Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide data will have no consequences. This only applies as long as no other information is provided in the subsequent processing operations.

"Personal data" means any information relating to an identified or identifiable natural person.

Server log files

You can visit our websites without providing any information about yourself.

With each access to our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the accessed page, the date and time of the retrieval, the IP address, the amount of data transmitted, and the requesting provider. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the uninterrupted operation of our website and improving our services.

Contact

Responsible

Please contact us if you wish. The responsible party for data processing is: RAVO Flight Systems GmbH, Fredeburger Str. 47, 57368 Lennestadt, Germany,info@ravoflightsystems.de

Initiative contact by the customer via email

If you initiate contact with us via email, we will only collect your personal data (name, email address, message text) to the extent you provide it. The data processing is for the purpose of processing and responding to your contact request.

If the contact is for the purpose of carrying out pre-contractual measures (e.g. consultation in case of purchase interest, preparation of offers) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR.

If the contact is for other reasons, this data processing is based on Article 6(1)(f) of the GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR for reasons arising from your particular situation.

We will only use your email address to process your request. Your data will then be deleted in accordance with legal retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When using the contact form, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing is for the purpose of contacting you.

We only use your email address to process your request. Your data will then be deleted in accordance with legal retention periods, unless you have consented to further processing and use.

Use of Zendesk for processing customer inquiries

We use the ticket system of Zendesk Inc. (1019 Market Street, 6th Floor, San Francisco, California 94103, USA; "Zendesk") to process customer inquiries. When using the contact form, necessary data such as name, email address, and message text are collected. Your data may be transmitted to the USA. There is an adequacy decision from the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Zendesk is not certified under the TADPF. Data transmission is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data. Zendesk will provide you with a copy of the standard contractual clauses upon request.

The processing is based on Article 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the withdrawal. We will only use your email address to process your request. Your data will then be deleted unless you have consented to further processing and use. For more information on the collection and use of data by Zendesk, your rights in this regard, and options for protecting your privacy, please refer to Zendesk's privacy policy athttps://www.zendesk.com/company/customers-partners/privacy-policy/.

Customer Account / Orders

Customer Account

When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying the order processing. The processing is based on Article 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the withdrawal. Your customer account will then be deleted.

Collection, processing and transfer of personal data when placing orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfil and process your order as well as to handle your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data will result in no contract being concluded. The processing is carried out on the basis of Article 6(1)(b) GDPR and is necessary for the fulfilment of a contract with you.

Your data may be shared, for example, with the shipping companies and dropshipping providers you have chosen, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly adhere to the legal requirements. The scope of data transmission is limited to a minimum.

Evaluation / Advertising

Integration of the Trusted Shops Trustbadge / other widgets

To display the Trusted Shops services (e.g. quality seal, collected reviews) as well as to offer Trusted Shops products to buyers after an order, Trusted Shops widgets are integrated on this website. This serves to safeguard our overriding legitimate interests in optimal marketing by enabling a secure shopping experience in accordance with Article 6(1)(f) GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne (“Trusted Shops”), with which we are jointly responsible for data protection under Article 26 GDPR. We will inform you in the following data protection notices about the essential contractual contents according to Article 26(2) GDPR.

As part of the joint responsibility between us and Trusted Shops, please direct any data protection inquiries and the assertion of your rights primarily to Trusted Shops using the contact options provided in thedata protection information. Regardless, you can always contact the responsible party of your choice. Your request will then be forwarded to the other responsible party for response, if necessary.

1. Data processing when integrating the Trustbadge / other widgets

The Trustbadge is provided by a US-based CDN provider (Content Delivery Network).

An appropriate level of data protection is ensured by an adequacy decision of the EU Commission, which is applicable to the USAhere. Service providers from the USA are usually certified under the EU-U.S. Data Privacy Framework (DPF). You can find more informationhere. If the service providers used are not certified under the DPF, standard contractual clauses have been concluded as an appropriate guarantee.

When the Trustbadge is called, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call, the amount of data transferred, and the requesting provider (access data) and documents the call. The IP address is anonymised immediately after collection, so that the stored data cannot be assigned to your person. The anonymised data is used particularly for statistical purposes and for error analysis.

