Source: https://www.doctorsgate.com/en/privacy-statement/
Timestamp: 2019-12-13 15:32:51
Document Index: 689502938

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 46', 'Art. 21', 'Art. 6', 'Art. 9', 'Art. 21', 'Art. 21', 'Art. 8', 'Art. 17', 'Art. 9', 'Art. 9', 'Art. 89', 'Art. 6', 'Art. 9', 'Art. 6']

Privacy Statement - DoctorsGate
The Controller, as defined by the General Data Protection Regulation (GDPR), other national data protection laws of Member States and by other provisions of data protection legislation, is:
represented by its Managing Director Christopher Musmann
The Controller’s data protection officer can be reached at privacy@doctorsgate.com.
We principally collect and use personal data of our users only insofar as is necessary for the provision of a functioning website as well as our content and services. Personal data of our users shall only be collected and used regularly with the user’s consent. An exception shall apply in such cases, in which actual reasons make it impossible to obtain prior consent and the data processing is permitted by legal regulations.
Art. 6 para. 1 (a) of the EU General Data Protection Regulation (GDPR) shall serve as legal basis whenever we obtain consent from the data subject to the methods used for personal data processing.
Art. 6 para. 1 (b) GDPR shall form the legal basis when the processing of personal data is necessary for the fulfillment of a contract to which the data subject is a party. This also applies to data processing operations necessary in order to take steps prior to entering into a contract.
Art. 6 para. 1 (c) GDPR shall form a legal basis whenever the processing of personal data is necessary to fulfill a legal obligation to which our company is subject.
Art. 6 para. 1 (f) GDPR shall form a legal basis for processing whenever the processing is necessary to safeguard a legitimate interest of our company or of a third party and the interests, fundamental rights and fundamental freedoms of the data subject do not override the formerly mentioned interest.
3.Data Erasure and Duration of Storage
Personal data of the affected person are erased or blocked as soon as the purpose of the data storage is obviated. Data can moreover be stored if this has been envisaged by European or national legislators in the EU regulations, laws or regulations governing the controller. Blocking or erasure of these data shall also take place when a storage period prescribed by the mentioned standards expires unless the necessity for further data storage exists in order to enter into or to ensure the fulfillment of a contract.
Every time our website is opened, our system gathers automated data and information from the computer system of the requesting device.
The following data shall hereby be collected:
The data are likewise stored in the log files of our system.
The https-encrypted data will be passed on to the hosting operator Internex GmbH Lagerstrasse 15, 3950 Gmünd, Austria.
Art. 6 para. 1 (f) GDPR shall form the legal basis for the temporary storage of data and log files.
It is necessary that the IP address is temporarily stored by the system to enable the website to be delivered to User’s PC. For this purpose, the User’s IP address shall remain stored for the duration of the session.
Data are stored in log files to secure the website’s functionality. Moreover, we utilize the data to optimize the website and safeguard the security of our IT systems. No analysis of the data for marketing purposes takes place in this context.
For these purposes, our legitimate interest in the data processing is defined pursuant to Art. 6 para. 1 (f) GDPR.
The data are deleted as soon as they are no longer required to achieve the intended purpose of their collection. When the data are collected for the provision of the website, this is the case when the respective session has ended.
If the data are stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or altered beyond recognition so that any assignment to the accessing client is no longer possible.
5. Option for Appeal and Disposal
Data collection for the provision of the website and the storage of data in log files are absolutely imperative for the operation of the website. Consequently, there is no appeal option on the part of User.
Our website only uses analytical cookies. Personal data is not collected.
On our website, there are contact forms which can be used. If a user makes use of this service, the data entered into the input masks will be transmitted to us and stored. These data are:
Alternatively, you can contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored. Press contacts can also be established via e-mail communication.
Art. 6 para. 1 (f) GDPR shall form the legal basis for the processing of data transmitted in the course of sending emails. If the intent of the email contact is to enter into a contract, Art. 6 para. 1 (b) GDPR shall form the additional legal basis for processing.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be concluded from the circumstances that the relevant facts have been conclusively clarified.
The additional personal data collected during the sending process will be processed at the latest after a period of seven days.
The user has the option at any time to revoke his consent to the processing of his personal data. If User contacts us by e-mail, he can object to the storage his personal data at any time. In such a case, the conversation cannot be continued.
We shall then delete from our mail software all of the emails and other files sent by you. Data stored on servers shall be deleted at regular intervals (every 3 months).
All personal data stored in the course of establishing contact shall be deleted in such a case.
