Privacy Policy

1. Introduction

The following information is intended to provide you, as a ‘data subject’, with an overview of how we process your personal data and your rights under data protection legislation. In principle, it is possible to use our website without providing any personal data. However, if you wish to make use of specific services offered by our company via our website, the processing of personal data may be necessary. Where the processing of personal data is necessary and there is no legal basis for such processing, we will generally seek your consent.

The processing of personal data, such as your name, address or email address, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to the “3C Group”. The purpose of this privacy policy is to inform you about the scope and purpose of the personal data we collect, use and process.

As the data controller, we have implemented numerous technical and organisational measures to ensure the most comprehensive possible protection of the personal data processed via this website. Nevertheless, internet-based data transmissions may, in principle, be subject to security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, you are free to provide us with personal data via alternative means, such as by telephone or post.

Information on other data processing activities

As a company, we process personal data not only on our website but also in many other processes. In order to provide you, as a data subject, with as much detailed information as possible regarding these processing purposes, we have compiled the following information on the processing activities listed here, thereby fulfilling our statutory information obligations in accordance with Articles 13–14 of the GDPR:

Data protection information on the handling of applicant data
Data protection information on video surveillance
Data protection information for contacts

Should you require further information that you cannot find here or in the detailed privacy policy below, please do not hesitate to contact our Data Protection Officer.

2. Data controller

The data controller within the meaning of the GDPR is:

3C Holding GmbH
Am Jägerheim 1c
33378 Rheda-Wiedenbrück, Germany

Telephone: +49 5242 9309-910
Email: info@remove-this.3c-grupperemove-this..remove-this.de

Representatives of the data controller: Carl-Christoph Held, Markus Kemming

3. Data Protection Officer

You can contact the Data Protection Officer as follows:

Telephone: +49 5221 87292-0
Email: datenschutz-3c-gruppe@remove-this.audatisremove-this..remove-this.de

You may contact our Data Protection Officer directly at any time with any questions or suggestions regarding data protection.

4. Definitions

This privacy policy is based on the terminology used by the European legislators and regulators when enacting the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easy to read and understand for the general public as well as for our customers and business partners. To ensure this, we would like to explain the terms used at the outset.

In this privacy policy, we use the following terms, amongst others:

1. Personal data

Personal data is any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics that reflect the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2. Data subject

A data subject is any identified or identifiable natural person whose personal data is processed by the data controller (our company).

3. Processing

Processing means any operation or set of operations which is carried out on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or any other form of making available, the matching or linking, the restriction, erasure or destruction.

4. Restriction of processing

Restriction of processing means the marking of stored personal data with the aim of restricting its future processing.

5. Profiling

Profiling means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements of that natural person.

6. Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures that ensure the personal data is not attributed to an identified or identifiable natural person.

7. Data processor

A data processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.

8. Recipient

A recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, irrespective of whether or not they are a third party. However, public authorities which may receive personal data in the course of a specific investigation mandate under Union law or the law of the Member States shall not be regarded as recipients.

9. Third party

A third party is a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.

10. Consent

Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes, by a statement or by a clear affirmative action, by which the data subject indicates that they agree to the processing of personal data relating to them.

5. Legal basis for processing

Article 6(1)(a) of the GDPR (in conjunction with Section 25(1) of the TDDDG (formerly the TTDSG)) serves as the legal basis for our company’s processing operations where we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which you are a party – as is the case, for example, with processing operations required for the delivery of goods or the provision of other services or consideration – the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing operations necessary for the implementation of pre-contractual measures, such as in cases of enquiries regarding our products or services.

Where our company is subject to a legal obligation which necessitates the processing of personal data, such as to fulfil tax obligations, the processing is based on Article 6(1)(c) of the GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were to be injured on our premises and their name, age, health insurance details or other vital information subsequently had to be disclosed to a doctor, a hospital or other third parties. In such cases, the processing would be based on Article 6(1)(d) of the GDPR.

Finally, processing operations may be based on Article 6(1)(f) of the GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal bases, where the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not take precedence. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this regard, the legislator took the view that a legitimate interest may be assumed if you are a customer of our company (Recital 47, second sentence, of the GDPR).

