- Changer Feinfisch
- Data protection
Data protection
Name and address of the person responsible
The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
Wechsler Feinfisch GmbH
Wild way 6
50374 Erftstadt
Deutschland
Telephone: 02235 – 79917 – 0
Fax: 02235 – 79917 – 30
Web: webshop.wechsler.eu
E-Mail: bestellung@wechsler.eu
General information on data processing
Scope of processing of personal data
In principle, we only collect and use the personal data of our users, insofar as this is necessary to provide a functional website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies in such cases, in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by statutory provisions.
Legal basis for processing personal data
Insofar as we obtain the consent of the person concerned for the processing of personal data, dent Art. 6 Abs. 1 lit. a EU General Data Protection Regulation (GDPR) as a legal basis.
When processing personal data, those for the performance of a contract, whose contracting party is the data subject, is required, dent Art. 6 Abs. 1 lit. b GDPR as the legal basis. This also applies to processing operations, which are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfill a legal obligation, to which our company is subject, dent Art. 6 Abs. 1 lit. c GDPR as the legal basis.
In the case, that vital interests of the data subject or another natural person require the processing of personal data, dent Art. 6 Abs. 1 lit. d GDPR as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests prevail, Fundamental rights and fundamental freedoms of the data subject do not have the first interest, so dient Art. 6 Abs. 1 lit. f GDPR as the legal basis for processing.
Data Erasure and Storage Duration
The personal data of the person concerned will be deleted or blocked, as soon as the purpose of storage no longer applies. Storage can also take place, if this is required by the European or national legislature in EU regulations, laws or other regulations, to which the person responsible is subject, was provided. The data will then also be blocked or deleted, if a storage period prescribed by the standards mentioned expires, unless, that there is a need for further storage of the data for the conclusion or fulfillment of a contract.
Provision of the website and creation of log files
Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected here:
- Information about the browser type and version used
- The user's operating system
- The user's internet service provider
- The IP address of the user
- Date and time of access
- Websites, from which the user's system reaches our website
- Websites, which are called up by the user's system via our website
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 Abs. 1 lit. f DSGVO.
purpose of data processing
The temporary storage of the IP address by the system is necessary, to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
Storage in log files takes place, to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Our legitimate interest in data processing according to Art. 6 Abs. 1 lit. f DSGVO.
Duration of storage
The data will be deleted, as soon as they are no longer required to achieve the purpose for which they were collected. This is the case in the case of the collection of data for the provision of the website, when the session is over.
If the data is stored in log files, this is at the latest 60 days the case. Storage beyond this is possible. In this case, the IP addresses of the users will be deleted or alienated, so that it is no longer possible to assign the calling client.
contradiction- and possibility of elimination
The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
Use of cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are text files, which in the Internet browser or. be stored by the Internet browser on the user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic character string, which enables the browser to be clearly identified when the website is called up again.
We use cookies, to make our website more user-friendly. Some elements of our website require it, that the calling browser can also be identified after a page change.
The following data is stored and transmitted in the cookies:
1. Session-ID
We also use cookies on our website, which enable an analysis of the surfing behavior of the users.
The following data can be transmitted in this way:
A list of the data collected follows. These can be, for example:
1 . Marker for the cookie banner
b) Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 Abs. 1 lit. f DSGVO.
c) purpose of data processing
The purpose of using technically necessary cookies is, simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is required, that the browser is recognized even after a page change.
We require cookies for the following applications:
1. Session-ID
2. Marker for the cookie banner
The user data collected by technically necessary cookies are not used to create user profiles.
d) Duration of storage, contradiction- and possibility of elimination
Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. Cookies will be disabled for our website, it is possible that not all functions of the website can be used to their full extent.
Hosting
We host the content of our website with the following provider:
DomainFactory
The provider is DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 München (hereinafter DomainFactory). When you visit our website, DomainFactory collects various log files including your IP addresses.
Details can be found in DomainFactory's data protection declaration: https://www.df.eu/de/datenschutz/.
