Privacy Policy
Thank you for your interest in our online shop. Protecting your privacy is very important to us. Below we provide detailed information about how we handle your personal data.
I. Name and Address of the Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable national data protection laws of the Member States, as well as other data protection provisions, is:
Trend-Design GmbH
Goebenstr. 66
D-32051 Herford – Germany
Tel.: +49 (0) 5221 54900
Email: info@trend-design.com
II. General Information on Data Processing
1. Scope of the Processing of Personal Data
We process personal data of our users only to the extent necessary to provide a
functional website, as well as our content and services. The processing of our
users’ personal data generally only takes place with the user’s consent. An
exception applies in cases where it is not possible to obtain prior consent for
factual reasons and the processing of the data is permitted by statutory
provisions.
2. Legal Basis for the Processing of Personal Data
Where we obtain the consent of the data subject for processing operations
involving personal data, Article 6(1)(a) of the EU General Data Protection
Regulation (GDPR) serves as the legal basis.
When processing personal data necessary for the performance of a contract to
which the data subject is a party, Article 6(1)(b) GDPR serves as the legal
basis. This also applies to processing operations necessary to take steps prior
to entering into a contract. Where processing of personal data is necessary for
compliance with a legal obligation to which our company is subject, Article
6(1)(c) GDPR serves as the legal basis. In the event that vital interests of
the data subject or another natural person require the processing of personal
data, Article 6(1)(d) GDPR serves as the legal basis.
If processing is necessary for the purposes of a legitimate interest pursued by
our company or by a third party, and such interests are not overridden by the interests
or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR
shall serve as the legal basis for processing.
3. Data Erasure and Storage Duration
The personal data of the data subject will be erased or blocked as soon as the
purpose for storage no longer applies. Data may be stored beyond this period if
provided for by European or national legislation in EU regulations, laws, or
other legal provisions to which the controller is subject. Blocking or erasure
of the data also takes place when a retention period prescribed by the
aforementioned regulations expires, unless further storage of the data is
necessary for the conclusion or performance of a contract.
III. Provision of the Website and Creation of Log Files
1. Description and Scope of Data Processing
Every time our website is accessed, our system automatically collects data and
information from the computer system of the accessing device.
The following data are collected:
(1) Information about the browser type, language, and version used
(2) The user’s operating system and version
(3) The user’s IP address
(4) Date and time of access
(5) Date and time of first and last visit
(6) Date and time of first and last login
(7) Websites from which the user’s system accessed our website
These data are also stored in the log files of our system. This data is not stored together with other personal data of the user.
2. Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Article
6(1)(f) GDPR.
3. Purpose of Data Processing
Temporary storage of the IP address by the system is necessary to deliver the
website to the user's computer. For this purpose, the user’s IP address must
remain stored for the duration of the session.
Storage in log files takes place to ensure the functionality of the website. The data also helps us to optimise the website and to ensure the security of our information technology systems. No analysis of the data for marketing purposes takes place in this context.
These purposes also constitute our legitimate interest in data processing in accordance with Article 6(1)(f) GDPR.
4. Duration of Storage
The data will be deleted as soon as they are no longer necessary for the
purpose for which they were collected. In the case of data collection for the
provision of the website, this is the case when the respective session ends.
In the case of data storage in log files, this occurs at the latest after seven days. Storage beyond this period is possible. In such cases, the users’ IP addresses are deleted or anonymised so that identification of the accessing client is no longer possible.
5. Objection and Removal Option
The collection of data for the provision of the website and the storage of data
in log files is essential for the operation of the website. Consequently, the
user has no possibility to object.
IV. Use of Cookies
Our website uses cookies. Cookies are text files that are stored in the
Internet browser or by the Internet browser on the user's computer system. When
a user accesses a website, a cookie may be stored on the user's operating
system. This cookie contains a unique string of characters that enables the
browser to be clearly identified when the website is accessed again.
We use cookies to make our website more user-friendly. Some elements of our website require the accessing browser to be identified even after navigating to another page.
To make visiting our website attractive and to enable the use of certain functions, display suitable products, or conduct market research, we use so-called cookies on various pages. This serves to protect our legitimate interests in the optimised presentation of our offering, which are overriding in the context of a balancing of interests. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognise your browser during your next visit (persistent cookies). The duration of storage can be found in your web browser’s cookie settings overview.