VII. Web Analysis with Hotjar
Among others, we use Hotjar to better understand the wishes of our users and to optimize the services offered on this website. Hotjar utilizes cookies and other technologies to collect information about the behavior of our users and their devices.
The IP address of the device (collected and stored only in anonymous form)
Information about the browser used, location (country only),
The preferred language to view our website).
Hotjar stores this information in a pseudonymous user profile. The information will not be used by Hotjar or by us to identify individual users or merged with other information about individual users. Further information can be found in Hotjars Privacy Policy.
Art. 6 para. 1 (f) GDPR shall form the legal basis for the processing of personal data using cookies. We employ these tracking measures to ensure a needs-based design and continuous optimization of our website. Another reason we employ the tracking measures is to gather statistics on the use of our website and for the purposes of analyzing how to optimize our service offering for you. These interests are deemed legitimate as defined in the aforementioned regulation.
4. Duration of Storage, Options for Appeal and Disposal
You may refuse the storage of a user profile and information about your visit to our website by Hotjar and the setting of Hotjar tracking cookies, by clicking on this opt-out link.
This website uses Google Analytics, a web analytics service provided by Google, Inc. (https://www.google.de/intl/de/about) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter: “Google”). In this regard, pseudonymized user profiles are generated and cookies used. The cookie-generated information about your use of this website like
are transferred and stored on a server owned by Google in the USA.
This information is used to evaluate the use of the website with the aim of compiling reports on website activities and of rendering further services associated with the website’s use and website use-related services for the purposes of market research and needs-based design of this website. Even when this information may be forwarded to third parties as far as legally prescribed or third parties are contracted to process these data, under no circumstances shall your IP address be combined with other data from Google. The IP addresses shall be anonymized to make any assignment impossible (IP masking).
4. Duration of Storage, Option for Appeal and Disposal
The personal data is stored for 24 months.
You can prevent the storage of cookies by making the corresponding setting in your browser software; however, we must point out that in such a case you may not be able to use the full functionality offered by this website.
You can moreover prevent the logging of the data generated via the cookie and relating to your usage of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser add-on provided via the following link:
As an alternative to the browser add-on, particularly with browsers on mobile terminal devices, you can moreover prevent data gathering by Google Analytics by clicking on this link. An opt-out cookie is set that prevents the future recording of your data when you visit this website’s website. The opt-out cookie only applies in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must re-set the opt-out cookie.
More information on data protection in connection with Google Analytics can be found in Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).
In order to statistically record the use of our website and to analyze our website for you for the purpose of optimization, we also use Google Conversion Tracking. Google AdWords places a cookie on your computer if you have reached our website via a Google advertisement.
These cookies lose their validity after 30 days and are not used for personal identification. If the user searches certain pages on the AdWords customer’s website and the cookie has not yet expired, Google and the customer will be able to tell that the user clicked on the ad and was directed to that page.
Each AdWords customer receives a different cookie. This means that cookies cannot be tracked through AdWords customer websites. The information collected from the Conversion cookie is used to generate conversion statistics for AdWords customers who have selected Conversion Tracking. AdWords customers learn the total number of users who clicked on their ad and were directed to a page tagged with a conversion tracking tag. However, you will not receive any information that personally identifies users.
Art. 6 para. 1 (a) GDPR shall form the legal basis for the data processing after registration for the newsletter by User where User has granted his consent.
The purpose of the use is the continuous optimization and customized design of the website.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be concluded from the circumstances that the relevant facts have been conclusively clarified.
Other personal data gathered within the scope of the registration process are normally deleted after seven days‘notice.
5. Option for Appeal and Removal
There is the option to subscribe to a newsletter free of charge. Registration to subscribe to the newsletter entails transmitting to us the name and email address from the input screen.
Moreover, the following data will be gathered with the registration:
For the data processing within the scope of the registration process, your consent shall be obtained and this data protection policy referenced.
Data processing connected with the dissemination of newsletter involves forwarding of data to third parties. Newsletters are disseminated by Activecampaign in the USA (www.activecampaign.com). The data will exclusively be used for the dissemination of the newsletter.
User’s email address is captured to distribute the newsletter.
The other personal data captured within the scope of the registration process are used for the purpose of preventing the abuse of services or of the email address used.
The data are deleted as soon as they are no longer required to achieve the intended purpose of their collection. Accordingly, the User’s email address is stored as long as the subscription to the newsletter is active.
Other personal data gathered within the scope of the registration process are normally deleted after seven days‘ notice.
The user can cancel his subscription to the newsletter at any time. Each newsletter contains a corresponding link for this purpose.
