Data Privacy Statement

Data Privacy Statement of CLICKCONCEPTS GmbH (Version 1.0, as of 10.03.2025)

From 25 May 2018, the provisions of the EU General Data Protection Regulation http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=EN (hereinafter: GDPR) will apply throughout Europe. In the following, we would like to inform you about the processing of personal data carried out by CLICKCONCEPTS GmbH in accordance with this new regulation (see Article 13 GDPR). Please read our data protection information carefully. If you have any questions or comments about this data protection information, you can send them at any time to the e-mail address given in section 1.1.

Table of contents

1. Overview
1.1 Name and contact details of the controller and the company data protection officer
2. purposes of data processing, legal bases and legitimate interests pursued by CLICKCONCEPTS GmbH or a third party and categories of recipients
2.1 Accessing our website
3. Conclusion, execution or termination of a contract
3.1 Data processing upon conclusion of a contract
3.1.1 Software (shop or website)
3.1.2 Payment processing
3.1.3. Dispatch
3.1.4 Identity, creditworthiness and transmission to credit agencies
4. Data processing for advertising purposes
4.1 Interest-based advertising
4.2 Right to object
4.3 Newsletter dispatch
4.4 Notification of product availability (back in stock notification)
5. Online presence and website optimisation
5.1 Google Analytics
5.2 Google Ads
5.3 YouTube
5.4 Facebook Pixel
5.5 Online presence in social media
6. Customer account
6.1. Further purposes of use
6.1.1. Making contact
6.1.2. Competitions
6.1.3. Reviews
7. Transfer to recipients outside the EU
8. Your rights
9. Data security measures

 

1.       Overview

 

This privacy policy applies to the website: www.fitzandhuxley.com, hereinafter referred to as the CLICKCONCEPTS GmbH website.

The following data protection information informs you about the type and scope of the processing of so-called personal data by CLICKCONCEPTS GmbH. Personal data is information that is or can be directly or indirectly assigned to your person.

Data processing by CLICKCONCEPTS GmbH can essentially be divided into three categories:

  • All data required for the fulfilment of a contract with CLICKCONCEPTS GmbH will be processed for the purpose of processing the contract. If external service providers are also involved in the processing of the contract, e.g. logistics companies or payment service providers, your data will be passed on to them to the extent necessary. Furthermore, we transmit your data to our tax consultant to fulfil our tax obligations.
  • In addition to processing the contract, we also use the data collected from you in the course of processing the contract for the purpose of informing you from time to time about our own similar goods and services. The legal basis for this is § 7 para. 3 UWG. You can object to the use of your data at any time without incurring any costs other than the transmission costs according to the basic tariffs. If you are an existing customer, we will use your e-mail address for customer satisfaction surveys relating to your previous purchase.
  • When you access the CLICKCONCEPTS GmbH website, various information is exchanged between your end device and our server. This may also involve personal data. The information collected in this way is used, among other things, to optimize our website or to display advertising in your device's browser.

In accordance with the provisions of the GDPR, you have various rights that you can assert against us. These include the right to object to selected data processing, in particular data processing for advertising purposes.

1.1 Name and contact details of the controller and the company data protection officer

This data protection information applies to data processing by CLICKCONCEPTS GmbH, Ferdinand-Porsche-Straße 4, 73479 Ellwangen (‘controller’) and the website mentioned under point 1.

The company data protection officer of CLICKCONCEPTS GmbH can be contacted at the above address, Attn: Data Protection Department, or at datenschutz@clickconcepts.de.

2. Purposes of data processing, legal bases and legitimate interests pursued by CLICKCONCEPTS GmbH or a third party and categories of recipients

 

2.1 Accessing our website

When you visit our website, the browser used on your device automatically sends information to the server of our website and stores it temporarily in a log file. We have no influence on this. The following information is also recorded without any action on your part and stored until it is automatically deleted:

  • the IP address of the requesting internet-enabled device,
  • the date and time of access
  • the name and URL of the retrieved file
  • the website from which the access was made (referrer URL)
  • the browser you are using and, if applicable, the operating system of your internet-enabled computer and the name of your access provider.

The legal basis for processing the IP address is Article 6(1)(f) GDPR. Our legitimate interest follows from the purposes of data collection listed below. At this point, please note that we are not able to draw any direct conclusions about your identity from the data collected, nor do we do so.

