• Stylish, large and cozy rooms
  • Terrace for outdoor receptions and celebrations
  • Space for events with up to 120 guests
  • Individually tailored menus and culinary concepts
  • Personal support and professional planning
  • Good accessibility and sufficient parking facilities
  • Suitable for private and business events

Weddings - The perfect setting for your big day

In der Tenne Braunlage, dining becomes an experience!
Here, traditional German cuisine meets a convivial atmosphere and artisanal quality.
Whether hearty classics, seasonal specialties, or sweet temptations—our kitchen offers just the right thing for every taste.

Our philosophy: honest, fresh, handmade.
Every dish is created with passion and without the use of convenience products or deep fryers – instead, with regional ingredients and true craftsmanship that you can taste.

Pleasure that comes from the heart – and something to look forward to!

Corporate Events - Celebrate together. Make a lasting impression.

Whether it is a team event, Christmas party, anniversary, or late summer festival—successful corporate events need a venue with character and atmosphere.

Our premises create the ideal setting for business events with a stylish ambiance and personal service.
From the casual reception to the exclusive dinner, we develop a concept together with you that suits your company and your guests.

Professionally organized, relaxed in execution, and tailored to individual culinary preferences.

Conferences & Business Events – Professional meetings in a pleasant atmosphere

Concentrated work is best achieved where professionalism and well-being come together.

Our venue offers companies and teams the perfect setting for meetings, seminars, and conferences in a quiet and stylish environment.
Spacious rooms, flexible design options, and customized catering create optimal conditions for productive events.

Thanks to the great location and ample parking, traveling there is also easy and pleasant for your guests.

Let's plan your event together

Every celebration and event is unique. Exactly for this reason, we take the time for your wishes and ideas.

We would be happy to advise you personally and create an individual concept for your wedding, corporate event, conference, or private celebration together with you.

Submit a non-binding inquiry now and secure your preferred date.

Imprint

Who we are

Tenne Betreibergesellschaft mbH
19a Harzburger Street
38700 Braunlage

Represented by

Christian Wagner

Phone

Phone: 05520 2110

Email

info@tenne-braunlage.de

Registration Entry

Commercial register entry
Register Court: Local Court of Braunschweig
Braunschweig Local Court, HRB 212318 

VAT identification number in accordance with Section 27 a of the German VAT Act

DE455609894

Tax ID Number: 21/201/13801

Responsible for the journalistic and editorial content as defined by the State Media Treaty

Christian Wagner

 

Disclaimer

Liability for contents

As a service provider, we are responsible for our own content on these pages in accordance with Section 7(1) of the German Telemedia Act (TMG) and general laws. However, pursuant to Sections 8 through 10 of the German Telemedia Act (TMG), we, as a service provider, are not obligated to monitor third-party information that is transmitted or stored, nor are we required to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information under general laws remain unaffected by this. However, liability in this regard is only possible from the time we become aware of a specific legal violation. Upon becoming aware of such legal violations, we will remove this content immediately.

Liability for links

Our website contains links to external third-party websites over whose content we have no control. Therefore, we cannot assume any liability for this external content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal content was not recognizable at the time of linking. However, permanent monitoring of the content of the linked pages is unreasonable without concrete evidence of a violation of the law. Upon becoming aware of legal violations, we will remove such links immediately.

Copyright

The content and works created by the site operators on these pages are subject to German copyright law. The reproduction, adaptation, distribution, and any kind of exploitation outside the limits of copyright law require the written consent of the respective author or creator. Downloads and copies of this site are permitted only for private, non-commercial use. Insofar as the content on this site was not created by the operator, the copyrights of third parties are respected. In particular, third-party content is identified as such. Should you nevertheless become aware of a copyright infringement, please notify us accordingly. Upon becoming aware of legal violations, we will remove such content immediately.

Accessibility on this website

Equal digital participation for everyone is a key concern for us. We are convinced that digital offerings can only fulfill their social mission if they are accessible to everyone. Therefore, we are firmly committed to making our website accessible in accordance with the requirements of the EU standard EN 301 549 and the Web Content Accessibility Guidelines (WCAG 2.1, Level AA) – and to continuously improving it.

Our self-conception

Accessibility is not a peripheral technical issue for us, but a fundamental quality feature of digital communication. Our goal is to ensure that all people – regardless of physical, sensory, cognitive, or technical conditions – can find, understand, and use our content without restriction.

We understand accessibility in this context as an ongoing process that we pursue with a sense of responsibility, openness, and a focus on the user. Inclusion begins with mindset – and we take that seriously.