This similarly enables the subscriber to withdraw his consent to the storage of the personal data collected during the registration process.
XI. Job Application
Personal data are processed whenever you send us a job application. The categories of personal data processed specifically include your master data (such as first name, last name, name suffix and nationality, contact details (e.g. private address, (mobile) phone number, email address) as well as the data relating to the entire application process (cover letter, certificates, questionnaires, interviews, qualifications and previous employment). Insofar as you have also voluntarily disclosed special categories of personal data (such as health data, religious affiliation, degree of disability) in your letter of application or during the course of the application process, processing shall not take place unless you have consented thereto, or a de facto grant of legal permission justifies this.
As a general rule, your personal data will be collected from you directly within the scope of the hiring process. In addition, we may have received data from third parties (e.g. job recruitment) who you provided with your data for further disclosure.
Within our company, only those persons and centers (e.g. relevant departments, representatives for severely handicapped persons) required for hiring decisions and to fulfill our pre-contractual and statutory obligations shall receive your personal data. None of your personal data shall be disclosed to a third party.
Art. 6 para. 1 (b) GDPR shall form the legal basis for processing and Art. 6 para. 1 (a) GDPR that for consent.
First and foremost, the data processing is aimed at carrying out and transacting the application process and at assessing the extent to which the applicant is qualified for the position in question. The processing of your application details is necessary to be able to decide whether to enter into an employment relationship.
We shall delete your personal data 6 months after completion of the application process unless an employment relationship is entered into. This shall apply unless legal reasons stand in the way of erasure or further storage is necessary for evidentiary purposes or you have consented to a longer storage period.
When we process your data to safeguard our legitimate interest, you can object to this processing on grounds relating to your particular situation. We shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or the processing serves in the establishment, exercise or defense of legal claims.
We have an online appearance on Instagram to engage and communicate with active customers, prospects, and users through these social media. On Instagram, we also inform about our services.
On our website, a link to Instagram is offered. It can be used to process data of users outside the European Union.
If you open Instagram’s website, the responsibility for the processing of personal data lies with Instagram alone. Insofar as US providers are certified under the Privacy Shield, providers are obliged to follow EU data protection standards. Instagram may process users’ data for market research and promotional purposes, as provided in Instagram’s Privacy Policy.
The processing of personal data of users in the context of forwarding to Instagram is based on our legitimate interest acc. Art. 6 para. 1 lit. f DSGVO. We have an interest in providing effective and comprehensive information to users of our website and also a legitimate interest in communicating with users through social media.
Possibly the respective providers in social media obtain their own consent for the processing of data. Then the legal basis of the processing is Art. 6 para. 1 lit. (a) and Art. 7 GDPR.
With the data processing and forwarding on the website of Instagram we want to facilitate and promote the information and communication with our users.
Regarding the storage period, the revocation and disposal options of the personal data stored by Instagram, reference is made to the further statements made by Instagram on the following website:
We have an online appearance on Twitter to engage and communicate with active customers, prospects, and users through these social media. On Twitter, we also inform about our services.
On our website, a link to Twitter is offered. It can be used to process data of users outside the European Union.
After opening the website of Twitter, the data protection responsibility for the processing of personal data lies solely with Twitter. Insofar as US providers are certified under the Privacy Shield, providers are obliged to follow EU data protection standards. Twitter may process users’ data for market research and promotional purposes, to the extent that this is agreed in Twitter’s Privacy Policy.
The processing of personal data of users in the context of forwarding to Twitter is based on our legitimate interest acc. Art. 6 para. 1 lit. f DSGVO. We have an interest in providing effective and comprehensive information to users of our website and also a legitimate interest in communicating with users through social media.
With the data processing and forwarding on the website of Twitter we want to facilitate and promote the information and communication with our users.
Regarding the storage period, the revocation and disposal options of the personal data stored by Twitter, reference is made to the further statements made by Twitter on the following website:
We have an online appearance on Facebook to engage and communicate with active customers, prospects, and users through these social media. On Facebook, we also inform about our services.
On our website, a link to Facebook is offered. It can be used to process data of users outside the European Union.
After opening the website of Facebook, the data protection responsibility for the processing of personal data lies solely with Facebook. Insofar as US providers are certified under the Privacy Shield, providers are obliged to follow EU data protection standards. Facebook may process users’ data for market research and promotional purposes, to the extent that this is agreed in Facebook’s Privacy Policy.
