Teamhome
PRIVACY POLICY
We take the protection of your data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy. When you download this app, register or log in to the app, and use the app, various types of personal data are processed. Personal data is data that can be used to identify you personally. This Privacy Policy explains what data we collect and how we use it. It also explains how and for what purpose this is done. JAKO AG is referred to below as JAKO.
Privacy Policy
Terms of Use
DATA CONTROLLER AND DATA PROTECTION OFFICER
The data controller is the organization to which you belong and which uses this app for its administrative purposes.For more information or to contact your organization’s data protection officer, please contact your organization directly or refer to your organization’s privacy policy.
Role of JAKO
JAKO, Amtstraße 82, 74673 Mulfingen, makes this app available to independent users as part of a data processing arrangement. In this context, JAKO acts as a service provider strictly bound by the instructions of the data controller with regard to the processing of personal data. This is governed by a data processing agreement pursuant to Article 28 of the GDPR between the data controller and JAKO.
If you are a data subject and wish to obtain information about the processing of your data or have questions regarding the processing of your data, please contact the entity responsible for the use of the app.
PROVISION OF THE APP
Information Collected When Downloading the App
When you download the app, certain required information is transmitted to the app store you have selected (Google Play Store, Apple App Store). In particular, the following information may be processed: your username, email address, account number, the time of the download, payment information, and your device’s unique identifier. We have no control over this data collection and are not responsible for it. The contract is concluded with the respective store provider and is handled in accordance with that provider’s terms and conditions of business and use, as well as its privacy policy. In connection with your use of the stores, we process only the reviews you publish about our app and related data, and we receive anonymous statistics from the stores - for example, regarding download numbers, uninstalls, and crashes.
Data Processing for App Provision and Hosting
Description of Data Processing and Purpose
When you access the app, it is technically necessary for data to be transmitted to the web server. The following data is regularly generated during an active connection:
- IP address of the requesting device (router or mobile device),
- Date and time of the request,
- URL or path requested,
- HTTP method of the request,
- Access status or HTTP status code,
- Size of the request and response or amount of data transferred,
- User-Agent of the requesting device, which, depending on the configuration, may provide information about the browser, operating system, and device used,
- Referrer, if transmitted,
- HTTP protocol information,
- Latency or duration of the request.
The listed data is stored in log files and analyzed as needed.
The purpose of data processing and the legitimate interest are to ensure a smooth connection and the technically error-free provision of the app, as well as to detect, prevent, and track attacks. The log files are used to evaluate system stability, functionality, and security. The processing of this data is strictly necessary to make the app available.
Legal Basis for Data Processing
The legal basis for the processing of the data is Article 6(1)(f) of the GDPR.
Recipients
As part of data processing, your data is transferred to the following categories of recipients who are involved in data processing to achieve the stated purposes:
- Hosting and maintenance service providers: Jamit Labs GmbH, Haid-und-NeuütStr. 18, 76131 Karlsruhe; Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- Service providers for operating the online store (“Teamshop”): dc AG, Von-Linde-Str. 11, 95326 Kulmbach
In the event of irregularities or attacks, the data may also be disclosed in individual cases to:
- Information security consultants and IT forensic experts
- Attorneys,
- Investigative authorities,
- Courts.
Data Processing in Third Countries
In this context, data is generally not transferred to a third country outside the EU or the EEA, as data is stored only at locations within the EU. In the event that, for example, data must be processed in a third country in individual cases—such as in the context of support services—standard contractual clauses have been concluded with the service providers that require compliance with European data protection standards, or certification under the EU-U.S. Data Privacy Framework is in place. Further information may be requested from the data controller.
Retention Period
For technical security reasons, particularly to defend against attempted attacks on our web server, we store this data temporarily. The data is deleted after 30 days at the latest.
In individual cases, such as attacks or attempted attacks, the data may be retained for a longer period if necessary, to the extent required until the conclusion of investigative or legal proceedings or for the exercise of legal claims.
In anonymized form, the data from the log files may be further stored and processed for statistical purposes.
