Privacy

Thank you for your interest in our online shop. Protecting your privacy is very important to us. Below we provide detailed information about how we handle your personal data.

  1. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable national data protection laws of the Member States, as well as other data protection provisions, is:

Trend-Design GmbH
Goebenstr. 66
D-32051 Herford – Germany

Tel.: +49 (0) 5221 54900
Email: info@trend-design.com

  1. General Information on Data Processing
    1. Scope of the Processing of Personal Data
    We process personal data of our users only to the extent necessary to provide a functional website, as well as our content and services. The processing of our users’ personal data generally only takes place with the user’s consent. An exception applies in cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by statutory provisions.
  2. Legal Basis for the Processing of Personal Data
    Where we obtain the consent of the data subject for processing operations involving personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
    When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary to take steps prior to entering into a contract. Where processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.If processing is necessary for the purposes of a legitimate interest pursued by our company or by a third party, and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR shall serve as the legal basis for processing.
  3. Data Erasure and Storage Duration
    The personal data of the data subject will be erased or blocked as soon as the purpose for storage no longer applies. Data may be stored beyond this period if provided for by European or national legislation in EU regulations, laws, or other legal provisions to which the controller is subject. Blocking or erasure of the data also takes place when a retention period prescribed by the aforementioned regulations expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

III. Provision of the Website and Creation of Log Files
1. Description and Scope of Data Processing
Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data are collected:

  • Information about the browser type, language, and version used
  • The user’s operating system and version
  • The user’s IP address
  • Date and time of access
  • Date and time of first and last visit
  • Date and time of first and last login
  • Websites from which the user’s system accessed our website

These data are also stored in the log files of our system. This data is not stored together with other personal data of the user.

  1. Legal Basis for Data Processing
    The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.
  2. Purpose of Data Processing
    Temporary storage of the IP address by the system is necessary to deliver the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

Storage in log files takes place to ensure the functionality of the website. The data also helps us to optimise the website and to ensure the security of our information technology systems. No analysis of the data for marketing purposes takes place in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Article 6(1)(f) GDPR.

  1. Duration of Storage
    The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of data collection for the provision of the website, this is the case when the respective session ends.

In the case of data storage in log files, this occurs at the latest after seven days. Storage beyond this period is possible. In such cases, the users’ IP addresses are deleted or anonymised so that identification of the accessing client is no longer possible.

  1. Objection and Removal Option
    The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, the user has no possibility to object.
  2. Use of Cookies
    Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a unique string of characters that enables the browser to be clearly identified when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require the accessing browser to be identified even after navigating to another page.

To make visiting our website attractive and to enable the use of certain functions, display suitable products, or conduct market research, we use so-called cookies on various pages. This serves to protect our legitimate interests in the optimised presentation of our offering, which are overriding in the context of a balancing of interests. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognise your browser during your next visit (persistent cookies). The duration of storage can be found in your web browser’s cookie settings overview.

You can configure your browser so that you are informed about the setting of cookies and can decide individually on their acceptance, or exclude the acceptance of cookies for certain cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this information for the respective browsers at the following links:

  • Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
  • Safari™: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
  • Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
  • Firefox™: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
  • Opera™: https://help.opera.com/de/latest/web-preferences/

If cookies are not accepted, the functionality of our website may be limited.

Session Cookies
To enhance the user experience and effectiveness of our site, we use temporary cookies (so-called session cookies), which allow us to identify you during your visit. This enables you to, for example, retrieve your shopping cart at any time during your session in our e-shop. These cookies are deleted after the browser session, but at the latest after five hours.

The following information is processed through our session cookies:

(1) Anonymous user ID
(2) Items in the shopping cart (quantity, value)
(3) Pages visited in the shop
(4) Login status

Permanent Cookies
By using so-called permanent cookies, we also collect and store data in anonymized form to analyze your user behavior on our website. This helps us to optimize our presence and advertising measures on third-party websites and tailor our product advertising as accurately as possible to user interests. The data is not used to identify visitors to our website or link them with individual user data. If you do not delete these cookies from your browser, they will expire within a period of 60 days to a maximum of five years, after which your browser will automatically delete them.

