Marc O’Polo Einzelhandels GmbH
Hofgartenstraße 1, 83071 Stephanskirchen
E-Mail: service@marc-o-polo.de
Telephone: 00 800 10221022 (free service hotline)

Hofgartenstraße 1, 83071 Stephanskirchen
Data protection officer
E-Mail: dataschutz@qolzirvaxune.site

When you use the website or app for information purposes, certain information – such as your IP address – is sent to our website’s server by the browser on your device for technical reasons. We process this information to provide you with the website content you have accessed. To ensure the security of the IT infrastructure used to provide the website, this information is also temporarily stored in a so-called web server log file.

To provide the search functions on our website or app, data that you enter into our search functions is temporarily processed on our web server.

To provide the consent management functions for our website or app (e.g. for the use of certain cookie-based technologies), information regarding your consent to cookies (🡪section H) is stored on your device. The cookies and the information stored in them can be read whilst you are visiting our website to determine whether and which consents you have given. Data is also processed temporarily on our web server to provide the language selection function, so that we can display the content of the website or app you have accessed in your chosen language.

More detailed information about this is available below:

Prov ided you have given your consent to this in our privacy and cookie settings, we use certain third-party marketing tools (e.g. from social networks, search engine operators and advertising networks) on our website and in our app (i.e. if you have given your consent to the ‘Marketing’ category or to individual marketing tools listed under this category in our Privacy and Cookie Settings). The respective providers are listed in → Section B.II.3, and you can select specific providers in our Privacy and Cookie Settings.

These marketing tools are used for the following purposes:

• Conversion tracking, including app attribution and deep linking

“Conversions” are usage activities on our website or app that we have defined. “Conversion tracking” is a process that records what happens after our adverts have been displayed to you on the website of the provider of the relevant marketing tool (e.g. their search engine or social network) or on other websites that cooperate with that provider, or after you have interacted with these adverts. For example, we can see whether you subsequently carried out a specific action on our website or in our app (e.g. placing an order or signing up for our newsletter).

As part of app-based conversion tracking , the events recorded in our app (such as purchases, adding items to the shopping basket (‘add-to-cart’) and similar interactions on the website or in the app) are processed via a so-called mobile measurement partner and sent back to the relevant marketing partners (such as Meta, Google Ads, etc.) (‘postbacks’). This enables the marketing partners to measure the success of the advertising campaigns displayed there and to optimise them technically.

App-based conversion tracking also includes app attribution. By ‘app attribution’, we mean a process that enables us to analyse and measure the specific marketing channels or advertising campaigns (e.g. an advert on a social media platform, in search engines or on partner websites) through which users became aware of our app and subsequently downloaded and installed it on their device. When you click on one of our adverts, this click is recorded. If you install and open the app within a specific time window, the attribution tool links this click – in pseudonymised form – to the app installation.

In this way, we can see which keywords, adverts, ad groups and campaigns lead to the user actions we are seeking. We can also track how our return on investment (ROI) is generated and make informed decisions regarding our advertising spend. Furthermore, we can automatically optimise our advertising campaigns in line with our business objectives. This enables us to identify which marketing measures, adverts and campaigns are particularly successful, how to use our advertising budgets efficiently, and what the return on investment (ROI) of our mobile advertising activities is.

In addition, ‘deep linking’ technology can be used to redirect you directly to the advertised product, content or offer within our app after you click on an advertising link. If the app is not yet installed, the redirection takes place after the app has been downloaded and opened for the first time. To do this, technical identifiers such as a click ID, your IP address, device information and session data are processed for a short period.

• Remarketing (including profile enrichment by the provider of the relevant marketing tool we use, personalisation of advertising and profile enrichment by us, as well as the determination of billing-related circumstances of ad placement by the provider of the relevant marketing tool we use)

‘Remarketing’ (or ‘retargeting’) means that we can specifically target users who have already interacted with our website or our app, for example with adverts on the website of the provider of the relevant marketing tool (e.g. their search engine or social network) or on other websites that cooperate with the relevant provider.