ACCESS TO AND STORAGE OF INFORMATION ON END DEVICES
Using our app may result in access to information (e.g., IP address) or the storage of information (e.g., cookies) on your end devices. Such access or storage may involve further processing of personal data as defined by the GDPR.In cases where such access to or storage of information is absolutely necessary for the technically flawless provision of our services, this is done on the basis of Section 25(1), sentence 1, and (2), no. 2 of the TDDDG.
In cases where such a process serves other purposes (e.g., tailoring our app to your needs), it is carried out on the basis of Section 25(1) of the TDDDG only with your consent pursuant to Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect. The processing of your personal data is subject to the provisions of the GDPR and the Federal Data Protection Act (BDSG).
For further information on the processing of your personal data and the relevant legal bases in this context, please refer to the following sections on the specific processing activities on our website.
USER PROFILE
Registration and Login
Description of Data Processing and PurposeWhen you register as a user of the app, your login credentials (username and password) as well as your first and last name are processed to create a user profile and to ensure that only authorized individuals can log in during subsequent sessions. In addition, your phone number is collected to enable two-factor authentication and make the login process even more secure. To verify your registration, your email address is also requested, and an email is sent to you to confirm your registration.
A single sign-on option is also provided. This means that your app login credentials can be used to log in to other JAKO offerings and services (e.g., the online store) by having a central provider handle the identity verification during login. The service provider intension GmbH is used for this purpose.
To ensure that no unauthorized persons gain access to the protected area and to detect, investigate, and prevent future misuse of login credentials, we store the following data in log files:
- Username and password
- IP address of the router or device from which access occurred
- Time of access
- Subpages accessed within the restricted-access area
- Failed login attempts
- Features used within the restricted-access area
The log files are reviewed and analyzed on a regular basis or as needed to identify any anomalies.
Cookies and similar technologies, in particular JavaScript, may be used to store and read data on your device. For further details, see “Data Processing in Connection with Cookies and Similar Technologies” above.
The purpose of the data processing and the legitimate interest involved is to detect, investigate, and prevent the misuse of your login credentials.
You can add additional information to your user profile; however, providing your first and last name, gender, date of birth, street and house number, ZIP code, city, and country is mandatory, while providing your email address, phone number, profile picture, clothing size, initials, and jersey number is optional. Information stored in the user profile is processed within the scope of the app’s individual features (see below) for the respective purposes.
Legal Basis for Data Processing
The data entered during registration or login is processed to fulfill a contract or to take steps prior to entering into a contract (Art. 6(1)(b) GDPR). If data is processed to detect, investigate, and prevent future misuse of access credentials, this processing is based on the legitimate interest (Art. 6(1), sentence 1, lit. f GDPR) in ensuring secure app usage and the protection of information processed within the app. To the extent that cookies and similar technologies are used in connection with the integration of the service, or to the extent that data is stored on or retrieved from your device by the service, this is done in accordance with Section 25(2)(2) of the TDDDG.
Recipients
As part of data processing, your data is transferred to the following categories of recipients or service providers that we engage in the course of data processing to achieve the stated purposes:
- Hosting and maintenance service provider: Jamit Labs GmbH, Haid-und-Neu-Str. 18, 76131 Karlsruhe
- Service provider for online store operation (“Teamshop”): dc AG, Von-Linde-Str. 11, 95326 Kulmbach
- Service provider for single sign-on: intension GmbH, Zeppelinstr. 41, 73760 Ostfildern
In the event of suspicious activity or attacks, the data may also be disclosed in individual cases to:
Information security consultants and IT forensic experts
Attorneys,
Investigative authorities,
Courts.
Data Processing in Third Countries
In this context, no data is transferred to a third country outside the EU or the EEA.
Retention Period
The data is processed for as long as necessary to achieve the stated purposes, up to a maximum of 90 days. In individual cases, such as attacks or attempted attacks, the data may be retained for a longer period if necessary to complete investigative or legal proceedings or to exercise legal claims.