Our services are generally aimed at adults. Persons under the age of 16 must not provide us with any personal data without the consent of their parents or legal guardians. We do not request, collect or pass on any personal data from children or young people to third parties.

6. Contact and transfer of data to third parties

6.1 Contact

Personal data is collected when you contact us (e.g. by email). This data is stored and used exclusively for the purpose of responding to your enquiry or for establishing contact and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) of the GDPR. If your enquiry is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted once your enquiry has been fully processed; this is the case when it is clear from the circumstances that the matter in question has been definitively resolved and there are no statutory retention obligations preventing its deletion.

6.2 Transfer of data to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

We will only disclose your personal data to third parties if:

1. you have given us your explicit consent to do so in accordance with Article 6(1)(a) of the GDPR,

2. the disclosure is permitted under Article 6(1)(f) of the GDPR to safeguard our legitimate interests and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,

3. there is a legal obligation to disclose the data under Article 6(1)(c) of the GDPR, and

4. this is permitted by law and is necessary, in accordance with Article 6(1)(b) of the GDPR, for the performance of contractual relationships with you.

As part of the processing operations described in this privacy policy, personal data may be transferred to the USA. Companies in the USA are deemed to provide an adequate level of data protection only if they have been certified under the EU-US Data Privacy Framework and the EU Commission’s adequacy decision pursuant to Article 45 of the GDPR therefore applies. We have explicitly stated this in the privacy policy for the service providers concerned. To protect your data in all other cases, we have entered into data processing agreements based on the European Commission’s Standard Contractual Clauses. Where the Standard Contractual Clauses are insufficient to ensure an adequate level of security, your consent may serve as the legal basis for the transfer to third countries in accordance with Article 49(1)(a) of the GDPR. This does not apply, however, to data transfers to third countries for which the European Commission has issued an adequacy decision in accordance with Article 45 of the GDPR.

7. Technology

7.1 SSL/TLS encryption

This website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login details or contact enquiries, which you send to us as the operator. You can recognise an encrypted connection by the fact that the browser’s address bar displays “https://” instead of “http://”, and by the padlock symbol in your browser’s address bar.

We use this technology to protect the data you send to us.

7.2 Data collection when visiting the website

When you use our website purely for information purposes – i.e. without registering or otherwise transmitting information to us – we only collect data that your browser transmits to our server (in so-called ‘server log files’). Our website collects a range of general data and information each time you or an automated system accesses a page. This general data and information is stored in the server’s log files. The following may be collected:

1. the browser types and versions used,

2. the operating system used by the accessing system,

3. the website from which an accessing system reaches our website (known as a ‘referrer’),

4. the sub-pages on our website accessed via an accessing system,

5. the date and time of access to the website,

6. an Internet Protocol address (IP address) and,

7. the internet service provider of the accessing system.

We do not draw any conclusions about your identity when using this general data and information. Rather, this information is required in order to

1. deliver the content of our website correctly,

2. optimise the content of our website and the advertising displayed on it,

3. ensure the continued functionality of our IT systems and the technology underpinning our website; and

4. to provide law enforcement agencies with the information necessary for criminal prosecution in the event of a cyber-attack.

We therefore analyse this collected data and information, on the one hand, for statistical purposes and, on the other hand, with the aim of enhancing data protection and data security within our organisation, ultimately to ensure an optimal level of protection for the personal data we process. The data from the server log files is stored separately from any personal data provided by a data subject.

The legal basis for data processing is Article 6(1), first sentence, point (f) of the GDPR. Our legitimate interest arises from the purposes for data collection listed above.

7.3 Hosting by Mittwald

We host our website with Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp (hereinafter referred to as ‘Mittwald’).

When you visit our website, your personal data (e.g. IP addresses in log files) is processed on Mittwald’s servers.

The use of Mittwald is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in ensuring that our website is presented, made available and secured as reliably as possible.

