Privacy Policy

We appreciate your visit to our website obseed.me and your interest in our company.

The protection of your personal data, such as date of birth, name, phone number, address etc., is important to us.

The purpose of this privacy policy is to inform you about the processing of your personal data that we collect during your visit to our site. Our data protection practices comply with the legal regulations of the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR). The following privacy policy serves to fulfill the information obligations from the FADP and GDPR. These can be found, for example, in Art. 8 et seq. FADP and Art. 13 et seq. GDPR.

Owner and Controller

The owner or controller within the meaning of Art. 3 lit. i FADP or Art. 4 No. 7 GDPR is the entity that alone or jointly with others determines the purposes and means of processing personal data. The controller according to Art. 4 No. 7 GDPR is also the recipient of personal data within the meaning of Art. 4 No. 9 GDPR. Any third-party recipient will be separately identified.

With regard to our website, the owner or controller is:

obseed GmbH
Rossbergstrasse 30
8310 Kemptthal
Switzerland
Email: info@obseed.me
Tel.: +41 79 400 66 50

Website Provision and Log File Creation

With each visit to our website, our system automatically collects data and information from the accessing device (e.g., computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

(1) Information about browser type and version used;
(2) Operating system of the accessing device;
(3) Hostname of the accessing computer;
(4) IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user's system reached our website (referrer tracking);
(8) Message whether the access was successful;
(9) Amount of data transferred

This data is stored in our system's log files. This data is not stored together with personal data of specific users, so individual site visitors cannot be identified.

Legal Basis for Processing Personal Data

The processing of personal data is carried out according to the principle of lawfulness (Art. 4 FADP) and the principle of good faith (Art. 2 Swiss Civil Code) as well as Art. 6(1)(f) GDPR (legitimate interest).

Purpose of Data Processing

The temporary (automated) storage of data is necessary for the operation of a website visit to enable delivery of the website. The storage and processing of personal data is also done to maintain the compatibility of our website for all visitors and to combat abuse and eliminate disruptions. For this purpose, it is necessary to log the technical data of the accessing computer to respond as early as possible to display errors, attacks on our IT systems, and/or functionality errors of our website. The data also serves us to optimize the website and to generally ensure the security of our information technology systems.

Duration of Storage

The aforementioned technical data is deleted as soon as it is no longer needed to ensure the website's compatibility for all visitors, but no later than 3 months after accessing our website.

Right to Object and Delete

You can object to the processing at any time according to Art. 21 GDPR and request deletion of the data according to Art. 17 GDPR. You can find information about your rights and how to exercise them in the lower section of this privacy policy.

Special Website Functions

Our site offers you various functions, during the use of which personal data is collected, processed, and stored by us. Below we explain what happens with this data:

Contact Form(s)

• What personal data is collected and to what extent is it processed?

  The data you enter into our contact forms that you have provided in the input fields of the contact form.

• Legal bases for processing personal data

  The processing of personal data is carried out according to the principle of lawfulness (Art. 4 FADP) and the principle of good faith (Art. 2 Swiss Civil Code) as well as Art. 6 Para. 1 lit. a GDPR (consent through clear affirmative action or behavior).

• Purpose of data processing

  We will only use the data collected through our contact form(s) for processing the specific contact request submitted through the contact form. Please note that to fulfill your contact request, we may also send emails to the provided address. This serves the purpose of allowing you to receive confirmation that your request has been correctly forwarded to us. However, sending this confirmation email is not mandatory for us and only serves for your information.

• Duration of storage

  After processing your request, the collected data will be deleted immediately, unless legal retention periods exist.

• Right to object and delete

  You can object to the processing at any time according to Art. 21 GDPR and request deletion of the data according to Art. 17 GDPR. You can find information about your rights and how to exercise them in the lower section of this privacy policy.

• Necessity of providing personal data

  The use of contact forms is voluntary. You are not obligated to contact us through the contact form and can also use other contact methods provided on our website. If you wish to use our contact form, you must fill out the fields marked as required. If you do not fill out the necessary information in the contact form, you will either be unable to submit the request or we will be unable to process your request due to lack of information.

Login Area / Registration

• Scope of processing personal data and collected personal data

  The registration and login data you have entered or that has been provided to you.

• Legal bases for processing personal data

  The processing of personal data is carried out according to the principle of lawfulness (Art. 4 FADP) and the principle of good faith (Art. 2 Swiss Civil Code) as well as Art. 6 Para. 1 lit. b GDPR (implementation of (pre-)contractual measures).

