Within the meaning of the applicable data protection law, in particular the General Data Protection Regulation (GDPR), as the operators of the website shop.laserworld.com (also referred to as the “website” and/or “online shop”), as the Controller, we are responsible for the personal data of the user (“you”) of this website. In the following we inform you clearly in the context of our obligations to inform (Art. 13 et seq. GDPR) about the data that is processed during your visit to our website and on what legal basis this takes place. You also receive information on how we protect your data from a technical and organisational point of view and what rights you have as regards us and the responsible supervisory authority.
Laserworld (Switzerland) AG
8574 Lengwil / Switzerland
Phone: +41 (0)71 67780-80
Fax: +41 (0)71 67780-88
2. Data Protection Officer:
Our company has appointed a Data Protection Officer:
c/o DS Compliance GmbH
DE-40213 Düsseldorf / Germany
Phone: +49 (0)211 942 588 - 24
3. Processing of your personal data
Use of our website for information purposes
If you access our website for the sole purpose of visiting it, what are known as log files will be processed, which are logged by our system automatically.
The following log files will automatically be processed:
- IP address of the accessing computer
- type of internet browser used
- language of the internet browser used
- version of the internet browser used
- operating system and its version
- user interface of the operating system
- web pages visited
- date and time of visit
- time zone difference to Greenwich Mean Time (GMT)
- access status / http status code
- volume of data transferred
- internet service provider of the user
The log files contain your IP address, but this will be shortened before it is saved. This means that it cannot be definitively associated with your person and that your data will not be saved together with other personal data.
The processing of the above data is required for the provision of our website. The legal basis for the processing of data for the purposes of anonymisation is Art. 6 (1) (f) GDPR.
4. Use of offers
a. Customer account / registration
You can create a customer account on our website with your personal data. This is voluntary and the data will not be forwarded to third parties. If you decide on a customer account, you must provide us with the following details:
- email address
- telephone number
When you submit your login/registration, we will save your IP address and the date and time of your registration together with the information that you provide. By sending the registration you agree to the processing of your data by us.
Your data will be used for the purpose of managing your customer account and for providing the associated functions, such as the processing of your customer data and for displaying your orders. The legal basis for storing your customer account data is Art. 6 (1) (a) GDPR.
We will store your data which you have made available to us within the scope of your voluntary registration as long as you do not erase your customer account with us. If you make changes to your data, the old data will be erased and only the updated data will be saved. In addition, we will only store your data in order to fulfil our contractual or legal obligations (e.g. tax obligations). In this case, we will block your data to the extent that it will only be processed for the necessary purposes.
You can erase or amend your voluntary customer account with us at any time. You can find the functions for amending your details or closing your account in your profile.
If you place an order on our website, we require the following data for the fulfilment of the contract with you:
- first name, surname, invoice address and delivery address to be able to send you your order and invoice.
- email address to be able to send you the confirmation of order and to provide you with contractual documents immediately after the order.
- telephone number in the event of queries during the delivery
- your payment information to process the payment of your order
To send you your order, we will forward your address data to our shipping or logistics service provider for the purposes of the delivery.
The legal basis for the processing of the data is Art. 6 (1) (b) GDPR. The data will only be stored for as long as it is necessary for the implementation of the contract. In addition, we will only store your data in order to fulfil our contractual or legal obligations (e.g. tax obligations). In this case, we will block your data to the extent that it will only be processed for the necessary purposes.
In addition to these data, we will also save the time (the date and time of day) of the transfer of your data to us and your IP address. The processing of this data corresponds to our legitimate interest according to Art. 6 (1) (f) GDPR for ensuring the security of our systems and for counteracting misuse. These additional data will be erased as soon as they are no longer required, at the latest when the contract with you has been completed.
c. Payment methods
If you select a payment provider on our payment page, this provider will also receive your personal data, such as your name, your address and your bank account details.