The following information is collected and processed:

(1) Your IP address (anonymized by truncation)
(2) The browser type and version you are using
(3) The operating system/platform you are using
(4) The page from which you accessed our site
(5) Information about search results and links from other sites
(6) The order in which you visited the pages of our website, including date and time
(7) The item numbers of the products you viewed or searched for
(8) The time it took for a webpage to load
(9) Any errors in downloading the page
(10) Your order history
(11) Receipt and read confirmations of our newsletters
(12) Collection of anonymized movement patterns (e.g., which products were viewed, added to the cart, or purchased)

When you access our website, you will be informed via an info banner about the use of cookies for analytical purposes and will be directed to this privacy policy. The banner also provides guidance on how to disable cookie storage in your browser settings.

Legal Basis for Data Processing
The legal basis for the processing of personal data through the use of cookies is Art. 6 (1) (f) GDPR.

Purpose of Data Processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some features of our website cannot be offered without cookies. For these features, it is necessary that the browser is recognized even after a page change.

We use cookies for the following applications:

• Shopping cart
• Retaining language preferences
• Remembering search terms

The user data collected through technically necessary cookies is not used to create user profiles. The use of analytical cookies serves the purpose of improving the quality of our website and its content. By using analytical cookies, we can learn how the website is used and continuously optimize our offerings. Our legitimate interest in processing personal data under Art. 6 (1) (f) GDPR lies in these purposes.

Duration of Storage, Right to Object, and Removal
Cookies are stored on the user’s device and transmitted to our site. Therefore, as a user, you have full control over the use of cookies. By adjusting the settings in your internet browser, you can disable or limit the transmission of cookies. Cookies that are already stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, some functions of the website may no longer be fully available.

The transmission of Flash cookies cannot be controlled via browser settings, but can be prevented by adjusting the Flash Player settings.

  1. Newsletter, Direct Mail Advertising
    1. Description and Scope of Data Processing
    On our website, there is an option to subscribe to a free newsletter. During the registration for the newsletter, the data from the input form is transmitted to us. Your email address will be collected in this process. Optionally, you may also provide your first name, last name, and salutation.

Additionally, the following data is collected during registration:

(1) Date and time of registration
(2) Time zone

Your consent is obtained for data processing during the registration process, and you will be referred to this privacy policy. If you purchase goods or services on our website and provide your email address, it may subsequently be used by us to send a newsletter. In this case, the newsletter will only contain direct marketing for our own similar goods or services. No data is shared with third parties in connection with the data processing for sending newsletters. The data is solely used for sending the newsletter.

  1. Legal Basis for Data Processing
    The legal basis for processing the data after the user subscribes to the newsletter is the user’s consent as per Art. 6 (1) (a) GDPR.

If we receive your email address in connection with the sale of goods or services, and you have not objected, we reserve the right to regularly send you offers for similar products, such as those already purchased, from our range via email. This is done to protect our legitimate interests in direct marketing within the scope of a balancing of interests. The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 (3) of the German Unfair Competition Act (UWG).

We store this data on secure servers in Germany. You can withdraw your consent to the storage of your data and its use for delivering our newsletter at any time. Every newsletter contains an unsubscribe link. Alternatively, you can send an informal message to info@trend-design.com.

  1. Purpose of Data Processing
    The collection of the user’s email address is necessary for delivering the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the provided email address.
  2. Duration of Storage
    The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. Therefore, the user’s email address will be stored as long as the newsletter subscription is active.

The other personal data collected during the registration process will usually be deleted after a period of seven days.

  1. Right to Object and Possibility of Removal
    The user may cancel the newsletter subscription at any time. A corresponding link is included in each newsletter. This also allows for the withdrawal of consent regarding the storage of the personal data collected during the registration process.
  2. Direct Mail Advertising and Your Right to Object
    In addition, we reserve the right to use your first and last name, as well as your postal address, for our own advertising purposes, such as sending you interesting offers and information about our products by mail. This serves to protect our legitimate interests in direct marketing within the scope of a balancing of interests. The legal basis for direct mail advertising as a result of the sale of goods or services is § 7 (3) UWG.
  3. Registration
    1. Description and Scope of Data Processing
    On our website, we offer users the opportunity to register by providing personal data. The data is entered into a form and transmitted to us for storage. Mandatory fields are marked as such, as we require this data for contract processing, processing your inquiry, or creating a customer account. Without providing this data, you will not be able to complete the order or account creation process, nor send your inquiry. The specific data collected is evident from the respective input forms. We use the data you provide for contract processing and handling your requests. After the complete execution of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the statutory tax and commercial retention periods, unless you have explicitly consented to further use of your data or we reserve the right to use the data beyond that, which is legally permitted and which we inform you about in this declaration. Deleting your customer account is possible at any time and can be done either by sending a message to the contact option described below or via a function in your customer account.

