Pri­va­cy pol­i­cy

1. data pro­tec­tion at a glance

Gen­er­al notes

The fol­low­ing notices pro­vide a sim­ple overview of what hap­pens to your per­son­al data when you vis­it this web­site. Per­son­al data is any data by which you can be per­son­al­ly iden­ti­fied. For detailed infor­ma­tion on the sub­ject of data pro­tec­tion, please refer to our pri­va­cy pol­i­cy list­ed below this text.

Data col­lec­tion on this web­site

Who is respon­si­ble for the data col­lec­tion on this web­site?

Data pro­cess­ing on this web­site is car­ried out by the web­site oper­a­tor. You can find their con­tact details in the sec­tion “Infor­ma­tion on the respon­si­ble office” in this data pro­tec­tion dec­la­ra­tion.

How do we col­lect your data?

On the one hand, your data is col­lect­ed by you pro­vid­ing it to us. This may, for exam­ple, be data that you enter in a con­tact form.

Oth­er data is col­lect­ed auto­mat­i­cal­ly or after your con­sent when you vis­it the web­site by our IT sys­tems. This is pri­mar­i­ly tech­ni­cal data (e.g. inter­net brows­er, oper­at­ing sys­tem or time of the page view). This data is col­lect­ed auto­mat­i­cal­ly as soon as you enter this web­site.

What do we use your data for?

Part of the data is col­lect­ed to ensure error-free pro­vi­sion of the web­site. Oth­er data may be used to ana­lyze your user behav­ior.

What rights do you have regard­ing your data?

You have the right at any time to receive infor­ma­tion free of charge about the ori­gin, recip­i­ent and pur­pose of your stored per­son­al data. You also have a right to request the cor­rec­tion or dele­tion of this data. If you have giv­en your con­sent to data pro­cess­ing, you can revoke this con­sent at any time for the future. You also have the right to request the restric­tion of the pro­cess­ing of your per­son­al data under cer­tain cir­cum­stances. Fur­ther­more, you have the right to lodge a com­plaint with the com­pe­tent super­vi­so­ry author­i­ty.

You can con­tact us at any time with regard to this and oth­er ques­tions on the sub­ject of data pro­tec­tion.

Third-par­ty ana­lyt­ics and tools

When vis­it­ing this web­site, your surf­ing behav­ior can be sta­tis­ti­cal­ly ana­lyzed. This is done main­ly with so-called analy­sis pro­grams.

Detailed infor­ma­tion about these analy­sis pro­grams can be found in the fol­low­ing pri­va­cy pol­i­cy.

2. host­ing

We host the con­tent of our web­site with the fol­low­ing provider:

All-Inkl

Provider is ALL-INKL.COM — Neue Medi­en Mün­nich, Inh. René Mün­nich, Haupt­straße 68, 02742 Frieder­s­dorf (here­inafter All-Inkl). For details, please refer to All-Inkl’s pri­va­cy pol­i­cy: https://all-inkl.com/datenschutzinformationen/.

The use of All-Inkl is based on Art. 6 para. 1 lit. f GDPR. We have a legit­i­mate inter­est in ensur­ing that our web­site is pre­sent­ed as reli­ably as pos­si­ble. If a cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is based exclu­sive­ly on Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion in the user’s end device (e.g. device fin­ger­print­ing) with­in the mean­ing of the TDDDG. The con­sent can be revoked at any time.

Job pro­cess­ing

We have con­clud­ed a con­tract on order pro­cess­ing (AVV) for the use of the above ser­vice. This is a con­tract required by data pro­tec­tion law, which ensures that this process­es the per­son­al data of our web­site vis­i­tors only accord­ing to our instruc­tions and in com­pli­ance with the GDPR.

3. gen­er­al notes and manda­to­ry infor­ma­tion

Pri­va­cy

The oper­a­tors of these pages take the pro­tec­tion of your per­son­al data very seri­ous­ly. We treat your per­son­al data con­fi­den­tial­ly and in accor­dance with the statu­to­ry data pro­tec­tion reg­u­la­tions and this pri­va­cy pol­i­cy.

When you use this web­site, var­i­ous per­son­al data are col­lect­ed. Per­son­al data is data with which you can be per­son­al­ly iden­ti­fied. This pri­va­cy pol­i­cy explains what data we col­lect and what we use it for. It also explains how this is done and for what pur­pose.

We would like to point out that data trans­mis­sion over the Inter­net (e.g. when com­mu­ni­cat­ing by e‑mail) can have secu­ri­ty gaps. Com­plete pro­tec­tion of the data against access by third par­ties is not pos­si­ble.

Note on the respon­si­ble enti­ty

The respon­si­ble par­ty for data pro­cess­ing on this web­site is:

abante Recht­san­walts­ge­sellschaft mbH & Co. KG
Less­ingstraße 2
04109 Leipzig

Phone: +49 341 238203 00
E‑mail: info@abante.de

The con­troller is the nat­ur­al or legal per­son who alone or joint­ly with oth­ers deter­mines the pur­pos­es and means of the pro­cess­ing of per­son­al data (e.g. names, email address­es, etc.).

Stor­age dura­tion

Unless a more spe­cif­ic stor­age peri­od has been spec­i­fied with­in this data pro­tec­tion dec­la­ra­tion, your per­son­al data will remain with us until the pur­pose for the data pro­cess­ing no longer applies. If you assert a jus­ti­fied request for dele­tion or revoke your con­sent to data pro­cess­ing, your data will be delet­ed unless we have oth­er legal­ly per­mis­si­ble rea­sons for stor­ing your per­son­al data (e.g. reten­tion peri­ods under tax or com­mer­cial law); in the lat­ter case, dele­tion will take place after these rea­sons no longer apply.

