Data protection information in accordance with the EU General Data Protection Regulation for "natural persons" on the website www.thebeautyofsound.com
Status: May 2022
Nice to have you here. On this website we inform you about how we collect, process, pass on or delete data and what rights and obligations exist with regard to your data.
Person responsible for data processing
The person responsible pursuant to Art. 4 (7) of the General Data Protection Regulation (DSGVO) is the
The Beauty of Sound GmbH
Collection and use of your data
The scope and type of collection and use of your data differs depending on whether you are visiting our website only to retrieve information or to make use of the services we offer.
If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. Your data will otherwise only be passed on to other third parties if we are legally obliged to do so.
We also use technical and organisational security measures to protect personal data that we receive or collect, in particular against accidental or intentional manipulation, loss, destruction or against attack by unauthorised persons. Our security measures are continuously improved in line with technological developments.
Among other things, this website uses TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries). You can recognise an encrypted connection by the string "https://" and the lock symbol in your browser line.
Data collection when visiting our website
During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you call up our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymised form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data is only passed on or used in any other way as described below. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie.
In part, the cookies serve to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO either for the execution of the contract, in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit or in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO as a result of your consent.
We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs.
Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or can exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.
Please note that if you do not accept cookies, the functionality of our website may be limited.
Establishing contact, communication
Personal data is collected when contacting us (e.g. via contact form or e-mail). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 Para. 1 lit. f DSGVO. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
In favour of our legitimate interest in fast and customer-friendly communication and technical administration, we use the following partner application in accordance with Art. 6 para. 1 lit. f DSGVO:
Name CRM system or similar
Data processing when opening a customer account and for contract processing
Pursuant to Art. 6 para. 1 lit. b DSGVO, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We store and use the data provided by you for the purpose of processing the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to a further use of your data or a legally permitted further use of data has been reserved on our part, about which we inform you accordingly below.
Call Live Chat or similar bot systems
Insofar as we offer a comment function on our website, in addition to your comment, information on the time of the creation of the comment and the commentator name you have chosen will be stored and published on the website. Furthermore, your IP address will be logged and stored. This storage of the IP address is for security reasons and in case the person concerned infringes the rights of third parties by posting a comment or posts illegal content. We need your e-mail address in order to contact you if a third party should object to your published content as illegal. The legal basis for the storage of your data is Art. 6 para. 1 lit.b and f DSGVO. We reserve the right to delete comments if they are objected to by third parties as unlawful.
Subscribe to our e-mail newsletter
If you register for our e-mail newsletter, we will regularly send you information about our offers. Only your e-mail address is required for sending the newsletter. The provision of any other data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter if you have expressly confirmed that you consent to the sending of newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters by clicking on an appropriate link.
By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO. When you register for the newsletter, we store your IP address entered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you register for the newsletter is used exclusively for the purpose of addressing you in an advertising manner by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data in a way that goes beyond this and is permitted by law and about which we inform you in this declaration.
In order to be able to design the content of the newsletter for you in a meaningful way, we use the preferences collected on the basis of a pseudonymous user profile and combine your e-mail address with the user profile solely for the purpose of sending personalised newsletters. Any further evaluation and use does not take place.
Sending the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services to those already purchased from our range by e-mail. In accordance with Section 7 (3) of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Art. 6 Para. 1 lit. f DSGVO. If you have initially objected to the use of your e-mail address for this purpose, we will not send you any e-mails. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying us. You will only incur transmission costs in accordance with the basic rates. After receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.
Newsletter dispatch via tool
Our e-mail newsletters are sent via the technical service provider xxxxx, to whom we pass on the data you provided when registering for the newsletter. This transfer takes place as a result of your consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO and is aimed at using a newsletter system that is effective in advertising, secure and user-friendly. xxxxxxx uses this information to send and statistically evaluate the newsletters on our behalf.
For evaluation purposes, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. In addition, technical information is collected (e.g. time of retrieval, IP address, browser type and operating system).
Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future.
Advertising by letter post
Based on our legitimate interest in personalised direct advertising, we reserve the right to store your first name and surname, your postal address and - insofar as we have received this additional information from you within the framework of the contractual relationship pursuant to Art. 6 para. 1 lit. f DSGVO and to use it for sending you interesting offers and information on our products by letter post.
You can object to the storage and use of your data for this purpose at any time by sending a corresponding message.
Contacting the assessment reminder
We may use your e-mail address as a one-time reminder to submit a rating of your order for the rating system we use, provided you have given us your express consent to do so during or after your order in accordance with Art. 6 (1) lit. a DSGVO.
You can withdraw your consent at any time by sending us a message.