PayPal: If you pay on our website with PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg), PayPal receives your payment data for payment processing and it may be the case that PayPal will carry out a credit check. For further information, please visit: https://www.paypal.com/en/webapps/mpp/ua/privacy-full?locale.x=en_EN#rAnnex
Credit card: If you pay on our website by credit card, your credit card provider will be informed that you have placed an order with us. Your credit card provider may carry out a credit check. Please refer to your credit card provider's website for further information.
Direct debit / advance payment: If you pay by direct debit on our website, our house bank will receive your bank details for payment processing.
Klarna: If you pay on our website with a service of Klarna (Klarna Bank AB (publ) Sveavägen 46, 111 34 Stockholm, Sweden) (immediately), Klarna will receives your personal data, such as your name, your address and your bank details. Klarna may carry out a credit check. For further information, please visit: https://www.klarna.com/de/kundenservice/identitaets-bonitaetspruefung/wieso-fuehrt-klarna-eine-identitaets-und-bonitaetspruefung-durch/
5. Contact by email
You can contact us by email. The personal data transferred in the email will be stored by us. No forwarding of the data to third parties will take place. The data will only be processed in order to process the contact that you initiated. The legal basis for the processing of your personal data is Art. 6 (1) (f) GDPR. The data will be stored until they are no longer necessary for achieving the purpose of the conversation with you and the purpose of the contact that you initiated has been fully clarified.
If your email has the objective of the conclusion of a contract with us, the additional legal basis for the processing of your personal data is Art. 6 (1) (b) GDPR. These data will be stored as long as they are required for the implementation of the contract. Otherwise, we will only store your data in order to fulfil contractual or legal obligations (e.g. tax obligations).
You can withdraw your consent to the processing of your personal data at any time by sending an email to email@example.com. In this case, all personal data from the conversation will be erased and a continuation of the conversation will not be possible.
On our website we offer you the opportunity to subscribe to our newsletter free of charge. For this purpose, in addition to your declaration of consent, we also require your email address. By sending the newsletter registration you agree to our processing of your data.
Further information such as your name, is voluntary and serves the sole purpose of contacting you personally. The legal basis for the sending of the newsletter is Art. 6 (1) (b) GDPR as regards your email address because we provide our services to you in this way and Art. 6 (1) (a) GDPR in terms of further data which is provided on a voluntary basis.
We will only send you the newsletter once you have confirmed your registration by clicking on the appropriate link which is provided in a confirmation email that is sent to you for this purpose. In this way, we wish to ensure that only you yourself can subscribe to the newsletter. Your confirmation must be sent shortly after your receipt of the confirmation email, otherwise your newsletter subscription will be automatically erased from our database.
Within the scope of your newsletter registration, we will also save the time (the date and time of day) of the transfer of your data to us and your IP address. The processing of this data corresponds to our legitimate interest according to Art. 6 (1) (f) GDPR for ensuring the security of our systems and for counteracting misuse.
Your data will not be forwarded to third parties and will only be processed in connection with the sending of newsletters. The purpose of the processing of your email address is the possibility of being able to send you the newsletter. Further data within the scope of the registration process serve the purpose of either addressing you personally or ensuring the security of our services and preventing the misuse of the email address used.
Your data will only be stored for as long as is necessary to achieve the purpose. Your email address will therefore be stored for the period of your active newsletter subscription if you have given the appropriate consent. The data that we additionally collect automatically during your registration (IP address, date and time of day) will be erased at the latest when you cancel your newsletter subscription.
If you provide your email address when using our services, for example when making a purchase on our website, we may use it to send you our newsletter. This takes place exclusively in the context of direct advertising for own or similar goods or services.
The legal basis for the sending of the newsletter in connection with the sale of goods or services is Art. 7 (3) German Unfair Competition Act (UWG). If we send you a newsletter following an order on our website, we will save your email address for the purpose of advertising our own or similar goods or services until you cancel your subscription to the newsletter.
Possibility to lodge an objection / cancel newsletter subscription
You can end your subscription and/or cancel our newsletter at any time. A link is provided for this purpose at the end of each newsletter. In deciding to do this, you withdraw your consent and/or object to the further use of your data for the purpose of sending the newsletter.