DomainFactory is used on the basis of Art. 6 Abs. 1 lit. f DSGVO. We have a legitimate interest in our website being displayed as reliably as possible. If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TTDSG, as far as the consent to the storage of cookies or the access to information in the end device of the user (z. B. for device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
product inquiries
Description and scope of data processing
On our website we offer users the opportunity, to obtain information about specific products by providing personal data or. ask us about them. The data is entered into an input mask and transmitted to us and stored. A transfer of data to third parties does not take place. The following data is collected as part of the inquiry process:
– Name
– E-Mail
– phone number
– Address
– Remarks
The following data is also stored at the time of registration:
1. The IP address of the user
2. Date and time of registration
As part of the inquiry process, the user's consent to the processing of this data is obtained.
Legal basis for data processing
For the processing of the data, if the user has given his consent, Art. 6 Abs. 1 lit. to DSGVO.
purpose of data processing
The user's request is necessary for the transmission of certain content or information about our products.
Registration of the user is required to fulfill a contract with the user or to carry out pre-contractual measures.
Duration of storage
The data will be deleted, as soon as they are no longer required to achieve the purpose for which they were collected.
contradiction- and possibility of elimination
Users have the option at any time, cancel the registration. You can have the data stored about you changed at any time.
your objection or. the request to delete the stored data is possible, in which a corresponding change request is sent to our e-mail address. The address can be found in this document – at the top.
All personal data, that were saved in the course of the request, will be deleted in this case.
Contact form and email contact
Description and scope of data processing
There is a contact form on our website, which can be used for electronic contact. If a user takes advantage of this opportunity, the data entered in the input mask will be transmitted to us and saved. This data is:
– Name
– Business
– Address
– Telephone
– E-Mail
– News
At the time the message is sent, the following data is also stored:
1. The IP address of the user
2. Date and time of registration
Your consent will be obtained for the processing of the data during the sending process and reference will be made to this data protection declaration.
Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the e-mail will be stored.
In this context, the data will not be passed on to third parties. The data will only be used to process the conversation.
Legal basis for data processing
If the user has given his consent, the legal basis for processing the data is Art. 6 Abs. 1 lit. to DSGVO.
Legal basis for processing the data, which are transmitted in the course of sending an e-mail, is kind. 6 Abs. 1 lit. f DSGVO. Is the e-mail contact aimed at concluding a contract?, the additional legal basis for the processing is Art. 6 Abs. 1 lit. b DSGVO.
purpose of data processing
The processing of the personal data from the input mask serves us solely to process the contact. If contact is made by e-mail, this is also the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process are used for this purpose, to prevent misuse of the contact form and to ensure the security of our information technology systems.
Duration of storage
The data will be deleted, as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those, which were sent by email, is this the case then, when the respective conversation with the user has ended. The conversation is then over, if it can be inferred from the circumstances, that the matter in question has been finally clarified.
The additional personal data collected during the sending process will be deleted at the latest after a period of 60 days deleted.
contradiction- and possibility of elimination
The user has the option at any time, to revoke his consent to the processing of personal data. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
your objection or. the request to delete the stored data is possible, in which a corresponding change request is sent to our e-mail address. The address can be found in this document – at the top.
All personal data, which were saved in the course of making contact, will be deleted in this case.
External Services, Tools und PlugIns
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called. “Cookies”, text files, which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. The Google tracking codes on this website use the "_anonymizeIp()“, IP addresses are therefore shortened beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, to exclude a direct personal reference.
Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website, to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly; however, we draw your attention to this, that in this case you may not be able to use all functions of this website to their full extent.
Furthermore, this site uses Google Analytics reports on demographic characteristics, in which data from interest-based advertising from Google and visitor data from third parties (z. B. Alter, gender and interests) be used. This data cannot be traced back to a specific person and can be deactivated at any time via the ad settings.
