Privacy Policy

We are pleased to welcome you to our website netfed.de and thank you for your interest in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is of great importance to us.

The purpose of this Privacy Policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practices comply with the statutory provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This Privacy Policy serves to fulfil the information obligations arising from the GDPR, as set out, for example, in Articles 13 and 14 et seq. GDPR.

We welcome you to our website and appreciate your interest in our company and services. We take the protection of your personal data seriously and want you to feel secure when visiting our website.

1. Controller

The controller within the meaning of Art. 4 No. 7 GDPR is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

With respect to this website, the controller is:

NetFederation GmbH
Sürther Hauptstraße 180 B
50999 Cologne
Germany
Email: postbox@net-federation.de
Tel.: +49 (0) 2236 / 3936-6
Fax: +49 (0) 2236 / 3936-84

2. Contact Details of the Data Protection Officer

We have appointed a Data Protection Officer pursuant to Art. 37 GDPR. You may contact our Data Protection Officer at the following address:

Bärbel Rolfes
HEC GmbH
Konsul-Smidt-Straße 20
28217 Bremen
Germany
Telephone: +49 421 / 20750-0
Email: datenschutz@neusta.de

3. Provision of the Website and Creation of Log Files

Each time our website is accessed, our system automatically collects data and information from the accessing device (e.g. computer, mobile phone, tablet, etc.).

3.1 Personal Data Collected and Scope of Processing

The following data is collected:

(1) Information about the browser type and version used
(2) The operating system of the accessing device
(3) Hostname of the accessing computer
(4) The IP address of the accessing device
(5) Date and time of access
(6) Websites and resources (images, files, further page content) accessed on our website
(7) Websites from which the user's system reached our website (referrer tracking)
(8) Notification of whether retrieval was successful
(9) Volume of data transmitted

These data are stored in the log files of our system. These data are not stored together with the personal data of a specific user, so that individual website visitors cannot be identified.

3.2 Legal Basis for Processing

Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in ensuring achievement of the purpose described below.

3.3 Purpose of Processing

The temporary (automated) storage of data is required for the execution of a website visit in order to enable delivery of the website. The storage and processing of personal data further serves to maintain the compatibility of our website for as many visitors as possible and to prevent misuse and remedy faults. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to respond as quickly as possible to display errors, attacks on our IT systems and/or functional faults on our website. The data also serve to optimise the website and to generally ensure the security of our information technology systems.

3.4 Duration of Storage

The aforementioned technical data are deleted as soon as they are no longer needed to ensure the compatibility of the website for all visitors, but no later than three months after access to our website.

3.5 Right to Object and to Erasure

You may object to processing at any time pursuant to Art. 21 GDPR and request the erasure of data pursuant to Art. 17 GDPR. For information on your rights and how to exercise them, please refer to the section at the end of this Privacy Policy.

4. Special Functions of the Website

Our website offers various functions in connection with which personal data is collected, processed and stored by us. Below we explain what happens with this data.

4.1 Application Form

Personal Data Collected and Scope of Processing

The data you enter in the form fields of the application form and any documents you upload will be processed in full for the purpose described below.

Legal Basis for Processing

The legal basis for the collection and processing of applicant data is Art. 6(1)(b) GDPR (pre-contractual measures), Art. 88(1) GDPR in conjunction with Section 26 BDSG. Insofar as special categories of personal data are collected that are required for the fulfilment of legal obligations under employment law, social security law and social protection law pursuant to Art. 9(2)(b) GDPR in conjunction with Section 26(3) BDSG, processing is carried out on that legal basis. Where special categories of personal data are to be processed beyond this, we will obtain your consent pursuant to Art. 9(2)(a) GDPR.

Purpose of Processing

The purpose of data processing is to review and process the application documents you have uploaded via the form.

Duration of Storage

Data will be deleted as soon as the application has been processed and there is no longer a legitimate interest in retaining the application data. Accordingly, if no employment relationship is established, your application documents will be deleted after no later than six months.

