Privacy Policy

I. Name and Address of the Controller

The controller, as defined by the General Data Protection Regulation and other national data protection laws of member states, as well as other data protection regulations, is:

AnnLee GmbH
Renzwiesen 6
70327 Stuttgart
Telefon +49 71150421470
E-Mail: info@annleebag.com

II. General Information on Data Processing

1. Scope of Personal Data Processing
   We collect and use personal data of our users only to the extent necessary for providing a functional website, as well as our content and services. The collection and use of personal data of our users typically occur only with the user’s consent. An exception applies in cases where prior consent cannot be obtained for factual reasons, and the processing of data is permitted by legal regulations.
2. Legal Basis for Personal Data Processing
   Where we obtain the consent of the data subject for processing personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for personal data processing.
   For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.
   Where the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
   In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.
   If the processing is necessary for the legitimate interests pursued by our company or by a third party, and if the interests, fundamental rights, and freedoms of the data subject do not override the former interest, Article 6(1)(f) GDPR serves as the legal basis for processing.
3. Data Erasure and Storage Duration
   Personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. Blocking or deletion of data will also occur when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

III. Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing

Every time our website is accessed, our system automatically records data and information from the computer system of the accessing computer.
The following data is collected:

1. Information about the browser type and version
2. The user’s operating system
3. The user’s internet service provider
4. The user’s anonymized IP address
5. Date and time of access
6. Websites from which the user’s system accesses our website
7. Websites that are accessed by the user’s system through our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

1. Legal Basis for Data Processing
   The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.
2. Purpose of Data Processing
   The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. There is no evaluation of the data for marketing purposes in this context.
   Our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR is based on these purposes.
3. Duration of Storage
   The data will be deleted as soon as it is no longer necessary for achieving the purpose of its collection. In the case of data collection for the provision of the website, this occurs when the respective session is terminated. In the case of data storage in log files, this occurs no later than seven days later. Further storage is possible. In this case, the IP addresses of users are deleted or anonymized, so that assignment of the calling client is no longer possible.
4. Objection and Removal Options
   The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no option for the user to object.

IV. General Information on the Use of Cookies on Our Website

1. Description and Scope of Data Processing
   Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that allows for unique identification of the browser when the website is accessed again.
   Cookies cannot execute programs or transmit viruses to your computer and therefore cannot cause any damage. They are used to make the overall internet offering more user-friendly and effective, making it more pleasant for you.
   Cookies may contain data that enables recognition of the device being used. However, some cookies only contain information about specific settings that are not personally identifiable. Cookies cannot directly identify a user.
   Cookies are categorized into transient (session) cookies, which are deleted as soon as you close your browser, and persistent cookies, which are stored beyond the individual session.
   In terms of their function, cookies can further be categorized into:
   • Essential Cookies: These are strictly necessary for navigating the website, using basic functions, and ensuring website security. They do not collect information about you for marketing purposes or store which websites you have visited.
   • Performance/Tracking Cookies: These collect information about how you use our website, which pages you visit, and whether there are any errors in website usage. They do not collect information that can identify you; all collected information is anonymous and used only to improve our website and understand what interests our users.
   • Advertising/Marketing Cookies, Targeting Cookies: These are used to offer customized advertising on the website or offers from third parties to the website user and to measure the effectiveness of these offers. Advertising and targeting cookies are stored for a maximum of 13 months.
   • Sharing Cookies: These are used to enhance the interactivity of our website with other services (e.g., social networks). Sharing cookies are stored for a maximum of 13 months.

   Which of these cookies are used on our website?

   We use essential cookies on our website to make it more user-friendly. Some elements of our website require that the user’s browser can be identified even after changing pages. Additionally, we use such cookies to protect the website from third-party attacks. These cookies are essential for the security of the website and the website user.
   The following data is stored and transmitted in these cookies:

   1. Items in a shopping cart
   2. Log-in information

   On our website, we also use performance/tracking cookies that enable us to analyze user browsing behavior. In this way, the following data can be transmitted:

   1. Frequency of page views
   2. Use of website features

   The data collected from users in this way is pseudonymized through technical precautions. Therefore, it is no longer possible to assign the data to the user making the request. Additionally, the data is not stored together with other personally identifiable user data. When our website is accessed, users are informed about the use of cookies through an information banner, and their consent to process the personal data used for tracking purposes is obtained in this context.

