Name and address of the con­troller

The con­troller within the meaning of the General Data Pro­tec­tion Reg­u­la­tion (GDPR) and other na­tional data pro­tec­tion reg­u­la­tions of the Member States and other reg­u­la­tions re­lat­ing to data pro­tec­tion is:

Europa-Park GmbH & Co. Mack KG
Europa-Park-Str. 2
77977 Rust
Germany

Tel.: +49 (0)7822-770
Email: info@​europapark.​de
Website: https://​www.​europapark.​de/​en

Name and address of the Data Pro­tec­tion Officer

The con­troller’s Data Pro­tec­tion Officer is:
Sina Krenz
Tel.: +49 (0)7822-770
Email: daten­schutz@​europapark.​de

Newslet­ter

De­scrip­tion and scope of data pro­cess­ing

You have the option of sub­scrib­ing to a free Europa-Park newslet­ter on our website. When reg­is­ter­ing for the newslet­ter, the details stated on the input screen are trans­mit­ted to us. This data usually in­cludes your email address as well as your first name and surname. Your lan­guage, in­ter­ests, etc. may also be gath­ered.

The fol­low­ing data is also col­lected upon reg­is­tra­tion:

• IP address of the re­quest­ing com­puter
• Date and time of reg­is­tra­tion
• Lan­guage setting

During the reg­is­tra­tion process, we obtain your consent for pro­cess­ing of the data and we advise you of our Privacy Policy. Further in­for­ma­tion is avail­able under the option per­son­al­i­sa­tion.

Where you state your email address when pur­chas­ing goods or ser­vices on our website, this address may be used by us for sending newslet­ters if sep­a­rate ref­er­ence to this is made. In such cases, we shall only use the newslet­ter to ad­ver­tise our own goods and ser­vices that are similar to those pur­chased.

No data processed for the purpose of sending newslet­ters shall be passed on to third parties. The data is used solely for tai­lor­ing the newslet­ter to you and sending it to you.

Emarsys eMar­ket­ing System AG, Han­sis­cher-Straße 10, 80339 München and Widas ID GmbH May­bach­straße 2 71299 Wimsheim, Germany, have been com­mis­sioned as the proces­sor in charge of dis­trib­ut­ing, per­son­al­is­ing and analysing Europa-Park newslet­ters.

Further in­for­ma­tion on newslet­ter per­son­al­i­sa­tion is pro­vided in the fol­low­ing.

Legal basis for data pro­cess­ing

Art. 6 (1) a) GDPR pro­vides the legal basis for pro­cess­ing the data fol­low­ing the user’s reg­is­tra­tion for the newslet­ter, where consent has been given by the user to do so.

Section 7 (3) UWG [German Law Against Unfair Com­pe­ti­tion] pro­vides the legal basis for sending the newslet­ter as a result of pur­chas­ing goods or ser­vices.

Purpose of data pro­cess­ing

The user’s email address is stored for the purpose of sending the newslet­ter.

The purpose of col­lect­ing other per­sonal data during the reg­is­tra­tion process is to prevent misuse of the ser­vices or the email address used and to tailor offers to you.

Re­ten­tion period

The data is erased as soon as it is no longer re­quired to achieve the purpose for which it was col­lected. In con­nec­tion with dis­trib­ut­ing the newslet­ter, the user’s email address is there­fore re­tained until the newslet­ter sub­scrip­tion is ter­mi­nated; in the case of re­vo­ca­tion, the data shall be erased after a short pro­cess­ing period, insofar that there is no further purpose for it to be re­tained.

Other per­sonal data col­lected during the reg­is­tra­tion process is usually deleted after a period of seven days.

Can­cel­la­tion option

The user may cancel their sub­scrip­tion to the newslet­ter at any time. Each newslet­ter con­tains a cor­re­spond­ing link for this purpose.

You may cancel your newslet­ter sub­scrip­tion by posting your can­cel­la­tion no­ti­fi­ca­tion to Europa-Park GmbH & Co Mack KG, Europa-Park-Str. 2, 77977 Rust, Germany or email­ing newslet­ter-service@​europapark.​de.

This link also pro­vides an option for you to with­draw your consent to the storage of the per­sonal data col­lected during the reg­is­tra­tion process after a short pro­cess­ing period.

