Privacy policy

Privacy Policy of the Interhome Group

In this Privacy Policy, we would like to inform you about the personal data we collect when you visit our website and use our digital and analogue services and the purpose for which we use the data. The Privacy Policy also provides information on data processing when making a booking on a website that we operate (in particular https://www.interhome.in), by telephone, through travel agencies or a partner company affiliated with us on a contractual basis.

Personal data is any data that relates to you personally, such as your name, address and email address.

Data controller
Summary
How we collect and process your data when you register for a user account
How we collect and use your data when you make a booking
Disclosure of your personal data to other recipients
Trustpilot
Collection and use of your data when you visit our website
Use of cookies
Contact form and email
Google Analytics
Facebook Plug-In
Google Maps
Google Tag Manager
Google Adwords
Facebook Custom Audiences
DoubleClick by Google
Iridion Optimization Suite
Sending recommendations to friends or receive recommendations
Newsletters
Newsletter tracking
Your rights as a data subject

Data controller

The data controller within the meaning of the data protection laws is:

HHD AG, Sägereistrasse 27, CH 8152 Glattbrugg

Tel.: +41 43 810 91 91
Email: info@interhome.ch

Data protection coordinator for HHD AG: Andreas Benz
DSB@interhome.com or DPO@interhome.com

Representative pursuant to Art. 27 GDPR: Prof. Clemens Pustejovsky
Wallstr. 6, 79098 Freiburg, Germany, Tel. +497612168680
DSB@interchalet.com or DPO@interchalet.com

Summary

When you book accommodation via our portal, we collect and use your personal data to process the payment and to transfer the data to our partners where necessary to honour the contract.
When you visit this website, we collect data to the extent that this is technically necessary. We also collect and use data to carry out reach analyses with Google Analytics and Iridion Optimization Suite.
We use social media tools and other tools, including the Facebook plug-in, which allows you to interact with Facebook and other users, Google Maps, Google Adwords, Facebook Custom Audiences and DoubleClick by Google.
We offer a newsletter to existing customers and those who have subscribed to it, which you can unsubscribe from at any time.
As a data subject, you have the right to objection, revocation, information and deletion and you have the right to lodge a complaint with a supervisory authority.

How we collect and process your data when you register for a user account

A user profile is created when you register for an account. This provides various functions relating to your booking process. The functions undergo continuous further development.

The Interhome Group (HHD AG) also offers a login area for hosts (see https://new.myhome.interhome.group/login )

We collect and use the following personal data during the registration process and when setting up the services of Interhome Group (HHD AG):

First name, last name
Email address
Date and time of registration
Street and house number
Postcode, city, country
Telephone number (when on holiday)
Password (encrypted and secured)
Payment information (e.g. last four digits of credit card, billing address, etc., if applicable and stored securely)
Customer support interactions
Travel documents (saved in connection with bookings)

This data is processed on the basis of Art. 6 (1) (b) GDPR for the purpose of carrying out booking transactions and comparable processing operations.

We also collect and process the following additional data for information, marketing and optimisation purposes:

Booking history
User preferences
Feedback and reviews (content created by the user about their stay or experience)
Marketing data (data on marketing preferences, campaigns and user reactions)

Data processing is carried out on the basis of Art. 6 (1) (d) GDPR and, where necessary, on the basis of consent given in accordance with Art. 6 (1) lit. a), Art. 7 GDPR

As soon as your user account on our website is deleted, your data will also be deleted. Statutory retention obligations are an exception to this.

If you register via third-party providers such as Google, Facebook and Apple, you will be redirected to the website of the respective provider. You can enter your user data and register there. This links the personal data used for your account and additional profile information to our service. Details on the third-party providers and the associated information, in particular the third countries, can be found in the passages provided below.

We receive the following personal data automatically via Facebook:

Your Facebook name
The email address associated with your Facebook account
The stated place of residence
Language setting
Profile picture

We receive the following personal data automatically via Google:

First name
Last name
Gender
The email address associated with your Google account
Google ID
Profile picture

We only use this data to complete your user profile and insofar as it is necessary to identify you using this information. The registration/login data is transferred to us on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. This was obtained from the respective third-party provider. Use of this registration and login option with one of the providers mentioned is entirely optional; you can also register with us directly at any time.