2. Legal Basis for Data Processing
   The legal basis for processing personal data using essential cookies is Article 6(1)(f) GDPR.
   Every use of cookies that is not strictly necessary from a technical perspective constitutes data processing, which can only occur with your explicit and active consent.
   The legal basis for processing personal data using cookies for analysis purposes is therefore Article 6(1)(a) GDPR.
3. Purpose of Data Processing
   The purpose of using essential cookies is to simplify the use of websites for users. Some features of our website cannot be offered without the use of cookies. For these features, it is necessary that the browser can be recognized even after changing pages. We regularly require cookies for the following applications:
   1. Shopping cart
   2. Customer account/customer registration process

   Our legitimate interest in processing personal data under Article 6(1)(f) GDPR is based on these purposes.
   Data collected through essential cookies is not used to create user profiles.
   The use of analysis cookies, on the other hand, is for the purpose of improving the quality of our website and its content. Through cookies, we learn how the website is used, allowing us to continuously optimize our offering.

4. Duration of Storage, Objection, and Removal Options
   Transient cookies are automatically deleted when you close your browser. This includes, in particular, technically necessary session cookies. These store a session ID, with which various requests from your browser can be assigned to the common session. As a result, your computer can be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
   Persistent cookies, which generally include analysis cookies, are automatically deleted after a predetermined duration that can vary depending on the cookie. You can delete cookies at any time in your browser’s security settings. As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already stored cookies can also be deleted at any time. This can also be done automatically. If cookies are disabled for our website, some functions of the website may no longer be fully available.
5. Reference to Cookie Policy
   For more information on which cookies we use and how to manage your cookie settings and disable certain types of tracking, please refer to our Cookie Policy.

V. Google Analytics

This website uses Google Analytics, subject to your consent. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of the website, such as:

• Browser type/version,
• Operating system used,
• Referrer URL (the previously visited page),
• Hostname of the accessing computer (IP address),
• Time of the server request,

is usually transmitted to and stored on a Google server in the USA. The storage of Google Analytics cookies only occurs with your consent, and therefore, it is based on Article 6(1)(a) GDPR.

IP Anonymization

We have enabled IP anonymization on this website. This means that your IP address is truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide other services related to website usage and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Consent for Data Collection, Revocation

You can give your consent to the collection of your data by Google Analytics or revoke a previously granted consent by clicking on the following link:

Lorem ipsum

In this context, you will also receive further information about the scope and purpose of the cookies used.

Browser Plugin

You can prevent the storage of cookies by configuring your browser settings accordingly; however, please note that in this case, you may not be able to fully utilize all the features of this website. Furthermore, you can generally prevent Google from collecting and processing the data generated by the cookie related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

VI. Google AdWords and Google Conversion-Tracking

This website uses Google AdWords, an online advertising program by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

Within Google AdWords, we use a feature called conversion tracking. If you click on an ad placed by Google and give your consent, a conversion tracking cookie will be set. Cookies are small text files that are stored on the user’s computer by the internet browser. These cookies expire after 30 days and do not serve to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not want to participate in tracking, you can object to this use by easily disabling the Google conversion tracking cookie via your internet browser’s user settings. You will then not be included in the conversion tracking statistics.

The storage of “conversion cookies” is only done with your consent, based on Article 6(1)(a) GDPR.

Consent for Data Collection, Revocation

You can give your consent to the collection of your data through Google Analytics or revoke a previously granted consent by clicking on the following link:

Lorem ipsum

In this context, you will also receive further information about the scope and purpose of the cookies used.
You can also configure your browser to inform you about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing your browser. If cookies are deactivated, the functionality of this website may be limited.

For more information on Google AdWords and Google Conversion Tracking, please refer to Google’s privacy policy: https://www.google.de/policies/privacy/.

VII. Social Media Plugins

This website uses so-called plugins from the providers Facebook, Instagram, and YouTube.

Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. An overview of Facebook’s plugins can be found here:
https://developers.facebook.com/docs/plugins/

YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066 USA, represented by Google Inc. (“Google”) at the same address. You can find more information about YouTube plugins here: https://plus.google.com/+youtube/posts.

Instagram is offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. More information can be found in Instagram’s privacy policy: http://instagram.com/about/legal/privacy/.

