1. Data Protection at a Glance

General Notes
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data includes any information that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy below.

Data Collection on This Website

Who Is Responsible for Data Collection on This Website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section titled “Note on the Responsible Party” in this privacy policy.

How Do We Collect Your Data?
Your data is collected in two ways: either you provide it to us directly (such as through a contact form), or it is automatically collected by our IT systems when you visit the website, after your consent has been obtained. This includes technical data such as browser type, operating system, and time of page access. This data is collected automatically as soon as you enter this website.

What Do We Use Your Data For?
Some of the data we collect is necessary to ensure the proper functioning of the website. Other data may be used to analyze how you use the site.

What Rights Do You Have Regarding Your Data?
You always have the right to request free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request corrections or deletion of this data. If you have given us consent to process your data, you may revoke that consent at any time. Additionally, under certain circumstances, you have the right to request restrictions on the processing of your personal data. You also have the right to file a complaint with the relevant supervisory authority.

For these purposes and any further questions regarding data protection, feel free to contact us at any time.

Analysis Tools and Third-Party Tools
When you visit this website, your browsing behavior may be analyzed statistically. This is mainly done using analysis programs. Detailed information about these tools is available in the full privacy policy below.

2. Hosting

We host the content of our website with the following provider(s):

External Hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider(s). This may include IP addresses, contact requests, meta and communication data, contract data, names, website accesses, and other data generated via the website.

Hosting is performed to fulfill contracts with our potential and existing customers (Article 6(1)(b) GDPR) and to ensure a secure, fast, and efficient delivery of our online services by a professional provider (Article 6(1)(f) GDPR).

If appropriate consent was requested, processing is based solely on Article 6(1)(a) GDPR and Section 25(1) TDDDG, to the extent that the consent involves storing cookies or accessing information on the user’s device (e.g., device fingerprinting) as defined by TDDDG. Consent can be revoked at any time.

Our hosting provider(s) will only process your data to the extent necessary to perform their service obligations and will follow our instructions regarding this data.

We use the following hosting provider(s):
Webempresa

Order Processing
We have concluded an order processing agreement (AVV) for the use of the above service. This is a legally required contract that ensures third parties process your personal data only according to our instructions and in compliance with the GDPR.

3. General Notes and Mandatory Information

Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data items are collected. Personal data is any information that allows you to be identified personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this occurs.

Please note that data transmission over the internet (e.g., during email communication) may involve security vulnerabilities. It is not possible to fully protect data from unauthorized access by third parties.

Note on the Responsible Party
The responsible party for data processing on this website is:

Emporium GmbH
Mörikestraße 58
70794 Filderstadt
Telefon: +49 711 2293 143
E-Mail: info@emporiumpartners.com

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration
Unless otherwise specified within this privacy policy, your personal data will remain with us until the purpose for which it was processed no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons to retain it (e.g., tax or commercial retention periods); in such cases, deletion will occur once those reasons no longer apply.

General Notes on Legal Bases for Data Processing on This Website
If you have given consent for data processing, we process your personal data based on Article 6(1)(a) GDPR or Article 9(2)(a) GDPR if special categories of data are involved (Article 9(1) GDPR). If you have explicitly consented to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g., via device fingerprinting), processing is also based on Section 25(1) TDDDG. Consent can be revoked at any time.

If your data is necessary for fulfilling a contract or carrying out pre-contractual measures, we process your data based on Article 6(1)(b) GDPR. Furthermore, we process your data if it is necessary to fulfill a legal obligation based on Article 6(1)(c) GDPR. Data processing may also be based on our legitimate interest pursuant to Article 6(1)(f) GDPR. Further details on applicable legal bases are provided in the sections below.

Note on Data Transfers to Third Countries Without Adequate Data Protection and to US Companies Not Certified Under the DPF Framework
We use tools operated by companies based in third countries without adequate data protection and by US-based providers not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in these countries. Please note that in third countries without adequate data protection, there is no level of data protection comparable to that of the EU.

Please note that the USA is considered a third country with generally adequate data protection compared to the EU. A data transfer to the USA is permitted if the recipient is certified under the “EU-US Data Privacy Framework” (DPF) or provides suitable additional safeguards. Information on transfers to third countries, including recipients, is included in this privacy policy.

Recipients of Personal Data
In the course of our business activities, we work with various external partners. In some cases, it is necessary to share your personal data with them. We disclose personal data to external parties only when necessary for contractual fulfillment, when we are legally obligated to do so (e.g., tax authorities), when we have a legitimate interest under Article 6(1)(f) GDPR, or where another legal basis permits disclosure. When using processors, we share personal data only based on a valid processor agreement. In the case of joint processing, a joint controller agreement will be signed.

Revocation of Your Consent to Data Processing
Many data processing activities require your explicit consent. You may revoke this consent at any time. The lawfulness of processing before revocation remains unaffected.

Right to Object Against Data Collection in Specific Cases and Against Direct Marketing (Article 21 GDPR)
IF THE DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION AGAINST THE PROCESSING OF YOUR PERSONAL DATA; THIS RIGHT ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS FOR SUCH PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME AGAINST SUCH PROCESSING. THIS RIGHT ALSO APPLIES TO PROFILING IN SO FAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).

Right to Lodge a Complaint with the Relevant Supervisory Authority
In the event of violations of the GDPR, affected individuals have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or location of the alleged violation. This right is without prejudice to any other administrative or judicial remedies.

Right to Data Portability
You have the right to receive data that we process based on your consent or to fulfill a contract in a structured, commonly used, and machine-readable format. If you request direct transfer of the data to another controller, this will be done only if technically feasible.

Right to Access, Rectification, and Deletion
At any time and in accordance with applicable laws, you have the right to request free access to your stored personal data, its origin, recipients, and purpose. You may also have a right to request rectification or deletion of this data. For further inquiries regarding personal data, feel free to contact us.

Right to Restriction of Processing
You have the right to request restriction of the processing of your personal data. To exercise this right, please contact us directly. The right to restrict processing exists in the following cases:

• If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During verification, you have the right to request restricted processing.
• If the processing of your personal data is unlawful, you may request restricted processing instead of deletion.
• If we no longer need your personal data but you require it to exercise, defend, or assert legal claims, you may request restricted processing instead of deletion.
• If you object under Article 21(1) GDPR, we must weigh your interests against ours. Until it is determined whose interests prevail, you may request restricted processing.

If your personal data processing is restricted, such data may – apart from being stored – only be processed with your consent or for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for important public interests of the European Union or a member state.

Objection to Promotional Emails
We hereby object to the use of contact details published as part of our legal imprint requirement for sending unsolicited advertising and information material. The site operators expressly reserve the right to take legal action in the event of unsolicited promotional communications, such as spam emails.