2. Data processing after order completion

After the order is completed, order information (order total, order number, and any purchased product) as well as your email address hashed using a cryptographic one-way function will be transmitted to Trusted Shops. The legal basis is Article 6(1)(f) GDPR. This is to verify whether you are already registered for services with Trusted Shops and is therefore necessary for the fulfilment of our and Trusted Shops' overriding legitimate interests in providing the buyer protection linked to the specific order and the transactional evaluation services in accordance with Article 6(1)(f) GDPR. If this is the case, further processing will take place in accordance with the contractual agreement made between you and Trusted Shops. If you are not yet registered for the services, you will subsequently have the opportunity to do so for the first time. Further processing after registration will also be governed by the contractual agreement with Trusted Shops. If you do not register, all transmitted data will be automatically deleted by Trusted Shops, and personal reference will no longer be possible.

Trusted Shops uses service providers in the areas of hosting, monitoring, and logging. The legal basis is Article 6(1)(f) GDPR for the purpose of ensuring uninterrupted operation. Processing may take place in third countries (USA and Israel).

An adequate level of data protection is ensured by an adequacy decision of the EU Commission, which applies to the USA.here.and for Israel.here.Service providers from the USA are usually certified under the EU-U.S. Data Privacy Framework. You will receive further information.here. If the service providers used are not certified under the DPF, standard contractual clauses have been concluded as an appropriate guarantee.

Use of Trustpilot

We use the review system "Trustpilot" from Trustpilot A/S (Pilestræde 58, 1112 Copenhagen, Denmark; "Trustpilot") on our website. Trustpilot allows us to collect customer reviews and display them on our website to provide you with insight into the quality of our services. After placing an order, you may receive an invitation to leave a review from us or Trustpilot and then submit a review. The following data may be processed by us or Trustpilot: Email address, name, information about your device and location (IP address, browser settings, type of browser used, browser language, time zone), information about your Trustpilot user account (username, photo, preferred language), information about the purchased product or the service used (reference or order number, product details), the content of your review and the star rating you provided, your product photos or videos (if you attached these to your product review). This data may also be used for the purpose of verifying your review. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent, provided you have explicitly agreed to the sharing of your data and the receipt of the review request. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out based on the consent until the withdrawal. Further information on data protection when using Trustpilot can be found at:https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms

Use of the email address for sending newsletters

We use your email address solely for our own advertising purposes for sending newsletters, regardless of the contract processing, provided you have expressly consented to this. The processing is based on Article 6(1)(a) of the GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the withdrawal. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Your data will be passed on to a service provider for email marketing as part of a commissioned processing. No transfer to other third parties will take place.

Payment service provider

Use of PayPal

We use the payment service PayPal Express from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing is for the purpose of being able to offer you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when you access the website. Cookies may also be used for this purpose. The cookies enable the recognition of your browser. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. By selecting and using PayPal Express, the data required for payment processing will be transmitted to PayPal in order to fulfil the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy atwww.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Use of PayPal Check-Out

We use the payment service PayPal Check-Out from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing is for the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the chosen payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal

For individual payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies if necessary. To this end, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated based on scientifically recognised mathematical-statistical procedures, which take into account, among other things, address data. Your legitimate interests will be taken into account in accordance with legal provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when PayPal makes an advance payment.

You have the right to object at any time to the processing of your personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide the data will result in the contract not being able to be concluded with the payment method you have selected.

Third-party providers

When paying via a third-party payment method, the data required for payment processing will be transmitted to PayPal. This processing is carried out on the basis of Article 6(1)(b) of the GDPR. To carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is carried out on the basis of Article 6(1)(b) of the GDPR. Local third-party providers may include:

- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)

- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)

Purchase on account via PayPal

When paying via the purchase on account payment method, the data required for payment processing will initially be transmitted to PayPal. To carry out this payment method, the data will then be transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfil the contract with you using the chosen payment method. This processing is carried out on the basis of Article 6(1)(b) of the GDPR. Ratepay may carry out a credit check based on mathematical-statistical procedures (probability or score values) using credit agencies as described above. The data processing serves the purpose of credit assessment for contract initiation. The processing is carried out on the basis of Article 6(1)(f) of the GDPR due to our overriding legitimate interest in protection against payment default when Ratepay advances payment. Further information on data protection and which credit agencies Ratepay uses can be found athttps://www.ratepay.com/legal-payment-dataprivacy/andhttps://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the associated privacy policy athttps://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Amazon Payments

We use the payment service Amazon Payments from Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; "Amazon Payments") on our website. The data processing is intended to enable us to offer you payment via the Amazon Payments payment service. To integrate this payment service, it is necessary for Amazon Payments to collect, store, and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when you access the website. Cookies may also be used for this purpose. The cookies allow for the recognition of your browser. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. By selecting and using "Amazon Payments", the data required for payment processing will be transmitted to Amazon Payments in order to fulfil the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. Further information on data processing when using the Amazon Payments payment service can be found in the associated privacy policy at:https://pay.amazon.com/de/help/201212490