You can object to the collection and storage of data at any time with effect for the future. By clicking the "Deactivate" button, tracking is completely prevented. So that the objection is made permanent, your browser must accept cookies.
To disable Google Analytics on this computer for “www.jordans-gartenbau.de” click here:
Disable analytics on this computer
Alternatively, you can object to data collection by using a Google browser plugin. Google Analytics cookies are stored on the basis of Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in analyzing user behavior, to optimize both its website and its advertising.
Alternatively, you can do so by clicking on the following link Disable Google Analytics on this computer.
Order data processing with Google
We have concluded an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google Web Fonts
When Google services are activated, this page uses so-called web fonts for the uniform display of fonts, provided by Google. When you call up a page, your browser loads the required web fonts into your browser cache, to display text and fonts correctly.
For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge of this, that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offering. This represents a legitimate interest within the meaning of Art. 6 Abs. 1 lit. f DSGVO give.
If your browser does not support web fonts, a standard font is used by your computer.
For more information about Google Web Fonts, see developers.google.com/fonts/faq and in Google's privacy policy: www.google.com/policies/privacy/.
You can find more information on handling user data in Google's data protection declaration:
www.google.de/intl/de/policies/privacy/.
Google Maps
This site uses the Google Maps map service via an API. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. It is necessary to use the functions of Google Maps, save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. Google Maps is used in the interest of an attractive presentation of our online offers and to make it easier to find the places we have indicated on the website. This represents a legitimate interest within the meaning of Art. 6 Abs. 1 lit. f DSGVO give. You can find more information on handling user data in Google's data protection declaration: www.google.de/intl/de/policies/privacy/ .
YouTube with enhanced privacy
This website includes videos from the YouTube website. The website operator is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the extended data protection mode. This mode causes according to YouTube, that YouTube does not store any information about visitors to this website, before they watch the video. However, the extended data protection mode does not necessarily exclude the transfer of data to YouTube partners. So YouTube provides – regardless, whether you are watching a video - connects to the Google DoubleClick network.
As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This is communicated to the YouTube server, which of our pages you have visited. If you are logged into your YouTube account, enable YouTube, Assign your surfing behavior directly to your personal profile. You can prevent this, by logging out of your YouTube- log out.
Furthermore, YouTube can store various cookies on your end device after starting a video or comparable recognition technologies (z. B. Device-Fingerprinting) insert. In this way, YouTube can receive information about visitors to this website. This information is. a. used, to collect video statistics, improve user-friendliness and prevent fraud attempts.
Friendly Captcha
We use Friendly Captcha (in the following "Friendly Captcha") on this site. The provider is Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Deutschland.
With Friendly Captcha should be checked, whether the data entry on this website (z. B. in a contact form) done by a human or by an automated program. For this purpose, Friendly Captcha analyzes the behavior of the website visitor based on various characteristics. Friendly Captcha evaluates various information for analysis (z. B. anonymized IP address, Referrer, visiting hours etc). For more information, see: https://friendlycaptcha.com/legal/privacy-end-users/.
The data is stored and analyzed on the basis of Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in this, to protect its web offers from abusive automated spying and from SPAM. If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TTDSG, as far as the consent to the storage of cookies or the access to information in the end device of the user (z. B. Device-Fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
Wordfence
We have integrated Wordfence on this website. Provider is Defiant Inc., Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter "Wordfence").
Wordfence is used to protect our website from unwanted access or malicious cyber attacks. For this purpose, our website establishes a permanent connection to the Wordfence servers, so that Wordfence can compare its databases with the access made to our website and, if necessary,. can block.
Wordfence is used on the basis of Art. 6 Abs. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its website from cyber attacks as effectively as possible. If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TTDSG, as far as the consent to the storage of cookies or the access to information in the end device of the user (z. B. Device-Fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here:
https://www.wordfence.com/help/general-data-protection-regulation/.
rights of the data subject
The following list includes all rights of those affected under the GDPR. right, that are not relevant to your own website, do not have to be named. In this respect, the list can be shortened.
