Legal

Privacy Policy

Last updated: May 15, 2026

Translation notice: This English translation is provided for convenience only. If there is any discrepancy or conflict, the German original prevails.

The online services of CSN GmbH (‘CSN’) are operated on server systems in high-performance data centres with robust security controls in Germany. CSN stores and safeguards all conference data and personal data there under its own responsibility.

CSN safeguards the confidentiality of your data. When you use our services, you can access information, products and services online. This Privacy Policy explains how we use and protect the personal information you provide.

I. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR), the national data protection laws of the Member States and other applicable data protection provisions is:

CSN Communication Service Network GmbH

Address:
Am Wehrhahn 67
40211 Düsseldorf
Germany

Telephone
+49 (0) 211. 7306340

Email
info@csn.de

website
csn-gmbh.de

Customer portal
https://app.csn.de

II. General information about data processing

1. Scope of processing of personal data

As a general rule, we only collect and use personal data from our users to the extent that this is necessary to provide a functional website and our content and services. The collection and use of our users’ personal data regularly only takes place with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.

2. Legal basis for processing personal data

To the extent that we obtain the consent of the data subject for processing personal data, Article 6(1)(a) of the General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

When processing personal data that is necessary to fulfill a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

To the extent that processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.

In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6(1)(f) GDPR serves as the legal basis for the processing.

3. Erasure of data and storage periods

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data to conclude or fulfill a contract.

III. Provision of the website and creation of log files

1. Description and scope of data processing

Every time you visit our website (csn-gmbh.de) or our customer portal (app.csn.de) our systems automatically collect data and information from the computer system of the accessing computer. The following data is collected:

(1) Information about the browser type and version used
(2) The user's operating system
(3) The user's IP address
(4) Date and time of access
(5) Websites that are accessed by the user's system via our website

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. To do this, the user's IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. The data also serves us to optimize the website and to ensure the security of our information technology systems. The data will not be evaluated for marketing purposes in this context.

These purposes also include our legitimate interest in data processing in accordance with Article 6(1)(f) of the GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the data is collected to provide the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the users' IP addresses are deleted or altered so that it is no longer possible to assign the calling client.

5. Right to object and request erasure

The collection of data to provide the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility for the user to object.

IV. Use of cookies in the customer portal (app.csn.de)

1. Description and scope of data processing

Our customer portal (app.csn.de) uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again.

We use cookies to make our customer portal (app.csn.de) to make it more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

(1) Language settings
(2) Log-in information
(3) Page Settings
(4) Search filters

2. Legal basis for data processing

The legal basis for the processing of personal data using cookies is Article 6(1)(f) GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognised even after a page change.

We need cookies for the following applications:

(1) Adopting language settings
(2) Remembering search terms and page settings
(3) Login information

The user data collected through technically necessary cookies is not used to create user profiles.

For these purposes, our legitimate interest lies in the processing of personal data in accordance with Article 6(1)(f) of the GDPR.

Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. Are cookies for our customer portal (app.csn.de) is deactivated, all functions of the customer portal (app.csn.de) can be used to its full extent.

The transmission of Flash cookies cannot be prevented via the browser settings, but can be prevented by changing the Flash Player settings.

V. Cookies, analytics, tracking and marketing tools used on our website

1. Description and scope of data processing

On our publicly accessible website (csn-gmbh.de) and on landing pages we operate on subdomains (e.g. for lead generation via advertising platforms such as LinkedIn, Google or Meta), we use various web analysis and tracking services to statistically record the use of our content, to optimize the website technically and in terms of content and to improve our online marketing. These tools do not have access to our customer portal (app.csn.de) and do not process data from existing customers of CSN communication services.

Technically necessary language routing: When you first open the home page, we use the language preference supplied by your browser to serve the German or English version. The csn_locale and csn_locale_source cookies store the selected language for twelve months and record whether it came from the device language or a manual choice. This allows an automatic selection to follow a later device-language change, while an explicit manual choice continues to take precedence. The information is not shared with third parties and is not used for audience measurement without analytics consent.

2. LinkedIn Insight Tag

This website uses the LinkedIn Insight Tag, an analysis and conversion tracking tool from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (parent company: LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA). We use this to record the use of our website in connection with our advertising campaigns on LinkedIn.

