Last Updated: October 19, 2025

1) INFORMATION ABOUT THE COLLECTION OF

PERSONAL DATA AND CONTACT DETAILS OF THE

CONTROLLER

1.1 We are pleased that you are visiting our website and thank you for your interest. In the

following, we inform you about the handling of your personal data when using our website.

Personal data is any data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the

General Data Protection Regulation (GDPR) is Doctor Shape. The controller responsible for the

processing of personal data is the natural or legal person who, alone or jointly with others,

determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential

content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You

can recognize an encrypted connection by the character string "https://" and the lock symbol in

your browser address bar.

2) DATA COLLECTION WHEN VISITING OUR WEBSITE

When you use our website purely for information purposes, i.e. if you do not register or

otherwise transmit information to us, we only collect the data that your browser transmits to our

server (so-called "server log files"). When you visit our website, we collect the following data,

which is technically necessary for us to display the website to you:

● Our visited website

● Date and time at the time of access

● Amount of data sent in bytes

● Source/reference from which you came to the page

● Browser used

● Operating system used

● IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our

legitimate interest in improving the stability and functionality of our website. The data is not

passed on or otherwise used. However, we reserve the right to retrospectively check the server

log files if there are concrete indications of illegal use.

3) COOKIES

In order to make visiting our website attractive and to enable the use of certain functions, we

use so-called cookies on various pages. These are small text files that are stored on your end

device. Some of the cookies we use are deleted after the end of the browser session, i.e. after

you close your browser (so-called session cookies). Other cookies remain on your end device

and enable us or our partner companies (third-party cookies) to recognize your browser on your

next visit (persistent cookies). If cookies are set, they collect and process certain user

information such as browser and location data as well as IP address values to an individual

extent. Persistent cookies are automatically deleted after a predefined period, which may vary

depending on the cookie.

Some cookies serve to simplify the ordering process by saving settings (e.g. remembering the

contents of a virtual shopping cart for a later visit to the website). If personal data is also

processed by individual cookies implemented by us, the processing is carried out in accordance

with Art. 6 para. 1 lit. b GDPR either for the performance of the contract or in accordance with

Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of

the website and a customer-friendly and effective design of the page visit.

We may work with advertising partners who help us to make our website more interesting for

you. For this purpose, cookies from partner companies are also stored on your hard drive when

you visit our website (third-party cookies). If we work with the aforementioned advertising

partners, you will be informed individually and separately about the use of such cookies and the

scope of the information collected in each case within the following paragraphs.

Please note that you can set your browser so that you are informed about the setting of cookies

and can decide individually about their acceptance or exclude the acceptance of cookies for

certain cases or in general. Each browser differs in the way it manages cookie settings. This is

described in the help menu of each browser, which explains how you can change your cookie

settings. You can find this for the respective browsers under the following links:

● Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-

explorer-delete-manage-cookies

● Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-

preferences

● Chrome: https://support.google.com/chrome/answer/95647?hl=en

● Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac

● Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) CONTACT

When you contact us (e.g. via contact form or email), personal data is collected. Which data is

collected in the case of a contact form can be seen from the respective contact form. This data

is stored and used exclusively for the purpose of responding to your request or for establishing

contact and the associated technical administration. The legal basis for the processing of the

data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f

GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the

processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your

enquiry; this is the case when it can be inferred from the circumstances that the matter in

question has been conclusively clarified and provided that there are no statutory retention

obligations to the contrary.

5) DATA PROCESSING FOR OPENING A CUSTOMER

ACCOUNT AND CONTRACT PROCESSING

In accordance with Art. 6 para. 1 lit. b GDPR, personal data is also collected and processed if

you provide it to us for the performance of a contract or when opening a customer account.

Which data is collected can be seen from the respective input forms. You can delete your

customer account at any time by sending a message to the above-mentioned address of the

controller. We store and use the data you provide for contract processing. After complete

processing of the contract or deletion of your customer account, your data will be blocked with

regard to tax and commercial retention periods and deleted after the expiry of these periods,

unless you have expressly consented to further use of your data or we have reserved a legally

permitted further use of data, about which we inform you accordingly below.

