Privacy Policy

Introduction

We appreciate your interest in our online shop.
With the following privacy policy, we would like to inform you about the types of your personal data (hereinafter also referred to as "data") that we process, for what purposes, and to what extent. This privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and on our websites, in mobile applications, as well as within external online presences, such as our social media profiles (hereinafter collectively referred to as "online offering").

The terms used are not gender-specific.

Data Controller:

Buddy & Selly GmbH
Schnackenburgallee 41a
22525 Hamburg
E-Mail: buy@buddyandselly.com, sell@buddyandselly.com

Contact for Data Protection Officer
E-Mail: datenschutz@buddyandselly.com

Content

  1. 1. Data Processing on our websites
  2. 2. Data processing for contract processing and for establishing contact
  3. 3. Data processing for dispatch processing
  4. 4. Data processing for payment processing
  5. 5. Advertising by e-mail or post
  6. 6. Our online presence on social media platforms
  7. 7. Application procedure
  8. 8. Transfer of personal data to countries outside the EWR/a>
  9. 9. Deletion
  10. 10. Rights of data subjects and contact options
  11. 11. Contact options

1. Data Processing on our websites

You can visit our shop without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which includes details such as the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider ("access data"). This log file serves to document the access.
These access data are evaluated solely to ensure the smooth operation of the website and to improve our services. This processing is based on our overriding legitimate interest in the proper presentation of our offering, as outlined in Article 6(1)(f) of the GDPR. All access data are deleted no later than one month after the end of your website visit.

1.1 Hosting

The services for hosting and displaying the website are provided by our service provider as part of a data processing agreement. Unless otherwise stated in this privacy policy, all access data and any data collected through forms on this website are processed on the servers of our service provider.

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner acts as a data processor on our behalf.

1.2 Content Delivery Network

To reduce loading times, we use a Content Delivery Network (CDN) for certain features. This service delivers content, such as large media files, via regionally distributed servers operated by external CDN providers. As a result, access data are processed on the servers of these service providers.

We use the CDN service provided by Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich, Germany (Cloudflare) to enhance the security and loading speed of our website. Cloudflare acts as a data processor on our behalf.

1.3 Use of cookies

Cookies are small text files or storage notes that save information on end devices and retrieve information from them. They can store login statuses in user accounts, shopping cart contents in an online shop, viewed content, or used functions within an online offering. Additionally, cookies may serve other purposes, such as ensuring functionality, security, and convenience, as well as analyzing visitor flows.

We use cookies that ensure the fundamental functionality of our pages and the optimized display of our services (essential/necessary cookies). Some of the cookies we use are deleted at the end of the browser session, meaning after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). We use both our own cookies and those from third-party providers (so-called third-party cookies).

We comply with the legal regulations regarding the use of cookies. Therefore, we obtain prior consent from users unless it is not legally required. Consent is not necessary, in particular, when storing and accessing information, including cookies, is strictly necessary to provide users with the telemedia service they have expressly requested (i.e., our website and shop). If users give their consent, the legal basis for processing their data is the declared consent pursuant to Article 6(1)(a) GDPR. Otherwise, the data processed using cookies is based on our legitimate interests pursuant to Article 6(1)(f) GDPR (e.g., for the economic operation of our online offering and improving its usability) or, when necessary for the fulfillment of our contractual obligations, to meet our contractual commitments pursuant to Article 6(1)(b) GDPR. The specific purposes for which we process cookies are explained throughout this privacy policy or as part of our consent and processing procedures.

A detailed overview of the cookies and other technologies we use, their purposes and storage duration, the legal basis for cookie usage, and further information can be found in our Consent Manager.

Consent Manager

We use the Usercentrics Consent Manager, which enables users to provide, manage, and withdraw their consent for the use of cookies, as well as for the processing operations and providers mentioned within the cookie consent management process. The consent declaration is stored to avoid repeated requests and to document the consent in compliance with legal obligations. Storage may occur server-side and/or in a cookie (so-called opt-in cookie) or via similar technologies to associate consent with a specific user or device.

Usercentrics is a service provided by Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany.

