1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER
1.1 We are pleased that you are visiting our website and thank you for your interest. On the following pages, we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.
1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is Rookie Berlin GmbH, Friedrichstr. 123, 10117 Berlin, Germany, Tel.: +49 (0) 30 9599924-70, Fax: +49 (0) 30 9599924-79, E-Mail: impressum@rookie-baby.com. The data controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the "https://" prefix and the padlock icon in your browser's address bar.
2) DATA COLLECTION WHEN VISITING OUR WEBSITE
If you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary so that we can display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you came to this page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Data processing is carried out in accordance with Article 6 Paragraph 1 GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used in any other way. However, we reserve the right to subsequently review the server log files if there is concrete evidence of illegal use.
3) MODERATION
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and presenting our online shop, processing data according to our instructions. All data collected on our website is processed on Shopify's servers. As part of the aforementioned Shopify services, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. for further processing on our behalf. If data is transferred to Shopify Inc. in Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.
For more information about Shopify's privacy policy, please visit the following website: https://www.shopify.com/legal/privacy
Further processing on servers other than the aforementioned Shopify servers will only take place within the scope of the following information.
4) COOKIES
In order to make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, ie after closing your browser (so-called session cookies). Other cookies remain on your terminal and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values according to individual requirements. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can check the duration of the respective cookie storage in the overview of the cookie settings of your web browser.
In some cases, cookies are used to simplify the ordering process by saving settings (eg remembering the contents of a virtual shopping basket for a later visit to the website). If personal data are also processed by individual cookies set by us, the processing is carried out in accordance with Art. 6 (1) point b GDPR either for the execution of the contract or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
We work together with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). You will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following sections.
Please note that you can set your browser in such a way that you are informed about the setting of cookies and you can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find these for the respective browsers under the following links:
- Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
- Firefox: https://www.mozilla.org/en-US/privacy/websites/#cookies
- Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=en
- Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please note that the functionality of our website may be limited if cookies are not accepted.
5) CONTACTING US
When you contact us (eg via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration. The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your inquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided there are no legal storage obligations to the contrary.
6) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING
Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. It is possible to delete your customer account at any time. This can be done by sending a message to the above-mentioned address of the controller. We store and use the data provided by you for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked in consideration of tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by our site, about which we will inform you accordingly below.
7) USE OF CLIENT DATA FOR DIRECT ADVERTISING
7.1 If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The indication of additional possible data is voluntary and is used to allow us to address you personally. We use the so-called double opt-in procedure for sending newsletters. This means that we will not send you an e-mail newsletter, unless you have expressly confirmed to us that you agree to the sending of such a newsletter. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters by clicking on an appropriate link.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) point a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your e-mail address at a later time. The data collected by us when you register for the newsletter will be used exclusively for the purpose of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the responsible person named above. After your cancellation, your e-mail address will immediately be deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data in excess thereof, which is permitted by law and about which we inform you in this declaration.
7.2 If you have provided us with your e-mail address when purchasing products, we reserve the right to regularly send you offers for products similar to those already purchased by e-mail. Pursuant to Section 7 (3) German law against unfair competition, we do not need to obtain separate consent from you. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 (1) point f GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You are entitled to object to the future use of your e-mail address for the aforementioned advertising purpose at any time by notifying the controller named at the beginning of this document. In this regard, you only have to pay the transmission costs according to the basic tariffs. Upon receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.
7.3 Newsletter dispatch via Omnisend
Our e-mail newsletter is sent by the technical service provider Omnisend (Soundest Ltd., Unit a3, Gateway Tower, 32 Western Gateway, London E16 1YL, United Kingdom), to whom we forward the data you provide when registering for the newsletter. This takes disclosure place in accordance with Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in providing an effective, secure and user-friendly newsletter system. The data you enter for the newsletter subscription (eg e-mail address) will be stored on Omnisend's servers in the EU.
Omnisend uses this information to send and statistically evaluate the newsletter on our behalf. For the purpose of evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files stored on our website. This enables us to determine whether a newsletter message has been opened and which links have been clicked. Technical information is also recorded (eg time of access, IP address, browser type and operating system). The data is collected exclusively under a pseudonym and is not linked to your other personal data. A direct personal reference is thus excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyzes can be used to better adapt future newsletters to the interests of the recipients. If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
In addition, Omnisend may use this data itself in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of their own legitimate interest in designing and optimizing the service in line with requirements and for market research purposes (eg to determine from which countries the recipients come). However, Omnisend does not use the data of our newsletter recipients to write to them themselves or to pass the data on to third parties.
