Wettelijke kennisgeving
Legal Notice
R&D GmbH | Boschstraße 12 | 53359 Rheinbach | GERMANY
Phone: +49 (0)2226 82 999 30 | WhatsApp: +49 (0)160 – 788 45 93 | Email: info@slate-lite.com | Website: www.slate-lite.com
Managing Directors: Jan Hofmann / Marius Ehrlich | Local Court Bonn / HRB 19439 | VAT ID No. DE226346576
R&D GmbH is neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board in accordance with the German Consumer Dispute Resolution Act (VSGB). The EU Commission’s platform for online dispute resolution can be found at:
https://www.ec.europa.eu/consumers/odr
Responsible for content pursuant to Section 6 MDStV:
Jan Hofmann & Marius Ehrlich
Terms of Use:
1. Copyright Information
All information on this website is provided as stated without any claim to accuracy, completeness, or timeliness. Unless explicitly stated otherwise in this publication with regard to a particular excerpt, file, or document, any person is entitled to view, copy, print, and distribute this document under the following conditions:
The document may only be used for non-commercial informational purposes. Any copy of this document or part thereof must include this copyright notice and the operator’s copyright protection symbol. The document, any copy of the document, or any part thereof may not be modified without the operator’s written consent. The operator reserves the right to revoke this permission at any time, and any use must cease immediately as soon as written notice is published by the operator.
2. Contractual Assurances and Disclaimers
Unless otherwise agreed, the website is made available to you free of charge. The operators assume no liability whatsoever for the accuracy of the information contained, the availability of the services, the loss of stored data, or suitability for any particular purpose. The operators are also not liable for consequential damages resulting from the use of this offer.
Insofar as a disclaimer of liability is not possible, the operators shall only be liable for gross negligence and intent. Product and company names are trademarks of their respective owners and are used on these pages solely for informational purposes.
This publication may contain technical or other inaccuracies or typographical errors. Changes are periodically added to the information herein; such changes will be incorporated into new editions of the publication. The operator may make improvements and/or changes to the offers described in this publication at any time.
3. Opinions in Comments and in the Forum
Due to the constantly changing content in comments and the forum, it is not possible for the operator to review all contributions completely, examine them for content, and exercise immediate active control over them. No responsibility is assumed for the content, accuracy, or form of posted contributions.
3a. Special Provisions for Registered Users
By registering, the user — hereinafter referred to as the member — agrees to the following terms of use with the operator: Members participating in discussion forums and comments undertake
1. to refrain from any insults, criminal content, pornography, and coarse language in their contributions,
2. to bear sole responsibility for the content they post, not to infringe the rights of third parties (in particular trademark, copyright, and personal rights), and to fully indemnify the operators against any third-party claims triggered by their contributions.
3. not to post advertising of any kind in forums or comments, or to use forums and comments for any type of commercial activity. This applies in particular to the publication of premium-rate phone numbers for any purpose.
There is no entitlement to the publication of submitted comments or forum posts. The operators reserve the right to edit or delete comments and forum posts at their own discretion. In the event of violations of the obligations under 1), 2), and 3), the operators also reserve the right to suspend membership temporarily or delete it permanently.
4. Submission of Contributions and Articles Insofar as the member makes use of the option to submit their own contributions for the editorial section, the following shall apply:
A prerequisite for posting one's own contributions is that the member has entered their full and correct first and last name in their user profile or enters it there after submitting the article. The submitted contribution will be marked publicly with the name entered there upon publication.
The member makes the following declarations for all contributions submitted by them in the future:
1. The member assures that the submitted contributions are free from third-party rights, in particular copyrights, trademark rights, or personal rights. This applies to all submitted contributions and images.
2. The member grants the operators an unrestricted right of use to the submitted contributions. This includes publication on the Internet and on other Internet servers, in newsletters, print media, and other publications.
3. Submitted contributions will be deleted or anonymized upon the member’s request by email to the webmaster’s address. Deletion or anonymization will take place within 7 days of notification. The operators shall only be liable for consequential damages arising from delayed deletion of the contribution to the extent that they are not based on a breach of duty by the member (see 1), 2), and 3) above) and, beyond that, only insofar as they are based on gross negligence or intent on the part of the operators. In this connection, we expressly point out that this website is regularly indexed by search engines and that we have no influence on whether, where, and how long contributions published by us may remain stored and retrievable in search engine databases and web catalogs even after deletion.