After submitting your cookie consent on our website, the Usercentrics web server stores your anonymized IP address, the date and time of your consent, browser information, the URL from which the consent was given, details about your consent choices, and an anonymous random key. Additionally, a cookie is set that contains information about your consent choices and the random key.

We process your data for the collection and management of consents to fulfill our data protection obligations. The legal basis for this processing is our legitimate interest (Article 6(1)(f) GDPR) in legally compliant documentation and proof of consents.

You can withdraw your consent at any time and also object to the processing of your data in accordance with the legal provisions of Article 21 GDPR.

Alternatively, you can configure your browser to notify you when cookies are set, allowing you to decide individually whether to accept them, or you can exclude the acceptance of cookies for certain cases or in general. Each browser manages cookie settings differently. You can find information on how to change your cookie settings in the help menu of your respective browser. Below are links to instructions for different browsers:

Please note that if you choose not to accept cookies, the functionality of our website may be limited.

1.4 Social media plugins

Our website uses social media plugins from Facebook and Instagram.

To enhance the protection of your data when visiting our website, these buttons are not embedded as unrestricted plugins but rather as HTML links. This integration ensures that when you visit a page on our website containing such buttons, no immediate connection is established with the servers of the respective social network provider.

If you click on one of these buttons, a new browser window will open, redirecting you to the website of the respective service provider, where you can (if necessary, after logging in) use functions such as the Like or Share button.

For information on the purpose and scope of data collection, further processing and use of your data by these providers, as well as your rights and privacy settings, please refer to the privacy policies of the respective providers:

1.5 Web analytics and online marketing services

We use web analytics tools for so-called "reach measurement." This helps us analyze visitor traffic to our online services and may include pseudonymous data on visitor behavior, interests, or demographic information such as age or gender. This allows us to estimate when our online services, functions, or content are most frequently accessed and how they might be reused. It also helps us identify areas that require optimization. In addition to web analytics, we may use testing procedures to compare different versions of our online offerings or their components to improve user experience.

Criteo

Through our advertising partner Criteo SA, 32 Rue Blanche, 75009 Paris, France (“Criteo”), we advertise this website in search results as well as on third-party websites.

When you visit our website, a retargeting cookie is automatically set by Criteo or its partners. This cookie assigns a pseudonymous cookie ID and enables interest-based advertising based on the pages you have visited. Data processing is carried out based on a joint controller agreement under Article 26 GDPR. We define the parameters of each advertising campaign, while Criteo is responsible for its exact implementation (e.g., determining the placement of individual ads).
The data automatically collected by Criteo (such as your IP address, visit time, device and browser information, and website usage details) may be merged with information from other sources and shared with Criteo's advertising partners.

For more details on Criteo’s privacy policy and terms of use, please visit: http://www.criteo.com/de/privacy

Google Analytics

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows us to analyze how you use our website. By default, when you visit our website, Google Analytics 4 sets cookies that collect specific information. This includes your IP address, which Google shortens by removing the last digits to prevent direct personal identification. The collected data is transmitted to Google's servers for further processing, including potential transfers to Google LLC in the USA. Google processes this data on our behalf to evaluate website usage, generate reports on website activity, and provide additional services related to website and internet usage. Your truncated IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted. All the aforementioned data processing activities, particularly the setting of cookies on your device, are carried out only with your consent (Art. 6(1)(a) GDPR). Without your consent, Google Analytics 4 will not be used during your visit to our website.

We have entered into a data processing agreement (DPA) with Google, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.
For more legal information on Google Analytics 4, please visit:

Demographic features
Google Analytics 4 includes a special feature called "Demographic Features," which allows the creation of statistics related to age, gender, and visitor interests. This data is generated by analyzing third-party advertising and information. It helps identify target audiences for marketing activities. However, the collected data cannot be linked to any specific individual and is deleted after two months.