Use of SOFORT

We use the payment service provider SOFORT GmbH (Theresienhöhe 12, 80339 Munich, Germany; "SOFORT") for payment processing on our website. SOFORT GmbH is a company of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The data processing is intended to enable us to offer you various payment methods through the payment processing via the payment service provider SOFORT. If you choose a payment option, the data required for payment processing will be transmitted to SOFORT. This data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Further information on data processing when using the payment service provider SOFORT can be found athttps://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/andhttps://www.klarna.com/sofort/.

use of the payment service provider Mollie

We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE Amsterdam, Netherlands; "Mollie") for payment processing on our website. The data processing is intended to enable us to offer you various payment methods through the payment processing via the payment service provider Mollie. If you choose one of the payment options from the payment service provider Mollie, the data required for payment processing will be transmitted to Mollie. This includes your payment details (for example, bank account number or credit card number), your IP address, your internet browser and device type, as well as in some cases your first and last name, your address details, and information about the product or service you have purchased from us. This data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Further information on data processing when using the payment service provider Mollie can be found in the associated privacy policy.https://www.mollie.com/de/privacy

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that allows for the unique identification of the browser when the website is accessed again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually on their acceptance, as well as prevent the storage of cookies and the transmission of the data contained. Already stored cookies can be deleted at any time. However, we would like to point out that you may not be able to use all the functions of this website to their full extent.

You can find information on how to manage (including disabling) cookies in the most important browsers at the following links:

Chrome Browser:https://support.google.com/accounts/answer/61416?hl=de

Internet Explorer:https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla Firefox:https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari:https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

As far as no other information is provided in the privacy policy below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised again after a page change.

The use of cookies or comparable technologies is based on § 25 para. 2 TDDDG. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.

You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.

Analysis / Advertising Tracking / Communication

Use of the Google Tag Manager

We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

This application manages JavaScript tags and HTML tags that are used for the implementation of tracking and analysis tools in particular. The data processing serves the purpose of needs-based design and optimisation of our website.

The Google Tag Manager itself does not store cookies nor does it process personal data. However, it enables the triggering of additional tags that may collect and process personal data.

You can find more information on terms of use and data protectionhere.

Use of the Meta Pixel

We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.

Meta and we are joint controllers for the collection of your data and the transmission of this data to Meta when the service is integrated. This is based on an agreement between us and Meta regarding the joint processing of personal data, which sets out the respective responsibilities. The agreement can be found athttps://de-de.facebook.com/legal/terms/businesstoolsaccessible. Thereafter, we are particularly responsible for fulfilling the information obligations in accordance with Articles 13 and 14 of the GDPR, for complying with the security requirements of Article 32 of the GDPR regarding the correct technical implementation and configuration of the service, as well as for adhering to the obligations under Articles 33 and 34 of the GDPR, insofar as a breach of personal data protection concerns our obligations under the agreement on joint processing. Meta is responsible for enabling the rights of data subjects in accordance with Articles 15 to 20 of the GDPR, for complying with the security requirements of Article 32 of the GDPR regarding the security of the service, and for fulfilling the obligations under Articles 33 and 34 of the GDPR, insofar as a breach of personal data protection concerns Meta's obligations under the agreement on joint processing. The application serves the purpose of targeting website visitors with interest-based advertising on the social networks Facebook and Instagram. For this purpose, the remarketing tag from Meta has been implemented on the website. Through this tag, a direct connection to the Meta servers is established when the website is visited. This transmits to the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then see personalised, interest-based ads. The application also serves the purpose of creating conversion statistics. In this context, we learn the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag, as well as what actions are taken after being redirected to this website. However, we do not receive any information that would allow users to be personally identified. Your data may be transferred to the USA. There is an adequacy decision from the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has been certified under the TADPF and has thus committed to adhering to European data protection principles. The processing of your personal data is carried out with your consent based on Article 6(1)(a) of the GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until the withdrawal.

