Privacy Policy

1. Introduction

With the following information, we would like to provide you, as a “data subject,” with an overview of how we process your personal data and your rights under data protection laws. In principle, you can use our website without providing any personal data. However, if you wish to use special services offered by our company via our website, the processing of personal data may become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we will generally obtain your consent.

The processing of personal data, such as your name, address, or email address, is always carried out in accordance with the General Data Protection Regulation (GDPR). This privacy policy is intended to inform you about the scope and purpose of the personal data we collect, use, and process.

As the data controller, we have implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, internet-based data transmissions can always have security vulnerabilities, so absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us via alternative means, such as by telephone or post.

2. Responsibility

Responsible within the meaning of the GDPR is:

imx Solutions GmbH
Voltastraße 5
13355 Berlin / Germany

Managing Director: Arne Hillenbrand

Phone: +49 30 5771230-0
Email: info@imx-solutions.de
Website: www.imx-solutions.de

3. Data Protection Officer

You can reach the data protection officer as follows:

Arne Hillenbrand
Email: datenschutz@imx-solutions.de

4. Begriffsbestimmungen

This Privacy Policy is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our Privacy Policy is intended to be easily readable and understandable for both the general public and our customers and business partners. To ensure this, we would like to explain the terminology used beforehand.

In this Privacy Policy, we use, among others, the following terms:

Personal Data

Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Data Subject

A data subject is any identified or identifiable natural person whose personal data is processed by the controller (our company).

Processing

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Restriction of Processing

Restriction of processing means the marking of stored personal data with the aim of limiting its processing in the future.

Profiling

Profiling is any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

Pseudonymization

Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

Data Processor

A data processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.

Recipient

A recipient is a natural or legal person, public authority, agency, or other body to whom personal data are disclosed, whether a third party or not. However, public authorities that may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

Third party

A third party is a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

Consent

Consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

5. Legal Basis for Processing

Article 6(1)(a) GDPR serves as the legal basis for our company’s processing operations where we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which you are a party, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of other services or consideration, then the processing is based on Article 6(1)(b) GDPR. The same applies to processing operations that are necessary for carrying out pre-contractual measures, such as in cases of inquiries about our products or services.

If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations, then the processing is based on Article 6(1)(c) GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured on our premises and their name, age, health insurance information, or other vital details had to be shared with a doctor, hospital, or other third party. In that case, the processing would be based on Article 6(1)(d) GDPR.

Finally, processing operations could be based on Article 6(1)(f) GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal bases if the processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. The legislator took the view that a legitimate interest could be assumed if you are a customer of our company (Recital 47, second sentence, GDPR).

6. Transfer of Data to Third Parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

We will only disclose your personal data to third parties if:

• You have given your explicit consent to this in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR
• The transfer is permissible in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR to protect our legitimate interests and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data
• There is a legal obligation to disclose the data in accordance with Art. 6 Para. 1 Sentence 1 lit. c GDPR, and
• This is legally permissible and necessary in accordance with Art. 6 Para. 1 Sentence 1 lit. b GDPR for the performance of a contract with you

7. Technical Information

7.1 SSL/TLS Encryption

This website uses SSL/TLS encryption to ensure the security of data processing and to protect the transmission of confidential information, such as orders, login data, or contact requests that you send to us as the operator. You can recognize an encrypted connection by the fact that “https://” appears in the browser’s address bar instead of “http://” and by the padlock icon in your browser’s address bar.

We use this technology to protect the data you transmit.

7.2 Data Collection when visiting this Website

When you use our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (in so-called “server log files”). Our website collects a range of general data and information each time a page is accessed by you or an automated system. This general data and information is stored in the server’s log files

The following data can be collected:

• Browser types and versions used
• Operating System used by the accessing system
• Website from which an accessing system reached our website (Referrer)
• subpages accessed on our website by an accessing system
• date and time of access to the website
• Internet protocol address (IP address)
• Internet Service Provider of the accessing system

We do not draw any conclusions about your identity from this general data and information. Rather, this information is needed to:

• deliver the content of our website correctly
• optimize the content of our website and its advertising
• ensure the long-term functionality of our IT systems and the technology of our website, and
• provide law enforcement agencies with the information necessary for prosecution in the event of a cyberattack

We therefore use this collected data and information for statistical analysis and to improve data protection and data security within our company, ultimately ensuring the highest possible level of protection for the personal data we process. The server log file data is stored separately from any personal data provided by a data subject.

The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest arises from the purposes of data collection listed above.