Per­son­al­i­sa­tion

De­scrip­tion and scope of data pro­cess­ing

We use the data that has been gath­ered in the scope of you using Europa-Park’s offers (among others website, apps, newslet­ter) to send you a per­son­alised newslet­ter (if you have sub­scribed to it) as well as other per­son­alised ad­ver­tis­ing cam­paigns and for con­sul­tancy ser­vices, main­te­nance of further cus­tomer re­la­tions, market re­search and analy­sis. Europa-Park offers include Europa-Park, Ru­lan­tica water world, Europa-Park Hotels, Camp Resort, Europa-Park Camping, Europa-Park Events, YULLBE and the online shop, ticket shop, hotel booking engine, etc.

When pro­vided in ad­di­tion to your email address, the fol­low­ing data is usually processed in this regard:

Salu­ta­tion, gender, first and surname, date of birth, post­code, country of res­i­dence, lan­guage. Club­card mem­ber­ship status, Club­card number, email history, in­ter­ests re­gard­ing newslet­ter topics and pur­chases, hotel reser­va­tions and stays, in­clud­ing room cat­e­gory and number, as well as the cat­e­gory of overnight guests, ticket pur­chases and stays, other orders, ad­di­tional pur­chases and reser­va­tions, voucher re­demp­tion, event par­tic­i­pa­tion, usage be­hav­iour during a stay, consent status for cookies, user ID, lan­guage, device in­for­ma­tion. Opening and in­ter­ac­tion rate for emails.

If the con­troller of Europa-Park GmbH & Co. Mack KG did not di­rectly collect these data, other com­pa­nies with a direct re­la­tion to Europa-Park shall trans­mit the data:

• Europa-Park GmbH & Co - Shop­ping KG re­gard­ing reg­is­tra­tion and pur­chases in the online shop
• Ru­lan­tica - GmbH & Co Mack KG re­gard­ing a visit to Ru­lan­tica
• Europa-Park GmbH & Co - Hotel­be­triebe KG re­gard­ing hotel stays
• Mack One Deutsch­land GmbH & Co KG in regards to special offers such as YULLBE.

Snowflake Inc., Munich, Mies-van-der-Rohe-Straße 8, 80807 Munich, Germany, Emarsys eMar­ket­ing System AG, Han­sis­cher-Straße 10, 80339 Munich, Germany and the service provider Cidaas, of Widas ID GmbH May­bach­straße 2 71299 Wimsheim, Germany, shall act as the proces­sor for analysing the data.

Legal basis and purpose of data pro­cess­ing

The legal basis for data pro­cess­ing is our le­git­i­mate in­ter­est (Art. 6 (1) f) GDPR) in getting to know our cus­tomers better and being able to address them in a per­son­alised manner. This is nec­es­sary for pro­mot­ing sales and sup­port­ing cus­tomers.

Re­ten­tion period

The data is erased as soon as it is no longer re­quired to achieve the purpose for which it was col­lected. This shall occur, among other things, if we have not been able to detect you acting on any Europa-Park offer for a long time, and there is no further purpose for storing your in­for­ma­tion.

If you object to the pro­cess­ing of data, the data shall be erased after a short pro­cess­ing time, unless the data must be saved for another purpose.

Ob­jec­tion and dele­tion options

You the option of ob­ject­ing to the pro­cess­ing of data. To do this, please contact newslet­ter-service@​europapark.​de.

You can con­fig­ure cookies in the cookie set­tings to prevent mar­ket­ing cam­paigns from being per­son­alised.

Reg­is­tra­tion of an account

De­scrip­tion and scope of data pro­cess­ing

We offer users the option to reg­is­ter and create an account on our website by pro­vid­ing their per­sonal data. This account can then also some­times be used for our various online offers (MackOne account). The data is entered on the input screen, trans­mit­ted to us and stored by us. The data is not passed on to third parties. The fol­low­ing data is reg­u­larly col­lected during the reg­is­tra­tion process:

• Address details
• Email address
• Date of birth
• Your per­sonal pass­word

At the time of reg­is­tra­tion, the fol­low­ing data is also saved:

• The user’s IP address
• Date and time of reg­is­tra­tiong

If your email address has not yet been reg­is­tered in our system, we shall send you a val­i­da­tion email upon reg­is­tra­tion.

Widas ID GmbH May­bach­straße 2, 71299 Wimsheim, Germany, with their service Cidaas shall act as the proces­sor for analysing the data.

Legal basis for data pro­cess­ing

Art. 6 (1) b) GDPR pro­vides the legal basis for pro­cess­ing data where reg­is­tra­tion is re­quired in order to fulfil a con­tract to which the user is party, or to im­ple­ment mea­sures prior to en­ter­ing into a con­tract.