Order and returns processing
Cooperation with service providers
In order to process your order, we work together with service providers who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the (return) delivery of the goods. In the event of a complaint, your device may be forwarded to a service partner. The transfer is made for the purpose of fulfilling legal or contractual obligations arising from the purchase contract, Art. 6 para. 1 lt. b DSGVO, and for the purpose of our interest in effective error checking and rectification, Art. 6 para. 1 lit. f DSGVO.
We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 (1) lit. b DSGVO.
In order to fulfil our contractual obligations to our customers, we work together with external shipping partners. We pass on your name as well as your delivery address to a shipping partner selected by us exclusively for the purpose of delivering goods Art. 6 para. 1 lit. b DSGVO.
If the goods are delivered by the transport service provider NNNNN in the case of a forwarding delivery, we will also pass on your e-mail address and telephone number to the service providers in accordance with Art. 6 Para. 1 lit. f DSGVO prior to the delivery of the goods for the purpose of agreeing a delivery date or for delivery notification.
Use of payment service providers (payment service providers)
Credit card or MasterPass
Payment by credit card is processed via the payment service provider xxxxxxxx. xxxxxxxx reserves the right to carry out a credit check. The data provided by you in the purchase process may be used to process the payment.
Use of Youtube videos
Independently of a playback of the embedded videos, a connection to the Google network "DoubleClick" is established each time this website is called up, which may trigger further data processing operations without our influence.
Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and within the scope of Google Ads the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the offer of Google Ads to draw attention to our attractive offers with the help of advertising media (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your computer system. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we will be able to recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across Ads customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted in to conversion tracking. Clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in the tracking, you can block this use by deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics. We use Google Ads on the basis of your consent to targeted advertising pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO.
The use of Google Ads may also result in the transmission of personal data to the servers of Google LLC in the USA.
Google Ad Manager
In addition, GAM can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and makes a purchase. According to Google, GAM cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of GAM, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
In the course of using GAM, personal data may also be transmitted to the servers of Google LLC in the USA. To protect your data in the USA, we have concluded a data processing agreement with Google based on the standard contractual clauses of the European Commission.
You can deactivate cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com, https://www.google.de/settings/ads, whereby this setting is deleted when you deactivate your cookies. Furthermore, you can find out more about the setting of cookies and make settings for this at the Digital Advertising Alliance at the Internet address www.aboutads.info. Finally, you can set your browser in such a way that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.
You can obtain further information on the data protection provisions of DoubleClick by Google at the following Internet address: http://www.google.de/policies/privacy/
It is important to us to design our websites as optimally as possible and thus make them attractive for our visitors. To do this, it is necessary for us to know which parts of it are received by our visitors and how. For this purpose, we use the following technologies in our interest.
Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymisation of the IP address by shortening it and excludes direct personal reference. The extension means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO on the basis of your consent to this form of statistical analysis of user behaviour for optimisation and marketing purposes.
Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent the collection by Google Analytics within this website in the future (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click this link again):
Google Tag Manager
We use "Google Tag Manager" on our website, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Tag Manager enables us as marketers to manage website tags via an interface. The Google Tag Manager tool that implements the tags is a cookie-less domain and does not itself collect any personal data. Google Tag Manager takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.
Further information on data protection can be found on the following Google web pages:
FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html
Jetpack (formerly WordPress.com Stats)
This website uses the web analytics service Jetpack (formerly WordPress.com-Stats) operated by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA, using the tracking technology of Quantcast Inc, 201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA. With the help of Jetpack, pseudonymised visitor data is collected, evaluated and stored on the basis of your consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO. Pseudonymised usage profiles can be created and evaluated from this data for the same purpose. Jetpack uses so-called cookies, i.e. small text files that are stored locally in the cache of the site visitor's internet browser. These cookies are used, among other things, to recognise the browser and thus enable a more precise determination of statistical data. The user's IP address participates in the information collected, but is pseudonymised immediately after collection and before it is stored in order to exclude the possibility of personal references.
The information generated by the cookie about your use of this website (including the pseudonymised IP address) is transferred to a server in the USA and stored there in order to protect the interests mentioned above.
In order to object to the collection and storage of your visitor data in the future, you can obtain an opt-out cookie from Quantcast at the following link, which has the effect that no visitor data from your browser will be collected and stored by Jetpack in the future: http://www.quantcast.com/opt-out.
Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO.
Retargeting/ Remarketing/ Referral advertising
Criteo (Criteo SA)
On this website, the technology of Criteo SA, 32 Rue Blanche, 75009 Paris, France ("Criteo"), uses "cookie" text files to collect, store and analyse information about the surfing behaviour of website visitors in pseudonymised form. Criteo uses an algorithm to analyse the surfing behaviour and can then display targeted product recommendations as personalised advertising banners on other websites (so-called publishers). Under no circumstances can the collected data be used to personally identify the visitor to this website.