For these purposes, a unique ID may be assigned to your device, which is linked to a profile. This ID may be stored in cookies (--> Section H.III.2) on your device, as well as in the profile maintained by the provider of the relevant marketing tool. When you visit our website or app, as well as when you visit the website of the provider of the relevant marketing tool (e.g. their search engine or social network) or other websites that cooperate with that provider, the ID stored in cookies on your device may be read, thereby enabling your device to be recognised on the basis of this ID. In this case, the profile may be enriched (e.g. with information about your orders with us, items viewed on our website or in the app, or your interactions with our adverts on other websites). Conversion tracking and remarketing are carried out on the basis of this information. The provider of the respective marketing tool we use makes analyses or further information, generated on the basis of the data collected, available to us solely in aggregated, anonymised form. As a rule, we cannot link the information provided to us to any specific individual.

However, instead of using the ID, a link to your profile may also be established by matching hashed contact information or, where applicable, by linking it to your account with the relevant provider (e.g. your Google Account, if you have enabled personalised advertising there). In this way, actions you carry out using different devices may also be attributed to you as a unique user.

Provided that, in addition to giving your consent to one or more of the ‘marketing’ tools, you have also given your consent to ‘personalisation’ in general or at least to personalisation via ‘Bloomreach’ (you can check this via our privacy and cookie settings), we use the data on transactions, preferences and interests from your profile as criteria for creating segmented customer target groups. The contact details of these target groups are transmitted in hashed form to the relevant providers (e.g. social media platforms, search engine operators and advertising networks) and used to serve adverts, so that these can be tailored even more effectively to your preferences and interests. This may also include ‘guest orders’ that we have been able to link to your customer account, or orders placed in one of our high-street shops that have been linked to your customer account.

We are jointly responsible, in some cases, with the respective provider of the marketing tools for the use of these tools on our website and in our app. Any further processing of the data by the respective provider for its own purposes or for the purposes of third parties (for example, to create target groups for other advertising clients) is the sole responsibility of the respective provider (which is not covered by this privacy policy). Information on whether we are jointly responsible with the relevant provider, and a reference to the relevant providers’ privacy policies, can be found below.

Detailed information on this is provided below:

Provided you have given your consent to this in our data privacy and cookie settings we use certain web analytics technologies on our website or app (i.e. if you have consented to the ‘Analytics’ category or to individual web analytics technologies listed under this category in our Privacy and Cookie Settings). The respective providers are listed in → Section B.III.3, and you can select specific technologies in our privacy and cookie settings.

Web analytics enables the collection and analysis of information about the activities of users of our website or app. These web analytics technologies are used for the following purposes:

• Improvement of the website and app, including through so-called “A/B tests” (comparison of user behaviour across different layout variants of our website)

• Better achievement of the website and app’s objectives ( e.g. increasing page views) 

• Calculating remuneration for advertising partners (affiliates) 

One specific aspect of web analytics is the creation of video recordings of the content of our users’ browser windows when they visit our website, using monitoring technology from Datadog and Mouseflow. The video recordings reveal the details of interactions with our website (for example, by showing mouse movements), which is necessary in certain error scenarios where aggregated insights from regular web analytics are insufficient.

We use cookies for these purposes (🡪 Section H.III.3).

You will find more detailed information on this below:

Provided you have given your consent to this in our Privacy and Cookie Settings, we use certain personalisation technologies on our website and in our app within our online shop and our newsletters, as well as for our direct mail (i.e. if you have consented to the ‘Personalisation’ category or to individual personalisation technologies listed under this category in our Privacy and Cookie Settings). The respective providers are listed in → Section B.IV.3, and you can select specific technologies in our Privacy and Cookie Settings.

These personalisation technologies are used for the following purposes:

• Engaging with users via product recommendations at specific points in the online shop (website and app) based on the usage behaviour of users of our website and app 

• Provision of the size guide tool on the website

• Personalisation of content on our website or app (in particular product recommendations) based on the usage behaviour of users of our website and app, and, where applicable, based on the data stored in our users’ customer accounts

• Collecting and analysing the behaviour of website or app users in order to use this information to personalise our newsletters and direct mail, tailoring them to the individual subscriber

For this purpose, we use cookies or similar technologies (🡪 Section H.III.4). 