Purpose of data pro­cess­ing

The user is re­quired to reg­is­ter in order to fulfil a con­tract with the user or to im­ple­ment mea­sures prior to en­ter­ing into a con­tract. For example, for

• or­der­ing goods and ser­vices
• Reser­va­tions of all types
• Request for in­for­ma­tion
• Credit balance re­trieval
• Contact request

Re­ten­tion period

The data is erased as soon as it is no longer re­quired to achieve the purpose for which it was col­lected.

For data col­lected during the reg­is­tra­tion process, this is the case where reg­is­tra­tion on our website is can­celled or altered.

For data col­lected during the reg­is­tra­tion process for the purpose of ful­fill­ing a con­tract or for im­ple­ment­ing mea­sures prior to en­ter­ing into a con­tract, this is the case where the data is no longer re­quired to execute the con­tract. It may be nec­es­sary to store the per­sonal data of the con­tract partner even after the con­tract has been con­cluded in order to meet con­trac­tual or statu­tory oblig­a­tions.

• Con­tin­u­ing oblig­a­tions
• War­ranty periods
• Re­ten­tion periods for tax pur­poses

Ob­jec­tion and dele­tion options

As a user, you have the right to cancel reg­is­tra­tion at any time. You can change the data stored under your name at any time.

The data can be deleted at any time by logging in to the user profile or by sending an email to daten­schutz@​europapark.​de.

If the data is nec­es­sary for the purpose of ful­fill­ing a con­tract or for im­ple­ment­ing mea­sures prior to en­ter­ing into a con­tract, pre­ma­ture dele­tion of the data is only pos­si­ble where there are no con­trac­tual or statu­tory oblig­a­tions to retain such data.

Contact form and email contact

De­scrip­tion and scope of data pro­cess­ing

Contact forms, which can be used to contact us elec­tron­i­cally, are readily avail­able on our website. If the user makes use of this option, the data entered on the input screen will be trans­mit­ted to us and stored by us. This data in­cludes:

• First name and surname
• Address details
• Email address
• Content of the message
• Where pro­vided, tele­phone number

At the time the message is sent, the fol­low­ing data is also tem­porar­ily stored:

• The user’s IP address
• Date and time of reg­is­tra­tion

Before the contact form is trans­mit­ted, we obtain your consent for the pro­cess­ing of the data and refer you to this Privacy Policy.

Al­ter­na­tively, you may contact us using the email address pro­vided. In such cases, the user’s per­sonal data trans­mit­ted in the email is stored.

The data is not passed on to third parties in this con­nec­tion. The data is used solely for pro­cess­ing the con­ver­sa­tion.

Legal basis for data pro­cess­ing

Art. 6 (1) a) GDPR pro­vides the legal basis for pro­cess­ing data, where consent has been given by the user to do so.

Art. 6 (1) f) GDPR pro­vides the legal basis for pro­cess­ing the per­sonal data that is trans­mit­ted in an email or using the contact form. Art. 6 (1) b) GDPR pro­vides the legal basis for pro­cess­ing data where the purpose of the email contact is to con­clude a con­tract.

Purpose of data pro­cess­ing

We process the per­sonal data entered on the input screen solely for the purpose of pro­cess­ing the request. If contact is made by email, this also con­sti­tutes the le­git­i­mate in­ter­est re­quired for pro­cess­ing of the data.

The purpose of the other per­sonal data processed during the trans­mis­sion of the contact form is to prevent misuse of the contact form and to ensure the safety of our in­for­ma­tion tech­nol­ogy systems.

Re­ten­tion period

The data is erased as soon as it is no longer re­quired to achieve the purpose for which it was col­lected. For the per­sonal data entered on the input screen of the contact form and the per­sonal data sent by email, this is the case when the con­ver­sa­tion with the user has ended. The con­ver­sa­tion is deemed to have ended when the cir­cum­stances suggest that the issue has been con­clu­sively re­solved.

Ad­di­tional per­sonal data col­lected during the trans­mis­sion of the contact form is usually deleted after a period of seven days.

Ob­jec­tion and dele­tion options

The user has the right at any time to with­draw their consent to pro­cess­ing of the per­sonal data. If the user con­tacts us by email, they may object to the storage of their per­sonal data at any time. In such cases, the con­ver­sa­tion cannot be con­tin­ued.

The data can be deleted at any time by logging in to the user profile or by sending an email to daten­schutz@​europapark.​de.

In this case, all per­sonal data stored when con­tact­ing us is deleted.

