privacy and data protection
Data protection
Varibike GmbH (hereinafter referred to as VARIBIKE) is pleased that you are visiting our website. Data protection and data security when using our website are very important to us. We would therefore like to inform you at this point about which of your personal data we collect when you visit our website and for what purposes this data is used.
Since changes in the law or changes to our internal company processes may make it necessary to adapt this privacy statement, we ask you to read this privacy statement regularly. The privacy statement can be accessed, saved and printed at any time under the navigation point Data Protection on our website.
§ 1 RESPONSIBLE PERSON AND SCOPE
The controller within the meaning of the EU General Data Protection Regulation (hereinafter: GDPR) and other national data protection laws of the member states as well as other data protection provisions is:
Varibike GmbH
Bergstrasse 16/1
89081 Ulm, Germany
Phone: 49 (0)171 28 678 66
Fax: 49 (0)731 940 23 837
Email: info@varibike.com
This privacy policy applies to the website of Varibike GmbH, which is available under the domains www.Varibike.com and www.varibike.de as well as the various subdomains (hereinafter referred to as “our website”).
§ 2 DATA PROTECTION OFFICER
You can reach our data protection officer at:
Martin Kraiss
Varibike GmbH
Bergstrasse 16/1
89081 Ulm, Germany
Phone: 49 (0)171 28 678 66
Fax: 49 (0)731 940 23 837
Email: info@varibike.com
§ 3 PRINCIPLES OF DATA PROCESSING
Personal data is all information that relates to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behavior. Information that we cannot relate to you (or can only do so with disproportionate effort), e.g. by anonymizing the information, is not personal data. The processing of personal data (e.g. collection, querying, use, storage or transmission) always requires a legal basis or your consent. Processed personal data is deleted as soon as the purpose of the processing has been achieved and there are no longer any legally required retention periods to be observed.
If we process your personal data to provide certain offers, we will inform you below about the specific processes, the scope and purpose of the data processing, the legal basis for the processing and the respective storage period.
§ 4 INDIVIDUAL PROCESSING OPERATIONS
1. PROVISION AND USE OF THE WEBSITE
A. TYPE AND SCOPE OF DATA PROCESSING
When you access and use our website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file. When you use our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which access is made (referrer URL),
- browser used, device used and, if applicable, the operating system and the name of your access provider
B. LEGAL BASIS
Art. 6 (1) (f) GDPR serves as the legal basis for the data processing mentioned. The processing of the data mentioned is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.
C. STORAGE PERIOD
As soon as the data mentioned is no longer required to display the website, it will be deleted. The collection of data to provide the website and the storage of data in log files is essential for the operation of the website. The user therefore has no option to object. Further storage may take place in individual cases if this is required by law.
2. PURCHASE OF GOODS
A. TYPE AND SCOPE OF DATA PROCESSING
On our website, we offer users the opportunity to purchase goods by providing personal data. The data required for this is entered into an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected as part of the ordering process:
- Salutation
- Surname
- Address
- Telephone number
- E-mail address
- Payment Information
- Shipping method
Your data will be passed on to the shipping company commissioned with the delivery if this is necessary for the delivery of the goods. To process payments, we pass on your payment details to the credit institution commissioned with the payment. These companies may only use your data to process the order and not for any other purposes.
If you purchase goods on our website and provide your email address, we may subsequently use this address to send you a newsletter for our own similar goods or services.
B. LEGAL BASIS
When processing your personal data (see Section 4 3. a.), which is necessary to fulfill a purchase contract concluded with us, Art. 6 Paragraph 1 Letter b of GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
The legal basis for sending the newsletter following the purchase of goods is Section 7 Para. 3 UWG.
C. STORAGE PERIOD
Once the contract has been fully processed and the purchase price has been paid in full, your data will be blocked for further use and deleted after the tax and commercial retention periods have expired, unless you have expressly consented to the further use of your data. Further storage may take place in individual cases if this is required by law.
