d.u.h.Group GmbH

d.u.h.Group GmbH is responsible for processing the personal data specified in this privacy policy.

Contact

d.u.h.Group GmbH Welle 15 33602 Bielefeld

Privacy Policy

1 Privacy at a Glance
The operators of these pages take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

1.1 Controller and Data Protection Officer
The controller responsible for data processing on this website is:
d.u.h.Group GmbH
Welle 15
D-33602 Bielefeld
Phone: +49 521 329681-11
Email: solutions@duh-group.com
You can reach our data protection officer, Dr. Nolte, by post at the address given above or by email at datenschutz@duh-group.com.

2 Collection and Storage of Personal Data as well as the Nature and Purpose of Their Use:
2.1 When Visiting the Website:
When you access our website www.duh-hroup.com, the browser used on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and is stored until it is automatically deleted:
• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access was made (referrer URL),
• Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
We process the aforementioned data for the following purposes:
• Ensuring a smooth connection setup for the website,
• Ensuring convenient use of our website,
• Evaluating system security and stability, and
• Other administrative purposes.
The legal basis for the data processing is Art. 6 (1) f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website — for this purpose, server log files must be recorded.

2.2 Contacting Us
When you contact us (e.g., via contact form, email, mail, telephone, in person, etc.), the personal data you provide is stored by us. We process this data to handle your request. We do not pass this data on without your consent. The processing of the aforementioned personal data is based on your consent (Art. 6 (1) a GDPR). You may revoke this consent at any time. An informal email to us at solutions@duh-group.com is sufficient. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.
The data you provide when contacting us remains with us until you request its deletion, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been fully processed). Mandatory statutory provisions — in particular retention periods — remain unaffected.

2.3 Routine Deletion and Blocking of Personal Data
We process and store personal data only for the period necessary to achieve the purpose of storage, or as provided for by laws or regulations to which the controller is subject. If the purpose of processing no longer applies or a prescribed retention period expires, the personal data is routinely blocked or deleted in accordance with statutory provisions.

3 Website Hosting and Data Processing Agreements
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website visits, and other data generated via a website. The host is used for the purpose of providing our online offering securely, quickly, and efficiently through a professional provider (Art. 6 (1) f GDPR). Our host will process your data only to the extent necessary to fulfill its performance obligations and will follow our instructions with regard to this data. To ensure data-protection-compliant processing, we have concluded a data processing agreement with our host.

4 SSL / TLS Encryption
For security reasons, and to protect the transmission of confidential content such as your personal data, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address line changes from „http://“ to „https://“ and by the lock symbol in your browser line. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

5 Cookies
Our website uses so-called cookies. Cookies are text files that a website provider stores on the user’s computer and can retrieve again when the user revisits the website, in order to facilitate navigation on the internet or transactions, or to gather information about user behavior. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offering more user-friendly, effective, and secure. Most of the cookies we use are so-called „session cookies.“ They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.
Cookies that are necessary for carrying out the electronic communication process or for providing certain functions you wish to use (e.g., the shopping cart function) are stored on the basis of Art. 6 (1) f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g., cookies for analyzing your surfing behavior) are stored, these are addressed separately in this privacy policy. You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. The legal basis for this is your consent pursuant to Art. 6 (1) a GDPR. Disabling cookies may limit the functionality of this website.
Storage duration: With regard to storage duration, the following types of cookies are distinguished:
• Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online offering and closed their device (e.g., browser or mobile application).
• Permanent cookies: Permanent cookies remain stored even after the device is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. Similarly, data collected via cookies may be used to measure reach. Unless we provide users with explicit information about the type and storage duration of cookies (e.g., when obtaining consent), users should assume that cookies are permanent and that the storage period can be up to two years.
General information on revocation and objection (so-called „opt-out“): Users can revoke their consent at any time and object to the processing in accordance with statutory requirements. Among other things, users can restrict the use of cookies in their browser settings (which may also limit the functionality of our online offering). An objection to the use of cookies for online marketing purposes can also be declared via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/.