We use the IP address of your end device and the other data listed above for the following purposes:

  • Ensuring a smooth connection setup,
  • Ensuring a comfortable use of our website,
  • Analysing system security and stability.

The data is stored for a period of six months and then automatically deleted. Furthermore, we use so-called cookies and tracking tools for our website. The exact nature of these procedures and how your data is used for them is explained in more detail in section 5 below.

If you have agreed to so-called geo-localization in your browser, operating system or other settings of your end device, we use this function to offer you individual services based on your current location (presetting of the language version of the website). We process your location data processed in this way exclusively for these functions. When you stop using the services, the data is deleted.

3.  Conclusion, execution or termination of a contract

 

3.1 Data processing upon conclusion of the contract

The business activities of CLICKCONCEPTS GmbH include the distance selling and rental of goods. In this context, we process the data required for the conclusion of, the execution of or the termination of a contract with you. These include:

 

  • Salutation
  • First name, surname
  • Billing and delivery address
  • E-mail address
  • Billing and payment data
  • Date of birth, if applicable
  • Telephone number, if applicable

The legal basis for this is Article 6 (1) (b) of the GDPR, i.e. you provide us with the data on the basis of the contractual relationship between you and us. We are also obliged to process your e-mail address due to a requirement in the German Civil Code (BGB) to send an electronic order confirmation (Article 6 (1) (c) of the GDPR). If we do not use your contact data for advertising purposes (see Section 4), we store the data collected for the execution of the contract until the expiry of the statutory or possible contractual warranty and guarantee rights. After this period has expired, we store the information about the contractual relationship required under commercial and tax law for the periods specified by law. During this period (usually ten years from the conclusion of the contract), the data will be reprocessed solely in the event of an audit by the tax authorities.

 

Furthermore, the following data processing is necessary to execute the purchase contract:

 

3.1.1 Software (Shop or Website)

We use third-party software services to create and operate our websites or shops, and your data is forwarded to them for the purpose of executing the contract. The legal basis for this is Art. 6 Para. 1 lit. a. GDPR. The recipients of your data are the following third parties:

- Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04  XN32, Ireland/ Privacy Policy: https://www.shopify.de/legal/datenschutz.
Categories of data processed: address data, contact data, order data, IP address

In the context of using this software, data is transferred to a third country, i.e. a country outside the European Union or the European Economic Area, or such a transfer cannot be ruled out. This may result in data being transferred to the USA, where there is insufficient protection. This transfer of data to a third country is based on the EU standard contractual clauses.

The deletion of your data is based on the data protection declarations of the respective provider.

3.1.2 Payment processing

If you have selected a payment method other than prepayment or cash on delivery, we will forward the required payment data to a payment service provider commissioned by us. We would like to point out that all transactions carried out by the respective payment service provider are subject to the current data protection declaration of the respective payment service provide

3.1.3 Shipment

We will forward information about your delivery address and your email address to a logistics company we have contracted for the purpose of processing the purchase contract. Only in the case of shipment by freight forwarder do we forward your telephone number and, if applicable, your email address to the logistics company we have contracted to ensure that the goods are delivered according to your wishes.

3.1.4 Identity, creditworthiness and transmission to credit agencies

If necessary, we will verify your identity and credit rating by obtaining information from service providers or credit reference agencies. For this purpose, we transmit the following types of data to the relevant service provider or credit reference agency: name, address. The legal basis for this is Article 6(1)(b) and (f) GDPR. The justification for this arises from the protection of your identity and the avoidance of fraud attempts at our expense. The circumstance and the result of our request will be stored in your customer account for the duration of the contractual relationship.

In addition, the payment service provider may carry out a credit check, depending on the payment method you have chosen.

4. Data processing for advertising purposes

The following statements relate to the processing of personal data for advertising purposes. The GDPR explains that such data processing is fundamentally conceivable and a legitimate interest on the basis of Article 6(1)(f). The duration of data storage for advertising purposes is not based on rigid principles, but rather on the question of whether the data is still required for processing for advertising purposes. If you object to the processing, the data will no longer be processed for advertising purposes. Please refer to section 4.2 for information on how your objection will be handled.