• Purpose of data processing

  You have the option to use a separate login area on our website. To verify your authorization to access the protected area or protected documents, you must enter your login data (email or username and password) in the corresponding form. If needed, we can send you your login data or the option to reset your password via email upon request.

• Duration of storage

  The collected data will be stored for as long as you maintain a user account with us.

• Right to object and delete

  You can object to the processing at any time according to Art. 21 GDPR and request deletion of the data according to Art. 17 GDPR. You can find information about your rights and how to exercise them in the lower section of this privacy policy.

• Necessity of providing personal data

  Certain pages and their contents are not publicly accessible. Through the login area on our site, certain users can gain access to the protected area. The use of content protected by the login area is not possible without entering personal data. If you wish to use our login area, you must fill out the fields marked as required (username and password). Entering the data requires the existence of a user account. Login is not possible if the data you enter is incorrect. If the data is entered incorrectly or not at all, the protected area cannot be used. However, the rest of the site remains usable without login.

Newsletter Registration Form

• What personal data is collected and to what extent is it processed?

  Through the newsletter registration on our website, we receive the email address you entered in the registration field and, if applicable, additional contact information if you provide it through the newsletter registration form.

• Legal bases for processing personal data

  The processing of personal data is carried out according to the principle of lawfulness (Art. 4 FADP) and the principle of good faith (Art. 2 Swiss Civil Code) as well as Art. 6 Para. 1 lit. a GDPR (consent through clear affirmative action or behavior).

• Purpose of data processing

  The data collected through our newsletter registration form is used exclusively for sending our newsletter, in which we inform you about all our services and news. After registration, we will send you a confirmation email containing a link that you must click to complete your newsletter registration (Double-Opt-In).

• Duration of storage

  You can unsubscribe from our newsletter at any time by clicking the unsubscribe link included in every newsletter. Your data will be deleted immediately after unsubscribing, unless legal retention periods exist. Similarly, your data will be deleted immediately in case of an incomplete registration. We reserve the right to delete without stating reasons and without prior or subsequent notification.

• Right to object and delete

  You can object to the processing at any time according to Art. 21 GDPR and request deletion of the data according to Art. 17 GDPR. You can find information about your rights and how to exercise them in the lower section of this privacy policy.

• Necessity of providing personal data

  If you wish to use our newsletter service, you must fill out the fields marked as required and confirm your email address by clicking the Double-Opt-In link. The information for newsletter registration is necessary to make use of the newsletter service. The information is used exclusively for sending our newsletter. If you do not fill out the required fields, we cannot provide you with our newsletter service.

• Google Analytics

  • Scope of Personal Data Processing

    On our site, we use the web tracking service of Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: http://www.google.com/ (hereinafter: Google Analytics). As part of web tracking, Google Analytics uses cookies that are stored on your computer and enable analysis of your use of our website and browsing behavior (so-called tracking). We conduct this analysis based on Google Analytics' tracking service to continuously optimize our internet offering and improve its availability. When using our website, data, particularly your IP address and your user activities, are transmitted to servers of Google Ireland Limited. We conduct this analysis based on Google's tracking service to continuously optimize our internet offering and improve its availability. We also need web tracking for security reasons. Through web tracking, we can monitor if third parties are attacking our website. Through the information from the web tracker, we can take effective countermeasures and protect the personal data we process from these cyber attacks. Through the activation of IP anonymization within the Google Analytics tracking code of this website, your IP address is anonymized by Google Analytics before transmission. This website uses a Google Analytics tracking code that has been extended with the operator gat._anonymizeIp(); to enable only anonymized collection of IP addresses (so-called IP masking).

  • Legal Basis for Processing Personal Data

    The legal basis for data processing is your consent in our notice banner regarding the use of cookies and web tracking (consent through clear affirmative action or behavior) according to Art. 13 Para. 1 FADP or Art. 6 Para. 1 lit. a GDPR.

  • Purpose of Data Processing

    On our behalf, Google will use this information to evaluate your visit to this website, compile reports about website activities, and provide other services related to website and internet usage to us. We also need web tracking for security reasons. Through web tracking, we can monitor if third parties are attacking our website. Through the information from the web tracker, we can take effective countermeasures and protect the personal data we process from these cyber attacks.

