Privacy Policy Flink Website & App
Welcome to Flink! In the following, we would like to inform you about the data we process from you when you use our services via our website or our mobile applications.
1. Controller and contact details of the data protection officer
2. Purposes and legal bases of data processing
2.1. Automatically collected access data
2.2. Contact us
2.3. Registration and login
2.4. Orders
2.5. Product recommendations and existing customer advertising
2.6. Sending newsletters via WhatsApp
2.7. Applications
3. Use of cookies and similar technologies
3.1. Essential tools
3.1.1. Own cookies
3.1.2. Segment Consent Manager
3.1.3. Typeform
3.1.4. Datadog
3.2. Functional tools
3.2.1. Braze
3.2.2. Intercom
3.2.3. Optimizely
3.3. Marketing und analytical tools
3.3.1. Google Analytics
3.4. Advertising tools
3.4.1. Segment
3.4.2. Facebook-Pixel
3.4.3. Google Ads-Conversion-Tracking and Ads-Remarketing (formerly AdWords)
3.4.4. Adjust
3.4.5. TV Squared
3.4.6. Bing Ads
3.4.7. Linkster
3.4.8. Daisycon
3.4.9. ROKT
3.4.10. Criteo
3.5. Google Maps
4. Disclosure of Data
5. Transfer of data to third countries
6. Retention period
7. Your rights
8. Amendment of the privacy policy
1. Controller and contact details of the data protection officer
We, Flink SE, are responsible for all processing of personal data in Germany. We are located at Brunnenstraße 19-21 in 10119 Berlin. You can reach us by email at [email protected]. You can reach our data protection officer at [email protected].
2. Purposes and legal bases of data processing
All the data we collect from you is collected for a specific purpose. Below you will find all the purposes and categories of data we collect for each purpose.
2.1. Automatically collected access data
When you visit our website, we collect the access data that your browser automatically transmits to enable you to visit the website. The access data includes, in particular, the IP address of the requesting device, the date and time of the request, the address of the website called up and the requesting website, technical information about the browser used and the operating system as well as online identifiers (e.g. device identifiers, session IDs).
In the case of merely informational use of the app, i.e. even before registration, we only collect the personal data that is required for the use of the app. This includes
Device and card identifiers (DeviceID, IMEI, IMSI, MSISDN, MAC address, name of the mobile device), IP address, operating system, date and time.
The processing of this access data is based on our legitimate interests: To enable the visit of the website or app, to ensure the permanent functionality and security of our systems, as well as to generally administratively maintain our website and apps.
2.2. Contact us
You have the option of contacting us via various channels. In this context, we process your personal data exclusively for the purpose of communicating with you. Either to fulfil or initiate a contract with you, or to be able to answer your enquiry based on our legitimate interest.
2.3. Registration and login
You have the option of registering for our login area in order to be able to use the full range of functions of our services. The minimum data you must enter (first and last name, e-mail address, telephone number, password) are marked as "mandatory fields". Registration is not possible without this data. We process this data in order to fulfil or initiate a contract with you and also on the basis of our legitimate interest to enable you to create an account and to provide other related services, which are named in this data protection declaration.
2.4. Orders
If you place an order, we collect the mandatory data necessary for the processing of the contract. This includes your first and last name, email address, telephone number, password and the delivery addresses provided. We process this data in order to fulfil a contract with you. If your order contains pharmaceuticals, this is particularly sensitive health data. We will only process this data on the basis of your express consent. You can revoke this consent at any time with effect for the future.
In order to process payments (e.g. SEPA direct debit, PayPal), we use the service provider Adyen, Simon Carmiggeltstraat 6 - 50, 1011 DJ Amsterdam, Netherlands ("Adyen"), to whom we pass on the information you provided during the ordering process, together with information about your order (name, address, IBAN, BIC, invoice amount, currency and transaction number) in order to fulfil the contract. Your personal data will only be passed on for the purpose of payment processing with Adyen.
2.5. Product recommendations and existing customer advertising
Based on the purchase history of your ordered products and your favourite products, we may offer you suitable product recommendations for the same or similar products by email, push notification, pop-up message and within the website / app.
For push notifications and pop-up messages, the legal basis is your consent. The legal basis for product recommendations within the website / app is our legitimate interest in showing you product recommendations for the purpose of direct advertising.