We have entered into a data processing agreement (DPA) with Mittwald in accordance with Article 28 of the GDPR. This is a contract required under data protection law, which ensures that Mittwald processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Further information on Mittwald’s data protection policy can be found at: https://www.mittwald.de/datenschutz

8. Cookies

8.1 General information on cookies

Cookies are small files that your browser creates automatically and which are stored on your IT system (laptop, tablet, smartphone, etc.) when you visit our website.

The cookie stores information relating to the specific device you are using. However, this does not mean that we thereby gain direct knowledge of your identity.

The use of cookies serves to make your experience of our website more convenient. For example, we use so-called session cookies to recognise that you have already visited individual pages on our website. These are automatically deleted when you leave our website.

In addition, to optimise user-friendliness, we also use temporary cookies which are stored on your device for a specific, defined period. If you visit our site again to use our services, the system will automatically recognise that you have previously visited us and recall the details and settings you have entered, so that you do not have to enter them again.

We also use cookies to collect statistical data on the use of our website and to analyse our offering for you, with a view to optimising it. These cookies enable us to automatically recognise that you have previously visited our website when you return. The cookies set in this way are automatically deleted after a defined period. The respective storage periods for the cookies can be found in the settings of the consent tool used.

8.2 Legal basis for the use of cookies

The data processed by the cookies, which is required for the website to function properly, is therefore necessary to safeguard our legitimate interests and those of third parties in accordance with Article 6(1)(f) of the GDPR.

For all other cookies, you have given your consent via our opt-in cookie banner in accordance with Article 6(1)(a) of the GDPR.

8.3 CCM19 (Consent Management Tool)

We use the ‘CCM19’ Consent Management Tool provided by Papoo Software & Media GmbH – Agentur, Auguststr. 4, 53229 Bonn, Germany. This service enables us to obtain and manage website users’ consent to data processing.

CCM19 uses cookies to collect data generated by end users who use our website. When an end user gives their consent, the following data, amongst other things, is automatically logged:

Cookie duration,
cookie version,
IP address,
Selection made in the cookie banner,
Browser used,
Processor ID and Controller ID.

The consent status is also stored in the end user’s browser, so that the website can automatically read and honour the end user’s consent for all subsequent page requests and future end-user sessions for up to 12 months. Consent data (consent and withdrawal of consent) is stored for three years. The retention period corresponds to the standard limitation period in accordance with Section 195 of the German Civil Code (BGB). The data is then deleted immediately.

The functionality of the website cannot be guaranteed without the processing described above. The user has no right to object as long as there is a legal obligation to obtain the user’s consent to certain data processing operations (Article 7(1) and Article 6(1), first sentence, point (c) of the GDPR).

CCM19 is the recipient of your personal data and acts as a data processor on our behalf. Data processing takes place exclusively within the European Union.

Further information can be found at: https://www.papoo.de/datenschutzerklaerung.html.

9. Our activities on social media

To enable us to communicate with you on social media and keep you informed about our services, we maintain our own pages on these platforms. When you visit one of our social media pages, we are jointly responsible with the provider of the respective social media platform for the processing operations triggered thereby, within the meaning of Article 26 of the GDPR.

We are not the original provider of these pages, but merely use them within the scope of the options offered to us by the respective providers.

We therefore wish to point out, as a precaution, that your data may also be processed outside the European Union or the European Economic Area. Using these platforms may therefore entail data protection risks for you, as it may be more difficult to safeguard your rights – for example, the right to access, erasure, objection, etc., may be more difficult, and processing on social networks is frequently carried out directly by the providers for advertising purposes or to analyse user behaviour, without us being able to influence this. Where the provider creates user profiles, cookies are often used, or your usage behaviour is linked to the member profile you have created on the social media platforms.

The processing of personal data described above is carried out in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest and the legitimate interest of the respective provider, in order to be able to communicate with you in a modern manner and to inform you about our services. If, as a user, you are required to give your consent to data processing with the respective providers, the legal basis is Article 6(1)(a) of the GDPR in conjunction with Article 7 of the GDPR.