We have entered into a data processing agreement with Omnisend, under which we oblige Omnisend to protect your personal data and not to disclose it to third parties.
You can view Omnisend's privacy policy here: https://www.omnisend.com/privacy
8) PROCESSING OF DATA FOR THE PURPOSE OF ORDER HANDLING
8.1 The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution within the framework of payment processing, if this is necessary for payment handling. If payment service providers are used, we explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 (1) point b GDPR.
8.2 Use of Special Service Providers for Order Processing and Handling
- SendCloud
Shipping is done via the SendCloud shipping portal (SendCloud GmbH, Kanalstr. 10, 80538 Munich). In accordance with Art. 6 par. 1 letter b GDPR, we pass your data on to SendCloud exclusively for the purpose of processing your online order. Transmission of data only takes place, as far as this is necessary for the completion of the order. Details of SendCloud's privacy policy can be found at https://www.sendcloud.com/privacy-policy/.
8.3 Use of Payment Service Providers
- Google Pay
If you choose the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment processing is carried out via the "Google Pay" application of your mobile device running at least Android 4.4 ("KitKat") and having an NFC function by charging a payment card deposited at Google Pay or a payment system verified there (eg PayPal). For the release of a payment via Google Pay in the amount of more than 25,- € the prior unlocking of your mobile device by the respective verification measure (eg face recognition, password, fingerprint or pattern) is required.
For the purpose of payment processing, your information provided during the ordering process, together with the information about your order, will be forwarded to Google. Google then transmits your payment information stored in Google Pay in the form of a unique transaction number to the source website, which is used to verify a payment. This transaction number does not contain any information about the real payment data of your means of payment deposited with Google Pay, but is created and transmitted as a uniquely valid numeric token. For all transactions via Google Pay, Google acts merely as an intermediary to process the payment transaction. The transaction is carried out exclusively in the relationship between the user and the source website by debiting the means of payment deposited with Google Pay. If personal data are processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Google reserves the right to collect, store and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time and amount of the transaction, the merchant's location and description, a description provided by the merchant of the goods or services purchased, photos that you have attached to the transaction, the name and email address of the seller and buyer or the sender and recipient, the payment method used, your description of the reason for the transaction and, if applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, verification of transaction data and optimization and maintenance of the functionality of the Google Pay service.
Google also reserves the right to combine the processed transaction data with other information which is collected and stored by Google when using other Google services.
The terms of use of Google Pay can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en
Further information on data protection at Google Pay can be found at the following Internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en
- Heidelpay
When paying by credit card via Heidelpay, payment is processed by the payment service provider Heidelberger Payment GmbH, Vangerowstraße 18, 69115 Heidelberg (hereinafter "Heidelpay"), to whom we pass on your data provided during the ordering process exclusively for the purpose of payment processing in accordance with Art. 6 (1) point b GDPR. The data will only be passed on if it is necessary for payment processing. To the extent necessary, Heidelpay will then transmit your data to HUELLEMANN & STRAUSS ONLINESERVICES SA, 1, Place du Marché, 6755 Grevenmacher, Luxembourg, in accordance with Art. 6 (1) point b GDPR.