You will find detailed information on this below:

On our website and in our app, you have the option to use our MARC O’POLO online shops, which are accessible in different country-specific versions via country-specific URLs (e.g. for Germany at http://www.qolzirvaxune.site/de-de/ ) (hereinafter referred to as ‘country shops’).  An overview of the individual country shops can be found in Part A, Section 1.1 of our Terms and Conditions. The country shops on the app and website are hereinafter collectively referred to as the ‘online shop’.

 When you use our Online Shop, we process various items of personal data that you provide to us, for example via the order form, for the following purposes:

• To provide various functions in our online shop, 

• for the conclusion, execution and cancellation of sales contracts, 

• to send emails containing advertising for our own similar products in accordance with the provisions of Section 7(3) of the Unfair Competition Act (UWG), 

• to ensure the security of the IT infrastructure used to operate the online shop, 

• to manage and enforce our claims for the purchase price,

• to provide the review function, 

• to provide address correction suggestions during the ‘Checkout’ stage of the ordering process,

• to carry out an order and risk assessment prior to the completion of the order,

• to carry out a fraud and creditworthiness check during and after the order is completed, 

• to carry out a sustainability check, 

• to carry out customer surveys 

• for market research purposes, and

• for evidential purposes and to fulfil statutory retention obligations 

You can place orders in our Online Shop ‘as a guest’ (website only) or, alternatively, via a customer account. Use of our customer account in the Country Shops is exclusively available to participants in the MARC O’POLO loyalty programme COMMUNITY . Details of the processing of personal data relating to participants in the loyalty programme, including the use of the member account, are set out in Section E of this privacy policy.

Below you will find detailed information on this:

We offer you the option to subscribe to our email and/or WhatsApp newsletter – for example, via our website or app – as well as to our push notifications via our app. The newsletter and push notifications keep you informed about new outfits and the latest product trends, as well as our special events, promotions or competitions. We also offer the option to subscribe to our email and/or WhatsApp newsletter directly via social media platforms such as Meta and Instagram. 

We can tailor the content of the newsletter and push notifications (where we have such data) to your individual preferences based on your orders in our online shop (🡪 Section C) or your membership of the MARC O’POLO COMMUNITY (🡪 Section E) (e.g. based on your purchase history, your orders via your member account or your Memberrybonus points balance). If, in addition to your email newsletter subscription, you have also given your ‘personalisation ’ consent ( or at least consent to personalisation via Emarsys (newsletter) or Bloomreach (app)) (🡪 Section B.IV), we will expand the email newsletter to include further personalised content (e.g. relating to products you have added to your basket or which we recommend based on the product category you last clicked on).

When you subscribe to the email and WhatsApp newsletters, certain information is collected, such as your email address for the email newsletter or your telephone number for the WhatsApp newsletter.When you sign up for our push notifications, information such as your device type and operating system is collected.

We process this information 

• to confirm your subscription  

• to provide the relevant newsletter

• to ensure security 

• for evidential purposes to assert, exercise or defend legal claims

• for market research purposes, if you take part in customer surveys. 

When you subscribe to the newsletter via WhatsApp, we will add your telephone number to your member account or email newsletter if you provide us with the email address you also use in your member account so that we can link the two. When you use the form to subscribe to or unsubscribe from our email newsletter on the website, in the app or from our WhatsApp newsletter, certain information (such as your IP address) is sent to our website’s server or our WhatsApp provider for technical reasons via the browser or app used on your device. We process this information to provide the form for subscribing to and unsubscribing from our newsletter on the website, in the app and on WhatsApp. 

You will find detailed information on this below:

We operate the MARC O’POLO COMMUNITY loyalty programme. In connection with the operation of the loyalty programme, we process participants’ personal data, in particular for

• Provision of the web applications in the online shop, where participants can provide their data to register for the loyalty programme, 

• to carry out the double opt-in procedure, 

• to operate a customer database, 

• to provide the loyalty programme services described in Part C of the Terms and Conditions and on the website, 

• to carry out customer surveys, 

• to send promotional content by post, to communicate about the programme by post, WhatsApp, push notifications, email or telephone, 

• to ensure IT security in the online shop, and 

• for evidential purposes or to comply with statutory retention obligations. 