If we send you e-mails and/or text messages with product recommendations based on your purchases from us, the data processing is based on Art. 6 Para. 1 lit. f GDPR in conjunction with Section 7 Para. 3 UWG ("existing customer advertising"). You can object to the use of your data for advertising purposes at any time by using a corresponding link in the e-mails or a message by text message or by notifying the above-mentioned contact details (e.g. by e-mail or letter), without incurring any costs other than the transmission costs according to the basic rates.
2.6. Sending newsletters via WhatsApp
We offer you the option of subscribing to our newsletter via the WhatApp service. For this purpose, we use the telephone number you provide to us as part of the registration process.
The telephone number will only be processed for this purpose with your consent. You can revoke your consent at any time with effect for the future. The cancellation can be made by leaving the advertising channel or by sending the word ‘STOP’ within the advertising channel.
Please note that when you use WhatsApp, your data will also be transmitted to WhatsApp Inc, 1601 Willow Road, Menlo Park, California 94025, USA. WhatsApp processes your data in accordance with its own privacy policy, which you can view at https://www.whatsapp.com/legal/
2.7. Applications
You can apply online via the application page for bike couriers (https://riders.goflink.com/) or on our job page (https://careers.smartrecruiters.com/Flink3/) for open positions. The purpose of the data collection is the selection of applicants for the possible establishment of an employment relationship. Further information can be found in our data protection declaration for applicants.
3. Use of cookies and similar technologies
We use cookies and similar technologies (collectively, "Tools") provided either by ourselves or by third parties.
We have categorised our Tools as Essential, Functional, Marketing and Analytics and Advertising.
Tools in the Essential category are enabled by default and cannot be disabled as you will not be able to use our services without the Essential Tools. All other cookies are only used with your consent. You can give and revoke this consent here.
3.1. Essential tools
We use certain tools to enable the basic functions of our services ("necessary tools"). Without these tools, we could not provide our service. Therefore, Necessary Tools are used without consent on the basis of our legitimate interests, to fulfil a contract or to carry out pre-contractual measures.
3.1.1. Own cookies
We store the following information in particular in our own necessary cookies to provide the basic functions of our services: login authentication, language, shopping cart contents, checkout fields for completing the order, address selected/entered, device location data, payment method selected, order history and search history.
3.1.2. Segment Consent Manager
To obtain and manage your consents, we use the Segment Consent Manager, which we have built into our website as an open source application (https://github.com/segmentio/consent-manager). This generates a banner that informs you about the data processing on our website and gives you the option to consent to all, some or none of the data processing through optional tools. This banner will appear (i) the first time you visit our website and (ii) when you revisit your choice of settings to change them or to withdraw your consent. The banner will also appear on subsequent visits to our website if you have disabled the storage of cookies.
The Segment Consent Manager sets a necessary cookie ("tracking-preferences") in order to store your consents and revocations. If you delete the cookie or it expires after 365 days, we will ask you again for your express consent when you visit the site at a later date.
The setting of the cookie is necessary to provide you with the legally required consent management and to comply with our documentation obligations. The legal basis for using this tool is our legitimate interest in fulfilling the legal requirements for consent management.
3.1.3. Typeform
Our website uses the Typeform service provided by Typeform S.L., Carrer Bac de Roda, 163, 08018 Barcelona, Spain ("Typeform"). Typeform is used to collect feedback from our customers and to inform them by email when our services are also available in the customer's area. To do this, Typeform collects your email address and postcode. You can decide yourself whether to send us your data for these purposes. The transmission takes place as soon as you press the send button.
You can find more information in Typeform's privacy policy.
3.1.4. Datadog
Functions of the Datadog service are integrated into our website. Datadog is a monitoring system of Datadog, Inc, 620 8th Ave, 45th Floor, New York, NY 10018, USA ("Datadog"). The system notifies our development team of potential errors on the website. To do this, log data is transmitted to Datadog, which is used to analyse and fix the errors.
Standard contractual clauses have been concluded with Datadog for the case of data transfer to the USA.
For more information on the collection and use of data, please see Datadog's privacy policy.
3.2. Functional tools
We also use tools to improve the user experience on our website and to provide you with more features ("functional tools"). Although these are not strictly necessary for the basic functionality of the website, they can bring you as a user some advantages, in particular with regard to user-friendliness and the provision of additional communication, presentation or payment channels.
The legal basis for the functional tools is your express consent.