The processing of personal data of users in the context of forwarding to Facebook is based on our legitimate interest acc. Art. 6 para. 1 lit. f DSGVO. We have an interest in providing effective and comprehensive information to users of our website and also a legitimate interest in communicating with users through social media.
With the data processing and forwarding on the website of Facebook we want to facilitate and promote the information and communication with our users.
Regarding the storage period, the revocation and disposal options of the personal data stored by Facebook, reference is made to the further statements made by Facebook on the following website:
We have an online appearance on LinkedIn to engage and communicate with active customers, prospects, and users through these social media. On LinkedIn, we also inform about our services.
On our website, a link to LinkedIn is offered. It can be used to process data of users outside the European Union.
After opening the website of LinkedIn, the data protection responsibility for the processing of personal data lies solely with LinkedIn. Insofar as US providers are certified under the Privacy Shield, providers are obliged to follow EU data protection standards. LinkedIn may process users’ data for market research and promotional purposes, to the extent that this is agreed in LinkedIn’s Privacy Policy.
The processing of personal data of users in the context of forwarding to LinkedIn is based on our legitimate interest acc. Art. 6 para. 1 lit. f DSGVO. We have an interest in providing effective and comprehensive information to users of our website and also a legitimate interest in communicating with users through social media.
With the data processing and forwarding on the website of LinkedIn we want to facilitate and promote the information and communication with our users.
Regarding the storage period, the revocation and disposal options of the personal data stored by LinkedIn, reference is made to the further statements made by LinkedIn on the following website:
Our website uses plugins from Google Ireland Limited’s YouTube website (www.youtube.com). The website operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
If you visit any of our YouTube plug-in-enabled sites, you will be connected to the servers of YouTube. This process enables YouTube to recognize which of our pages you’ve visited. When you’re logged in to your Google Account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Google Account.
The processing of personal data of users in the context of forwarding to Youtube is based on our legitimate interest acc. Art. 6 para. 1 lit. f DSGVO. We have an interest in providing effective and comprehensive information to users of our website, as well as a legitimate interest in communicating with users through social media and video sharing platforms.
Possibly. A separate consent for the processing of data is requested from the respective providers in social media and on video platforms. Then the legal basis of the processing is Art. 6 para. 1 lit. (a) and Art. 7 GDPR.
With the data processing and forwarding on the Youtube website we want to facilitate and promote the information and communication with the users.
Regarding the storage period, the revocation and disposal options of the personal data stored on Youtube by Google Ireland Limited, reference is made to the comments made by Youtube on the following website:
This site uses web fonts provided by Google Ireland Limited (hereinafter “Google”) for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to correctly display texts and fonts. For this Google uses an interface to other Google services. Google may collect personal information such as device type, display size, and IP address. When you’re logged in to your Google Account, you allow Google Ireland Limited to associate your browsing experience directly with your personal profile. You can prevent this by logging out of your Google Account.
The processing of the personal data of users as part of the forwarding to Google Web Fonts is based on our legitimate interest in accordance with. Art. 6 para. 1 lit. f DSGVO. We are interested in a consistent and attractive presentation of our online offers on our website. Google, in turn, has a legitimate interest in the personal data collected in order to offer and improve its own services offered.
With the data processing, we want to present the information on our website in a consistent and appealing way.
Regarding the storage period, the revocation and elimination of the personal data stored by Google, reference is made to the further statements made by Google on the following website:
This website uses web fonts provided by Fonticons, Inc. for consistent font representation. When you call up a webpage, your browser loads the required web fonts into your browser cache to correctly display texts and fonts.
To do this, the browser you use must connect to the Fonticons, Inc. servers. This will give Fonticons, Inc. notice that your website has been accessed through your IP address. It is also possible that your device type and certain browser settings are collected by Fonticons, Inc. as a personal date.
The processing of the personal data of users as part of the forwarding to Fonticons, Inc. is based on our legitimate interest in accordance with. Art. 6 para. 1 lit. f DSGVO. We are interested in a consistent and attractive presentation of our online offers on our website. Fonticons, Inc., in turn, has a legitimate interest in offering and improving its services.
Regarding the retention period, the revocation and disposal options of the personal data held by Fonticons, Inc., reference is made to the comments made by Fonticons, Inc. on the following website:
This site uses the map service Google Maps via an API (interface). Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereafter “Google”). To use the features of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored by Google on servers in the United States. The provider of this page has no influence on this data transfer.
The use of Google Maps is for the sake of an appealing presentation of our online offers and an easy findability of the places we specify on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. Google in turn has a legitimate interest in providing and improving its own services.