Gen­er­al infor­ma­tion on the legal basis for data pro­cess­ing on this web­site

If you have con­sent­ed to data pro­cess­ing, we process your per­son­al data on the basis of Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO, inso­far as spe­cial cat­e­gories of data pur­suant to Art. 9 para. 1 DSGVO are processed. In the case of explic­it con­sent to the trans­fer of per­son­al data to third coun­tries, the data pro­cess­ing is also car­ried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have con­sent­ed to the stor­age of cook­ies or access to infor­ma­tion in your end device (e.g. via device fin­ger­print­ing), data pro­cess­ing is also car­ried out on the basis of Sec­tion 25 (1) TDDDG. The con­sent can be revoked at any time. If your data is required for the per­for­mance of a con­tract or for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Fur­ther­more, we process your data inso­far as this is nec­es­sary for the ful­fill­ment of a legal oblig­a­tion on the basis of Art. 6 para. 1 lit. c GDPR. The data pro­cess­ing may fur­ther be based on our legit­i­mate inter­est accord­ing to Art. 6 para. 1 lit. f DSGVO shall take place. Infor­ma­tion on the rel­e­vant legal basis in each indi­vid­ual case is pro­vid­ed in the fol­low­ing para­graphs of this data pro­tec­tion dec­la­ra­tion.

Data Pro­tec­tion Offi­cer

We have appoint­ed a data pro­tec­tion offi­cer.

Stef­fen Gün­thel
Less­ingstraße 2
04109 Leipzig

Phone: +49 341 238 203 18
E‑mail: guenthel@abante.de

Note on data trans­fer to the USA and oth­er third coun­tries

Among oth­er things, we use tools from com­pa­nies based in the USA or oth­er third coun­tries that are not secure under data pro­tec­tion law. When these tools are active, your per­son­al data may be trans­ferred to and processed in these third coun­tries. We would like to point out that no lev­el of data pro­tec­tion com­pa­ra­ble to that in the EU can be guar­an­teed in these coun­tries. For exam­ple, U.S. com­pa­nies are oblig­at­ed to release per­son­al data to secu­ri­ty author­i­ties with­out you, the data sub­ject, being able to take legal action against this. It can there­fore not be ruled out that US author­i­ties (e.g. secret ser­vices) may process, eval­u­ate and per­ma­nent­ly store your data on US servers for sur­veil­lance pur­pos­es. We have no influ­ence on these pro­cess­ing activ­i­ties.

Revo­ca­tion of your con­sent to data pro­cess­ing

Many data pro­cess­ing oper­a­tions are only pos­si­ble with your express con­sent. You can revoke an already giv­en con­sent at any time. The legal­i­ty of the data pro­cess­ing car­ried out until the revo­ca­tion remains unaf­fect­ed by the revo­ca­tion.

Right to object to data col­lec­tion in spe­cial cas­es and to direct mar­ket­ing (Art. 21 DSGVO)

IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 ABS. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) DSGVO).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 DSGVO).

Right of appeal to the com­pe­tent super­vi­so­ry author­i­ty

In the event of breach­es of the GDPR, data sub­jects shall have a right of appeal to a super­vi­so­ry author­i­ty, in par­tic­u­lar in the Mem­ber State of their habit­u­al res­i­dence, their place of work or the place of the alleged breach. The right of appeal is with­out prej­u­dice to oth­er admin­is­tra­tive or judi­cial reme­dies.

Right to data porta­bil­i­ty

You have the right to have data that we process auto­mat­i­cal­ly on the basis of your con­sent or in ful­fill­ment of a con­tract hand­ed over to you or to a third par­ty in a com­mon, machine-read­able for­mat. If you request the direct trans­fer of the data to anoth­er con­troller, this will only be done inso­far as it is tech­ni­cal­ly fea­si­ble.

Infor­ma­tion, cor­rec­tion and dele­tion

With­in the frame­work of the applic­a­ble legal pro­vi­sions, you have the right at any time to free infor­ma­tion about your stored per­son­al data, its ori­gin and recip­i­ent and the pur­pose of data pro­cess­ing and, if applic­a­ble, a right to cor­rec­tion or dele­tion of this data. You can con­tact us at any time with regard to this and oth­er ques­tions on the sub­ject of per­son­al data.

Right to restric­tion of pro­cess­ing

You have the right to request the restric­tion of the pro­cess­ing of your per­son­al data. For this pur­pose, you can con­tact us at any time. The right to restrict pro­cess­ing exists in the fol­low­ing cas­es:

• If you dis­pute the accu­ra­cy of your per­son­al data stored by us, we usu­al­ly need time to ver­i­fy this. For the dura­tion of the review, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data.
• If the pro­cess­ing of your per­son­al data happened/is hap­pen­ing unlaw­ful­ly, you may request the restric­tion of data pro­cess­ing instead of era­sure.
• If we no longer need your per­son­al data, but you need it to exer­cise, defend or enforce legal claims, you have the right to request restric­tion of the pro­cess­ing of your per­son­al data instead of dele­tion.
• If you file an objec­tion pur­suant to Art. 21 para. 1 DSGVO, a bal­ance must be struck between your inter­ests and ours. As long as it has not yet been deter­mined whose inter­ests pre­vail, you have the right to demand the restric­tion of the pro­cess­ing of your per­son­al data.

If you have restrict­ed the pro­cess­ing of your per­son­al data, this data may — apart from being stored — only be processed with your con­sent or for the asser­tion, exer­cise or defense of legal claims or for the pro­tec­tion of the rights of anoth­er nat­ur­al or legal per­son or for rea­sons of an impor­tant pub­lic inter­est of the Euro­pean Union or a Mem­ber State.