Right to Object and to Erasure

For information on your rights and how to exercise them, please refer to the section at the end of this Privacy Policy.

Obligation to Provide Personal Data

The information in the application form is not required by contract or by law; however, it is necessary in order to send and process the application. If you do not complete the mandatory fields in full, the application you wish to submit cannot be sent or processed.

4.2 Contact Form(s)

Personal Data Collected and Scope of Processing

The data you enter in our contact forms will be processed by us for the purpose described below.

Legal Basis for Processing

Art. 6(1)(a) GDPR (consent by clear affirmative act or conduct).

Purpose of Processing

The data collected via our contact form(s) will be used exclusively to process the specific contact enquiry submitted through the contact form.

Duration of Storage

After your enquiry has been processed, the collected data will be deleted without undue delay, unless statutory retention periods apply.

Right to Withdraw and to Erasure

The rights of withdrawal and erasure are governed by the general provisions on the right of withdrawal under data protection law and the right to erasure described further below in this Privacy Policy.

Obligation to Provide Personal Data

Use of the contact forms is voluntary and is not required by contract or by law. You are not obliged to contact us via the contact form; you may also use the other contact options provided on our website. If you wish to use our contact form, you must complete the fields marked as mandatory. If you do not complete the required fields, you will either be unable to submit your enquiry, or we will unfortunately be unable to process it.

4.3 Live Chat Function

Personal Data Collected and Scope of Processing

Data you enter in our live chat, such as your name and message content, will be processed by us for the purpose described below.

Legal Basis for Processing

Art. 6(1)(a) GDPR (consent by clear affirmative act or conduct).

Purpose of Processing

Data collected via our live chat will be used exclusively to process enquiries received through the live chat.

Duration of Storage

After your enquiry received via the live chat has been processed, the collected data will be deleted without undue delay, unless statutory retention periods apply.

Right to Withdraw and to Erasure

You may withdraw your consent to being contacted at any time pursuant to Art. 7(3) GDPR. This does not affect the lawfulness of processing carried out prior to withdrawal. For further rights, please refer to the overview at the end of this Privacy Policy.

Obligation to Provide Personal Data

Use of the live chat is voluntary and is not required by contract or by law. You are not obliged to contact us via the chat. If you do not complete the required fields, you will be unable to use our live chat.

4.4 Newsletter Subscription Form

Personal Data Collected and Scope of Processing

When you subscribe to the newsletter on our website, we receive the email address you enter in the subscription field and, where applicable, further contact details you provide via the newsletter subscription form.

Legal Basis for Processing

Art. 6(1)(a) GDPR (consent by clear affirmative act or conduct).

Purpose of Processing

The data collected in the subscription form for our newsletter will be used solely to send you our newsletter, in which we provide information about all our services and news. After registration, we will send you a confirmation email containing a link you must click to complete your newsletter subscription (double opt-in).

Duration of Storage

You may unsubscribe from our newsletter at any time by clicking the unsubscribe link included in every newsletter. Your data will be deleted without undue delay following unsubscription. Your data will likewise be deleted without undue delay in the event of an incomplete registration. We reserve the right to delete data without stating reasons and without prior or subsequent notice.

Right to Withdraw and to Erasure

You may withdraw your consent at any time pursuant to Art. 7(3) GDPR. This does not affect the lawfulness of processing carried out prior to withdrawal. For further rights, please refer to the overview at the end of this Privacy Policy.

Obligation to Provide Personal Data

If you wish to subscribe to our newsletter, you must complete the fields marked as mandatory and confirm your email address by clicking the double opt-in link. Providing details for the newsletter subscription is neither required to enter into a contract with us nor required by law. The information serves exclusively for sending our newsletter. If you do not complete the required fields, we will unfortunately be unable to provide you with our newsletter service.