Creating and Managing the User Profile
Description of Data Processing and PurposeWhen using the app, you can create and manage a personalized user profile. In this context, the following personal data, for example, may be processed:
- First and last name
- Gender
- Date of birth
- Street and house number
- Zip code, city, country
- Email address, phone number
- Photo • Clothing size and shoe size
- Sport
- Membership in a department/group or role within the club
- Licenses such as referee or coach licenses
The specific data is entered via the input form when creating your user profile. Some fields are marked as required if they are necessary for creating your user profile. Optional information may be provided on a voluntary basis and will only be processed with your consent.
This data is processed to enable you to use the app in a personalized manner, to make information about you available to other app users—such as members of your club—and to facilitate club-related processes, such as managing your membership through the app.
Legal Basis for Data Processing
The processing of your data in connection with profile creation and management is based on Article 6(1)(b) of the GDPR. Voluntary information is processed based on your voluntary consent in accordance with Article 6(1)(a) of the GDPR.
Recipients
- Internal departments of your club responsible for managing and supporting user profiles, as well as other app users to whom your profile has been shared
- Service providers for hosting and maintenance: Jamit Labs GmbH, Haid-und-Neu-Str. 18, 76131 Karlsruhe
- Service provider for operating the web shop (“Teamshop”): dc AG, Von-Linde-Str. 11, 95326 Kulmbach
Data Processing in Third Countries
In this context, no data is transferred to a third country outside the EU or the EEA.
Retention Period
Your profile data will be stored for as long as your user account remains active. After you delete your profile, your data will be deleted within 30 days, provided there are no legal retention requirements to the contrary.
MEMBERSHIP ADMINISTRATION AND ASSOCIATION ORGANIZATION
Application for Membership and Changes to Membership
Description of Data Processing and PurposeWe provide an online form for digitally applying for or changing association membership.
When you submit an application for membership or a change to your membership via the online form, the data you provide will be processed for the purpose of receiving, reviewing, and processing the application, as well as—if the membership application is accepted—for establishing and administering the membership. The required member data includes:
- First and last name
- Address • Email address
- Membership number
- Phone number
- Bank account information
- Information about the legal representative
- Association-specific membership fields
Legal Basis for Data Processing
Data processing is carried out to implement pre-contractual measures or to fulfill a contract (Art. 6(1)(b) GDPR). If data is processed to facilitate the online signature process, the data processing is based on the legitimate interest in ensuring an efficient, secure, and verifiable execution of the signature process (Art. 6(1)(f) GDPR). To the extent that processing is necessary to comply with legal obligations (e.g., tax retention requirements), it is based on Article 6(1), sentence 1, subparagraph (c) of the GDPR.
Recipients
As part of data processing, your data is transferred to the following categories of recipients who are involved in data processing to achieve the stated purposes:
- Internal recipients within the association who are entrusted with processing the application
- Hosting and maintenance service providers: Jamit Labs GmbH, Haid-und-Neu-Str. 18, 76131 Karlsruhe
Data Processing in Third Countries
No data is transferred to a third country outside the EU/EEA in this context.
Retention Period
The personal data collected about you in connection with your membership application will be stored in the app for as long as your user account exists. If you or another authorized app user deletes your user account, your data will be deleted within 30 days, provided that no statutory retention obligations prevent this.
Payment Processing
Description of Data Processing and PurposeTo enable the processing of payments to the club, the payment service “Stripe” is integrated into the app. Stripe enables cashless payment transactions to be processed via the app and can be used for payments to the club (e.g., membership dues or payments for sports classes). To use the payment system, users must provide their banking information—typically in the form of credit card or checking account details.
For every transaction made via Stripe, the user’s payment data is processed by the service provider. The data processed includes
- first and last name, • address,
- E-Mail-Adresse,
- IP address,
- phone number,
- credit card number,
- account balance, transaction amounts, and the credit limit of an overdraft facility.
Legal Basis for Data Processing
The legal basis for data processing for the purpose of processing payments is the performance of a contract pursuant to Article 6(1)(b) of the GDPR.
Recipients
When using the service, the data collected via the app is transferred to the following recipients:
- Stripe Payments Europe, Limited (SPEL), 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.
We generally have no influence over further data processing by the third-party provider.
For more information on Stripe’s handling of personal data, please visit https://stripe.com/de/privacy.