Reser­va­tions and Menu Se­lec­tion

De­scrip­tion and scope of data pro­cess­ing

On our website you have the option of re­quest­ing a table reser­va­tion in our restau­rant or spec­i­fy­ing a menu se­lec­tion. It may also be the case that certain arrange­ments require a written or verbal enquiry about wishes and in­tol­er­ances. In order to be able to make such reser­va­tions or menu se­lec­tions prop­erly and com­mu­ni­cate with you, we must ask you to provide some per­sonal data. In our reser­va­tion or booking form, we will ask you for your name, e-mail address and tele­phone number, your pre­ferred date and time, the number of vis­i­tors and the number of chil­dren under the age of 16 or your pre­ferred menu se­lec­tion.

As a rule, we will com­mu­ni­cate with you by e-mail, but pos­si­bly also by tele­phone at short notice, for example if you are late for an agreed reser­va­tion. You can also in­di­cate in­tol­er­ances and al­ler­gies on a vol­un­tary basis in our reser­va­tion form or when se­lect­ing the menu. We will take this in­for­ma­tion into account as much as pos­si­ble when cater­ing for you, so that your stay with us will be a real plea­sure for you. You are also welcome to provide us with further in­for­ma­tion on a vol­un­tary basis in the reser­va­tion enquiry, for example if there is a special oc­ca­sion for your visit (e.g. an­niver­saries, wedding an­niver­saries, birth­days) or if there are other cir­cum­stances that we should take into account for your stay (such as an ex­ist­ing preg­nancy.) We will also take this in­for­ma­tion into account as best we can to make your stay with us a special ex­pe­ri­ence for you.

Legal basis and purpose of data pro­cess­ing

We use the in­for­ma­tion pro­vided to us during the reser­va­tion enquiry or menu se­lec­tion ex­clu­sively for the purpose of pro­cess­ing and car­ry­ing out the reser­va­tion and your visit to our restau­rant or our event. The legal basis for the pro­cess­ing of the data is Art. 6 Para. 1 lit. b GDPR, namely the prepa­ra­tion and ex­e­cu­tion of the con­tract for your visit to our restau­rant. With regard to the in­for­ma­tion you provide vol­un­tar­ily, the legal basis is your consent pur­suant to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you give us by pro­vid­ing and sending us this in­for­ma­tion.

For the ad­min­is­tra­tion of your reser­va­tion, we use the Re­servi­sion service pro­vided by RE­SERVi­SiON GmbH, Seestr. 29, 64354 Rein­heim in the role of a proces­sor. The data processed in this context in in­di­vid­ual cases are based on the details you provide when placing your reser­va­tion

Du­ra­tion of storage

The data will be deleted as soon as it is no longer re­quired to fulfil the purpose for which it was col­lected. This is the case after your visit to our restau­rant, unless there is another legal basis for storage. Statu­tory re­ten­tion periods remain un­af­fected.

Can­cel­la­tion option

You can revoke your consent to the pro­cess­ing of your vol­un­tar­ily pro­vided data at any time. You can send your can­cel­la­tion by post to Europa-Park GmbH & Co Mack KG, Europa Park-Str. 2, 77977 Rust or by e-mail to info@​europapark.​de. 

For arrange­ments you can contact guestre­la­tions.​resort@​europapark.​de di­rectly.

Cookies for analy­sis and mar­ket­ing pur­poses

You may change your set­tings for cookies used on our website in the ‘Cookie set­tings’ section located in the website’s footer. You can manage your consent status for in­di­vid­ual cookies and entire cat­e­gories there. Unless oth­er­wise stated, the legal basis for pro­cess­ing is your consent in ac­cor­dance with Article 6 (1) a) GDPR. Further details on the ser­vices in­te­grated on our website are pro­vided in the fol­low­ing.

Web analy­sis by Google An­a­lyt­ics with anonymi­sa­tion func­tion

We use Google An­a­lyt­ics, a web analy­sis service pro­vided by Google Inc., 1600 Am­phithe­atre Parkway, Moun­tain View, CA 94043, USA, here­inafter re­ferred to as ‘Google’, on our website. Google An­a­lyt­ics uses so-called cookies; these are text files that are stored on your com­puter and enable an analy­sis of how you use the website.

The in­for­ma­tion col­lected by the cookies, for example, the time, place and fre­quency of your website visits, in­clud­ing your IP address, is trans­mit­ted to a Google server in the USA and stored there.