Concrete measures

To achieve this goal, we have, among other things, taken the following measures or integrated them into our workflows:

  • Technical Foundations: Our page structure follows semantic standards (e.g., ARIA roles, clean HTML outline), which makes orientation easier, especially for screen readers.
  • Keyboard navigability: All functions of our website are fully accessible via the keyboard.
  • Contrast and legibility: We ensure sufficient color contrast, highly readable font sizes, and a clear visual hierarchy.
  • Alternative content: Images and media are provided with descriptive alternative texts. Where available, we offer videos with subtitles or transcripts.
  • Navigation: The main and sub-navigation menus are logically structured, feature a recurring design, and are easy to understand even when using assistive technologies.
  • Responsiveness: Our content is responsive and accessible on mobile devices just as it is on desktop devices.

Internal processes and further development

Accessibility is firmly embedded in our internal processes:

  • Accessibility standards are taken into account from the very beginning when designing new content.
  • Our designers and engineering team receive regular training on digital accessibility.

Your feedback is crucial

We are aware that no website can ever be completely accessible—if only because technologies, usage scenarios, and requirements are constantly evolving. That is why your opinion is particularly important to us.

If you encounter any barriers—whether it is unreadable text, a difficult-to-understand feature, or a missing alternative—please let us know. Your feedback specifically helps us make our offerings more inclusive, transparent, and fair.

Privacy Policy

I. Name and Address of the Controller

Tenne Betreibergesellschaft mbH
Represented by Christian Wagner
19a Harzburger Street
38700 Braunlage

Phone: Phone 05520 2110
Email: info@tenne-braunlage.de
Website: www.tenne-braunlage.de

II. Name and address of the data protection officer

The data protection officer is:

Tenne Betreibergesellschaft mbH
Represented by Christian Wagner
19a Harzburger Street
38700 Braunlage

Phone: Phone 05520 2110
Email: info@tenne-braunlage.de
Website: www.tenne-braunlage.de

III. General Information on Data Processing

  1. Scope of the processing of personal data

We generally process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The processing of personal data of our users is regularly carried out only with the user's consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by statutory regulations.

  1. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.

In cases where vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and the interests, fundamental rights, and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.

  1. Data deletion and retention period

The personal data of the data subject is deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data is also blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a necessity for further storage of the data for the conclusion or performance of a contract.

IV. Provision of the Website and Creation of Log Files

  1. Description and scope of data processing

With every visit to our website, our system automatically collects data and information from the computer system of the calling computer. With each visit to a website, your web browser sends various data to the web server that provides the requested website. In the first step, your web browser requests the content of the requested page itself. Thereafter, all resources (images, scripts, information about the display of the page, videos, maps, etc.) of a website are loaded step by step. This happens in a fraction of a second.

Since creating a website typically involves integrating a large number of resources from various providers, your web browser not only communicates with us (the provider) when accessing a website, but also with a multitude of third parties whose content makes the website complete in the first place.

For each of the resources described above, a request is sent to the provider of the respective resource. This request typically contains the following data:

  • the requested website
  • the User-Agent string (a technical term for your web browser)
  • the language of your operating system
  • the last visited website
  • Your IP address or the IP address of the internet connection you are using

These data are referred to below as metadata.

The following data is collected in the process:

The data is also stored in our system's log files. This does not affect the user's IP address or other data that would enable the data to be associated with a specific user. This data is not stored together with any other personal data of the user.

  1. Legal basis for data processing

The legal basis for the temporary storage of the data is Article 6 (1) (f) of the GDPR.

  1. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

These purposes also represent our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR.

  1. Retention period

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this occurs when the respective session ends.

  1. Right of objection and removal option

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no right to object.

V. Use of Cookies

  1. a) Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.

We use cookies to make our website more user-friendly. Some elements of our website require the calling browser to be identified even after a page change.

The following data is stored and transmitted in the cookies:

(1) Whether you have confirmed our site's cookie notice (Cookie Consent)

We also use cookies on our website that enable an analysis of users' browsing behavior. This is done via third-party providers, which are detailed further below in this privacy policy.

  1. b) Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 (1) (f) GDPR.

  1. c) Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

The user data collected by technically necessary cookies is not used to create user profiles.

The use of analysis cookies serves the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus continuously optimize our offerings.

These purposes also constitute our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR.

  1. e) Duration of storage, right to object and removal

Cookies are stored on the user's computer and transmitted by the user to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

VI. E-Mail Contact

  1. Description and scope of data processing

It is possible to contact us via the provided email addresses. In this case, the user's personal data transmitted with the email will be stored.

In this context, no data will be passed on to third parties. The data will be used exclusively for processing the conversation.

  1. Legal basis for data processing

The legal basis for processing data transmitted in the course of sending an email is Article 6(1)(f) GDPR. If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Article 6(1)(b) GDPR.

