The following privacy policy is intended to inform you about the types of your personal data (hereinafter also referred to shortly as “Data”) we process, for what purposes, and to what extent. The privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and especially on our websites, in mobile applications, and within external online presences, such as our social media profiles (hereinafter collectively referred to as “Online Offering”).
The terms used are not gender-specific.
Sylvia Szulc
c/o 105 VIERTEL Impact Hub GmbH
Gänsemarkt 33
20354 Hamburg
Email Address: info@brand-journey.de
The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects concerned.
In the following, we provide you with the legal basis of the General Data Protection Regulation (GDPR) on which we base the processing of personal data. Please note that in addition to the provisions of the GDPR, national data protection provisions may apply in your country or our country of residence or domicile.
We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs, and the nature, scope, context, and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, in order to ensure a level of security appropriate to the risk.
The data collected by us will only be passed on to third parties insofar as this is necessary for the fulfillment of contractual obligations, for billing purposes, or for the execution of a contract to which the data subject is a party, or based on a legitimate interest of us, or if the data subject has consented to this. Third parties may also be service providers, such as payment service providers, logistics companies, or providers of services or content that are integrated into a website.
If we process data in a third country (i.e., outside the European Union (EU), the European Economic Area (EEA), or the Swiss Confederation) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only occur if it is necessary to fulfill our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation, or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Art. 44 ff. of the German Data Protection Act (GDPA) are met. This means that the processing takes place, for example, on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g., for the USA by the “Privacy Shield”) or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
The data processed by us will be deleted or their processing restricted in accordance with legal requirements. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them. If the data are not deleted because they are necessary for other and legally permissible purposes, their processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
You have the right to request confirmation as to whether the data concerned are being processed and to request information about these data as well as further information and a copy of the data in accordance with legal requirements.
Furthermore, you have the right to correction or completion of incorrect or incomplete data in accordance with legal requirements.
In accordance with legal requirements, you have the right to demand that the data concerned be deleted immediately or, alternatively, to demand that the processing of the data be restricted in accordance with legal requirements.
You have the right to receive the data concerning you that you have provided to us and to demand that it be transmitted to other responsible persons without hindrance from us, insofar as this is also possible in accordance with legal requirements.
Furthermore, in accordance with legal requirements, you have the right to lodge a complaint with the competent supervisory authority.
Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user’s computer. A cookie is primarily used to store information about a user during or after his visit within an online offer. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, for example, the content of a shopping cart in an online shop or a login status can be stored. The term “permanent” or “persistent” refers to cookies that remain stored even after the browser is closed. For example, the login status can be saved if users visit it after several days. Likewise, the interests of users used for range measurement or marketing purposes can be stored in such a cookie. Third-party cookies” are cookies that are offered by providers other than the person responsible for operating the online offer (otherwise, if it is only their cookies, it is called “first-party cookies”).
If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.
A general objection to the use of cookies used for online marketing purposes
can be declared for many of the services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that in this case not all functions of this online offer can be used.
The data processed by us will be deleted or their processing restricted in accordance with legal requirements. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them. If the data are not deleted because they are necessary for other and legally permissible purposes, their processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
We offer our services on online platforms operated by other service providers. In this context, the data protection notices of the respective platforms also apply in addition to our data protection notices. This applies in particular to the execution of the payment process and the procedures used on the platforms for reach measurement and interest-based marketing.
Further information on processing procedures, procedures, and services:
Within the framework of contractual and other legal relationships, based on legal obligations or otherwise on the basis of our legitimate interests, we offer affected persons efficient and secure payment options and use additional service providers in addition to banks and credit institutions (collectively “payment service providers”).
The data processed by the payment service providers includes inventory data, such as names and addresses, bank data, such as account numbers or credit card numbers, passwords, TANs, and checksums, as well as contract, sum, and recipient-related information. The information is required to carry out the transactions. However, the data entered will only be processed by the payment service providers and stored by them. In other words, we do not receive any account- or credit card-related information, but only information confirming or negatively confirming the payment. Under certain circumstances, the data may be transmitted to credit reporting agencies by the payment service providers. This transmission serves the purpose of identity and credit assessment. In this regard, we refer to the terms and conditions and data protection notices of the payment service providers.