You can configure your browser so that you are informed about the setting of cookies and can decide individually on their acceptance, or exclude the acceptance of cookies for certain cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this information for the respective browsers at the following links:
· Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
· Safari™: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
· Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
· Firefox™: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
· Opera™: https://help.opera.com/de/latest/web-preferences/
If cookies are not accepted, the functionality of our website may be limited.
Session Cookies
To enhance the user experience and effectiveness of our site, we use temporary
cookies (so-called session cookies), which allow us to identify you during your
visit. This enables you to, for example, retrieve your shopping cart at any
time during your session in our e-shop. These cookies are deleted after the
browser session, but at the latest after five hours.
The following information is processed through our session cookies:
(1) Anonymous user ID
(2) Items in the shopping cart (quantity, value)
(3) Pages visited in the shop
(4) Login status
Permanent Cookies
By using so-called permanent cookies, we also collect and store data in
anonymized form to analyze your user behavior on our website. This helps us to
optimize our presence and advertising measures on third-party websites and
tailor our product advertising as accurately as possible to user interests. The
data is not used to identify visitors to our website or link them with
individual user data. If you do not delete these cookies from your browser,
they will expire within a period of 60 days to a maximum of five years, after
which your browser will automatically delete them.
The following information is collected and processed:
(1) Your IP address (anonymized by truncation)
(2) The browser type and version you are using
(3) The operating system/platform you are using
(4) The page from which you accessed our site
(5) Information about search results and links from other sites
(6) The order in which you visited the pages of our website, including date and
time
(7) The item numbers of the products you viewed or searched for
(8) The time it took for a webpage to load
(9) Any errors in downloading the page
(10) Your order history
(11) Receipt and read confirmations of our newsletters
(12) Collection of anonymized movement patterns (e.g., which products were
viewed, added to the cart, or purchased)
When you access our website, you will be informed via an info banner about the use of cookies for analytical purposes and will be directed to this privacy policy. The banner also provides guidance on how to disable cookie storage in your browser settings.
Legal Basis for Data Processing
The legal basis for the processing of personal data through the use of cookies
is Art. 6 (1) (f) GDPR.
Purpose of Data Processing
The purpose of using technically necessary cookies is to simplify the use of websites
for users. Some features of our website cannot be offered without cookies. For
these features, it is necessary that the browser is recognized even after a
page change.
We use cookies for the following applications:
• Shopping cart
• Retaining language preferences
• Remembering search terms
The user data collected through technically necessary cookies is not used to create user profiles. The use of analytical cookies serves the purpose of improving the quality of our website and its content. By using analytical cookies, we can learn how the website is used and continuously optimize our offerings. Our legitimate interest in processing personal data under Art. 6 (1) (f) GDPR lies in these purposes.
Duration of Storage, Right to Object, and Removal
Cookies are stored on the user's device and transmitted to our site. Therefore,
as a user, you have full control over the use of cookies. By adjusting the
settings in your internet browser, you can disable or limit the transmission of
cookies. Cookies that are already stored can be deleted at any time. This can
also be done automatically. If cookies are disabled for our website, some
functions of the website may no longer be fully available.
The transmission of Flash cookies cannot be controlled via browser settings, but can be prevented by adjusting the Flash Player settings.
V. Newsletter, Direct Mail Advertising
1. Description and Scope of Data Processing
On our website, there is an option to subscribe to a free newsletter. During
the registration for the newsletter, the data from the input form is
transmitted to us. Your email address will be collected in this process.
Optionally, you may also provide your first name, last name, and salutation.
Additionally, the following data is collected during registration:
(1) Date and time of registration
(2) Time zone
Your consent is obtained for data processing during the registration process, and you will be referred to this privacy policy. If you purchase goods or services on our website and provide your email address, it may subsequently be used by us to send a newsletter. In this case, the newsletter will only contain direct marketing for our own similar goods or services. No data is shared with third parties in connection with the data processing for sending newsletters. The data is solely used for sending the newsletter.
2. Legal Basis for Data Processing
The legal basis for processing the data after the user subscribes to the
newsletter is the user's consent as per Art. 6 (1) (a) GDPR.
If we receive your email address in connection with the sale of goods or services, and you have not objected, we reserve the right to regularly send you offers for similar products, such as those already purchased, from our range via email. This is done to protect our legitimate interests in direct marketing within the scope of a balancing of interests. The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 (3) of the German Unfair Competition Act (UWG).