How we collect and use your data when you make a booking

There are various ways of concluding contracts with us in the course of booking processes. Irrespective of whether the booking is made via a website operated by us, by telephone, through travel agencies or a partner company linked to us by contract, the following data relating to your person will be collected, and, if necessary, transmitted to and processed by us:

Your name and address,
Your email address,
Your telephone number and
in individual cases, further information about your person or your booking (enquiry) required for the respective booking (enquiry).

We collect the personal data required for the respective payment method in order to carry out and process the bookings. Disclosure of further information is voluntary.

Insofar as data processing is necessary for contractual performance and contract initiation, your data will be processed and, if applicable, transferred to us by third parties in accordance with Article 6 (1) (b) GDPR.

Due to commercial and tax regulations, we are obliged to store your address, payment and order data for a period of ten years. However, we restrict processing after a period of two years, i. e. your data will only be used to comply with statutory retention obligations.

As a general rule, personal data is not disclosed. In exceptional cases, the necessary data will be passed on to public authorities (e.g. as part of reporting procedures) or to partners (e.g. arrival time, name and telephone number for the purpose of making contact for handover), whereby they will be informed of their duty to delete the data immediately once the purpose has ceased to apply.

Disclosure of your personal data to other recipients

When you book accommodation on our website, you have the option of choosing between different payment methods. We pass on your payment data to our house bank. If you decide to pay by credit card, your payment data will be transmitted to the relevant payment service provider, according to the payment method you have chosen (legal basis is Art. 6 (1) sentence 1 (b) GDPR).

The payment service provider bears responsibility for your payment data.

HHD AG currently uses the services of Mastercard Europe SA. The contact details of Mastercard Europe SA, its data protection officer (if any) and further information on the personal data processed can be found at https://www.mastercard.de/de-de/datenschutz.html.
HHD AG also uses the services of Visa Europe Services Inc. The contact details of Visa Europe Services Inc., its data protection officer (if any) and further information on data protection can be found at https://www.visa.de/legal/privacy-policy.html.
In individual countries, HHD AG makes use of services from regional providers. The contact details of the respective providers and their respective data protection officers (if any) and further information on data protection can be found on the providers’ respective information pages.

Your data will not be disclosed to any other third parties beyond this, unless we are legally obliged to do so or this serves the purpose of criminal prosecution.

Trustpilot

We use Trustpilot to evaluate our offers and services and to optimise them on the basis of feedback from our customers. To this end, we will contact you after a booking using the email address you have provided and give you the opportunity to share your experiences and criticism through Trustpilot. The basis for this data processing activity is Article 6 (1) (f) GDPR and our interest in evaluation and optimisation. If you are not interested in providing such feedback, there is no need to respond. If you do not want us to contact you at all for this purpose, you have the right of objection in accordance with Art. 21 GDPR.

If you provide feedback on Trustpilot, this will be published on their website with the user name you have chosen (option of using a pseudonym) and, potentially at a later stage, on the websites we provide, once you have consented to their General Terms and Conditions. If you also provide a photo and consent to its publication, this will also be published. The basis for processing is Art. 6 (1) (a), Art. 7 GDPR.

Further information is available at https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms.

Collection and use of your data when you visit our website

If you use our website for information purposes only, without providing us with any other information, we will only collect the personal data that your browser transmits to our server. If you would like to browse our website, we collect data that is technically essential for us to display our website to you and to ensure stability and security (legal basis is Art. 6 (1) sentence 1 (f) GDPR). This data includes:

IP address of the accessing computer
Date and time of the request
URL of the requested page
Status message on whether the request was successful
Transmitted data volume
The referrer URL from which the user arrived at the accessed page
HTTP user agent (device, operating system, browser)

The connection is encrypted using TLS technology to prevent unauthorised access to your personal data.

