I.General information

​

​The supervisor within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is

Golden Elite GmbH
 

The Internet site, www.hitftx.com (“website“) is hereinafter also referred to as “HITft.X” or “we“/ “us“), which offers users a platform to order online trainings & sport items.

We provide information below on how we handle your personal data.

If you use our website and the service provided by our website, your personal data will be processed. Because we value the protection of your privacy, we would like you to know in detail which of your personal data we process and how.

These Privacy Policy can be accessed at any time on our website under the heading “Privacy Policy” at www.hitftx.com/privacypolicy.

An important note: We of course comply with the legal provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act and other data protection regulations.

​

II.Name and address of the person responsible

​

HITft.X, as the operator of the website, is responsible for your personal data that is processed when you use our website.

HITft.X is represented by:

 

Golden Elite GmbH

Bielstrasse 31

2540 Bettlach

Switzerland

Phone: +41 78 700 9889

mail: info@hitftx.com

 

III.Contact details of the data protection officer

​

If you have any questions or wish to exercise your rights regarding data privacy, please contact us at info@hitftx.com

​

IV.Contact details of the representative in the EU in accordance with Art. 27 of the GDPR

 

WINHELLER Rechtsanwaltsgesellschaft mbH

Friedrich-Ebert-Anlage 37

60327 Frankfurt am Main

Phone: +49 (0) 69 76757780

E-mail: info@hitftx.com

​

V.Processing of personal data

​1. Provision of the website and creation of log files

a) Description and scope of data processing

​

Whenever you access our website, for technical reasons, the following data transmitted by your browser is automatically saved:

• • Contact details

  • Activities

  • Orders

  • Invoices

  • Other

 

Our system stores your personal data in log files. This data is not stored with other personal data concerning you.

​

b) Legal basis for data processing

​

Article 6 para 1 sentence 1 lit. f of the GDPR provides the legal basis for the temporary processing of data and log files.

​

c) Purpose of data processing

​

We use your personal data to optimize our website and to ensure the security of our IT systems. Your data will not be processed for marketing purposes.

This constitutes our legitimate interest in data processing.

​

d) Duration of storage

​

The personal data referred to above shall be deleted as soon as they are no longer needed for processing purposes. This applies to the data processing necessary for making the website available once you end the respective session.

 

e) Possibility of objection and removal according to Art. 21 GDPR

​

There is no possibility to object to this data processing, as the processing of the data is absolutely necessary for us to provide the website.

​

2.Registration feature

​

a) Description and scope of data processing

​

From our website, we give you the opportunity to register in our memberships with personal data you have provided. If you make an online registration , we process the following personal data:

• • • First and last name

    • E-mail address

If you make an online registration as a buyer of one of our products, we process the following data, which – in individual cases – may contain a personal reference:

• • • Name

    • Company name (optional)

    • Contact and address data for delivery

    • Mobile phone number for delivery

    • E-mail address

    • Credit card, PayPal or IBAN information (this is not stored in our data base, only the payment processor company has access to this information)

Your data will not be passed on to third parties.

By registering on this site, we will also store the date and time of your registration.

​

b)Legal basis for data processing

​

The processing of the above-mentioned personal data is necessary for the initiation and fulfilment of the contractual relationship that you conclude with us via the registration feature. The legal basis for the processing of your personal data is stipulated in Art. 6 para. 1 sentence 1 lit. b. of the GDPR.

The legal basis for the collection and storage of the date and time of your registration is stipulated in Art. 6 para. 1 sentence 1 lit. f of the GDPR.

 

c)Purpose of data processing

​

The personal data collected during registration is necessary for the initiation of the contractual relationship as well as for the execution and fulfilment of the contract concluded with you as defined in the Terms and Conditions, in particular to process orders and to deliver products.

In addition, the information you provide during registration is processed by us to prevent and detect fraud and misuse, to protect the security of ourselves.

​

d)Duration of storage

​

As soon as we no longer need your personal data for the aforementioned purpose, they will be deleted immediately.