3.2.1. Braze
We use the Braze Android and iOS SDK from Braze, Inc., 318 West 39th Street, 5th Floor New York, NY 10018, USA ("Braze") to deliver notifications and recommendations via email, push notification, pop-up message and within the app or website (in-app message).
Braze processes the following data in particular to control the sending of notifications and to analyse user interaction for this purpose: Email address, push token, usage information, campaign information, in particular regarding notifications already received, and device information, in particular the IP address, user agent, operating system, resolution, language and device model. In addition, Braze may also store information in the end device, in particular cookies.
For more information, please see Braze's privacy policy and documentation.
3.2.2. Intercom
We use the Intercom Messenger service provided by Intercom R&D Unlimited Company, 2nd Floor, Stephen Court, 18-21 St. Stephen's Green, Dublin 2, Ireland with servers located in the USA ("Intercom"). It is a customer service platform for interaction via chat or email between visitors/customers and Flink for the purpose of support and rapid communication. In this way, we can provide you with prompt assistance in the event of questions arising. The following data is processed by Intercom: If provided by you: First and last name, e-mail address, telephone number; technical information about your device, browser, operating system and selected language, IP address including the outgoing location, usage data when using the live chat tool: Time and duration of use, links clicked and pages viewed as well as the information you entered in the chat.
Intercom also sets cookies and stores information in local storage to implement the functionality of the customer service platform. You can find more information on this in the Intercom documentation.
Flink also uses Intercom to analyse and evaluate website usage (usage data) in order to provide individual support in the use of the website and to optimise the website in terms of user-friendliness.
You can find more information in Intercom's privacy policy.
3.2.3. Optimizely
We use Optimizely, a service provided by Optimizely Inc, 631 Howard Street, Suite 100, San Francisco, CA 94105, USA ("Optimizely"), to test different versions, new features and designs of our website. This also includes a usage analysis in order to evaluate the effects of changed designs or features, in particular with regard to the conversion rate. In particular, technical device data and usage data on visitor behaviour and the triggering of certain events are processed for this purpose. In addition, Optimizely is also used for debugging by detecting and correcting errors on the website.
Optimizely also sets cookies and stores information in local storage. For more information, please see the Optimizely documentation and privacy policy.
3.3. Marketing und analytical tools
In order to improve our website, we use tools for the statistical collection and analysis of general usage behaviour based on access data ("analysis tools"). We also use analytics services to evaluate the use of our various marketing channels.
The legal basis for the analysis tools is your explicit consent.
3.3.1. Google Analytics
Our website uses the web analytics service Google Analytics, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from Europe, the Middle East and Africa (EMEA) and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (together "Google") for all other users. We integrate Google Analytics into our website using the Segment tool (see section 3.4.1).
Google Analytics uses cookies and similar technologies to analyse and improve our website based on your user behaviour. Google processes the data to compile reports on website activity for the website operator and to provide other services related to website activity and internet usage. Your IP address is anonymised before further processing so that no conclusions can be drawn about your identity.
In particular, the following data may be processed by Google Analytics: Anonymised IP address, referrer URL (previously visited page), pages viewed (date, time, URL, title, duration of visit), files downloaded, links clicked to other websites, achievement of certain goals (conversions), technical information: Operating system; browser type, version and language; device type, brand, model and resolution; and your approximate location (country and city, if applicable, based on anonymised IP address).
The data processing of Google Analytics may also take place on servers in the USA. We have concluded an data processing agreement with Google for the use of Google Analytics as well as so-called standard contractual clauses in the event that personal data is transferred to the USA or other third countries.
You can also find more information in Google's privacy policy.
3.4. Advertising tools
We also use tools for advertising purposes ("marketing tools"). Some of the access data collected when you use our website is used for interest-based advertising. By analysing and evaluating this access data, we are able to display personalised advertising, i.e. advertising that corresponds to your actual interests and needs, on our website / app and on the websites and apps of other providers.
The legal basis for such marketing tools is your express consent.
In the following section, we would like to explain these technologies and the providers used for this purpose in more detail. The data collected may include in particular: the IP address of the device, the identification number of a cookie, the device identifier of mobile devices (device ID), referrer URL (previously visited page), pages visited (date, time, URL, title, duration of visit), files downloaded, links clicked to other websites, if applicable, achievement of certain goals (conversions), technical information: Operating system; Browser type, version and language; Device type, brand, model and resolution, Approximate location (country and city if applicable).