Provided you have given your consent, we also process your data to send personalised promotional content via the communication channels you have selected, to carry out a personalised analysis of your affinity with MARC O’POLO products, and to display personalised banner adverts.

The loyalty programme includes high-street stores operated by us or by our retail partners (participating high-street stores hereinafter collectively referred to as ‘High-Street Stores’). An overview of the current participating physical stores can be viewed in our Store Finder at http://www.qolzirvaxune.site/stores. There, you can view the nearest stores to a specified location or postcode. We mark the physical stores participating in the loyalty programme with graphic icons in the overview of your search results in the Store Finder.  In addition, the country-specific shops operated by us take part in the loyalty programme; these can be accessed via the website (for Germany, for example, http://www.qolzirvaxune.site/de-de/ ) or via the terminals in the physical stores (the version of the country-specific shop accessible via the terminals in the physical stores is referred to below as the ‘store version’). An overview of the individual country shops can be found in Part A, Section 1.1 of our Terms and Conditions. In the following, the physical shops and the respective country shop, including the ‘Store Version’, are collectively referred to as ‘Participating Shops’.

Below you will find detailed information on this: 

On the website and in the app, we offer you the option to get in touch with our customer service team via a contact form or a chat function. Furthermore, we offer you the option to speak to a member of our customer service team via our helpline or to contact our customer service team by email.

We process the information you provide to our customer service team in order to deal with your enquiry, for example, questions regarding an order. Where necessary, we also store this information for evidential purposes to assert, exercise or defend legal claims, or to comply with statutory retention obligations, in particular those under commercial and tax law. If you have verified your status as a participant in our loyalty programme, we also store this data for a period of 12 months from the resolution of the enquiry, so that we can take it into account in the event of any further enquiries.

Insofar as this is necessary to process your enquiry, we may also access further information that we may already hold in connection with your orders in our online shop (see Section C) or your participation in our loyalty programme (see Section E).

When using the contact forms or the chat function on the website or in the app , the browser or the app , certain information is sent to our website’s server for technical reasons, such as your IP address. We process this information to provide the contact forms/chats on the website and to ensure the security of the IT infrastructure used for this purpose.

To measure the quality of our customer service, we compile aggregated analyses of the nature of enquiries and the time taken to process each one. With your consent, we also record your telephone calls with our customer service team and analyse these recordings to improve our customer service.

You will find detailed information on this below:

On our website, our app and, where applicable, via other channels (e.g. entry postcards), we occasionally offer the opportunity to take part in various competitions. We process the information you provide in the relevant entry forms (which may be pre-filled for our subscribers to reminder emails) for the purpose of running the relevant prize draw and awarding the relevant prizes in accordance with the relevant terms and conditions of participation, which you have accepted.

In addition, for some competitions, we offer you the option to sign up for reminder emails, through which we will inform you about our competitions, as explained in more detail in the relevant registration form. We process the information collected in this context to confirm your subscription and to provide the reminder emails.

We also store the information collected in connection with participation in prize draws or the subscription to reminder emails for evidential purposes, to enable us to assert, exercise or defend legal claims and, where applicable, to fulfil statutory retention obligations, in particular those under commercial and tax law.

When you take part in competitions or subscribe to reminder emails via our website or app (e.g. competition or registration forms), the browser used on your device or the app, for technical reasons, certain information is sent to our website’s server, such as your IP address. We process this information to make the forms available on the website or app. To ensure the security of the IT infrastructure used to operate the website, this information is also temporarily stored in a so-called web server log file. When using such forms on our website, you often also have the option to subscribe to our newsletter. More detailed information on the processing of personal data in connection with the newsletter can be found in Section D of this privacy policy.

Below you will find more detailed information on the processing of personal data in connection with taking part in competitions and signing up for reminder emails on our website or app:

In connection with our website or app and as well as the services provided on the website or app, we use cookies and similar tracking technologies. In doing so, we utilise the processing and storage functions of the browser on your device or the app and collect information from the browser’s storage on your device or the app. Detailed information on this is provided below.

