Shopping cart (0)
-Your shopping cart is empty!-
-Your shopping cart is empty!-
Data protection is of particularly high importance in our company and when using our website. Use of our website www.konzept-weiss.de is generally possible without providing personal data. We process users’ personal data only insofar as this is necessary to provide a functional website and to provide and perform our services.
Personal data is generally processed only with the user’s consent. An exception to obtaining the user’s prior consent exists only if obtaining prior consent is technically and actually impossible and the processing of the data is permitted by statutory provisions.
On our website www.konzept-weiss.de, we present our range of products in the field of teeth whitening. You have the simple, non-binding opportunity to gain an overview of our product range. You can purchase the products shown via the shop software integrated into our website www.konzept-weiss.de and arrange appointments via the location-based subdomains (for example berlin.konzept-weiss.de). Personal data is processed for these activities; further details are set out below. You can also find information about the local Konzept Weiss Stores on our website www.konzept-weiss.de and via the respective subdomain, and contact them if needed.
(1) Scope
This Privacy Policy applies to the collection and processing of personal data on the website www.konzept-weiss.de, as well as to all location-based subdomains operating under the main domain (“…konzept-weiss.de” (for example berlin.konzept-weiss.de) and the platform technically provided on these domains for booking customer appointments via the website “connect.shore.com/bookings/konzept-weiss……” (for example https://connect.shore.com/bookings/konzept-weiss-muenchen/services?locale=de).
(2) Legal bases
Where we have obtained the data subject’s consent to the processing of personal data, or obtain such consent from the data subject, Art. 6 para. 1 lit. a GDPR constitutes the legal basis for data processing.
If we have a contractual relationship with the data subject and the processing of personal data is necessary to fulfill our contractual obligations, the data will be processed on the basis of Article 6(1)(b) GDPR. This also applies to processing operations necessary as part of initiating contractual relationships.
Where the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override those interests, the data will be processed on the basis of Article 6(1)(f) GDPR.
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply under the stated legal bases. Data may be stored beyond this period if required by the legislature through regulations to which we are subject. Stored data will also be blocked or deleted when the retention period prescribed by the aforementioned standards expires, unless further storage is necessary to fulfill contractual purposes.
(3) Controller within the meaning of the GDPR
The controller within the meaning of the General Data Protection Regulation and other national data protection laws, as well as other data protection regulations, is:
Jack Papen
KONZEPT WEISS Teeth Whitening GmbH
Siemesdyk 60
47807 Krefeld
Email: info@konzept-weiss.de
Website: www.konzept-weiss.de
(4) Operation of an online shop
We have set up an online shop on our website that allows you to order our products. To process the order, the customer enters personal data that we store. This includes:
- Last name, first name
- Address (billing and delivery address)
- Payment details
- Email address
The data is absolutely necessary to process your order and deliver the goods. Data processing is strictly necessary to fulfill our contractual obligations (including purchase agreements); the legal basis is Article 6(1)(b) GDPR.
To process the order, your data must also be disclosed to third parties. These are primarily service providers involved in order processing, payment processing, and transportation. The personal data collected for the order process will be deleted after the order has been completed. For more information about your rights, please refer to the final paragraph of this privacy policy.
(5) Newsletter
You have the option of subscribing to a free newsletter via our website. When registering for the newsletter, the data from the form will be transmitted to us. You will then receive an email from us asking you to confirm your subscription to our newsletter. Your email address is collected during the registration process. When the data is processed during registration, your consent is obtained and reference is made to this Privacy Policy; the legal basis for processing your data is Art. 6(1)(a) GDPR.
If you request and/or purchase goods or services from us and provide your email address in the process, we may subsequently use it to send you a newsletter. In such a case, the newsletter will contain exclusively direct advertising for our own similar goods or services. The legal basis for sending the newsletter in this case is Section 7 (3) UWG.
