Privacy Statement

I. General information

1. Name and address of the data controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of member states as well as other data protection provisions is:

KAUP GmbH & Co. KG | Gesellschaft für Maschinenbau
Braunstraße 17
63739 Aschaffenburg
Germany
Tel.: +49 6021 865 0
E-mail: 
Website: www.kaup.de

2. Data protection officer 

Our external data protection officer can be reached at the following address:

EDV Sachverständigen- und Datenschutzbüro Michael J. Schüssler
Kolpingstraße 3
D-63739 Aschaffenburg
Tel.: +49 6021 439 1845
E-Mail: 
Website: www.datenschutz4you-aschaffenburg.de
 

3. Competent data protection authority

Landesamt für Datenschutzaufsicht
Promenade 27
D-91522 Ansbach
Tel.: +49 981 53 1300
E-Mail: 
Website: www.lda.bayern.de

II. General information on data processing

1. Scope of the processing of personal data

KAUP GmbH & Co. KG (KAUP) processes personal data of our users only to the extent it is needed to provide a functioning web site and for our content and services. The processing of personal data of our users is only carried out on a regular basis with the permission of the user. An exception exists in cases where obtaining permission in advance is not possible for practical reasons and the processing of the data is permitted by legal regulations.

2. Legal basis for the processing of personal data

Where we obtain the permission of the data subject for processing personal data, Art. 6 Para. 1 lit. a GDPR serves as the legal basis. When processing personal data necessary for the fulfilment of a contract for which the data subject is a party to the contract, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing necessary for carrying out pre-contract measures. If the processing is necessary to protect a legitimate interest of our organization or of a third party, and the first named interest does not outweigh the interests, basic rights and basic freedoms of the data subject, Art. 6 Para. 1 lit. f GDPR serves as the legal basis for processing.

3. Deleting data and retention periods

The personal data of the data subject will be deleted or locked as soon as it is no longer needed for the purpose it was stored for. Retention of data can also occur if this is provided for by European or national legislators with respect to EU regulations, laws or other provisions applicable to the data subject. Locking or deleting the data also occurs when a retention duration laid down by the specified standards expires, unless a need for continued retention of the data exists to complete or fulfil a contract.

III. Providing the web site

1. Description and scope of the data processing

Each time one of our Internet pages is accessed, our system records data and information automatically about the computer system of the accessing computer, and saves this for a maximum of two days. The following data are collected with the pixel technology of our tracking system "etracker":

  1. (1) information on the type of browser and its version
  2. (2) the operating system of the user
  3. (3) device type of the user - desktop, phone, tablet
  4. (4) IP address of the user
  5. (5) entry/source of the user - direct entry, search machine, social media, other web sites
  6. (6) data and time of access

etracker does not use cookies for web analysis by default. If analysis and optimization cookies are used, we will obtain your explicit consent separately in advance. If this is the case and you agree, cookies are used to enable a statistical range analysis of this website, a measurement of the success of our online marketing measures and test procedures, e.g. to test and optimize different versions of our online offering or its components.

2. Legal basis for data processing

The legal basis for the temporary retention of the data is Art. 6 Para. 1 lit. f GDPR.

3. Purpose of data processing

Temporary retention of the IP address by the system is necessary to enable the supply of the web site to the user's computer. To do so, the IP address of the user must be retained for the duration of the session. This purpose provides our justified interest in processing the data in accordance with Art. 6 Para. 1 lit. f GDPR.

4. Retention duration

The data are deleted as soon as they are no longer required to fulfil the purpose they were collected for. In the case of data collection to provide the web site, this is the situation when the respective session is ended.

5. SSL encryption

To protect the security of your data during transmission, we use an encryption process corresponding to the latest technology (e.g. SSL) via HTTPS.

6. Possibility to revoke via 1st party cookie and tracking opt-in

The data created with "etracker" are processed and stored solely in Germany by "etracker" on behalf of the supplier of this web site and are thus subject to the strict German and European data protection laws and standards. "Etracker" has been independently checked in this respect, certified and awarded with the ePrivacyseal data protection seal of approval.