Use of cookies

When you use our website, cookies are also stored on your computer. Cookies are small text files that are stored on your computer by your browser. We use cookies to enable individual functions and to make our website more user-friendly and effective (legal basis is Art. 6 (1) (f) GDPR).

We use the following cookies in particular:

Transient cookies, such as session cookies, which store a session ID. This in turn allows various requests from your browser to be assigned to the joint session, so that your computer can be identified when you visit our website again. Session cookies and transient cookies are deleted when you close the browser or log out;
Persistent cookies for the “favourites” function, so that the content of your favourites is not lost and you can view the selected holiday properties again at a later date. These cookies are automatically deleted from your hard drive after 28 days. Irrespective of this, you have the option of deleting cookies in your browser’s security settings at any time.

You have the option, for example, to prevent acceptance of third-party cookies or all cookies by making the appropriate settings in your browser. However, this may mean that you may not be able to use all the functions of our website.

Contact form and email

If you contact us by email or through the contact form on our website, we will process the data you provide (email address and, if applicable, your first and last name, your telephone number or other data you provide) in order to answer your questions (legal basis is Art. 6 (1) sentence 1 (b) GDPR or Art. 6 (1) sentence 1 (f) GDPR). We delete the data collected in the course of establishing contact once it is no longer necessary to store the data or restrict how it is processed if there are statutory retention obligations.

For the purpose of optimising our offering and the functionality and design of our website, for the purpose of ensuring the integrity and security of the website and for the purpose of reach measurement and statistical analysis, we use cookies to the extent necessary on the legal basis of Art. 6 (1) lit. 1 f GDPR Analysis tools (“tracking tools”).

Before using an analysis tool, we assess its lawfulness under data protection law based on the guidance issued by the supervisory authorities (Conference of Independent Federal and State Data Protection Supervisory Authorities – DSK) in March 2019 by

assessing the legitimate interests of HHD AG,
considering whether it is necessary and
taking into account the interests of the data subjects and
weighing up the interests in each individual case.

In the case of the analysis tools used by HHD AG, we assume on the basis of such an assessment that their use is lawful under Art. 6 (1) lit. 1 f GDPR, whereby the individual data subject has a right of objection in accordance with Art. 21 GDPR.

Specifically, the tools are as follows:

Google Analytics

We use the web analysis service Google Analytics from Google Inc (“Google”) on our website. Google Analytics uses cookies, which enable analysis of the way you use the website. We use this to pursue our interest in analysing our website, regularly improving it and making it more interesting for you (legal basis is Art. 6 (1) sentence 1 (f) GDPR).

The information generated in this way is regularly transmitted to a Google server in the USA and stored there. Google has committed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

We have commissioned Google to analyse the information obtained in this way about your use of our website in order to compile reports on website activities and to provide us with further services relating to website use and internet use. However, the IP address transmitted by your browser will not be merged with other Google data.

If you wish to prevent cookies from being stored, you can do so by changing the relevant settings in your browser. However, this may mean that not all functions of our website can be used to their full extent. You can also prevent Google from collecting and processing data relating to your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the extension “_anonymizeIp()”, which means that IP addresses are processed in abbreviated form. This makes it impossible to link the data to individuals. Insofar as the data collected about you has a personal reference, this is therefore immediately excluded and the personal data is therefore immediately deleted.

(6) Information about Google can be found at: Google Dublin, Google Ireland Ltd., Dublin House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

User conditions: https://marketingplatform.google.com/about/analytics/terms/de/,

Overview of data protection: https://marketingplatform.google.com/intl/de/about/

Facebook plug-in

(1) We use social media plug-ins from Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA, on our website, giving you the opportunity to interact with Facebook and other users. This helps us to improve our offering and make it more interesting for you as a user (legal basis is Art. 6 (1) sentence 1 (f) GDPR).

(2) When using the plug-in, we use what is known as the two-click solution, meaning that no personal data is passed on to Facebook initially. If you click on the relevant Facebook button (see Facebook logo) on our website and thereby activate it, you have the option of communicating directly with Facebook. In this case, Facebook receives information about which (sub)page of our website you have accessed and, if applicable, shared or liked. In addition, the data specified in the information on the collection of personal data when visiting our website will be transmitted to and stored in the USA; by activating the plug-in, your personal data will be passed on to Facebook. According to Facebook, however, the IP address is anonymised as soon as it is collected.