3. NEWSLETTER
A. TYPE AND SCOPE OF DATA PROCESSING
On our website you have the option of subscribing to a free newsletter. In order to send you the newsletter regularly, we need the following information from you:
- Salutation
- E-mail address
- birth date
- Bicycle category of interest
- News category of interest
Your data will not be passed on to third parties in connection with the newsletter dispatch.
We use the so-called double opt-in procedure to send the newsletter, which means that we will only send you the newsletter if you confirm your registration using the link contained in a confirmation email sent to you for this purpose. In this way, we want to ensure that only you, as the owner of the specified email address, can subscribe to the newsletter. You must confirm this promptly after receiving the confirmation email, otherwise your newsletter registration will be automatically deleted from our database.
B. LEGAL BASIS
The processing of your email address, title, date of birth and the bicycle and news category of interest to you for sending the newsletter is based on the declaration of consent you have given as part of a double opt-in in accordance with Art. 6 (1) (a) GDPR.
C. STORAGE PERIOD
Your email address will be stored for as long as you are subscribed to the newsletter. Once you unsubscribe from the newsletter, your email address will be deleted. In individual cases, further storage may occur if this is required by law.
4. CONTACT FORM
A. TYPE AND SCOPE OF DATA PROCESSING
On our website, we offer you the opportunity to contact us using a form provided. When you send your request using the contact form, reference is made to this privacy policy to obtain your consent. If you use the contact form, the following personal data will be processed:
- Surname
- E-mail address
The purpose of providing your email address is to assign your request and to be able to answer you. When you use the contact form, your personal data will not be passed on to third parties.
B. LEGAL BASIS
The data processing described above (see Section 4 5. a.) for the purpose of establishing contact is carried out in accordance with Art. 6 Paragraph 1 Letter a of GDPR on the basis of the declaration of consent voluntarily given by you below:
Declaration of consent:
By entering my data and clicking the “Send” button, I consent to my email address and my name being used to answer my contact request.
I can revoke my consent to the collection of personal data collected during the registration process at any time.
C. STORAGE PERIOD
As soon as your request has been dealt with and the matter in question has been finally clarified, the personal data processed via the contact form will be deleted. Further storage may take place in individual cases if this is required by law.
§ 5 DISCLOSURE OF DATA
We will only share your personal information with third parties if:
- You have given your express consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR,
- this is legally permissible and is necessary to fulfil a contractual relationship with you according to Art. 6 Paragraph 1 Clause 1 Letter b of GDPR,
- if there is a legal obligation to disclose the data pursuant to Art. 6 (1) sentence 1 lit. c GDPR,
- the transfer pursuant to Art. 6 Paragraph 1 Clause 1 Letter f of GDPR is necessary to safeguard legitimate corporate interests and to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data.
§ 6 USE OF COOKIES
A. TYPE AND SCOPE OF DATA PROCESSING
We use cookies on our website. Cookies are small files that we send to the browser on your device when you visit our website and that are stored there. Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to carry out various analyses. For example, cookies are able to recognize the browser you use when you visit our website again and to transmit various information to us. Cookies can, among other things, help us make our website more user-friendly and effective for you by, for example, tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information using cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot run programs and do not contain viruses.
Our website uses various types of cookies, the type and function of which are explained in more detail below.
Type:
Our website uses transient cookies, which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. This allows different requests from your browser to be assigned to a common session and enables us to recognize your device on subsequent website visits.
In addition, persistent cookies are used on our website. Persistent cookies are cookies that are stored in your browser for a longer period of time and transmit information to us. The respective storage period differs depending on the cookie. You can delete persistent cookies yourself via your browser settings.
Function:
Required cookies
These cookies are required for technical reasons so that you can visit our website and use the functions we offer. This relates, for example, to the following applications: ordering process, payment process.
These cookies also contribute to the safe and proper use of the website.