We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plugins. You can recognize the provider of the plugin by the marking on the box with its initial letter or logo. We offer you the opportunity to communicate directly with the plugin provider via the button. Only when you click on the marked field and activate it, does the plugin provider receive information that you have accessed the corresponding website of our online offering. In addition, the data mentioned in § 3 of this declaration is transmitted. According to the information provided by the respective providers, the IP address is immediately anonymized after it is collected in Germany for Facebook and Xing. By activating the plugin, personal data about you is transmitted to the respective plugin provider and stored there (for US providers, in the USA). Since the plugin provider primarily collects data using cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box.

We have no influence on the data collected and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of data collected by the plugin provider.

The plugin provider stores the data collected about you as usage profiles and uses these for advertising, market research, and/or the needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the presentation of needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, and you must contact the respective plugin provider to exercise this right. Through the plugins, we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.

The legal basis for the use of the plugins is Art. 6(1)(a) GDPR.

Data is transferred regardless of whether you have an account with the plugin provider and are logged in there. If you are logged in to the plugin provider, your data collected with us will be directly assigned to your existing account with the plugin provider. If you activate the button and, for example, link the page, the plugin provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, especially before activating the button, as this way you can avoid being assigned to your profile with the plugin provider.

For more information on the purpose and scope of data collection and its processing by the plugin provider, please refer to the privacy policies of these providers as follows:

a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php;
b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=en.
c) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy.

VIII. General Data Processing in the Context of an Order Process

1. Extent of Data Processing
   During the order process on our website, we collect personal data such as your name, address, and email address.
2. Legal Basis for Data Processing
   The legal basis for storing your data is Art. 6(1)(b) GDPR.
3. Purpose of Data Processing
   We use the data provided by you during the order process without your separate consent exclusively for the fulfillment and processing of the contractual relationships with you. Personal data is processed by us in this context only to the extent that is technically necessary. Under no circumstances will personal data be used, sold, or otherwise shared with third parties for purposes outside our company without your explicit and revocable consent, except for the transmission of your data to the shipping company responsible for the delivery, if necessary. To process payments, we share your payment data with the payment service provider selected by the customer for each payment. When choosing the PayPal payment method, you will be automatically redirected to the online payment service PayPal (Europe) S.a`r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. In this case, the PayPal user agreement applies, which the customer can access at https://www.paypal.com/de/webapps/mpp/ua/useragreement-full or, if there is no PayPal account, at https://www.paypal.com/de/webapps/mpp/ua/privacywax-full. When paying via Sofortüberweisung or Klarna, we transmit the payment information to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. The legal basis for the transmission is the execution of the contract with you, Art. 6 (1) lit. b GDPR. Further data protection information and terms of use from Klarna can be found at:
   https://cdn.klarna.com/1.0/shared/content/legal/terms/K502554/de_de/userhttps://www.klarna.com/de/datenschutz/
   When paying with Apple Pay, your payment information is transmitted to Apple Inc., Park Way, Cupertino, California, U.S. To securely transmit your payment data when shopping online, Apple receives your encrypted transaction and re-encrypts it with a developer-specific key before sending the transaction data to your payment processor, typically your bank registered with Apple Pay. This key ensures that only we, as the seller and contracting partner, can access your encrypted payment data. As with in-store payments, Apple then sends your device account number and the transaction-specific, dynamic security code to us. This lets us know that the payment process has been completed. Neither Apple nor your Apple device sends your actual bank details to us. The legal basis for the transmission is the execution of the contract with you, Art. 6 (1) lit. b GDPR.
   For more information on data protection from Apple, please visit: https://www.apple.com/legal/privacy/.
4. Duration of Storage, Objection, and Removal Options
   The user has the option to object to the processing of their personal data. However, if the data is required for the fulfillment of a contract or for the performance of pre-contractual measures, premature deletion of the data is only possible if contractual or legal obligations do not prevent deletion. In this case, after the contract has been completed and the full purchase price has been paid, the user’s data will be blocked for further use and deleted after the expiration of tax and commercial regulations, unless express consent has been given for further use of this data.

IX. Registration of a Customer Account

1. Description and Scope of Data Processing
   On our website, we offer users the option to register by providing personal data. The data is entered into an input mask, transmitted to us, and stored. Data is not disclosed to third parties. At the time of registration, the following data is also stored:
   1. The user’s IP address
   2. Date and time of registrationIm Rahmen des Registrierungsprozesses wird eine

During the registration process, the user’s consent to the processing of this data is obtained. However, setting up a customer account is not mandatory for placing an order.