4. There is no entitlement whatsoever to the storage, publication, or archiving of submitted contributions. The operators reserve the right not to publish submitted contributions without giving reasons, to edit them before publication, or to delete them again after publication at their own discretion.
5. No claims for remuneration (fees, license fees, reimbursement of expenses, or similar) arise for the member against the operator of the website as a result of the publication of submitted contributions. Cooperation is voluntary (without remuneration).
5. Privacy Policy
If the option to enter personal or business data is used within the Internet offer, the disclosure of such data by the user is expressly voluntary. Use of our service is also permitted — insofar as technically possible and reasonable — without providing such data or by providing anonymized data or a pseudonym. Further important information on the subject of data protection can be found in our Privacy Policy.
6. Registration and Password
The user is obliged to treat the username/password combination confidentially and not to pass it on to third parties. If misuse of the access data is suspected, the operator must be informed.
7. Notice pursuant to the German Teleservices Act
The respective providers are responsible for third-party websites to which this offer refers via so-called links. The operator is not responsible for the content of such third-party sites. Furthermore, this website may be linked to by other sites via so-called links without our knowledge. The operator accepts no responsibility for presentations, content, or any connection to this website in third-party websites. The operator is only responsible for third-party content if the operator has positive knowledge thereof (including unlawful or criminal content) and it is technically possible and reasonable to prevent its use. However, pursuant to the German Teleservices Act, the operator is not obliged to constantly review third-party content.
Contact
Please direct questions to the webmaster.
Legal Validity
These general terms of use refer to this website.
If parts or individual formulations of this text do not, no longer, or do not fully comply with the applicable legal situation, the remaining parts of the document shall remain unaffected in their content and validity.
Despite careful content control, we assume no liability for the content of external links. The operators of the linked pages are solely responsible for their content.
All names, terms, signs, and graphics used here may be trademarks or registered trademarks owned by their respective legal owners. All rights to all mentioned and used trademarks and registered trademarks belong exclusively to their owners.
Data Protection:
Preface
The operators of these pages take the protection of private data seriously. Special attention to privacy in the processing of personal data is an important concern. Personal data is used in accordance with the provisions of the German Federal Data Protection Act (BDSG); the operators of this website are committed to confidentiality. These websites may contain links to websites of other providers to which this privacy policy does not extend. Further important information can also be found in the General Terms of Use.
1. Personal Data
Personal data is information that can be used to determine identity. This includes information such as real name, address, postal address, and telephone number. Information that cannot be directly linked to the real identity (such as favorite websites or the number of users of a site) is not included.
In principle, our online offer can be used without disclosing identity. If one decides to register, i.e. to sign up as a member (registered user), personal information can be stored in the individual user profile. It is the user’s free decision whether to enter this data. Since an attempt is made to collect as little personal data as possible for the use of the offer, providing a name — under which one is listed as a member and which does not have to match the real name — and the email address to which the password is sent is sufficient for registration. In connection with access to our pages, server-side data (for example IP address, date, time, and pages viewed) is stored. No personal evaluation takes place. The statistical analysis of anonymized data records remains reserved.
We use personal data for the purposes of technical administration of the websites and customer management only to the extent necessary in each case. In addition, personal data is only stored if this information is provided voluntarily.
2. Disclosure of Personal Data
We use personal information only for this website. We do not pass the information on to third parties without explicit consent. If, within the scope of commissioned data processing, data is passed on to service providers, they are bound by the German Federal Data Protection Act (BDSG), other statutory provisions, and this Privacy Policy.
Collection or transmission of personal data to state institutions and authorities only takes place within the framework of mandatory legal provisions.
3. Use of Cookies
We use cookies — small files containing configuration information. They help determine user-specific settings and implement special user functions. We do not collect any personal data via cookies. All functions of the website can also be used without cookies, although some user-defined properties and settings may then not be available.
4. Children
Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or guardians. We do not request personal data from children, do not collect it, and do not pass it on to third parties.
5. Right of Revocation
If you have provided us with personal data, you can change and delete it at any time in the user profile. For complete deletion of the account, please contact the webmaster. Contributions made up to that point in forums, comments, event announcements, and articles may, however, remain — information on this can also be found in the general terms of use.
6. Links to Other Websites
Our online offer contains links to other websites. We have no influence over whether their operators comply with data protection regulations.
7. Contributions
The contributions on our site are accessible to everyone. Before publication, contributions should be carefully checked to determine whether they contain information not intended for the public. Contributions may be indexed by search engines and may be accessible worldwide even without targeted access to this website.