This is usually the case after the expiration of the limitation period, beginning with the end of the year in which the contractual relationship is terminated, which is concretized by the Terms and Conditions of HITft.X as well as how the registration on our website takes place. Your data will be blocked and deleted after expiry of the legal retention period. In case there are any contractual or legal storage obligations, further storage of the personal data may be required even after the end of the contract. The data will then be deleted after expiry of the storage obligations.

​​

3.Cookies

​

a) Description and scope of data processing

​

We use so-called cookies on our website, which serve to recognize you as a user and make it easier for you to use our site. Cookies are small text files that your internet browser installs on your end device. They are frequently referred to as “session cookies”, which are deleted after the end of your session.

Other cookies remain installed on your device until you remove them afterwards. These installed cookies will allow us to identify your web browser during your next visit.

You can also set your web browser to inform you when cookies are installed. As part of the settings, you can choose whether cookies should only be permitted in specific cases, or whether they should only be installed in certain cases, or whether they should not be accepted at all, or whether they should be automatically deleted after closing your web browser. If you decide to deactivate cookies, this may impair the use of the website.

We use cookies on our website to make it more user-friendly for you and to protect both you and us from fraudulent actions. This provides us with certain data such as IP address, browser used and operating system.

Cookies cannot be used to start programmes or transfer viruses to a computer. Using the information contained in cookies, we can make navigation easier for you and enable the correct display of our web pages.

Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.

​

b) Legal basis for data processing

​

The legal basis for the processing of your personal data using cookies is stipulated in Art. 6 para. 1 sentence 1 letter f of the GDPR.

​

c) Purpose of data processing

​

For technical reasons, we use cookies to optimize the use of the website for you. Otherwise, we will not be able to offer you some of the functions of our website, as it is necessary for your web browser to be recognized after a page change.

The use of cookies is necessary for the following application:

• • • Verification of the user account

    • Overview of the shopping cart

    • Transfer of language settings

    • Memorizing search terms

    • Detection of fraudulent behavior and strengthening of IT security

These purposes also constitute our legitimate interest in processing your personal data. We do not use the personal data collected by cookies, which are technically necessary, to create user profiles.

​

d) Duration of storage, possibility of objection and removal

​

Cookies are stored on the user’s computer and transmitted by the user to our website. Therefore, you as a user have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated, it may not be possible for you to fully use all the functions of the website.

​

4.Google Analytics with anonymization function

​

a) Description and scope of data processing

​

On our website, we use Google Analytics, a web analysis service of the company Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”. The use of Google Analytics involves the use of so-called cookies. Cookies are text files which are installed on your end device and enable the analysis of your behavior when using our website.

Such cookies are used to generate information regarding your usage behavior, which is then transmitted to Google’s servers located in the USA and stored there.

Since we value your privacy, we make it possible for you to visit our website anonymously. For this reason, we use Google Analytics exclusively with the extension “_gat._anonymizeIp”, whereby your IP address is already shortened by Google within the territory of the EU member states or in other contracting states of the Agreement on the European Economic Area and results in an anonymization of your IP address. Only in exceptional circumstances will the full IP address be transferred to a Google server in the USA and shortened there. According to its own statements, Google does not merge your IP address with other data collected by Google. Google complies with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework, so that an appropriate level of data protection is guaranteed.

For more detailed information on the terms of use and privacy policy of Google Analytics, please visit https://www.google.de/analytics/terms/de.html.

​

b)Legal basis for data processing

​

The legal basis for the use of Google Analytics according to Art. 6 para. 1 sentence 1 lit. a of the GDPR requires your consent.

​

c) Purpose of data processing

​

Google uses the information to determine how you use the website, to provide us with a summary of website activity and to offer other services related to internet and website usage.

Google may also transfer this information to third parties when required to do so by law, or when Google has hired third parties to process the information.

​

d) Duration of storage

​

We will delete the user and event data relevant for the evaluation of website usage at the end of the year following the deactivation of your account with us. Furthermore, you can independently uninstall the cookies installed by Google Analytics and thus delete the stored data. The following section explains how this deletion can be carried out via the browser settings.

​

e) Possibility of revocation according to Art. 7 of the GDPR

​

You can revoke your consent to the processing of your data at any time as per Art. 7 of the GDPR. You are free to disable the installation of cookies by adjusting your browser software accordingly.