If you choose the payment method "Purchase invoice via Heidelpay" or "Direct debit via Heidelplay", you will be asked to enter your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address and telephone number) during the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, we will forward this data to Heidelberger Payment GmbH, Vangerowstr. 18, 69115 Heidelberg (hereinafter "Heidelpay") for the purpose of a credit assessment in accordance with Art. 6 (1) point f GDPR. Based on your personal data and other data (such as shopping cart, invoice amount, order history, payment experience), Heidelpay will check whether the payment option you have selected can be granted with regard to payment and/or default risks. In order to decide on the establishment or implementation of a contractual relationship, identity or creditworthiness, information from the following credit agencies may also be included pursuant to Article 6 (1) point f GDPR:
- SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden
- CRIF Bürgel GmbH - Hamburg Branch -, Friesenweg 4, Building 12
22763 Hamburg
- Arvato Infoscore GmbH, Rheinstraße 99, 76532 Baden-Baden
- Deltavista GmbH, Kaiserstraße 217, 76133 Karlsruhe
- UNIVERSUM Business GmbH, Hugo-Junkers-Straße 3, 60386 Frankfurt am Main
- Bisnode International Group, Robert-Bosch-Straße 11, 64293 Darmstadt
- Regis24 GmbH, Wallstraße 58, 10179 Berlin
- Creditreform AG, Hellersbergstraße 12, 41460 Neuss
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to Heidelpay. However, Heidelpay may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Klarna
If the payment method "Klarna Invoice Purchase" or (if offered) the payment method "Klarna Installment Purchase" is selected, payment is processed by Klarna AB (publ )[https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable payment to be processed, your personal data (first and last name, street, house number, postcode, city, gender, e-mail address, telephone number and IP address) as well as data related to the order (eg B. Invoice amount, article, delivery type) is forwarded to Klarna for the purpose of identity and creditworthiness check, provided you have expressly consented to this in accordance with Art. 6 (1) point a GDPR within the ordering process. You can view to which credit agencies your data may be forwarded at: http://cdn.klarna.com/1.0/shared/content/legal/terms/Klarna/en_gb/checkout.
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. Klarna uses the information received on the statistical probability of non-payment for a balanced decision on the establishment, implementation or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the controller responsible for data processing or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary to process payments in accordance with the contract.
Your personal data will be treated in accordance with the applicable data protection regulations and in accordance with Klarna's privacy policy regarding data subjects located in Germany https://cdn.klarna.com/1.0/shared/content/policy/data/de_en/data_protection.pdf
or regarding data subjects located in Austria https://cdn.klarna.com/1.0/shared/content/policy/data/de_at/data_protection.pdf
- Paypal
When you pay via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by installations" via PayPal, we transmit your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 (1) point b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to carry out credit checks for the payment methods credit card via PayPal, direct debit via PayPal or, if offered, "purchase on account" or "payment by installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies on the basis of PayPal's legitimate interest in determining your solvency pursuant to Art. 6 (1) point f GDPR. PayPal uses the result of the credit assessment in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including the credit agencies used, please refer to PayPal's data protection declaration at: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europe House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment is processed by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will forward the information you have provided in connection with your order (name, address, account number, sort code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) point f GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary. You can view Shopify Payments' privacy policy at: https://www.shopify.com/legal/privacy.
You can view more information about the privacy policy of Stripe Payments Europe Ltd. at: https://stripe.com/en-de/privacy.
9) WEB ANALYSIS SERVICES
9.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your truncated IP address) will generally be transmitted to and stored by Google on servers in the United States.
This website uses only Google (Universal) Analytics with the extension "_anonymizeIp()", which ensures the anonymization of the IP address by shortening it and prevents direct personal identification. This extension shortens your IP address within member states of the European Union or in other signatory states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be combined with other Google data.
All processing described above, in particular the setting of Google Analytics cookies to read information on your device, will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, Google Analytics will not be used during your visit to our website.
You can withdraw your consent at any time with effect for the future. To exercise your right to withdraw consent, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have entered into a data processing agreement with Google for the use of Google Analytics, which obligates Google to protect the data of our website visitors and not to disclose it to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which aim to ensure compliance with the European level of data protection in the USA.
Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=en
9.2 Hotjar
This website uses the Hotjar web analytics service provided by Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, Tel.: +1 (855) 464-6788).
This tool allows us to track user activity on our website, which uses Hotjar (so-called heatmaps). For example, it shows how far users scroll, which buttons they click, and how often. Furthermore, it's possible to receive direct feedback from our website users when using this tool.
This provides us with valuable information to make our websites even faster and more user-friendly. The above analysis is based on our legitimate interests in optimization and marketing purposes, as well as the interest-based design of our website, in accordance with Article 6(1) of the GDPR. We place particular emphasis on the protection of your personal data when using this tool. Therefore, we can only track which buttons are clicked and how far you scroll. Areas of the pages that could contain personal information about you or third parties are automatically hidden by Hotjar and cannot be traced back to you at any time.