SSL or TLS encryp­tion

For secu­ri­ty rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as orders or requests that you send to us as the site oper­a­tor, this site uses SSL or TLS encryp­tion. You can rec­og­nize an encrypt­ed con­nec­tion by the fact that the brows­er address bar changes from “http://” to “https://” and by the lock sym­bol in your brows­er bar.

If SSL or TLS encryp­tion is acti­vat­ed, the data you trans­mit to us can­not be read by third par­ties.

Objec­tion to adver­tis­ing e‑mails

The use of con­tact data pub­lished with­in the scope of the imprint oblig­a­tion for the trans­mis­sion of not express­ly request­ed adver­tis­ing and infor­ma­tion mate­ri­als is here­by con­tra­dict­ed. The oper­a­tors of the pages express­ly reserve the right to take legal action in the event of the unso­licit­ed send­ing of adver­tis­ing infor­ma­tion, such as spam e‑mails.

4. data col­lec­tion on this web­site

Cook­ies

Our Inter­net pages use so-called “cook­ies”. Cook­ies are small data pack­ets and do not cause any dam­age to your ter­mi­nal device. They are stored either tem­porar­i­ly for the dura­tion of a ses­sion (ses­sion cook­ies) or per­ma­nent­ly (per­ma­nent cook­ies) on your ter­mi­nal device. Ses­sion cook­ies are auto­mat­i­cal­ly delet­ed after the end of your vis­it. Per­ma­nent cook­ies remain stored on your ter­mi­nal device until you delete them your­self or until they are auto­mat­i­cal­ly delet­ed by your web brows­er.

Cook­ies may orig­i­nate from us (first-par­ty cook­ies) or from third-par­ty com­pa­nies (so-called third-par­ty cook­ies). Third-par­ty cook­ies enable the inte­gra­tion of cer­tain ser­vices from third-par­ty com­pa­nies with­in web­sites (e.g. cook­ies for pro­cess­ing pay­ment ser­vices).

Cook­ies have var­i­ous func­tions. Many cook­ies are tech­ni­cal­ly nec­es­sary, as cer­tain web­site func­tions would not work with­out them (e.g. the shop­ping cart func­tion or the dis­play of videos). Oth­er cook­ies may be used to eval­u­ate user behav­ior or for adver­tis­ing pur­pos­es.

Cook­ies that are required to car­ry out the elec­tron­ic com­mu­ni­ca­tion process, to pro­vide cer­tain func­tions that you have request­ed (e.g. for the shop­ping cart func­tion) or to opti­mize the web­site (e.g. cook­ies to mea­sure the web audi­ence) (nec­es­sary cook­ies) are stored on the basis of Art. 6 para. 1 lit. a GDPR. 1 lit. f DSGVO, unless anoth­er legal basis is spec­i­fied. The web­site oper­a­tor has a legit­i­mate inter­est in stor­ing nec­es­sary cook­ies for the tech­ni­cal­ly error-free and opti­mized pro­vi­sion of its ser­vices. If con­sent to the stor­age of cook­ies and com­pa­ra­ble recog­ni­tion tech­nolo­gies has been request­ed, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of this con­sent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); the con­sent can be revoked at any time.

You can set your brows­er so that you are informed about the set­ting of cook­ies and only allow cook­ies in indi­vid­ual cas­es, exclude the accep­tance of cook­ies for cer­tain cas­es or in gen­er­al and acti­vate the auto­mat­ic dele­tion of cook­ies when clos­ing the brows­er. When cook­ies are dis­abled, the func­tion­al­i­ty of this web­site may be lim­it­ed.

Which cook­ies and ser­vices are used on this web­site can be found in this pri­va­cy pol­i­cy.

Real Cook­ie Ban­ner

Our web­site uses Real Cook­ie Ban­ner’s Con­sent tech­nol­o­gy to obtain your con­sent to the stor­age of cer­tain cook­ies on your ter­mi­nal device or to the use of cer­tain tech­nolo­gies and to doc­u­ment this con­sent in accor­dance with data pro­tec­tion law. Provider of this tech­nol­o­gy is devowl.io GmbH, Tan­net 12, 94539 Grafling (here­inafter “Real Cook­ie Ban­ner”).

Real Cook­ie Ban­ner is installed local­ly on our servers, so no con­nec­tion is estab­lished to the servers of the provider of Real Cook­ie Ban­ner. Real Cook­ie Ban­ner stores a cook­ie in your brows­er in order to be able to assign the con­sents grant­ed to you or their revo­ca­tion. The data col­lect­ed in this way will be stored until you request us to delete it, delete the Real Cook­ie Ban­ner cook­ie your­self, or until the pur­pose for stor­ing the data no longer applies. Manda­to­ry legal stor­age oblig­a­tions remain unaf­fect­ed.

The use of Real Cook­ie Ban­ner is done in order to obtain the legal­ly required con­sents for the use of cook­ies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Serv­er log files

The provider of the pages auto­mat­i­cal­ly col­lects and stores infor­ma­tion in so-called serv­er log files, which your brows­er auto­mat­i­cal­ly trans­mits to us. These are:

• Brows­er type and ver­sion
• Oper­at­ing sys­tem used
• Refer­rer URL
• Host name of the access­ing com­put­er
• Time of the serv­er request
• IP address

This data is not merged with oth­er data sources.

The col­lec­tion of this data is based on Art. 6 para. 1 lit. f GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the tech­ni­cal­ly error-free pre­sen­ta­tion and opti­miza­tion of its web­site — for this pur­pose, the serv­er log files must be record­ed.