Google Signals
As an extension of Google Analytics 4, this website may use Google Signals to generate cross-device reports.
If you have enabled personalized ads and linked your devices to your Google account, Google may—with your explicit consent to Google Analytics (Art. 6(1)(a) GDPR)—analyze your cross-device behavior and create database models, including cross-device conversions. We do not receive any personal data from Google, only aggregated statistics. If you want to disable cross-device tracking, you can turn off "Personalized Advertising" in your Google Account settings by following the instructions here: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en For more information on Google Signals, visit: https://support.google.com/analytics/answer/7532985?hl=en

UserIDs
As an extension of Google Analytics 4, this website may use the "User IDs" feature. If you have consented to the use of Google Analytics 4 (Art. 6(1)(a) GDPR), created an account on this website, and log in across multiple devices, your activities—including conversions—can be analyzed cross-device. For data transfers to the USA, Google has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

Google Ads

For advertising purposes in Google search results and on third-party websites, a Google Remarketing Cookie is set when you visit our website. This cookie automatically collects and processes data (IP address, time of visit, device and browser information, and details about your website usage) to enable interest-based advertising using a pseudonymous Cookie ID based on the pages you have visited. Further data processing will only take place if you have enabled "Personalized Advertising" in your Google Account settings. If you are logged into Google while visiting our website, Google will combine this data with Google Analytics data to create and define audience lists for cross-device remarketing. To analyze website activity and track events, we use Google Ads Conversion Tracking to measure your subsequent interactions after reaching our website via a Google Ads advertisement. This may involve the use of cookies and the collection of data (IP address, time of visit, device and browser information, and details about your website usage) based on predefined events such as visiting a webpage or signing up for a newsletter. Using pseudonyms, usage profiles can be generated from this data.

Meta Ads (Facebook Pixel)

We use the Facebook Pixel as part of the technologies of Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin 4, Ireland (‘Facebook (by Meta)’ or ‘Meta Platforms Ireland’) described below. The Facebook Pixel automatically collects and stores data (IP address, time of visit, device and browser information as well as information about your use of our website based on events specified by us, such as visiting a website or subscribing to a newsletter), from which usage profiles are created using pseudonyms. As part of the so-called extended data comparison, information is also collected and stored in hashed form for comparison purposes, which can be used to identify individuals (e.g. names, e-mail addresses and telephone numbers). For this purpose, a cookie is automatically set by the Facebook pixel when you visit our website, which automatically enables your browser to be recognised by means of a pseudonymous cookie ID when you visit other websites. Facebook (by Meta) will combine this information information with other data from your Facebook account and use it to compile compile reports on website activity and to provide other services relating to website services associated with the use of the website, in particular personalised and personalised and group-based advertising. The information automatically collected by Facebook (by Meta) technologies about your use of our website is usually transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. Further information about data processing by Facebook can be found in Facebook's privacy policy (https://www.facebook.com/privacy/policy/).

Microsoft Bing Ads

We use conversion tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA on our pages. Microsoft Bing Ads stores a cookie on your end device if you have reached our shop via a Microsoft Bing advert. In this way, Microsoft Bing and we can recognise that someone has clicked on an ad, has been redirected to our shop and has reached a predetermined target page (conversion page). We only learn the total number of users who clicked on a Bing advert and were then forwarded to the conversion page. No personal information about the identity of the user is disclosed.

Further information on data protection and the cookies used by Microsoft and Bing Ads can be found on the Microsoft website at https://privacy.microsoft.com/de-de/privacystatement https://privacy.microsoft.com/en-en/privacystatement

NextLevel Defender

This website uses tracking cookies for the NextLevel Defender tool. This is provided by Next Level S.L., Carrer Llorenc Vicens 3 Planta 3, 07002 Palma de Mallorca. NextLevel Defender is a fraud protection tool that prevents fraudulent purchases by users who have been referred to this shop by partners.

Further information on Next Level Defender's data protection can be found here (https://nextleveldefend.com/dataprotection).

The use of this tool is based on our legitimate interests (Art. 6 para. 1 lit. f. GDPR) to prevent fraudulent contract conclusions.

Varify

We use Varify.io from the company Varify GmbH, Südliche Münchner Straße 55, 82031 Grünwald, Germany. Varify is a service that enables our website to be further developed and customised with the help of so-called ‘A/B tests’.

For this purpose, we store cookies in your browser in order to evaluate and analyse these ‘A/B tests’. We have ensured that the cookies stored in your browser do not process any of your personal data and that no conclusions can be drawn about you. The cookies only register your interaction with the website by categorising you into a user group. The user group is analysed and evaluated anonymously. Your IP address is processed for a short time to play the cookie, but it is not stored.