5.1 Usercentrics/eRecht24 Cookie Consent Tool
We use the consent technology of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, to obtain consent for the storage of certain cookies on devices or for the use of certain technologies, and to document this consent in a manner compliant with data protection law. When you enter our website, the following personal data is transmitted to Usercentrics: your consent(s) or revocation of consent, your IP address, information about your browser, information about your device, the time of your visit to the website, geolocation.
In addition, Usercentrics stores a cookie in your browser in order to be able to associate the consents granted or their revocation with you. The data collected in this way is stored until you request that we delete it, you delete the Usercentrics cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.
The Usercentrics banner on this website was configured with the help of eRecht24. You can recognize this by the eRecht24 logo appearing in the banner. To display the eRecht24 logo in the banner, a connection is established to eRecht24’s image server. In doing so, the IP address is also transmitted, but is only stored in anonymized form in the server logs. eRecht24’s image server is located in Germany with a German provider. The banner itself is provided exclusively by Usercentrics. Usercentrics is used to obtain the legally required consents for the use of certain technologies. The legal basis for this is Art. 6 (1) c GDPR. Information on data protection at Usercentrics can be found here: https://usercentrics.com/de/datenschutzerklaerung/.

6 Plugins and Tools
6.1 Appointment Scheduling with Microsoft Bookings
You have the option to schedule appointments with us online. We use the „Microsoft Bookings“ service provided by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, or Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, as our appointment booking tool. The online booking function is integrated into our website as a self-service option for booking and cancelling appointments. Your request is processed via the Microsoft Bookings web application.
The legal basis for the data processing for contractual and statutory purposes is Art. 6 (1) b and c GDPR. If you have given us your consent to process personal data and have not revoked it, we process your data pursuant to Art. 6 (1) a GDPR. The integration of the tool is based on our legitimate interest pursuant to Art. 6 (1) f GDPR, so that customers and prospective customers can efficiently and directly schedule an appointment with the respective employee.
Within Microsoft Bookings, we process personal data in electronic form that is required in connection with the customer relationship: contact and communication data (first name, last name, phone number, email address), appointments/appointment types (virtual or in-person), appointment categories (consultation, group event, seminar, etc.). As part of the customer relationship, you must provide us with the personal data we need to schedule appointments using Microsoft Bookings.
Microsoft Bookings includes a notification function that informs users of appointment bookings by email.
Personal data is processed only within our company and is not passed on to third parties. Your data is retained for as long as is necessary to fulfill the purpose. You can delete your data at any time via the Bookings page using the cancel function. Statutory or other retention periods remain unaffected.
Data processing by Microsoft generally takes place in a German data center. In the event that data is nevertheless processed in the United States, the EU Standard Contractual Clauses apply between Microsoft and us. These ensure a level of data protection consistent with the GDPR for any data transfer to the United States. In addition, we have agreed on extensive technical and organizational measures with Microsoft for MS 365 that correspond to the current state of the art in IT security, e.g. with regard to access authorization and end-to-end encryption concepts for data transmission, databases, and servers. Further information on the processing of your personal data can be found here: https://www.microsoft.com/de-de/privacy/privacystatement.

7 Analytics Tools and Advertising
The use of marketing cookies and tracking mechanisms enables us and our partners to show you personalized offers based on an analysis of your interests and usage behavior. Below we explain which mechanisms and tools we use on this online offering:
• Statistics:
By using statistics tools, we measure, for example, the number of your page views.
• Conversion Tracking:
Our conversion tracking partners set a cookie on your computer („conversion cookie“) if you arrived at our website via an ad from the relevant partner. These cookies generally expire after 30 days. If you visit certain pages of ours and the cookie has not yet expired, we and the respective conversion tracking partner can recognize that a particular user clicked on the ad and was thereby redirected to our website. This can also happen across devices. The information obtained using the conversion cookie is used to create conversion statistics and to record the total number of users who clicked on the relevant ad and were redirected to a page tagged with a conversion tracking tag.
• Retargeting:
These tools use advertising cookies or third-party advertising cookies, so-called web beacons (invisible graphics, also called pixels or tracking pixels), or comparable technologies to create usage profiles. These are used for interest-based advertising and to control the frequency with which a user sees certain ads. The providers of these tools may also pass on information for the aforementioned purposes to third parties. In this context, please note the privacy policy of the respective provider.
Please note that the use of these tools may involve the transfer of your data to recipients outside the European Economic Area (e.g., the USA). Details on this can be found in the description of the individual marketing tools below.