  1. Purpose of data processing

The processing of personal data serves solely to handle the contact inquiry. In the event of contact by email, this also constitutes the necessary legitimate interest in the processing of the data.

  1. Retention period

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the facts in question have been finally clarified. 

  1. Right of objection and removal option

The user has the option to revoke their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

You can submit the objection using the same communication channel. Further information on how to exercise your right to object can be found in the overview at the end of this privacy policy.

 In this case, all personal data stored when you contacted us will be deleted.

VII. Web analysis by GOOGLE ANALYTICS

  1. Scope of the processing of personal data

We use Google Analytics on our website. This is a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as „Google“.

By being certified under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), Google guarantees that EU data protection regulations are complied with, even when processing data in the USA.

Usage and user-related information, such as IP address, location, time, or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. Due to this function, Google truncates the IP address within the EU or the EEA.

The data collected in this way is in turn used by Google to provide us with an analysis of visits to our website and user activity thereon. This data may also be used to provide further services associated with the use of our website and the use of the internet.

Google states that it does not combine your IP address with other data. In addition, Google maintains under https://www.google.com/intl/de/policies/privacy/partners further data protection information is available for you, including on options to prevent data usage.

  1. Legal basis for the processing of personal data

The legal basis for processing the users' personal data is Art. 6 (1) (f) GDPR.

  1. Purpose of data processing

The processing of users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. These purposes also constitute our legitimate interest in the processing of the data pursuant to Art. 6 (1) (f) GDPR. By anonymizing the IP address, the users' interest in the protection of their personal data is adequately taken into account.

  1. Retention period

The data will be deleted as soon as it is no longer needed for our record-keeping purposes. We use the Google Analytics setting to have this data deleted after 26 months.

  1. Right of objection and removal option

Cookies are stored on the user's computer and transmitted by the user to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

If you have a Google Account, you can find more information about the privacy settings of Google Analytics under https://myaccount.google.com/privacycheckup as well as beyond that under https://adssettings.google.com/authenticated and under https://policies.google.com/privacy further information, specifically regarding the possibilities for preventing or eliminating data usage.

Furthermore, Google offers under https://tools.google.com/dlpage/gaoptout?hl=de a so-called deactivation add-on along with further information on this. This add-on can be installed with common internet browsers and offers you further control over the data that Google collects when you visit our website. In this process, the add-on tells the JavaScript (ga.js) of Google Analytics that information about the visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. You will, of course, also learn whether and which other web analysis services are used by us in this privacy policy.

VIII. Use of Google Fonts

  1. Scope of the processing of personal data

On our website, we use Google Fonts to display external fonts. This is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as „Google“.

Through certification under the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Does Google guarantee that EU data protection regulations are complied with even when processing data in the USA?.

To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed. / Alternatively: We store the fonts used on this website directly on our server, so that no connection to Google servers in the USA is established to display the fonts.

  1. Legal basis for the processing of personal data

The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website.

  1. Purpose of data processing

Through the connection established with Google when you visit our website, Google can determine from which website your request was sent and to which IP address the font should be delivered.

  1. Retention period

26 months

  1. Right of objection and removal option

Google offers at https://adssettings.google.com/authenticated and https://policies.google.com/privacy further information, specifically regarding the possibilities for preventing or eliminating data usage.

IX. Use of the resmio reservation system

1. Reservation Widget

This website integrates the online reservation application (“registration widget”) from resmio GmbH, Katzwanger Straße 150, 90461 Nuremberg, Germany. In this context, resmio acts as a partner. The widget allows users of this website to reserve a table at the restaurant. To provide the service (in this case: table reservation and, if applicable, contact in case of any queries regarding the reservation), personal data of the person making the reservation (first and last name, e-mail address, telephone number, and any further information if explicitly requested by the restaurateur for the reservation request) is collected, stored, and processed by our partner resmio on the basis of consent pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. You can object to the collection and storage of data at any time by sending an e-mail to info@tenne-braunlage.de send. Afterwards, we will delete your personal data from the system.

2. Ordering Gift Certificates and Tickets

To enable visitors to this website to purchase gift certificates and tickets (e.g., for in-house events) online, we use the gift certificate and ticket sales system provided by resmio GmbH, Katzwanger Straße 150, 90461 Nuremberg. resmio acts as a partner in this context. To the extent necessary for order processing, the desired gift certificate or ticket will be sent to the prospective buyer or recipient via email after they have entered their personal data and selected a payment method. In doing so, resmio collects, stores, and processes personal data on the basis of Article 6(1)(f) of the GDPR, which is necessary for processing the orders placed. The user grants consent to this by confirming their order. If payment is made electronically (e.g., via SEPA direct debit or PayPal), resmio forwards the data in encrypted form to external payment service providers for further payment processing. You may object to the collection and storage of your data at any time by sending an email to info@tenne-braunlage.de send. Afterwards, we will delete your personal data from the system.