  • Duration of Storage

    Google will store the data relevant for providing the web tracking service for as long as necessary to fulfill the booked web service. Data collection and storage occurs anonymously. If personal references should exist, the data will be deleted immediately, unless they are subject to legal retention obligations. In any case, deletion occurs after the expiration of the retention obligation.

  • Right to Object and Delete

    You can prevent the collection and transfer of personal data to Google (particularly your IP address) and the processing of this data by Google by disabling the execution of script code in your browser or activating the "Do Not Track" setting in your browser. You can also prevent the collection of data generated by the Google cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=en). You can find Google's security and privacy principles at https://policies.google.com/privacy.

• Google Tag Manager

  • What personal data is collected and to what extent is it processed?

    On our site, we use the Google Tag Manager service provided by Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: http://www.google.com/ (hereinafter: Google Tag Manager). Google Tag Manager provides a technical platform to execute and collectively manage other web services and web tracking programs through so-called "tags". In this context, Google Tag Manager stores cookies on your computer and analyzes your browsing behavior (known as "tracking") when web tracking tools are executed through Google Tag Manager. The data sent by individual tags integrated in Google Tag Manager are consolidated, stored, and processed by Google Tag Manager under a unified user interface. All integrated "tags" are listed separately in this privacy policy. More information about data protection for tools integrated in Google Tag Manager can be found in the respective section of this privacy policy. When using our website with active integration of Google Tag Manager tags, data, particularly your IP address and your user activities, are transmitted to servers of Google Ireland Limited. Regarding web services integrated through Google Tag Manager, the regulations in the respective section of this privacy policy apply. The tracking tools used in Google Tag Manager ensure through IP anonymization of the source code that the IP address is anonymized by Google Tag Manager before transmission. This enables Google Tag Manager to only collect anonymized IP addresses (so-called IP masking).

  • Legal bases for processing personal data

    The legal basis for data processing is your consent according to Art. 13 Para. 1 FADP or Art. 6 Para. 1 lit. a GDPR in our notice banner regarding the use of cookies and web tracking (consent through clear affirmative action or behavior).

  • Purpose of data processing

    On our behalf, Google will use the information collected through Google Tag Manager to evaluate your visit to this website, compile reports about website activities, and provide other services related to website and internet usage to us.

  • Duration of storage

    Google will store the data relevant for Google Tag Manager's functionality for as long as necessary to fulfill the booked web service. Data collection and storage occurs anonymously. If personal references should exist, the data will be deleted immediately, unless they are subject to legal retention obligations. In any case, deletion occurs after the expiration of the retention obligation.

  • Right to object and delete

    You can prevent the collection and transfer of personal data to Google (particularly your IP address) and the processing of this data by Google by disabling the execution of script code in your browser, installing a script blocker in your browser, or activating the "Do Not Track" setting in your browser. You can also prevent the collection of data generated by the Google cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link http://tools.google.com/dlpage/gaoptout?hl=en. You can find Google's security and privacy principles at https://policies.google.com/privacy.

• Gstatic

  On our site, we use the Gstatic service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: http://www.google.com/. The processing takes place in secure third countries according to the assessment of Swiss authorities. You can find the list of countries approved by Switzerland at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. Regarding the transfer of personal data to the USA, there is an adequacy decision for the EU-US Data Privacy Framework by the EU Commission pursuant to Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service operator is certified under the DPF, ensuring that the usual GDPR protection level applies to the transfer.

  The legal basis for the transfer of personal data is your consent according to Art. 4 Para. 5 FADP or Art. 13 Para. 2 FADP and Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.

  Gstatic is a background service used by Google to retrieve static content, reduce bandwidth usage, and preload required catalog files. The service particularly loads background data for Google Fonts and Google Maps.

  As part of the data processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. You can view the certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

  You can revoke your consent at any time. You can find more information about revoking your consent either in the consent itself or at the end of this privacy policy.

  For more information about how the transferred data is handled, please refer to the provider's privacy policy at https://policies.google.com/privacy.

  The provider offers an additional opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=en.

Einbindung externer Webservices und Bearbeitung von Daten ausserhalb der EU

Auf unserer Internetseite verwenden wir aktive Inhalte von externen Anbietern, sog. Webservices. Durch Aufruf unserer Internetseite erhalten diese externen Anbieter ggf. personenbezogene Informationen über Ihren Besuch auf unserer Internetseite. Hierbei ist ggf. eine Bearbeitung von Daten ausserhalb der Schweiz und der EU möglich. Sie können dies verhindern, indem Sie ein entsprechendes Browser-Plugin installieren oder das Ausführen von Scripten in Ihrem Browser deaktivieren. Hierdurch kann es zu Funktionseinschränkungen auf Internetseiten kommen, die Sie besuchen.