4.1   Fair advertising


To ensure that you only receive advertising information that is of supposed interest to you, we categorize and add to your customer profile with further information. For this purpose, both statistical information and information about you (e.g. basic data from your customer profile) are used. The aim is to send you only advertising that is based on your actual or perceived needs and not to bother you with useless advertising. The legal basis for this is §7 (3) UWG.

 

4.2 Right of objection

 

You can object to the data processing for the aforementioned purposes at any time, free of charge, separately for each communication channel and with effect for the future. To do so, simply send an e-mail or a letter to the contact details given in section 2.

If you file an objection, the contact address concerned will be blocked for further advertising data processing. We would like to point out that in exceptional cases, advertising material may still be sent temporarily after we have received your objection. This is technically necessary due to the lead time required for advertisements and does not mean that we are not implementing your objection. Thank you for your understanding.

4.3 Newsletter delivery

 

On our website, we offer you the opportunity to register for a reminder if a product is unavailable. As soon as the product is available again, you will be informed by e-mail. This is a one-time purpose. The processing of your electronic contact data is carried out at this point solely on the basis of your consent (Article 6 (1) (a) GDPR, §7 (3) UWG). You can withdraw your consent at any time with effect for the future. All you need to do is send a short e-mail to the e-mail address given in 1.1.

 

4.4 Notification when product arrives (back in stock notification)

 

On our website, we offer you the opportunity to register for a reminder if a product is unavailable. As soon as the product is available again, you will be informed by e-mail. This is a one-time purpose. The processing of your electronic contact data is carried out at this point solely on the basis of your consent (Article 6 (1) (a) GDPR, §7 (3) UWG). You can withdraw your consent at any time with effect for the future. All you need to do is send a short e-mail to the e-mail address given in 1.1.

For 4. data processing for advertising purposes, we use the services of third parties to whom your data is passed on for processing. The legal basis for this is Art. 6 para. 1 lit. a. DSGVO and § 7 para. 3 UWG. The recipient of your data is the following third party:

- Omnisend Group Limited (22 Mare Street, London E8 4RT, Vereinigtes Königreich), Datenschutzerklärung: https://www.omnisend.com/privacy/

Categories of data processed: email address, IP address, date and time of registration

 

As part of this service, data may be transferred to a third country, i.e. a country outside the European Union or the European Economic Area, or such a transfer cannot be ruled out. This may result in data being transferred to the USA, where there is insufficient protection. This data transfer to a third country is based on the EU standard contractual clauses. The newsletter will be sent immediately after you unsubscribe from the newsletter. The deletion of the data takes place, for technical reasons, after 4 weeks at the latest. Your electronic contact details will be deleted after you have been informed about product availability; for technical reasons, after 3 weeks at the latest.

 

5. Online presence and website optimization

 

We use cookies to provide the site technically (essential cookies). We use third-party tracking/analytics technologies to provide and continually improve our services.

Accepting cookies is not a requirement for visiting our website. However, we would like to point out that our website and services will have limited functionality if you do not allow us to set cookies.

We use cookies on our website. Insofar as these cookies contain personal data, they are used based on Article 6 paragraph 1 letter f of the GDPR. Our interest in optimizing our website is to be regarded as justified in the sense of the aforementioned regulation.

Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain any viruses, Trojans or other malware. Information is stored in a cookie that is generated in connection with the specific terminal device used. However, this does not mean that we can immediately identify you. On the one hand, cookies are used to make our services more user-friendly. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website or that you have already logged into your customer account. If you visit our site again to use our services, it will automatically recognize that you have visited us before and what inputs and settings you have made so that you do not have to re-enter them.

If you have a customer account and are logged in or have activated the “stay logged in” function, the information stored in cookies will be added to your customer account.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you, as well as to display information tailored specifically to you. These cookies enable us to automatically recognize that you have already visited our site when you visit it again.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely disabling cookies may mean that you cannot use all the features of our website. The storage period for cookies depends on their purpose and is not the same for all.

The cookies we use are stored for different lengths of time. You can view a precise list of the cookies we set and their durations in your browser settings. You can use this link to adjust which cookies are allowed to be set at any time.