Performance cookies
These cookies enable us to analyse website usage and improve the performance and functionality of our website. For example, information is collected about how our website is used by visitors, which pages are accessed most frequently or whether error messages are displayed on certain pages.
Cookies for marketing and social media
Advertising cookies (third-party providers) make it possible to show you various offers that correspond to your interests. These cookies, among other things, can be used to record users' web activities over a longer period of time. The cookies may recognize you on various devices you use.
The following third parties receive personal data via cookies embedded on our website:
• Google, AdRoll
Furthermore, certain cookies allow you to connect to your social networks and share content from our website within your networks.
B. LEGAL BASIS
Due to the purposes of use described (see Section 6. a.), the legal basis for the processing of personal data using cookies is Art. 6 Paragraph 1 Letter f of GDPR. If you have given us your consent to use cookies based on a notice provided by us on the website ("cookie banner"), the legality of the use is also governed by Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.
C. STORAGE PERIOD
As soon as the data transmitted to us via cookies is no longer required to achieve the purposes described above, this information is deleted. Further storage may take place in individual cases if this is required by law.
D. CONFIGURATION OF BROWSER SETTINGS
Most browsers are preset to accept cookies by default. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. However, we would like to point out that you may no longer be able to use all the functions of our website if cookies are deactivated through your browser settings on our website. You can also delete cookies already stored in your browser via your browser settings. It is also possible to set your browser so that it notifies you before cookies are stored. Since different browsers can differ in their respective functions, we ask you to use the respective help menu of your browser for the configuration options.
If you would like a comprehensive overview of all third-party access to your Internet browser, we recommend that you install specially developed plug-ins.
§ 7 TRACKING AND ANALYSIS TOOLS
We use tracking and analysis tools to ensure continuous optimization and needs-based design of our website. Tracking measures also enable us to statistically record the use of our website by visitors and to further develop our online offering for you using the knowledge gained. Due to these interests, the use of the tracking and analysis tools described below is justified in accordance with Art. 6 Para. 1 Clause 1 Letter f of GDPR. The following description of the tracking and analysis tools also shows the respective processing purposes and the data processed.
1. GOOGLE ANALYTICS 360
This website uses Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountainview, CA 94043 USA ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website.
The information generated by these cookies, for example about the time, location and frequency of your use of this website, is usually transferred to a Google server in the USA and stored there. When using Google Analytics, it cannot be ruled out that the cookies set by Google Analytics may collect other personal data in addition to the IP address. We would like to point out that Google may transfer this information to third parties if this is required by law or if third parties process this data on Google's behalf.
Google will use the information generated by cookies on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can generally prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
It cannot be ruled out that the cookies set by Google Analytics may collect other personal data in addition to the IP address. To prevent information about your use of the website from being collected by Google Analytics and transferred to Google Analytics, you can download and install a plug-in for your browser using the following link: http://tools.google.com/dlpage/gaoptout?hl=de .
If you do not wish to receive targeted, interest-based advertising, you can prevent Google from using cookies for these purposes by clicking on the link: https://www.google.de/settings/ads deactivate.
§ 8 PLUGINS
1. FACEBOOK, GOOGLE AND TWITTER
Our websites contain social plugins from the social networks “Facebook” (Facebook Inc., 1601 S. California Ave, Palo Alto, California 94304, USA), “Google ” (Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA) and “Twitter” (Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA). It is possible that personal data about visitors to the website is also collected via these plugins, transmitted to the respective service and linked to the visitor’s respective service.