The use of Varify.io is based on our legitimate interest (Art. 6 para. 1 lit. f. GDPR) in the efficient provision and optimisation of our online offer.

Webgains

We work together with co-operation partners who advertise our products on various platforms on the Internet (‘affiliate marketing’). By clicking on the advert you will be redirected to our website. The co-operation partners receive a fee for this placement activity. To calculate the fee, we record the sales initiated by the cooperation partner, together with the data relevant for calculating the remuneration. This includes the value of the products purchased, product information, an internal ID, the relevant currency and details of the remuneration model agreed with the cooperation partner as well as details of the agent themselves.

The exact calculation of the remuneration for the co-operation partners is carried out by our service provider Webgains GmbH, Frankenstraße 150C, 90461 Nuremberg.

The legal basis for data processing is Art. 6 para. 1 lit. b GDPR. For this purpose, you will be asked to accept a cookie. This cookie is placed on your end device with your consent (Art. 6 para. 1 lit. a GDPR) to allow the resulting data to be transferred to our cooperation partners. The data listed above will be stored for verification purposes after the payment has been processed in accordance with the provisions of tax and commercial law. This is also carried out by our service provider Webgains. The legal basis is Art. 6 para. 1 lit. c GDPR.

In the event of ambiguities in the processing of the brokered sale, further information on the brokered sale may be provided by our cooperation partner in order to clarify the facts. Legal basis: Art. 6 para. 1 lit. f GDPR. If you participate in a cashback programme, we will provide the programme provider with the data required to pay the remuneration.

2. Data processing for contract processing and for establishing contact

For contract processing (including enquiries about and processing of any existing warranty and service disruption claims as well as any statutory updating obligations), we collect personal data in accordance with Art. 6 para. 1 lit. b GDPR if you voluntarily provide us with this data as part of the sale of goods to us and associated services or when placing your order. Mandatory fields are labelled as such; we need this data to process the contract and cannot process the contract without it. Which data is collected can be seen from the respective input forms.

Further information on the processing of your data, in particular on the transfer to our service providers for order, payment and dispatch processing, can be found in the following sections of this privacy policy.

After completion of the contract, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law in accordance with Art. 6 para. 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 lit. a GDPR, or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

2.1 Enterprise resource planning system

We use enterprise resource planning system from external service providers to process orders and contracts. Our service providers work for us within the framework of order processing. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

2.2 Customer account

If you have given your consent to this in accordance with Art. 6 para. 1 lit. a GDPR by deciding to open a customer account, we will use your data to open a customer account and to store your data for further future sales of goods to us or orders on our website.

You can delete your customer account at any time, either by sending a message to the contact option described in this privacy policy or by using a function provided for this purpose in the customer account.

After deletion of your customer account, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 lit. a GDPR, or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

The statutory retention period is ten years for documents relevant under tax law and for trading books, inventories, opening balance sheets, annual financial statements, the work instructions required to understand these documents and other organisational documents and accounting records, and six years for commercial and business letters received and reproductions of commercial and business letters sent. The period begins at the end of the calendar year in which the last entry was made in the book, the inventory, the opening balance sheet, the annual financial statements or the management report was prepared, the commercial or business letter was received or sent or the accounting voucher was created, the record was made or the other documents were created.

2.3 Making contact

When contacting us (e.g. by contact form, email, telephone or via social media) and in the context of existing user and business relationships, the information of the enquiring persons is processed insofar as this is necessary to answer the contact enquiries and any requested measures. We collect data to process your enquiries in accordance with Art. 6 para. 1 lit. b GDPR if you voluntarily provide us with this information when contacting us. Mandatory fields are labelled as such; we need this data to process your contact. Which data is collected can be seen from the respective input forms. After your enquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration. We use the Zendesk tool for customer communication. Zendesk is a service provided by Zendesk Inc, 989 Market St, San Francisco, CA 94103 United States. The service provider works for us as an order processor and is certified in accordance with the EU-US Privacy Framework. It has also implemented company-wide data protection guidelines (so-called Binding Corporate Rules), which have been approved by the responsible supervisory authority. We have concluded an order processing contract with Zendesk in accordance with Art. 28 GDPR, which includes the standard data protection clauses.