Data processing is carried out on the legal basis of Art. 6 Para.1 lit f (justified interest) of the GDPR. The justified interest of KAUP exists in the optimization of our online offering and our web presence. As the private realm of our visitors is particularly important, the IP address is anonymized at the earliest possible point by "etracker" and login or device identifiers are converted by "etracker" to a unique key that cannot be used to identify an individual. No other use, combination with other data or transfer to third parties is carried out by "etracker".

You can revoke permission for the data processing described above at any time. Revoking permission will have no negative consequences for you.

Deactivate Tracking

For further information on data protection with "etracker", see here.

7. Use of cookies

a) Description and scope of the data processing

Our web site uses cookies for analysis purposes. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses our web site, a cookie can be stored in the operating system of the user. This cookie contains a characteristic sequence of characters (cookie ID) that allows a unique identification of the browser when the web site is accessed again.

We use cookies to make our web site more user friendly and to allow the analysis of the surfing behaviour of the user. Some elements of our Internet pages require that the browser also needs to be identified after a change of page. In the cookies, the following data are stored and transmitted:

  1. (1) language settings
  2. (2) log-in information
  3. (3) search terms entered
  4. (4) frequency pages are accessed

The data recorded in this way are pseudonymised using technical measures. Applying the data to the accessing user is thus no longer possible. The data are not stored together with other personal data of the user.

When you call up our website, a large info banner (in the lower part of the screen) informs you about the use of cookies for analysis purposes and draws your attention to this data protection declaration. At this point, you have the opportunity to agree to the use of cookies for statistical purposes or to reject them. Statistical cookies are only used if you have given your consent to the processing of the personal data used in this context. You can change your settings at any time via this link: Open cookie settings. In addition, you can prevent cookies from being set by our website by means of a corresponding setting in the Internet browser you are using and thus permanently object to the setting of cookies. Furthermore, cookies already stored can be deleted at any time using the Internet browser or other software. This is possible in all current Internet browsers. If you deactivate cookies (see Point III. 6.) in the Internet browser used, under some circumstances not all functions of our Internet site will work to their full extent.

The following cookies are stored and transmitted on our website:

Name Provider Expiry Purpose Category
fe_typo_user KAUP After the session Whenever forms are displayed or a login is used, this cookie is set by TYPO3 by default. Necessary
cookieConsent KAUP 1 year Documents the click of the user on the cookie banner. Necessary

staticfilecache

KAUP After the session Is needed to optimize the delivery time of the website. Necessary
et_allow_cookies etracker "0" - 50 years
"1" - 480 days
The cookie indicates to etracker whether or not tracking is allowed using cookies. If data-block cookies are used, the API call _etracker.enableCookies() sets this cookie to "1" to indicate that etracker is allowed to set cookies. The cookie is set to "0" when _etracker.disableCookies() is called. Necessary
_et_coid etracker 2 years Cookie recognition Statistics

isSdEnabled

etracker 24h Recognition of whether the visitor's scroll depth is measured. Statistics

BT_sdc

etracker After the session Contains Base64-encoded data of the current visitor session (referrer, number of pages, number of seconds since session start, displayed Smart Messages in the session), which is used for personalization purposes. Statistics

BT_pdc

etracker 1 year Contains Base64-encoded data of the visitor history (is customer, newsletter recipient, visitor ID, displayed Smart Messages) for personalization purposes. Statistics
BT_ctst etracker After the session Is only used to detect whether cookies are enabled in the visitor's browser or not. Statistics
player Vimeo 1 year This cookie stores your settings before you play an embedded Vimeo video. This means that the next time you watch a Vimeo video, you will get your preferred settings back. Statistics
continous_play_v3 Vimeo 1 year This cookie is a first-party cookie from Vimeo. The cookie collects information about how you use the Vimeo service. For example, the cookie stores when you pause or replay a video. Statistics
vuid Vimeo 1 year This cookie collects information about your actions on websites that have embedded a Vimeo video. Statistics
_abexps Vimeo 1 year This Vimeo cookie helps Vimeo remember the settings you have made. This could be a preset language, region or user name, for example. In general, the cookie stores information about how you use Vimeo. Statistics
_gcl_au Google 3 months This third-party cookie from Google AdSense is used to improve the efficiency of ads on websites. The cookie is only set for certain interactions with the videos.
 