6) USE OF YOUR DATA FOR DIRECT MARKETING

6.1 Registration for our Email Newsletter

If you register for our email newsletter, we will regularly send you information about our offers.

The only mandatory information for sending the newsletter is your email address. The provision

of further data is voluntary and will be used to address you personally. We use the so-called

double opt-in procedure to send the newsletter. This means that we will only send you an email

newsletter once you have expressly confirmed that you consent to receiving the newsletter. We

will then send you a confirmation email asking you to confirm by clicking on a corresponding link

that you wish to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to use your personal data in

accordance with Art. 6 para. 1 lit. a GDPR. When you register for the newsletter, we store your

IP address entered by your Internet Service Provider (ISP) as well as the date and time of

registration in order to be able to trace any misuse of your email address at a later date. The

data collected by us when you register for the newsletter will only be used for the purpose of

promotional contact by means of the newsletter. You can unsubscribe from the newsletter at

any time using the link provided for this purpose in the newsletter or by sending a corresponding

message to the controller mentioned at the beginning. After unsubscribing, your email address

will be deleted from our newsletter distribution list immediately, unless you have expressly

consented to further use of your data or we reserve the right to use data beyond this, which is

permitted by law and about which we inform you in this declaration.

6.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve

the right to regularly send you offers for similar goods or services to those already purchased

from our range by email. We do not need to obtain separate consent from you for this. In this

respect, data processing is based solely on our legitimate interest in personalized direct

marketing in accordance with Art. 6 para. 1 lit. f GDPR. If you initially objected to the use of your

email address for this purpose, we will not send emails. You are entitled to object to the use of

your email address for the aforementioned advertising purpose at any time with effect for the

future by sending a message to the controller mentioned at the beginning. You will only incur

transmission costs according to the basic rates for this. After receipt of your objection, the use of

your email address for advertising purposes will be stopped immediately.

7) DATA PROCESSING FOR ORDER PROCESSING

7.1 Order Fulfillment

The personal data we collect is passed on to the transport company commissioned with the

delivery as part of the contract processing, insofar as this is necessary for the delivery of the

goods. We pass on your payment data to the commissioned credit institution as part of the

payment processing, insofar as this is necessary for the payment processing. If payment service

providers are used, we inform you explicitly below. The legal basis for the transfer of data is Art.

6 para. 1 lit. b GDPR.

7.2 Use of Payment Service Providers

PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered -

"purchase on account" or "installment payment" via PayPal, we pass on your payment data to

PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter

"PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6

para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via

PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment"

via PayPal. For this purpose, your payment data may be passed on to credit agencies in

accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in

determining your creditworthiness. PayPal uses the result of the credit check with regard to the

statistical probability of default for the purpose of deciding on the provision of the respective

payment method. The credit report may contain probability values (so-called score values).

Insofar as score values are included in the result of the credit report, they are based on a

scientifically recognized mathematical-statistical procedure. Address data, among other things

but not exclusively, is included in the calculation of score values.

For further data protection information, including on the credit agencies used, please refer to

PayPal's privacy policy: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal.

However, PayPal may still be entitled to process your personal data if this is necessary for

contractual payment processing.

SOFORT (Klarna)

When selecting the payment method "SOFORT", payment processing takes place via the

payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany

(hereinafter "SOFORT"), to which we pass on your information provided as part of the order

process together with the information about your order in accordance with Art. 6 para. 1 lit. b

GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46,

11134 Stockholm, Sweden). Your data is only transferred for the purpose of payment

processing with the payment service provider SOFORT and only to the extent necessary for this

purpose.

You can find further information on SOFORT's data protection provisions at the following

Internet address: https://www.klarna.com/sofort/privacy-policy

8) CONTACT FOR REVIEW REMINDERS

Own Review Reminder (not sent via a customer review system)

We use your email address for a one-time reminder to submit a review of your order for the

review system we use, provided you have given us your express consent in accordance with

Art. 6 para. 1 lit. a GDPR during or after your order.