7.1 Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, does not store cookies, and does not carry out any independent analyses. It merely serves to manage and deliver the tools integrated through it. However, Google Tag Manager does record your IP address, which may also be transmitted to Google’s parent company in the United States.
The use of Google Tag Manager is based on Art. 6 (1) f GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on its website. If corresponding consent has been requested, processing takes place on the basis of Art. 6 (1) a GDPR and the German Telecommunications-Digital-Services-Data-Protection Act (TDDDG), insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
More information can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

7.2 Google Analytics 4
This website uses features of the Google Analytics 4 web analytics service. The provider is Google LLC. The controller responsible for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“).
Google Analytics uses cookies that enable an analysis of your use of our website. The information generated by the cookies about your use of this website is generally transferred to and stored on a Google server in the USA. The storage of Google Analytics cookies is based on Art. 6 (1) a GDPR and the German Telecommunications-Digital-Services-Data-Protection Act (TDDDG), insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
Google uses this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website.
In Google Analytics 4, IP address anonymization is activated by default. Due to IP anonymization, your IP address is shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
During your visit to the website, your user behavior is recorded in the form of „events.“ Events can include: page views, first visit to the website, your „click path,“ interaction with the website, interactions. In addition, your approximate location (region), the date and time of the visit, your IP address (in shortened form), technical information about your browser and the devices you use (e.g., language settings, screen resolution), your internet service provider, and the referrer URL (via which website/advertising medium you arrived at this website) are also recorded.
Google LLC is certified under the EU-US Data Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (e.g., Singapore) cannot be completely ruled out, we have also concluded the EU Standard Contractual Clauses with Google (https://business.safety.google/adsprocessorterms/sccs/c2p/).
Data linked to cookies is automatically deleted after 14 months. Deletion of data for which the retention period has expired takes place automatically once a month.
You can revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. The lawfulness of processing carried out on the basis of consent prior to the revocation remains unaffected.
You can also prevent the storage of cookies by setting your browser software accordingly from the outset. However, if you configure your browser to reject all cookies, this may result in limited functionality on this and other websites. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by not giving your consent to the setting of the cookie or by downloading and installing the browser add-on for disabling Google Analytics here: https://tools.google.com/dlpage/gaoptout?hl=de.
Further information on the terms of use of Google Analytics and on data protection at Google can be found at https://support.google.com/analytics/answer/9019185?hl=de, https://marketingplatform.google.com/about/analytics/terms/de/, and at https://policies.google.com/?hl=de.

8 Social Media
Our website contains links to our social media presences. You can recognize these links by the typical buttons. These buttons do not have a „share“ or „like“ function; they are merely graphics that link to our respective social media channel. If you click one of these buttons, the corresponding social media presence is opened. The social network is then informed that you visited our website with your IP address.
If you are logged into your account with the relevant network, it is possible for that network to associate your visit to our website with you and your user account. Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by the social media platform. If you do not want the respective network to be able to link your visit to you, you must log out of your social media account.

8.1 LinkedIn
Our website includes links to the social network LinkedIn. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. You can recognize the link by the LinkedIn logo.
Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn. If you do not want LinkedIn to be able to make an association, you must log out of your LinkedIn account.
Further information can be found in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy.

8.1.1 LinkedIn Pixel

We use Insight Tags from the social network LinkedIn on our website. This is offered by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter „LinkedIn“). LinkedIn processes your personal data on the basis of your consent pursuant to Art. 6 (1) a GDPR via the „LinkedIn Insight Tag“ pixel to create campaign reports, track conversions and click events, and deliver targeted advertising outside our website (retargeting) based on URL, referrer URL, IP address (shortened or hashed, for cross-device retargeting), device and browser characteristics (user agent), and timestamps. We do not receive any personal data about you from LinkedIn, only anonymized campaign reports on the website’s audience and ad performance.
The so-called Insight Tags enable us to analyze visitor traffic to our website. The data collected is anonymized. We use LinkedIn Insight Tags to design our website according to demand and to promote it (legitimate interest pursuant to Art. 6 (1) f GDPR).
You can prevent the execution of the JavaScript code required for LinkedIn Insight Tags through an appropriate browser setting. To prevent the execution of JavaScript code entirely, you can also install a JavaScript blocker such as the browser plugin NoScript (www.noscript.net) or Ghostery (www.ghostery.com). More information on how user data is handled can be found in LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy.

8.2 Links to Facebook
Our website includes links to the social network Facebook. The provider is Meta Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognize the link by the Facebook logo on our page. An overview of Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.
Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information can be found in Facebook’s privacy policy at https://de-de.facebook.com/privacy/policy/.
If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

8.2.1 Links to Instagram
Our website includes links to the social network Instagram. The provider is Meta Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognize the link by the Instagram logo on our page.
Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Instagram. If you do not want Instagram to be able to make an association, you must log out of your Instagram account.
Further information can be found in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