We store this data on secure servers in Germany. You can withdraw your consent to the storage of your data and its use for delivering our newsletter at any time. Every newsletter contains an unsubscribe link. Alternatively, you can send an informal message to info@trend-design.com.
3. Purpose of Data Processing
The collection of the user's email address is necessary for delivering the
newsletter. The collection of other personal data during the registration
process serves to prevent misuse of the services or the provided email address.
4. Duration of Storage
The data will be deleted as soon as they are no longer necessary to achieve the
purpose for which they were collected. Therefore, the user's email address will
be stored as long as the newsletter subscription is active.
The other personal data collected during the registration process will usually be deleted after a period of seven days.
5. Right to Object and Possibility of Removal
The user may cancel the newsletter subscription at any time. A corresponding
link is included in each newsletter. This also allows for the withdrawal of
consent regarding the storage of the personal data collected during the
registration process.
6. Direct Mail Advertising and Your Right to Object
In addition, we reserve the right to use your first and last name, as well as
your postal address, for our own advertising purposes, such as sending you
interesting offers and information about our products by mail. This serves to
protect our legitimate interests in direct marketing within the scope of a
balancing of interests. The legal basis for direct mail advertising as a result
of the sale of goods or services is § 7 (3) UWG.
VI. Registration
1. Description and Scope of Data Processing
On our website, we offer users the opportunity to register by providing
personal data. The data is entered into a form and transmitted to us for
storage. Mandatory fields are marked as such, as we require this data for
contract processing, processing your inquiry, or creating a customer account.
Without providing this data, you will not be able to complete the order or
account creation process, nor send your inquiry. The specific data collected is
evident from the respective input forms. We use the data you provide for
contract processing and handling your requests. After the complete execution of
the contract or deletion of your customer account, your data will be restricted
for further processing and deleted after the statutory tax and commercial
retention periods, unless you have explicitly consented to further use of your
data or we reserve the right to use the data beyond that, which is legally
permitted and which we inform you about in this declaration. Deleting your
customer account is possible at any time and can be done either by sending a
message to the contact option described below or via a function in your
customer account.
The following data is collected during the registration process:
(1) The user’s IP address
(2) Date and time of registration
(3) Date and time of the last login
(4) Whether the registration was confirmed
(5) Date and time of customer account creation
(6) Customer group membership
(7) Salutation, first name, last name, email address
(8) Address: street, house number, postal code, city, country
(9) Username, password
(10) Last login date; email confirmed (yes/no); customer account created on;
customer account created in (de/en/b2b), customer group
For orders, the following data is also collected:
Order (billing address / shipping address): Salutation, first name, last name,
street, postal code, city, country, account number, bank code, IBAN, bank,
account holder. Credit card (card type): Mastercard / Visa with the following
information: cardholder, card type, card number, expiration date, security
code.
PayPal/Credit Card
During the registration process, the user’s consent to the processing of this
data is obtained. Information regarding data processing by PayPal (Europe) S.à
r.l. et Cie, S.C.A. for end customers (cardholders/users) according to Art. 14
GDPR can be found here, and information regarding the processing for payment
methods can be found here.
2. Legal Basis for Data Processing
The legal basis for processing the data is the user’s consent, as per Art. 6
(1) (a) GDPR. If the registration is necessary for the performance of a
contract, to which the user is a party, or for the execution of pre-contractual
measures, the additional legal basis for data processing is Art. 6 (1) (b)
GDPR.
3. Purpose of Data Processing
User registration is required to make certain content and services available on
our website. Your data helps us to tailor and continuously improve your
shopping experience. We use the personal data to inform you about orders,
products, services, and offers, prevent misuse of our website, and allow you to
interact with other users on our website in a personalized way. User
registration is also required to fulfill a contract with the user or to conduct
pre-contractual measures. Purchase contracts can be concluded through our
website. To fulfill these contracts, we need personal data.
4. Duration of Storage
The data will be deleted as soon as they are no longer necessary for the
purpose for which they were collected.
For data collected during the registration process, this is the case when the
registration on our website is canceled or modified. For data collected during
the registration process for fulfilling a contract or executing pre-contractual
measures, this is the case when the data is no longer required for contract
performance. Even after the completion of the contract, it may still be
necessary to store the personal data of the contracting partner in order to
comply with contractual or legal obligations.