Using a "Do Not Track" header, Hotjar gives every user the option to prevent the use of the Hotjar tool, thus preventing any data about their visit to the website from being collected. This setting is supported by all common browsers in their updated versions. To do this, your browser sends a request to Hotjar requesting that tracking be disabled for the user. If you visit our website with different browsers/computers, you must use the "Do Not Track" header separately for each browser/computer.
For more detailed instructions and information about your browser, please visit: https://www.hotjar.com/opt-out.
For more information about Hotjar Ltd. and the Hotjar tool, please visit: https://www.hotjar.com
Hotjar Ltd.'s privacy policy can be found at: https://www.hotjar.com/privacy
Where legally required, we have obtained your consent to process your data in accordance with Article 6(1) of the GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right to withdraw, please follow the procedure described above.
10) Retargeting/Remarketing/Recommendation Advertising
Google Ads Remarketing
Our website uses Google Ads Remarketing features, which allow us to advertise our website both in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google places a cookie in your browser that automatically uses a pseudonymous cookie ID based on the pages you visit to enable interest-based advertising. This processing is based on our legitimate interest in the optimal marketing of our website pursuant to Art. 6 para. 1 point f GDPR.
Additional processing only takes place if you have agreed with Google that your Google internet and app browsing history will be linked to your Google account and that information from your Google account will be used for personalized ads you see on the web. If you are logged into Google during your visit to our website, Google uses your data in conjunction with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to create target audiences. When using Google Ads, personal data may also be transferred to Google LLC servers in the USA.
You can permanently disable cookies for advertising preferences. You can download and install the available browser plugin from the following link: https://www.google.com/settings/ads/onweb/
Alternatively, you can contact the Digital Advertising Alliance at www.aboutads.info to find out how cookies are set and how to adjust the relevant settings. Finally, you can configure your browser to notify you about cookie settings and decide individually whether to accept them, or to block cookies in certain cases or entirely. If cookies are not accepted, the functionality of our website may be limited.
Further information and Google's privacy policy regarding advertising can be found at:
http://www.google.com/policies/technologies/ads/
Where legally required, we have obtained your consent to process your data in accordance with Article 6(1) of the GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right to withdraw, please follow the procedure described above.
11) TOOLS AND OTHER EQUIPMENT
11.1 Applications for job postings via email
On our website, we post current job openings in a separate section, for which interested parties can apply by email to the contact address provided.
If applicants wish to be included in the application process, they must provide us with all personal information necessary for a thorough and well-founded evaluation and selection, along with their application via email.
The required data should include general personal information (name, address, telephone or electronic contact information) as well as performance-related evidence demonstrating the qualifications required for the advertised position. Furthermore, health-related information may be required, which, in the interest of social protection, must be given special attention in relation to the applicant's individual circumstances, in accordance with labor and social security law.
The components that an application must contain to be considered, as well as the form in which these components must be sent by email, can be found in the respective job advertisement.
Upon receipt of the application sent to the specified email address, we will store the applicant's data and evaluate it solely for the purpose of processing the application. In the event of inquiries during the processing of the application, we will use either the email address or telephone number provided by the applicant, at our discretion.
The legal basis for such processing, including contacting applicants with inquiries, is essentially Article 6(1)(b) GDPR in conjunction with Article 26(1) of the Federal Data Protection Act. According to these provisions, the conclusion of the application process is considered the commencement of an employment contract.
If, during the application process, special categories of personal data within the meaning of Article 9 paragraph 1 GDPR (e.g. health data such as information about severe disability status) are requested from applicants, the processing is carried out in accordance with Article 9 paragraph 2 point b GDPR in order to exercise our employment law rights, comply with social security and social protection laws and fulfill our obligations in this regard.
The processing of special categories of data may also be based cumulatively or alternatively on Article 9(1)(h) GDPR if they are used for purposes of health care or occupational medicine, for assessing the applicant's ability to work, for medical diagnosis, for health or social care provision or for the management of health or social care systems and services.
If, during the evaluation process described above, the applicant is not selected or withdraws their application prematurely, their data transmitted by email, as well as all electronic correspondence, including the original application email, will be deleted no later than six months after notification. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to comply with our obligation to provide evidence in accordance with the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be processed on the basis of Art. 6 paragraph 1 point b GDPR in conjunction with Art. 26 paragraph 2 of the Federal Data Protection Act for the implementation of the employment relationship.