1. Legal Basis for Data Processing
   The legal basis for processing the data is Art. 6(1)(a) GDPR if the user has given consent. If registration serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, an additional legal basis for data processing is Art. 6(1)(b) GDPR.
2. Purpose of Data Processing
   User registration is necessary in connection with the fulfillment of a purchase contract or the implementation of pre-contractual measures. Upon successful registration or opening of a customer account, the user’s master data (usually name, address, email address, phone and/or fax number) will be stored in a customer database. This allows you to log in with your username and password for future purchases without having to enter your data separately.
3. Duration of Storage
   The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for the data collected during the registration process when registration on our website is canceled or modified. Even after the contract has been concluded and the customer account has been deleted, it may be necessary to store the personal data of the contractual partner in order to comply with contractual or legal obligations. In this case, the data will be deleted immediately after the expiration of the statutory retention periods.
4. Objection and Removal Options
   As a user, you have the option to cancel your registration at any time. You can also request that the data stored about you be changed at any time. If the data is required to fulfill a contract or to carry out pre-contractual measures, deletion of the data.

X. Contact Form and Email Contact

1. Description and Scope of Data Processing
   Our website includes a contact form that can be used for electronic communication. When a user utilizes this option, the data entered into the input mask is transmitted to us and stored. Alternatively, contact can be made via the provided email address. In this case, the user’s personal data transmitted via email will be stored. There is no disclosure of data to third parties in this context. The data is used exclusively for processing the conversation.
2. Legal Basis for Data Processing
   The legal basis for data processing, when the user gives consent, is Art. 6(1)(a) GDPR. The legal basis for processing data sent via email is Art. 6(1)(f) GDPR. If the email contact aims to conclude a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR.
3. Purpose of Data Processing
   The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. For personal data from the contact form’s input mask and data sent via email, this occurs when the respective conversation with the user is finished. The conversation is considered concluded when it can be inferred from the circumstances that the matter in question has been conclusively clarified. Any additional personal data collected during the sending process will be deleted no later than seven days after the message has been sent.
4. Objection and Removal Options
   Users have the option to revoke their consent to the processing of personal data at any time. If a user contacts us via email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored as part of the contact will be deleted in this case.
5. Duration of Storage
   The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. For personal data from the contact form’s input mask and data sent via email, this occurs when the respective conversation with the user is finished. The conversation is considered concluded when it can be inferred from the circumstances that the matter in question has been conclusively clarified. Any additional personal data collected during the sending process will be deleted no later than seven days after the message has been sent.

XI. Newsletter

1. Description and Scope of Data Processing
   On our website, users have the option to subscribe to a free newsletter. During the newsletter registration, the data from the input mask is transmitted to us. Additionally, the following data is collected during registration:
   1. IP address of the accessing computer
   2. Date and time of registration

   Your consent is obtained for the data processing during the registration process, and reference is made to this privacy policy.

   If you purchase goods or services on our website and provide your email address, we may subsequently use it to send you newsletters. In such a case, the newsletter will exclusively contain direct advertising for our own similar goods or services.

   In the context of data processing for sending newsletters, the data is not passed on to third parties. The data is used solely for sending the newsletter.

2. Legal Basis for Data Processing
   The legal basis for processing data after the user subscribes to the newsletter, with the user’s consent, is Art. 6(1)(a) GDPR. The legal basis for sending newsletters following the sale of goods or services is § 7(3) of the German Act Against Unfair Competition (UWG).
3. Purpose of Data Processing
   The collection of the user’s email address is used for delivering the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.
4. Duration of Storage
   The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. The user’s email address is stored as long as the newsletter subscription is active. Other personal data collected during the registration process is typically deleted after seven days.
5. Objection and Removal Options
   Users can cancel their newsletter subscription at any time. A corresponding link can be found in every newsletter. This also allows for revoking consent for the storage of personal data collected during the registration process.

XII. Rights of the Data Subject

If your personal data is processed, you are a data subject as defined by the GDPR, and you have the following rights against the data controller:

1. Right to Information
   You can request confirmation from the data controller as to whether personal data concerning you is being processed. If such processing is taking place, you can request the following information from the data controller:
   1. The purposes for which the personal data are processed.
   2. The categories of personal data that are being processed.
   3. The recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed.
   4. The planned duration of storage of the personal data concerning you or, if specific information about this is not possible, the criteria for determining the storage period.
   5. The existence of the right to rectify or erase personal data concerning you, the right to restrict processing by the data controller, or the right to object to such processing.
   6. The existence of the right to lodge a complaint with a supervisory authority.
   7. All available information about the origin of the data if the personal data were not collected from the data subject.
   8. The existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) of the GDPR, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

   You have the right to request information on whether the personal data concerning you is transmitted to a third country or to an international organization. In this context, you can request to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.