You can deactivate the remarketing feature "Custom Audiences" here. More information on the collection and use of data by Meta, your rights regarding this, and options to protect your privacy can be found in Meta's privacy policy athttps://www.facebook.com/about/privacy/

Use of Steam Data Suite

We use the analytics service "Steam Data Suite" (Steam Data Suite, Hogehilweg 19, 1101 CB Amsterdam, The Netherlands) on our website as part of a data processing agreement. The data collection and processing is for the purpose of analysing the marketing and advertising efforts of the game. The tool checks once when the game is started whether a click was made on one of our web ads before the game started. For this function, Steam Data Suite stores a single encrypted identifier. This identifier can never be traced back to you, your hardware, or your Steam account and is used solely for the one-time attribution mechanism described here. Further information can be found athttps://steamdatasuite.com/gamer/. The processing of your personal data is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in identifying our customers and addressing them with targeted interest-based advertising. You have the right to object to the processing of your personal data at any time for reasons relating to your particular situation. If you would like your identifier to be removed, please contact Steam Data Suite atgamer@steamdatasuite.com. For more information on terms of use and data protection, please seehttps://steamdatasuite.com/docs/data-protection/.

Plug-ins

Use of YouTube

We use the embedding function for YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").

The function displays videos stored on YouTube in an iFrame on the website. The option "Enhanced Privacy Mode" is activated. This means that YouTube does not store any information about the visitors to the website. Only when you watch a video will information about it be transmitted to YouTube and stored there. Your data may be transmitted to the USA. There is an adequacy decision from the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is not certified under the TADPF. Data transmission is carried out, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at:https://policies.google.com/privacy/frameworks.

The processing of your personal data is based on Article 6(1)(f) GDPR due to our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object at any time to the processing of personal data concerning you for reasons relating to your particular situation.

Further information on the collection and use of data by YouTube and Google, your rights in this regard, and options for protecting your privacy can be found in YouTube's privacy policy athttps://www.youtube.com/t/privacy.

Use of Google Fonts

We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of ensuring a uniform presentation of fonts on our website. To load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used in this process. This involves processing your IP address and information about the browser you are using, which is transmitted to Google. This data is not linked to your Google account.

Your data may be transferred to the USA. There is an adequacy decision from the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google is not certified under the TADPF. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at:https://policies.google.com/privacy/frameworks. The processing of your personal data is based on Article 6(1)(f) of the GDPR due to our overriding legitimate interest in a user-friendly and aesthetically pleasing design of our website. You have the right to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR for reasons relating to your particular situation by notifying us. Further information on data processing and data protection can be found athttps://www.google.de/intl/de/policies/and athttps://developers.google.com/fonts/faq.

Use of OpenStreetMap

We use the open-source mapping service of the OpenStreetMap Foundation (St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom; "OpenStreetMap") on our website. The data processing serves the purpose of visually representing geographical information and maps to show you our location. Cookies may be used in this process. Among other things, the following information may be collected and processed: date and time of access, IP address, as well as information about the browser and device you are using. This information will be linked to your personal user account if you have an account with OpenStreetMap and are logged in when visiting the website. In this case, additional information will be collected and processed, including user ID, email address associated with the user account, and content blocked by the user.

Your data may also be transmitted outside the EU to the United Kingdom. There is an adequacy decision from the EU Commission for the United Kingdom. The use of cookies or similar technologies is based on your consent in accordance with § 25 Abs. 1 S. 1 TDDDG in conjunction with Art. 6 Abs. 1 lit. a GDPR. The processing of your personal data is carried out with your consent based on Art. 6 Abs. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the withdrawal. For more information on data processing and data protection, please refer tohttps://wiki.osmfoundation.org/wiki/Privacy_Policy?tid=331640695983

Compliance Screening

During the compliance screening, your personal data (first and last name, address details) will be compared with the EU Anti-Terror Regulation or the sanctions lists. The aim of this comparison is to protect the company and ensure it does not violate the EU Anti-Terror Regulation. The processing of your personal data is based on Article 6(1)(c) of the GDPR, which is necessary for the fulfilment of a legal obligation. No transfer to other third parties will take place.

Rights of the data subjects and storage duration

Duration of storage

After the complete execution of the contract, the data will initially be stored for the duration of the warranty period, and thereafter, taking into account legal, particularly tax and commercial law retention periods, will be deleted after the expiry of the period, unless you have consented to further processing and use.

Rights of the data subject

You have the following rights under Articles 15 to 20 of the GDPR, provided the legal requirements are met: right to information, right to rectification, right to erasure, right to restriction of processing, right to data portability.

Furthermore, you have the right to object under Article 21(1) of the GDPR against processing based on Article 6(1)(f) of the GDPR, as well as against processing for the purpose of direct marketing.

Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the supervisory authority in accordance with Article 77 of the GDPR if you believe that the processing of your personal data is not lawful.

Right to object

If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR, you have the right to object to these processing activities at any time for reasons arising from your particular situation, with effect for the future.

After an objection has been made, the processing of the affected data will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is necessary for the establishment, exercise or defence of legal claims.

last updated: 27.02.2026