The following data is collected during the registration process:

(1) The user’s IP address
(2) Date and time of registration
(3) Date and time of the last login
(4) Whether the registration was confirmed
(5) Date and time of customer account creation
(6) Customer group membership
(7) Salutation, first name, last name, email address
(8) Address: street, house number, postal code, city, country
(9) Username, password
(10) Last login date; email confirmed (yes/no); customer account created on; customer account created in (de/en/b2b), customer group

For orders, the following data is also collected:

Order (billing address / shipping address): Salutation, first name, last name, street, postal code, city, country, account number, bank code, IBAN, bank, account holder. Credit card (card type): Mastercard / Visa with the following information: cardholder, card type, card number, expiration date, security code.

PayPal/Credit Card
During the registration process, the user’s consent to the processing of this data is obtained. Information regarding data processing by PayPal (Europe) S.à r.l. et Cie, S.C.A. for end customers (cardholders/users) according to Art. 14 GDPR can be found here, and information regarding the processing for payment methods can be found here.

  1. Legal Basis for Data Processing
    The legal basis for processing the data is the user’s consent, as per Art. 6 (1) (a) GDPR. If the registration is necessary for the performance of a contract, to which the user is a party, or for the execution of pre-contractual measures, the additional legal basis for data processing is Art. 6 (1) (b) GDPR.
  2. Purpose of Data Processing
    User registration is required to make certain content and services available on our website. Your data helps us to tailor and continuously improve your shopping experience. We use the personal data to inform you about orders, products, services, and offers, prevent misuse of our website, and allow you to interact with other users on our website in a personalized way. User registration is also required to fulfill a contract with the user or to conduct pre-contractual measures. Purchase contracts can be concluded through our website. To fulfill these contracts, we need personal data.
  3. Duration of Storage
    The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected.
    For data collected during the registration process, this is the case when the registration on our website is canceled or modified. For data collected during the registration process for fulfilling a contract or executing pre-contractual measures, this is the case when the data is no longer required for contract performance. Even after the completion of the contract, it may still be necessary to store the personal data of the contracting partner in order to comply with contractual or legal obligations.
  4. Right to Object and Possibility of Removal
    As a user, you have the right to cancel your registration at any time. You can modify the data stored about you at any time. Changes to the data can generally be made through your customer account. To do so, log into your customer account and select the appropriate section. Modify the data and save it. Full deletion of your account can only be done through our customer service. For this, simply contact them via email at info@trend-design.com. If the data is required for the fulfillment of a contract or pre-contractual measures, premature deletion of the data is only possible as long as no contractual or legal obligations prevent the deletion.

VII. Contact Form and Email Contact
1. Description and Scope of Data Processing

Our website features a contact form that can be used for electronic communication. If a user utilizes this option, the data entered in the input mask is transmitted to us and stored. The data collected includes:

(1) Salutation, first name, last name
(2) Email address
(3) Phone number (optional)
(4) Subject; comment (user’s message)
(5) User’s consent

Your consent for data processing is obtained during the submission process, and a reference to this privacy policy is provided. Alternatively, contact can be made via the provided email address. In this case, the personal data transmitted through the email is stored.

No data is passed on to third parties in this context. The data is solely used for processing the communication.

  1. Legal Basis for Data Processing
    The legal basis for processing the data is the user’s consent, in accordance with Art. 6 (1) (a) GDPR. The legal basis for processing data transmitted via email is Art. 6 (1) (f) GDPR. If the email contact aims at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
  2. Purpose of Data Processing
    The processing of personal data from the input mask is used solely to process the user’s contact request. In the case of email contact, the legitimate interest in processing the data is also applicable. The other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
  3. Duration of Storage
    The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For the personal data from the input mask of the contact form and those transmitted by email, this is the case when the respective conversation with the user is concluded. The conversation is considered concluded when it is evident from the circumstances that the matter at hand has been finally resolved. Any additional personal data collected during the submission process will be deleted no later than seven days after submission.
  4. Right to Object and Possibility of Removal
    The user has the right to withdraw their consent to the processing of personal data at any time. If the user contacts us via email, they may object to the storage of their personal data at any time. In such cases, the conversation cannot continue. Please contact our customer service at [info@trend-design.com](mailto:info@trend-design.com) for assistance. All personal data stored during the contact process will be deleted in this case.

