Thank you for visiting our website at logibridgex.com and for your interest in our company.
The protection of your personal data, such as your date of birth, name, telephone number, address, etc., is of utmost importance to us.
The purpose of this privacy policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practices comply with the statutory regulations of the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR). The following privacy policy serves to fulfill the information obligations under the FADP and the GDPR. These can be found, for example, in Art. 19 et seq. of the FADP and Art. 13 et seq. of the GDPR.
According to Art. 5 lit. j FADP or Art. 4 No. 7 GDPR, the controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. The controller pursuant to Art. 4 No. 7 GDPR is also considered the recipient of the personal data within the meaning of Art. 4 No. 9 GDPR. Any potential third-party recipients are disclosed separately.
With regard to our website, the owner and responsible party is:
LogiBridgeX - Sole Proprietorship Alex. M. Geisenhainer - CHE-463.243.651
Ueberlandstrasse 18
8953 Dietikon
Switzerland
E-mail: info@logibridgex.ch
Phone: +41 44 774 11 01
Every time our website is accessed, our system automatically collects data and information from the device making the request (e.g., computer, smartphone, tablet, etc.).
(1) Information about the browser type and version used;
(2) The operating system of the accessing device;
(3) Host name of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of the server request;
(6) Websites and resources (images, files, other page contents) accessed on our website;
(7) Websites from which the user's system reached our website (referrer tracking);
(8) Notification of whether the request was successful;
(9) Volume of data transmitted
These data are stored in the log files of our system. These data are not stored together with personal data of a specific user, meaning that individual site visitors are not identified.
The processing of personal data is carried out in accordance with the principle of lawfulness (Art. 6 para. 1 FADP) and the requirement of good faith (Art. 6 para. 2 FADP or Art. 2 CC) as well as Art. 6 para. 1 lit. f GDPR (legitimate interest).
The temporary (automated) storage of data is required during a website visit to enable the delivery of the website. Furthermore, personal data is stored and processed to maintain the compatibility of our website for as many visitors as possible, as well as to prevent abuse and troubleshoot issues. To this end, it is necessary to log the technical data of the requesting computer in order to respond as early as possible to display errors, attacks on our IT systems, and/or malfunctions in the functionality of our website. In addition, the data is used to optimize the website and to generally ensure the security of our information technology systems.
The aforementioned technical data will be deleted as soon as it is no longer required to ensure website compatibility for all visitors, but no later than 3 months after accessing our website.
You may at any time request the restriction of processing pursuant to Art. 18 GDPR, object to processing pursuant to Art. 21 GDPR, or demand the rectification or erasure of your data pursuant to Art. 16 or Art. 17 GDPR, respectively. Information regarding your rights and how to exercise them can be found at the bottom of this privacy policy.
Our website offers various features that involve the collection, processing, and storage of personal data when used. Below, we explain what happens to this data:
The data you entered into our contact forms, which you provided in the input fields of the contact form.
The processing of personal data is carried out in accordance with the principle of lawfulness (Art. 6 para. 1 FADP) and the requirement of good faith (Art. 6 para. 2 FADP or Art. 2 CC) as well as Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR (consent by a clear affirmative action or behavior or explicit consent).
The data collected via our contact form(s) will be used exclusively to process the specific inquiry submitted through the form. Please note that to fulfill your inquiry, we may also send emails to the address provided. This is intended to provide you with confirmation that your request has been successfully transmitted to us. However, sending this confirmation email is not mandatory and serves solely for your information.
Following the processing of your request, the collected data will be deleted immediately, provided there are no statutory retention obligations to the contrary.
You may at any time request the restriction of processing pursuant to Art. 18 GDPR, object to processing pursuant to Art. 21 GDPR, or demand the rectification or erasure of your data pursuant to Art. 16 or Art. 17 GDPR, respectively. Information regarding your rights and how to exercise them can be found at the bottom of this privacy policy.
The use of the contact forms is entirely voluntary. You are under no obligation to contact us via the contact form and may instead use the alternative communication channels provided on our website. Should you wish to use our contact form, you must complete the fields marked as mandatory. If you fail to provide the necessary information in the contact form, you will either be unable to submit your request or we will be unable to process it due to insufficient details.
By signing up for the newsletter on our website, we receive the email address you entered in the registration field and, if applicable, further contact details provided you share them with us via the newsletter subscription form.