Con­tact form

If you send us inquiries via the con­tact form, the infor­ma­tion you pro­vide in the inquiry form, includ­ing the con­tact data you enter there, will be stored by us for the pur­pose of pro­cess­ing the inquiry and in case of fol­low-up ques­tions. We do not share this data with­out your con­sent.

The pro­cess­ing of this data is based on Art. 6 para. 1 lit. b DSGVO, pro­vid­ed that your request is relat­ed to the per­for­mance of a con­tract or is nec­es­sary for the per­for­mance of pre-con­trac­tu­al mea­sures. In all oth­er cas­es, the pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive han­dling of the requests addressed to us (Art. 6 (1) f DSGVO) or on your con­sent (Art. 6 (1) a DSGVO) if this has been request­ed; the con­sent can be revoked at any time.

We will retain the data you pro­vide on the con­tact form until you request its dele­tion, revoke your con­sent for its stor­age, or the pur­pose for its stor­age no longer per­tains (e.g. after ful­fill­ing your request). Manda­to­ry legal pro­vi­sions — in par­tic­u­lar reten­tion peri­ods — remain unaf­fect­ed.

Request by e‑mail, phone or fax

If you con­tact us by e‑mail, tele­phone or fax, your inquiry includ­ing all result­ing per­son­al data (name, inquiry) will be stored and processed by us for the pur­pose of pro­cess­ing your request. We do not share this data with­out your con­sent.

The pro­cess­ing of this data is based on Art. 6 para. 1 lit. b DSGVO, pro­vid­ed that your request is relat­ed to the per­for­mance of a con­tract or is nec­es­sary for the per­for­mance of pre-con­trac­tu­al mea­sures. In all oth­er cas­es, the pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive han­dling of the requests addressed to us (Art. 6 (1) f DSGVO) or on your con­sent (Art. 6 (1) a DSGVO) if this has been request­ed; the con­sent can be revoked at any time.

The data you send to us via con­tact requests will remain with us until you ask us to delete it, revoke your con­sent to stor­age or the pur­pose for data stor­age no longer applies (e.g. after your request has been processed). Manda­to­ry statu­to­ry pro­vi­sions — in par­tic­u­lar statu­to­ry reten­tion peri­ods — remain unaf­fect­ed.

Reg­is­tra­tion on this web­site

You can reg­is­ter on this site to use addi­tion­al fea­tures on the site. We use the data entered for this pur­pose only for the pur­pose of using the respec­tive offer or ser­vice for which you have reg­is­tered. The manda­to­ry infor­ma­tion request­ed dur­ing reg­is­tra­tion must be pro­vid­ed in full. Oth­er­wise, we will reject the reg­is­tra­tion.

For impor­tant changes, for exam­ple in the scope of the offer or in the case of tech­ni­cal­ly nec­es­sary changes, we use the e‑mail address pro­vid­ed dur­ing reg­is­tra­tion to inform you in this way.

The data entered dur­ing reg­is­tra­tion is processed for the pur­pose of imple­ment­ing the user rela­tion­ship estab­lished by reg­is­tra­tion and, if nec­es­sary, for ini­ti­at­ing fur­ther con­tracts (Art. 6 para. 1 lit. b DSGVO).

The data col­lect­ed dur­ing reg­is­tra­tion will be stored by us as long as you are reg­is­tered on this web­site and will then be delet­ed. Statu­to­ry reten­tion peri­ods remain unaf­fect­ed.

Proven­Ex­pert

We have inte­grat­ed rat­ing seals from Proven­Ex­pert on this web­site. Provider is Expert Sys­tems AG, Quedlin­burg­er Str. 1, 10589 Berlin, https://www.provenexpert.com.

The Proven­Ex­pert seal allows us to dis­play cus­tomer reviews sub­mit­ted to Proven­Ex­pert about our com­pa­ny in a seal on our web­site. When you vis­it our web­site, a con­nec­tion is estab­lished with Proven­Ex­pert so that Proven­Ex­pert can deter­mine that you have vis­it­ed our web­site. Fur­ther­more, Proven­Ex­pert col­lects your lan­guage set­tings to dis­play the seal in the select­ed local lan­guage.

The use of Proven­Ex­pert is based on Art. 6 para. 1 lit. f GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in a pre­sen­ta­tion of cus­tomer rat­ings that is as com­pre­hen­si­ble as pos­si­ble. If a cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is based exclu­sive­ly on Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion in the user’s end device (e.g. device fin­ger­print­ing) with­in the mean­ing of the TDDDG. The con­sent can be revoked at any time.

5. analy­sis tools and adver­tis­ing

Google Tag Man­ag­er

We use the Google Tag Man­ag­er. The provider is Google Ire­land Lim­it­ed, Gor­don House, Bar­row Street, Dublin 4, Ire­land.

Google Tag Man­ag­er is a tool that allows us to embed track­ing or sta­tis­ti­cal tools and oth­er tech­nolo­gies on our web­site. The Google Tag Man­ag­er itself does not cre­ate user pro­files, does not store cook­ies and does not per­form any inde­pen­dent analy­ses. It is only used for the admin­is­tra­tion and play­out of the tools inte­grat­ed via it. How­ev­er, Google Tag Man­ag­er col­lects your IP address, which may also be trans­ferred to Google’s par­ent com­pa­ny in the Unit­ed States.

The use of the Google Tag Man­ag­er is based on Art. 6 para. 1 lit. f GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in a fast and uncom­pli­cat­ed inte­gra­tion and man­age­ment of var­i­ous tools on his web­site. If a cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is based exclu­sive­ly on Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion in the user’s end device (e.g. device fin­ger­print­ing) with­in the mean­ing of the TDDDG. The con­sent can be revoked at any time.