No data is shared with third parties in connection with data processing for sending newsletters. The data is used exclusively to send the newsletter. The user's email address is collected to deliver the newsletter. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user's email address will be stored for as long as the newsletter subscription is active. The newsletter subscription may be canceled by the data subject at any time. For this purpose, each newsletter contains a corresponding link. Canceling the subscription simultaneously revokes consent to the storage of the personal data collected during the registration process.
(6) Contact Form and Email Contact
We offer a contact form that can be used to contact us electronically. If a user makes use of this option, the data entered in the form will be transmitted to us and stored. The following data may be entered: name, address, telephone number, email address.
When the data is processed during submission, your consent is obtained and reference is made to this Privacy Policy.
Alternatively, you can contact us using the provided email address. In this case, the user's personal data transmitted with the email will be stored.
The legal basis for processing the data is Article 6(1)(b) GDPR. In other cases, the legal basis for data processing is the user’s consent pursuant to Article 6(1)(a) GDPR.
The processing of personal data from the contact form and an email serves to handle the contact request in accordance with the user’s inquiry and instructions. Other personal data processed during submission serves to prevent misuse and ensure the security of our information technology systems.
The data transmitted by the user will be deleted once the purpose of their submission has been fulfilled. For data transmitted via the contact form and email, this is the case when the respective conversation with the user has ended.
The user has the option to withdraw consent to the processing of their personal data at any time and to object to the storage of their personal data at any time. It is sufficient for the user to notify us informally, either orally or in writing; no specific means of communication are required. We recommend notification by email. In this case, all personal data stored by us in the course of contacting us will be deleted.
(7) Provision of the website and creation of log files
Whenever our website is accessed, our system automatically collects general information from the computer system of the accessing computer.
The following data is collected:
The data is also stored in our system’s log files. The collected data is not stored in connection with other personal data of the user.
The legal basis for the temporary storage of the data and log files is Article 6(1)(f) GDPR. The system’s temporary storage of the IP address is necessary to enable our website to be delivered to the user’s computer. The user’s IP address must remain stored for the duration of the session. Log files are stored to ensure the website’s functionality. The data also serves to optimize the website and ensure the security of our information technology systems. The data is not analyzed for other purposes, such as marketing.
The data is deleted as soon as it is no longer required to achieve the purpose for which You collected it. When data is collected to provide the website, this is the case when the respective session ends. Generated log files are deleted after no more than 7 days. If data is stored beyond this period, the collected IP addresses are deleted or anonymized so that the requesting client can no longer be identified.
The collection of data to provide our website and the storage of data in log files are essential for operating the website; the user has no option to object in this regard.
(8) Use of Cookies
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
We use cookies on our website to ensure the smooth operation of the shop and inquiry form. The data collected from users in this way is pseudonymized through technical measures, so it cannot be attributed to a user. The data is not stored together with other personal data of the user.
When users access our website, they are informed about the use of cookies for analytical purposes via an information banner and referred to our privacy policy. The storage of cookies can be disabled in the browser settings.
The legal basis for processing personal data using cookies is Article 6(1)(f) GDPR. Cookies are used to ensure the smooth operation of the shop and our website.
Cookies are stored on the user's computer and transmitted to us by the user. The user has full control over the use of cookies in this regard and can disable or restrict their use through their Internet browser settings. Cookies already stored can be deleted by the user at any time. However, if cookies are disabled for our website, the functionality of our website may be restricted.
(9) Web Analytics through Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc., (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. This makes it possible to assign data, sessions, and interactions to a pseudonymous user ID and thereby analyze a user’s activities.
Google Analytics uses cookies (see above), which are stored on your computer and analyze your use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, Google will first truncate your IP address within member states of the European Union or other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.
On behalf of the website operator, Google uses this information to evaluate your use of our website, compile reports on website activity, and provide the website operator with other services related to website and Internet usage. Our legitimate interest in data processing lies in providing these services; the legal basis for using Google Analytics is therefore Art. 6(1)(f) GDPR. The data we send and that are linked to cookies, user IDs (e.g., User-ID), or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached are automatically deleted once a month. Google provides you with more detailed information about the terms of use and privacy policy of Google Analytics at the link https://www.google.com/analytics/terms/de available.