5.1   Google Analytics

 

For the purpose of designing and continuously optimizing our pages to meet demand, we use Google Analytics, a web analysis service provided by Google LLC (“Google”), on the basis of Article 6(1)(f) of the GDPR. In this context, pseudonymized user profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as 

  • Browser type/version,
  • Operating system used,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request

are transmitted to a Google server in the USA and stored there. This may result in data being transferred to the USA. The EU-U.S. Data Privacy Framework is the legal basis for the transfer of data to the USA. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and tailoring these websites to meet requirements. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of third parties. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (so-called IP masking).

 

You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case not all functions of this website can be used to their full extent. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser add-on. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link https://tools.google.com/dlpage/gaoptout?hl=de. An opt-out cookie will be set to prevent future collection of your data when you visit this website. The opt-out cookie is only valid for this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found on the Google Analytics website https://support.google.com/analytics/answer/6004245?hl=de.

 

5.2 Google Ads

 

Use of Google Adwords Conversion Tracking.

We use the online advertising program “Google Ads” and, as part of Google Ads, conversion tracking. Google Conversion Tracking is an analysis service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).

When you click on an ad placed by Google, a conversion tracking cookie is placed on your computer. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognize that you clicked on the ad and were redirected to this page. Every Google Ads customer receives a different cookie. This means that there is no way that cookies can be tracked across the websites of Ads customers.

The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted for conversion tracking. This tells customers the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you do not wish to participate in tracking, you can object to this use by preventing the installation of cookies through the appropriate setting of your browser software (deactivation option). You will then not be included in the conversion tracking statistics. Further information and Google's privacy policy can be found at: https://www.google.com/policies/technologies/ads/, https://www.google.de/policies/privacy/

This processing involves a transfer of data to a third country, i.e. a country outside the European Union or the European Economic Area, or such a transfer cannot be ruled out. This may result in data being transferred to the USA. The legal basis for the transfer of data to the USA is the EU-U.S. Data Privac Framework.

 

5.3   YouTube

 

We use components (videos) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “YouTube”), a Google company, on our website. The implementation is based on your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR. When you load a video on our website, data is forwarded to Google. Information about which of our web pages you have visited is transmitted to Google, along with device-specific information including the IP address.

We use the “extended data protection mode” option provided by YouTube for this purpose. When you access a page that has an embedded video, this only establishes a connection to the YouTube servers and the content is displayed on the website by notifying your browser when you watch the video.

If you are logged into YouTube at the same time, this information will be associated with your YouTube account. You can prevent this by logging out of your account before visiting our website. Your data will be deleted as soon as it is no longer needed for the purpose of processing.

For more information about YouTube's privacy practices, please see the Google Privacy Policy.

Further information on the purpose and scope of data collection and processing by Google can be found here: https://www.google.com/intl/de/policies/privacy/.

Google transmits the information to Google servers in the United States. The transmitted data is only pseudonyms; it is not possible to draw conclusions about your name. We will only transmit your data if you expressly consent to Google's processing. In this case, you consent to your data being transferred to the USA in accordance with Art. 49 (1) (a) GDPR. You can revoke your consent at any time for the future via the consent management tool.

5.3   Facebook Pixel

 

This website uses the so-called Facebook pixel in its non-extended form. This is a JavaScript that allows us to track actions on our website and enables us to display product information that is tailored to your interests. Details on how it works can be found on the Facebook website at https://www.facebook.com/business/help/742478679120153. The pixel functions as a pseudonym, i.e. setting the pixel does not result in any direct assignment to your person.

The use of Facebook Pixel and the storage of “conversion cookies” are based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in analyzing user behavior to optimize both our website and our advertising.

We have concluded a contract data processing agreement with Facebook for the processing of data, in which Facebook acts as a contract data processor, in which we oblige Facebook to protect our customers' data and not to pass it on to third parties.

You can change the use at any time by adjusting the cookie settings; see point 5.

The following third party receives your data:

- Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland/ privacy policy: https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer

This processing involves a transfer of data to a third country, i.e. a country outside the European Union or the European Economic Area, or such a transfer cannot be ruled out. This may result in data being transferred to the USA. The legal basis for the transfer of data to the USA is the EU-U.S. Data Privacy Framework.

 

5.5 Online presence in social networks

We maintain an online presence within social networks and platforms to communicate with active customers, interested parties and users and to inform them about our services.

