Privacy policy

1. Name and address of the data controller

The responsible party within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is SoSafe SE, Lichtstraße 25a, 50825 Köln, Germany.

E-mail: info@sosafe.de. Phone: +49 221 6508 3800.

2. Name and address of the data protection officer

The data protection officer of the controller is Mr. Sebastian Herting, Herting Oberbeck Datenschutz GmbH, Hallerstraße 76, 20146 Hamburg, Germany.

Phone: +49 40 226 34 56 0. E-mail: dpo@sosafe.de.

3. Data deletion and storage period

Unless otherwise specified, stored personal data is deleted if you revoke your consent to storage or if knowledge of this data is no longer required to fulfil the purpose for which it was stored. Storage may continue if European or national legislators have provided for it in Union regulations, laws or other provisions to which the controller is subject.

We regularly check whether the purpose for which the data was stored is still valid and delete your data immediately if this is no longer the case. Deletion takes place only after the expiry of the deadlines of tax and commercial law regulations.

4. Disclosure of personal data and recipients

We will not disclose personal data without your express consent, unless there is a legal reason for permission, for example if we are legally obliged to disclose data to law enforcement agencies, courts or public bodies, or if we involve third parties bound to professional secrecy to enforce our claims. We share personal data with the following recipients:

• Processors who process personal data on our behalf. We always retain control over the respective personal data and remain the data controller.
• Banks and payment service providers, where the payment method requires it.
• In individual cases, courts, law enforcement agencies, supervisory authorities, other authorities, tax advisors and lawyers, insofar as this is legally permissible and necessary.

5. Automated decision making

We will not use your personal data to make automated decisions (including profiling) concerning you that have legal effect on you or similarly significantly affect you.

6. Your rights

• Right to information (Art. 15 GDPR): request information about your personal data stored by us, free of charge, and obtain a copy.
• Right to rectification (Art. 16 GDPR): have incorrect data corrected without delay.
• Right to restriction of processing (Art. 18 GDPR): request that we suspend processing, for example while accuracy or the basis for processing is determined.
• Right to deletion (Art. 17 GDPR): have personal data deleted without undue delay if it is no longer required for its purpose or you have revoked your consent. This does not apply where a legal obligation requires processing or where processing is necessary for legal claims.
• Right to data portability (Art. 20 GDPR): under certain circumstances, have data you provided transferred to another controller in a structured, common and machine-readable format.
• Right of objection: object to processing based on our legitimate interests (or those of a third party) on grounds arising from your particular situation, and in particular to processing for direct marketing.
• Right to revoke consent: revoke your consent at any time. This does not affect the lawfulness of processing carried out before the revocation.
• Right to complain to a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.

7. Contact

If you have any questions about the collection, processing or use of your personal data, for information, correction, blocking or deletion of data, or general questions and suggestions on data protection, contact SoSafe SE, Lichtstraße 25a, 50825 Köln, at info@sosafe.de. The data protection officer can be reached at dpo@sosafe.de.