On our website, we use Google An­a­lyt­ics with the suffix ‘_gat._anonymizeIp’. In this case, your IP address will be trun­cated by Google within the Member States of the Eu­ro­pean Union or in other coun­tries that are party to the Agree­ment on the Eu­ro­pean Eco­nomic Area and thereby anonymised.

Google will use this in­for­ma­tion to eval­u­ate how you use our website, to compile reports on website ac­tiv­i­ties for us, and to provide further ser­vices con­nected with the use of the website and the In­ter­net. Google will also pass this in­for­ma­tion on to third parties if nec­es­sary, insofar as this is legally stip­u­lated or insofar as third parties process this data on behalf of Google.

Google claims that it will not link your IP address with other Google data under any cir­cum­stances. You can prevent the in­stal­la­tion of cookies by ad­just­ing your browser set­tings ac­cord­ingly; in this case, however, we must point out that not all func­tions of this website may be avail­able to you to their full extent.

Google also offers a de­ac­ti­va­tion add-on for the most common browsers, which gives you more control over what data is col­lected by Google on the web­sites visited by you. The add-on informs Google An­a­lyt­ics JavaScript (ga.​js) that no in­for­ma­tion about the website visit should be sent to Google An­a­lyt­ics. However, the Google An­a­lyt­ics de­ac­ti­va­tion add-on for browsers does not prevent in­for­ma­tion from being trans­mit­ted to us or to any other web analy­sis ser­vices used by us. You can find further in­for­ma­tion on the in­stal­la­tion of the browser add-on at this link: https://​tools.​google.​com/​dlpage/​gaoptout?​hl=en

Google Ads

We also use Google An­a­lyt­ics to analyse data from Double-Click cookies and AdWords for sta­tis­ti­cal pur­poses. If you do not wish this to take place, you can disable it through the Ads Pref­er­ences Manager (https://​www.​google.​com/​settings/​ads/​onweb/?​hl=en).

Web analy­sis by Face­book Pixel

This website uses the ‘Custom Au­di­ences’ re­mar­ket­ing func­tion of Face­book Inc. (‘Face­book’). The purpose of this func­tion is to display in­ter­est-related ads (‘Face­book ads’) to vis­i­tors to this website when logged on to the social network Face­book. To this end, the Face­book re­mar­ket­ing tag has been im­ple­mented on this website. This tag makes it pos­si­ble to es­tab­lish a direct con­nec­tion to the Face­book servers when the website is ac­cessed. The in­for­ma­tion that you have visited this website is sent to the Face­book server, and Face­book links this in­for­ma­tion to your per­sonal Face­book user account. You can find more in­for­ma­tion on the col­lec­tion and use of data by Face­book, your rights with regard to the above and set­tings to protect your privacy can be found in Face­book’s Data Policy: https://​www.​facebook.​com/​about/​privacy/. Al­ter­na­tively, you may disable the ‘Custom Au­di­ences’ re­mar­ket­ing func­tion at https://​www.​facebook.​com/​settings/?​tab=ads#_​=_. You need to be logged into Face­book to do so.

Web analy­sis by Local Measure

We also use the social media ag­gre­ga­tion tool https://​www.​localmeasure.​com on our website. This tool enables us to filter, curate and compile gal­leries of content that is pub­licly avail­able on Face­book, Twitter and In­sta­gram and to re­pro­duce such content on our web­sites. If you do not want your posts to be used in this manner, please send an email ob­ject­ing to such use to daten­schutz@​europapark.​de.

Art. 6 (1) f) GDPR pro­vides the legal basis for pro­cess­ing the per­sonal data of users.

Pro­cess­ing the users’ per­sonal data enables us to analyse the surfing habits of our users. Eval­u­at­ing the data ob­tained in this way enables us to compile in­for­ma­tion on how the in­di­vid­ual el­e­ments of our website are used. This helps us to op­ti­mise our website and to con­tin­u­ally make it more user-friendly. These pur­poses also con­sti­tute our le­git­i­mate in­ter­ests in data pro­cess­ing pur­suant to Art. 6 (1) f) GDPR. Anonymis­ing the IP address ensures that the users’ in­ter­est in the pro­tec­tion of their per­sonal data is ad­e­quately taken into account.

The data is deleted as soon as it is no longer re­quired for record-keeping pur­poses. If pos­si­ble, this is re­stricted to 38 months in the tools used.