We would like to point out that user data may be processed outside the European Union. This may result in risks for users because, for example, it could make it more difficult to enforce user rights. Data is transferred based on so-called standard contractual clauses of the EU Commission.

Furthermore, user data is generally processed for market research and advertising purposes. For example, user profiles can be created from the usage behavior and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and the interests of the users are stored. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (in particular if the users are members of the respective platforms and are logged in to them).

The processing of users' personal data is based on our legitimate interests in effectively informing users and communicating with users in accordance with Art. 6 para. 1 lit. f. DSGVO. If the users of the respective platform providers are asked for consent to the aforementioned data processing, the legal basis for the processing is Art. 6 para. 1 lit. a., Art. 7 DSGVO.

For a detailed description of the respective processing and the opt-out options, please refer to the following linked information from the providers.

The deletion of your data is based on the data protection declarations of the respective provider.

We would also like to point out that requests for information and the assertion of user rights can be most effectively asserted with the providers. Only the providers have access to the user data and can directly take appropriate measures and provide information. However, should you require assistance, please do not hesitate to contact us.

- Facebook, -Seiten, -Gruppen, (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) on the basis of an agreement on joint processing of personal data – privacy policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

- Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – privacy policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated

- Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) – privacy policy/ Opt-Out: http://instagram.com/about/legal/privacy/. 

- Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland) – privacy policy/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.

- LinkedIn (LinkedIn, 1000 W Maude, Sunnyvale, CA 94085, USA) – privacy policy/ Opt-Out: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

- TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Irland) – privacy policy/ Opt-Out: https://www.tiktok.com/legal/privacy-policy?lang=de-DE

- Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - privacy policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization

- Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – privacy policy/ Opt-Out: https://about.pinterest.com/de/privacy-policy

 

6. Customer account

 

To make your shopping experience as easy as possible, we offer you the option of permanently storing your personal data in a password-protected customer account. A customer account is required to access our retailer shop. The creation of the customer account is voluntary and based on your consent within the meaning of Article 6 (1) (a) GDPR. After setting up a customer account, no further data entry is required. In addition, you can view and change the data stored about you in your customer account at any time.

 

In addition to the data requested when placing an order, you must enter a password of your choice to set up a customer account. This, together with your e-mail address, is used to access your customer account. Please treat your personal access data confidentially and, in particular, do not make it available to any unauthorized third parties. We cannot assume any liability for misused passwords, unless we are responsible for the misuse. Please note that you will automatically remain logged in even after leaving our website, unless you actively log out. You have the option to delete your customer account at any time. However, please note that this does not result in the deletion of the data visible in the customer account.

 

Depending on the shop or website, it may be possible to access a customer account without registering. This is done using a one-time password sent by email.

 

6.1 Other uses

 

6.1.1 Contacting

 

When you contact us by email or via our returns portal, we store the data you provide (in addition to your request itself, your email address, your name if applicable, and your telephone number) in order to answer your questions. The legal basis for this is Art. 6 (1) point a GDPR, i.e. you provide us with your data based on your consent. We will, of course, use the personal data transmitted to us in this way exclusively for the purpose for which you provided it to us when contacting us. You can revoke your consent to the data processing explained above at any time with effect for the future free of charge by sending a short message to the contact details given below. The lawfulness of the processing based on your consent up to the time of your revocation will not be affected by this. However, we would like to point out that from the time of any revocation, it will no longer be possible to process your request. If no revocation has been made, your data relating to the request will be deleted. Insofar as a statutory retention period applies in rare individual cases, we store the required data in a blocked form (usually for six or ten years) based on Art. 6 (1) point c GDPR in conjunction with the respective provision of the Fiscal Code (see § 147 AO) or the German Commercial Code (see § 257 HGB).