2. Right to Rectification
   You have the right to have inaccurate or incomplete personal data concerning you corrected or completed by the data controller without undue delay.
3. Right to Restriction of Processing
   You can request confirmation from the data controller as to whether personal data concerning you is being processed. Under the following conditions, you can request the restriction of processing of personal data concerning you:
   1. If you contest the accuracy of the personal data concerning you, for a period that allows the data controller to verify the accuracy of the personal data.
   2. If the processing is unlawful, and you oppose the erasure of the personal data and instead request the restriction of its use.
   3. If the data controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims, or
   4. If you have objected to processing pursuant to Article 21(1) of the GDPR, and it has not yet been determined whether the legitimate grounds of the data controller override yours.

   Once processing of the personal data concerning you has been restricted, such data, with the exception of storage, may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.
   You will be informed by the data controller before the restriction of processing is lifted.

4. Right to Erasure
   a) Obligation to Erase
   You have the right to request from the data controller the erasure of personal data concerning you without undue delay, and the data controller shall have the obligation to erase this data without undue delay, if one of the following grounds applies:
   1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
   2. You withdraw your consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal ground for the processing.
   3. You object to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
   4. The personal data concerning you have been unlawfully processed.
   5. The erasure of personal data concerning you is required to fulfill a legal obligation under Union or Member State law to which the data controller is subject.
   6. The personal data concerning you have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

   b) Information to Third Parties

Where the data controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, the data controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform data controllers which are processing the personal data that you, as the data subject, have requested the erasure by such data controllers of any links to, or copy or replication of, this personal data.

c) Exceptions
The right to erasure does not apply to the extent that processing is necessary:

1. For exercising the right of freedom of expression and information.
2. For compliance with a legal obligation that requires processing by Union or Member State law to which the data controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
3. For reasons of public interest in the area of public health, as set out in Article 9(2)(h) and (i), and Article 9(3) of the GDPR.
4. For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, in accordance with Article 89(1) of the GDPR, to the extent that the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
5. For the establishment, exercise, or defense of legal claims.

• Right to Notification
  If you have exercised your right to rectify, erase, or restrict the processing vis-à-vis the data controller, the data controller is obliged to communicate such rectification or erasure of data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort.
  You have the right to be informed about these recipients by the data controller.
• Right to Data Portability
  You have the right to receive the personal data concerning you, which you have provided to the data controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another data controller without hindrance from the data controller to which the personal data was provided, where:
  1. The processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and
  2. The processing is carried out by automated means.

  n exercising this right, you also have the right to have the personal data concerning you transmitted directly from one data controller to another data controller, where technically feasible. This must not adversely affect the rights and freedoms of others.
  The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

• Right to Object
  You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) of the GDPR, including profiling based on those provisions.
  The data controller shall no longer process the personal data concerning you unless the data controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.
  Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
  If you object to processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.
  In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you have the possibility of exercising your right to object by automated means using technical specifications.
• Right to Withdraw Consent for Data Processing
  You have the right to withdraw your consent for data processing at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint with a Supervisory Authority

  Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you believe that the processing of personal data concerning you infringes the GDPR.
  The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

   

   

XIII. Collection of data for marketing purposes

This website uses the marketing automation tool "lux".

No information is stored in your terminal device (neither as a cookie nor in the so-called "local storage"), except for the storage of your selection regarding data protection. The latter is necessary for operation.

After your first visit to the website, "lux" attempts to recognize your revisits based on your behavior and the hardware you use in order to offer you content based on your preferences and to simplify the usability of the website. For this purpose, "lux" forms a so-called hash value from some properties of your end device transmitted by the browser (including the browser type, the language setting, the color depth, some parameters of the hardware used), which can be used for recognition during a future visit to the website.

The above-mentioned purposes of storing this hash value constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

Since "lux" stores this information on systems operated by us, no information is passed on to third parties, but is processed exclusively by the office of the AnnLee GmbH

You can prevent recognition and the display of individual content by activating the "DoNotTrack" header of your browser, for example. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.