However, the collected data is only stored pseudonymously, so that no direct conclusions can be drawn about individuals.
3.4.1. Segment
We use the Segment service of Segment Inc, 55 2nd St, 4th Fl., San Francisco, CA 94105, USA ("Segment"). Segment is our central tool for collecting and analysing usage data and for playing interest-based personalised advertising. For this purpose, Segment is used to integrate all of our other tracking and marketing services, in particular Google Analytics, Google Ads, Facebook Pixel and Adjust. The data collected by Segment is passed on to these services.
For this purpose, Segment stores the following information in particular in local storage:
Further information can be found in the documentation and the privacy notice of Segment.
3.4.2. Facebook-Pixel
For marketing purposes, our websites use the "Facebook Pixel" service of the social network Meta, a service offered by Facebook Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland for users outside the USA and Canada and by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA (together "Facebook") for all other users. We integrate Facebook Pixel into our website using the Segment tool (see section 3.4.1).
We use Facebook Pixel to play you individualised advertising messages for our products based on your interests ("retargeting"). This also includes target group remarketing through Custom Audience. For this purpose, Facebook processes data that the service collects via cookies, web beacons and comparable storage technologies on our websites.
The data collected in this context may be transferred by Facebook to a server in the USA for analysis and stored there. In the event that personal data is transferred to the USA, we have concluded so-called standard contractual clauses with Facebook.
If you are a Facebook member and have given Facebook permission to do so via the privacy settings of your account, Facebook can link the information collected about your visit to us with your member account and use it to target Facebook ads. You can view and change the privacy settings of your Facebook profile at any time.
If you have not consented to the use of Facebook Pixel, Facebook will only display generic Facebook Ads that are not selected based on the information collected about you on this website.
You can find more information on this in Facebook's privacy policy.
3.4.3. Google Ads-Conversion-Tracking and Ads-Remarketing (formerly AdWords)
Our websites use the "Google Ads" service, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area and Switzerland and by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (together "Google") for all other users. We integrate Google Ads into our website using the Segment tool (see section 3.4.1).
With Google Ads, customer actions defined by us (such as clicking on an ad, page views, downloads) are recorded and analysed using "Google Ads conversion tracking". We use Google Ads remarketing to display individualised advertising messages for our products on Google partner websites. Both services use cookies and similar technologies for this purpose.
The data generated in this context may be transferred by Google to a server in the USA for evaluation and stored there. In the event that personal data is transferred to the USA, we have concluded so-called standard contractual clauses with Google.
If you use a Google account, Google may link your web and app browsing history to your Google account and use information from your Google account to personalise ads, depending on the settings stored in your Google account. If you do not wish such an association with your Google account, it is necessary to log out of Google before accessing our website.
If you have not consented to the use of Google Ads, Google will only display general advertising that has not been selected on the basis of the information collected about you on this website. In addition to withdrawing your consent, you also have the option to disable personalised advertising in Google's advertising settings.
You can also find more detailed information in the notes on data use and the data protection declaration of Google.
3.4.4. Adjust
We use the Adjust service of Adjust GmbH, Saarbrücker Str. 37A, 10405 Berlin ("Adjust") for usage analysis and to optimise our marketing activities and campaigns. This includes in particular the evaluation of your interaction with the website.
In particular, the following data is processed by Adjust: Anonymised ("hashed") IP address, device ID, advertising ID and other mobile identifiers, time of the first visit to the website, interaction with the website (e.g. registration), information about advertisements seen or clicked on.
The data is processed by Adjust exclusively in pseudonymised form and stored on servers in Germany. You can find more information in Adjust's privacy policy. We have concluded an data processing agreement with Adjust GmbH.
3.4.5. TV Squared
To measure the effectiveness and effect of TV advertising campaigns on user behaviour, we use TVSquared. This is a service provided by TV Squared Ltd, Codebase, Argyle House, 3 Lady Lawson Street, Edinburgh, EH3 9DR, United Kingdom.
TV Squared collects on our behalf the date and time of user sessions, referring web pages, user interactions on our websites and browser and operating system information. For this purpose, a cookie assigns a random user ID to each user. All data is processed by TV Squared in the UK. You can find more information in TV Squared's privacy policy. You can object to the setting of cookies by TVSquared here.
3.4.6. Bing Ads
Our website uses the "Bing Ads" service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. ("Microsoft Advertising").