The tracker allows Criteo to capture the browsing events of your visitors (products viewed and purchased, etc.), which are then used to calculate relevant and personalised recommendations for delivery in your ad banners.
An overview of all publishers and networks partnered with Criteo from which pixels can be loaded, as well as the respective privacy statements, can be found here: https://www.criteo.com/de/privacy/our-partners/. On our website, we contractually limit the use to a maximum of three partners.
No other use or disclosure to third parties will take place.
To object to the collection of data and the creation of pseudonymised user profiles for the future, you can download the following so-called opt-out cookie:
Criteo discharge (http://www.criteo.com/de/privacy/)
Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the aforementioned option for making an objection or use the settings of our tool under the link https://www.notebooksbilliger.de/#uc-corner-modal-show.
Google Ads Remarketing
Our website uses the functions of Google AdWords Remarketing, which we use to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your terminal device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. The processing is based on your consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO.
Additional data processing will only take place if you have consented to Google linking your internet and app browsing history to your Google Account and using information from your Google Account to personalise ads you view on the web. In this case, if you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing.
For this purpose, your personal data will be temporarily linked by Google with Google Analytics data in order to form target groups.
The use of Google Ads Remarketing may also result in the transmission of personal data to the servers of Google LLC. in the USA.
You can permanently deactivate the setting of cookies for advertising preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/
Alternatively, you can obtain information from the Digital Advertising Alliance at the Internet address www.aboutads.info about the setting of cookies and make settings in this regard. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.
Further information and the data protection regulations regarding advertising and Google can be found here: http://www.google.com/policies/technologies/ads/.
Tools and miscellaneous
On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish whether an entry is made by a natural person or is misused by machine and automated processing. The service includes the sending of the IP address and, if applicable, further data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 Para. 1 Sentence 1 lit. a DSGVO on the basis of express consent regarding the determination of the individual intent of actions on the Internet and the prevention of abuse and spam.
Content Delivery Networks (CDN)
Our services use content delivery networks (CDN). CDNs have the effect of reducing the loading time of common Java-Script libraries and fonts. The use is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO. Since the retrieval is carried out by your browser, your IP address, among other things, is transmitted.
On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps in order to visually present geographical information.
Using this service makes it easier for you to fill out the form in our checkout and to view the map there. When you call up those sub-pages in which Google Maps is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account via which you are logged in or whether a user account exists.
If you are logged in to Google, your data will be directly assigned to your account. If you do not wish to have your data associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Art. 6 Para. 1lit. f DSGVO on the basis of Google's legitimate interest in displaying personalised advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, and to exercise this right you must contact Google: https://adssettings.google.com/anonymous?sig=ACi0TChE0V3UjX58KGHIwdnNGct8EQjrFSeIhTziBwIDczLEYJ6mtOOaywypQNrXt2xKWfEHYPRJIFXWYyethK_EZ8P7-j-q1sgYV-pCTG1DJKqdn4Vwpe0&hl=de or https://www.youronlinechoices.com/de/praferenzmanagement/. You can reach Google's data protection officer here: https://support.google.com/policies/contact/general_privacy_form.
Social Media Links
Within our websites, there are links to various social media with the corresponding logos. These are not social media plugins, but merely a link to our offers within these media. If you click on one of these links, your IP address will be transmitted to the operators of the various platforms. If you use one of these services and are also logged in with your specific account, information about your surfing behaviour may also be collected by the operators of the social media. The transmission of your IP address to the operators of the websites accessed is technically necessary and applies to all websites.
If you apply to us electronically, i.e. by e-mail or via our web form, we will collect and process your personal data for the purpose of processing the application procedure and carrying out pre-contractual measures§ 26 Federal Data Protection Act (BDSG n.F.). By submitting an application on our recruiting page, you express your interest in taking up employment with us. In this context, you provide us with personal data which we use and store exclusively for the purpose of your job search/application.
In particular, the following data is collected: personal master data (first and last name, address, date of birth), e-mail address, telephone number, availability, salary requirement. You also have the option of uploading meaningful documents such as a cover letter, your CV and references. These may contain further personal data.
Only authorised employees from the HR department or department or team leaders involved in the application process have access to your data. Personal data is stored exclusively for the purpose of filling the vacant position for which you have applied.
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxWe use the services of a personnel administration and applicant management software of Personio GmbH, Buttermelcherstr. 16, 80469 Munich, to process applicant data. The data transmitted as part of your application is encrypted and stored and processed in a database operated by Personio. For more details, please refer to Personio's data protection policy at: https://www.personio.de/ueber-uns/datenschutz/xxxxxxxxxxxxxxxxxxxxxxxx.