You can revoke your consent at any time by sending a message to the controller responsible for

data processing.

9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook Plugins with Shariff Solution

Please note: Any special additional customs clearance costs and/or import duties are not

included in the price and are the responsibility of the customer.

Our website uses so-called social plugins ("plugins") of the social network Facebook, which is

operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

In order to increase the protection of your data when visiting our website, these buttons are not

integrated as unrestricted plugins, but merely using an HTML link in the page. This type of

integration ensures that when you visit a page on our website that contains such buttons, no

connection is yet established with Facebook's servers. If you click on the button, a new browser

window opens and calls up the Facebook page, where you can interact with the plugins there (if

necessary after entering your login data).

Facebook Inc., based in the USA, is certified for the US-European data protection agreement

"Privacy Shield", which guarantees compliance with the data protection level applicable in the

EU.

For the purpose and scope of data collection and the further processing and use of data by

Facebook, as well as your rights and setting options to protect your privacy, please refer to

Facebook's privacy policy: https://www.facebook.com/policy.php

9.2 Google+ Plugins as Shariff Solution

Our website uses so-called social plugins ("plugins") of the social network Google+, which is

operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

("Google").

In order to increase the protection of your data when visiting our website, these buttons are not

integrated as unrestricted plugins, but merely using an HTML link in the page. This type of

integration ensures that when you visit a page on our website that contains such buttons, no

connection is yet established with Google+'s servers. If you click on the button, a new browser

window opens and calls up the Google+ page, where you can interact with the plugins there (if

necessary after entering your login data).

Google LLC, based in the USA, is certified for the US-European data protection agreement

"Privacy Shield", which guarantees compliance with the data protection level applicable in the

EU.

For the purpose and scope of data collection and the further processing and use of data by

Google, as well as your rights and setting options to protect your privacy, please refer to

Google's privacy policy: https://www.google.com/intl/en/policies/privacy/

9.3 Instagram Plugin as Shariff Solution

Our website uses so-called social plugins ("plugins") of the online service Instagram, which is

operated by Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

In order to increase the protection of your data when visiting our website, these buttons are not

integrated as unrestricted plugins, but merely using an HTML link in the page. This type of

integration ensures that when you visit a page on our website that contains such buttons, no

connection is yet established with Instagram's servers. If you click on the button, a new browser

window opens and calls up the Instagram page, where you can interact with the plugins there (if

necessary after entering your login data).

Instagram LLC., based in the USA, is certified for the US-European data protection agreement

"Privacy Shield", which guarantees compliance with the data protection level applicable in the

EU.

For the purpose and scope of data collection and the further processing and use of data by

Instagram, as well as your rights and setting options to protect your privacy, please refer to

Instagram's privacy policy: https://help.instagram.com/155833707900388/

10) ONLINE MARKETING

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google from the operator Google

LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to display relevant ads to users, improve campaign performance

reports, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID

to record which ads are displayed in which browser and can thus prevent them from being

displayed multiple times. The processing is based on our legitimate interest in the optimal

marketing of our website in accordance with Art. 6 para. 1 lit. f GDPR.

In addition, DoubleClick can use cookie IDs to record so-called conversions that are related to

ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits

the advertiser's website with the same browser and buys something there. According to Google,

DoubleClick cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection

with Google's server. We have no influence on the scope and further use of the data collected

by Google through the use of this tool and therefore inform you according to our knowledge: By

integrating DoubleClick, Google receives the information that you have accessed the

corresponding part of our website or clicked on an ad from us. If you are registered with a

Google service, Google can assign the visit to your account. Even if you are not registered with

Google or have not logged in, it is possible that the provider will find out and store your IP

address.

If you wish to object to participating in this tracking process, you can deactivate cookies for

conversion tracking by setting your browser so that cookies from the domain

www.googleadservices.com are blocked, https://www.google.com/settings/ads, whereby this

setting is deleted when you delete your cookies. Alternatively, you can inform yourself about the

setting of cookies at the Digital Advertising Alliance at the Internet address www.aboutads.info

and make settings for this. Finally, you can set your browser so that you are informed about the

setting of cookies and can decide individually about their acceptance or exclude the acceptance

of cookies for certain cases or in general. If cookies are not accepted, the functionality of our

website may be limited.