5. Right to Object and Possibility of Removal
As a user, you have the right to cancel your registration at any time. You can
modify the data stored about you at any time. Changes to the data can generally
be made through your customer account. To do so, log into your customer account
and select the appropriate section. Modify the data and save it. Full deletion
of your account can only be done through our customer service. For this, simply
contact them via email at info@trend-design.com. If the data is
required for the fulfillment of a contract or pre-contractual measures,
premature deletion of the data is only possible as long as no contractual or
legal obligations prevent the deletion.
VII. Contact Form and Email Contact
1. Description and Scope of Data Processing
Our website features a contact form that can be used for electronic communication. If a user utilizes this option, the data entered in the input mask is transmitted to us and stored. The data collected includes:
(1) Salutation, first name, last name
(2) Email address
(3) Phone number (optional)
(4) Subject; comment (user’s message)
(5) User’s consent
Your consent for data processing is obtained during the submission process, and a reference to this privacy policy is provided. Alternatively, contact can be made via the provided email address. In this case, the personal data transmitted through the email is stored.
No data is passed on to third parties in this context. The data is solely used for processing the communication.
2. Legal Basis for Data Processing
The legal basis for processing the data is the user’s consent, in accordance
with Art. 6 (1) (a) GDPR. The legal basis for processing data transmitted via
email is Art. 6 (1) (f) GDPR. If the email contact aims at concluding a
contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
3. Purpose of Data Processing
The processing of personal data from the input mask is used solely to process
the user’s contact request. In the case of email contact, the legitimate
interest in processing the data is also applicable. The other personal data
processed during the submission process is used to prevent misuse of the
contact form and to ensure the security of our information technology systems.
4. Duration of Storage
The data will be deleted as soon as it is no longer necessary for the purpose
for which it was collected. For the personal data from the input mask of the
contact form and those transmitted by email, this is the case when the
respective conversation with the user is concluded. The conversation is
considered concluded when it is evident from the circumstances that the matter
at hand has been finally resolved. Any additional personal data collected
during the submission process will be deleted no later than seven days after
submission.
5. Right to Object and Possibility of Removal
The user has the right to withdraw their consent to the processing of personal
data at any time. If the user contacts us via email, they may object to the
storage of their personal data at any time. In such cases, the conversation
cannot continue. Please contact our customer service at
[info@trend-design.com](mailto:info@trend-design.com) for assistance. All
personal data stored during the contact process will be deleted in this case.
VIII. Data Transfer
We do not transmit your personal data to third parties for purposes other than
those listed below.
We only disclose your personal data to third parties if:
(1) You have given your explicit consent in accordance with Art. 6 (1) Sentence
1 (a) GDPR,
(2) The disclosure is necessary for the assertion, exercise, or defense of
legal claims in accordance with Art. 6 (1) Sentence 1 (f) GDPR, and there is no
reason to believe that you have a predominant interest in not disclosing your
data,
(3) There is a legal obligation for disclosure in accordance with Art. 6 (1)
Sentence 1 (c) GDPR, or
(4) It is legally permissible and necessary for the processing of contractual
relationships with you in accordance with Art. 6 (1) Sentence 1 (b) GDPR.
1. Hosting Services by a Third-Party Provider
As part of the processing on our behalf, a third-party provider performs
hosting and website display services for us. This is done to safeguard our
overriding legitimate interests in properly presenting our offerings. All data
collected as part of using this website or in designated forms in the online
store, as described below, is processed on their servers. Processing on other
servers only occurs within the scope outlined here. This service provider is
located within a country of the European Union or the European Economic Area.
2. Data Transfer for Order Processing
To fulfill the contract, we share your data with the shipping company tasked
with the delivery of goods, as far as necessary for the delivery of the ordered
goods. Depending on the payment service provider you select during the ordering
process, we transfer the payment data collected for payment processing to the
financial institution handling the payment, and possibly to payment service
providers appointed by us, or to the selected payment service provider. Some
selected payment service providers may also collect this data themselves if you
create an account with them. In this case, you must log in with your access
data to the payment service provider during the order process. The privacy
policy of the respective payment service provider applies in this case.
If you have expressly consented during or after your order, we will
share your phone number with the selected shipping provider so that they can
contact you before delivery for delivery announcement or coordination purposes.
