdWords customers. The information collected through the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged for conversion tracking. You can find Google's privacy policy and more information on how Google AdWords Conversion Tracking works at www.google.com.

The legal basis for processing your personal data is Art. 6 para. 1 sentence 1 lit. a GDPR.

We have integrated YouTube videos into our website that can be accessed at http://www.youtube.com. They can be played directly from our website and are loaded by clicking on an image.

The operator of the website http://www.youtube.com and the creator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (YouTube). YouTube is represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use a "two-click solution." This means that when you visit the corresponding subpage of our offering, no personal data is generally transmitted to the service provider. However, we provide you with the option to activate the service via a button, which results in a direct data transfer. Only if you activate the service will the provider receive the information that you have accessed the corresponding subpage of our website. This occurs via a cookie, which is set only with your explicit consent in accordance with § 25 para. 1 TTDSG.

By clicking on the image and visiting our website, YouTube receives the information that you have accessed the corresponding subpages of our website that contain the embedded videos. Additionally, certain personal data is transmitted to YouTube, including your IP address, date and time of the request, time zone difference from Greenwich Mean Time (GMT), the content of the request (specific page), access status/HTTP status code, the amount of data transmitted, the website from which the request originates, the browser, the operating system and its interface, as well as the language and version of the browser software. The transmission of this user data to YouTube occurs regardless of whether you are logged into a YouTube user account. If you are logged into Google, your data will be directly associated with your account. If you do not wish for your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses it for advertising purposes and/or to design its website, as well as to inform other YouTube users about your activities on our website.

Please understand that as a third party, we do not have details on how YouTube uses your data. However, you can find more information directly at YouTube at http://www.youtube.com and at Google at https://www.google.de/intl/de/policies/privacy. The privacy policy available there provides further information on the purpose and extent of data collection and processing, as well as your rights and options for protecting your privacy. You have the right to object to the creation of user profiles, and you must address this objection directly to YouTube. Google also processes your personal data in the USA.

The legal basis for processing your personal data is your consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

Based on your explicit consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as "Google"). Google Analytics uses cookies (see "6. Cookies") that enable the analysis of your use of the website. These are set only with your explicit consent in accordance with § 25 (1) TTDSG. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA. However, in the event that IP anonymization is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator.

To the best of our knowledge, the IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

You can prevent the storage of cookies by adjusting the settings of your browser software; however, we would like to point out that in this case, you may not be able to fully use all the functions of this website. Additionally, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en

We use Google Analytics with the "_anonymizeIp()" extension. This ensures that IP addresses are processed in a shortened form, thereby excluding the possibility of personal identification. In cases where the data collected about you is personally identifiable, this is immediately excluded, and the personal data is promptly deleted.

We use Google Analytics to analyze the use of our website and regularly improve it. The statistics obtained allow us to enhance our offerings and make them more engaging for you as a user.

This website uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a User ID ("Google Universal Analytics"). You can disable the cross-device analysis of your usage in your Google account under "My Data" and "Personal Data."

We have limited the storage duration of data from Google Analytics to 14 months. You can find Google's privacy policy and further information about how Google Analytics works at www.google.com.

The legal basis for processing your personal data is Article 6(1) sentence 1 lit. a of the GDPR.

Google Tag Manager is also a product from Google that allows us to manage website tags via an interface. The Tag Manager is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been carried out at the domain or cookie level, this will remain in effect for all tracking tags implemented with Google Tag Manager. We may ask for your permission to share certain product data (e.g., your account information) with other Google products in order to enable specific features, such as simplifying the addition of new conversion tracking tags for AdWords. Additionally, our developers periodically review product usage information to further optimize the product. However, we will never share this type of data with other Google products without your consent. For more information, please refer to the product’s terms of use. The legal basis for the processing is Article 6(1) sentence 1 lit. a of the GDPR.