Google Ana­lyt­ics

This web­site uses func­tions of the web analy­sis ser­vice Google Ana­lyt­ics. The provider is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

Google Ana­lyt­ics allows the web­site oper­a­tor to ana­lyze the behav­ior of web­site vis­i­tors. The web­site oper­a­tor receives var­i­ous usage data, such as page views, length of vis­it, oper­at­ing sys­tems used and ori­gin of the user. This data is assigned to the respec­tive end device of the user. There is no assign­ment to a user ID.

We can also use Google Ana­lyt­ics to record your mouse and scroll move­ments and clicks, among oth­er things. Fur­ther­more, Google Ana­lyt­ics uses var­i­ous mod­el­ing approach­es to aug­ment the data sets it col­lects and employs machine learn­ing tech­nolo­gies in its data analy­sis.

Google Ana­lyt­ics uses tech­nolo­gies that enable the recog­ni­tion of the user for the pur­pose of ana­lyz­ing user behav­ior (e.g. cook­ies or device fin­ger­print­ing). The infor­ma­tion col­lect­ed by Google about the use of this web­site is usu­al­ly trans­ferred to a Google serv­er in the USA and stored there.

The use of this ser­vice is based on your con­sent accord­ing to Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TDDDG. The con­sent can be revoked at any time.

Data trans­fer to the USA is based on the stan­dard con­trac­tu­al claus­es of the EU Com­mis­sion. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

Brows­er plu­g­in

You can pre­vent the col­lec­tion and pro­cess­ing of your data by Google by down­load­ing and installing the brows­er plu­g­in avail­able at the fol­low­ing link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more infor­ma­tion on how Google Ana­lyt­ics han­dles user data, please see Google’s pri­va­cy pol­i­cy: https://support.google.com/analytics/answer/6004245?hl=de.

Job pro­cess­ing

We have con­clud­ed an order pro­cess­ing agree­ment with Google and ful­ly imple­ment the strict require­ments of the Ger­man data pro­tec­tion author­i­ties when using Google Ana­lyt­ics.

Google Ads

The web­site oper­a­tor uses Google Ads. Google Ads is an online adver­tis­ing pro­gram of Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

Google Ads allows us to dis­play adver­tise­ments in the Google search engine or on third-par­ty web­sites when the user enters cer­tain search terms on Google (key­word tar­get­ing). Fur­ther­more, tar­get­ed adver­tise­ments can be dis­played based on the user data avail­able at Google (e.g. loca­tion data and inter­ests) (tar­get group tar­get­ing). As a web­site oper­a­tor, we can eval­u­ate this data quan­ti­ta­tive­ly by ana­lyz­ing, for exam­ple, which search terms led to the dis­play of our adver­tise­ments and how many ads result­ed in cor­re­spond­ing clicks.

The use of this ser­vice is based on your con­sent accord­ing to Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TDDDG. The con­sent can be revoked at any time.

Data trans­fer to the USA is based on the stan­dard con­trac­tu­al claus­es of the EU Com­mis­sion. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

Google Ads Remar­ket­ing

This web­site uses the func­tions of Google Ads Remar­ket­ing. The provider is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

With Google Ads Remar­ket­ing, we can assign peo­ple who inter­act with our online offer­ing to spe­cif­ic tar­get groups in order to sub­se­quent­ly dis­play inter­est-based adver­tis­ing to them in the Google adver­tis­ing net­work (remar­ket­ing or retar­get­ing).

Fur­ther­more, the adver­tis­ing tar­get groups cre­at­ed with Google Ads Remar­ket­ing can be linked with Google’s cross-device func­tions. In this way, inter­est-based, per­son­al­ized adver­tis­ing mes­sages that have been adapt­ed to you depend­ing on your pre­vi­ous usage and surf­ing behav­ior on one end device (e.g. cell phone) can also be dis­played on anoth­er of your end devices (e.g. tablet or PC).

If you have a Google account, you can object to per­son­al­ized adver­tis­ing at the fol­low­ing link: https://www.google.com/settings/ads/onweb/.

The use of this ser­vice is based on your con­sent accord­ing to Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TDDDG. The con­sent can be revoked at any time.

For more infor­ma­tion and the pri­va­cy pol­i­cy, please see Google’s pri­va­cy pol­i­cy at: https://policies.google.com/technologies/ads?hl=de.

Tar­get group for­ma­tion with cus­tomer match­ing

For tar­get group for­ma­tion, we use, among oth­er things, the cus­tomer match­ing of Google Ads Remar­ket­ing. We trans­fer cer­tain cus­tomer data (e.g. email address­es) from our cus­tomer lists to Google. If the cus­tomers con­cerned are Google users and are logged into their Google account, they will be shown suit­able adver­tis­ing mes­sages with­in the Google net­work (e.g. on YouTube, Gmail or in the search engine).

Google Con­ver­sion Track­ing

This web­site uses Google Con­ver­sion Track­ing. The provider is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

Google con­ver­sion track­ing allows Google and us to rec­og­nize whether the user has tak­en cer­tain actions. For exam­ple, we can eval­u­ate which but­tons on our web­site were clicked how often and which prod­ucts were viewed or pur­chased par­tic­u­lar­ly fre­quent­ly. This infor­ma­tion is used to cre­ate con­ver­sion sta­tis­tics. We learn the total num­ber of users who clicked on our ads and what actions they took. We do not receive any infor­ma­tion with which we can per­son­al­ly iden­ti­fy the user. Google itself uses cook­ies or com­pa­ra­ble recog­ni­tion tech­nolo­gies for iden­ti­fi­ca­tion.