The consent can be revoked at any time by sending a message to the contact
details described below or directly to the shipping provider at the contact
address provided below. Upon revocation, we will delete the data provided for
this purpose unless you have expressly consented to further use of your data or
we have reserved any further use of your data that is legally permitted and
which we inform you about in this policy.
United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany
Tel.: 01806-882-663 (20 cents per call from German landlines; mobile rates up
to 60 cents per call)
Fax: 02131-9472222
Email: https://www.ups.com/upsemail/input?loc=de_DE
IX. Analytics Tools
The tracking measures listed below, which we use, are carried out on the basis
of Art. 6 (1) Sentence 1 (f) GDPR. With the tracking measures used, we aim to
ensure that our website is designed to meet the needs of users and continuously
optimized. Additionally, we use these tracking measures to statistically
capture the use of our website and evaluate it for the purpose of optimizing
our offerings for you. These interests are considered legitimate within the
meaning of the aforementioned provision.
Google Analytics
We use the web analytics service Google Analytics by Google Inc. (1600
Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our
website. The data processing serves the purpose of analyzing this website and
its visitors. To do this, Google, on behalf of the operator of this website,
uses the collected information to evaluate your use of the website, compile
reports on website activities, and provide further services related to website
usage and internet usage to the website operator. The IP address transmitted by
your browser in the context of Google Analytics is not merged with other data
from Google.
Google Analytics uses cookies that allow an analysis of the usage of the website by you. The information generated by the cookies regarding your usage of this website is usually transmitted to a Google server in the USA and stored there. On this website, IP anonymization is activated. As a result, your IP address will be truncated by Google within the member states of the European Union or other contracting states to the Agreement on the European Economic Area. In exceptional cases, the full IP address may be transmitted to a Google server in the USA and shortened there. Your data may be transferred to the USA. There is an adequacy decision by the European Commission for data transfers to the USA.
Legal Basis for Data Processing
The legal basis for the data processing is Art. 6 (1) (f) GDPR.
Your Right to Object:
You can object to the processing of your personal data. To do so, you can
prevent the storage of cookies by selecting the appropriate technical settings
in your browser software. However, this may mean that you may not be able to
use all of the website's functions fully. Additionally, you can prevent the
collection of data generated by the cookie and related to your use of the
website (including your IP address) by Google, as well as the processing of
these data by Google, by downloading and installing the browser plugin
available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
To prevent the collection across devices by Google Analytics, you can set an opt-out cookie. This will prevent the future collection of your data when visiting this website. To do this, you need to perform the opt-out on all systems and devices you use for it to take effect comprehensively. If you click here, the opt-out cookie will be set: Google Analytics deactivate.
For further information on terms of use and data protection, please refer to Google Analytics Terms of Service and Google's Privacy Policy.
X. Advertising via Marketing Networks
Google AdWords Remarketing
We use Google AdWords to advertise this website in Google search results as
well as on third-party websites. To do so, when you visit our website, the
so-called Remarketing cookie is set by Google. This cookie automatically
enables interest-based advertising using a pseudonymous cookie ID based on the
pages you have visited. This serves to protect our legitimate interests in
optimally marketing our website, based on a balancing of interests. The legal
basis for this is Art. 6 (1) S. 1 lit. f GDPR.
Further data processing only occurs if you have consented to Google linking your web and app browsing history with your Google account and using information from your Google account to personalise the ads you see on the web. If you are logged into Google during your visit to our website, Google will use your data, combined with Google Analytics data, to create and define target audience lists for cross-device remarketing. In this case, your personal data will be temporarily linked with Google Analytics data to create target audiences.
Google AdWords Remarketing is a service provided by Google LLC (www.google.de). Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.
You can disable the Remarketing cookie via this link. In addition, you can learn about cookie placement and adjust your settings via the Digital Advertising Alliance.
XI. Social Media Plug-ins
Use of Social Plugins from Meta (Facebook, Instagram, WhatsApp), Google,
TikTok, X (formerly Twitter) using the Shariff Solution
Our website uses social buttons from social networks. This is done on the basis
of Art. 6 (1) S. 1 lit. f GDPR, to make our website more well-known. The
commercial purpose behind this is considered a legitimate interest under the
GDPR. The responsibility for ensuring GDPR-compliant operation lies with the
respective providers.
To enhance the protection of your data when visiting our website, these buttons are not fully integrated as plugins but are embedded via an HTML link. This ensures that when you visit a page of our website containing such buttons, no connection is established with the servers of the respective social network provider.