5. Statistical Analysis of Website Visits – Web Tracking

When this website or individual files on this website are accessed, we collect, process and store the following data: IP address, website from which the file was retrieved, name of the file, date and time of retrieval, volume of data transmitted, and notification of whether retrieval was successful (so-called web log). We use these access data exclusively in non-personalised form for the continuous improvement of our online offering and for statistical purposes. We also use the following web tracking tools to analyse visits to this website:

5.1 Leadinfo

We use the service Leadinfo provided by Leadinfo / Team.Blue GmbH, Bunsenstr. 19, 40215 Düsseldorf, Germany; Email: privacy@leadinfo.com; Website: https://www.leadinfo.com/. Personal data is transmitted exclusively to servers within the European Union.

The legal basis for the processing of personal data is your consent pursuant to Art. 6(1)(a) GDPR and, where applicable, Art. 9(2)(a) GDPR, which you have provided on our website.

Our website uses the Leadinfo service to collect information about visitors to our website. Leadinfo enables us to gain insights into the companies visiting our website, as well as their interests and behaviour on the site. This allows us to identify and target potential customers. This constitutes B2B lead generation, i.e. the generation of potential business contacts.

You may withdraw your consent at any time. Further information on withdrawing your consent can be found either in the consent itself or at the end of this Privacy Policy.

Further information on how transmitted data is handled can be found in the provider's Privacy Policy at: https://www.leadinfo.com/de/rechtliches/datenschutz/

5.2 Matomo (Self-Hosted)

We use the service Matomo (self-hosted), a product of InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand; Email: privacy@matomo.org; Website: https://matomo.org/. Personal data is processed exclusively on servers within the European Union.

The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in achieving the purpose described below.

Matomo is hosted on our own server infrastructure and configured by us in such a way that no data transfer to Matomo, InnoCraft Ltd. or any other third party takes place. The collection of statistical data serves to monitor and optimise the functionality and usability of our website through analysis of anonymised user flows. This enables us to identify which content is relevant to our visitors and users and to expand our offering accordingly. We also use the collected data to create anonymous user profiles and to read general statistical information. Data collected in this context will not be merged with other personal data without a separate consent.

For processing purposes, the service (or we) collect the following data: parts of your IP address in anonymised form, user activities (e.g. referrer links, time spent on certain URLs, clickstream, shopping basket or order IDs), data about your browser settings, browser provider, browser version, screen resolution and operating system used.

Data collection by our local Matomo instance is configured in a privacy-friendly manner. Captured IP addresses are anonymised prior to collection and processing. We have also enabled the 'Do Not Track Preference' setting in Matomo, which ensures that a 'Do Not Track' request from your browser is honoured by Matomo upon accessing our website and, irrespective of our other measures, no collection of the page user takes place. You can prevent collection by Matomo at any time by enabling the 'Do Not Track' setting in your browser.

With respect to this processing, you have the right to object as set out in Art. 21 GDPR. Further information can be found at the end of this Privacy Policy.

Further information on how transmitted data is handled can be found in the provider's Privacy Policy at: https://matomo.org/faq/general/faq_18254/

6. Integration of External Web Services and Processing of Data Outside the EU

Our website uses active content from external providers, so-called web services. When you access our website, these external providers may receive personal information about your visit. In some cases, data may be processed outside the EU. You can prevent this by installing an appropriate browser plugin or by disabling the execution of scripts in your browser. This may, however, result in functional limitations on websites you visit.

We use the following external web services:

6.1 Cookiebot

We use the service Cookiebot provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark; Email: privacy@cookiebot.com; Website: https://www.cookiebot.com/. Personal data is transmitted exclusively to servers within the European Union.

The legal basis for processing is Art. 6(1)(c) GDPR (legal obligation). Use of the service assists us in fulfilling our legal obligations.

By integrating Cookiebot, we fulfil our legal obligation with regard to the consent management required for cookies.

For information on your rights with respect to this processing, please refer to the end of this Privacy Policy.

Further information on how transmitted data is handled can be found in the provider's Privacy Policy at: https://www.cookiebot.com/de/privacy-policy/

6.2 Google Tag Manager

We use Google Tag Manager on our website, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager enables us to manage and deploy website tags via a single interface. The tool itself (which implements the tags) does not, according to Google, process any personal data of users. However, when Google Tag Manager loads, personal data (in particular IP address and device information) may be transmitted to Google. It cannot be excluded that data may also be transferred to servers of Google LLC in the United States.