Google LLC, based in the USA, is certified for the US-European data protection agreement

"Privacy Shield", which guarantees compliance with the data protection level applicable in the

EU.

You can find further information on DoubleClick by Google's data protection provisions at the

following Internet address: https://policies.google.com/privacy

10.2 Use of Google AdWords Conversion Tracking

This website uses the online advertising program "Google AdWords" and, as part of Google

AdWords, the conversion tracking of Google LLC., 1600 Amphitheatre Parkway, Mountain View,

CA 94043, USA ("Google"). We use the offer from Google Adwords to draw attention to our

attractive offers with the help of advertising materials (so-called Google Adwords) on external

websites. We can determine, in relation to the data of the advertising campaigns, how

successful the individual advertising measures are. In doing so, we pursue the interest of

showing you advertising that is of interest to you, making our website more interesting for you

and achieving a fair calculation of advertising costs.

The cookie for conversion tracking is set when a user clicks on a Google AdWords ad. Cookies

are small text files that are stored on your computer system. These cookies usually lose their

validity after 30 days and are not used for personal identification. If the user visits certain pages

of this website and the cookie has not yet expired, Google and we can recognize that the user

clicked on the ad and was redirected to this page. Each Google AdWords customer receives a

different cookie. Cookies can therefore not be tracked via the websites of AdWords customers.

The information obtained using the conversion cookie is used to create conversion statistics for

AdWords customers who have opted for conversion tracking. Customers learn the total number

of users who clicked on their ad and were redirected to a page with a conversion tracking tag.

However, they do not receive any information with which users can be personally identified. If

you do not want to participate in tracking, you can block this use by deactivating the Google

conversion tracking cookie via your Internet browser under user settings. You will then not be

included in the conversion tracking statistics. We use Google Adwords based on our legitimate

interest in targeted advertising in accordance with Art. 6 para. 1 lit. f GDPR.

Google LLC, based in the USA, is certified for the US-European data protection agreement

"Privacy Shield", which guarantees compliance with the data protection level applicable in the

EU.

You can find further information on Google's data protection provisions at the following Internet

address: https://policies.google.com/privacy

You can permanently deactivate cookies for ad preferences by preventing them through an

appropriate setting in your browser software or by downloading and installing the browser plug-

in available at the following link: https://www.google.com/settings/ads/plugin?hl=en

Please note that certain functions of this website may not be used or may only be used to a

limited extent if you have deactivated the use of cookies.

11) WEB ANALYSIS SERVICES

Google (Universal) Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC, 1600

Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-

called "cookies", text files that are stored on your computer and that enable an analysis of your

use of the website. The information generated by the cookie about your use of this website

(including the shortened IP address) is usually transferred to a Google server in the USA and

stored there.

This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which

ensures anonymization of the IP address by shortening it and excludes direct personal

reference. Through the extension, your IP address is shortened by Google within member

states of the European Union or in other contracting states of the Agreement on the European

Economic Area beforehand. Only in exceptional cases will the full IP address be transferred to a

Google server in the USA and shortened there. In these exceptional cases, this processing

takes place in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in

the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, to compile

reports on website activity and to provide us with other services relating to website activity and

internet usage. The IP address transmitted by your browser as part of Google Analytics will not

be merged with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly; however,

we would like to point out that in this case you may not be able to use all functions of this

website to their full extent. You can also prevent the collection of data generated by the cookie

and related to your use of the website (including your IP address) by Google and the processing

of this data by Google by downloading and installing the browser plugin available at the

following link: https://tools.google.com/dlpage/gaoptout?hl=en

As an alternative to the browser plugin or within browsers on mobile devices, please click on the

following link to set an opt-out cookie that prevents collection by Google Analytics within this

website in the future (this opt-out cookie only works in this browser and only for this domain; if

you delete your cookies in this browser, you must click this link again): Deactivate Google

Analytics

Google LLC, based in the USA, is certified for the US-European data protection agreement

"Privacy Shield", which guarantees compliance with the data protection level applicable in the

EU.