The processing of personal data is carried out in accordance with the principle of lawfulness (Art. 6 para. 1 FADP) and the principle of good faith (Art. 6 para. 2 FADP and Art. 2 CC), as well as Art. 6 para. 1 lit. a GDPR and Art. 9 para. 2 lit. a GDPR (consent given by a clear affirmative action or behavior, or explicit consent).
The data collected in our newsletter subscription form is used exclusively for sending out our newsletter, through which we provide updates on our services and company news. Following your registration, we will send you a confirmation email containing a link that you must click to complete the subscription process (double opt-in). By doing so, you consent to the processing of your data in accordance with Art. 6 para. 6 of the Swiss Data Protection Act (FADP).
You can unsubscribe from our newsletter at any time by clicking the unsubscribe link included in every newsletter. Your data will be deleted by us immediately after unsubscribing, provided there are no statutory retention obligations. Similarly, your data will be deleted immediately in the event that a registration is not completed. We reserve the right to delete data without stating reasons and without prior or subsequent notification.
You may at any time request the restriction of processing pursuant to Art. 18 GDPR, object to processing pursuant to Art. 21 GDPR, or demand the rectification or erasure of your data pursuant to Art. 16 or Art. 17 GDPR, respectively. Information regarding your rights and how to exercise them can be found at the bottom of this privacy policy.
To subscribe to our newsletter, please complete all mandatory fields and confirm your email address by clicking the double opt-in link. Providing this information is required to utilize our newsletter service. These details are used exclusively for sending our newsletters. If the mandatory fields are not completed, we will be unable to provide you with our newsletter service.
The data entered by you via our appointment booking form.
The processing of personal data is carried out in accordance with the principle of lawfulness (Art. 6 para. 1 FADP) and the requirement of good faith (Art. 6 para. 2 FADP and Art. 2 CC, respectively), as well as Art. 6 para. 1 lit. b GDPR (performance of [pre-]contractual measures).
The data collected via our appointment booking form will be used exclusively to process appointment requests submitted through the form.
Your appointment booking will be deleted by us immediately after a period of 12 months has elapsed since the scheduled date, provided there are no statutory retention obligations to the contrary. We reserve the right to delete the booking without stating reasons and without prior or subsequent notification.
You may at any time request the restriction of processing pursuant to Art. 18 GDPR, object to processing pursuant to Art. 21 GDPR, or demand the rectification or erasure of your data pursuant to Art. 16 or Art. 17 GDPR, respectively. Information regarding your rights and how to exercise them can be found at the bottom of this privacy policy.
The use of our appointment booking form is required if you wish to schedule an appointment with us online. To complete the online booking, you must provide certain mandatory information. If you do not fill in all mandatory fields completely, your appointment booking cannot be accepted or processed.
The processing of personal data is carried out in accordance with the principle of lawfulness (Art. 6 para. 1 FADP) and the principle of good faith (Art. 6 para. 2 FADP and Art. 2 CC, respectively).
The disclosure of information to third parties depends on the scope of the activities or offerings of our website and business model described below.
As a general rule, we retain your information only for as long as necessary and treat it with strict confidentiality. Exceptions to this include the transfer of personal data to debt collection agencies, public bodies and authorities, as well as private individuals who are entitled to such data under statutory provisions, court rulings, or official orders, as well as the transfer of data to authorities for the purpose of initiating legal proceedings or for law enforcement, should our legally protected rights be infringed.
When accessing this website or individual files on the website, we collect, process, and store the following data: IP address, website from which the file was retrieved, file name, date and time of retrieval, volume of data transferred, and notification of successful retrieval (so-called web log). We use this access data exclusively in a non-personalized form for the continuous improvement of our online presence and for statistical purposes.
The processing of any personal data is carried out in accordance with the principle of lawfulness (Art. 6 para. 1 FADP) and the requirement of good faith (Art. 6 para. 2 FADP and Art. 2 CC). Furthermore, we use the following web trackers to analyze visits to this website:
We use the Gstatic service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, email: on our website. support-deutschland@google.com, Website: https://www.google.com/.
The legal basis for the transmission of personal data is your consent granted on our website in accordance with Art. 6 para. 6 of the Swiss Data Protection Act (FADP) or Art. 31 para. 2 FADP, and in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR.
Gstatic is a background service used by Google to retrieve static content in order to reduce bandwidth usage and pre-load required resource files. Specifically, the service loads background data for Google Fonts and Google Maps.
As part of commissioned data processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You may revoke your consent at any time. Detailed information on how to revoke your consent can be found either alongside the consent mechanism itself or at the end of this privacy policy.
