The protection of your personal data is of particular concern to us. We handle this issue very carefully and therefore inform you in the following about the handling of your personal data when visiting our information website and the services offered there.

1. Person responsible and contact details in case of data privacy requests

The responsible party pursuant to Art. 4 (7) of the European Data Protection Regulation (GDPR) is foom GmbH, Auguste-Viktoria-Straße 32, 14193 Berlin. You can reach us at any time by post or by email at info@foom.de. In case of any requests concerning data privacy you can contact us at any time e.g. by e-mail to info@foom.de or at our postal address.

2. Your rights

You have the following rights in relation to personal data relating to you:

- Right of access (Art. 15 GDPR),

- Right to rectification (Art. 16 GDPR),

- Right to erasure (Art. 17 GDPR; "right to be forgotten"),

- Right to restriction of processing (Art. 18 GDPR),

- Right to object to processing (Art. 21 GDPR),

- Right to data portability (Art. 20 GDPR).

You also have the right to lodge a complaint about our processing of your personal data with a data protection supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement if you believe that the processing of personal data concerning you is carried out unlawfully. Where you have given us consent to process your data, you may withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data until the revocation remains unaffected. To assert your rights or for other data protection concerns, you can contact us at any time via the contact channels listed in section a above and/or in our imprint.

3. Supplementary information on your right of objection

We would also like to point out that if your personal data is processed on the basis of legitimate interest within the framework of the balance of interests pursuant to Art. 6 (1) sentence 1 f) GDPR and/or your personal data is processed for direct marketing purposes, you have the right to object to the processing of your personal data at any time.

4. Data we process from you

a) When calling up/visiting our website

When using our website for information purposes only, i.e. if you do not contact us via the contact channels listed in the imprint, we only collect the data that your browser transmits to our server. This is the following data, which is necessary to display our website to you and to ensure stability and security: IP address, date and time of the request, content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request comes, browser, operating system and its interface, language and version of the browser software. It is not possible for us to draw conclusions about individual persons on the basis of this data. We store this data for reasons of technical security, e.g. to defend against attacks on our web server. After seven days at the latest, the data is anonymised by shortening the IP address at domain level, so that it is no longer possible to establish a link to the individual website user. The legal basis for the aforementioned processing is Art. 6 (1) sentence 1 lit. f GDPR (processing is necessary to protect the legitimate interests of the controller).

b) Registration for e-mail notifications

If you are interested in receiving e-mail notifications on our website and would like to register, please enter your e-mail address. Click on "Send" to complete the registration. In this case, we process your e-mail address in order to send you further information about our launch by e-mail. The legal basis for sending e-mail notifications is Art. 6 para. 1 p. 1 lit. a GDPR (consent of the person concerned). You can revoke your consent to the sending of e-mail notifications at any time and unsubscribe from our e-mail notifications. You can declare the revocation e.g. by clicking on the unsubscribe link provided in each email or e.g. by sending a message to the contact details provided in the imprint. In addition, we save the times of registration for our e-mail notifications in each case. The purpose of this procedure is to be able to prove your registration. The legal basis for this is Art. 6 para. 1 p. 1 lit. f) GDPR (processing is necessary to protect the legitimate interests of the controller). We also collect technical information on whether our emails have reached you and whether you have opened our email. We evaluate this information statistically in order to be able to track the opening rate of our emails. We have a legitimate interest in being able to track whether e-mails sent by us at the recipient's request reach the recipient and are opened by the recipient. The legal basis for this is Art. 6 para. 1 p. 1 lit. f) GDPR (processing is necessary to protect the legitimate interests of the controller).

c) Contact by the website visitor

When you contact us by e-mail or by post, the data you provide (e.g. your e-mail address and name as well as the content of your enquiry) will be stored by us in order to process and answer your questions or concerns. We delete the data accruing in this context after storage is no longer necessary (usually after your request has been fully dealt with), or restrict processing if there are legal obligations to retain data. The legal basis for the processing described above is Art. 6 para. 1 p. 1 lit. f GDPR (processing is necessary to protect the legitimate interests of the controller). We have a legitimate interest in providing persons interested in our company or our services with an easy way to contact us.

d) No obligation to provide personal data

You are under no legal or contractual obligation to provide us with personal data. However, to the extent that you wish to receive our email alerts or contact us, the processing of the information/data listed in section 4 above is required. If you do not provide us with this information, we will not be able to send you e-mail notifications or process your request.

e) No automated decision making, including profiling

In the context of visiting the website and subscribing to our email alerts, no decision-making based solely on automated processing - including profiling - will produce legal effects vis-à-vis you or similarly significantly affect you.

5. Recipients / use of service providers – data processing in third countries

To send you our email notifications, we use the email delivery service provider Sendgrid (SendGrid Inc., 1801 California St #500, Denver, CO 80202, USA), which processes your email address on our behalf and only within the scope of our instructions on the basis of a commissioned processing agreement in accordance with Art. 28 GDPR for the purpose of sending the email notifications, but not for other purposes and not for our own contacting by the email delivery service providers. The recipients' email addresses are stored on Sendgrid's servers outside the European Union/European Economic Area in the USA. Please note that currently the U.S does not have a level of data protection comparable to the of the European Union. The EU standard contractual clauses have therefore been concluded with Sendgrid, and additional technical security measures have been implemented to ensure an appropriate level of data protection.

6. Storage period and deletion of data

Even without a specific request, we naturally comply with our obligations to delete personal data (e.g. in accordance with Art. 17 GDPR) and therefore only store data for as long as it is necessary for the provision of the requested service or the respective purpose.

For example, we only store data related to the sending of our e-mail notifications in accordance with section 4 b) for as long as you are subscribed for e-mail notifications from our company. We delete the data as soon as the storage is no longer necessary, e.g. after you have unsubscribed from our e-mail notifications or after you have revoked your consent.