(3) The data collected about you is stored by Facebook as user profiles and used for the purposes of advertising, market research and/or customisation of the Facebook website. In particular, the analysis is carried out (even for users who are not logged in) in order to display customised advertising and for the purpose of informing other Facebook users about your activities on our website.

(4) You have the right to object to these user profiles being created. To exercise this right, you must contact Facebook.

(5) The data will also be passed on even if you do not have a Facebook account or are not logged in there. However, if you are logged in, the data collected by us will be assigned directly to your Facebook account. For example, if you activate the button, then click on it and link to our website, Facebook stores this information about you in your user account and shares it publicly with your contacts. To prevent this assignment, we recommend that you log out of your Facebook account before activating the button.

(6) If you live outside the USA or Canada, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is responsible for the processing of personal data.

Further information on how your data is processed and on the purpose and scope of data collection by Facebook and on your rights and settings options to protect your privacy can be found at the links provided below:

Facebook Inc., 1601 S California Ave, There are only 94304 http://www.facebook.com/policy.php;

Further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications

and http://www.facebook.com/about/privacy/your-info#everyoneinfo.

Facebook has committed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Google Maps

(1) We use Google Maps on our website to enable us to show you interactive maps on our website. In addition, we can enable you to use the map function (legal basis is Art. 6 (1) sentence 1 (f) GDPR).

(2) When you visit our website, Google receives information about which (sub)page of our website you have accessed. In the process, the data specified in the information on the collection of personal data when visiting our website will also be transmitted, regardless of whether you have a user account with Google and are logged in or whether no user account exists. However, if you are logged in, your data will be directly assigned to your Google account. To prevent this assignment, we recommend that you log out of your Google account before activating the button.

(3) The data collected about you is stored by Google as user profiles and used for the purposes of advertising, market research and/or customisation of the Google websites. In particular, the analysis is carried out (even for users who are not logged in) in order to display customised advertising and for the purpose of informing other Google users about your activities on our website.

(4) You have the right to object to these user profiles being created. To exercise this right, you must contact Google.

(5) Further information on how your data is processed and on the purpose and scope of data collection by Google and on your rights and settings options to protect your privacy can be found at the links provided below:

Google LLC., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://policies.google.com/technologies/partner-sites?hl=de.

https://policies.google.com/privacy?hl=de&gl=de

Google has committed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

Google Tag Manager

We use Google Tag Manager. This is a solution that allows us to manage website tags via an interface. The Tag Manager itself (which implements the tags) is a cookie-free domain and does not process any personal user data. The tool triggers other tags, which may in turn collect data. According to Google, Google Tag Manager does not access this data. Further information on this can be found in the Google Tag Manager usage guidelines at https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/.

Google Adwords

(1) We use Google Adwords to draw attention to our offers on external websites and can therefore determine how successful the individual advertising measures are. Our legitimate interest in this case is to make our website more interesting for you and to display advertising that is of interest to you. We also use it to calculate our advertising costs (the legal basis for processing your data is Article 6 (1) (f) GDPR).

(2) Google Adwords are provided via ad servers. Ad server cookies are used in this process. With their help, certain parameters for measuring success, such as the display of adverts or clicks by users, can be measured. If you access our website through a Google advert, Google Adwords stores a conversion cookie with limited validity (30 days) on your PC, which is not used to identify you personally. The following analysis values are usually stored for this cookie: Unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (indicates that the user no longer wishes to be contacted).

(3) Google is able to recognise your browser with the help of cookies. If the cookie has not yet expired, both we and Google are able to recognise that you have clicked on an ad and have been redirected to our site and whether you have generated sales. However, we are not able to identify you as a user. We only receive a statistical analysis from Google to assess the effectiveness of the advertising measures used.