 

We use the services of third parties to help us establish contact, and the data you provide will be passed on to them to process your request. The legal basis is Art. 6 (1) point f GDPR. The recipients of your data are the following third parties:

- Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA) – privacy policy/Opt-Out: https://privacy.microsoft.com/de-de/privacystatement

- Usercentrics GmbH (Sendlinger Straße 7, 80331 München, Deutschland) – privacy policy/ Opt-Out: https://usercentrics.com/de/datenschutzerklaerung/

- 8returns UG (haftungsbeschränkt) (Lohmühlenstraße 65, 12435 Berlin, Deutschland) – privacy policy/ Opt-Out: https://www.8returns.com/privacy-policy

As part of these services, data is transferred to a third country, i.e. a country outside the European Union or the European Economic Area, or such a transfer cannot be ruled out. This data transfer to a third country is carried out based on the EU standard contractual clauses. This may result in data being transferred to the USA for which there is insufficient protection. The data is stored by our service providers for a period of 6 months and then automatically deleted.

6.1.2 Prize draws

 

If you take part in competitions, we collect data that is necessary to run the competition. This is usually an individual competition entry (e.g. a comment or a photo), as well as name and contact details. Participation in the competition and the associated data collection is of course voluntary. Your data will only be used in the context of the competition to send you a prize notification. The legal basis for data processing is your consent in accordance with Article 6 (1) (a) of the GDPR. The statements made above apply accordingly to the revocation of your consent, which is possible at any time, and to any further storage. As soon as the competition is over and your data is no longer needed, we will delete it. If winners are published, their data will remain online permanently.

 

6.1.3 Reviews

 

We use the services of third parties to collect reviews, to whom the data is passed on for processing. The legal basis is Art. 6 Para. 1 lit. a, f DSGVO. The recipient of your data is the following third party:

 

- REVIEWS.io 2020 GmbH (Skalitzer Straße 104, 10997 Berlin) – privacy policy/ Opt-Out: https://www.reviews.io/legal/user-privacy-policy

As part of this service, data may be transferred to a third country, i.e. a country outside the European Union or the European Economic Area, or such a transfer cannot be ruled out. This data transfer to a third country is based on the EU standard contractual clauses. This may result in data being transferred to the USA, where there is insufficient protection. The deletion of your data is governed by the service provider's privacy policy.

7. Recipients outside the EU

 

Unless otherwise stated, we do not pass on your data to recipients based outside the European Union or the European Economic Area for the processing mentioned.

Any transfer of your data to a third country (i.e. to a country outside the European Union (EU) or the European Economic Area (EEA)) is carried out in accordance with Art. 44 ff GDPR. The transfer is based on the valid EU standard contractual clauses or the EU-U.S. Data Privacy Framework.

8. Your rights

In addition to the right to revoke your consent given to us, you have the following further rights if the respective legal requirements are met: 

  • Right to information about your personal data stored by us in accordance with Art. 15 GDPR; in particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data, if it has not been collected directly from you,
  • Right to rectify inaccurate personal data or to complete correct data in accordance with Art. 16 GDPR, 
  • Right to erase your personal data stored by us in accordance with Art. 17 GDPR, provided that no legal or contractual retention periods or other legal obligations or rights for further storage must be complied with,
  • Right to restrict the processing of your data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it; the person responsible no longer needs the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR,
  • Right to data portability in accordance with Art. 20 GDPR, i.e. the right to receive selected data about you that we have stored in a commonly used, machine-readable format, or to request that it be transferred to another controller
  • Right to file complaints with regulatory authorities: Without prejudice to any other administrative or judicial remedy, you have the right to file a complaint with a regulatory authority, in particular in the member state where you reside, work or at the place where the alleged violation occurred, if you believe that the processing of personal data concerning you violates the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

8.1 Right of objection

Under the conditions of Art. 21 (1) GDPR, data processing may be objected to for reasons arising from the particular situation of the data subject.

The above general right of objection applies to all the processing purposes described in this data protection information that are processed based on Article 6, paragraph 1, letter f) of the GDPR. Unlike the special right of objection to data processing for advertising purposes (see 4.2 above), we are only obliged to implement such a general objection under the GDPR if you give us reasons of overriding importance (e.g. a possible risk to life or health). In addition, there is the option of contacting the supervisory authority responsible for CLICKCONCEPTS GmbH in Baden-Württemberg, Stuttgart.

9. Data security

All the data that you personally transmit, including your payment data, is transferred using the common and secure SSL (Secure Socket Layer) standard. SSL is a secure and proven standard that is also used for online banking, for example. You can recognize a secure SSL connection by the s appended to the http (i.e. https://...) in the address bar of your browser or by the lock symbol at the bottom of your browser.

We also use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Search