Please note the following information: you can ensure yourself that no cookies are stored on your computer at all, or that the storage of certain cookies is permitted only. You can select such options in your internet browser settings, where you can also view and erase the cookies that have been saved.
If you block all of the cookies, you may not be able to use all the features offered by our website.
a. Own cookies:
We use our own cookies for the purpose of ensuring the functionality of our website. Certain elements of our website require that your internet browser is recognised after a change of web page. In the overview, you can see for what purposes your data is collected and for how long it will be stored:
|_ab||Used in connection with access to admin.|
|_secure_session_id||Used in connection with navigation through a storefront.|
|Cart||Used in connection with shopping cart.|
|cart_currency||Used in connection with shopping cart.|
|cart_sig||Used in connection with checkout.|
|cart_ts||Used in connection with checkout.|
|cart_ver||Used in connection with shopping cart.|
|checkout||Used in connection with checkout.|
|checkout_token||Used in connection with checkout.|
|cookietest||Used in connection with navigation through a storefront.|
|master_device_id||Used in connection with merchant login.|
|previous_checkout_token||Used in connection with checkout.|
|previous_step||Used in connection with checkout.|
|remember_me||Used in connection with checkout.|
|Secret||Used in connection with checkout.|
|Secure_customer_sig||Used in connection with customer login.|
|storefront_digest||Used in connection with customer login.|
|_shopify_country||Used in connection with checkout.|
|_shopify_m||Used for managing customer privacy settings.|
|_shopify_tm||Used for managing customer privacy settings.|
|_shopify_tw||Used for managing customer privacy settings.|
|_storefront_u||Used to facilitate updating customer account information.|
|tracked_start_checkout||Used in connection with checkout.|
If the visitor agreed to reporting and analytics cookies, these cookies are set as well:
Reporting and Analytics
|_landing_page||Track landing pages.|
|_orig_referrer||Track landing pages.|
|_shopify_sa_p||Shopify analytics relating to marketing & referrals.|
|_shopify_sa_t||Shopify analytics relating to marketing & referrals.|
The legal basis for the processing of personal data in cookies that we place on our website to ensure the functionality of our website and our offer is Art. 6 (1) (f) GDPR.
Option of objection and elimination
As explained in the introduction to this section, you can enable or restrict the transfer of cookies by changing the settings in your internet browser. You can erase cookies that have already been saved by your internet browser at any time. If cookies are restricted or deactivated for our website, you may not be able to use all the functions offered by our website, however.
b. External cookies (third party cookies):
On our website, the Google Analytics analysis service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (in the following: “Google Analytics”) has been implemented.
Google Analytics places cookies which save the following information:
- type of internet browser used
- version of the internet browser
- the operating system that you use
- the referrer (previously visited website)
- your shortened IP address
- time of the server enquiry
We use the function offered by Google Analytics to render your IP address anonymous before the saving or processing. Your IP address is usually shortened within the European Union/EEA and only then transmitted to Google servers in the USA. Your information will be processed on a pseudonymised basis, and we will not combine it with any of your other personal data.
We use the data collected in this way for statistical purposes in order to optimise our website and offers. The legal basis for this is Art. 6 (1) (f) GDPR.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) from being processed by Google by downloading and installing the browser plug-in available under the following link (https://tools.google.com/dlpage/gaoptout?hl=en)
You can either prevent Google cookies from being saved directly in your browser settings or you can prevent the processing of your data by applying an “opt-out”: Click here to opt-out for Google Analytics tracking. In this context, an “opt-out cookie” is placed which prevents the collection of your user data on this website.
8. Icon links to social networks
On our website we use small icons that refer to our website on the web platforms of third parties (Facebook, Instagram, Twitter, YouTube and Google+). These are hyperlinks, which means that none of your data will be transferred automatically; this will only take place if you click on the icons and a new tab with the website of the third party provider opens in your browser.