Data Processing in Third Countries
When using the “Stripe” service, your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA), in particular in the United States by Stripe, Inc.
For data transfers to the United States, there is an adequacy decision by the European Commission pursuant to Article 45(1) of the GDPR with respect to companies certified under the EU-U.S. Data Privacy Framework.
Die Stripe, Inc. ist nach dem EU-U.S. Data Privacy Framework zertifiziert und verpflichtet sich demnach auf die Einhaltung angemessener Datenschutzstandards, was unter folgendem Link mit eingesehen werden kann: Participant Search (dataprivacyframework.gov).
Retention Period
Your data will be stored for as long as necessary to process the payment transaction and, thereafter, if applicable, in accordance with statutory retention requirements.
Contacting Us via the Contact Form
Description of Data Processing and PurposeIf you use the contact form to send inquiries to your club, the information you provide in the inquiry form—including the personal data you enter there—will be processed to handle your inquiry and in case of follow-up questions. Providing an email address is required to establish contact; providing your first and last name and your phone number is voluntary.
Legal Basis for Data Processing
The legal basis for processing your data is the legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) of the GDPR, as well as, where applicable, Art. 6(1)(b) of the GDPR, provided that your inquiry is aimed at entering into a contract.
Recipients
As part of data processing, your data is transferred to the following categories of recipients who are involved in data processing to achieve the stated purposes:
- Internal recipients within the association who are responsible for handling inquiries
- Hosting and maintenance service providers: Jamit Labs GmbH, Haid-und-Neu-Str. 18, 76131 Karlsruhe
Data Processing in Third Countries
No data is transferred to a third country outside the EU/EEA in this context.
Retention Period
Your data will be deleted within […] after the process is closed, provided that no statutory retention periods preclude this.
Push Notifications and Mailings, Information for Club Members
Description of Data Processing and Purpose As part of the app’s use, the relevant individuals within your club as well as the authorized retailer can inform club members about current club news, events, dates, promotions, and other relevant matters. This is done via push notifications, email newsletters, and by publishing information within the app. The following personal data is processed for this purpose:
- Email address
- User ID or internal member ID
- First and last name,
- Club affiliation,
- Membership status,
- Role or function within the club, e.g., member, coach, guest, administrator, or other role
- Team, group, or department affiliation,
- Communication preferences, e.g., consent or objection regarding push notifications, email notifications, or specific categories of information,
- Push tokens or device or app instance tokens for the delivery of push notifications,
- Device and platform information, e.g., operating system, app version, and language setting, to the extent necessary for the delivery or display of notifications,
- Content of the message or email,
- Time of sending,
- Delivery status, e.g., successfully delivered, failed, or rejected,
- Time of creation, modification, or publication of a club message, event, or appointment,
- Recipient group or distribution list, e.g., all club members, specific teams, groups, roles, or departments,
- Information about courses and appointments in which the user participates,
- Technical log data related to sending and retrieval, in particular IP address, time of access, user agent, URL or function accessed, HTTP status code, and amount of data transferred.
The data is processed to ensure that club members receive information smoothly via the app and to technically facilitate the sending or provision of information.
With your consent, your data may also be shared with authorized retailers, who may send you promotional offers and information via push notifications.
Legal Basis for Data Processing
The processing of your data for the purpose of sending push notifications and mailings is based on your consent pursuant to Article 6(1)(a) of the GDPR. The publication of general club information within the app is based on a legitimate interest pursuant to Article 6(1)(f) of the GDPR in effective club communication.
Recipients
As part of data processing, your data is transferred to the following categories of recipients who are involved in data processing to achieve the stated purposes:
- Internal departments of your club responsible for club communications
- Specialty retailers that supply your club with sporting goods and similar merchandise
- Hosting and maintenance service providers: Jamit Labs GmbH, Haid-und-NeuütStr. 18, 76131 Karlsruhe
Data Processing in Third Countries
In this context, no data is transferred to a third country outside the EU or the EEA.