Statistics
_uetsid Microsoft 1 day This cookie is used by Microsoft Bing Ads Universal Event Tracking (UET). The cookie is only set for certain interactions with the videos. Statistics
_uetvid Microsoft 2 weeks This cookie is used by Microsoft Bing Ads Universal Event Tracking (UET). The cookie is only set for certain interactions with the videos. Statistics
_fbp Mate 3 months This is a Meta cookie. This cookie is used to display advertisements or promotional products from Meta or other advertisers. The cookie is only set for certain interactions with the videos. Statistics

You can change your settings at any time via this link: Open cookie settings

b) Legal basis for data processing

The legal basis for the processing of personal data using technically required cookies is Art. 6 Para. 1 lit. f GDPR. The legal basis for the processing of personal data when using cookies for analysis purposes when appropriate permission has been granted is Art. 6 Para. 1 lit. a GDPR.

c) Purpose of data processing

The purpose of the use of technically necessary cookies is to simplify the use of the web site for the user. The user data recorded by the technically necessary cookies are not used to create user profiles. The use of analysis cookies has the purpose of improving the quality of our web site and its content. With the analysis cookies, we find out how the web site is used and can thus continuously optimise our offering. We find out, for example, which routes are used through the web site, where the users come from and what they are searching for on kaup.de.This purpose provides our justified interest in processing personal data in accordance with Art. 6 Para. 1 lit. f GDPR.

d) Duration of the retention, revocation and removal possibilities

The cookies are stored on the computer and transmitted from there to our site. As a result, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or limit the transmission of cookies. Cookies already stored can be deleted at any time. This can also be automated.

8. Google Fonts

a) Description and scope of the data processing

On our website we use Google Fonts to display external fonts. This is a service of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

b) Legal basis for data processing

The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the optimisation and economic operation of our Internet presence.

c) Purpose of data processing

In order to enable the display of certain fonts on our website, to improve loading times and to ensure uniform display across all devices, a connection to the Google server in the USA is established when our website is called up. Through the connection to Google established when calling up our website, Google can determine from which website your enquiry was sent and to which IP address the font representation is to be transmitted.

If your browser does not support web fonts, a standard font will be used by your computer.

d) Duration of the retention

Google offers further information at https://adssettings.google.com/authenticated and https://policies.google.com/privacy?hl=en, in particular on the possibilities of preventing the use of data.

9. Google Maps

a) Description and scope of the data processing

In our internet presence we use the map service Google Maps via an API. This service is provided by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

b) Legal basis and purpose for data processing

The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the ease with which you can find the places - company locations - indicated by us on the website. In order to use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

Google offers further information at https://policies.google.com/privacy?hl=en.

10. Social media plug-ins

We use social plug-ins from the social networks LinkedIn, Xing, Vimeo and Instagram on our website on the basis of Art. 6 para. 1 sentence 1 lit. f DSGVO in order to make ourselves better known. The advertising purpose behind this is to be regarded as a legitimate interest within the meaning of the DSGVO. The integration of these plug-ins by us is carried out by means of the so-called Shariff method in order to protect visitors to our website in the best possible way.

If you do not want the respective social networks to be able to directly assign the data collected via our website to your individual account, you must log out of the respective network before visiting our website.

a) LinkedIn

We use the social plug-in of the social media network LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) on our website. The social plug-in is the link to our LinkedIn corporate site. The social plug-in is clearly marked with the well-known LinkedIn logo.

For any further processing, please note that the privacy policy of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland applies to our LinkedIn corporate site. For more information about LinkedIn's processing of personal data, please visit https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.

b) Instagram

We use on our website the social plug-in of the Instagram social media network, operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland. The social plug-in is a link to our Instagram account. The plugin is marked with an Instagram logo.