Google Tag Manager triggers other tags which may in turn collect and process data. Google Tag Manager does not access this data. If a deactivation has been configured at domain or cookie level, this will remain in effect for all tracking tags implemented via Google Tag Manager.

Google Tag Manager is used exclusively on the basis of your express consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TTDSG. You may withdraw your consent at any time with effect for the future by adjusting the relevant settings in our consent management tool.

Further information on data protection at Google can be found in Google's Privacy Policy: https://policies.google.com/privacy

6.3 Google Ads

We use the service 'Google Ads' on our website, an online advertising programme of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ('Google'). Google Ads enables us to place targeted advertisements in Google search results and in the Google Display Network to draw attention to our offering. In this context, we can measure the success of individual advertising measures (so-called conversion tracking).

When you access our website via a Google advertisement, Google Ads places a cookie on your device. These cookies generally expire after 30 days and are not used to identify individuals personally. If a user visits certain pages of this website while the cookie has not yet expired, both Google and we can recognise that the user clicked on the advertisement and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers.

The information collected via the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. We learn the total number of users who clicked on our advertisement and were redirected to a page tagged with a conversion tracking tag. We do not, however, receive any information that allows users to be personally identified.

The use of Google Ads and the associated conversion tracking takes place solely on the basis of your express consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TTDSG. You may withdraw your consent at any time with effect for the future by adjusting the relevant settings in our consent management tool.

Further information on Google Ads and Google's data protection provisions can be found at: https://policies.google.com/privacy and https://ads.google.com/home/resources/ads-privacy/

6.4 Legal Text Snippets and Modules (Rechtstextsnippet und Module)

We use the service Legal Text Snippets and Modules provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany; Email: support@website-check.de; Website: https://www.website-check.de/. Personal data is transmitted exclusively to servers within the European Union.

The legal basis for processing is Art. 6(1)(c) GDPR (legal obligation). Use of the service assists us in fulfilling our legal obligations.

This service is used to dynamically load the content of our legal texts on our website, ensuring that the most current versions are always displayed. Further technical modules relating to legal texts or legally required elements may also be loaded via this integration.

For information on your rights with respect to this processing, please refer to the end of this Privacy Policy.

Further information on how transmitted data is handled can be found in the provider's Privacy Policy at: https://www.website-check.de/datenschutzerklaerung/

6.5 Website-Check Seal

We use the Website-Check Seal service provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany; Email: support@website-check.de; Website: https://www.website-check.de/. Personal data is transmitted exclusively to servers within the European Union.

The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in achieving the purpose described below.

The Website-Check GmbH script provides the technical integration of the Website-Check seal. By displaying this seal, we wish to demonstrate that we take data protection very seriously. Data is transmitted to Website-Check GmbH for the purpose of delivering and displaying the seal on our website.

With respect to this processing, you have the right to object as set out in Art. 21 GDPR. Further information can be found at the end of this Privacy Policy.

Further information on how transmitted data is handled can be found in the provider's Privacy Policy at: https://www.website-check.de/datenschutzerklaerung/

7. Use of Cookies

7.1 Personal Data Collected and Scope of Processing

We integrate and use cookies on various pages in order to enable certain functions of our website and to integrate external web services. 'Cookies' are small text files that your browser can store on your access device. These text files contain a characteristic string that uniquely identifies the browser when you return to our website. The process of storing a cookie file is also referred to as 'setting a cookie'. Cookies can be set both by the website itself and by external web services. Cookies are set by our website or by external web services in order to maintain the full functionality of our website, to improve usability, or to pursue the purpose specified with your consent. Cookie technology also enables us to recognise individual visitors by pseudonyms, e.g. individual or random IDs, so that we can offer more individualised services. Details are set out in the table below.