This website also uses Google Analytics for cross-device analysis of visitor flows, which is

carried out via a user ID. When a page is accessed for the first time, the user is assigned a

unique, permanent and anonymized ID that is set across devices. This makes it possible to

assign interaction data from different devices and from different sessions to a single user. The

user ID does not contain any personal data and does not transmit such data to Google.

You can object to data collection and storage via the user ID at any time with effect for the

future. To do this, you must deactivate Google Analytics on all systems you use, for example in

another browser or on your mobile device.

You can deactivate using a browser plugin from Google

(https://tools.google.com/dlpage/gaoptout?hl=en). As an alternative to the browser plugin or

within browsers on mobile devices, please click on the following link to set an opt-out cookie that

prevents collection by Google Analytics within this website in the future (this opt-out cookie only

works in this browser and only for this domain; if you delete your cookies in this browser, you

must click this link again): Deactivate Google Analytics

Further information on Universal Analytics can be found here:

https://support.google.com/analytics/answer/2838718?hl=en&ref_topic=6010376

12) RETARGETING / REMARKETING / REFERRAL

ADVERTISING

Facebook Custom Audience via the Pixel Method

This website uses the "Facebook pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA

94025, USA ("Facebook"). If express consent is given, this can be used to track the behavior of

users after they have seen or clicked on a Facebook ad. This procedure is used to evaluate the

effectiveness of Facebook ads for statistical and market research purposes and can help to

optimize future advertising measures.

The data collected is anonymous to us and therefore does not provide us with any conclusions

about the identity of users. However, the data is stored and processed by Facebook so that a

connection to the respective user profile is possible and Facebook can use the data for its own

advertising purposes in accordance with the Facebook data usage guidelines

(https://www.facebook.com/about/privacy/). You can enable Facebook and its partners to place

ads on and off Facebook. A cookie may also be stored on your computer for these purposes.

These processing operations only take place if express consent is given in accordance with Art.

6 para. 1 lit. a GDPR.

Consent to the use of the Facebook pixel may only be given by users who are older than 13

years. If you are younger, please ask your parents or guardians for permission.

Facebook Inc., based in the USA, is certified for the US-European data protection agreement

"Privacy Shield", which guarantees compliance with the data protection level applicable in the

EU.

To deactivate the use of cookies on your computer, you can set your Internet browser so that no

more cookies can be stored on your computer in the future or cookies that have already been

stored are deleted. However, deactivating all cookies can mean that some functions on our

websites can no longer be executed. You can also deactivate the use of cookies by third-party

providers such as Facebook on the following Digital Advertising Alliance website:

https://www.aboutads.info/choices/

Google AdWords Remarketing

Our website uses the functions of Google AdWords Remarketing; we advertise this website in

Google search results as well as on third-party websites. The provider is Google LLC., 1600

Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google

sets a cookie in the browser of your end device, which automatically enables interest-based

advertising based on a pseudonymous cookie ID and on the basis of the pages you have

visited. Processing takes place on the basis of our legitimate interest in the optimal marketing of

our website in accordance with Art. 6 para. 1 lit. f GDPR.

Further data processing only takes place if you have consented to Google linking your Internet

and app browser history with your Google account and using information from your Google

account to personalize ads that you see on the web. If you are logged into Google during your

visit to our website in this case, Google uses your data together with Google Analytics data to

create and define audience lists for cross-device remarketing. For this purpose, Google

temporarily links your personal data with Google Analytics data to form target groups.

You can permanently deactivate the setting of cookies for ad preferences by downloading and

installing the browser plug-in available at the following link:

https://www.google.com/settings/ads/onweb/

Alternatively, you can inform yourself about the setting of cookies at the Digital Advertising

Alliance at the Internet address www.aboutads.info and make settings for this. Finally, you can

set your browser so that you are informed about the setting of cookies and can decide

individually about their acceptance or exclude the acceptance of cookies for certain cases or in

general. If cookies are not accepted, the functionality of our website may be limited.