3. Email Marketing

We use resmio to send email newsletters, through which we inform interested guests about the latest news and offers regarding our restaurant. Our technical partner in this context is resmio GmbH, Katzwanger Straße 150, 90461 Nuremberg (hereinafter „resmio“). Subscription to the newsletter can be done either via a newsletter form embedded on the website or as part of a table reservation, online order, or gift certificate purchase facilitated through resmio widgets. In all cases, the interested party must give their explicit consent via the double opt-in procedure before receiving the newsletter. resmio enables us to segment newsletter recipients into groups based on certain characteristics, such as activity (e.g., past reservations). This allows us to provide you with content that is as relevant to your interests as possible. Data processing is based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe from marketing newsletters at any time using the unsubscribe link in the footer of all email newsletters.

X. Rights of the data subject

The following list includes all rights of data subjects under the GDPR. Rights that are not relevant to your own website do not need to be listed. In this regard, the list may be shortened.

If personal data concerning you is processed, you are a data subject within the meaning of the GDPR, and you have the following rights vis-à-vis the controller:

  1. Right of access

You may request confirmation from the data controller as to whether we are processing personal data concerning you.

If such processing is taking place, you may request the following information from the controller:

(1) the purposes for which the personal data is processed;

(2) the categories of personal data that are processed;

(3) the recipients or categories of recipients to whom your personal data has been or will be disclosed;

(4) the planned duration of the storage of your personal data or, if it is not possible to provide specific information on this, the criteria used to determine the storage period;

(5) the existence of a right to have personal data concerning you rectified or erased, a right to restrict processing by the controller, or a right to object to such processing;

(6) the existence of a right to file a complaint with a supervisory authority;

all available information as to their source, where the personal data are not collected from the data subject;

(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR and—at least in those cases—meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information regarding whether your personal data will be transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.

  1. Right to Rectification

You have the right to request that the controller correct and/or complete your personal data if the personal data being processed concerning you is inaccurate or incomplete. The controller must make the correction without delay.

  1. Right to restriction of processing

You can request the restriction of the processing of your personal data under the following conditions:

(1) if you contest the accuracy of the personal data concerning you for a period that allows the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of the personal data instead;

(3) the controller no longer needs the personal data for the purposes of the processing, but you need it to assert, exercise, or defend legal claims, or

(4) if you have objected to processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether the legitimate grounds of the controller override your grounds.

Where the processing of personal data concerning you has been restricted, such data shall – with the exception of storage – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction on processing has been imposed in accordance with the above conditions, the controller will notify you before the restriction is lifted.

  1. Right to Erasure

a) Obligation to Delete

You may request that the controller delete your personal data without delay, and the controller is obligated to delete such data without delay if any of the following grounds apply:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2) You revoke your consent, on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.

(3) you object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.

(4) The personal data concerning you has been unlawfully processed.

(5) The erasure of personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

(6) The personal data concerning you was collected in relation to offered information society services pursuant to Art. 8 (1) GDPR.

b) Information to third parties

Where the controller has made the personal data public and is obliged pursuant to Article 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

c) Exceptions

The right to erasure does not apply to the extent that processing is necessary

(1) for exercising the right to freedom of expression and information;

(2) to comply with a legal obligation that requires processing under Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or

(5) for the establishment, exercise or defense of legal claims.

  1. Right to information

If you have exercised your right to rectification, erasure, or restriction of processing with the controller, the controller is obligated to notify all recipients to whom your personal data has been disclosed of such rectification, erasure, or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed by the controller about these recipients.

  1. Right to data portability

You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, provided that

(1) the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and

(2) the processing is carried out using automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be adversely affected by this.

The right to data portability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

  1. Right of objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.

The controller no longer processes the personal data concerning you unless they can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to the processing of your personal data for direct marketing purposes, your personal data will no longer be processed for those purposes.

In connection with the use of information society services, and regardless of Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

  1. Right to Withdraw Consent Under Data Protection Law

You have the right to withdraw your consent under data protection law at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

  1. Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

(1) is necessary for the conclusion or performance of a contract between you and the data controller,

(2) is permitted under Union or Member State law to which the controller is subject, and such law provides for appropriate measures to safeguard your rights and freedoms as well as your legitimate interests; or

(3) is done with your express consent.

However, these decisions must not be based on special categories of personal data pursuant to Article 9(1) GDPR, unless Article 9(2)(a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

With regard to the cases referred to in (1) and (3), the controller shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

  1. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.