VARIBIKE itself does not collect any personal data via the social plugins or their use. To prevent data from being transferred to the service providers in the USA without the user's knowledge, we have used the so-called Shariff solution on our website. This means that the respective social plugins are initially only integrated as graphics on the website. These graphics contain a link to the website of the corresponding provider of the plugin. Only when you click on one of the graphics will you be redirected to the service of the respective provider. This solution ensures that personal data is not automatically forwarded to the providers of the respective social plugins when you visit our website. If you click on one of the social plugins' graphics, data can be transferred to the respective service provider and stored there. If you do not click on any of the graphics, no data will be transferred between you and the respective provider of the social plugin. You can find more information about the Shariff solution on the following website: https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html
After clicking on a social plug-in, the respective service provider receives the information that you have visited the corresponding page of our online offering. Please note that you do not need to have a user account with the service in question, nor do you need to be logged in there. However, if you already have a user account with the service provider in question and are already logged in to this account while visiting our website, the data collected by the social plug-in will be assigned directly to your account. If you do not want the data to be assigned to your profile with the service provider, you must log out of your user account before clicking on one of the social plug-ins.
Please note that VARIBIKE has no influence on whether and to what extent the respective service providers collect personal data. We do not know the scope, purpose and storage periods of the respective data collection. However, we would like to point out that it must be assumed that at least the IP address and device-related information are used and recorded via social plugins. It is also possible that the respective service providers use cookies.
The scope and purpose of data collection by the respective service as well as the further processing and use of your data there can be found in the data protection information directly on the website of the respective service. There you will also find further information about your corresponding data protection rights and setting options for protecting your privacy.
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
• https://www.facebook.com/policy.php
• https://www.facebook.com/help/186325668085084
b) Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA
• https://www.google.com/policies/privacy/partners/?hl=en
c) Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA
• https://twitter.com/privacy?lang=en
Further information on data processing and privacy policy by YouTube (Google) can be found at https://policies.google.com/privacy
§ 9 HYPERLINKS
Our website contains so-called hyperlinks to websites of other providers. When you activate these hyperlinks, you will be redirected from our website directly to the website of the other provider. You can recognise this by the change in the URL, among other things. We cannot accept any responsibility for the confidential handling of your data on these third-party websites, as we have no influence on whether these companies adhere to data protection regulations. Please find out about how these companies handle your personal data directly on these websites.
§ 10 RIGHTS OF THE DATA SUBJECT
The GDPR gives you, as a data subject, the following rights:
- According to Art. 15 GDPR, you can request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, about transmission to third countries or to international organizations and about the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.
- According to Art. 16 GDPR, you can immediately request the correction of inaccurate or the completion of your personal data stored by us.
- According to Art. 17 GDPR, you can request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.
- According to Art. 18 GDPR, you can request that the processing of your personal data be restricted if you contest the accuracy of the data, the processing is unlawful, we no longer need the data and you refuse to delete it because you need it to assert, exercise or defend legal claims. You are also entitled to the right under Art. 18 GDPR if you have objected to the processing in accordance with Art. 21 GDPR.
- According to Art. 20 GDPR, you can request to receive your personal data that you have provided to us in a structured, common and machine-readable format or you can request that it be transmitted to another responsible party.
- According to Art. 7 Para. 3 GDPR, you can revoke your consent at any time. This means that we are no longer permitted to continue the data processing based on this consent in the future.
- According to Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.
§ 11 RIGHT OF OBJECTION
When processing your personal data on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation or the objection is directed against direct advertising. In the case of direct advertising, you have a general right of objection, which we will implement without specifying a particular situation.
§ 12 DATA SECURITY AND SECURITY MEASURES
We are committed to protecting your privacy and treating your personal data confidentially. In order to avoid manipulation, loss or misuse of the data we store, we take extensive technical and organizational security precautions that are regularly reviewed and adapted to technological advances. This includes, among other things, the use of recognized encryption methods (SSL or TLS). However, we would like to point out that due to the structure of the Internet, it is possible that the data protection rules and the above-mentioned security measures are not observed by other persons or institutions that are not our responsibility. In particular, data disclosed unencrypted - e.g. if this is done by email - can be read by third parties. We have no technical influence on this. It is the user's responsibility to protect the data they provide against misuse by encrypting or in some other way.