When you click on one of the buttons, a new browser window will open, leading you to the page of the respective service provider, where you can (if required, after logging in) interact with the like or share button, for example.
The purpose and scope of data collection, as well as the further processing and use of the data by the providers on their pages, as well as contact possibilities and your rights and options for protecting your privacy, can be found in the privacy policies of the providers:
· Google +1 Button Privacy Policy
· X (formerly Twitter) Privacy Policy
1. Facebook
We use social media plugins from Facebook on our website to make its use more
personal. For this purpose, we use the “LIKE” or “SHARE” button. This is a
service provided by Facebook.
When you visit a page of our website that contains such a plugin, your browser
establishes a direct connection with Facebook's servers. The content of the
plugin is sent directly from Facebook to your browser, which then embeds it
into the website.
By embedding the plugins, Facebook receives the information that your browser
has accessed the corresponding page of our website, even if you do not have a
Facebook account or are not currently logged into Facebook. This information
(including your IP address) is transmitted directly from your browser to a
Facebook server in the USA and is stored there.
If you are logged into Facebook, Facebook can directly associate the visit to
our website with your Facebook account. If you interact with the plugins, such
as by pressing the “LIKE” or “SHARE” button, the corresponding information will
also be sent directly to a Facebook server and stored there. The information
will also be published on Facebook and displayed to your Facebook friends.
Facebook may use this information for advertising, market research, and to
tailor Facebook pages. To this end, Facebook creates usage, interest, and
relationship profiles, e.g., to evaluate your use of our website in relation to
the ads displayed to you on Facebook, to inform other Facebook users about your
activities on our website, and to provide other services related to Facebook
use.
If you do not want Facebook to associate the data collected through our website
with your Facebook account, you must log out of Facebook before visiting our
website.
For the purpose and scope of data collection and further processing and use of
the data by Facebook, as well as
your rights and privacy settings, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/.
2. Instagram
We use Instagram to embed content on our website. We refer you to Instagram's
privacy policy. We process your data to share content and interact with you.
The legal basis for data processing is your consent. Your data is stored by
Instagram and by us. Your rights include:
access, correction, deletion, and objection.
XII. Rights of the Data Subject and Contact Information
If personal data concerning you is processed, you are a data subject as defined
by the GDPR, and you have the following rights against the controller:
1. Right of Access
You have the right to request confirmation from the controller as to whether
personal data concerning you is being processed by us. If such processing
occurs, you may request the following information from the controller:
(1) the purposes for which the personal data is processed;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom the personal data
concerning you has been or will be disclosed;
(4) the planned duration for which the personal data concerning you will be
stored, or, if specific details cannot be provided, the criteria used to
determine the storage duration;
(5) the existence of the right to rectification or erasure of personal data
concerning you, the right to restriction of processing by the controller, or
the right to object to such processing;
(6) the existence of a right to lodge a complaint with a supervisory authority;
(7) all available information about the source of the data if the personal data
was not obtained from the data subject;
(8) the existence of automated decision-making, including profiling, under
Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful
information about the logic involved, as well as the significance and the
intended consequences of such processing for the data subject.
You have the right to request information on whether personal data concerning
you is transferred to a third country or an international organization. In this
regard, you can request to be informed about the appropriate safeguards under
Article 46 of the GDPR in connection with the transfer.
2. Right to Rectification
You have the right to request the rectification and/or completion of your
personal data, where such data is inaccurate or incomplete. The controller is
obliged to make the rectification without undue delay.
3. Right to Restriction of Processing
You may request the restriction of processing of your personal data under the
following conditions:
(1) if you dispute the accuracy of the personal data concerning you, for a
period that allows the controller to verify the accuracy of the personal data;
(2) the processing is unlawful, and you oppose the erasure of the personal data
and request the restriction of its use instead;
(3) the controller no longer needs the personal data for processing purposes,
but you require it for the establishment, exercise, or defense of legal claims;
or
(4) if you have objected to processing under Article 21(1) of the GDPR, and it
has not yet been determined whether the legitimate grounds of the controller
override your rights.
If the processing of your personal data has been restricted, such data – apart
from its storage – can only be processed with your consent or for the
establishment, exercise, or defense of legal claims, or for the protection of
the rights of another natural or legal person, or for reasons of substantial
public interest of the Union or a Member State.
If the restriction of processing is lifted under the above conditions, the
controller will inform you before the restriction is removed.