The use of this ser­vice is based on your con­sent accord­ing to Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TDDDG. The con­sent can be revoked at any time.

For more infor­ma­tion on Google con­ver­sion track­ing, please see Google’s pri­va­cy pol­i­cy: https://policies.google.com/privacy?hl=de.

LinkedIn Ads

We use the LinkedIn Ads adver­tis­ing plat­form, a ser­vice pro­vid­ed by LinkedIn Cor­po­ra­tion, to bet­ter tar­get our mar­ket­ing cam­paigns and reach poten­tial cus­tomers and prospects, LinkedIn Ire­land Unlim­it­ed Com­pa­ny, Wilton Place, Dublin 2, Ire­land. If you click on one of our adver­tise­ments placed via LinkedIn Ads and sign up for our newslet­ter, LinkedIn uses cer­tain infor­ma­tion about your vis­it to our web­site to help us mea­sure and improve the effec­tive­ness of our adver­tis­ing cam­paigns.

The fol­low­ing per­son­al data may be col­lect­ed through the use of LinkedIn Ads: Your IP address, brows­er infor­ma­tion, pre­vi­ous­ly vis­it­ed web­sites and your inter­ac­tion behav­ior with the ad. This data is processed by LinkedIn and made avail­able to us in aggre­gat­ed and anonymized form so that we can­not estab­lish a direct link to you per­son­al­ly. The data pro­cess­ing takes place on the basis of your express con­sent (Art. 6 para. 1 lit. a GDPR), which you give by click­ing on one of our adver­tise­ments and enter­ing your data in the reg­is­tra­tion form for the newslet­ter.

You have the right to with­draw your con­sent at any time with­out affect­ing the law­ful­ness of pro­cess­ing based on con­sent before its with­draw­al. You also have oth­er rights regard­ing your data at LinkedIn, such as the right to infor­ma­tion, rec­ti­fi­ca­tion, era­sure and restric­tion of pro­cess­ing.

We would like to point out that LinkedIn has its own pri­va­cy pol­i­cy, which is inde­pen­dent of ours. We have no influ­ence on Linked­In’s data col­lec­tion and pro­cess­ing prac­tices. Fur­ther infor­ma­tion and the pri­va­cy pol­i­cy can be found in Linked­In’s pri­va­cy pol­i­cy at LinkedIn Pri­va­cy Pol­i­cy.

6. newslet­ter

Newslet­ter data

If you would like to receive the newslet­ter offered on the web­site, we require an e‑mail address from you as well as infor­ma­tion that allows us to ver­i­fy that you are the own­er of the spec­i­fied e‑mail address and agree to receive the newslet­ter. Fur­ther data is not col­lect­ed or only on a vol­un­tary basis. For the han­dling of the newslet­ters we use newslet­ter ser­vice providers, which are described below.

Bre­vo with acti­vat­ed per­for­mance mea­sure­ment

We use the newslet­ter tool Bre­vo to inform you reg­u­lar­ly about our lat­est prod­ucts, offers and news. If you reg­is­ter for our newslet­ter, the data you pro­vide (typ­i­cal­ly your email address and option­al­ly your name so that we can address you per­son­al­ly) will be trans­mit­ted to Bre­vo for the pur­pose of send­ing the newslet­ter and processed there.

Reg­is­tra­tion for our newslet­ter takes place in a so-called dou­ble opt-in pro­ce­dure. This means that after you have reg­is­tered, you will receive an e‑mail ask­ing you to con­firm your reg­is­tra­tion. This con­fir­ma­tion is nec­es­sary so that no one can reg­is­ter with oth­er peo­ple’s e‑mail address­es. Sub­scrip­tions to the newslet­ter are logged in order to be able to prove the reg­is­tra­tion process in accor­dance with legal require­ments. This includes stor­ing the time of reg­is­tra­tion and con­fir­ma­tion as well as the IP address.

Data pro­cess­ing takes place on the basis of your express con­sent (Art. 6 para. 1 lit. a GDPR). You can revoke your con­sent to the stor­age of the data, the e‑mail address and its use for send­ing the newslet­ter at any time, for exam­ple via the “Unsub­scribe” link in the newslet­ter. The legal­i­ty of the data pro­cess­ing oper­a­tions already car­ried out remains unaf­fect­ed by the revo­ca­tion.

We would like to point out that Bre­vo eval­u­ates your user behav­ior when send­ing the newslet­ter. For this eval­u­a­tion, the e‑mails sent con­tain so-called web bea­cons or track­ing pix­els that are stored on our web­site. For eval­u­a­tion pur­pos­es, we link the afore­men­tioned data and the web bea­cons with your e‑mail address and an indi­vid­ual ID. We do not cre­ate a user pro­file with the data obtained in this way.

The data described in this sec­tion is processed exclu­sive­ly for the pur­pose of per­son­al­ized com­mu­ni­ca­tion with you. The data will be stored for as long as you have sub­scribed to the newslet­ter and will be delet­ed after you unsub­scribe from the newslet­ter or with­draw your con­sent. Data stored by us for oth­er pur­pos­es (e.g. e‑mail address­es for the mem­ber area) remain unaf­fect­ed by this.

For fur­ther infor­ma­tion on data pro­cess­ing by Bre­vo, please refer to Brevo’s pri­va­cy pol­i­cy.

Job pro­cess­ing

We have con­clud­ed a con­tract on order pro­cess­ing (AVV) for the use of the above ser­vice. This is a con­tract required by data pro­tec­tion law, which ensures that this process­es the per­son­al data of our web­site vis­i­tors only accord­ing to our instruc­tions and in com­pli­ance with the GDPR.