Microsoft Bing Ads stores a cookie on your computer if you have accessed our website via a Microsoft Bing ad. In this way, Microsoft Bing and we can recognise that someone has clicked on an ad, been redirected to our website and reached a previously determined target page (conversion page). We only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information about the user's identity is shared.
If you do not want information about your behaviour to be used by Microsoft as explained above, you can refuse the setting of a cookie required for this purpose - for example, by not giving your consent to the setting of cookies for advertising purposes within our consent management or by means of a browser setting that generally deactivates the automatic setting of cookies.
You can also prevent the collection of data generated by the cookie and related to your use of the website, as well as the processing of this data by Microsoft by http://choice.microsoft.com/de-DE/opt-out to declare your objection. Further information on data protection and the cookies used by Microsoft and Bing Ads can be found on the Microsoft website at https://privacy.microsoft.com/de-de/privacystatement.
3.4.7. Linkster
On this page we use the tracking technology of Linkster GmbH, Colonnaden 5, 20354 Hamburg, to measure and visualize insights into partnerships and advertising channels. This is a function for measuring the efficiency of the corresponding advertising measures. Furthermore, the information enables us to assign advertising successes for billing with corresponding advertising partners. If you click on an advertising integration, cookies are set in your browser, which are read out in the event of a transaction. At every touch point, your browser sends an HTTP request to the Linkster server with which certain information is transmitted. This information includes the URL of the website on which advertising material is placed (referrer URL), the browser identifier (user agent) of your end device (including information about the device type and the operating system), the IP address of the end device (This IP address is anonymized and hashed by us before storage), HTTP header (data packet automatically transmitted by your browser with various technical information), the time of the request and, if previously saved on the device, the cookie with its Content.
The cookies stored by Linkster GmbH are deleted after 30 days at the latest. If you do not want Linkster to use information about your behaviour as explained above, you can refuse the setting of a cookie required for this purpose - for example, by not giving your consent to the setting of cookies for advertising purposes within our consent management or by using browser settings that generally deactivate the automatic setting of cookies. The collection and processing of tracking data can also be deactivated by clicking on this tracking opt-out link: https://trck.linkster.co/privacy-optout.do.
You can request an insight into the data collected by Linkster here: https://trck.linkster.co/privacy-mydata.do.
3.4.8. Daisycon
We use the Daisycon marketing service. To use this service, we submit anonymous transaction data to Daisycon. This data relates to product descriptions, sales value and demographic and geographic characteristics. This cannot be traced back to an individual and is used and shared with Daisycon for statistical purposes only. In addition to the anonymous transaction data, we provide the following data 1) pseudonymised transaction IDs. These transaction IDs are not shared with third parties and are only used by us for validation purposes. 2) Your IP address is also passed to Daisycon through the technical process. This address is only stored anonymously in the Daisycon system. For the above service, our partner Daisycon stores data and so-called affiliate cookies and matching procedures are used. Further information can be found here: https://www.daisycon.com/en/Privacy/. If you do not want Daisycon information to be used as explained above, you can refuse the setting of a cookie required for this - for example, by not giving your consent to the setting of cookies for advertising purposes within our consent management or via browser settings that generally deactivate the automatic setting of cookies.
3.4.9. ROKT
We use the ROKT advertising mediation service on our website and within our app to show you personalised advertising for products and services from advertising partners. For this purpose, we pass on your hashed e-mail address, approximate location data and information about your purchase to ROKT. You can find information on how ROKT handles your data at https://www.rokt.com/privacy-policy/. If you do not want information to be passed on to ROKT as explained above, you can refuse this by not giving your consent to the use of advertising tools within our consent management.
3.4.10. Criteo
We use the re-marketing tool Criteo, a technology of Criteo SA, 32 Rue Blanche, 75009 Paris, France.
Criteo enables us to collect information about the surfing behaviour of our website visitors / app users for advertising and marketing purposes in anonymised or pseudonymised form. The service collects data on surfing behaviour via cookies and/or advertising IDs that record the following: Events related to your activity on our website / App, Information about your end device, imprecise information about your location and information derived from your shortened IP address in order to deliver adverts only for products that are actually available in your country, region or city and Events related to ad delivery by Criteo, for example the number of ads displayed to you. We have the option of transmitting your email address stored in your customer account to Criteo as a hash value (the hash value is a conversion of your email address into another value and thus a pseudonymisation of your email address), provided that we recognise you when you are logged in and you give your consent to this data transmission via the banner solution used on this website / app. The hash value of the email address is used by Criteo for the purpose of identifying you on Criteo's partner websites / apps and for displaying our personalised advertisements to you on these.