9. Other third party content which is integrated in our website
For the purpose of ensuring an appealing design of our website, we integrate videos from the YouTube service of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter: “YouTube”). We use the advanced privacy mode so that information concerning your person is only shared with YouTube when you activate the video by clicking the play button on the video.
For further information about privacy, including the duration for which your information is stored on YouTube, please see the data protection guidelines of Google at: https://policies.google.com/privacy?hl=en&gl=en. The legal basis for the integration of YouTube services on our website and the associated processing of your data is Art. 6 (1) (f) GDPR.
The legal basis for the processing of your data is Art. 26 German Federal Data Protection Act (BDSG) and Art. 88 GDPR.
10. Registration on our website
11. Comment feature, message board
If users leave comments or messages on the message board on our website, the time of them being made and the user name previously chosen by the user are stored in addition to the message. This is intended for our protection since we may be held accountable for illegal content on our website, even if it was created by users. Processing of the data provided as a comment is based on a legitimate interest (Art. 6 (1) (f) GDPR). By providing you with the comment feature and a message board, we wish to enable easy interaction between our users. The information provided by you will be saved for the purposes of processing your enquiry and for possible subsequent questions. If applicable, the data will be transmitted to Processors. The data will be erased once they are no longer required to achieve the purpose of their collection. On principle, this is the case if communication with the user has been completed and the company can deduce from the circumstances that the matter at hand has been settled conclusively. Provision of your personal data is voluntary. Without collecting your personal data, we cannot provide you with access to our comment feature or the message board.
12. Use of Script Libraries (Google Webfonts)
To ensure correct and visually pleasing display of our content in all browsers, we use “Google Webfonts” by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”) on our website to represent fonts.
The legal basis for the incorporation of Google Webfonts and the associated data transfer to Google is your consent (Art. 6 (1) (a) GDPR).
Accessing script libraries or font libraries automatically creates a connection with the operator of the respective library. In such cases, it is theoretically possible that the operator, in this case Google, could collect data – although it is currently unclear as to whether this will take place and for what purpose, if applicable.
We do not collect personal data by incorporating Google Webfonts.
Google processes your personal data in the US and has agreed to comply with the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
The provision of personal data is neither a statutory nor contractual requirement. However, correct display of the content cannot be enabled using standard fonts.
13. Google AdWords
Our website uses Google Conversion Tracking. The operating company of the Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you access our website via an advertisement placed by Google, a cookie will be placed on your computer by Google AdWords. The conversion tracking cookie will be placed if a user clicks on an advertisement that has been placed by Google.
If the user visits certain sites of our website and the cookie has not expired yet, Google and we are able to see that the user clicked on the advertisement and was referred to this site. Every Google AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers. The information which was obtained with the help of the conversion cookie is used to create conversion statistics for AdWords customers who opted for conversion tracking. The customers receive information on the total number of users who clicked on their advert and were referred to a page with a conversion tracking tag. They do not, however, receive any information which can be used for the personal identification of users.
The legal basis for the incorporation of Google AdWords and the associated data transfer to Google is your consent (Art. 6 (1) (a) GDPR).
During each visit to our website, personal data including your IP address are transmitted to Google in the US. These personal data will be stored by Google. Google may transfer these personal data collected by means of the technical procedure to third parties.
Our company does not receive any information from Google which would enable us to identify the data subject. These cookies become invalid after 30 days and do not serve the purpose of personal identification.
Google processes your personal data in the US and has agreed to comply with the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
If you do not wish to be included in the tracking, you can refuse the required placement of a cookie – for example by a browser setting deactivating the automated placement of cookies in general or by setting your browser to block cookies from the domain “googleleadservices.com”.
Please note that you may not delete the opt-out cookies as long as you do not wish to be included in recording of measurement data. If you erase all cookies in your browser, you need to place the opt-out cookie again.
Collection of your personal data is voluntary and is made with your consent only. If you refuse access for this service, this can cause restriction of functions on our website.
14. Use of Google Remarketing
This website uses the Remarketing feature of Google Inc. The operating company of Google Remarketing s Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google“ ).