You can prevent cookies from being stored by selecting the appropriate setting in your browser software; in this case, you may not be able to use all of this website’s functions to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as from processing this data, by installing the browser add-on https://tools.google.com/dlpage/gaoptout?hl=de download and install. Opt-out cookies prevent the future collection of your data when you visit this website.
(10) Use of Google AdWords
To statistically record the use of our website and evaluate it for the purpose of optimizing our website for you, we use Google Conversion Tracking. Google AdWords places a cookie (see above) on your computer if you reached our website via a Google advertisement. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of the AdWords customer’s website while the cookie has not yet expired, Google and the customer can recognize that the user clicked on the advertisement and was redirected to this page. Each AdWords customer receives a different cookie. Cookies therefore cannot be tracked across AdWords customers’ websites.
The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their advertisement and were redirected to a page tagged with a conversion-tracking tag. However, you do not receive any information that can personally identify users.
If you do not wish to participate in the tracking process, you can also refuse the setting of the cookie required for this purpose—for example, by changing your browser settings to generally disable the automatic setting of cookies. You can also disable cookies for conversion tracking by configuring your browser to block cookies from the domain “www.googleadservices.com.” You can find Google’s privacy notice on conversion tracking here (https://services.google.com/sitestats/de.html).
(11) Meta Pixel (formerly Facebook Pixel)
Based on your consent, we collect data on our pages using “Meta Pixel,” a service provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. This allows us to track users’ actions after they have been redirected to a provider’s website by clicking on a Facebook advertisement. This enables us to record the effectiveness of Facebook advertisements for statistical purposes.
The collected data remains anonymous to us. This means that we cannot view the personal data of individual users. However, the collected data is stored and processed by Meta. We inform
You regarding this matter, according to our current information. Meta may link the data with the data from your Facebook account and uses the data for its own advertising purposes, in accordance with its data policy. https://www.facebook.com/about/privacy/.
Conversion tracking also allows Meta and its partners to show you advertising on and off Facebook. In addition, a cookie is stored on your computer for these purposes. Users can find information about the purpose and scope of data collection and the further processing and use of the data by Meta, as well as their related data protection rights and privacy settings, in Meta’s privacy notices: https://www.facebook.com/about/privacy/ or at https://www.facebook.com/help/568137493302217.
If we transmit data to Meta for matching purposes, it is encrypted and only then sent via a secure https connection. There, it is matched with data likewise encrypted by Meta.
Meta Conversions API (formerly Facebook Conversion)
With your consent, we also use Meta’s Conversions API. The Conversions API provides a
Establish a connection between the advertiser’s marketing data and Meta’s systems. This enables us to optimize the ad
Optimize targeting and measure results. This takes place via a secure connection between our server and Meta’s systems. In addition to Meta Pixel, server events are matched here to measure, report on, and optimize our offerings.
With both methods, Meta Pixel and Conversions API, personal data may be transferred to Meta Platforms, Inc., One Hacker Way, Menlo Park, CA 94025, USA. You also consent to this transfer by giving your consent. There is a risk that US security authorities may process your data without notifying you or providing you with legal remedies.
We and
Meta and we are joint controllers within the meaning of the General Data Protection Regulation (Art. 26 GDPR). Joint responsibility exists for the collection of the data and its disclosure to Meta. We have concluded an agreement for this purpose, which you can view at the following link: https://www.facebook.com/legal/controller_addendum. To exercise your data protection rights set out in Section 1 of this privacy policy, you can contact us or Meta Platforms.
KONZEPT WEISS Zahnaufhellung GmbH is the controller for the aggregated “analytics data” that Meta provides to us. Meta processes this data on our behalf. For this purpose, we have concluded a data processing agreement: https://www.facebook.com/legal/terms/dataprocessing.
We delete personal data that we collect as part of the Meta services if you ask us to do so. For information on the retention period observed by Meta Platforms Ltd., please refer to its data policy or contact the company directly.