11.2 Trustbadge of Trusted Shops
The Trusted Shops Trustbadge is included on this website to display our Trusted Shops seal and to offer buyers a Trusted Shops membership after placing an order.
This protects our legitimate interests in the optimal marketing of our products and services in accordance with Article 6(1)(f) of the GDPR. The Trustbadge and the services advertised with it are a service provided by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.
When the trust badge is accessed, the web server automatically saves a server log file containing information such as your IP address, the date and time of the request, the amount of data transferred, the requesting provider (access data), and documenting the request. This access data is not analyzed and is automatically overwritten no later than seven days after your visit to the website.
Further personal data will only be transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. In this case, the contractual agreement between you and Trusted Shops applies.
12) RIGHTS OF THE DATA SUBJECT
12.1 The applicable data protection law grants you the following comprehensive rights as a data subject (rights to information and intervention) vis-à-vis the controller regarding the processing of your personal data:
- Right of access of the data subject pursuant to Article 15 GDPR: You have the right to obtain the following information: The personal data we process; the purposes of the processing; the categories of personal data processed; the recipients or categories of recipients to whom the personal data have been or will be disclosed; the envisaged period for which the personal data will be stored, or, if impossible, the criteria used to determine that period; the right to request from the controller the rectification or erasure of personal data or to restrict the processing of personal data or to object to such processing; the right to lodge a complaint with a supervisory authority; where personal data are not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject; the appropriate safeguards pursuant to Article 46 where personal data are transferred to a third country.
- Right to rectification pursuant to Art. 16 GDPR: You have the right to obtain from the controller the rectification of inaccurate personal data concerning you without undue delay and/or the right to receive incomplete personal data concerning you which are stored by us.
- Right to erasure (“right to be forgotten”) pursuant to Article 17 GDPR: You have the right to obtain from the controller the erasure of personal data concerning you if the conditions of Article 17(2) GDPR are met. However, this right does not apply to the exercise of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
- Right to restriction of processing pursuant to Article 18 GDPR: You have the right to obtain from the controller a restriction of the processing of your personal data for the following reasons: While the accuracy of your personal data is being contested by you, it is being verified. If you object to the erasure of your personal data due to unlawful processing and request the restriction of its use instead. If you require personal data for the establishment, exercise, or defense of legal claims, we no longer need this data for processing. If you have objected to processing on grounds relating to your particular situation, pending verification of whether our legitimate grounds override your interests.
- Right to information pursuant to Article 19 GDPR: If you have asserted your right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request that this data be transmitted to another controller, where technically feasible.
- Right to withdraw consent pursuant to Article 7(3) GDPR: You have the right to withdraw your consent to the processing of personal data at any time with effect for the future. In the event of withdrawal, we will delete the data in question immediately, unless further processing is based on a legal basis that permits processing without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- Right to lodge a complaint pursuant to Article 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data infringes the GDPR.
12.2 RIGHT TO OBJECT
If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation.
If you exercise your right to object, we will cease processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds which override your interests, fundamental rights and freedoms, or if the processing serves the purpose of establishing, exercising or defending legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data used for direct marketing purposes. You can exercise this right as described above.
If you exercise your right to object, we will cease processing the data in question for direct advertising purposes.
13) DURATION OF STORAGE OF PERSONAL DATA
The duration of the storage of personal data depends on the respective legal basis, the purpose of the processing and – if relevant – the respective statutory retention period (e.g. commercial and tax retention periods).
If personal data is processed on the basis of explicit consent pursuant to Article 6 paragraph 1 GDPR, this data will be stored until the data subject withdraws their consent.
If there are legal retention periods for data processed in the context of legal or similar obligations pursuant to Art. 6 paragraph b GDPR, this data will be routinely deleted after the expiry of the retention periods if it is no longer necessary for the performance of the contract or the commencement of the contract and/or if we no longer have a legitimate interest in further storage.
When processing personal data on the basis of Article 6 paragraph 1 point GDPR, this data will be stored until the data subject exercises their right to object pursuant to Article 21 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of establishing, exercising or defending legal claims.
If personal data is processed for the purpose of direct marketing on the basis of Article 6 paragraph 1 point GDPR, this data will be stored until the data subject exercises his or her right to object pursuant to Article 21 paragraph 2 GDPR.
Unless otherwise stated in the information contained in this declaration regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
