Privacy Policy

CIDA GmbH
Rotwiesenstr. 26 A
70599 Stuttgart
‍
team@cidadesign.com

CIDA Invest GmbH
Chief Officer Corporate Data Protection
Rotwiesenstr. 26 A
70599 Stuttgart
‍
team@cidadesign.com

We appreciate your visit to our website and your interest in our offerings. The protection of your personal data is important to us. In this privacy policy, we explain how we collect your personal data, what we do with it, for what purposes and on what legal basis, and what rights and claims you have associated with it. Our privacy policy for the use of our website does not apply to your activities on the websites of social networks or other providers that you can access via links on our website. Please inform yourself about the privacy policies of these providers on their websites.

a. We store your IP address and the name of your Internet service provider for seven days for security reasons, in particular to prevent and detect attacks on our websites or attempted fraud.

b. We only store personal data if you provide it to us voluntarily, e.g., as part of a registration, contact form, survey, competition, or to execute a contract, and even then only to the extent that we are permitted to do so based on your consent or in accordance with applicable law (further information on this can be found below in the "Legal Basis for Processing" section).

c. You are not legally or contractually obliged to provide your personal data. However, certain functions of our websites may depend on the availability of personal data. If you do not provide personal data in these cases, this may result in functions being unavailable or only available to a limited extent.

a. We use the personal data collected when you visit our website to operate it in the most convenient way for you and to protect our IT systems from attacks and other illegal activities.

b. If you provide us with additional personal data, e.g., as part of a registration, contact form, survey, competition, or to execute a contract, we will use this data for the stated purposes, for customer management, and—if necessary—for processing and invoicing any business transactions, in each case to the extent necessary for this purpose.

We implement technical and organizational security measures to protect your data managed by us against manipulation, loss, destruction, and access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

a. If you have given us your consent to process your personal data, this consent is the legal basis for the processing (Art. 6 (1) (a) GDPR).

b. For the processing of personal data for the purpose of initiating or fulfilling a contract with you, Art. 6 (1) (b) GDPR is the legal basis.

c. If the processing of your personal data is necessary to fulfill our legal obligations (e.g. data retention), we are obliged to do so according to Art. 6 (1) (c) GDPR.

d. In addition, we process personal data to protect our legitimate interests and the legitimate interests of third parties in accordance with Art. 6 (1) (f) GDPR. Maintaining the functionality of our IT systems, marketing our own and third-party products and services, and the legally required documentation of business contacts are such legitimate interests.

Your IP address and the name of your Internet service provider, which we store solely for security reasons, will be deleted after seven days. Otherwise, we will delete your personal data as soon as the purpose for which we collected and processed the data no longer applies. Beyond this point, data will only be stored if required by laws, regulations, or other legal provisions of the European Union or a member state of the European Union to which we are subject.

a. As a data subject, you have the right to information (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), and the right to data portability (Art. 20 GDPR).

b. If you have consented to the processing of your personal data by us, you have the right to withdraw your consent at any time. This does not affect the legality of the processing of your personal data before the withdrawal. We may further process this data based on another applicable legal basis, e.g., to fulfill our legal obligations (see section "Legal Basis for Processing").

c. Right of objection: You have the right to object at any time to the processing of your personal data pursuant to Art. 6 (1) (e) GDPR (data processing in the public interest) or Art. 6 (1) (f) GDPR (data processing based on a balance of interests) for reasons arising from your particular situation. If you object, we will only process your personal data if we can demonstrate compelling legitimate grounds that outweigh your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
‍
d. We ask you to address your claims or declarations, if possible, to the following contact address: team@cidadesign.com.

e. If you believe that the processing of your personal data violates legal provisions, you have the right to lodge a complaint with a competent data protection supervisory authority (Article 77 GDPR).


Last updated: 23 October 2025