(4) Because of the marketing tool used, personal data is transferred to Google in the United States of America and stored every time you visit our website. This includes, for example, the websites you visit and your IP address. Google may pass this personal data on to third parties. Moreover, if you are registered with a Google service, Google is able to assign the visit to your account.

(5) If you want to prevent this, you can do so in various ways:

Suppression of third-party cookies through settings in your browser
Block cookies from the domain www.googleadservices.com, https://adssettings.google.de/anonymous?hl=de, although this setting will be deleted if you delete your cookies;
by disabling the interest-based ads of the providers that are part of the “About Ads” self-regulation campaign using the link https://optout.aboutads.info/?c=2&lang=en, although this setting will be deleted if you delete your cookies;
by permanent deactivation in your browsers: h/.

(6) Further information on data protection at Google can be found here: https://policies.google.com/privacy?hl=de&gl=de and https://services.google.com/sitestats/de.html. Google has committed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Facebook Custom Audiences

Our website uses “Custom Audiences”, a remarketing function of Facebook Inc (“Facebook”). This function can be used to display interest-based adverts (“Facebook ads”) to you as a user of our website when you visit the Facebook social network or other websites that also use this process. Our interest in this is to display advertising that is of interest to you and to make our website more interesting for you (legal basis for processing your data is Art. 6 (1) (f) GDPR).

Using this function means that your browser automatically establishes a direct connection with the Facebook server. The extent to which the data collected in this way is actually collected and used is beyond our precise knowledge and influence. However, we are aware that Facebook will in any case receive notification that you have accessed the relevant website of our web presence or clicked on one of our adverts. If you are registered with Facebook, Facebook can assign the visit to your account. Even if you do not have a Facebook account or are logged out, there is the possibility that Facebook will discover and store your IP address and other identifying features.

You can disable the “Facebook Custom Audiences” function by using the following link (for logged-in users only ): https://www.facebook.com/settings/?tab=ads#_

Further information about Facebook and data processing by Facebook can be found at https://www.facebook.com/about/privacy

DoubleClick by Google

(1) This website uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to display adverts that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same adverts more than once. Google uses a cookie ID to record which adverts are displayed in which browser, thereby preventing them from being displayed more than once. Furthermore, DoubleClick can use cookie IDs to record what are known as conversions, which are related to ad requests. This is the case, for example, when a user sees a DoubleClick advert and later visits the advertiser’s website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information.

(2) Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore provide you with the following information based on our current knowledge: By integrating DoubleClick, Google receives notification that you have accessed the relevant section of our website or clicked on one of our adverts. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.

(3) You can avoid participation in this tracking process in various ways: a) by changing the settings of your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive any adverts from third-party providers; b) by disabling cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com” https://adssettings.google.de/anonymous?hl=de, although this setting will be deleted when you delete your cookies; c) by disabling the interest-based adverts of providers that are part of the “About Ads” self-regulation campaign by clicking on the link via the linkhttps://optout.aboutads.info/?c=2&lang=en, although this setting will be deleted when you delete your cookies; d) by permanently disabling it in your Firefox, Internet Explorer or Google Chrome browsers by clicking on the link https://support.google.com/My-Ad-Center-Help/answer/12155656?visit_id=638107638835286141-3318730082&rd=1. We would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

(4) The legal basis for processing your data is Art. 6 (1) sentence 1 (f) GDPR. For more information on DoubleClick by Google, please visit https://marketingplatform.google.com/about/enterprise/ and http://support.google.com/adsense/answer/2839090, as well as on data protection at Google in general: https://policies.google.com/privacy?hl=de&gl=de. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) https://thenai.org/. Google has committed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Iridion Optimization Suite

Our website uses the software “Iridion Optimization Suite” from the company Web Arts AG, based in Bad Homburg, Germany, to ensure that our web offerings are optimised and designed with the user in mind.

The software is used to carry out statistical analyses of user behaviour when visiting the website and the content and appearance of the website are modified on this basis. By using this website, you consent to the data collected about your person being processed in the manner and for the purposes described above.

You can object to the collection and storage of data at any time with effect for the future by clicking on this opt-out link https://www.interchalet.de/wichtige-hinweise/datenschutz/?iridion=notrack.