With the data processing, we want to present the information of our website in an appealing way and make it easy to find the locations we have indicated on the website as well as to provide the evaluation function of Google Maps for our customers and interested third parties.
Our website uses JavaScript code from the company LLC. NetDNA, 3575, Cahuenga Blvd Suite 630, Los Angeles, CA 90068, USA (hereinafter Bootstrap CDN). If you have enabled JavaScript in your browser and have not installed a JavaScript Blocker, your browser may transfer personal information, e.g. submit your IP address to Bootstrap CDN.
The processing of personal data of users in the context of forwarding to Bootstrap CDN is based on our legitimate interest acc. Art. 6 para. 1 lit. f GDPR. We are interested in a consistent and attractive presentation of our online offers on our website. The Bootstrap CDN in turn has a legitimate interest in offering and improving its services.
With regard to the storage period, the revocation and disposal options of the personal data stored by Bootstrap CDN, reference is made to the further details of Bootstrap CDN on the following website:
If your personal data is processed by us, acc. to the EU GDPR you have the following rights towards the responsible party:
1. Richt to Information
You may obtain a confirmation from the controller as to whether or not your personal data are being processed by us.
If such processing carried out, you can request the following information from the person responsible for the following information:
(4) The envisaged period for which the personal data concerning you will be stored, or if more concrete information on this cannot be given, the criteria used to determine that period;
(5) The existence of the right to rectification or erasure of the personal data concerning you, the right to obtain from the controller restriction of processing or the right to object to this processing;
(7) All available information about the origin of the data, where personal data have not been obtained from the data subject;
You have the right to obtain information about whether or not personal data concerning you is being transferred to a third country or international organization. In this connection, you have the right to be informed about appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
You have a right to obtain from the controller the rectification and/or completion whenever the processed personal data concerning you are inaccurate or incomplete. The controller must undertake the rectification without undue delay.
Under the following conditions, you can obtain the restriction of processing of your personal data:
(3) if the controller no longer requires the personal data for the purposes of the processing, but you need them for the establishment, exercise or defense of legal claims or
(4) if you have objected to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether there are overriding legitimate grounds for the processing.
If the processing of personal data concerning you has been restricted, such personal data shall – with the exception of storage – only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal entity or for reasons of important public interest of the Union or of a Member State.
If the processing has been restricted by the aforementioned conditions, the controller shall inform you before the restriction is lifted
You can obtain from the controller erasure of personal data concerning you without undue delay, and the controller is obligated to erase these data without undue delay as long one of the following grounds applies:
(2) You revoke your consent anchored in processing pursuant to Art. 6 para. 1 (a) or Art. 9 para. 2 (a) GDPR and no other legal basis for processing exists.
(3) You have objected to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you have objected to the processing pursuant to Art. 21 para. 2 GDPR.
(6) The personal data concerning you were gathered in relation to the offer of information society services pursuant to Art. 8 para. 1 GDPR.
Where the controller has made public the personal data concerning you and is obliged pursuant to Art. 17 para. 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of those personal data.
There is no right to erasure if this processing is necessary
(3) For reasons of public interest in the area of public health pursuant to Art. 9 para. 2 (h) and (I) as well as Art. 9 para. 3 GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
If you have asserted your right to obtain from the controller rectification, erasure or restriction of the processing, he is obliged to notify all recipients to whom the personal data concerning you were disclosed of such rectification or erasure of the data or of the restriction of processing, unless this proves impossible or involves a disproportionate effort
You have the right to obtain from the controller information about those recipients.
You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format. Moreover, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where
(1) The processing is based on consent pursuant to Art. 6 para. 1 (a) GDPR or Art. 9 para. 2 (a) GDPR or on a contract pursuant to Art. 6 para. 1 (b) GDPR and
In exercising your right to data portability pursuant to paragraph 1, you shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons may not be impaired thereby.
The right to data portability shall not apply to any processing of personal data necessary for carrying out a task that serves the public interest or the exercise of official authority that has been transferred to the controller.
You have the right, at any time, to object on grounds relating to your particular situation to the processing of personal data concerning you which is based on Article 6 para. 1 (e) or (f) GDPR, including profiling based on those provisions.
The controller shall no longer process your affected personal data unless he can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise or defense of legal claims.
8. Right to Lodge a Complaint with Supervisory Authority
Without prejudice to any available administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of your work or the place of the alleged infringement where you consider that your rights under the GDPR have been infringed as a result of the processing of your personal data.
The supervisory authority can be contacted at the following contact details:
State Representative for Data Protection of the Federal State of Lower Saxony