8. Questions and Comments
If you have any questions, suggestions, or comments regarding data protection, please contact the webmaster by email.
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website.
The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, compile reports on website activity for website operators, and provide further services related to website and Internet usage.
Google may also transfer this information to third parties where required to do so by law, or where such third parties process the data on Google’s behalf. Under no circumstances will Google associate your IP address with other Google data.
You may prevent the installation of cookies by selecting the appropriate settings in your browser software; however, we point out that in this case you may not be able to use all functions of this website to their full extent.
By using this website, you consent to the processing of data collected about you by Google in the manner described above and for the purpose stated above.
Use of Facebook Plugins
These pages use plugins from the social network facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
If you access pages of our Internet presence that are equipped with such a plugin, a connection to the Facebook servers is established and the plugin is displayed on the page by notifying your browser.
This transmits to the Facebook server which of our Internet pages you have visited. If you are logged into Facebook as a member at that time, Facebook assigns this information to your personal Facebook user account. When using the plugin functions (e.g. clicking the “Like” button or posting a comment), this information is also assigned to your Facebook account, which you can only prevent by logging out before using the plugin.
Further information on the collection and use of data by Facebook, your rights in this regard, and ways to protect your privacy can be found in Facebook’s data protection notices.
Privacy Policy in accordance with the GDPR
I. Name and Address of the Controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
R&D GmbH
Boschstraße 12
53359 Rheinbach
Germany
Phone: +49 (0)2226 – 89 577 57
Email: info@slate-lite.com
Website: www.slate-lite.com
II. Name and Address of the Data Protection Officer
The data protection officer of the controller is:
Jan Hofmann
Boschstraße 12
53359 Rheinbach
Germany
Phone: +49 (0)2226 – 89 577 57
Email: info@slate-lite.com
Website: www.slate-lite.com
III. General Information on Data Processing
1. Scope of Processing Personal Data
We generally process our users’ personal data only insofar as this is necessary to provide a functional website and our content and services. The processing of our users’ personal data regularly takes place only after the user has given consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
2. Legal Basis for the Processing of Personal Data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) GDPR serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary to carry out pre-contractual measures. Insofar as processing personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party and the interests, fundamental rights, and freedoms of the data subject do not override the former interest, Art. 6(1)(f) GDPR serves as the legal basis for the processing. 3. Data Deletion and Storage Period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a necessity for further storage of the data for the conclusion or fulfillment of a contract.
IV. Provision of the Website and Creation of Log Files
1. Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The data is also stored in the log files of our system. This does not affect the user’s IP addresses or other data that enable the assignment of the data to a user. This data is not stored together with other personal data of the user.
2. Legal Basis for Data Processing
The legal basis for the temporary storage of the data and log files is Art. 6(1)(f) GDPR.
3. Purpose of Data Processing
The temporary storage of the IP address by the system is necessary in order to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
Storage in log files takes place in order to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. In this context, the data is not analyzed for marketing purposes.
These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR.
4. Duration of Storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.
In the case of storage of the data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or distorted so that assignment of the accessing client is no longer possible.
5. Right to Object and Possibility of Removal
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.
V. Use of Cookies
a) Description and Scope of Data Processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again.
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can still be identified after a page change. The user data collected in this way is pseudonymized by technical precautions. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the user.
When accessing our website, users are informed about the use of cookies for analytical purposes by an info banner and referred to this privacy policy. In this context, there is also a notice explaining how the storage of cookies can be prevented in the browser settings.
b) Legal Basis for Data Processing
The legal basis for processing personal data using cookies is Art. 6(1)(f) GDPR.
c) Purpose of Data Processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser be recognized again after a page change.
The user data collected by technically necessary cookies is not used to create user profiles.
These purposes also constitute our legitimate interest in the processing of personal data pursuant to Art. 6(1)(f) GDPR.
e) Duration of Storage, Right to Object, and Possibility of Removal
Cookies are stored on the user’s computer and transmitted by it to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.
Newsletter:
1. Description and Scope of Data Processing
Users have the option to subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input form is transmitted to us.
This is the email address of the person registering.
Your consent to the processing of the data is obtained during the registration process, and reference is made to this privacy policy.
In connection with data processing for sending newsletters, no data is passed on to third parties. The data is used exclusively for sending the newsletter.