You can revoke your consent to Meta Platforms’ services for the future by resetting your selection in our consent management system. You can also send a revocation to us using the addresses provided in this document.
The use of the service is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the purpose described above.
(12) TikTok Ads
Based on your consent, we collect data on our website through “TikTok Ads,” a service provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin DO2 T380, Ireland. This allows us to track users’ actions after they have been redirected to a provider’s website by clicking on a TikTok advertisement. This enables us to record the effectiveness of TikTok advertisements for statistical purposes.
The collected data remains anonymous to us. This means that we cannot view the personal data of individual users. However, the collected data is stored and processed by TikTok. We inform
You regarding this matter, in accordance with our current information. TikTok may link the data to your TikTok account data and use the data for its own advertising purposes, according to its data policies: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE.
Conversion tracking also allows TikTok and its partners to show you advertisements on and outside TikTok. In addition, a cookie is stored on your computer for these purposes. Users can find the purpose and scope of data collection and the further processing and use of the data by TikTok, as well as their related rights and privacy protection settings, in Meta’s privacy notices: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE.
(13) Use of social media plugins
Our website uses Facebook social plugins operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The integrations can be identified by the Facebook logo or by the terms “Like,” “Gefällt mir,” and “Teilen” in Facebook’s colors (blue and white). You can find information about all Facebook plugins at the following link: https://developers.facebook.com/docs/plugins/
The plugins are only activated when you click the corresponding buttons. If they are displayed in grey, the plugins are inactive. You have the option of activating the plugins once or permanently.
The plugins establish a direct connection between your browser and the Facebook servers. This only occurs after the plugin has been activated. We have no influence whatsoever on the nature or extent of the data that the plugin transmits to the servers of Facebook Inc. You can find information about this here: https://www.facebook.com/help/186325668085084
The plugin informs Facebook Inc. that you, as a user, have visited this website. It is possible that your IP address may be stored. If you are logged into your Facebook account while visiting this website, the information mentioned will be linked to it.
Our website uses social plugins from YouTube LLC, a provider operated by Google (based at 901 Cherry Avenue, San Bruno, CA 94066, USA). The integrations can be identified by the YouTube button, generally consisting of the word YouTube and a white triangle on a red background (play symbol).
The plugins are only activated when you click the corresponding buttons. If they are displayed in grey, the plugins are inactive. You have the option of activating the plugins once or permanently.
The plugins establish a direct connection between your browser and YouTube’s servers. This only occurs after the plugin has been activated. We have no influence whatsoever on the nature or scope of the data that the plugin transmits to YouTube/Google’s servers. You can find more information about the YouTube/Google plugins here: https://policies.google.com/privacy?hl=de&gl=de
The plugin informs YouTube that you, as a user, have visited our website. Your IP address may be stored in this process. If you are logged in to your YouTube account while visiting this website, the aforementioned information will be linked to it.
Microsoft Clarity
When visiting this website, personal data is processed by the Microsoft Clarity web analytics tool. Categories of data processed: Data used to create usage statistics. Purpose of processing: Anonymization, creation of statistics, and analysis of usage behavior. Legal basis for processing: Your consent pursuant to Art. 6 (1) a GDPR. Data is transferred to: the independent data controller Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The legal basis for transferring data to Microsoft Ireland Operations Ltd. is your consent pursuant to Art. 6 (1) a GDPR. This may also involve transferring personal data to a country outside the European Union. The transfer of data to the USA is based on Art. 45 GDPR in conjunction with the European Commission’s adequacy decision C(2023) 4745, as the data recipient has committed to complying with the data processing principles of the Data Privacy Framework (DPF). To contact the data protection officer of Microsoft Ireland Operations Ltd. by email: https://www.microsoft.com/de-at/concern/privacy. Microsoft Ireland Operations Ltd.’s privacy policy: https://privacy.microsoft.com/de-de/privacystatement.
Our website uses Instagram plugins operated by Instagram Inc. (601 Willow Road, Menlo Park, CA, 94025, USA). The integrations can be identified by the Instagram button, generally consisting of the word “Instagram” together with a camera pictogram in white on a colorful (yellow, red, purple) background.