For any processing beyond this, we point out that the privacy policy Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland applies to our Instagram site. For more information about Instagram's processing of personal data, please visit https://help.instagram.com/519522125107875.

c) XING

On our website we use the social plug-in of the social media network XING, which is operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. The social plug-in is a link to our XING corporate site. The plug-in is marked with a XING logo.

For any further processing, we would like to point out that the data protection declaration of New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany is applicable on our XING company site. Further information on the processing of personal data by Xing can be found at https://privacy.xing.com/de/datenschutzerklaerung

d) Vimeo

On our website we use the social plug-in of the social media video network Vimeo, which is operated by Vimeo, Inc. 555 West 18th Street, New York, New York 10011, USA. The social plug-in is the link to our Vimeo channel. The plug-in is marked with a Vimeo logo or as a video.

When you visit one of our sites equipped with a Vimeo plug-in, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged in to your Vimeo account, you allow Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.

For any processing beyond this, we would like to point out that the privacy policy of Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA is applicable to our Vimeo channel and embedded videos. For more information about Vimeo's processing of personal data, please visit vimeo.com/privacy.

11. Registration log-in area

1. Description and scope of the data processing

On our Internet site, we offer users the possibility to register by entering personal data. These data are entered in an input form, sent to us and stored. There is no transfer of the data to third parties. The following data are collected in the course of the registration process:

  1. (1) Salutation (Female, Male)
  2. (2) First and last name
  3. (3) Company name
  4. (4) Company location
  5. (5) E-mail address 
  6. (6) Password - encrypted


At the time of registration, the following data are stored:

  1. (1) Date and time of registration
     

In the course of the registration process, the permission of the user to process the data is obtained.

2. Legal basis for data processing

The legal basis for the processing of the data when permission has been granted by the user is Art. 6 Para. 1 lit. a GDPR.

3. Purpose of data processing

Registration of the user is necessary to have certain content and services ready on our web site. Registered users can access the following additional content:

  1. (1) Prices: current prices for our attachments can be viewed on the respective product detail pages.
  2. (2) Price list: the current price list for KAUP is available to download.
  3. (3) Order documentation: all previous orders including the associated documentation can be viewed and downloaded.
  4. (4) eQuotation tool: the independent production of a binding offer is possible.
     

Our prices can only be viewed by authorised persons. Therefore, registration is necessary in order to be able to check this authorisation. The order documentation and the eQuotation tool represent added value for the registered user. In order to prevent misuse of the information provided in this way and to allow exact allocation, registration is necessary.

4. Retention duration

The data are deleted as soon as they are no longer required to fulfil the purpose they were collected for.

5. Revocation and removal possibilities

As the user, you have the possibility to cancel the registration at any time. You can change the data stored about you at any time yourself. To do so, log into your account and the data stored can be edited in the "Edit user data" area. An exception to this is the e-mail address. This cannot be changed independently, as this is fixed as the user name. An account can be deleted via the web site administration for info at: 

11. Contact forms and e-mail contact

1. Description and scope of the data processing

There are various contact forms on our Internet site (general contact form, product enquiry, warranty claim form) that can be used for electronic contact. If a user takes advantage of these possibilities, the data entered in the input form are transmitted to us and stored. These data are:

1.1 General contact form

  1. (1) Salutation (Female, Male) 
  2. (2) First and last name 
  3. (3) Company name 
  4. (4) Street and number 
  5. (5) Postal code 
  6. (6) E-mail address 
  7. (7) Data protection read and accepted 
     

1.2 Product enquiry

  1. (1) First and last name 
  2. (2) Company name
  3. (3) E-mail address 
  4. (4) Postal code 
  5. (5) Data protection read and accepted 
  6. (6) Country 
     

1.3 Warranty claim form

1.3.1 Applicant / Dealer

  1. (1) Contact person 
  2. (2) Company name 
  3. (3) Postal code, place
  4. (4) E-mail address 
  5. (5) Telephone number
     