For further information regarding the handling of transmitted data, please refer to the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=en.
On our website, we use active content from external providers, so-called web services. By visiting our website, these external providers may receive personal information regarding your visit to our website. In this context, data processing outside of Switzerland and the EU may also occur. You can prevent this by installing an appropriate browser plugin or by disabling the execution of scripts in your browser. This may result in functional restrictions on websites you visit.
We use the following external web services:
We use the CleanTalk service provided by CleanTalk Inc., 711 S Carson Street, Suite 4, 89701 Carson City, United States, email: support@cleantalk.org, Website: https://cleantalk.org/#.
Sind solche Garantien nicht vorhanden, dürfen Ihre Daten nur bekanntgegeben werden, wenn Sie hierzu Ihre Einwilligung abgegeben haben, die Bekanntgabe in unmittelbarem Zusammenhang mit dem Abschluss oder der Abwicklung eines Vertrages steht, oder die Bekanntgabe im Rahmen der Durchsetzung von Ansprüchen vor Gerichten und Behörden oder zur Wahrung öffentlicher Interessen erforderlich ist. Die Übermittlung personenbezogener Daten erfolgt auch in die USA. Im Hinblick auf die Übermittlung personenbezogener Daten in die USA besteht ein Angemessenheitsbeschlusses zum EU-US Data Privacy Framework der EU Kommission im Sinne des Art. 45 DSGVO (nachfolgend: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). Der Betreiber des Dienstes ist im Rahmen des DPF zertifiziert, so dass für die Übermittlung das übliche Schutzniveau der DSGVO gilt.
In accordance with Art. 6 para. 1 lit. f GDPR, the legal basis for the transmission of personal data is our legitimate interest in the processing. Our legitimate interest lies in achieving the purpose described below.
This service is used to defend enterprise networks against spam bots and unsolicited emails. It is necessary to protect servers from overload caused by external attacks, thereby ensuring consistent accessibility for site visitors.
You can verify the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
Regarding the processing, you have the right to object as set out in Art. 21 GDPR. Further information can be found at the end of this privacy policy.
For further information regarding the handling of transmitted data, please refer to the provider's privacy policy at https://cleantalk.org/publicoffer#privacy.
We use the Google Cloud APIs service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, email: support-deutschland@google.com, Website: https://www.google.com/.
The legal basis for the transmission of personal data is your consent granted on our website in accordance with Art. 6 para. 6 of the Swiss Data Protection Act (FADP) or Art. 31 para. 2 FADP, and in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR.
We use Google APIs to load additional Google services on our website. Google APIs are a collection of interfaces for communication between the various Google services utilized on your website. This service is used in particular to render Google Fonts and to provide the Google Maps integration.
For processing purposes, the service provider or we collect the following data: IP address
If the service is active on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of data processing on behalf, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When utilizing the Google service on our website, Google may transmit and process information from other Google services to provide background services for the display and data processing of the services provided by Google. In this context, data may also be transmitted to the Google services Google Cloud, Google Maps, Google Ads, and Google Fonts in accordance with the Google Privacy Policy under the data protection responsibility of Google. You can verify the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You may revoke your consent at any time. Detailed information on how to revoke your consent can be found either alongside the consent mechanism itself or at the end of this privacy policy.
For further information regarding the handling of transmitted data, please refer to the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=en.
On our website, we use the Google Fonts service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; email: support-deutschland@google.com, Website: https://www.google.com/.
The legal basis for the transmission of personal data is your consent granted on our website in accordance with Art. 6 para. 6 of the Swiss Data Protection Act (FADP) or Art. 31 para. 2 FADP, and in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR.
We use the Google Fonts service to integrate attractive fonts into our website and present it to you in a visually enhanced version. This service may also be used when other Google services are loaded on our website that require Google Fonts to function. This is the case, for example, when our website utilizes Google services that strictly depend on Google Fonts for execution.
For processing purposes, the service or we collect the following data: Data regarding fonts, the IP address of the site visitor, statistics on font usage, and other data from Google services related to our website.
If the service is active on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of data processing agreements, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Apis, Google Cloud, and Google Ads in accordance with Google's Privacy Policy. You can view the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You may revoke your consent at any time. Detailed information on how to revoke your consent can be found either alongside the consent mechanism itself or at the end of this privacy policy.
For further information regarding the handling of transmitted data, please refer to the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=en.