7.2 Legal Basis for Processing

Insofar as cookies are processed on the basis of consent pursuant to Art. 6(1)(a) GDPR, such consent also constitutes consent within the meaning of Section 25(1) TDDDG for the placement of the cookie on the user's terminal device. Where another legal basis under the GDPR is cited (e.g. for the performance of a contract or for the fulfilment of legal obligations), the storage or placement is based on an exception pursuant to Section 25(2) TDDDG. This applies where 'the sole purpose of storing information in the terminal equipment of the end user or of gaining access to information already stored in the terminal equipment of the end user is to carry out the transmission of a communication over a public electronic communications network', or where 'the storage of information in, or access to information already stored in, the terminal equipment of the subscriber or user is strictly necessary in order for the provider of an information society service explicitly requested by the subscriber or user to provide that service'. The applicable legal basis can be identified from the cookie table further below.

7.3 Purpose of Processing

Cookies are set by our website or by external web services in order to maintain the full functionality of our website, to improve usability, or to pursue the purpose specified with your consent. Cookie technology also enables us to recognise individual visitors by pseudonyms, e.g. individual or random IDs, so that we can offer more personalised services. Details are set out in the table below.

7.4 Duration of Storage

Our cookies are stored until they are deleted in your browser or, in the case of a session cookie, until the session has expired. Details are set out in the table below.

7.5 Right to Object and to Erasure

You may configure your browser according to your preferences to prevent cookies from being set generally. You may then decide on a case-by-case basis whether to accept cookies or reject them entirely. Cookies can be used for different purposes, e.g. to recognise that your device has previously connected to our website (persistent cookies) or to save recently viewed products (session cookies). If you have expressly given us permission to process your personal data, you may withdraw this consent at any time. Please note that the lawfulness of processing carried out prior to withdrawal on the basis of consent is not affected by the withdrawal.

This website uses cookies. We use cookies to personalise content and advertisements, to provide social media features and to analyse traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected in the context of your use of their services.

Cookies are small text files used by websites to make the user experience more efficient.

By law, we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we require your consent.

This website uses different types of cookies. Some cookies are placed by third-party services that appear on our pages.

You may change or withdraw your consent at any time via the cookie declaration on our website.

Please state your consent ID and date when contacting us with regard to your consent.

Your consent applies to the following domain: www.netfed.de

8. Data Security and Data Protection; Communication by Email

Your personal data is protected by technical and organisational measures during collection, storage and processing such that it is not accessible to third parties. We cannot guarantee complete data security during transmission to our IT systems in the case of unencrypted email communication. We therefore recommend encrypted communication or postal correspondence for information subject to a high level of confidentiality.

8.1 Automated Email Archiving

Scope of Processing

We expressly draw your attention to the fact that our mail system employs an automated archiving procedure. All incoming and outgoing emails are thereby digitally archived in a tamper-proof, auditable manner.

Legal Basis for Processing

Art. 6(1)(c) GDPR (legal obligation). The legal obligation consists of compliance with tax law and commercial law requirements (e.g. Sections 146, 147 of the German Fiscal Code (Abgabenordnung, AO); Sections 238, 257 of the German Commercial Code (Handelsgesetzbuch, HGB)).

Purpose of Processing

The purpose of archiving is to comply with tax law requirements (e.g. Sections 146, 147 AO – obligation to retain emails of tax-related relevance) and commercial law requirements (e.g. Sections 238, 257 HGB – obligation to archive business correspondence).

Duration of Storage

Our email communications are stored until the expiry of statutory tax law and commercial law retention periods. The retention period may be up to ten years.

Right to Object and to Erasure

8.2 Handling of Application Documents

For questions regarding our email archiving system, please contact our Data Protection Officer. We also wish to point out that we only accept application documents submitted in PDF format. Compressed files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and will not be delivered. Applications in Word format and other file formats will not be considered and will be deleted without being read. Please note that application documents submitted by unencrypted email may potentially be opened by third parties before they reach our IT systems. We assume that we may respond to unencrypted application emails in unencrypted form. If you do not wish this to be the case, please include a corresponding note in your application email.