7.3. Provider/Hosting

The hosting services underlying this website are provided by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). IONOS SE offers, among other things, web hosting, domain registration, email, and cloud computing services.

IONOS SE automatically collects and stores server log files containing information that your browser transmits to us. Further information can be found in the IONOS SE privacy policy, which is available at https://www.ionos.com/terms-gtc/privacy-policy/.

We have also concluded a data processing agreement (DPA). This agreement governs the scope, nature, and purpose of IONOS SE’s access to data. This access is limited to only what is necessary for fulfilling the hosting services.

8. Cookies

8.1 General Information about Cookies

We use cookies on our website. These are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit our site.

Detailed information about cookies
Check your Cookie Settings

8.2 Legal Basis for the Use of Cookies

The data processed by cookies that are necessary for the proper functioning of the website are therefore required to protect our legitimate interests and those of third parties pursuant to Art. 6 Para. 1 Sentence 1 lit. f GDPR.

For all other cookies, you have given your consent via our opt-in cookie banner in accordance with Art. 6 Para. 1 lit. a GDPR.

.

9. Analytics Tools

9.1 Google Tag Manager

This website uses “Google Tag Manager,” a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

Google Tag Manager provides a technical foundation for bundling various web applications, including tracking and analytics services, and for calibrating, controlling, and linking them to conditions via a unified user interface. Google Tag Manager itself does not store or read any information on user devices. The service also does not perform any independent data analysis. However, when you visit this website, Google Tag Manager transmits your IP address to Google, where it may be stored. Transmission to servers of Google LLC in the USA is also possible.

This processing only takes place if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, Google Tag Manager will not be used during your visit to this website. You can withdraw your consent at any time with effect for the future. To exercise your right to withdraw your consent, please deactivate this service in the Cookie Settings of the cookie consent tool provided on this website.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

Further legal information on Google Tag Manager can be found at https://business.safety.google/intl/privacy/ und https://policies.google.com/privacy?hl=en&gl=en

9.2 Google Analytics

If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. The responsible party for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Scope of Processing

Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by the cookies about your use of this website is generally transmitted to and stored on a Google server in the USA.

IP address anonymization is activated by default in Google Analytics version 4. Due to IP anonymization, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. During your website visit, your user behavior is recorded in the form of “events.”

Events can include:

• Page views
• First visit to the website
• Session start
• Your “click path”, interaction with the website
• Scrolls (whenever a user scrolls to the bottom of the page (90%))
• Click on external Links
• Internal search queries
• Interaction with Videos
• File downloads
• Viewed/clicked ads
• Language settings

The following is also tracked:

• Your approximate location (region)
• Your IP address (in abbreviated form)
• Technical information about your browser and the devices you use (e.g., language setting, screen resolution)
• Your internet service provider
• The referrer URL (the website/advertising medium that led you to this website)

Purposes of processing

On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website.

Recipients

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a data processor pursuant to Article 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

It cannot be ruled out that US authorities may access the data stored by Google.

Transfer to third countries

Insofar as data is processed outside the EU/EEA and there is no level of data protection equivalent to the European standard, we have concluded EU Standard Contractual Clauses with the service provider to ensure an adequate level of data protection. The parent company Google Ireland, Google LLC, is headquartered in California, USA. The transfer of data to the USA and access by US authorities to data stored by Google cannot be ruled out. From a data protection perspective, the USA is currently considered a third country. You do not have the same rights there as within the EU/EEA. You may not have legal remedies against access by authorities.

Data Retention Period

The data we send and which is linked to cookies is automatically deleted after 14 months. Data whose retention period has expired is automatically deleted once a month.

Data Processing Agreement

We have concluded a data processing agreement (DPA) with the aforementioned provider. This is a legally required agreement under data protection law, which ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Legal Basis

The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

Revocation

You can revoke your consent at any time with effect for the future by accessing the Cookie Settings and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

You can also prevent the storage of cookies from the outset by adjusting your browser settings accordingly. However, if you configure your browser to reject all cookies, this may restrict the functionality of this and other websites. Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by:

• not giving your consent to the setting of the cookie, or
• downloading and installing the Browser-Add-on to deactivate Google Analytics

Further information on the terms of use of Google Analytics and on data protection at Google can be found at https://marketingplatform.google.com/about/analytics/terms/us/ and at https://policies.google.com/?hl=en.

9.3. Google Ads Remarketing and Conversion-Tracking

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google places a cookie in your browser, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. Further data processing only takes place if you have consented to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalize ads you see on the web. If you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to create target audiences. When using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC in the USA.