When you visit our website, the following data in particular is transmitted to LinkedIn via the Insight Tag:

(1) URL and referrer URL
(2) IP address (shortened or hashed)
(3) Device and browser characteristics
(4) Time of call

If LinkedIn members are logged in, LinkedIn can assign this data to the respective user account. LinkedIn uses them for conversion tracking, retargeting and the evaluation of target groups for our campaigns. For us as website operators, the evaluations are aggregated and anonymous.

Data transfer to the USA is based on the EU Commission's standard contractual clauses.

The use of this service is based on your consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TTDSG. Consent can be revoked at any time.

Further information as well as objection and opt-out options:
https://www.linkedin.com/legal/privacy-policy
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

3. Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google processes information about website usage on our behalf to compile reports on website activity. In particular, the following data is processed:

(1) IP address (shortened)
(2) Usage behavior (e.g. pages viewed, length of stay, click paths)
(3) Device type, browser information

Google can transfer data to the USA. Data processing is based on your consent.

Further information: https://policies.google.com/privacy

4. Meta Pixel (formerly Facebook Pixel)

This website uses the Facebook/Meta visitor action pixel to measure conversions. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected will also be transferred to the USA and other third countries.

This allows the behavior of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The data collected is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook uses the data for its own advertising purposes, in accordance with the Facebook data usage guidelines (https://de-de.facebook.com/about/privacy/) can use. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. As the site operator, we cannot influence this use of data.

The use of this service is based on your consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TTDSG. Consent can be revoked at any time.

To the extent that personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Article 26 GDPR). The joint responsibility is limited exclusively to collecting the data and passing it on to Facebook. The processing carried out by Facebook after the forwarding is not part of the shared responsibility. Our joint obligations have been set out in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the data protection-safe implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly on Facebook. If you assert your data subject rights with us, we are obliged to forward these to Facebook.

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

You can find further information on protecting your privacy in Facebook's data protection information: https://de-de.facebook.com/about/privacy/.

You can also use the “Custom Audiences” remarketing feature in the Ad Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen deactivate. To do this you must be logged in to Facebook.

If you don't have a Facebook account, you can deactivate Facebook's usage-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

5. Microsoft Clarity

We use Microsoft Clarity, a service provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA), for the anonymized analysis of user behavior (e.g. click paths, scrolling behavior, heatmaps). Clarity does not collect any personal data in the strict sense and anonymizes IP addresses. The processing takes place on the basis of your consent.

Further information: https://clarity.microsoft.com/terms

6. Google Ads

We use Google Ads. Google Ads is an online advertising program from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available on Google (e.g. location data and interests) (target group targeting). As website operators, we can evaluate this data quantitatively, for example by analyzing which search terms led to our advertisements being displayed and how many advertisements led to corresponding clicks.

The use of this service is based on your consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TTDSG. Consent can be revoked at any time.

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

7. Facebook Conversion API

We have integrated Facebook Conversion API on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected will also be transferred to the USA and other third countries.

Facebook Conversion API allows us to record website visitors' interactions with our website and pass them on to Facebook in order to improve advertising performance on Facebook.

In particular, the time of access, the website accessed, your IP address and your user agent as well as other specific data (e.g. purchased products, value of the shopping cart and currency) are recorded. A complete overview of the data that can be collected can be found here: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters.

The use of this service is based on your consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TTDSG. Consent can be revoked at any time.

You can find further information on protecting your privacy in Facebook's data protection information: https://de-de.facebook.com/about/privacy/.

8. Objection and withdrawal of consent

You can revoke or adjust your consent at any time using the cookie symbol displayed on our website (bottom left/right). You can also specifically deactivate individual tools there. These revocation options also apply to our subdomains and external landing pages if tracking or marketing cookies are used there.

9. Use of Perspective for lead generation

We use the Perspective tool (provider: Perspective Software GmbH, Mailänder Straße 2, 30539 Hannover, Germany) to create landing pages on subdomains of our website. These pages are used specifically in online marketing campaigns (e.g. on LinkedIn, Meta, YouTube or Google) to provide visitors with further information about our offers and to record their interest.

Depending on the campaign, we collect the following personal data in the embedded forms:

(1) Name
(2) Email address
(3) Company name
(4) Telephone number (optional)
(5) Further information about the qualification of the request (e.g. interests, industry)

The purpose of data processing is to process your inquiry and initiate sales.