To do so, Google offers a deactivation add-on for the most common browsers, which gives you more control over what information is collected by Google regarding the websites you visit. The add-on instructs the JavaScript (ga.js) of Google Analytics that no information about the website visit should be transmitted to Google Analytics. However, the deactivation add-on doesn’t prevent Google Analytics from sending information to us or to other web analytics services we may use. For further information on how to install the respective browser add-on, please click on the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

This does not affect the lawfulness of the previously authorized processing. In case of revocation, your personal data will no longer be processed and will be deleted.

​

5.Use of Google Adwords

​

a) Description and scope of data processing

​

On our website, we use the online advertising tool “AdWords” and as part of this, we use the analysis service “Conversion-Tracking” of the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. If you reach our website via a Google ad, a cookie for conversion tracking is placed on your computer. If you visit specific subpages of our website, Google and we may recognize that you have clicked on one of our placed ads and you have been redirected to that page. Google has complied with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework, so as to ensure an adequate level of data protection.

​

b) Legal basis for data processing

​

The legal basis for the use of Google AdWords is stipulated in Art. 6 para. 1 sentence 1 lit. f of the GDPR.

​

c) Purpose of data processing

​

The information collected by the conversion cookies is used by Google to create visitor statistics for our website. This tells us the total number of users who clicked on one of our placed ads and were redirected to a web page with a conversion tracking tag. However, we do not receive any information that personally identifies users.

We use this data for advertising purposes, which includes our legitimate interest in processing your personal data.

​

d) Duration of storage

​

The cookies used by Google AdWords to analyze website use have a preset storage period, which we neither know nor can influence. You can independently uninstall the cookies installed by Google AdWords and thus delete the stored data. The following section explains how this deletion can be carried out via the browser settings. 

​

e) Possibility of objection and removal according to Art. 21 of the GDPR

​

You can prevent the conversion cookies from being installed by changing your browser settings. You can deactivate the automatic setting of cookies in general or only block the acceptance of cookies from a specific domain. You can find further information at https://support.google.com/adwords/answer/32050. The corresponding Google data protection policy can be found at https://policies.google.com/privacy?hl=de.

​

6.Use of Google AdSense

​

a) Description and scope of data processing

​

We are using Google “AdSense” on our website. AdSense is a service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, which we use to draw attention to our offers on external websites. For this, Google AdSense uses cookies that are stored on your device, in case you reach our website via a Google ad. In addition, Google AdSense uses so-called web beacons, which contain certain parameters for performance measurement, such as the display of ads, user clicks or visitor traffic on our website.

This information and your IP address as well as the collection of the displayed advertising formats are transmitted to the Google servers in the USA, stored there and possibly passed on by Google to contractual partners. Under no circumstances, however, will Google merge your IP address with other Google data. Your data may be processed on servers in the USA. Google complies with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework, so that an appropriate level of data protection is guaranteed.

We ourselves do not process any personal data in this context, but only receive statistical evaluations from Google. It is based on these statistics that we can evaluate which of the advertising measures used are successful.

​

b) Legal basis for data processing

​

The legal basis for the use of Google AdSense according to Art. 6 para. 1 sentence 1 lit. a of the GDPR requires your consent.

​

c) Purpose of data processing

​

Google will use the above-mentioned information to evaluate the way you use our website and to place target group-specific advertisements on our website. By using Google AdSense, we intend to display advertising tailored to your needs and thus increase the attractiveness of our website.

​

d) Duration of storage

​

We neither know how long your IP address is stored by Google nor can we influence it. For further information on the use of your personal data and setting options to protect your privacy, please refer to Google’s data privacy policy at

http://www.google.de/policies/privacy/.

​

e) Possibility of revocation as per Art. 7 of the GDPR

​

You can revoke your consent to the processing of your data at any time as defined in Art. 7 of the GDPR. You are free to prevent the installation of cookies by adjusting your browser software accordingly.

If you do not want the cookies to be stored, you can deactivate the acceptance of cookies for the corresponding domains in the settings of your browser. However, we would like to point out that if you do so, you may not be able to fully use the functions of our website. You can obtain further information at

http://www.google.com/policies/technologies/ads/.