Retention Period
Your data processed for the purpose of sending push notifications and email newsletters will be stored for the duration of your membership or until you revoke your consent. After you revoke your consent or terminate your membership, the data will be deleted within 30 days, provided that no statutory retention requirements prevent this.
PUBLICATION OF PHOTOS
Description of Data Processing and PurposeAs part of the association’s activities and for public relations purposes, photos of association members and events may be published in the app. The following data is used for this purpose:
- Photographs (portraits as well as images in which people are merely in the background)
- Name, club membership, position/role in the club
Legal Basis for Data Processing
The publication of photos is generally based on the explicit consent of the individuals depicted or, in the case of children, their legal guardians, in accordance with Article 6(1), sentence 1, subparagraph (a) of the GDPR. For photos in which individuals appear only incidentally (e.g., photos taken at events), publication may also be based on the association’s legitimate interest in reporting and public relations (Article 6(1), first sentence, letter f of the GDPR).
Recipients
As part of data processing, your data is transferred to the following categories of recipients who are involved in data processing to achieve the stated purposes:
- Internal departments of your association responsible for association communications
- Other app users who have access to your association’s publications
- Hosting and maintenance service providers: Jamit Labs GmbH, Haid-und-Neu-Str. 18, 76131 Karlsruhe
Data Processing in Third Countries
No data is transferred to a third country outside the EU/EEA in this context.
Retention Period
Photos are stored until you revoke your consent or for the duration of the respective club communication and are subsequently deleted from the app.
Booking of Sports Facilities, Classes, etc.
Description of Data Processing and Purpose
The app allows for the digital booking of sports facilities, sports classes, and similar offerings. In this context, the following personal data is processed:
- First and last name, as well as membership number, of the person making the booking
- Contact information (email address or phone number) of the person making the booking
- Booking details: date, time, booked sports facility, or booking unit
- Payment information, if applicable, in the case of a paid booking: bank account details
Data processing is carried out to enable the efficient booking, management, and organization of sports facilities and booking units via the app. This also includes communication related to facility bookings (e.g., booking confirmations, changes, and cancellations) and, if applicable, payment processing.
Legal Basis for Data Processing
Processing is carried out on the basis of Article 6(1)(b) of the GDPR (performance of a contract or implementation of pre-contractual measures). To the extent that processing is necessary to comply with legal obligations (e.g., tax retention requirements), it is carried out on the basis of Article 6(1)(c) of the GDPR.
Recipients
As part of data processing, your data is transferred to the following categories of recipients who are involved in data processing to achieve the stated purposes:
- Internal departments of your club responsible for court management
- Payment service providers or banks
- Hosting and maintenance service providers: Jamit Labs GmbH, Haid-und-Neu-Str. 18, 76131 Karlsruhe
Data Processing in Third Countries
No data is transferred to a third country outside the EU/EEA in this context.
Retention Period
Booking data is stored in the app until the date of the booking and is then deleted. Payment data is stored in the app until the payment is processed and, if necessary, until the expiration of statutory retention periods. Payment data is stored until the payment is processed and, if necessary, until the expiration of statutory retention periods.
Terminankündigung und -verwaltung
Description of Data Processing and Purpose
The app can be used to announce club events, such as club parties or meetings, and to manage attendance via the RSVP function. For this purpose, the respective event administrator will have access to your first and last name as well as your RSVP status. Legal Basis for Data Processing Data processing is based on a legitimate interest pursuant to Article 6(1)(f) of the GDPR in the efficient and smooth organization of the club’s events. To the extent that events serve to fulfill contractual obligations, data processing is based on Article 6(1)(b) of the GDPR.
Recipients
As part of data processing, your data is transferred to the following categories of recipients who are involved in data processing to achieve the stated purposes:
- The event administrator as well as internal departments of your association responsible for organizing events
- Hosting and maintenance service providers: Jamit Labs GmbH, Haid-und-NeuütStr. 18, 76131 Karlsruhe
Data Processing in Third Countries
In this context, no data is transferred to a third country outside the EU or the EEA.
Retention Period
Data is stored in the app until the date of the appointment and is then deleted.