Your data will be stored for a maximum period of six months beyond the end of the application process. This is usually done to fulfil legal obligations or to defend against any claims arising from legal regulations. We are then obliged to delete or anonymise your data. In this case, the data is only available to us as so-called metadata without direct personal reference for statistical evaluations (for example, proportion of women or men in applications, number of applications per period, etc.).
In addition, we reserve the right to store your data for inclusion in our "Talent Pool" for up to twelve months after the end of the application process in order to identify any other interesting positions for you. Storage for this purpose is based on your consent in accordance with Art. 6 Para. 1 lit. a DSGVO. You are entitled to revoke your consent at any time. If you exercise your right of revocation, we will no longer be able to contact and consider you for future vacancies. The lawfulness of the processing based on your consent until revocation remains unaffected.
If you receive an offer of employment with us as part of the application process and accept it, we store the personal data collected as part of the application process for at least the duration of the employment relationship.
Data transfer to third countries
As our servers may be located at the headquarters of one of our subsidiaries or at a cloud provider, the storage of data abroad cannot be ruled out. The cloud provider used is xxxxxxxx.
Where a third country transfer is envisaged and no adequacy decision or appropriate safeguards are in place, it is possible and there is a risk that authorities in the relevant third country (e.g. intelligence services) may gain access to the transferred data in order to collect and analyse it and that enforceability of your data subject rights cannot be guaranteed.
Overview of data subject rights (your rights) in connection with data processing within our websites in accordance with the applicable data protection regulations.
Right to information
You have the right to information about your stored personal data, its origin and recipient and the purpose of data processing at any time.
Right of rectification
You have the right to correct your stored data at any time. If you find any discrepancies, you can also correct your data yourself in your customer account.
Right to deletion / blocking
You have the right to have your stored data deleted or blocked for further processing at any time if we are obliged to retain your data (e.g. invoices) due to statutory retention obligations, see also restriction of data processing.
Right to restriction of data processing
You have the right to restrict data processing,
- if you dispute the accuracy of your data and cannot correct it yourself;
- if the processing should be unlawful but you yourself do not wish to have it deleted;
- if we as the controller no longer need your data in principle, but you should need it for the assertion, exercise or defence of legal claims; or
- if you have lodged an objection to data processing and it has not yet been determined whether legitimate grounds on our part for further data processing outweigh your grounds for objection.
Right to object to processing
If you have given your consent to the processing of your data, you may revoke this consent at any time. Such a revocation will affect the permissibility of the processing of your personal data after you have expressed it to us.
If we send you direct advertising (also in the future) (e.g. newsletter), you have the right to object to this data processing at any time. You will be additionally informed of your right to object within the scope of consent and will also be able to implement this simply via technical means (e.g. opt-out link in a newsletter); this also applies to possible profiling, which could be directly connected to direct advertising.
If we should ever use your data for purposes other than ordering in the webshop on the basis of a consideration of interests (in principle no), you have the right to object to this data processing at any time for reasons arising from your particular situation. If such data processing occurs, we will inform you immediately.
This also applies to possible pseudonymised or anonymised data processing for statistical purposes. Therefore, you can also generally object to any web analysis technology used by us (e.g. Google Analytics), among other things with an opt-out cookie, see the corresponding chapters.
Right to data portability
If requested by you, we will make your data that you have provided to us personally available to you in a structured, common and machine-readable format and / or transfer it to another responsible party (e.g. another webshop), the latter as far as this is technically possible.
Right to complain to the supervisory authorities
You have the right to complain to the data protection supervisory authority responsible for us at any time.
Right to withdraw consent
If you give us consent for certain data processing, you can revoke this consent at any time. In principle, we only require consent in special cases, e.g. when sending newsletters.
Duration of the storage of personal data
The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).
When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a DSGVO, this data is stored until the data subject revokes his/her consent.
If there are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 Para. 1 lit. b DSGVO, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfilment of the contract or the initiation of the contract and/or there is no justified interest on our part in continuing to store it.
When processing personal data on the basis of Art. 6(1)(f) DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21(1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) lit. f DSGVO, this data is stored until the data subject exercises his/her right to object in accordance with Art. 21 (2) DSGVO.
Unless otherwise indicated in the other information in this statement on specific processing situations, stored personal data are otherwise deleted when they are no longer necessary forthe purposes for which they werecollected or otherwise processed.
Communication by e-mail
We cannot guarantee complete data security when communicating by e-mail, so we recommend that you send information requiring a high level of confidentiality by post.