For payment transactions, the terms and conditions and data protection notices of the respective payment service providers apply, which can be accessed within the respective websites or transaction applications. We also refer to these for further information and for the assertion of revocation, information, and other data subject rights.
Provision of online marketplaces for e-commerce
We process the data of our users who enter or use our marketplace for the purpose of concluding contracts for services or products with the providers registered there, i.e., we make the platform available to the users and providers and process the data of the users and providers within the framework of the contractual agreements concluded between them. For this purpose, the necessary data (e.g., inventory data) and usage data (e.g., access times) are collected and stored. The data collected is used by the providers to provide and improve their services and by the users to find and contract services. Legal basis for data processing in the context of the provision of the marketplace is Art. 6 para. 1 sentence 1 lit. b) GDPR, insofar as the marketplace is provided within the framework of contractual relationships. If the marketplace is offered as part of the communication with other users or is used to facilitate the initiation of contracts, the legal basis for the data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. In this case, we have a legitimate interest in providing a platform for the initiation and fulfillment of contracts between users.
Newsletter and electronic communications
We send newsletters, e-mails, and other electronic notifications (hereinafter “newsletters”) only with the consent of the recipients or a legal permission. If the contents of the newsletter are specifically described within the framework of registration, they are decisive for the consent of the users. Otherwise, our newsletters contain information about our services and us.
We maintain online presences within social networks and platforms to communicate with customers, interested parties, and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Provision of online services and web hosting
We use web hosting services to provide the following services: infrastructure and platform services, computing capacity, storage space, and database services, security and technical maintenance services that we use for the purpose of operating this online offering.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta, and communication data of customers, interested parties, and visitors to this online offering based on our legitimate interests in an efficient and secure provision of this online offering in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of contract processing agreement).
Collection of access data and log files
We, or our hosting provider, collect data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR on each access to the server on which this service is located (so-called server log files). The access data includes the name of the accessed website, file, date and time of access, transferred data volume, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address, and the requesting provider.
Log file information is stored for security reasons (e.g., to investigate abusive or fraudulent activities) for a maximum period of 7 days and then deleted. Data, the further storage of which is necessary for evidence purposes, is excluded from deletion until the respective incident has been finally clarified.
We conduct surveys and questionnaires to collect information for the respective communicated survey or questionnaire purpose. The surveys conducted by us (hereinafter referred to as “surveys”) are evaluated anonymously. Personal data is only processed to the extent necessary for the provision and technical implementation of the surveys (e.g., processing the IP address to display the survey in the user’s browser or enabling the resumption of the survey using a cookie).
Further information on processing procedures, procedures, and services:
Web analysis (also referred to as “reach measurement”) is used to evaluate visitor flows to our online offering and may include pseudonymous values regarding visitor behavior, interests, or demographic information, such as age or gender. With the help of reach analysis, we can, for example, determine at what time our online offering or its functions or contents are most frequently used or invite reuse. We can also track which areas require optimization.
In addition to web analysis, we can also use test procedures to test and optimize different versions of our online offering or its components.
Unless otherwise stated below, cookies are generally stored for a period of two years.
We process personal data for the purposes of online marketing, which may include the marketing of advertising space or displaying advertising and other content (collectively referred to as “content”) based on potential user interests and measuring their effectiveness.
For these purposes, so-called user profiles are created and stored in a file (known as a “cookie”) or similar procedures are used, whereby information relevant to the display of the aforementioned content is stored about the user. This information may include viewed content, visited websites, online networks used, as well as communication partners and technical details such as the browser used, the computer system used, and information on usage times and functions used. If users have consented to the collection of their location data, this data may also be processed.
Unless otherwise stated, please assume that cookies used are stored for a period of two years.