2. Legal Basis for Data Processing
The legal basis for processing the data after the user registers for the newsletter is Art. 6(1)(a) GDPR, provided that the user has given consent.
3. Purpose of Data Processing
The collection of the user’s email address serves to deliver the newsletter.
The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.
4. Duration of Storage
The data is deleted as soon as it is no longer required for the purpose for which it was collected. The user’s email address is therefore stored as long as the newsletter subscription is active.
The other personal data collected during the registration process is generally deleted after a period of seven days.
5. Right to Object and Possibility of Removal
The subscription to the newsletter can be terminated by the data subject at any time. For this purpose, a corresponding link is included in every newsletter.
This also enables revocation of consent to the storage of the personal data collected during the registration process.
VI. Contact Form and Email Contact
1. Description and Scope of Data Processing
Our website contains a contact form that can be used for electronic contact. If a user makes use of this option, the data entered into the input form is transmitted to us and stored.
Your consent to the processing of the data is obtained during the sending process, and reference is made to this privacy policy.
Alternatively, contact can be made via the email address provided. In this case, the personal data of the user transmitted with the email will be stored.
In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.
2. Legal Basis for Data Processing
The legal basis for processing the data is Art. 6(1)(a) GDPR if the user has given consent.
The legal basis for processing data transmitted in the course of sending an email is Art. 6(1)(f) GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.
3. Purpose of Data Processing
The processing of personal data from the input form serves us solely to process the contact request. In the event of contact by email, this also constitutes the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending procedure serve to prevent misuse of the contact form and ensure the security of our information technology systems.
4. Duration of Storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input form of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. Right to Object and Possibility of Removal
The user has the option at any time to revoke consent to the processing of personal data. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of the contact process will be deleted in this case.
VII. Rights of the Data Subject
If personal data concerning you is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
1. Right of Access
You may request confirmation from the controller as to whether personal data concerning you is being processed by us.
If such processing exists, you may request information from the controller about the following:
(1) the purposes for which the personal data is processed;
(2) the categories of personal data that are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
(4) the planned duration of storage of the personal data concerning you or, if specific information is not possible, criteria for determining the storage period;
(5) the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing;
(6) the existence of a right to lodge a complaint with a supervisory authority;
(7) all available information about the origin of the data if the personal data is not collected from the data subject;
(8) the existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR and — at least in those cases — meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer. Right to Rectification
You have the right to obtain from the controller the rectification and/or completion of personal data concerning you if the processed personal data is inaccurate or incomplete. The controller must carry out the rectification without undue delay. Right to Restriction of Processing Under the following conditions, you may request restriction of the processing of the personal data concerning you:
(1) if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
(3) the controller no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise, or defense of legal claims, or
(4) if you have objected to processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the controller’s legitimate grounds override your grounds.
If processing of the personal data concerning you has been restricted, such data may — apart from storage — only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted according to the above conditions, you will be informed by the controller before the restriction is lifted. Right to Erasure
a) Obligation to Erase
You may request the controller to erase personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay where one of the following grounds applies:
(1) The personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed. (2) You withdraw your consent on which the processing was based according to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
(3) You object pursuant to Art. 21(1) GDPR to the processing and there are no overriding legitimate grounds for the processing, or you object pursuant to Art. 21(2) GDPR to the processing.
(4) The personal data concerning you has been unlawfully processed.
(5) The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.
(6) The personal data concerning you has been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR. b) Information to Third Parties
Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers that process the personal data that you, as data subject, have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
c) Exceptions
The right to erasure does not apply insofar as processing is necessary
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR insofar as the right referred to under section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or (5) for the establishment, exercise, or defense of legal claims.
2. Right to Information
If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort.
You have the right to be informed by the controller about those recipients.
3. Right to Data Portability
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data was provided, insofar as
(1) the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and (2) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of others must not be adversely affected thereby. The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
4. Right to Object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on those provisions.
The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
You have the option, in connection with the use of information society services — notwithstanding Directive 2002/58/EC — to exercise your right to object by automated means using technical specifications.
5. Right to Withdraw Data Protection Consent
You have the right to withdraw your data protection declaration of consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
6. Automated Individual Decision-Making, Including Profiling
You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision
(1) is necessary for entering into, or performance of, a contract between you and the controller,
(2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
(3) is based on your explicit consent.
However, such decisions may not be based on special categories of personal data referred to in Art. 9(1) GDPR unless Art. 9(2)(a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in (1) and (3), the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.
7. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work, or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.