Cookies on our website: Cookies are small text files containing information that may be placed on the user’s device via the browser when they visit a website. When the website is visited again using the same device, the cookie and the information stored within it can be retrieved.

Similar technologies in our app (SDKs and local storage):
For technical reasons, our mobile app does not use traditional web cookies. Instead, we use similar technologies to fulfil the same purposes (e.g. statistical measurements, error analysis, optimised user guidance and marketing):

• Local app storage (Shared Preferences / NSUserDefaults): These are local, protected storage areas within your smartphone’s operating system (Android/iOS) in which the app stores small fragments of data (e.g. your login status, language settings or a pseudonymous ID) locally. Similar to cookies, this data remains stored on your device either temporarily or permanently until the app is uninstalled or the app storage is manually cleared.

• Software Development Kits (SDKs): An SDK is a programming interface provided by the relevant third-party provider (e.g. Google, Bloomreach, AppsFlyer) that is integrated directly into our app’s code. It enables the app to read pseudonymised interaction data and device-specific identifiers (such as the advertising IDs ‘IDFA’ for iOS or ‘GAID’ for Android) and to transmit them to the relevant provider for analysis or marketing purposes.

Legally, these app technologies are subject to the same data protection requirements as web cookies (in particular Section 25 of the TDDDG). Unless they are technically absolutely necessary for the app to function, we use them only with your express consent (opt-in).

When you use the app, log data is generated via the Hypertext Transfer Protocol (Secure) (HTTP(S)). The following data is processed: your device (model and IMEI), operating system, the (sub-)page accessed, the date and time of access, country (based on IP address), and technical usage data (e.g. which products were viewed, shopping basket information, completion of a purchase). So-called IP anonymisation is enabled in the app. This means that the IP address, which is transmitted for technical reasons,isanonymised prior to storage by truncating the IP address (by deleting the last octet of the IP address).

1. First-party and third-party cookies/technologies

Depending on where a cookie originates, a distinction can be made between so-called first-party cookies and third-party cookies: 

2. Transient and persistent cookies

Depending on their duration, a distinction can also be made between so-called transient and persistent cookies: 

3. Cookies requiring consent and those not requiring consent

Depending on their function and intended purpose, the use of certain cookies may require the user’s consent. In this respect, cookies can be categorised according to whether the user’s consent is required for their use:

1. Giving consent to the use of cookies and similar technologies (app) and managing cookies via the privacy and cookie settings

Where the user’s consent is required for the use of certain cookies, we will only set these cookies when you use the website and the app if you have previously given your consent to do so. Information on whether consent is required for the use of a cookie can be found in the details regarding the cookies used on this website in Section H.III of this privacy policy.

Consent on the website (cookie banner): When you visit our website, we display a ‘cookie banner’ in which you can give your consent to the use of cookies on this website by clicking a button. By clicking the button provided for this purpose, you have the option to consent to the use of all cookies described in detail in Section H.III of this Privacy Policy. Alternatively, by clicking on the ‘Cookie Settings’ button (LINK TO https://www.qolzirvaxune.site/on/demandware.store/Sites-MOP-Site/de_DE/Home-CookieSettings), you can make a personalised selection of cookies and adjust your selection at a later date. We also store your consent and, where applicable, your individual cookie selections on your device in the form of a cookie (‘opt-in cookie’) so that, the next time you visit the website, we can determine whether you have already given your consent. The opt-in cookie has a limited validity period of a maximum of 6 months. 

Consent within the app (in-app consent banner): When you launch our app for the first time, we display a ‘consent banner’. Here, you can specify whether you wish to consent to the use of analytics, marketing and personalisation technologies within the app.

You can withdraw or amend this consent at any time, with effect for the future, directly in the app’s settings under the ‘Privacy and Cookie Settings’ menu item. As soon as you withdraw your consent, the relevant SDK will be deactivated and no further data will be read, stored locally or transmitted.

Strictly necessary cookies cannot be disabled via this website’s cookie management function. However, you can disable these cookies generally in your browser at any time.