7. plu­g­ins and tools

YouTube with enhanced pri­va­cy

This web­site embeds videos from the web­site YouTube. The oper­a­tor of the pages is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

We use YouTube in extend­ed data pro­tec­tion mode. Accord­ing to YouTube, this mode caus­es YouTube not to store infor­ma­tion about vis­i­tors to this web­site before they watch the video. The trans­fer of data to YouTube part­ners, on the oth­er hand, is not nec­es­sar­i­ly exclud­ed by the extend­ed data pro­tec­tion mode. Thus, YouTube — regard­less of whether you watch a video — con­nects to the Google Dou­bleClick net­work.

As soon as you start a YouTube video on this web­site, a con­nec­tion to YouTube’s servers is estab­lished. This tells the YouTube serv­er which of our pages you have vis­it­ed. If you are logged into your YouTube account, you enable YouTube to asso­ciate your brows­ing behav­ior direct­ly with your per­son­al pro­file. You can pre­vent this by log­ging out of your YouTube account.

Fur­ther­more, YouTube may store var­i­ous cook­ies on your end device after start­ing a video or use com­pa­ra­ble recog­ni­tion tech­nolo­gies (e.g. device fin­ger­print­ing). In this way, YouTube can obtain infor­ma­tion about vis­i­tors to this web­site. This infor­ma­tion is used, among oth­er things, to record video sta­tis­tics, improve user-friend­li­ness and pre­vent fraud attempts.

If nec­es­sary, fur­ther data pro­cess­ing oper­a­tions may be trig­gered after the start of a YouTube video, over which we have no con­trol.

YouTube is used in the inter­est of an appeal­ing pre­sen­ta­tion of our online offers. This con­sti­tutes a legit­i­mate inter­est with­in the mean­ing of Art. 6 para. 1 lit. f GDPR. If a cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is based exclu­sive­ly on Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion in the user’s end device (e.g. device fin­ger­print­ing) with­in the mean­ing of the TDDDG. The con­sent can be revoked at any time.

For more infor­ma­tion about pri­va­cy at YouTube, please see their pri­va­cy pol­i­cy at: https://policies.google.com/privacy?hl=de.

Google Fonts (local host­ing)

This site uses so-called Google Fonts, which are pro­vid­ed by Google, for the uni­form dis­play of fonts. The Google Fonts are installed local­ly. A con­nec­tion to Google servers does not take place.

For more infor­ma­tion on Google Fonts, please vis­it https://developers.google.com/fonts/faq and see Google’s pri­va­cy pol­i­cy: https://policies.google.com/privacy?hl=de.

Font Awe­some (local host­ing)

This site uses Font Awe­some for con­sis­tent font ren­der­ing. Font Awe­some is installed local­ly. A con­nec­tion to servers of Fonti­cons, Inc. does not take place.

For more infor­ma­tion about Font Awe­some, please see the Font Awe­some Pri­va­cy Pol­i­cy at: https://fontawesome.com/privacy.

Google Maps

This site uses the map ser­vice Google Maps. The provider is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

To use the func­tions of Google Maps, it is nec­es­sary to store your IP address. This infor­ma­tion is usu­al­ly trans­ferred to a Google serv­er in the USA and stored there. The provider of this site has no influ­ence on this data trans­mis­sion. If Google Maps is enabled, Google may use Google Fonts for the pur­pose of uni­form font dis­play. When you call up Google Maps, your brows­er loads the required web fonts into your brows­er cache in order to dis­play texts and fonts cor­rect­ly.

Google Maps is used in the inter­est of an appeal­ing pre­sen­ta­tion of our online offers and to make it easy to find the places we indi­cate on the web­site. This con­sti­tutes a legit­i­mate inter­est with­in the mean­ing of Art. 6 para. 1 lit. f GDPR. If a cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is based exclu­sive­ly on Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion in the user’s end device (e.g. device fin­ger­print­ing) with­in the mean­ing of the TDDDG. The con­sent can be revoked at any time.

Data trans­fer to the USA is based on the stan­dard con­trac­tu­al claus­es of the EU Com­mis­sion. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

You can find more infor­ma­tion on the han­dling of user data in Google’s pri­va­cy pol­i­cy: https://policies.google.com/privacy?hl=de.

Google reCAPTCHA

We use “Google reCAPTCHA” (here­inafter “reCAPTCHA”) on this web­site. The provider is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

The pur­pose of reCAPTCHA is to check whether the data input on this web­site (e.g. in a con­tact form) is made by a human or by an auto­mat­ed pro­gram. For this pur­pose, reCAPTCHA ana­lyzes the behav­ior of the web­site vis­i­tor based on var­i­ous char­ac­ter­is­tics. This analy­sis starts auto­mat­i­cal­ly as soon as the web­site vis­i­tor enters the web­site. For analy­sis pur­pos­es, reCAPTCHA eval­u­ates var­i­ous infor­ma­tion (e.g. IP address, time spent by the web­site vis­i­tor on the web­site or mouse move­ments made by the user). The data col­lect­ed dur­ing the analy­sis is for­ward­ed to Google.

The reCAPTCHA analy­ses run com­plete­ly in the back­ground. Web­site vis­i­tors are not made aware that an analy­sis is tak­ing place.

The stor­age and analy­sis of the data is based on Art. 6 para. 1 lit. f GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in pro­tect­ing its web offer­ings from abu­sive auto­mat­ed spy­ing and from SPAM. If a cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is based exclu­sive­ly on Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion in the user’s end device (e.g. device fin­ger­print­ing) with­in the mean­ing of the TDDDG. The con­sent can be revoked at any time.