PROCESSING OF CHILDREN’S DATA
If children under the age of 16 use the club app with the features described in this Privacy Policy, the associated data processing is based on the consent of their legal guardians (Art. 6(1)(a), Art. 8 GDPR) to the club.Teamshop
Description of Data Processing and PurposeWithin the app, you can access JAKO’s “Teamshop” via a link. If the person in charge at your club places an order for sports equipment or club apparel for club members through the Teamshop, the following data regarding the relevant club members may be used for this purpose:
- First and last name
- Street
- House number
- Zip code
- City
- Email address
- Phone number
- Initials
- Clothing size
- Jersey number
Legal Basis for Data Processing
Processing is based on Article 6(1)(b) of the GDPR (performance of a contract).
Recipients
- As part of data processing, your data is transferred to the following categories of recipients who are involved in data processing to achieve the stated purposes:
- JAKO AG, Amtstraße 82, 74673
Data Processing in Third Countries
No data is transferred to a third country outside the EU/EEA in this context.
Retention Period
The data is used for the duration of the ordering process and is no longer accessible to the association once the ordering process is complete. If the data originates from your user profile, it will remain available there.
Further information on the processing of data belonging to the person placing the order and, if applicable, other individuals in connection with a purchase from JAKO can be found at https://www.jako.com/de-en/info/data-protection/.
DATA TRANSFER AND RECIPIENTS
Your personal data will not be transferred to third parties, except- if this is explicitly stated in the description of the respective data processing,
- if you have given your explicit consent pursuant to Article 6(1), sentence 1, subparagraph (a) of the GDPR,
- the disclosure is necessary pursuant to Article 6(1)(f) of the GDPR to assert, exercise, or defend legal claims, and there is no reason to believe that you have an overriding legitimate interest in preventing the disclosure of your data,
- in the event that there is a legal obligation to disclose the data pursuant to Article 6(1), sentence 1, subparagraph (c) of the GDPR, and
- to the extent that this is necessary pursuant to Article 6(1), sentence 1, subparagraph (b) of the GDPR for the performance of contractual relationships with you.
External service providers are used to provide this app and its features; where necessary, data processing agreements have been concluded with them in accordance with Article 28 of the GDPR.
RETENTION PERIOD FOR PERSONAL DATA
The retention period for personal data is determined by the applicable statutory retention periods (e.g., under commercial and tax law). Once the respective period has expired, the corresponding data is routinely deleted. If data is required for the performance of a contract or for entering into a contract, or if there is a legitimate interest in continued storage, the data will be deleted when it is no longer necessary for these purposes or when you have exercised your right of withdrawal or objection.YOUR RIGHTS
Below you will find information on the data subject rights that applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:The right, pursuant to Article 15 of the GDPR, to request information about your processed personal data. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right to lodge a complaint; the origin of your data, if it was not collected by us; as well as information regarding the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details.
The right, pursuant to Article 16 of the GDPR, to request without delay the rectification of inaccurate personal data or the completion of your personal data stored by the controller.
The right, pursuant to Article 17 of the GDPR, to request the erasure of your personal data stored by the controller, unless the processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.
The right, pursuant to Article 18 of the GDPR, to request the restriction of the processing of your personal data, provided that you contest the accuracy of the data, the processing is unlawful but you oppose its erasure, and the data is no longer needed, but you need it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR.
Das Recht, gemäß Art. 20 DSGVO deine personenbezogenen Daten, die du beim Verantwortlichen bereitgestellt hast, in einem strukturierten, gängigen und maschinenlesebaren Format zu erhalten oder die Übermittlung an einen anderen Verantwortlichen zu verlangen.
Das Recht, dich gemäß Art. 77 DSGVO bei einer Aufsichtsbehörde zu beschweren. In der Regel kannst du dich hierfür an die Aufsichtsbehörde des Bundeslandes des Sitzes des Verantwortlichen oder ggf. die deines üblichen Aufenthaltsortes oder Arbeitsplatzes wenden.
The right, pursuant to Article 20 of the GDPR, to receive your personal data that you have provided to the controller in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller.
Right to Object
If we process your personal data on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data, provided that such objection is based on reasons arising from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right to object without having to specify a particular situation.