This does not affect the legality of the processing that has taken place up to that point based on your consent. In case of revocation, your personal data will no longer be processed and will be deleted accordingly.

​

7. Sending newsletters via MailChimp

​

a) Description and scope of data processing

​

We offer you the possibility to receive our free newsletter from our website. When registering, your consent to the processing of your personal data is required and reference is made to this Privacy Policy. For us to send the newsletter to you, we use the following personal data you provide during the registration process:

• • • E-mail address

    • Name

We send our newsletter with the help of Mailchimp, a service of The Rocket Science Group LLC d/b/a, 675 Ponce De Leon Ave NE, Suite 5000 Atlanta, Georgia 30308 (“MailChimp”), which acts as a processor for us. The data you provide and store when registering for our newsletter will be sent to a MailChimp server and stored there for us.

This data is used exclusively for sending the newsletter you have subscribed to and is not passed on to third parties. We do not compare the collected data with other data that might be collected by other components of our site. Your data will be processed on servers located in the USA. MailChimp complies with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework, thus ensuring an adequate level of data protection.

If you purchase goods or services on our website and enter your e-mail address, we may use it to send you a newsletter. Should this be the case, the newsletter will only be used to send direct advertising for our own similar goods or services.

b)Legal basis for data processing

The legal basis for the processing of your personal data after registration for the newsletter requires your consent as per Art. 6 para. 1 sentence 1 lit. a of the GDPR.

To send you the newsletter in response to the sale of goods or services requires your presumed consent as stipulated e.g. in Art. 7 para. 3 of the German Act against Unfair Competition (UWG).

​

c) Purpose of data processing

​

Your e-mail address will be processed in order to send you the newsletter. In doing so, we check the e-mail address you provide to see whether you are the actual owner or whether the owner of the e-mail address has agreed to receive the newsletter.

We process your IP address and the date and time of your registration for our security in case a third party registers on our website without your knowledge or misuses your personal data.

Should you receive the newsletter after you have purchased goods or services on our website, this is sent for commercial purposes in order to inform you about our wide range of goods and services.

​

d) Duration of storage

​

The personal data will be deleted when they are no longer necessary for the purpose for which they were collected, for example, in case you cancelled your subscription. Should this be the case, your e-mail address will be blocked so that it can no longer be used in connection with the newsletter. Your e-mail address will be deleted at the end of the year in which your account was deactivated.

​

e) Possibility of revocation as per Art. 7 of the GDPR

​

In accordance with Art. 7 of the GDPR, you can revoke your consent at any time to the processing of your data, its use for sending the newsletter and the subscription to this newsletter itself. You can do this by clicking on the “Unsubscribe” link, which is included in every newsletter. This does not affect the legality of the processing that has taken place up to that point based on your consent. In the event of revocation, your personal data will no longer be processed and will be deleted.

​

8.Newsletter-Tracking via Mandrill

​

a) Description and scope of data processing

​

The so-called “web-beacons” (tracking pixels) are integrated in our e-mail newsletter. These are pixel-sized image files which, when the newsletter is opened, record certain data, such as the time of access, your IP address, details of the e-mail program used and which link you followed, and send these to a server. The name of the image file is unique for each newsletter recipient because a unique ID is attached to this file. This makes it possible for us to register which ID belongs to which e-mail address and is used to personalize e-mail notifications and to determine which newsletter recipient has just opened or is reading the e-mail. To do so, we use the application Mandrill from MailChimp, a service of The Rocket Science Group LLC d/b/a, 675 Ponce De Leon Ave NE, Suite 5000 Atlanta, Georgia 30308 (“MailChimp”).

​

b) Legal basis for the data processing

​

The legal basis for the use of “web-beacons” requires your consent as per Art. 6 para. 1 lit. a of the GDPR.

​

c) Purpose of data processing

​

We process the data collected in the course of tracking in order to optimize our newsletter and to provide you with information that may be of interest to you in the future.

​

d) Duration of storage

​

We will store your personal data until you have unsubscribed from the newsletter tracking and/or the newsletter completely.