On our website, you will find a contact form through which you can get in touch with us or initiate a property search. In the form, you can enter your contact details and information about your search criteria. We use this data to process your request, respond to you, and potentially for further collaboration. To handle your inquiry, the personal data you provide in the contact form will be forwarded to the subsidiary of the GSG Group, GSG Asset Management GmbH, Geneststraße 5, 10829 Berlin. Your voluntary and revocable consent, which we ask for when you submit the form, includes consent to the use of Google AdWords Conversion Tracking (see above "Google AdWords Conversion Tracking"). The contact form is embedded as an iframe from our service provider onOffice (see below "12. onOffice"). Your data will be transmitted to onOffice when the contact form is submitted. The legal basis for processing is Article 6(1) sentence 1 lit. a of the GDPR.

We aim to make our properties conveniently and directly available on our website. Therefore, we use a contact form embedded via iframe from onOffice (onOffice GmbH, Charlottenburger Allee 5, 52068 Aachen), which directly integrates inquiries into our system. Upon activation of the contact form, onOffice receives information automatically transmitted by your browser (including your IP address) and may transfer its own cookies to your device or read existing cookies. Cookies are only set with your explicit consent in accordance with § 25 (1) TTDSG. The service provider acts as a data processor in compliance with the requirements of the General Data Protection Regulation. For details on how onOffice handles your data, please refer to the privacy policy of onOffice at de.onoffice.com. The legal basis for processing your personal data is Article 6(1) sentence 1 lit. a of the GDPR.

You can view our blog on our website and post comments on blog entries. To process your contributions, we store the data you enter and then publish the contribution as a comment on our blog. The data is stored for as long as the comment remains on the website. In connection with this, we set cookies in accordance with § 25 (1) TTDSG, following your explicit consent. These cookies enhance the user experience by ensuring visitors do not need to re-enter their information when posting another comment. For more information, please visit: https://wordpress.org/support/article/cookies/

For a posting, we require your consent, which you voluntarily and revocably provide by submitting the comment by pressing the appropriately marked button.

The legal basis for processing your personal data is Article 6(1) sentence 1 lit. a of the GDPR.

Our homepage offers an area search feature to help you quickly and easily find properties that interest you and meet your requirements. In the context of an area search, you can add properties to a virtual bookmark. The bookmark function uses cookies based on your consent to facilitate the management of search results (see also "6. Cookies"). Cookies are set only with your explicit consent in accordance with § 25 (1) TTDSG. This allows for easy retrieval of individual search results. Additionally, within the area search, you have the option to use our search agent.The search agent will notify you via email, based on your explicit consent, when new results are available for a search you have defined. To receive notifications about new offers in this manner, we request the storage and confirmation of your email address through the so-called double opt-in procedure.

The legal basis for processing your personal data is Article 6(1) sentence 1 lit. a of the GDPR.

We use the podcast hosting service Podigee from Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany. The podcasts are loaded or streamed by Podigee. The service provider acts as a data processor in compliance with the requirements of the General Data Protection Regulation.

The player is embedded via iframe, which allows Podigee to collect data that your browser automatically transmits after clicking the link.

We use a "two-click solution," meaning that no data is transmitted and no cookies are stored on your device before clicking the link to the Podigee podcast. However, we provide you with the option to activate the service via a button, resulting in direct data transmission. Only when you activate the service does the provider receive the information that you have accessed the corresponding subpage of our website. This occurs through a cookie, which is set only with your explicit consent in accordance with § 25 (1) TTDSG.

Podigee processes IP addresses and device information to enable podcast downloads/plays and to generate statistical data, such as access counts. This data is anonymized or pseudonymized before being stored in Podigee's database, unless it is necessary for the provision of the podcasts.

Further information and options to object can be found in Podigee's privacy policy: https://www.podigee.com/de/about/privacy/.

The legal basis for processing your personal data is Article 6(1) sentence 1 lit. f of the GDPR. Our legitimate interest is the secure and efficient provision, analysis, and optimization of our podcast offerings.