Wir verwenden folgende externe Webservices:

• Google Cloud APIs

  On our site, we use the Google Cloud APIs service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: http://www.google.com/. The processing takes place in secure third countries according to the assessment of Swiss authorities. You can find the list of countries approved by Switzerland at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. Regarding the transfer of personal data to the USA, there is an adequacy decision for the EU-US Data Privacy Framework by the EU Commission pursuant to Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service operator is certified under the DPF, ensuring that the usual GDPR protection level applies to the transfer.

  The legal basis for the transfer of personal data is your consent according to Art. 4 Para. 5 FADP or Art. 13 Para. 2 FADP and Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.

  We use Google APIs to load additional Google services on our website. Google APIs are a collection of interfaces for communication between various Google services that are used on your website. The service is particularly used for displaying Google Fonts and providing Google Maps functionality.

  For the processing itself, the service or we collect the following data: IP address

  When the service is actively enabled on our website, our website establishes a connection to the servers of Google Ireland Limited and transfers the required data. As part of the order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services to provide background services for the display and data processing of Google-provided services. This may also involve data transfer to Google services such as Google Cloud, Google Maps, Google Ads, and Google Fonts in accordance with Google's privacy policy under Google's data protection responsibility. You can view the certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

  You can revoke your consent at any time. You can find more information about revoking your consent either in the consent itself or at the end of this privacy policy.

  For more information about how the transferred data is handled, please refer to the provider's privacy policy at https://policies.google.com/privacy.

  The provider offers an additional opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=en.

• Google Fonts

  We use the Google Fonts service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: http://www.google.com/. According to Swiss authorities, the processing takes place in secure third countries. You can find Switzerland's list of countries at the following link: https://www.edoeb.admin.ch/edoeb/de/home/datenschutz/handel-und-wirtschaft/uebermittlung-ins-ausland.html. Personal data is also transferred to the USA. Regarding the transfer of personal data to the USA, there is an adequacy decision for the EU-US Data Privacy Framework by the EU Commission pursuant to Art. 45 GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service operator is certified under the DPF, ensuring that the usual GDPR protection level applies to the transfer.

  The legal basis for the transfer of personal data is your consent according to Art. 4 Para. 5 FADP or Art. 13 Para. 2 FADP and Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have given on our website.

  We use the Google Fonts service to incorporate attractive fonts on our site, allowing us to display our website in a visually enhanced version. The service may also be used on our website when other Google services that require Google Fonts are loaded. This is the case, for example, if our website uses Google services that require Google Fonts for execution.

  For the processing itself, the service or we collect the following data: font data, IP address of the site visitor, statistics about font usage, and other data from Google services related to our website.

  When the service is actively enabled on our website, our website establishes a connection to the servers of Google Ireland Limited and transfers the required data. As part of the order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services to provide background services for the display and data processing of Google-provided services. This may also involve data transfer to Google services such as Google APIs, Google Cloud, and Google Ads in accordance with Google's privacy policy. You can view the certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

  You can revoke your consent at any time. You can find more information about revoking your consent either in the consent itself or at the end of this privacy policy.

  For more information about how the transferred data is handled, please refer to the provider's privacy policy at https://policies.google.com/privacy.

  The provider offers an additional opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=en.

Data Security and Privacy, Email Communication

Your personal data is protected through technical and organizational measures during collection, storage, and processing so that it is not accessible to third parties. For unencrypted email communication, we cannot guarantee complete data security during transmission to our IT systems, so we recommend encrypted communication or postal mail for information requiring high confidentiality.

Duration of Data Storage and Rights of the Data Subject

Duration of Storage

We store personal data only to the extent and for as long as necessary to fulfill the purposes for which the personal data was collected, we have a legitimate overriding interest in retention, or we are legally obligated to do so.

Right to Information

You have the right to request confirmation of whether we process personal data about you. If this is the case, you have the right to information about the data specified in Art. 8 et seq. FADP or Art. 15(1) GDPR, unless access is denied, restricted, or delayed by the data controller (cf. Art. 9 f. FADP or Art. 15(4) GDPR). We will also gladly provide you with a copy of your data.