We use the Legally ok service provided by Legally ok GmbH, Schochenmühlestrasse 6, 6340 Baar, Switzerland, email: hello@legally-ok.com, website: https://www.legally-ok.com/ on our website. Data processing is carried out exclusively in Switzerland in accordance with the applicable data protection legislation there. Data processing also takes place in a third country outside the EU. An adequacy decision by the Commission exists for this third country. You can find an up-to-date list of all adequacy decisions on the European Commission website (link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de).
The legal basis for the transmission and processing is Article 31, Paragraph 1 of the FADP and Article 6, Paragraph 1, Letter c of the GDPR. The use of this service assists us in fulfilling our legal obligations.
This service is used to dynamically load the content of our legal texts on our website. Through this integration, the most current legal texts are loaded automatically. Depending on the setup, this integration may also load additional technical modules related to the legal texts or legally required elements.
You can find information regarding your rights concerning data processing at the end of this privacy policy.
Further information regarding the handling of transferred data can be found in the provider's privacy policy at https://www.legally-ok.com/datenschutz/.
We use the Vimeo service provided by Vimeo, Inc., 555 West 18th Street, 10011 New York, United States, email: Privacy@vimeo.com, Website: http://www.vimeo.com/.
Sind solche Garantien nicht vorhanden, dürfen Ihre Daten nur bekanntgegeben werden, wenn Sie hierzu Ihre Einwilligung abgegeben haben, die Bekanntgabe in unmittelbarem Zusammenhang mit dem Abschluss oder der Abwicklung eines Vertrages steht, oder die Bekanntgabe im Rahmen der Durchsetzung von Ansprüchen vor Gerichten und Behörden oder zur Wahrung öffentlicher Interessen erforderlich ist. Die Übermittlung personenbezogener Daten erfolgt auch in die USA. Im Hinblick auf die Übermittlung personenbezogener Daten in die USA besteht ein Angemessenheitsbeschlusses zum EU-US Data Privacy Framework der EU Kommission im Sinne des Art. 45 DSGVO (nachfolgend: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). Der Betreiber des Dienstes ist im Rahmen des DPF zertifiziert, so dass für die Übermittlung das übliche Schutzniveau der DSGVO gilt.
The legal basis for the transmission of personal data is your consent granted on our website in accordance with Art. 6 para. 6 of the Swiss Data Protection Act (FADP) or Art. 31 para. 2 FADP, and in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR.
Videos from the Vimeo platform are embedded on our website via the Vimeo service.
You can verify the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You may revoke your consent at any time. Detailed information on how to revoke your consent can be found either alongside the consent mechanism itself or at the end of this privacy policy.
For more information on the handling of transferred data, please refer to the provider's privacy policy at https://vimeo.com/privacy.
The provider also offers an opt-out option at https://vimeo.com/privacy.
We use the WordPress service provided by Automattic Inc., 60 29th Street #343, CA 94110 San Francisco, United States, email: help@wordpress.com, Website: https://automattic.com/.
Sind solche Garantien nicht vorhanden, dürfen Ihre Daten nur bekanntgegeben werden, wenn Sie hierzu Ihre Einwilligung abgegeben haben, die Bekanntgabe in unmittelbarem Zusammenhang mit dem Abschluss oder der Abwicklung eines Vertrages steht, oder die Bekanntgabe im Rahmen der Durchsetzung von Ansprüchen vor Gerichten und Behörden oder zur Wahrung öffentlicher Interessen erforderlich ist. Die Übermittlung personenbezogener Daten erfolgt auch in die USA. Im Hinblick auf die Übermittlung personenbezogener Daten in die USA besteht ein Angemessenheitsbeschlusses zum EU-US Data Privacy Framework der EU Kommission im Sinne des Art. 45 DSGVO (nachfolgend: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). Der Betreiber des Dienstes ist im Rahmen des DPF zertifiziert, so dass für die Übermittlung das übliche Schutzniveau der DSGVO gilt.
In accordance with Art. 6 para. 1 lit. f GDPR, the legal basis for the transmission of personal data is our legitimate interest in the processing. Our legitimate interest lies in achieving the purpose described below.
WordPress is the underlying technical system used to operate our website. We require this integration in order to display our website to you and to manage its content.
You can verify the provider's certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
Regarding the processing, you have the right to object as set out in Art. 21 GDPR. Further information can be found at the end of this privacy policy.
For further information regarding the handling of transmitted data, please refer to the provider's privacy policy at https://automattic.com/privacy/.