1.3.2 Customer / User

  1. (1) Contact person 
  2. (2) Company name 
  3. (3) Postal code, place 
  4. (4) E-mail address 
  5. (5) Telephone number 
     

1.3.3 Fork lift truck/ Vehicle

  1. (1) Brand - Model 
  2. (2) Working hours
     

1.3.4 KAUP attachment

  1. (1) Model 
  2. (2) Serial number 
  3. (3) Date of repair 
     

1.3.5 Costs incurred / services

  1. (1) Description of claim and repair 
  2. (2) Data protection read and accepted 
     

At the time of the message being sent, the following data are stored:

  1. (1) the IP address of the computer being used
  2. (2) information on the type of browser and its version
  3. (3) date and time the form is used
     

For processing the data, in the course of the sending process your permission is obtained and reference made to this data protection statement.

Alternatively, contact is possible with the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail are stored.

There is no transfer of the data to third parties in this respect. The data are exclusively used for processing the conversation.

2. Legal basis for data processing

The legal basis for the processing of the data when permission has been granted by the user is Art. 6 Para. 1 lit. a GDPR.

The legal basis for processing the data transmitted in the course of sending an e-mail is Art. 6 Para. 1 lit. f GDPR. If the intention of the e-mail contact is to conclude a contract, an additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR.

3. Purpose of data processing

Processing of personal data from the input form is used solely to process the approach. In the case of an approach by e-mail, the required justified interest in the processing of the data also exists.

The other personal data processed during the sending procedure serve to prevent misuse of the contact form and to ensure the security of our information systems.

4. Retention duration

The data are deleted as soon as they are no longer required to fulfil the purpose they were collected for. For personal data from the input mask on the contact form and those sent by e-mail, this is the case if the respective conversation with the user has been concluded. The conversation is ended if it can be assumed from the circumstances that the affected content has been completely clarified.

The personal data additionally collected during the sending process are deleted after a period of seven days at the latest.

5. Revocation and removal possibilities

The user has the possibility at any time to retract their consent for processing their personal data. If the user makes contact with us by e-mail, they can object to the storage of their personal data. In such a case, the conversation can no longer be continued.

All personal data stored in the course of the approach will be deleted in this case.

6. Rights of the affected person

If your personal data are processed, you are the data subject within the meaning of the DSVGO and you have the following rights against the data controller:

1. Right of access to information

You can demand a confirmation from the data controller about whether personal data of yours is processed by us. If there is such processing, you can demand the following information from the data controller:

  1. (1) the purposes for which the personal data are processed;
  2. (2) the categories of personal data that are processed;
  3. (3) the recipients and categories of recipients who have been given access to your personal data or who still have access;
  4. (4) the existence of a right of rectification or deletion of your personal data, a right to restrict processing by the data controller or the right to object to this processing;
  5. (5) the existence of a right to complain to the regulatory authority;
  6. (6) all available information about the source of the data if the personal data was not collected from the data subject.
     

You have the right to demand information about whether your personal data has been transferred to a third country or to an international organisation. In this connection, you can demand to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.

2. Right of rectification

You have the right to rectification and/or updating by the data controller where the processed personal data of yours is incorrect or incomplete. The data controller must make the correction without delay.

3. Right to limit the processing

Under the following conditions, you can demand that the processing of your personal data is limited:

  1. (1) if you dispute the accuracy of your personal data for a period of time that allows the data controller to check the accuracy of your personal data;
  2. (2) the processing is unlawful and you reject the deletion of the personal data and instead demand that the use of the personal data is limited;
  3. (3) the data controller no longer requires the personal data for the purposes of processing, but you need them for enforcement, exercise or defence of legal claims, or
  4. (4) if you have made an objection against the processing in accordance with Art. 21 Para. 1 GDPR and it is not yet certain whether the legitimate interests of the data controller outweigh your reasons.
     

If the processing of your personal data has been limited, these data may only, with the exception of their storage, be processed with your permission or for the enforcement, exercise or defence of legal claims or the protection of the rights of other natural or legal persons or for reasons of important public interests of the European Union or a member state.