8.2.2 Meta Pixel

Our website uses a „pixel“ operated by Meta Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are located in the EU, Meta Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Meta“). The legal basis is our legitimate interest pursuant to Art. 6 (1) f GDPR in the analysis, optimization, and economic operation of our online offering.
With the help of the pixel, Meta is able to determine the visitors of our online offering as a target audience for the display of advertisements („ads“). Accordingly, we use the Meta pixel to ensure that the ads we place are only shown to users of Meta services who have shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products, determined based on the websites visited) that we transmit to Meta (so-called „custom audiences“). With the help of the Meta pixel, we also want to ensure that our Meta ads correspond to the potential interests of users and are not perceived as a nuisance. With the help of the Meta pixel, we can also track the effectiveness of Meta advertisements for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Meta ad (so-called „conversion“).
The data is stored and processed by Facebook, so that a connection to the respective user profile is possible, and Meta can use the data for its own advertising purposes in accordance with the Meta Data Policy. This enables Meta to display advertisements on Meta platforms as well as outside of Meta. This use of data cannot be influenced by us as the site operator.
You can object to the collection by the Meta pixel and the use of your data to display Meta ads. To adjust which types of ads are shown to you within Meta, you can visit the page set up by Meta and follow the instructions on settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings apply across platforms, i.e., they are applied for all devices, such as desktop computers or mobile devices.
The processing of data by Meta takes place within the framework of Meta’s Data Policy. Meta’s privacy notices contain further information on protecting your privacy: https://www.facebook.com/privacy/policy/. Information and details about the Meta pixel and how it works can be found in Meta’s help section: https://www.facebook.com/business/help/651294705016616.

8.4 Links to Xing
Our website includes links to the social network Xing. The provider is XING AG, Dammtorstraße 30, 20354 Hamburg, Germany. You can recognize the link by the Xing logo on our page.
Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Xing. If you do not want Xing to be able to make an association, you must log out of your Xing account.
Further information can be found in Xing’s privacy policy: https://privacy.xing.com/de

8.5 Privacy Notices for Our Facebook Page
The d.u.h.Group Facebook page, accessible at: https://www.facebook.com/DuhGroup, is operated by d.u.h.Group GmbH, Germany, which is responsible for its content. The legal basis for the processing of Facebook Insights data by our company is Article 6 (1) f GDPR. We use this data to make the posts on the page more appealing or to find the right time for publication.
When you visit our Facebook fan page, Facebook, as the controller, collects personal data of users, for example through the use of cookies. Such data collection by Facebook may also occur for visitors to this page who are not logged in or registered with Facebook.
Information on data collection and further processing by Facebook can be found in Facebook’s privacy notices: https://www.facebook.com/about/privacy/
Pursuant to the ruling of the European Court of Justice, there is joint responsibility under Article 26 GDPR between Facebook and our company; the Page Controller Addendum can be viewed here: https://www.facebook.com/legal/terms/page_controller_addendum
If you would like to learn more about Insights data on Facebook, please visit the following page: https://www.facebook.com/legal/terms/information_about_page_insights_data
We are unable to determine what user data Facebook collects about you. Nor do we have full access to the data collected or your profile data. We can only see the public information on your profile. You decide in your Facebook settings which information this is specifically. Furthermore, in your Facebook settings (https://www.facebook.com/settings?tab=privacy) you have the option to actively hide your „likes“ or to unfollow the page. Your profile will then no longer appear in the list of fans of this page.
Our company receives anonymous statistics from Facebook on the use of the page. The following information, for example, is provided:
• Followers: The number of people following us on Facebook — including growth and development over a defined period.
• Reach: The number of people who see a specific post. The number of interactions with a post. This can, for example, be used to determine which content resonates better with the community than other content.
• Ad performance: What does a click cost? How many people have seen an ad?
• Demographics: Average age of visitors, gender, place of residence, language.
We use these statistics, from which we cannot draw any conclusions about individual users, to continuously improve our online offering on Facebook and to better respond to the interests of our users. We cannot link the statistical data with the profile data of our fans. You can decide via your Facebook settings in what form targeted advertising is shown to you.
We receive personal data via Facebook when you actively communicate it to us via a personal message on Facebook. We use your data (e.g., first name, last name) to respond to your request. We do not store your data. We also receive personal data via Facebook when you use a form with pre-filled fields containing data from your profile to transmit data to us and actively send the data to us by clicking a button.
We use your data when using the chat function to respond to your inquiry. The information collected in this way is used to contact you in order to provide you with the desired information and offers.