Your personal data is protected during collection, storage, and processing through technical and organizational measures to ensure it remains inaccessible to third parties. In the case of unencrypted email communication, complete data security during transmission to our IT systems cannot be guaranteed by us; therefore, for highly confidential information, we recommend encrypted communication or postal mail.
We store personal data only to the extent and for as long as necessary to fulfill the purposes for which it was collected, as long as we have a compelling legitimate interest in its retention, or as required by law.
You have the right to request confirmation as to whether we are processing your personal data. If this is the case, you have the right to obtain information regarding the details specified in Articles 25 et seq. of the Swiss Data Protection Act (DSG) or Article 15(1) of the GDPR, provided that the disclosure of such data cannot be refused, restricted, or deferred by the data controller (cf. Articles 26 et seq. DSG or Article 15(4) GDPR). We are also happy to provide you with a copy of the data.
In accordance with Art. 32 Para. 1 DSG or Art. 16 GDPR, you have the right to request the correction of incorrectly stored personal data (such as address, name, etc.), provided that no legal obligation conflicts with this claim. You may also request the completion of data stored by us at any time. Any necessary adjustments will be made without undue delay.
In accordance with Art. 17 para. 1 GDPR, you have the right to request the erasure of the personal data we have collected about you if
Pursuant to Art. 17 para. 3 GDPR, the right does not apply if
In accordance with Art. 18 (1) GDPR, you have the right in certain circumstances to request the restriction of the processing of your personal data.
This is the case when
If you have given us explicit consent to process your personal data (Art. 6 para. 6 DSG and Art. 31 para. 1 DSG; Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR), you may revoke this consent at any time. Please note that the lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected. Data that we are legally obliged to retain will be deleted after the expiration of the statutory retention period.
Pursuant to Article 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that is collected on the basis of Article 6(1)(f) GDPR (within the scope of a legitimate interest). If you have given your explicit consent to the processing of your personal data (Article 6(6) FADP and Article 31(1) FADP), you may revoke this consent at any time. Please note that the lawfulness of the processing carried out on the basis of the consent until revocation is not affected hereby. This right is only available to you if there are special circumstances weighing against the storage and processing. Information that we are legally obligated to retain will be deleted after the expiration of the retention period.
You can exercise your rights at any time by contacting us using the contact details provided below:
LogiBridgeX - Sole Proprietorship Alex. M. Geisenhainer - CHE-463.243.651
Ueberlandstrasse 18
8953 Dietikon
Switzerland
E-mail: info@logibridgex.ch
Phone: +41 44 774 11 01
Pursuant to Article 20 GDPR, you have the right to receive the personal data concerning you. We will provide this data in a structured, commonly used, and machine-readable format. The data may be transmitted either directly to you or to a controller designated by you.
We will provide you with the following data upon request:
We will transfer personal data directly to a controller of your choice, provided this is technically feasible. Please note that we may not transfer data, or may only do so to a limited extent, if doing so would infringe upon the overriding interests of third parties pursuant to Article 26(1)(b) FADP or Article 20(4) GDPR.
Pursuant to Article 49 FADP, data subjects may lodge a report with the supervisory authority if there are sufficient indications that data processing may be in violation of data protection provisions. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).
Further details can be found in the FDPIC contact form: https://www.edoeb.admin.ch/de/kontakt
Should you suspect that your data is being processed unlawfully on our website, you may pursue judicial clarification of the matter pursuant to Article 32 FADP. As a rule, this generally involves filing a lawsuit pursuant to Articles 28 et seq. of the Swiss Civil Code (ZGB). If you are affected by data processing conducted by federal bodies, the procedure is governed by Article 41 FADP. In such cases as well, you may contact the FDPIC (see the reference to the contact form above).
Should you suspect that your data is being processed unlawfully on our website, you are naturally free to seek judicial clarification of the matter at any time. Furthermore, any other legal recourse remains available to you. Regardless of this, pursuant to Article 77(1) GDPR, you have the option to lodge a complaint with a supervisory authority. The right to lodge a complaint pursuant to Article 77 GDPR is available to you in the EU member state of your habitual residence, your place of work, and/or the place of the alleged infringement, meaning you may select the supervisory authority to which you turn from the aforementioned locations. The supervisory authority with which the complaint has been lodged will subsequently inform you of the status and outcomes of your submission, including the possibility of a judicial remedy pursuant to Article 78 GDPR.