For more infor­ma­tion about Google reCAPTCHA, please see the Google Pri­va­cy Pol­i­cy and the Google Terms of Ser­vice at the fol­low­ing links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

User­like with enhanced pri­va­cy mode

We use User­like (here­inafter “User­like”) to process user requests via our sup­port chan­nels or via live chat sys­tems. The provider is User­like UG (haf­tungs­beschränkt), Prob­steigasse 44 — 46, 50670 Cologne.

Mes­sages that you send to us can be stored in the User­like tick­et sys­tem or answered in live chat by our staff. When you com­mu­ni­cate with us via User­like, we and User­like store, among oth­er things, your name and e‑mail address, if you have pro­vid­ed them, and your chat his­to­ry. This data is sum­ma­rized in a pro­file.

The mes­sages sent to us will remain with us until you ask us to delete them or the pur­pose for data stor­age no longer applies (e.g. after your request has been processed). Manda­to­ry statu­to­ry pro­vi­sions — in par­tic­u­lar statu­to­ry reten­tion peri­ods — remain unaf­fect­ed.

The use of User­like is based on Art. 6 para. 1 lit. f GDPR. We have a legit­i­mate inter­est in pro­cess­ing your requests as quick­ly, reli­ably and effi­cient­ly as pos­si­ble. If a cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is based exclu­sive­ly on Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion in the user’s end device (e.g. device fin­ger­print­ing) with­in the mean­ing of the TDDDG. The con­sent can be revoked at any time.

For more infor­ma­tion, please see User­like’s pri­va­cy pol­i­cy: https://www.userlike.com/de/data-privacy and https://www.userlike.com/de/blog/live-chat-software-datenschutz-dsgvo.

Job pro­cess­ing

We have con­clud­ed a con­tract on order pro­cess­ing (AVV) for the use of the above ser­vice. This is a con­tract required by data pro­tec­tion law, which ensures that this process­es the per­son­al data of our web­site vis­i­tors only accord­ing to our instruc­tions and in com­pli­ance with the GDPR.

8. own ser­vices

Han­dling of appli­cant data

We offer you the oppor­tu­ni­ty to apply to us (e.g. by e‑mail, post or online appli­ca­tion form). In the fol­low­ing, we inform you about the scope, pur­pose and use of your per­son­al data col­lect­ed dur­ing the appli­ca­tion process. We assure that the col­lec­tion, pro­cess­ing and use of your data will be in accor­dance with applic­a­ble data pro­tec­tion law and all oth­er legal pro­vi­sions and that your data will be treat­ed in strict con­fi­dence.

Scope and pur­pose of data col­lec­tion

If you send us an appli­ca­tion, we will process your asso­ci­at­ed per­son­al data (e.g. con­tact and com­mu­ni­ca­tion data, appli­ca­tion doc­u­ments, notes tak­en dur­ing job inter­views, etc.) inso­far as this is nec­es­sary to decide on the estab­lish­ment of an employ­ment rela­tion­ship. The legal basis for this is Sec­tion 26 BDSG under Ger­man law (ini­ti­a­tion of an employ­ment rela­tion­ship), Art. 6 para. 1 lit. b GDPR (gen­er­al con­tract ini­ti­a­tion) and — if you have giv­en your con­sent — Art. 6 para. 1 lit. a GDPR. The con­sent can be revoked at any time. Your per­son­al data will only be passed on with­in our com­pa­ny to per­sons who are involved in pro­cess­ing your appli­ca­tion.

If the appli­ca­tion is suc­cess­ful, the data sub­mit­ted by you will be processed on the basis of § 26 BDSG and Art. 6 para. 1 lit. b DSGVO for the pur­pose of imple­ment­ing the employ­ment rela­tion­ship is stored in our data pro­cess­ing sys­tems.

Data reten­tion peri­od

If we are unable to make you a job offer, if you reject a job offer or with­draw your appli­ca­tion, we reserve the right to retain the data you have pro­vid­ed on the basis of our legit­i­mate inter­ests (Art. 6 para. 1 lit. f DSGVO) for up to 6 months from the end of the appli­ca­tion process (rejec­tion or with­draw­al of the appli­ca­tion). Sub­se­quent­ly, the data is delet­ed and the phys­i­cal appli­ca­tion doc­u­ments are destroyed. The stor­age serves in par­tic­u­lar evi­dence pur­pos­es in the event of a legal dis­pute. If it is evi­dent that the data will be required after the expiry of the 6‑month peri­od (e.g. due to an impend­ing or pend­ing legal dis­pute), dele­tion will only take place when the pur­pose for fur­ther stor­age no longer applies.

A longer stor­age can also take place if you have giv­en a cor­re­spond­ing con­sent (Art. 6 para. 1 lit. a DSGVO) or if legal stor­age oblig­a­tions oppose the dele­tion.

Inclu­sion in the appli­cant pool

If we do not make you a job offer, we may be able to include you in our appli­cant pool. In case of accep­tance, all doc­u­ments and infor­ma­tion from the appli­ca­tion will be trans­ferred to the appli­cant pool in order to con­tact you in case of suit­able vacan­cies.

Inclu­sion in the appli­cant pool takes place exclu­sive­ly on the basis of your express con­sent (Art. 6 para. 1 lit. a DSGVO). The sub­mis­sion of the con­sent is vol­un­tary and is not relat­ed to the cur­rent appli­ca­tion process. The data sub­ject may revoke his/her con­sent at any time. In this case, the data will be irrev­o­ca­bly delet­ed from the appli­cant pool, unless there are legal rea­sons for reten­tion.

The data from the appli­cant pool will be irrev­o­ca­bly delet­ed no lat­er than two years after con­sent has been giv­en.