If the limitation on processing in accordance with the above-mentioned conditions is reduced, you will be informed by the data controller before the limitation is removed.

4. Right of deletion

a) Duty to delete

You can demand from the data controller that your personal data is deleted without delay, and the data controller is required to delete these data without delay as long as one of the following reasons applies:

  1. (1) your personal data are no longer needed for the purposes they were collected or processed in other ways.
  2. (2) you withdraw your agreement on which the processing in accordance with Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR is based, and there is no other legal basis for the processing.
  3. (3) you make an objection in accordance with Art. 21 Para. 1 GDPR against the processing and there are no overriding justifying reasons, or you make an objection in accordance with Art. 21 Para. 2 GDPR against the processing.
  4. (4) your personal data were processed unlawfully.
  5. (5) the deletion of your personal data is necessary to fulfil a legal duty in accordance with EU law or the law of a member state that the data controller is subject to.
  6. (6) your personal data were collected in relation to services of the information society offered in accordance with Art. 8 Para. 1 GDPR.
     

b) Information to third parties

If the data controller has made your personal data public and they are obliged to delete them in accordance with Art. 17 Para. 1 GDPR, they will take appropriate measures considering available technologies and the cost of implementation, including of a technical nature, to inform the data processor that you as the data subject have demanded the deletion of all links to these personal data or of copies or replications of these personal data.

c) Exceptions

The right of deletion does not exist if the processing is necessary

  1. (1) to fulfil a legal duty that demands the processing in accordance with the law of the EU or the member states that the data controller is subject to, or to fulfil a task that is in the public interest or is carried out as a result of public authority delegated to the data controller; or
  2. (2) for the enforcement, exercise or defence of legal claims.

5. Right to data portability

You have the right to be given the personal data you have made available to the data controller in a structured, current and machine-readable format. Furthermore, you have the right to transfer these data to another data controller without hindrance from the data controller to whom the data were made available, as long as

  1. (1) the processing concerns a consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or a contract in accordance with Art. 6 Para. 1 lit. b GDPR, and
  2. (2) the processing occurs with the aid of an automated procedure.
     

When exercising this right, you also have the right to effect the direct transfer of your personal data from one data controller to another data controller as long as this is technically feasible. Freedoms and rights of other persons may not be affected as a result.

The right to data portability does not apply to the processing of personal data necessary for executing a task that is of public interest or in the application of public authority delegated to the data controller.

6. The right to object

You have the right for reasons arising out of your particular situation at any time to make an objection against the processing of your personal data carried out on the basis of Art. 6 Para. 1 lit. f GDPR.

The data controller no longer processes your personal data unless they can show compelling reasons meriting protection that outweigh your interests, rights and freedoms, or the processing serves to enforce, exercise or defend legal claims.

If your personal data are processed for direct marketing, you have the right at any time to object to the processing of your personal data for the purposes of this type of advertising.

If you object to the processing for the purposes of direct marketing, your personal data will no longer be processed for this purpose.

You have the possibility in connection with the use of services in the information society - notwithstanding Directive 2002/58/EC - to exercise your right to object using an automated procedure for which technical specifications are used.

7. Right to withdraw the data protection declaration of consent

You have the right to withdraw your data protection declaration of consent at any time. The withdrawal of the consent does not affect the lawfulness of the processing that occurs up to the withdrawal that was based on the consent.

8. Right of complaint to a regulatory authority

Regardless of any other legal remedies relating to administrative or judicial law, you have the right of complaint to a regulatory authority, in particular in the member state where you are located, where your workplace is or in the location of the alleged offence, if you are of the opinion that the processing of your personal data contravenes the GDPR.

The regulatory authority where the complaint is made will inform the complainant of the progress and the results of the complaint including the possibility of judicial remedies in accordance with Art. 78 GDPR.

IX. Restriction

KAUP GmbH & Co. KG reserves the right to change these data protection guidelines under consideration of the data protection requirements at any time.