​

e) Revocation as defined in article 7 of the GDPR

​

You have the right to revoke your consent to the newsletter tracking at any time. You can revoke your consent by clicking the “Unsubscribe” link. This does not affect the legality of the processing that has taken place up to that point based on your consent. In case of revocation, your personal data will no longer be processed and will be deleted.

​

9.Tracking by easypost

​

a) Description and scope of data processing

​

We use Easypost to track the delivery, a service provided by Simpler Postage Inc, 345 California St. 10th Floor, San Francisco, California 94104 (“easypost”). To enable us to use the service, we transmit to easypost the tracking number of the order placed. Your data will be processed on servers in the USA. easypost complies with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework, to ensure an adequate level of data protection.

​

b) Legal basis for the data processing

​

The legal basis for the use of shipment tracking is stipulated in Art. 6 para. 1 lit. b of the GDPR.

​

c) Purpose of data processing

​

It is necessary to store the data so that both our and your rights are protected in the event of a legal dispute about our contractual relationship.

​

d) Duration of storage

​

As soon as we no longer need your personal data for the aforementioned purpose, these data will be deleted immediately. This is usually the case after the expiry of the period of limitation, starting at the end of the year in which the contractual relationship between buyer and seller is terminated. If contractual or legal storage obligations exist, further storage of personal data may be necessary even after the conclusion of the contract. The data will then be deleted after expiry of the storage obligations.

​

e) Possibility of objection and removal as per Art. 21 of the GDPR

​

You have the opportunity to oppose the processing of your personal data at any time. However, if you do so, you will no longer be able to track the order you have placed. The data will nevertheless be further processed if compelling reasons for processing worthy of protection can be demonstrated which outweigh the interests, rights and freedoms of the data subject, or if the processing serves to assert, exercise or defend legal claims

​

10.Contact possibility

​

a) Description and scope of data processing

​

We offer you the possibility to get in contact with us via live chat on our website. The information you therefore provide in the live chat will be transmitted to us and processed for the processing of your request.

The following data is collected at the time of your inquiry:

• • • Your name

    • At the time of sending your request, the following data is also processed:

      Date and time when the chat started and ended.

The data will not be passed on to third parties.

​

b) Legal basis for data processing

​

The legal basis for the processing of your data transmitted in the course of the live chat is stipulated in Art. 6 para. 1 sentence 1 lit. f of the GDPR.

​

c) Purpose of the data processing

​

Your personal data will only be processed for the purpose of processing your enquiry and contacting you.

The processing of other personal data during the sending process is carried out for our protection in the event that the contact options provided are misused or our IT systems are affected by the contact. We do not collect any additional data.

These purposes constitute our legitimate interest in the processing of your personal data.

​

d) Duration of storage

​

We delete your personal data when they are no longer necessary for the purpose of their processing.

Any personal data sent to us in the course of your contact via live chat will be deleted when the respective conversation with you has ended. The conversation ends when it is clear from the circumstances that the matter in question has been clarified.

The personal data additionally processed during the live chat will be deleted after a period of seven days.

​

e) Possibility of objection and removal according to Art. 21 of the GDPR

​

You have the possibility to object to the processing of your personal data at any time. In this case the conversation will be discontinued. Please send your objection to info@cross-boxing.ch . In this case, the personal data processed during the communication will be deleted from our database. The data will nevertheless be further processed if we can prove compelling reasons for processing worthy of protection which outweigh the interests, rights and freedoms of the person concerned, or if the processing serves to assert, exercise or defend legal claims.

 

11. Commenting possibility

​

a) Description and scope of data processing

​

If you wish, you can leave comments, contributions or ratings on our website, and these will be published on our website. In addition, the user name you used when you registered and the date of the comment, contribution or evaluation will also be published. The use of this function requires you to enter a name, which can also be a pseudonym. Furthermore, it is necessary to enter your e-mail address. The comment function cannot be used without this information. The circle of recipients of your comments, contributions or ratings depends on your privacy settings, which allow you to choose whether your comments, contributions or ratings should be made available to the public within the marketplace or restricted to friends.

In addition, your IP address and the time at which the comment, post or review was created will be saved.

If your comment, contribution or rating is displayed on our website, we will process the e-mail address you provide, but this will not be published. If you have not used a pseudonym, only your name will be published.