Ex­ter­nal content

You can change your data pro­cess­ing setting for ex­ter­nal content in the cookie set­tings, which can be found either in the footer of the website or via a privacy button. Some of our website of­fer­ings have di­rectly in­te­grated ex­ter­nal content, e.g. via iFrames. If you have agreed to this, it means that the providers of this ex­ter­nal content can set cookies di­rectly for you and can process data. We do not have any direct in­flu­ence over this data pro­cess­ing. For more in­for­ma­tion about this, please refer to the re­spec­tive data privacy state­ment issued by the provider of the ex­ter­nal content.

Web analy­sis by YouTube

This website con­tains at least one plug-in from YouTube, a company owned by Google Inc., based in San Bruno, Cal­i­for­nia, USA. As soon as you visit any pages of our website that contain a YouTube plug-in, a con­nec­tion is es­tab­lished to the YouTube servers. The YouTube server is in­formed of what spe­cific page of our website you visited. Should you be logged in to your YouTube account at the same time, this would enable YouTube to es­tab­lish a direct link between your per­sonal profile and your surfing habits. You can prevent this link from being es­tab­lished by logging out of your account be­fore­hand. Further in­for­ma­tion on the col­lec­tion and use of your data by YouTube is avail­able in YouTube’s Privacy Policy at https://​www.​youtube.​com.

Rights of the data subject

If your per­sonal data is processed, you are a data subject within the meaning of the GDPR, and you have the fol­low­ing rights vis-à-vis the con­troller:

Right to in­for­ma­tion

You have the right to obtain in­for­ma­tion about your per­sonal data that we process. In the case of a request for in­for­ma­tion that is not made in writing, we ask for your un­der­stand­ing that we may require you to provide ev­i­dence proving that you are the person you claim to be. (Art. 15 GDPR)

Right to rec­ti­fi­ca­tion, erasure and re­stric­tion

Fur­ther­more, you have a right to rec­ti­fi­ca­tion or erasure of data or re­stric­tion of pro­cess­ing insofar as you are so en­ti­tled by law. (Art. 16, 17 and 18 GDPR). In such cases, we are obliged to notify any re­cip­i­ents of the rec­ti­fi­ca­tion, erasure or re­stric­tion of pro­cess­ing of data (Art. 19 GDPR).

Right to data porta­bil­ity

You also have a right to data porta­bil­ity within the frame­work of the data pro­tec­tion reg­u­la­tions (Art. 20 GDPR). This applies to data that you have pro­vided to us.

Right of ob­jec­tion

You have the right to object at any time, on grounds re­lat­ing to your par­tic­u­lar sit­u­a­tion, to the pro­cess­ing of your per­sonal data that is per­formed based on Art. 6 (1) e) or f) GDPR; this shall also apply for any pro­fil­ing based on these pro­vi­sions.

In par­tic­u­lar, you have the right to object in ac­cor­dance with Art. 21 (1) and (2) GDPR to the pro­cess­ing of your data, in par­tic­u­lar in con­nec­tion with direct ad­ver­tis­ing (newslet­ter), if this is based on a le­git­i­mate in­ter­est or a weigh­ing of in­ter­ests.

Right to with­drawal of the de­c­la­ra­tion of consent under data pro­tec­tion law

You have the right to with­draw your de­c­la­ra­tion of consent under data pro­tec­tion law at any time and with effect for the future. The with­drawal of consent shall not affect the law­ful­ness of any pro­cess­ing for which consent was given and which was carried out prior to the with­drawal thereof.

Au­to­mated in­di­vid­ual de­ci­sion-making process (in­clud­ing pro­fil­ing)

You have the right not to be subject to a de­ci­sion based solely on au­to­mated pro­cess­ing, in­clud­ing pro­fil­ing, which pro­duces legal effects on you or sig­nif­i­cantly affects you in a similar manner.

Right to lodge a com­plaint with a su­per­vi­sory au­thor­ity

Without prej­u­dice to any other ad­min­is­tra­tive or ju­di­cial remedy, you have the right to lodge a com­plaint with a su­per­vi­sory au­thor­ity, in par­tic­u­lar in the Member State of your ha­bit­ual place of res­i­dence, place of work or place of the alleged in­fringe­ment, where it is your opinion that the pro­cess­ing of your per­sonal data is in breach of GDPR reg­u­la­tions (Art. 77 GDPR).

The su­per­vi­sory au­thor­ity with which the com­plaint was lodged shall inform the com­plainant on the progress and the outcome of the com­plaint, in­clud­ing the pos­si­bil­ity of ju­di­cial remedy pur­suant to Article 78 GDPR.