4. Right to Erasure
a) Obligation to Erase
You can request the controller to erase your personal data without undue delay,
and the controller is obliged to erase this data without undue delay if one of
the following grounds applies:
(1) The personal data concerning you is no longer necessary for the purposes
for which it was collected or otherwise processed.
(2) You withdraw your consent on which the processing is based according to
Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal
basis for the processing.
(3) You object to the processing under Article 21(1) of the GDPR, and there are
no overriding legitimate grounds for the processing, or you object to the
processing under Article 21(2) of the GDPR.
(4) The personal data concerning you has been unlawfully processed.
(5) Erasure of personal data concerning you is required for compliance with a
legal obligation under Union or Member State law to which the controller is
subject.
(6) The personal data concerning you has been collected in relation to the
offer of information society services under Article 8(1) of the GDPR.
b) Information to Third Parties
If the controller has made the personal data concerning you public and is
required to erase it under Article 17(1) of the GDPR, the controller shall,
taking into account available technology and the cost of implementation, take
reasonable steps, including technical measures, to inform other controllers
processing your personal data that you, as the data subject, have requested the
erasure of all links to or copies or replications of such personal data.
c) Exceptions
The right to erasure does not apply insofar as processing is necessary:
(1) for the exercise of the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing under
Union or Member State law to which the controller is subject, or for the
performance of a task carried out in the public interest or in the exercise of
official authority vested in the controller;
(3) for reasons of public interest in the area of public health in accordance
with Article 9(2)(h) and (i), as well as Article 9(3) of the GDPR;
(4) for archiving purposes in the public interest, scientific or historical
research purposes, or for statistical purposes under Article 89(1) of the GDPR,
insofar as the right to erasure mentioned in paragraph (a) is likely to prevent
or seriously impair the achievement of the objectives of that processing; or
(5) for the establishment, exercise, or defense of legal claims.
5. Right to Notification
If you have exercised your right to rectification, erasure, or restriction of
processing against the controller, they are obliged to inform all recipients to
whom your personal data has been disclosed about the rectification, erasure, or
restriction of processing, unless this proves impossible or involves a
disproportionate effort. You have the right to be informed about these
recipients by the controller.
6. Right to Data Portability
You have the right to receive the personal data concerning you, which you have
provided to the controller, in a structured, commonly used, and
machine-readable format. Furthermore, you have the right to transmit those data
to another controller without hindrance from the controller to whom the
personal data was provided, provided that:
(1) the processing is based on your consent under Article 6(1)(a) or Article
9(2)(a) of the GDPR, or on a contract under Article 6(1)(b) of the GDPR, and
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to request that the personal
data concerning you be directly transmitted from one controller to another,
where technically feasible. The freedoms and rights of other persons must not
be adversely affected by this. The right to data portability does not apply to
the processing of personal data which is necessary for the performance of a
task carried out in the public interest or in the exercise of official
authority vested in the controller.
7. Right to Object
You have the right to object, on grounds relating to your particular situation,
at any time to the processing of personal data concerning you, which is based
on Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on
these provisions.
The controller shall no longer process the personal data concerning you unless
they demonstrate compelling legitimate grounds for the processing that override
your interests, rights, and freedoms, or the processing is necessary for the establishment,
exercise, or defense of legal claims.
If the personal data concerning you is being processed for direct marketing
purposes, you have the right to object at any time to the processing of your
personal data for such marketing purposes; this also applies to profiling
insofar as it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal
data concerning you will no longer be processed for these purposes.
You have the option to exercise your right to object in the context of using
information society services – notwithstanding Directive 2002/58/EC – through
automated procedures involving technical specifications.
8. Right to Withdraw Consent
You have the right to withdraw your data protection consent at any time. The
withdrawal of consent does not affect the lawfulness of processing based on
consent before its withdrawal. If you wish to exercise your right of withdrawal or objection, you can
simply send an email to info@trend-design.com.
9. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the
right to lodge a complaint with a supervisory authority, in particular in the
Member State of your habitual residence, your place of work, or the place of
the alleged infringement, if you believe that the processing of personal data
concerning you infringes the GDPR.
The supervisory authority to which the complaint has been submitted will inform
the complainant about the progress and the outcome of the complaint, including
the possibility of a judicial remedy under Article 78 of the GDPR.
Trend-Design GmbH, as of: 05/2025