All processing described above, in particular the setting of cookies to read information on your device, will only be carried out if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, retargeting technology will not be used during your visit to our website.

You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service by changing the Cookie Settings in the cookie consent tool provided on this website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

Details about the data processing initiated by Google and how Google handles website data can be found here: https://policies.google.com/technologies/partner-sites

Further information about Google’s privacy policy can be found here: https://business.safety.google/intl/privacy/ and https://www.google.de/policies/privacy/

10. Contacting Us/Contact Form on this Website

When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected via a contact form is indicated on the form itself. This data is stored and used solely for the purpose of responding to your inquiry, contacting you, and for the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

Your data will be deleted after your inquiry has been fully processed. This is the case when it is clear from the circumstances that the matter has been resolved and provided that no statutory retention obligations apply.

11. Newsletter Distribution

11.1 Promotional Newsletter

Our website offers you the opportunity to subscribe to our company’s newsletter. The personal data transmitted to us when you subscribe is determined by the input form used for this purpose.

We inform our customers and business partners about our offers at regular intervals via a newsletter. You can only receive our company’s newsletter if:

• You have a valid email address
• You have registered to receive the newsletter

For legal reasons, a confirmation email will be sent to the email address you initially registered for the newsletter using the double opt-in procedure. This confirmation email serves to verify that you, as the owner of the email address, have authorized the receipt of the newsletter.

When you subscribe to the newsletter, we also store the IP address assigned by your internet service provider (ISP) to the device you used at the time of registration, as well as the date and time of registration. The collection of this data is necessary to trace any (potential) misuse of your email address at a later date and therefore serves our legal protection.

The personal data collected during newsletter registration is used exclusively for sending our newsletter. Furthermore, newsletter subscribers may be contacted by email if this is necessary for the operation of the newsletter service or related registration, such as in the event of changes to the newsletter content or technical modifications.

Personal data collected as part of the newsletter service will not be shared with third parties. You can unsubscribe from our newsletter at any time. Each newsletter contains an unsubscribe link. You can also revoke your consent to the storage of your personal data for newsletter distribution at any time by email. Alternatively, you can unsubscribe directly on our website or notify us of your wish to unsubscribe in another way.

You can also unsubscribe directly on our website or by contacting us through other channels. The legal basis for data processing for the purpose of sending newsletters is Article 6(1)(a) GDPR.

11.2 Mailpoet

This website uses MailPoet for sending newsletters. The provider is:

Automattic Inc.
60 29th Street #343
San Francisco, CA 94110, USA

MailPoet is a service that allows us to organize, send, and analyze newsletter distribution. The data you enter for newsletter subscription (e.g., email address) is stored on our provider’s servers.

Our newsletters sent via MailPoet allow us to analyze the behavior of newsletter recipients. This analysis includes, among other things, how many recipients opened the newsletter and how often each link in the newsletter was clicked.

Data processing is based on your consent (Article 6(1)(a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The lawfulness of data processing operations already carried out remains unaffected by your withdrawal of consent.

The data you provided to us for the purpose of receiving our newsletter will be stored by us until you unsubscribe and will be deleted from our database after you unsubscribe. Data stored by us for other purposes (e.g., email addresses for a protected members’ area) will remain unaffected.

For more information, please see MailPoet’s privacy policy at: https://automattic.com/privacy/.

12. Tools & Plugins

12.1 Cookie Consent Tool

This website uses a “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users upon visiting the site as an interactive interface where consent for specific cookies and/or cookie-based applications can be granted by ticking boxes. By using this tool, all cookies/services requiring consent are only loaded if the respective user grants the corresponding consent by ticking the boxes. This ensures that such cookies are only placed on the user’s device if consent has been given. You can adjust your Cookie Settings here.

The tool uses technically necessary cookies to save your cookie preferences. No personal user data is processed in this process.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management and thus in the legally compliant design of our website.

A further legal basis for processing is Article 6(1)(c) GDPR. As the data controller, we are legally obligated to make the use of cookies that are not technically necessary dependent on the respective user’s consent.

Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.

12.2 Adobe Typekit

We use so-called web fonts from Adobe Typekit for the design of this website. The provider of Adobe Typekit is Adobe Systems Incorporated (“Adobe”), 601 Townsend St., San Francisco, CA 94103 USA.

This service enables access to Adobe’s font library. When you visit a page, your browser loads the necessary web fonts into its browser cache to display text and fonts correctly. By integrating these web fonts, Adobe may collect and process information (including personal data, in particular your IP address). It cannot be ruled out that this information may be transferred to a server in a third country. We have no control over what data Adobe actually collects and processes.