2. Managing cookies via browser settings

You can also manage the use of cookies via your browser settings. Different browsers offer different ways of configuring cookie settings. You can find further detailed information on this, for example, at http://www.allaboutcookies.org/ge/cookies-verwalten

However, we would like to point out that some features of the website may not work, or may no longer work properly, if you disable cookies in your browser altogether.

The following cookies may be used on this website:

1. Essential cookies for the basic use of the website. 

No consent is required for these cookies.

2. Marketing cookies for the use of marketing technology and advertising networks

These cookies require your consent.

Google Ads remarketing cookies

These cookies are used by the web tracking tool Google Ads Remarketing which strategically targets users of the website for the purposes of (re)targeting (section B.II). At the time this privacy policy was generated, the following cookies were used for this purpose. In the meantime, our advertising partner might have added new cookies or modified the purposes, content and durations of storage of its cookies within its own field of responsibility. Therefore, for more information, please also refer to the privacy policy of our advertising partner; a link can be found in section B.II.

3. Analytics cookies for web analytics technologies

These cookies require your consent.

4. Personalisation cookies for personalisation technologies

These cookies require your consent.

The following SDKs may be used in the app:

1. Essential SDKs and technologies for the informational use of the app.

No consent is required for these SDKs and technologies.

2. Marketing SDKs for the use of marketing technologies and advertising networks.

Your consent is required for these SDKs and technologies.

3. Analytics SDKs for the use of web analytics technologies

Your consent is required for these SDKs and technologies.

4. Personalisation SDKs for the use of personalisation technologies

Your consent is required for these SDKs and technologies.

• Push notifications: With your consent, the app may send push notifications to your device. You can change this permission at any time in your device settings. The various push options and their respective purposes are described in Section D .

• Tracking permission: Depending on the operating system, you can allow or deny the app access to tracking technologies via a system prompt and subsequently change this permission in your device settings – on iOS, in particular via App Tracking Transparency (ATT). (Irrespective of this, you can select separately in the consent banner whether your data may be used for analytics and/or marketing purposes.)

As a data subject, you have the following rights with regard to the processing of your personal data:

● Right of access (Article 15 GDPR)

● Right to rectification (Article 16 GDPR)

● Right to erasure (‘right to be forgotten’) (Article 17 GDPR)

● Right to restriction of processing (Article 18 GDPR)

● Right to data portability (Article 20 GDPR)

● Right to object (Article 21 GDPR)

● Right to withdraw consent (Article 7(3) GDPR)

● Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

If you wish to exercise your rights, you can contact us using the information provided in section A.

For information about any particular methods and mechanisms that make it easier for you to exercise your rights, especially your rights to data portability and to object, please refer to the information about how personal data are processed in sections B to F of this privacy policy.

Below you will find more detailed information about your rights with regard to the processing of your personal data:

As a data subject, you have a right to rectification in line with the requirements of Article 16 GDPR.

In particular, this means that you have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you, as well as the right to have incomplete personal data completed.

For full details about your right to rectification, please refer to Article 16 GDPR at http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

As a data subject, you have a right to access information in line with the requirements of Article 15 GDPR.

In particular, this means that you have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed. If this is the case, you also have a right to information about these personal data and to the information set out in Article 15(1) GDPR. In particular, this information includes the purposes of the processing, the categories of personal data concerned and the recipients or categories of recipient to whom the personal data have been or will be disclosed (points (a), (b) and (c) of Article 15(1) GDPR).

For full details about your right of access, please refer to Article 15 GDPR at http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

As a data subject, you have a right to erasure (‘right to be forgotten’) in line with the requirements of Article 17 GDPR.

This means that you have the right to obtain from us the erasure of personal data concerning you without undue delay, and we have the obligation to erase personal data without undue delay where one of the grounds set out in Article 17(1) GDPR applies. For example, this can be the case when personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed (point (a) of Article 17(1) GDPR).

Where we have made the personal data public and are obliged to erase the personal data, we, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data (Article 17(2) GDPR).

In an exceptional case, the right to erasure (‘right to be forgotten’) does not apply to the extent that the processing is necessary for the reasons set out in Article 17(3) GDPR. For example, this can be the cast where the processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims (points (b) and (e) of Article 17(3) GDPR).