GSG Berlin supports smallholder farmers in Cameroon through socio-ecological tree planting. In addition to CO₂ storage, GSG Berlin contributes to sustainable development through the planting of the GSG Forest. You can view the current inventory of our forest by clicking on the corresponding link on our website.

When you click the link to the GSG Forest on our website, you leave our area of data protection responsibility and enter the realm of data protection responsibility of the provider Treedom, which plants the trees on our behalf. Treedom, in turn, uses the provider Mapbox, Inc., 740 15th Street NW, Washington DC 20005, USA, to visually represent the planted trees on a map. GSG itself has no contractual relationship with Mapbox.

We use a "two-click solution." This means that no data is transmitted to Treedom and no cookies are stored on your device before you click the link to the inventory of the GSG Forest via Treedom. However, we provide you with the option to activate the service via a button, resulting in direct data transmission. Only when you activate the service does the provider receive the information that you have accessed the corresponding subpage of our website. This occurs through a cookie, which is set only with your explicit consent in accordance with § 25 (1) TTDSG. Treedom also receives all information that your browser automatically transmits (including your IP address). This happens even if you do not have a Treedom user account. If you are logged in to Treedom, your data will be directly associated with your account. If you do not wish for your data to be linked to your Treedom user account, you must log out before clicking the link.

The collection and processing of this data takes place solely within the responsibility of Treedom S.R.L., Viale Augusto Righi 66, 50137 Florence, Italy. We have no knowledge of further details regarding the processing of personal data under Treedom's responsibility, including any potential data processing in the USA. GSG has no influence over Treedom's data processing.

You can find information about Treedom's processing of personal data in Treedom's privacy policy: https://www.treedom.net/de/page/privacy

The legal basis for processing your personal data is Article 6(1) sentence 1 lit. a of the GDPR.

We maintain online presences within social networks (social media) and process user data in this context to communicate with users active there or to provide information about ourselves.

We would like to point out that user data may be processed outside the European Union, particularly in the USA. This could pose risks for users, as it may complicate the enforcement of their rights (see also "4. Sharing Your Data and Data Transfers to Third Countries").

Furthermore, user data within social networks is generally processed for market research and advertising purposes. For instance, usage profiles may be created based on user behavior and resulting interests. Usage profiles can be used, for example, to display advertisements both within and outside the networks that are presumed to align with users' interests. For these purposes, cookies are typically stored on users' devices, which save their usage behavior and interests. Additionally, data may be stored in the usage profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in).

For a detailed description of the respective forms of processing and options to object (opt-out), we refer you to the privacy policies and information provided by the operators of the respective networks.

We have no influence over the storage duration of your data, which is stored by the operators of social networks for their own purposes. For details on this, please refer directly to the operators of the social networks. In the case of inquiries regarding access and the assertion of data subject rights, we would like to point out that these can be most effectively asserted with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need assistance, you can contact us.

The data processing carried out by the social networks may be based on different legal grounds, which must be specified by the operators of the social networks.

a) LinkedIn Page

Social network and service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://www.linkedin.com; Privacy Policy: https://www.linkedin.com/legal/privacy-policy; Opt-out option: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

GSG has entered into the current standard contractual clauses with LinkedIn. The data processing agreement can be viewed at https://de.linkedin.com/legal/l/dpa.

The types of data processed include: contact data (e.g., email, phone numbers), content data (e.g., entries in online forms), usage data (e.g., visited websites, interest in content, access times), and meta/communication data (e.g., device information, IP addresses).

The legal basis for processing is Article 6(1) sentence 1 lit. a and f of the GDPR. Our legitimate interest and purposes of processing include handling contact requests and communication, gathering feedback (e.g., collecting feedback via online forms), and marketing.

b) YouTube Channel

Social network and video platform; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy Policy: https://policies.google.com/privacy; Opt-out option: https://adssettings.google.com/authenticated.