​

b) Legal basis for data processing

​

Your personal data are processed based on Art. 6 para. 1 sentence 1 letter f of the GDPR.

​

c) Purpose of the data processing

​

We process the personal data in the event that the author of a comment, contribution or evaluation makes an infringing statement. We need this data in order to be able to take action against the author in the event of an infringement of rights, this is also part of our legitimate interest. We do not review any comment, contribution or evaluation before it is published.

​

d) Duration of storage

​

The comment, contribution or evaluation as well as the personal data published in this context are stored and remain on our website until they are completely deleted by us in case they are not relevant or up-to-date or have to be deleted for legal reasons.

We reserve the right to delete comments, contributions or evaluations if they are found to be illegal by third parties.

​

e) Possibility of objection and removal according to Art. 21 of the GDPR

​

You can object to the processing of your personal data in connection with your comment, contribution or evaluation at any time.

​

12. Use of YouTube components with enhanced privacy mode

​

a) Description and scope of data processing

​

Our website uses video components of the company YouTube LLC, 901 Cherry Ave., 94066 San Bruno, CA, USA, hereinafter referred to as “YouTube”, which is a subsidiary of Google Inc, Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use the option provided by YouTube “- extended privacy mode – “. According to YouTube, in this mode, simply visiting the subpage where the YouTube video is embedded will not store any of your personal information. It is only when you play the embedded YouTube video that cookies are installed on your device and personal information is sent to YouTube. If you are logged in to YouTube with your account at the time the YouTube video is played, your Internet usage behavior will be associated with your personal YouTube profile.

We do not know to which extent YouTube collects data. According to their own statements, YouTube collects location-based information, such as IP address, and sets cookies to uniquely identify your browser or Google Account. The information collected may be shared with the services of the Google Network. For more information about the extent to which YouTube and Google process data, please visit https://policies.google.com/privacy?hl=de&gl=de. YouTube, as a subsidiary of Google, also complies with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework, which ensures an adequate level of data protection.

​

b) Legal basis for the data processing

​

The legal basis for the use of YouTube components is stipulated in Art. 6 para. 1 sentence 1 lit. f of the GDPR.

​

c) Purpose of the data processing

​

Your personal data is processed in order to make the respective video uploaded to YouTube accessible to you. This constitutes our legitimate interest in the processing of your personal data.

​

d) Duration of storage

​

We neither know nor can influence the duration of the storage of your personal data collected by YouTube.

​

e) Possibility of objection and removal according to Art. 21 of the GDPR

​

If you do not want YouTube to associate the information collected through our site directly with your YouTube account, you can log out of your account first. Furthermore, you can also completely prevent the use of the YouTube plugin with add-ons available for your browser, e.g. with the script blocker “NoScript” (http://noscript.net/).

​​

​

13.Stripe

​

a) Description and scope of data processing

​

We use the payment service provider Stripe, Inc. 510 Townsend Street, San Francisco, CA 94103, USA (“Stripe”) to handle our online payment transactions. When you make payments, Stripe, in accordance with its own privacy policy, collects your payment information (e.g. credit, debit card number or bank account information), purchase amount, purchase date, name, email address, billing or shipping address and in some cases your transaction history to authenticate you.

Stripe may also share your personal information with service providers, subcontractors or other partner companies to the extent necessary to fulfil the contractual obligations of your order or to process the Personal Information on behalf of Stripe. You will find an overview of these third parties under the following link: https://stripe.com/sub-processors/legal. Stripe complies with the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework, ensuring an adequate level of data protection. In addition, Stripe has implemented internal group data transfer agreements.

​

b) Legal basis for data processing

​

The legal basis for the data processing is stipulated in Article 6 (1) sentence 1 lit. b of the GDPR.

​

c) Purpose of the data processing

​

The processing of your personal data is necessary to process your order with the payment method you have chosen, in particular to confirm your identity and to process your payment.

​

d) Duration of storage

​

The processing of your personal data is necessary to pay your order with the payment method you have chosen, in particular to confirm your identity and to manage your payment. For further information on the use of your data by Stripe, please visit https://stripe.com/de/privacy.