The data collected in this way is used to create user profiles under a pseudonym. Further information on the scope and storage period can be found in Criteo's privacy policy: https://www.criteo.com/de/privacy/. There you can also prevent the collection of data for "Criteo Dynamic Retargeting" and "Criteo Sponsored Products" by making the appropriate settings.
We have concluded a joint controllership agreement with Criteo in accordance with Art. 28 GDPR to ensure the security of data processing.
If you do not want information to be passed on to Criteo as explained above, you can refuse this by not giving your consent to the use of advertising tools within our consent management.
3.5. Google Maps
Our website uses the map service Google Maps, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area and Switzerland and by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (together "Google") for all other users.
In order for the Google map material used by us to be integrated and displayed in your web browser, your web browser must establish a connection to a Google server, which may also be located in the USA, when you call up our website.
By integrating the map material, Google receives the information that a page of our website was called up from the IP address of your device. If you call up the Google map service on our website while you are logged into your Google profile, Google can also link this event to your Google profile. If you do not wish to be associated with your Google profile, you must log out of Google before accessing our site. Google stores your data and uses it for purposes of advertising, market research and personalised presentation of Google Maps.
The legal basis for this is our legitimate interest in improving your user experience through integrated maps.
You can find more information on this in Google's privacy policy and the Additional Terms of Use for Google Maps.
4. Disclosure of Data
The data we collect will only be disclosed if you have given your express consent, the disclosure is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data, we are legally obliged to disclose your data or this is legally permissible and necessary for the processing of contractual relationships with you or for the implementation of pre-contractual measures that take place at your request.
Some of the data processing may be carried out by our service providers. These may include, in particular, data centres that store our website and databases, software providers, IT service providers that maintain our systems, agencies, market research companies, other Flink companies and consulting companies. If we pass on personal data to our service providers, they may only use the data to fulfil their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound to our instructions, have suitable technical and organisational measures in place to protect the rights of the data subjects and are regularly monitored by us.
In addition, disclosure may take place in connection with official enquiries, court orders and legal proceedings if it is necessary for legal prosecution or enforcement.
5. Transfer of data to third countries
In some cases, we use services whose providers are located in so-called third countries (outside the European Union or the European Economic Area) or process personal data there, i.e. countries whose level of data protection does not correspond to that of the European Union. Where this is the case and the European Commission has not issued an adequacy decision (Art. 45 GDPR) for these countries, we have taken appropriate precautions to ensure an adequate level of data protection for any data transfers. These include, among others, the so-called standard contractual clauses of the European Union or binding internal data protection regulations.
Where this is not possible, we base the transfer of data on exceptions to Article 49 of the GDPR, in particular on your express consent or the necessity of the transfer for the performance of the contract or for the implementation of pre-contractual measures.
6. Retention period
In general, we only store personal data for as long as necessary to fulfil the purposes for which we collected the data. Thereafter, we delete the data immediately, unless we still need the data until the expiry of the statutory limitation period for evidence purposes for civil law claims or due to the existence of statutory retention obligations.
7. Your rights
If the legal requirements are met, you have the right to request information from us about which of your personal data we process. You may also request the rectification, erasure and/or restriction of the processing of your personal data and have the right to receive your personal data in a structured, commonly used and machine-readable format.
If we process your personal data on the basis of overriding legitimate interests, you have the right to object to the processing of your personal data on grounds relating to your particular situation. If it is a matter of objecting to the processing of data for direct marketing purposes, you have a general right of objection, which will also be implemented by us without giving reasons.
You have the right to revoke your consent at any time. This means that we will no longer process the data based on this consent in the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
If you believe that we are processing your data unlawfully, you have the right to complain to a supervisory authority. The supervisory authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin.
Any enquiries regarding the assertion of data protection rights and our responses to them will be stored for documentation purposes for a period of up to three years and, in individual cases, for the assertion, exercise or defence of legal claims even longer. The legal basis for this is our interest in defending against any civil claims, avoiding fines and fulfilling our accountability obligations.
8. Amendment of the privacy policy
From time to time, we may update this privacy policy, for example, if we make changes to our website or if legal or regulatory requirements change.
Last edit: October 2024