As we do not have access to the providers’ data sets, we would like to point out that the best way to exercise your rights (e.g. to access, rectification, erasure, etc.) is to contact the relevant provider directly. We have provided further information on the processing of your data on social media platforms below, for each social media provider we use:

9.1 Instagram

(Joint) data controller in Germany:

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

https://instagram.com/legal/privacy/

9.2 Pinterest

(Joint) data controller:

Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA.

https://policy.pinterest.com/de/privacy-policy

9.3 LinkedIn

(Joint) data controller in Europe:

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

https://www.linkedin.com/legal/privacy-policy

10. Web analytics

10.1 Google Analytics 4 (GA4)

On our websites, we use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

In this context, pseudonymised user profiles are created and cookies (see the section on ‘Cookies’) are used. The information generated by the cookie regarding your use of this website may include, amongst other things:

a temporary recording of the IP address without permanent storage
location data
browser type/version
operating system used
Referrer URL (previously visited page)
Time of the server request

The pseudonymised data may be transferred by Google to a server in the USA and stored there.

The information is used to analyse the use of the website, to compile reports on website activity and to provide other services relating to website and internet usage for the purposes of market research and the tailored design of these web pages. This information may also be transferred to third parties where required by law or where third parties process such data on Google’s behalf. Under no circumstances will your IP address be merged with other data held by Google.

These processing operations take place exclusively upon the granting of express consent in accordance with Article 6(1)(a) of the GDPR.

The parent company, Google LLC, is a US company certified under the EU-US Data Privacy Framework. An adequacy decision in accordance with Article 45 of the GDPR is in place, meaning that personal data may be transferred even without further safeguards or additional measures.

Further information on data protection when using GA4 can be found at: https://support.google.com/analytics/answer/12017362?hl=de.

10.2 Google Analytics 4 (GA4) – Additional information on Consent Mode and simple implementation

Under the Digital Markets Act, Google is obliged to obtain users’ consent before processing user data for personalised advertising. Google meets this requirement through ‘Consent Mode’. Users are obliged to implement this and thereby demonstrate that they have obtained the consent of website visitors.

Google offers two implementation modes: the simple and the advanced implementation.

We use the simple implementation method of Google Consent Mode. Only if you give your consent to the use of Google Analytics (see above) will a connection to Google be established, a Google script be executed and the processing operations described above be carried out. If you refuse to give your consent, Google will simply be informed that consent has not been given. The Google code will not be executed and no Google Analytics cookies will be set.

10.3 Pinterest Tag

This website uses the Pinterest tag operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

The Pinterest tag is a piece of code that has been embedded on our website. The use of the Pinterest tag enables Pinterest to track visitors’ behaviour on our website and collect data about their activities. This data may be used to run targeted advertising campaigns on Pinterest. We also collect information about conversions. This means that Pinterest provides us with data on how many visitors actually visit our website as a result of our Pinterest adverts.

Upon giving your explicit consent, cookies are set via the Pinterest tag and information is transmitted to Pinterest in hashed form. The tag collects information such as:

device information,
operating system,
IP address,
behaviour on the relevant website.

In the case of conversions, we do not normally process any personal data, as we are unable to link the hashed version of your Pinterest ID to you as an individual; only Pinterest can do this. Nor do we receive any information about you, such as your name, age, etc.

These processing operations take place exclusively upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

Further information on Pinterest’s privacy policy can be found at: https://policy.pinterest.com/de/privacy-policy.

11. Advertising

11.1 Cooperation with our subsidiaries for advertising purposes

In order to pursue the legitimate interests of the 3C Group in accordance with Article 6(1)(f) of the GDPR, in optimising the advertising and sales presence of our head office and our subsidiaries, it may be necessary for us to share certain personal data within the 3C Group. This applies in particular to any contact details, information about your interests and your customer profile, as well as your use of our products and services.

13. Plugins and other services

13.1 Google Maps

We use Google Maps (API) on our website. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies, headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps is a web service for displaying interactive (map) charts to present geographical information visually. By using this service, for example, our location can be displayed to you, making it easier for you to find your way here.