VIII. Data Transfer
We do not transmit your personal data to third parties for purposes other than those listed below.

We only disclose your personal data to third parties if:

(1) You have given your explicit consent in accordance with Art. 6 (1) Sentence 1 (a) GDPR,
(2) The disclosure is necessary for the assertion, exercise, or defense of legal claims in accordance with Art. 6 (1) Sentence 1 (f) GDPR, and there is no reason to believe that you have a predominant interest in not disclosing your data,
(3) There is a legal obligation for disclosure in accordance with Art. 6 (1) Sentence 1 (c) GDPR, or
(4) It is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 (1) Sentence 1 (b) GDPR.

  1. Hosting Services by a Third-Party Provider
    As part of the processing on our behalf, a third-party provider performs hosting and website display services for us. This is done to safeguard our overriding legitimate interests in properly presenting our offerings. All data collected as part of using this website or in designated forms in the online store, as described below, is processed on their servers. Processing on other servers only occurs within the scope outlined here. This service provider is located within a country of the European Union or the European Economic Area.
  2. Data Transfer for Order Processing
    To fulfill the contract, we share your data with the shipping company tasked with the delivery of goods, as far as necessary for the delivery of the ordered goods. Depending on the payment service provider you select during the ordering process, we transfer the payment data collected for payment processing to the financial institution handling the payment, and possibly to payment service providers appointed by us, or to the selected payment service provider. Some selected payment service providers may also collect this data themselves if you create an account with them. In this case, you must log in with your access data to the payment service provider during the order process. The privacy policy of the respective payment service provider applies in this case.

If you have expressly consented during or after your order, we will share your phone number with the selected shipping provider so that they can contact you before delivery for delivery announcement or coordination purposes.

The consent can be revoked at any time by sending a message to the contact details described below or directly to the shipping provider at the contact address provided below. Upon revocation, we will delete the data provided for this purpose unless you have expressly consented to further use of your data or we have reserved any further use of your data that is legally permitted and which we inform you about in this policy.

United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany

Tel.: 01806-882-663 (20 cents per call from German landlines; mobile rates up to 60 cents per call)
Fax: 02131-9472222
Email: https://www.ups.com/upsemail/input?loc=de_DE

  1. Analytics Tools
    The tracking measures listed below, which we use, are carried out on the basis of Art. 6 (1) Sentence 1 (f) GDPR. With the tracking measures used, we aim to ensure that our website is designed to meet the needs of users and continuously optimized. Additionally, we use these tracking measures to statistically capture the use of our website and evaluate it for the purpose of optimizing our offerings for you. These interests are considered legitimate within the meaning of the aforementioned provision.

Google Analytics
We use the web analytics service Google Analytics by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“) on our website. The data processing serves the purpose of analyzing this website and its visitors. To do this, Google, on behalf of the operator of this website, uses the collected information to evaluate your use of the website, compile reports on website activities, and provide further services related to website usage and internet usage to the website operator. The IP address transmitted by your browser in the context of Google Analytics is not merged with other data from Google.

Google Analytics uses cookies that allow an analysis of the usage of the website by you. The information generated by the cookies regarding your usage of this website is usually transmitted to a Google server in the USA and stored there. On this website, IP anonymization is activated. As a result, your IP address will be truncated by Google within the member states of the European Union or other contracting states to the Agreement on the European Economic Area. In exceptional cases, the full IP address may be transmitted to a Google server in the USA and shortened there. Your data may be transferred to the USA. There is an adequacy decision by the European Commission for data transfers to the USA.

Legal Basis for Data Processing
The legal basis for the data processing is Art. 6 (1) (f) GDPR.

Your Right to Object:
You can object to the processing of your personal data. To do so, you can prevent the storage of cookies by selecting the appropriate technical settings in your browser software. However, this may mean that you may not be able to use all of the website’s functions fully. Additionally, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

To prevent the collection across devices by Google Analytics, you can set an opt-out cookie. This will prevent the future collection of your data when visiting this website. To do this, you need to perform the opt-out on all systems and devices you use for it to take effect comprehensively. If you click here, the opt-out cookie will be set: Google Analytics deactivate.