Will your personal data be processed?, are you affected i.S.d. GDPR and you have the following rights vis-à-vis the person responsible:
right of providing information
You can request confirmation of this from the person responsible, whether personal data, that concern you, are processed by us.
Is there such processing, you can request information from the person responsible for the following information:
(1) the purposes, for which the personal data are processed;
(2) the categories of personal data, which are processed;
(3) the recipients or. the categories of recipients, to whom the personal data concerning you has been disclosed or will be disclosed;
(4) the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, Criteria for determining the storage period;
(5) the existence of a right to correction or deletion of personal data concerning you, a right to restriction of processing by the person responsible or a right to object to this processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) all available information about the origin of the data, if the personal data are not collected from the data subject;
(8) the existence of automated decision-making including profiling in accordance with Art. 22 Abs. 1 and 4 DSGVO and - at least in these cases - meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject.
You have the right, request information about it, whether the personal data concerning you are transferred to a third country or to an international organization. In this context, you can request, about the appropriate guarantees acc. Art. 46 GDPR to be informed in connection with the transfer.
When data processing is too scientific, historical or statistical research purposes:
This right to information can be limited in this respect, than it is expected to achieve the research- or statistical purposes impossible or seriously impairs and the limitation for the fulfillment of the research- or for statistical purposes.
Right to Rectification
You have a right to correction and/or completion from the person responsible, provided the processed personal data, that concern you, are incorrect or incomplete. The person responsible must make the correction immediately.
When data processing too scientific, historical or statistical research purposes:
Your right to correction can be limited in this respect, than it is expected to achieve the research- or statistical purposes impossible or seriously impairs and the limitation for the fulfillment of the research- or for statistical purposes.
Right to restriction of processing
Under the following conditions, you can request the restriction of the processing of your personal data:
(1) if you dispute the accuracy of the personal data concerning you for a period of time, which allows the person responsible, verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
(3) the person responsible no longer needs the personal data for the purposes of the processing, However, you can assert this, exercise or defend legal claims, or
(4) if you object to the processing pursuant to Art. 21 Abs. 1 DSGVO have filed and is not yet certain, whether the legitimate reasons of the person responsible outweigh your reasons.
Has the processing of your personal data been restricted?, These data - apart from their storage - may only be used with your consent or for assertion, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the restriction of processing according to the above. Conditions restricted, you will be informed by the person responsible before the restriction is lifted.
When data processing too scientific, historical or statistical research purposes:
Your right to restriction of processing can be limited in this respect, than it is expected to achieve the research- or statistical purposes impossible or seriously impairs and the limitation for the fulfillment of the research- or for statistical purposes.
Right to Erasure
Obligation to delete
You can request from the person responsible, that the personal data concerning you will be deleted immediately, and the person responsible is obliged, delete this data immediately, if one of the following reasons applies:
(1) The personal data concerning you are for the purposes, for which they were collected or otherwise processed, not necessary anymore.
(2) You revoke your consent, to which the processing acc. Art. 6 Abs. 1 lit. a or Art. 9 Abs. 2 lit. a DSGVO based, and there is no other legal basis for the processing.
(3) You lay acc. Art. 21 Abs. 1 DSGVO objection to the processing and there are no overriding legitimate reasons for the processing, or you lay acc. Art. 21 Abs. 2 DSGVO objection to the processing.
(4) The personal data concerning you have been processed unlawfully.
(5) The deletion of the personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States, to which the person responsible is subject.