As soon as you access any of the subpages on which the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google’s servers in the USA and stored there, provided you have given your consent within the meaning of Article 6(1)(a) of the GDPR. In addition, Google Maps loads Google Web Fonts, Google Photos and Google Stats. These services are also provided by Google Ireland Limited. When you visit a page that embeds Google Maps, your browser loads the web fonts and photos required to display Google Maps into your browser cache. For this purpose, too, the browser you are using establishes a connection to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no such user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out of your Google account. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.

If you do not consent to your data being transmitted to Google in future when using Google Maps, you also have the option of completely disabling the Google Maps web service by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, will then no longer be available for use.

These processing operations take place exclusively upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

You can view Google’s Terms of Service at https://www.google.de/intl/de/policies/terms/regional.html; the additional Terms of Service for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html.

The parent company, Google LLC, is a US company certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 of the GDPR is in place, meaning that personal data may be transferred even without further safeguards or additional measures.

You can view the Google Maps privacy policy at: (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/.

13.2 Google WebFonts

Our website uses so-called web fonts to ensure consistent font display. Google WebFonts are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies, headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When you visit a page, your browser loads the required web fonts into your browser cache to ensure that text and fonts are displayed correctly. To do this, the browser you are using establishes a connection to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interests of ensuring a consistent and attractive presentation of our website.

These processing operations take place exclusively upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

Further information on Google WebFonts and Google’s privacy policy can be found at: https://developers.google.com/fonts/faq ; https://www.google.com/policies/privacy/.

14. Your rights as a data subject

14.1 Right to confirmation

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

14.2 Right of access – Article 15 of the GDPR

You have the right to obtain from us, free of charge, information at any time regarding the personal data stored about you, as well as a copy of this data in accordance with the statutory provisions.

14.3 Right to rectification (Article 16 of the GDPR)

You have the right to request the rectification of any inaccurate personal data concerning you. Furthermore, you have the right to request the completion of any incomplete personal data, taking into account the purposes of the processing.

14.4 Erasure (Article 17 of the GDPR)

You have the right to request that we erase personal data concerning you without undue delay, provided that one of the grounds laid down by law applies and insofar as the processing or storage is not necessary.

14.5 Restriction of processing (Article 18 of the GDPR)

You have the right to request that we restrict the processing of your personal data if one of the statutory conditions is met.

14.6 Data portability (Article 20 of the GDPR)

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller to whom the personal data has been provided, without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to have the personal data transferred directly from one controller to another, provided this is technically feasible and does not adversely affect the rights and freedoms of others.

14.7 Objection under Article 21 of the GDPR

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) (data processing in the public interest) or (f) (data processing based on a balancing of interests) of the GDPR.

This also applies to profiling based on these provisions within the meaning of Article 4(4) of the GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves to establish, exercise or defend legal claims.

In certain cases, we process personal data for the purposes of direct marketing. You may object at any time to the processing of your personal data for the purposes of such marketing. This also applies to profiling insofar as it is related to such direct marketing. If you object to us processing your personal data for direct marketing purposes, we will no longer process your personal data for these purposes.

Furthermore, you have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you which we carry out for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

You are free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

14.8 Withdrawal of consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time with future effect.

14.9 Lodging a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority responsible for data protection regarding our processing of personal data.

15. Routine storage, erasure and blocking of personal data

We process and store your personal data only for the period necessary to fulfil the purpose of storage or insofar as this is required by the legal provisions to which our company is subject.

If the purpose of storage no longer applies or a prescribed retention period expires, the personal data will be blocked or deleted routinely and in accordance with statutory provisions.

16. Duration of storage of personal data

The criterion for the duration of the storage of personal data is the relevant statutory retention period. Once this period has expired, the relevant data is routinely deleted, provided it is no longer required for the performance of a contract or for entering into a contract.

17. Validity and amendments to the privacy policy

This privacy policy is currently valid and is dated: September 2026.

Due to the further development of our website and services, or as a result of changes to legal or regulatory requirements, it may become necessary to amend this privacy policy. You can access and print the current version of the privacy policy at any time on our website at https://www.3c-gruppe.de/datenschutz/.

This Privacy Policy was created with the assistance of the data protection software: audatis MANAGER.