9 Your Rights as a Data Subject
Insofar as your personal data is processed in connection with your visit to our website, you have the following rights as a „data subject“:

9.1 Right to Information
You may request information from us as to whether personal data concerning you is being processed by us. The right to information does not apply if the data is only stored because it may not be deleted due to statutory or regulatory retention periods, or if it serves exclusively for data backup or data protection monitoring purposes, provided that providing the information would require disproportionate effort and processing for other purposes is excluded by appropriate technical and organizational measures. If, in your case, the right to information is not excluded and your personal data is processed by us, you may request the following information from us:
• the purposes of processing,
• the categories of personal data concerning you that are processed,
• the recipients or categories of recipients to whom your personal data is disclosed, in particular recipients in third countries,
• if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining that duration,
• the existence of a right to rectification, erasure, or restriction of processing of your personal data, or a right to object to such processing,
• the existence of a right to lodge a complaint with a data protection supervisory authority,
• if the personal data was not collected from you as the data subject, any available information about the source of the data,
• where applicable, the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and intended effects of such automated decision-making for you,
• where applicable, in the case of transfer to recipients in third countries, unless there is a European Commission adequacy decision pursuant to Art. 45 (3) GDPR, information about which suitable safeguards pursuant to Art. 46 (2) GDPR are in place to protect the personal data.

9.2 Right to Rectification and Completion
If you determine that we hold incorrect personal data about you, you may request that we correct this incorrect data without delay. If your personal data is incomplete, you may request that it be completed.

9.3 Right to Erasure
You have a right to erasure („right to be forgotten“) unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, or for the performance of a task carried out in the public interest, and one of the following reasons applies:
• The personal data is no longer necessary for the purposes for which it was processed.
• The legal basis for processing was solely your consent, which you have revoked.
• You have objected to the processing of your personal data that we have made public.
• You have objected to the processing of personal data that we have not made public, and there are no overriding legitimate grounds for the processing.
• Your personal data was processed unlawfully.
• Erasure of the personal data is required to comply with a legal obligation to which we are subject.
There is no right to erasure if erasure is impossible or only possible with disproportionate effort in the case of lawful, non-automated data processing due to the specific nature of storage, and your interest in erasure is minor. In this case, restriction of processing takes the place of erasure.

9.4 Right to Restriction of Processing
You may request the restriction of processing from us if one of the following applies:
• You dispute the accuracy of the personal data. In this case, restriction may be requested for the period that allows us to verify the accuracy of the data.
• The processing is unlawful and you request restriction of the use of your personal data instead of erasure.
• We no longer need your personal data for the purposes of processing, but you need it to assert, exercise, or defend legal claims.
• You have objected to processing pursuant to Art. 21 (1) GDPR. Restriction of processing may be requested for as long as it has not yet been determined whether our legitimate grounds override your grounds.
Restriction of processing means that the personal data may only be processed with your consent, or for the assertion, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest. Before we lift the restriction, we are obliged to inform you of this.

9.5 Right to Data Portability
You have a right to data portability, provided that processing is based on your consent (Art. 6 (1) a or Art. 9 (2) a GDPR) or on a contract to which you are a party and processing is carried out using automated means. In this case, the right to data portability includes the following rights, provided this does not affect the rights and freedoms of others: You may request that we provide you with the personal data you have given us in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another controller without hindrance from us. Where technically feasible, you may request that we transmit your personal data directly to another controller.

9.6 Right to Withdraw Consent
You have the right to withdraw any consent given at any time with effect for the future. An email to solutions@duh-group.com is sufficient. The withdrawal does not affect the lawfulness of the data processing carried out on the basis of the consent up until the withdrawal was received. After receipt of the withdrawal, data processing based exclusively on your consent will be discontinued.

9.7 Right to Object
If processing is based on Art. 6 (1) e GDPR (performance of a task carried out in the public interest or in the exercise of official authority) or Art. 6 (1) f GDPR (legitimate interest of the controller or a third party), you have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you. This also applies to profiling based on Art. 6 (1) e or f GDPR. After you exercise your right to object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
You may object at any time to the processing of personal data concerning you for the purposes of direct marketing. This also applies to profiling related to such direct marketing. After you exercise this right to object, we will no longer use the personal data in question for direct marketing purposes.
An email to solutions@duh-group.com is sufficient.

9.8 Existence of Automated Decision-Making
As a responsible company, we refrain from automated decision-making or profiling.

9.9 Right to Lodge a Complaint
If you believe that the processing of personal data concerning you is unlawful, you may lodge a complaint with a data protection supervisory authority responsible for your place of residence or work, or for the place of the alleged infringement. We would appreciate it if you would first contact us to discuss your concerns or complaints. An email to solutions@duh-group.com is sufficient.