• Name
• Email address
• Telephone number
• Company name

This information is processed solely for the purpose of responding to the inquiry, establishing and maintaining communication with the user, and – where applicable – preparing or performing a contractual relationship. The data will not be used for marketing purposes without the user’s explicit consent.

The provider may only process personal data of users if one of the following applies:

• Users have given their consent for one or more specific purposes.
• Data collection is necessary for the performance of a contract with the User and/or for taking steps related to this contract at their own request;
• Processing is necessary for compliance with a legal obligation to which the Owner is subject;
• Processing is related to a task carried out in the public interest or in the exercise of official authority vested in the Owner;
• Processing is necessary to protect the legitimate interests of the Owner or a third party.

In any case, the provider will be happy to provide information about the specific legal basis on which the processing is based, in particular whether the provision of personal data is a statutory or contractual obligation or a prerequisite for entering into a contract.

Unless otherwise specified in this document, personal data will be processed and stored for as long as required for the purposes for which it was collected, and may be retained for longer periods to comply with a legal obligation or based on the user's consent.
Therefore:

• Personal data collected for the purpose of fulfilling a contract concluded between the provider and the user will be stored until this contract has been fully fulfilled.
• Personal Data collected to pursue the Owner's legitimate interests will be retained for as long as necessary to fulfill those purposes. Users may obtain more information about the Owner's legitimate interests in the relevant sections of this document or by contacting the Owner.

Furthermore, the Owner is permitted to store personal data for a longer period if the User has consented to such processing, as long as the consent is not withdrawn. Furthermore, the Owner may be obliged to retain personal data for a longer period if required to fulfill a legal obligation or upon order of an authority.

After the retention period, personal data will be deleted. Therefore, the right to access, the right to erasure, the right to rectification, and the right to data portability cannot be asserted after the retention period has expired.

Users may exercise certain rights with respect to their data processed by the Owner.
To the extent permitted by law, Users have the right to:

• Revoke consent at any time. If the User has previously consented to the processing of personal data, they can revoke their consent at any time.
• Object to the processing of their data. The User has the right to object to the processing of their data if the processing is based on a legal basis other than consent.
• Receive information about their data. The User has the right to know whether the Data is being processed by the Provider, to be informed about certain aspects of the processing, and to receive a copy of the data.
• Review and have it corrected. The User has the right to review the accuracy of their Data and to request its updating or correction.
• Request restriction of processing of their Data. Users have the right to restrict the processing of their Data. In this case, the Provider will not process the Data for any purpose other than storage.
• Request erasure or other removal of personal Data. Users have the right to request the Provider to erase their Data.
• Receive their Data and have it transferred to another controller. The user has the right to receive his or her data in a structured, common, and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance.
• Locate a complaint. Users have the right to lodge a complaint with the competent supervisory authority.

Users also have the right to obtain information about the legal basis for the transfer of Data abroad or to an international organization governed by public international law or established by two or more countries, such as the UN, as well as about the security measures taken by the Owner to protect their Data.

If personal data is processed in the public interest, in the exercise of an official authority vested in the Owner, or to protect the legitimate interests of the Owner, the User may object to such processing by providing a justification related to his or her particular situation.

‍
Users are informed that they can object to the processing of personal data for direct marketing purposes at any time and free of charge and without providing any reason. If the User objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes. Users can find out whether the Owner processes personal data for direct marketing purposes by checking the relevant sections of this document.

Any requests to exercise User rights can be directed to the Owner using the contact details provided in this document. These requests are free of charge and will be answered by the Owner as soon as possible, and at the latest within one month, providing Users with the information required by law.

Any rectification or erasure of Personal Data or restriction of processing will be communicated by the Owner to each recipient to whom the Personal Data has been disclosed, in case of such request.

Users may exercise certain rights regarding their data, within the limits of the law, including the following:

• Right to access personal data;
• the right to object to the processing of their personal data (which also allows users to request the restriction of processing of personal data, the erasure or destruction of personal data, and the prohibition of the disclosure of certain personal data to third parties);
• the right to receive their personal data and to transmit them to another controller (data portability);
• the right to request the rectification of inaccurate personal data.