The Remarketing feature is intended to display ads relevant to their interests to website visitors within the Google advertising network. A so-called “cookie” is saved in the browser of the website visitor, which allows it to recognise the visitor if they call up websites that belong to the Google advertising network . On these websites, the visitor can then be presented with adverts that relate to content that the visitor has previously called up on websites that use the Remarketing feature of Google. The legal basis for the incorporation of Google Remarketing and the associated data transfer to Google is your consent (Art. 6 (1) (a) GDPR).
During each visit to our website, personal data including your IP address are transmitted to Google in the US. These personal data will be stored by Google. Google may transfer these personal data collected by means of the technical procedure to third parties. Our company does not receive any information from Google which would enable us to identify the data subject.
Collection of your personal data is voluntary and is made with your consent. If you refuse access for this service, this can cause restriction of functions on our website.
15. Google reCAPTCHA
We use Google reCAPTCHA by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; hereinafter referred to as “Google“) to prevent auto-filling of forms (spam).
The legal basis for its use is Art. 6 (1) (a) GDPR. We have a legitimate interest to prevent forms from automated and/or fraudulent filling mechanisms.
reCAPTCHA is a free service by Google protecting website from spam and abuse. It uses advanced risk analyses technology to identify humans and automated technologies. This website uses reCAPTCHA to protect forms.
By using reCAPTCHA, data are transmitted to Google which Google uses to determine whether the person filling in the form is human or an automated technology. Which data are collected by Google and what those data are used for is explained on this site: https://policies.google.com/privacy?hl=de-DE
You can find the terms and conditions for the use of services and products by Google at https://policies.google.com/terms?hl=de-DE.
This website uses the Facebook Pixel by Facebook, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
This code analyses the behaviour of visitors using both this website and Facebook. These data are collected and stored by Facebook for the purpose of analysing and optimising advertisements. These collected data cannot be accessed by us and may only be used within the scope of placing advertisements on the website. Within the scope of using Facebook Pixel, cookies are placed on the visitors’ computers. The Facebook Pixel Code notifies Facebook of the visits to this website. Facebook uses this information, among others, to direct its ad placement. The visit of this website is connected to the Facebook account of visitors who have such an account and are logged in.
Details on the use of Facebook Pixel can be found here: https://www.facebook.com/business/learn/facebook-ads-pixel
Logged-in Facebook users can edit their settings for advertisements in Facebook on https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.
Click on this link to opt out of Facebook Pixel: Opt-Out Facebook Pixel
17. Your rights
When we process your data, you are a “data subject” within the meaning of the GDPR. You have the following rights: a right of access, a right to rectification, a right to the restriction of processing, a right of erasure, a right to information and the right to dataportability. In addition, you have a right of objection and a right of withdrawal.
Details on the individual rights are provided in the following:
a. Right of access
You have the right to ask us to confirm whether your personal data is being processed.
If we process your personal data, you have the right of access to the following information:
- the purposes of processing;
- the categories of personal data processed;
- the recipients or categories of recipients to whom your personal data has been or will still be disclosed, especially for recipients in third countries or for international organisations;
- where possible, the intended duration for which the personal data will be saved or, if this is not possible, the criteria for the determination of this duration;
- the existence of a right to have the personal data concerning your person rectified or erased, a right to the restriction of its processing by us and the right to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- if the personal data are not collected directly from you, all available information regarding the source of the data;
- the existence of automated decision-making, including profiling in accordance with Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such a processing for you.