The data is automatically transmitted to our CRM and email system Brevo via the make.com platform (Make.com s.r.o., Václavské náměstí 2132/47, 110 00 Prague, Czech Republic). Brevo is a service of Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. The processing takes place on the basis of an data processing agreement in accordance with Article 28 GDPR.

The legal basis is your consent in accordance with Article 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG. Consent can be revoked at any time.

For more information about Perspective, see:
https://www.perspective.co/datenschutzerklaerung

More information about Make:
https://www.make.com/en/privacy-notice

10. Google Tag Manager

This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface. The tool itself (which implements the tags) does not process users' personal data. It simply triggers other tags, which in turn may collect data (e.g. Google Analytics or Meta Pixel). Google Tag Manager does not access this data.

The legal basis for the integration of the Google Tag Manager is Article 6(1)(f) GDPR (legitimate interest in a technically flawless integration and management of analysis and tracking services).

You can find more information at:
https://www.google.com/intl/de/tagmanager/use-policy.html

VI. Registration for events organised by CSN GmbH

1. Description and scope of data processing

About our platform (app.csn.de) we occasionally organize our own online or face-to-face events, for which interested parties can register using registration forms.

The following data is required at least:

(1) Name
(2) Email address
(3) Telephone number

At the time of registration, the following data is also stored:

(4) The user's IP address
(5) Date and time
(6) Browser identifier

In individual cases, further information may be requested - optional or mandatory depending on the type of event. The specific data fields can be seen in the respective form. As part of the registration process, the user's consent to the processing of this data is obtained and reference is made to this Privacy Policy.

2. Events organised by our clients

The registration forms functional area is also used by our customers to register and manage participants for their own events. In these cases, it is not CSN GmbH but the respective customer who is responsible for data processing. This Privacy Policy expressly does NOT apply to events organized by third parties. Our customers are obliged to refer to their own Privacy Policy in the registration forms they create. In this case, our customer is the organizer of an event. We process the personal data collected exclusively on behalf of and on the instructions of the respective organizer (Article 28 GDPR).

3. Legal basis and purpose of data processing

Data processing as part of registration for our own events is carried out for event organisation and implementation. The legal basis is Article 6(1)(b) GDPR (contract initiation and execution).

4. Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

This is the case during the registration process to fulfill a contract or to carry out pre-contractual measures if the data is no longer required to carry out the contract. Even after the contract has been concluded, it may be necessary to store the contractual partner's personal data in order to comply with contractual or legal obligations.

5. Right to object and request erasure

As a user, you have the option to cancel your registration at any time. You can change the data stored about you at any time.

VII. Contact form and booking a live demo on the website

1. Contacting us via the contact form

On our website (csn-gmbh.de), we provide a contact form that you can use to get in touch with us. The following personal data is processed:

(1) Name
(2) Email address
(3) Telephone number
(4) Your individual message

By submitting the request, you agree that we will use your information to process your request. The request will be sent to our customer service via email. No further storage in a system takes place.

The legal basis for processing the data is Article 6(1)(b) GDPR (contract initiation) and Article 6(1)(f) GDPR (legitimate interest in efficient communication with interested parties).

Your data will be deleted as soon as the conversation is completed and there are no further legal retention requirements.

2. Booking a live demo

If you request a live demo via our website, we collect the following personal data:

(1) Name
(2) Company name
(3) Email address
(4) Telephone number

This data is transferred to our CRM system Brevo for sales processing and offer submission. Brevo is a service of Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. Data processing takes place on servers within the EU. There is an data processing agreement in accordance with Article 28 GDPR.

The legal basis is Article 6(1)(b) GDPR (pre-contractual measure) and Article 6(1)(f) GDPR (legitimate interest in sales optimization).

When you contact us, you will also be redirected to an appointment booking page provided by the external provider TidyCal (a service of AppSumo LLC, 1305 E 6th St, Suite 3, Austin, TX 78702, USA). There you select a suitable date for the live demo and provide further contact details if necessary.

Please note that TidyCal is an independent service provider whose servers may be located outside the EU. Data processing is carried out by AppSumo in accordance with their data protection guidelines, which can be found at https://tidycal.com/privacy are visible.