Your data is processed based on our legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) in a consistent and appealing presentation of our online services. Further information on data usage by Adobe can be found at https://www.adobe.com/privacy/policies/adobe-fonts.html. You can object to the processing of your personal data at https://www.adobe.com/privacy/opt-out.html.

13. Social Media Profiles

To communicate with you and inform you about our services on social media, we maintain our own pages there.

We are not the original provider (controller) of these pages, but merely use them within the scope of the options offered to us by the respective providers.

Therefore, we would like to point out that your data may also be processed outside the European Union or the European Economic Area. Using these platforms may therefore pose data protection risks for you, as exercising your rights, e.g., to access, erasure, or objection, may be more difficult. Furthermore, processing on social media is often carried out directly by the providers for advertising purposes or to analyze user behavior, without our being able to influence this. If the provider creates user profiles, cookies are often used, or your usage behavior is directly associated with your own member profile on the social media platform (if you are logged in).

These processing operations only take place with your explicit consent in accordance with Article 6(1)(a) GDPR.

Since we have no access to the providers’ data, we advise you to assert your rights (e.g., to information, rectification, erasure, etc.) directly with the respective provider. Further information on the processing of your data in social networks and the possibility of exercising your right to object or withdraw your consent (so-called opt-out) is listed below for each social network provider we use:

13.1 LinkedIn

Data controller in Europe:
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Privacy Policy:
https://www.linkedin.com/legal/privacy-policy

Opt-Out and advertising settings:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

13.2 Youtube

Data controller in the European Economic Area and Switzerland:
Google Ireland Limited, located at Gordon House, Barrow Street, Dublin 4, Ireland

Data controller in the United Kingdom:
Google LLC, located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Privacy Policy:
https://policies.google.com/privacy?hl=en

Privacy settings:
https://policies.google.com/privacy?hl=en#infochoices

14. Your Rights as a Data Subject

Right to Confirmation

You have the right to request confirmation from us as to whether or not personal data concerning you is being processed.

Right of Access (Article 15 GDPR)

You have the right to obtain from us, at any time and free of charge, information about the personal data stored about you, as well as a copy of this data, in accordance with the legal provisions.

Right to Rectification (Article 16 GDPR)

You have the right to request the rectification of inaccurate personal data concerning you. Furthermore, taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data.

Right to Erasure (Article 17 GDPR)

You have the right to request that we erase personal data concerning you without undue delay, provided one of the legally stipulated grounds applies and the processing or further storage is not necessary.

Right to Restriction of Processing (Article 18 GDPR)

You have the right to request that we restrict the processing of your personal data if one of the legal requirements is met.

Data Portability (Article 20 GDPR)

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, the controller to whom the personal data was provided, where the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability pursuant to Article 20(1) GDPR, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

Right to object (Article 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (e) of Article 6(1) (processing necessary for the performance of a task carried out in the public interest) or point (f) of Article 6(1) (processing necessary for the purposes of the legitimate interests pursued by the controller or by a third party) of the GDPR.

This also applies to profiling based on these provisions within the meaning of Article 4(4) of the GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

In some cases, we process personal data for direct marketing purposes. You may object at any time to the processing of your personal data for such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If you object to the processing of your personal data for direct marketing purposes, we will no longer process your personal data for these purposes.

Furthermore, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

You are free to exercise your right to object by automated means using technical specifications in the context of the use of information society services, notwithstanding Directive 2002/58/EC.

Withdrawal of consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.

Complaint to a supervisory authority

You have the right to lodge a complaint with a supervisory authority responsible for data protection regarding our processing of your personal data.

15. Routine Storage, Deletion, and Blocking of Personal Data

We process and store your personal data only for the period necessary to achieve the purpose of storage or as required by the legal regulations to which our company is subject.

If the purpose of storage ceases to apply or a prescribed retention period expires, the personal data is routinely blocked or deleted in accordance with legal requirements.

16. Duration of Personal Data Storage

The criterion for the duration of personal data storage is the respective statutory retention period. After this period expires, the corresponding data is routinely deleted, unless it is still required for contract fulfillment or initiation.

17. Updates and Changes to this Privacy Policy

This Privacy Policy is currently valid and was last updated in July 2025.

Due to the further development of our websites and services or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The current privacy policy can be accessed at any time on the website at https://www.imx-solutions.com/privacy-policy/ (this page).