(6) The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8 Abs. 1 GDPR raised.
information to third parties
Has the person responsible made the personal data concerning you public and is he/she acc. Art. 17 Abs. 1 DSGVO obliged to delete them, he takes appropriate measures, taking into account the available technology and the implementation costs, also of a technical nature, to those responsible for data processing, who process the personal data, to inform about it, that you, as the person concerned, have requested them to delete all links to this personal data or copies or replications of this personal data.
exceptions
The right to erasure does not exist, as far as the processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) to comply with a legal obligation, the processing according to Union or Member State law, to which the person responsible is subject, requires, or to perform a task, which is in the public interest or in the exercise of public authority, assigned to the person responsible;
(3) for reasons of public interest in the field of public health pursuant to Art. 9 Abs. 2 lit. h and i as well as Art. 9 Abs. 3 GDPR;
(4) for archival purposes in the public interest, scientific or historical research purposes or for statistical purposes acc. Art. 89 Abs. 1 GDPR, to the extent that under section a) said law is likely to render impossible or seriously impair the attainment of the objectives of this processing, or
(5) for assertion, exercise or defense of legal claims.
right to information
Do you have the right to rectification, Deletion or restriction of processing asserted against the person responsible, is this obliged, all recipients, to which the personal data concerning you have been disclosed, communicate this correction or deletion of the data or restriction of processing, unless, this proves to be impossible or involves a disproportionate effort.
You have the right vis-à-vis the person responsible, to be informed about these recipients.
Right to data portability
you have the right, the personal data concerning you, that you have provided to the person responsible, in a structured, common and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance from the person responsible, to which the personal data was provided, to transmit, provided
(1) the processing is based on consent acc. Art. 6 Abs. 1 lit. a GDPR or Art. 9 Abs. 2 lit. a GDPR or on a contract acc. Art. 6 Abs. 1 lit. b GDPR is based and
(2) the processing is carried out using automated procedures.
In exercising this right, you also have the right, to obtain, that the personal data concerning you are transmitted directly from one person responsible to another person responsible, as far as this is technically feasible. The freedoms and rights of other people must not be impaired by this.
The right to data portability does not apply to the processing of personal data, required to perform a task, which is in the public interest or in the exercise of public authority, assigned to the person responsible.
Right to object
you have the right, for reasons, arising from their particular situation, against the processing of your personal data at any time, which due to Art. 6 Abs. 1 lit. e or f GDPR, to object; this also applies to profiling based on these provisions.
The person responsible no longer processes the personal data concerning you, unless, he can prove compelling legitimate grounds for the processing, your interests, Rights and freedoms prevail, or the processing is for the purpose of assertion, exercise or defense of legal claims.
Will the personal data concerning you be processed?, to do direct mail, you have the right, to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling, to the extent that it is related to such direct mail.
Object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the opportunity, in connection with the use of information society services - notwithstanding Directive 2002/58/EC - to exercise your right of objection by means of automated procedures, where technical specifications are used.
When data processing too scientific, historical or statistical research purposes:
You have the right too, for reasons, arising from your particular situation, when processing your personal data, for scientific or historical research purposes or for statistical purposes acc. Art. 89 Abs. 1 GDPR takes place, to contradict this.
Your right to object can be limited in this respect, than it is expected to achieve the research- or statistical purposes impossible or seriously impairs and the limitation for the fulfillment of the research- or for statistical purposes.
Right to revoke the declaration of consent under data protection law
you have the right, To revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.
Automated individual decision-making including profiling
you have the right, not to be subject to a decision based solely on automated processing, including profiling, which has legal effect on you or significantly affects you in a similar way. This does not apply, if the decision
(1) is necessary for the conclusion or performance of a contract between you and the person responsible,
(2) due to Union or Member State legislation, to which the person responsible is subject, is permissible and these legal provisions contain appropriate measures to protect your rights and freedoms and your legitimate interests or
(3) takes place with your express consent.
However, these decisions must not be based on special categories of personal data pursuant to Art. 9 Abs. 1 GDPR are based, unless Art. 9 Abs. 2 lit. a or g DSGVO applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
Regarding the in (1) and (3) cases mentioned, the person responsible takes appropriate measures, to protect the rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the person responsible, heard to state their own point of view and to challenge the decision.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their place of residence, their place of work or the location of the alleged violation, to, if you think so, that the processing of your personal data violates the GDPR.
The Regulatory Authority, to which the complaint was lodged, informs the complainant about the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.