9. Your Rights

9.1 Right of Access

You have the right to obtain confirmation as to whether we are processing personal data relating to you. Where this is the case, you have the right to access the information specified in Art. 15(1) GDPR, insofar as the rights and freedoms of other persons are not affected (cf. Art. 15(4) GDPR). We are also pleased to provide you with a copy of the data upon request.

9.2 Right to Rectification

Pursuant to Art. 16 GDPR, you have the right to have any inaccurate personal data relating to you (such as address, name, etc.) corrected by us at any time. You may also request that incomplete data stored by us be completed. Any necessary adjustment will be made without undue delay.

9.3 Right to Erasure

Pursuant to Art. 17(1) GDPR, you have the right to require us to erase personal data collected about you where:

the data are no longer necessary for the purposes for which they were collected or processed;
the legal basis for processing lapses without replacement upon withdrawal of your consent;
you have objected to processing and no overriding legitimate grounds for processing exist;
your data have been processed unlawfully;
erasure is required by a legal obligation, or collection took place pursuant to Art. 8(1) GDPR.

The right to erasure does not exist pursuant to Art. 17(3) GDPR where:

processing is necessary for exercising the right to freedom of expression and information;
your data were collected on the basis of a legal obligation;
processing is necessary for reasons of public interest;
the data are required for the establishment, exercise or defence of legal claims.

9.4 Right to Restriction of Processing

Pursuant to Art. 18(1) GDPR, you have the right in certain cases to request restriction of the processing of your personal data. This applies where:

you contest the accuracy of the personal data;
processing is unlawful and you oppose erasure;
the data are no longer needed for the processing purpose, but the collected data are required for the establishment, exercise or defence of legal claims;
an objection to processing pursuant to Art. 21(1) GDPR has been lodged and it is not yet clear which interests prevail.

9.5 Right to Withdraw Consent

Where you have given us express consent to the processing of your personal data (Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR), you may withdraw this consent at any time. Please note that the lawfulness of processing carried out on the basis of consent prior to its withdrawal is not affected thereby.

9.6 Right to Object

Pursuant to Art. 21 GDPR, you have the right to object at any time to the processing of personal data relating to you that is carried out on the basis of Art. 6(1)(f) GDPR (in the context of a legitimate interest). This right applies only where special circumstances exist that militate against the storage and processing of your data.

9.7 How to Exercise Your Rights

You may exercise your rights at any time by contacting us using the details below:

NetFederation GmbH
Sürther Hauptstraße 180 B
50999 Cologne
Germany
Email: postbox@net-federation.de
Tel.: +49 (0) 2236 / 3936-6
Fax: +49 (0) 2236 / 3936-84

9.8 Right to Data Portability

Pursuant to Art. 20 GDPR, you have the right to receive the personal data relating to you. We will provide the data in a structured, commonly used and machine-readable format. The data may be transmitted either directly to you or to a controller designated by you.

Upon request pursuant to Art. 20(1) GDPR, we will provide the following data:

Data collected on the basis of express consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR;
Data received from you pursuant to Art. 6(1)(b) GDPR in the context of existing contracts;
Data processed within the context of an automated procedure.

We will transmit personal data directly to a controller of your choosing insofar as this is technically feasible. Please note that, pursuant to Art. 20(4) GDPR, we may not transmit data that would infringe upon the freedoms and rights of other persons.

9.9 Right to Lodge a Complaint with a Supervisory Authority (Art. 77(1) GDPR)

If you suspect that your data are being processed unlawfully on our website, you may at any time seek judicial resolution of the matter. You also have recourse to any other legal remedies available. Independently of these options, pursuant to Art. 77(1) GDPR you have the right to lodge a complaint with a supervisory authority. The right to lodge a complaint under Art. 77 GDPR is available to you in the EU Member State of your habitual residence, your place of work and/or the place of the alleged infringement, meaning you may choose the supervisory authority from among those located in the places listed above. The supervisory authority with which the complaint is lodged will inform you of the status and results of your complaint, including the possibility of judicial remedy pursuant to Art. 78 GDPR.