The types of data processed include: usage data (e.g., visited websites, interest in content, access times) and meta/communication data (e.g., device information, IP addresses).

The legal basis for processing is Article 6(1) sentence 1 lit. f of the GDPR. Our legitimate interest and purpose of processing is marketing.

c) Xing Page

Social network and service provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany; Website: https://www.xing.de; Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.

The types of data processed include: contact data (e.g., email, phone numbers), content data (e.g., entries in online forms), usage data (e.g., visited websites, interest in content, access times), and meta/communication data (e.g., device information, IP addresses).

The legal basis for processing is Article 6(1) sentence 1 lit. a and f of the GDPR. Our legitimate interest and purposes of processing include handling contact requests and communication, gathering feedback (e.g., collecting feedback via online forms), and marketing.

d) Facebook Page

We, along with Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), are jointly responsible for the collection (but not the further processing) of data from visitors to our Facebook page (so-called "fan page").

This data includes information about the types of content that users view or interact with, as well as the actions they take (see "Things you and others have done and provided" in the Facebook Data Policy: https://www.facebook.com/policy), as well as information about the devices used by the users (including IP addresses, operating system, browser type, language settings, cookie data; see "Device Information" in the Facebook Data Policy: https://www.facebook.com/policy). As explained in the Facebook Data Policy under "How do we use this information?", Facebook also collects and uses information to provide analytics services, known as "Page Insights," for page operators, allowing them to gain insights into how people interact with their pages and the associated content.

We have entered into a specific agreement with Facebook titled "Information on Page Insights" (https://www.facebook.com/legal/terms/page_controller_addendum), which outlines the security measures that Facebook must adhere to and confirms that Facebook is committed to fulfilling the rights of data subjects. This means that users can directly address inquiries or deletion requests to Facebook. The rights of users—particularly regarding access, deletion, objection, and complaints to the relevant supervisory authority—are not limited by the agreements made with Facebook. Further details can be found in the "Information on Page Insights" (https://www.facebook.com/legal/terms/information_about_page_insights_data).

The types of data processed include contact details (e.g., email addresses, phone numbers), content data (e.g., entries in online forms), usage data (e.g., visited websites, interests in content, access times), and meta/communication data (e.g., device information, IP addresses).

The legal basis for processing this personal data is Article 6(1)(a) and (f) of the GDPR. Our legitimate interests and purposes for processing include handling contact inquiries and communication, collecting feedback via online forms, and marketing activities.

We place a high priority on ensuring the maximum security of our systems and utilize modern data storage and security techniques to optimally protect your data. Our security measures are continuously improved in line with technological advancements. However, we would like to point out that data transmission over the internet may have security vulnerabilities. It is well-known that complete protection of data from unauthorized access by third parties is not possible and is beyond our control.

Your personal data will be deleted or restricted as soon as the purpose for which it was stored ceases to apply (see also "9. Google Analytics"). Any retention beyond this will only occur as required by laws and other binding legal regulations applicable to us. If such regulations establish retention periods, the deletion or restriction of personal data will occur upon expiration of these periods, unless the data is necessary for the conclusion or fulfillment of a contract.

Where we obtain your explicit and voluntary consent for the use of certain features on our website, Article 6(1)(1)(a) of the GDPR serves as the legal basis for data processing. You may withdraw any consent you have provided at any time with effect for the future, using the contact details provided under "1. Responsible Party" in this privacy policy.

Upon request, you have the right to access the personal data we have stored about you. Additionally, you have the right to request the correction of inaccurate data, the deletion of personal data, the restriction of processing, the right to object to processing, and the right to data portability. Furthermore, you have the right to withdraw any consent you have voluntarily provided at any time (see also "20. Legal Bases" above). You can exercise these rights by contacting us using the contact details provided in this privacy policy (see "1. Responsible Party" above). For any questions or comments regarding this privacy policy, please reach out to our data protection officer using the contact details provided above. You also have the right to lodge a complaint with the relevant supervisory authority.