If we have transferred your data to an international organisation or to a third country, you also have the right to access information as to whether appropriate guarantees exist in the context of the transfer according to Art. 46 GDPR.
b. Right of rectification
You have the right to the rectification and/or completion of the data that we have stored about your person if this data is inaccurate or incomplete. We will then complete the rectification or completion without delay.
c. Right to the restriction of processing
Under certain conditions, you have the right to request that we restrict the processing of your personal data. In this respect, at least one of the following conditions must be fulfilled:
- you dispute the accuracy of the personal data, and for a period of time that enables us to verify the accuracy of the personal data;
- the processing is unlawful, but you decline the erasure of the personal data, requesting instead that the use of the personal data is restricted;
- we no longer require the personal data for the purposes of processing, but you require it in order to establish, exercise or defend legal claims, or
- you have lodged an objection to the processing according to Art. 21 (1) GDPR, insofar as it has not yet been determined as to whether our legitimate reasons override your interests.
d. Right to erasure
You have the right to ask us to erase your personal data immediately if we are obliged to do so. This is the case if one of the following conditions is fulfilled:
- Your personal data are no longer required for the purposes for which they were collected or otherwise processed.
- You withdraw your consent on which the processing was based according to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR and there is no other legal basis for the processing.
- You object to the processing pursuant to Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing according to Article 21 (2) GDPR.
- Your personal data has been unlawfully processed.
- The erasure of personal data is required in order to fulfil a legal obligation under EU law or the law of the EU member states to which we are subject.
- Your personal data were collected in relation to information society services offered according to Art. 8 (1) GDPR.
If we have made your personal data public and we are obliged to erase it in accordance with the aforementioned conditions, we will take appropriate measures, including technical measures, taking into account the technology and implementation costs available to us, to provide other Controllers who process the personal data with the appropriate notification that you have requested us to erase all links to this personal data or copies or replications of this personal data.
Your right to erasure does not exist, however, if the processing is required for the following reasons (derogations):
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation which requires processing by EU or member state law to which we are subject or for the performance of a task which is carried out in the public interest or in the exercising of official authority that has been conferred to us;
- for reasons of public interest in the area of public health according to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR, in so far as the right referred to in (1) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
- for the establishment, exercising or defence of legal claims.
e. Right to information
If you have exercised your right of rectification, erasure or restriction of processing towards our company, we are obliged to notify all recipients to whom we have disclosed your personal data of the rectification, erasure or restriction of the processing of your data, unless this proves to be impossible or is associated with a disproportionately high degree of cost.
f. Right to data portability
You have the right to receive the personal data that you have provided to us in a structured, commonplace and machine-readable format, and the right to have this data transferred to another Controller, subject to the following conditions:
(1) the processing is based on consent according to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, or on a contract according to Art. 6 (1) (b), and
(2) the processing is carried out using automated methods.
You have the right to have us transfer your personal data directly to another Controller, as long as this is technically feasible and it does not impair the freedoms and rights of other persons.
This right to data portability shall not apply if the processing is necessary for the performance of a task in the public interest or the exercising of official authority that has been conferred to us.
g. Right to object
You have the right to object at any time to the processing of your personal data based on Art. 6 (1) (e) or (f) GDPR for reasons relating to your particular situation. This also applies to any profiling referred to in these provisions. After an objection, we will no longer process your personal data unless we can demonstrate compelling grounds for processing that override your interests, rights and freedoms, or if the processing serves the establishing, exercising or defending of legal claims.
If we process your personal data for direct advertising purposes, you have the right to object at any time to the processing of your personal data for the purposes of such advertising. This also applies to profiling insofar as this is connected with direct advertising.
If you object to the processing of your personal data for direct advertising purposes, we will no longer process it for these purposes.
In connection with the use of Information Society services – notwithstanding Directive 2002/58/EC (Directive on Privacy and Electronic Communications) – you have the possibility to exercise your objection by means of automated procedures with the use of technical specifications.
h. Right of withdrawal
According to Art. 7 (3) GDPR you have the right to withdraw your consent at any time. The withdrawal of your consent does not render the legality of the previous processing ineffective on a retroactive basis, however.
i. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint to a supervisory authority without prejudice to any other administrative or judicial remedy. In particular, you may exercise your right to lodge a complaint in your member state of residence, your place of work or the place of suspected infringement, if you are of the view that the processing of your personal data infringes the GDPR.
An overview of the State Commissioners for Data Protection of the federal states and their contact details is provided under the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Version: 17 December 2018.