Google LLC, based in the USA, is certified for the US-European data protection agreement

"Privacy Shield", which guarantees compliance with the data protection level applicable in the

EU.

For further information and Google's privacy policy regarding advertising, please see:

https://policies.google.com/technologies/ads

13) RIGHTS OF THE DATA SUBJECT

13.1 The applicable data protection law grants you comprehensive rights as a data subject

(rights of access and intervention) with regard to the controller regarding the processing of your

personal data, about which we inform you below:

Right of access in accordance with Art. 15 GDPR: In particular, you have the right to

information about your personal data processed by us, the processing purposes, the categories

of personal data processed, the recipients or categories of recipients to whom your data has

been or will be disclosed, the planned storage period or the criteria for determining the storage

period, the existence of a right to rectification, erasure, restriction of processing, objection to

processing, complaint to a supervisory authority, the origin of your data if it was not collected by

us from you, the existence of automated decision-making including profiling and, if applicable,

meaningful information about the logic involved and the scope and intended effects of such

processing on you, as well as your right to be informed which safeguards pursuant to Art. 46

GDPR exist when your data is transferred to third countries;

Right to rectification in accordance with Art. 16 GDPR: You have the right to immediate

rectification of incorrect data concerning you and/or completion of your incomplete data stored

with us;

Right to erasure in accordance with Art. 17 GDPR: You have the right to request the erasure

of your personal data if the requirements of Art. 17 para. 1 GDPR are met. However, this right

does not exist in particular if the processing is necessary to exercise the right to freedom of

expression and information, to fulfill a legal obligation, for reasons of public interest or to assert,

exercise or defend legal claims;

Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to

request restriction of the processing of your personal data as long as the accuracy of your data,

which you dispute, is being verified, if you refuse erasure of your data due to unlawful data

processing and instead request restriction of the processing of your data, if you need your data

to assert, exercise or defend legal claims after we no longer need this data after achieving the

purpose, or if you have lodged an objection for reasons relating to your particular situation, as

long as it is not yet clear whether our legitimate grounds override;

Right to notification in accordance with Art. 19 GDPR: If you have asserted the right to

rectification, erasure or restriction of processing against the controller, the controller is obliged to

notify all recipients to whom the personal data concerning you has been disclosed of this

rectification or erasure of the data or restriction of processing, unless this proves impossible or

involves disproportionate effort. You have the right to be informed about these recipients.

Right to data portability in accordance with Art. 20 GDPR: You have the right to receive

your personal data that you have provided to us in a structured, commonly used and machine-

readable format or to request transmission to another controller, insofar as this is technically

feasible;

Right to revoke given consent in accordance with Art. 7 para. 3 GDPR: You have the right

to revoke consent to the processing of data once given at any time with effect for the future. In

the event of revocation, we will delete the affected data immediately, unless further processing

cannot be based on a legal basis for processing without consent. The revocation of consent

does not affect the lawfulness of processing carried out on the basis of consent up to the

revocation;

Right to lodge a complaint in accordance with Art. 77 GDPR: If you believe that the

processing of personal data concerning you violates the GDPR, you have the right - without

prejudice to any other administrative or judicial remedy - to lodge a complaint with a supervisory

authority, in particular in the Member State of your habitual residence, place of work or the place

of the alleged infringement.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF

INTERESTS DUE TO OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT

AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR

REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE

DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE

CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING

THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF

THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING

PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF

PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING.

YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE

DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) DURATION OF STORAGE OF PERSONAL DATA

The duration of the storage of personal data is based on the respective statutory retention

period (e.g. commercial and tax retention periods). After expiry of the period, the corresponding

data is routinely deleted, provided it is no longer required for contract fulfillment or contract

initiation and/or we no longer have a legitimate interest in continued storage.

Last Updated: October 19, 2025

For questions regarding this Privacy Policy, please contact us at: info@trydoctorshape.com