The plugins are only activated when you click the corresponding buttons. If they are displayed in grey, the plugins are inactive. You have the option of activating the plugins once or permanently.
The plugins establish a direct connection between your browser and Instagram's servers. This only occurs after the plugin has been activated. We have no influence whatsoever on the nature and scope of the data that the plugin transmits to Instagram's servers. You can find more information about the Instagram plugin here:
http://instagram.com/about/legal/privacy/.
The plugin informs Instagram that you, as a user, have visited our website. Your IP address may be stored in this process. If you are logged in to your Instagram account while visiting this website, the information mentioned above will be linked to it.
(14) Rights of the data subject
Where your personal data are processed, you have the following rights:
You may request confirmation from the controller as to whether personal data concerning you are being processed by us.
If such processing takes place, you may request information from the controller about the following:
(a) the purposes for which the personal data are processed;
(b) the categories of personal data being processed;
(c) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(d) the envisaged period for which the personal data concerning you will be stored or, if it is not possible to provide specific information, the criteria used to determine the storage period;
(e) the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing;
(f) the existence of a right to lodge a complaint with a supervisory authority;
(g) all available information about the source of the data where the personal data have not been collected from the data subject;
(h) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR and—at least in these cases—meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you are transferred to a third country or an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.
You have the right to request rectification and/or completion from the controller if the processed personal data concerning you are inaccurate or incomplete. The controller must carry out the rectification without undue delay.
You may request restriction of the processing of the personal data concerning you under the following conditions:
(a) if you dispute the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
(b) the processing is unlawful and you refuse to have the personal data erased and instead request restriction of the use of the personal data;
(d) the controller no longer needs the personal data for the purposes of processing, but you need them for the establishment, exercise, or defense of legal claims, or
(e) if you have objected to the processing pursuant to Article 21(1) GDPR and it has not yet been determined whether the controller’s legitimate grounds override your grounds.
If the processing of the personal data concerning you has been restricted, these data may—apart from their storage—only be processed with your consent or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been imposed in accordance with the above requirements, the controller will inform you before the restriction is lifted.
Obligation to erase
You can request that the controller erase the personal data concerning you without undue delay, and the controller is obliged to erase this data without undue delay if one of the following grounds applies:
(a) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(b) You withdraw your consent, on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
(c) You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
(d) The personal data concerning you have been processed unlawfully.
(e) The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
(f) The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8(1) GDPR.
Exceptions
The right to erasure does not apply insofar as processing is necessary
(a) for exercising the right to freedom of expression and information;
(b) for compliance with a legal obligation requiring processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(c) for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
(d) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to in section (a) is likely to make the achievement of the objectives of this processing impossible or seriously impair it, or
(e) for the establishment, exercise, or defense of legal claims.
If you have asserted your right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed by the controller about these recipients.
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data were provided, provided that
(a) the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR, and
(b) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be adversely affected as a result.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on those provisions.
The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is connected with such direct marketing.
If you object to the processing of your personal data concerning you for purposes of direct marketing, your personal data will no longer be processed for these purposes.
You may exercise your right to object by automated means in the context of the use of information society services, notwithstanding Directive 2002/58/EC, using technical specifications.
You have the right to withdraw your data protection consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision
(a) is necessary for entering into, or performing, a contract between you and the controller;
(b) is authorised by Union or Member State law to which the controller is subject, and that law contains appropriate measures to safeguard your rights and freedoms and your legitimate interests; or
(c) is carried out with your explicit consent.
However, these decisions must not be based on special categories of personal data pursuant to Article 9(1) GDPR, unless Article 9(2)(a) or (g) GDPR applies and appropriate measures have been taken to safeguard your rights and freedoms and your legitimate interests.
With regard to the cases referred to in (a) and (c), the controller shall take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement, if you consider that the processing of your personal data concerning you infringes the GDPR.
The supervisory authority with which the complaint was lodged shall inform the complainant about the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
As of: May 2025