Right to Rectification

According to Art. 5(2) FADP or Art. 16 GDPR, you have the right to have any incorrect personal data (such as address, name, etc.) stored by us corrected at any time. You can also request completion of your stored data at any time. Any corresponding adjustment will be made immediately.

Right to Erasure

According to Art. 17(1) GDPR, you have the right to have your collected personal data erased if:

• the data is no longer needed;
• the legal basis for processing has been eliminated due to withdrawal of your consent;
• there are no longer legitimate grounds for processing;
• your data has been processed unlawfully;
• a legal obligation requires erasure.

This right does not exist according to Art. 17(3) GDPR if:

• processing is necessary for exercising the right to freedom of expression and information;
• your data was collected based on a legal obligation;
• processing is necessary for reasons of public interest;
• the data is necessary for establishing, exercising, or defending legal claims.

Right to Restriction of Processing

According to Art. 18(1) GDPR, you have the right in certain cases to request restriction of the processing of your personal data.

This is the case when:

• you contest the accuracy of the personal data;
• the processing is unlawful and you oppose erasure;
• the data is no longer needed for processing purposes but the collected data serves to establish, exercise, or defend legal claims;
• you have objected to processing pursuant to Art. 21(1) GDPR and it is unclear which interests prevail.

Right of Withdrawal

If you have given us explicit consent to process your personal data (Art. 4 Para. 5 FADP and Art. 13 Para. 2 lit. a FADP; Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR), you can withdraw this consent at any time. Please note that the lawfulness of processing based on the consent before its withdrawal remains unaffected. Data that we are legally required to retain will be deleted after the retention period expires.

Right to Object

According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you which is based on Art. 6 Para. 1 lit. f GDPR (legitimate interest). If you have given us explicit consent to process your personal data (Art. 4 Para. 5 FADP and Art. 13 Para. 2 lit. a FADP), you can withdraw this consent at any time. Please note that the lawfulness of processing based on consent before its withdrawal remains unaffected. This right only applies if there are special circumstances that speak against the storage and processing. Data that we are legally required to retain will be deleted after the retention period expires.

How to Exercise Your Rights

You can exercise your rights at any time by contacting us using the contact details below:

obseed GmbH
Rossbergstrasse 30
8310 Kemptthal
Switzerland
Email: info@obseed.me
Tel.: +41 79 400 66 50

Right to Data Portability

According to Art. 20 GDPR, you have the right to receive the personal data concerning you. We will provide the data in a structured, commonly used and machine-readable format. The data can be transmitted either to you or to a controller designated by you.

Upon request, we will provide you with the following data:

• Data collected based on consent (Art. 13 Para. 1 FADP and Art. 6 Para. 1 lit. a GDPR);
• Data we have received from you under existing contracts (Art. 13 Para. 2 lit. a FADP and Art. 6 Para. 1 lit. b GDPR and Art. 9 Para. 2 lit. a GDPR);
• Data that has been processed as part of an automated procedure.

We will transfer the personal data directly to a controller of your choice where technically feasible. Please note that according to Art. 9 Para. 1 lit. b FADP or Art. 20 Para. 4 GDPR, we may not or only partially transfer data that interferes with overriding interests of third parties.

Communications to the FDPIC and Right to Legal Action

According to Art. 29 FADP, data subjects have the right to lodge a complaint with a competent supervisory authority for data protection. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

Further information can be found in the FDPIC's contact form: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact/contact-form.html

If you suspect that your data is being processed unlawfully on our site, you can initiate legal proceedings according to Art. 15 FADP. This usually requires filing a lawsuit under Art. 28 et seq. of the Swiss Civil Code. If you are affected by data processing by federal bodies, the procedure is governed by Art. 25 FADP. In this case, you can also contact the FDPIC (see reference to the contact form above).

Right to Lodge a Complaint with a Supervisory Authority According to Art. 77 Para. 1 GDPR

If you suspect that your data is being processed unlawfully on our site, you can of course initiate legal proceedings at any time. In addition, any other legal options are available to you. Independent of this, according to Art. 77 Para. 1 GDPR, you have the option to contact a supervisory authority. The right to lodge a complaint under Art. 77 GDPR applies in the EU member state of your residence, workplace and/or the place of the alleged infringement, i.e., you can choose the supervisory authority you contact from the above-mentioned locations. The supervisory authority with which the complaint has been lodged will inform you of the status and results of your submission, including the possibility of a judicial remedy according to Art. 78 GDPR.