​

14. Online job application

​

a) Description and scope of data processing

​

We offer you the opportunity to apply for a job online via our website. At the time of your application, we collect and process the personal data you provide in your application. Generally, the following personal data is collected:

• • • First and last name

    • Place of residence

    • Date of birth

    • E-mail address

    • Language skills

    • Highest educational qualifications

    • Current job title

    • other information which will be included in your tabular curriculum vitae

If we enter into an employment contract with you after the application procedure, your personal data will be further processed for implementing the employment relationship.

​

b) Legal basis for data processing

​

The legal basis for the processing of your personal data is stipulated in Art. 6 para. 1 sentence 1 lit. b, Art. 88 of the GDPR in conjunction with § 26 paragraph 1 of the German Federal Data Protection Act. Your data are required for the implementation of pre-contractual measures, namely, the decision on the establishment of an employment relationship.

​

c) Purpose of data processing

​

We process your personal data exclusively for handling the application procedure.

​

d) Duration of storage

​

Personal data shall be deleted when they are no longer necessary for the purpose for which they were processed.

If no employment relationship is established, your data will be deleted within three months of receipt of the rejection, provided that no legitimate interests stand in the way of deletion. A legitimate interest exists in the event of a legal dispute.

​

e) Consequences of not providing your personal data

​

You are not obliged to make your data available for the aforementioned purposes. If you choose not to provide it, we will terminate the application procedure and no employment relationship can be established at that time.

​

17. Content sharing on Facebook, Instagram, Twitter and LinkedIn

​

We provide on our website the possibility to share content on Facebook, Twitter, Instagram or LinkedIn with your social network. To do this, you must click on a field integrated into our website with the text “Share with Facebook” (alternatively Twitter, Instagram or LinkedIn). Before sharing the content you have selected, we will ask you to confirm this process and log in to your account on the corresponding social network.

During this process, we do not share any personal data with the social network in question, they collect the data directly from you. For information on how your personal data is processed there, please refer to the corresponding privacy policy:

• • • Facebook – https://de-de.facebook.com/policy.php

    • Twitter – https://twitter.com/de/privacy  

    • LinkedIn – https://www.linkedin.com/legal/privacy-policy?_l=de_DE

    • Instagram – https://help.instagram.com/155833707900388

 

18.Transaction data for the tax authorities

​

Because we are based in Switzerland, we have a legal obligation to provide the following personal transaction data to the Swiss tax authorities for tax purposes:

• IP address anonymized by us

Data processing is done in accordance with Art. 6 para. 1 sentence 1 letter c of the GDPR.

The storage period of the transaction data depends on the legal storage obligations relevant to us.

​

VI.Your rights as data subject

​

Insofar as your personal data is processed by us, you are a data subject as defined by the GDPR, which means that you are entitled to the following rights vis-à-vis us:

 

1. Right of access to information

​

You have the right to request information from us at any time about the personal data we process about you. This also includes information about the origin, recipients or categories of recipients to whom we transfer your data, as well as the purposes for which we process your personal data.

​

2. Right of rectification

​

You have the right to request that we correct and/or complete your personal data immediately if your personal data is incorrect or incomplete.

​

3. Right to cancel or limit processing

​

You can request us to delete your personal data immediately. We are obliged to do this immediately. Unless otherwise agreed, this only applies if we are obliged to further process your personal data due to contractual and/or legal regulations. This is the case, for example, if tax retention obligations prohibit us from deleting your data. In such a case, we will restrict the processing and delete the personal data in question immediately after the retention period has expired.

​

4. Right to data transferability

​

You have the right to receive the personal data you provided to us in a structured, common and machine-readable format, provided that this is technically possible. You also have the right to have this data transferred to a third party without any interference from us, if you so desire.

​

5. Automated decision in individual cases including profiling

​

You have the right not to be subject to a decision based solely on automated processing, including profiling, that has legal effect on you or significantly affects you in a similar manner.

​

6. Right to appeal to a supervisory authority

​

You are entitled to complain to the supervisory authority in the member state of your habitual residence, your place of work or the place of the suspected infringement if you believe that the processing of personal data concerning you is in breach of the DSGVO or the BDSG.