For further information on terms of use and data protection, please refer to Google Analytics Terms of Service and Google’s Privacy Policy.

  1. Advertising via Marketing Networks
    Google AdWords Remarketing
    We use Google AdWords to advertise this website in Google search results as well as on third-party websites. To do so, when you visit our website, the so-called Remarketing cookie is set by Google. This cookie automatically enables interest-based advertising using a pseudonymous cookie ID based on the pages you have visited. This serves to protect our legitimate interests in optimally marketing our website, based on a balancing of interests. The legal basis for this is Art. 6 (1) S. 1 lit. f GDPR.

Further data processing only occurs if you have consented to Google linking your web and app browsing history with your Google account and using information from your Google account to personalise the ads you see on the web. If you are logged into Google during your visit to our website, Google will use your data, combined with Google Analytics data, to create and define target audience lists for cross-device remarketing. In this case, your personal data will be temporarily linked with Google Analytics data to create target audiences.

Google AdWords Remarketing is a service provided by Google LLC (www.google.de). Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.

You can disable the Remarketing cookie via this link. In addition, you can learn about cookie placement and adjust your settings via the Digital Advertising Alliance.

  1. Social Media Plug-ins
    Use of Social Plugins from Meta (Facebook, Instagram, WhatsApp), Google, TikTok, X (formerly Twitter) using the Shariff Solution
    Our website uses social buttons from social networks. This is done on the basis of Art. 6 (1) S. 1 lit. f GDPR, to make our website more well-known. The commercial purpose behind this is considered a legitimate interest under the GDPR. The responsibility for ensuring GDPR-compliant operation lies with the respective providers.

To enhance the protection of your data when visiting our website, these buttons are not fully integrated as plugins but are embedded via an HTML link. This ensures that when you visit a page of our website containing such buttons, no connection is established with the servers of the respective social network provider.

When you click on one of the buttons, a new browser window will open, leading you to the page of the respective service provider, where you can (if required, after logging in) interact with the like or share button, for example.

The purpose and scope of data collection, as well as the further processing and use of the data by the providers on their pages, as well as contact possibilities and your rights and options for protecting your privacy, can be found in the privacy policies of the providers:

  1. Facebook
    We use social media plugins from Facebook on our website to make its use more personal. For this purpose, we use the “LIKE” or “SHARE” button. This is a service provided by Facebook.
    When you visit a page of our website that contains such a plugin, your browser establishes a direct connection with Facebook’s servers. The content of the plugin is sent directly from Facebook to your browser, which then embeds it into the website.
    By embedding the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and is stored there.
    If you are logged into Facebook, Facebook can directly associate the visit to our website with your Facebook account. If you interact with the plugins, such as by pressing the “LIKE” or “SHARE” button, the corresponding information will also be sent directly to a Facebook server and stored there. The information will also be published on Facebook and displayed to your Facebook friends.
    Facebook may use this information for advertising, market research, and to tailor Facebook pages. To this end, Facebook creates usage, interest, and relationship profiles, e.g., to evaluate your use of our website in relation to the ads displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide other services related to Facebook use.
    If you do not want Facebook to associate the data collected through our website with your Facebook account, you must log out of Facebook before visiting our website.
    For the purpose and scope of data collection and further processing and use of the data by Facebook, as well as your rights and privacy settings, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/.
  2. Instagram
    We use Instagram to embed content on our website. We refer you to Instagram’s privacy policy. We process your data to share content and interact with you. The legal basis for data processing is your consent. Your data is stored by Instagram and by us. Your rights include: access, correction, deletion, and objection.