VIII. Data protection contact

If you have any questions about the processing of your personal data and your data subject rights, you can contact us at: datenschutz@csn.de

Where your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights in relation to the controller:

1. Right of access

You may request confirmation from the controller as to whether we process personal data concerning you.
If such processing occurs, you can request information from the controller about the following information:

(1) the purposes for which the personal data are processed;
(2) the categories of personal data that are processed;
(3) the recipients or categories of recipients to whom your personal data has been or will be disclosed;
(4) the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
(5) the existence of a right to rectification or deletion of personal data concerning you, a right to restrict processing by the controller or a right to object to this processing;
(6) the existence of a right to lodge a complaint with a supervisory authority;
(7) all available information about the origin of the data if the personal data is not collected from the data subject;
(8) the existence of automated decision-making including profiling in accordance with Article 22 Paragraphs 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you can request to be informed about the appropriate guarantees in accordance with Article 46 GDPR in connection with the transfer.

2. Right to rectification

You have the right to obtain rectification and/or completion of personal data concerning you if it is inaccurate or incomplete. The controller must rectify the data without undue delay.

3. Right to restriction of processing

You can request the restriction of the processing of personal data concerning you under the following conditions:

(1) if you contest the accuracy of the personal data relating to you for a period enabling the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;
(3) the controller no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
(4) if you have objected to the processing in accordance with Article 21(1) GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, these data - with the exception of their storage - may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

4. Right to erasure

a) Obligation to erase data

You can request that the controller delete the personal data concerning you immediately, and the controller is obliged to delete this data immediately if one of the following reasons applies:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent on which the processing was based in accordance with Article 6(1)(a) or Article 9(2)(a) GDPR and there is no other legal basis for the processing.
(3) You object to the processing in accordance with Article 21(1) of the GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Article 21(2) of the GDPR.
(4) The personal data concerning you were processed unlawfully.
(5) The deletion of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
(6) The personal data concerning you was collected in relation to information society services offered in accordance with Article 8(1) GDPR.

b) Notification of third parties

If the controller has made the personal data concerning you public and is obliged to delete it in accordance with Article 17(1) GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.

c) Exceptions

There is no right to deletion if processing is necessary

(1) to exercise the right to freedom of expression and information;
(2) for compliance with a legal obligation requiring processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the field of public health in accordance with Article 9(2) Letters h and i and Article 9(3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR, insofar as the law mentioned under section a) is likely to make the achievement of the objectives of this processing impossible or seriously impair it, or
(5) to assert, exercise or defend legal claims.

5. Right to be informed

If you have asserted the right to rectification, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right to be informed about these recipients by the controller.

6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

(1) the processing is based on consent in accordance with Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract in accordance with Article 6(1)(b) GDPR and
(2) the processing takes place using automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another controller, to the extent that this is technically feasible. The freedoms and rights of other people must not be impaired by this.
The right to data portability does not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is carried out on the basis of Article 6(1)(e) or (f) of the GDPR; This also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; This also applies to profiling insofar as it is connected to such direct advertising.
If you object to processing for direct advertising purposes, your personal data will no longer be processed for these purposes.

In connection with the use of information society services - regardless of Directive 2002/58/EC - you have the opportunity to exercise your right to object using automated procedures that use technical specifications.

8. Right to withdraw consent

You have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

9. Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

(1) is necessary for the conclusion or fulfillment of a contract between you and the controller,
(2) is permitted by Union or Member State law to which the controller is subject and such law contains appropriate measures to safeguard your rights and freedoms and your legitimate interests or
(3) takes place with your express consent.

However, these decisions may not be based on special categories of personal data according to Article 9(1) GDPR, unless Article 9(2) Letters a or g applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With regard to the cases mentioned in (1) and (3), the controller shall take appropriate measures to protect the rights and freedoms as well as your legitimate interests, which includes at least the right to obtain human intervention on the part of the controller, to express one's own point of view and to challenge the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.
The supervisory authority to which the complaint was submitted will inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Article 78 GDPR.

X. Social media profiles

We maintain online presences within social networks and platforms in order to be able to communicate with customers, interested parties and users who are active there and inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.

Unless otherwise stated in our Privacy Policy, we process users' data if they communicate with us on social networks and platforms, e.g. write posts on our online presence or send us messages.

XI. Changes to this Privacy Policy

We reserve the right to adapt this Privacy Policy so that it always complies with current legal requirements or to implement changes to our services in the Privacy Policy, e.g. when introducing new services. The new Privacy Policy will then apply to your next visit.