For full details about your right to erasure, please refer to Article 17 GDPR at http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

As a data subject, you have a right to restriction of processing in line with the requirements of Article 18 GDPR.

This means that you have the right to obtain from us restriction of processing if one of the criteria set out in Article 18(1) GDPR is met. This can be the case, for example, if you contest the accuracy of the personal data. In this case, processing shall be restricted for a period enabling us to verify the accuracy of the personal data (point (a) of Article 18(1) GDPR).

Restriction means the marking of stored personal data with the aim of limiting their processing in the future (Article 4(3) GDPR).

For full details about your right to restriction of processing, please refer to Article 18 GDPR at http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

As a data subject, you have a right to data portability under the conditions of Article 20 of the General Data Protection Regulation.

This means that you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) of the General Data Protection Regulation or on a contract pursuant to point (b) of Article 6(1) of the General Data Protection Regulation and the processing is carried out by automated means (Article 20(1) of the General Data Protection Regulation).

For information on whether processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the General Data Protection Regulation or on a contract pursuant to Article 6(1)(b) of the General Data Protection Regulation, please refer to the information on the legal bases of processing in sections B to F of this data protection information.

In exercising your right to data portability, you also have the right to have the personal data transmitted directly from us to another controller, where technically feasible (Article 20(2) of the General Data Protection Regulation).

The full scope of your right to restriction of processing can be found in Article 20 of the General Data Protection Regulation, which you can access at the following link: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679.

As a data subject, you have a right to object in line with the requirements of Article 21 GDPR.

We shall expressly make you aware of your right to object when we first communicate with you at the very latest.

More detailed information about this is available below:

1. right to object on grounds relating to the particular situation of the data subject

As the data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) of the General Data Protection Regulation, including profiling based on those provisions.

Information on whether processing is based on Article 6(1)(e) or (f) of the General Data Protection Regulation can be found in the information on the legal bases of processing in sections B to F of this data protection information.

In the event of an objection on grounds relating to your particular situation, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

The full scope of your right to object can be found in Article 21 of the General Data Protection Regulation, which you can access at the following link: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679.

2. right to object to direct marketing

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Information on whether and to what extent personal data is processed for direct marketing purposes can be found in the information on the purposes of processing in sections B to F of this data protection information.

In the event of an objection to processing for direct marketing purposes, we will no longer process the personal data concerned for these purposes.

The full scope of your right to object can be found in Article 21 of the General Data Protection Regulation, which you can access at the following link: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679.

If processing is based on consent in accordance with point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR, you, the data subject, have the right to withdraw your consent at any time pursuant to Article 7(3) GDPR. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. We shall make you aware of this before you grant consent.

For information about whether processing is taking place on the basis of consent in accordance with point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR, please refer to the information about the legal grounds on which processing is based in sections B to F of this privacy policy.

As a data subject, you have the right to lodge a complaint with a supervisory authority under the conditions of Article 77 of the General Data Protection Regulation.

The supervisory authority responsible for us is

Bavarian State Office for Data Protection Supervision

Promenade 18, 91522 Ansbach

poststelle@lda.bayern.de

+49 (0) 981 180093-0

The definitions of the terminology used in this privacy policy are the same as in the General Data Protection Regulation.

For full details about the definitions in the General Data Protection Regulation, please refer to Article 4 GDPR at http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

Below you will find more detailed information about the most important key terms of the General Data Protection Regulation on which this privacy policy is based:

● ‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

● ‘Data subject’ is the identified or identifiable natural person to whom personal data relate;

● ‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

● ‘Profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;

● ‘Controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

● ‘Processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

● ‘Recipient’ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

● ‘Third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;

● ‘International organisation’ means an organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries;

● ‘Third country’ means a country that is not a Member State of the European Union (EU) or European Economic Area (EEA);

● ‘Special categories of personal data’ means data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

This privacy policy is dated 07.08.2026.

Due to technical advancements and/or changes to statutory and/or official requirements, it might become necessary to amend this privacy policy.

The current version of the privacy policy is always available at www.qolzirvaxune.site.