The opt-out is stored in the current browser in the form of a cookie. If the cookie is deleted or the browser or end device is changed, then the opt-out link must be reactivated there.

Sending recommendations to friends or receiving recommendations

Sometimes you may have the opportunity to refer a friend to a section of our website if you think it would be useful to your friend. To this end, you can enter the email address of another person as the recipient of a message automatically generated by our system. The message will contain the link to the section of our website that you consider useful, your email address (as the sender), your name, and will be visible to recipients along with the other information you have entered in the subject line and body text section.

When you receive a message like this, you will see all the information that was entered in the “Recommend to a friend” form. This may include the following data: Email address, first name, surname, other information about you that the website user has entered in the form.

Such information is only stored temporarily and processed until the email has been sent on behalf of the website user. Information that we receive via the corresponding form is only logged for security purposes and for our protection, and is not used for any other purpose. The information provided in this way is neither processed by us nor passed on to third parties. Our legitimate interest in using this function is to inform the recipient of our offering, as it may be of interest to the recipient based on confirmation by a user (legal basis is Article 6 (1) (f) GDPR).

Newsletters

We provide a newsletter. We may also process the data you provide when concluding a contract in order to inform you about other interesting products in our portfolio or to send you emails with technical information.

We offer you the opportunity to subscribe to our newsletter on our website. By subscribing, you consent to your data being processed for the purpose of sending newsletters about products/services from our range and for data analysis (Art. 6 (1) sentence 1 (a) GDPR). You can revoke this consent at any time by clicking on the link in the newsletter or by contacting us at the above address.

You can object to your personal data being processed for advertising and data analysis purposes at any time with effect for the future.

Objection to advertising and withdrawal of consent do not affect the legitimacy of the data processing carried out up to that point.

Newsletter tracking

When sending newsletters, we use what are known as web beacons or tracking pixels. A web beacon or tracking pixel is a single-pixel image file that is embedded in the newsletter and is displayed to you from a remote server when you open the newsletter. We use these to evaluate your user behaviour (legal basis is Art. 6 (1) sentence 1 (a) GDPR). For this purpose, the data mentioned in the section “Collection and use of your data when you visit our website” and the following information are linked to your email address and an individual ID: (i) confirmation that the email has been opened; (ii) time stamp; (iii) links that are clicked; (iv) content that is viewed. This data is used to create a user profile and to better customise the newsletter to your interests. This enables us to better understand the extent to which our offerings are of interest to you. We record when you read our newsletter and which links you click on. This data is also linked to your activities on our website.

We store the information collected in this way for the period you are subscribed to the newsletter. As soon as you unsubscribe, your data will be stored anonymously and for statistical purposes at most.

You have the option to object to newsletter tracking at any time.

Your rights as a data subject

You have the following rights in relation to personal data pertaining to you:

You can request confirmation from us as to whether we process personal data about your person and, if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR.
In accordance with Art. 16 GDPR, you have the right to demand immediate correction of incorrect personal data relating to your person and, where applicable, the completion of incomplete personal data
You have the right to demand that we delete personal data relating to your person immediately if one of the reasons listed in Art. 17 GDPR applies
You have the right to request that processing be restricted if one of the conditions listed in Art. 18 GDPR is met
If the requirements of Art. 20 GDPR are met, you have the right to request a data transfer.
If we process your data on the basis of consent that you have given us, you can revoke this consent at any time. The revocation of consent does not affect the legitimacy of the processing carried out on the basis of this consent up to the time of revocation, i.e. the revocation only affects the legitimacy of the processing of your personal data after it has been declared to us.
You also have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of your personal data breaches the GDPR (Art. 77 GDPR). You can assert this right with a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged breach. You can find an overview of the supervisory authorities in Germany here.

According to Art. 21 GDPR, you have the right to object to the processing activity based on Art. 6 (1) sentence 1 (f) GDPR. The processing activity is based on Art. 6 (1) sentence (1) (f) GDPR if, for example, the processing activity is not necessary for the fulfilment of a contract but is based on a balancing of interests.