XII. Rights of the Data Subject and Contact Information
If personal data concerning you is processed, you are a data subject as defined by the GDPR, and you have the following rights against the controller:

  1. Right of Access
    You have the right to request confirmation from the controller as to whether personal data concerning you is being processed by us. If such processing occurs, you may request the following information from the controller:(1) the purposes for which the personal data is processed;
    (2) the categories of personal data being processed;
    (3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
    (4) the planned duration for which the personal data concerning you will be stored, or, if specific details cannot be provided, the criteria used to determine the storage duration;
    (5) the existence of the right to rectification or erasure of personal data concerning you, the right to restriction of processing by the controller, or the right to object to such processing;
    (6) the existence of a right to lodge a complaint with a supervisory authority;
    (7) all available information about the source of the data if the personal data was not obtained from the data subject;
    (8) the existence of automated decision-making, including profiling, under Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and the intended consequences of such processing for the data subject.
    You have the right to request information on whether personal data concerning you is transferred to a third country or an international organization. In this regard, you can request to be informed about the appropriate safeguards under Article 46 of the GDPR in connection with the transfer.
  2. Right to Rectification
    You have the right to request the rectification and/or completion of your personal data, where such data is inaccurate or incomplete. The controller is obliged to make the rectification without undue delay.
  3. Right to Restriction of Processing
    You may request the restriction of processing of your personal data under the following conditions:(1) if you dispute the accuracy of the personal data concerning you, for a period that allows the controller to verify the accuracy of the personal data;
    (2) the processing is unlawful, and you oppose the erasure of the personal data and request the restriction of its use instead;
    (3) the controller no longer needs the personal data for processing purposes, but you require it for the establishment, exercise, or defense of legal claims; or
    (4) if you have objected to processing under Article 21(1) of the GDPR, and it has not yet been determined whether the legitimate grounds of the controller override your rights.

    If the processing of your personal data has been restricted, such data – apart from its storage – can only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest of the Union or a Member State.

    If the restriction of processing is lifted under the above conditions, the controller will inform you before the restriction is removed.

  4. Right to Erasure
    a) Obligation to Erase
    You can request the controller to erase your personal data without undue delay, and the controller is obliged to erase this data without undue delay if one of the following grounds applies:(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
    (2) You withdraw your consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
    (3) You object to the processing under Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing under Article 21(2) of the GDPR.
    (4) The personal data concerning you has been unlawfully processed.
    (5) Erasure of personal data concerning you is required for compliance with a legal obligation under Union or Member State law to which the controller is subject.
    (6) The personal data concerning you has been collected in relation to the offer of information society services under Article 8(1) of the GDPR.

    b) Information to Third Parties
    If the controller has made the personal data concerning you public and is required to erase it under Article 17(1) of the GDPR, the controller shall, taking into account available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers processing your personal data that you, as the data subject, have requested the erasure of all links to or copies or replications of such personal data.

    c) Exceptions
    The right to erasure does not apply insofar as processing is necessary:

    (1) for the exercise of the right of freedom of expression and information;
    (2) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
    (3) for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i), as well as Article 9(3) of the GDPR;
    (4) for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes under Article 89(1) of the GDPR, insofar as the right to erasure mentioned in paragraph (a) is likely to prevent or seriously impair the achievement of the objectives of that processing; or
    (5) for the establishment, exercise, or defense of legal claims.

  5. Right to Notification
    If you have exercised your right to rectification, erasure, or restriction of processing against the controller, they are obliged to inform all recipients to whom your personal data has been disclosed about the rectification, erasure, or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients by the controller.
  6. Right to Data Portability
    You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format. Furthermore, you have the right to transmit those data to another controller without hindrance from the controller to whom the personal data was provided, provided that:
    (1) the processing is based on your consent under Article 6(1)(a) or Article 9(2)(a) of the GDPR, or on a contract under Article 6(1)(b) of the GDPR, and
    (2) the processing is carried out by automated means.
    In exercising this right, you also have the right to request that the personal data concerning you be directly transmitted from one controller to another, where technically feasible. The freedoms and rights of other persons must not be adversely affected by this. The right to data portability does not apply to the processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
  7. Right to Object
    You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you, which is based on Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.
    The controller shall no longer process the personal data concerning you unless they demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
    If the personal data concerning you is being processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.
    If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
    You have the option to exercise your right to object in the context of using information society services – notwithstanding Directive 2002/58/EC – through automated procedures involving technical specifications.
  8. Right to Withdraw Consent
    You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. If you wish to exercise your right of withdrawal or objection, you can simply send an email to info@trend-design.com.
  9. Right to Lodge a Complaint with a Supervisory Authority
    Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement, if you believe that the processing of personal data concerning you infringes the GDPR.The supervisory authority to which the complaint has been submitted will inform the complainant about the progress and the outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.

Trend-Design GmbH, as of: 05/2025