3. Data processing for dispatch processing

In order to fulfil the contract, we pass on your data to the shipping service provider commissioned with the delivery in accordance with Art. 6 para. 1 lit. b GDPR, insofar as this is necessary for the delivery of ordered goods.

If you have given us your express consent to this during or after your order, we will pass on your e-mail address and telephone number to the selected shipping service provider in accordance with Art. 6 para. 1 lit. a GDPR so that they can contact you before delivery to announce or coordinate delivery. You can revoke your consent at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

Our shipping service providers are:

  • United Parcel Service Deutschland S.à r.l. & Co. OHG
    Görlitzer Straße 1
    41460 Neuss
    Deutschland
    Hinweise zum Datenschutz findest Du hier.
  • DHL Paket GmbH
    Sträßchensweg 10
    53113 Bonn
    Deutschland
    Hinweise zum Datenschutz findest Du hier.

4. Data processing for payment processing

We work with the following partners to process payments in our online store: technical service providers, credit institutions, payment service providers. You can find detailed information on our respective partners in the “Our payment methods” section.

4.1 Data processing for transaction processing

Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers, who work for us as part of order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for processing the payment. This serves to fulfil the contract and the legal basis for processing is Art. 6 para. 1 lit. b GDPR. In some cases, the payment service providers collect the data required to process the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the data protection notice of the respective payment service provider applies. If you have any questions about our partners for payment processing and the basis of our cooperation with them, please use the contact option described in this privacy policy.

4.2 Data processing for fraud prevention and optimisation of our payment processes

If necessary, we provide our service providers with further data, which they use together with the data necessary for processing the payment as our processors for fraud prevention and optimisation of our payment processes (e.g. invoicing, processing of disputed payments, accounting support). In accordance with Art. 6 para. 1 lit. f GDPR, this serves to safeguard our legitimate interests in our protection against fraud and efficient payment management, which predominate in the context of a balancing of interests.

4.3 Data processing for payment by instalments option

When selecting the instalment payment option and granting the necessary data protection consent in accordance with Art. 6 para. 1 lit. a GDPR, personal data (first name, surname, address, e-mail, telephone number, date of birth, IP address, gender) together with data required for transaction processing (product, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and order time) are transmitted to our partner Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden, for processing this payment method.

To check the identity or creditworthiness of the customer, our partner carries out queries and information from publicly accessible databases and credit reference agencies. The providers from whom information and, if applicable, creditworthiness information is obtained on the basis of mathematical-statistical procedures, as well as further details on the processing of your data after transmission to our partner Klarna, can be found in their data protection information, which can be accessed at: https://www.klarna.com/international/.

Our partner Klarna uses the information received about the statistical probability of a payment default to make a balanced decision about the establishment, execution or termination of the contractual relationship. You have the option of contacting Klarna to explain your point of view and contest the decision. The consent to data transfer given during the ordering process can be revoked at any time, even without giving reasons, with effect for the future.

5. Advertising by e-mail or post

5.1 Email newsletter with registration and newsletter tracking

If you register for one of our newsletters, we will use the data required for this or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.

To subscribe to a newsletter, it is generally sufficient to provide your e-mail address. However, we may ask you to provide a name so that we can address you personally in the newsletter, or to provide further information if this is necessary for the purposes of the newsletter.

Registration for our newsletter is always carried out in a so-called double opt-in procedure. This means that after registering you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no-one can register with other people's e-mail addresses. Registration for the newsletter is logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your stored data are also logged.

Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address from the recipient list unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

We would like to point out that we evaluate your user behaviour when sending the newsletter. For this purpose, we also analyse your interaction with our newsletter by measuring, storing and evaluating opening rates and click rates in order to design future newsletter campaigns (‘newsletter tracking’).

For this analysis, the emails sent contain single-pixel technologies (e.g. so-called web beacons, tracking pixels) that are stored on our website. In particular, we link the following newsletter data for the analyses: The page from which the page was requested (so-called referrer URL), the date and time of the request, the description of the type of web browser used, the IP address of the requesting computer, the e-mail address, the date and time of registration and confirmation and the one-pixel technologies with your e-mail or IP address and, if applicable, an individual ID. Links contained in the newsletter may also contain this ID.

Wenn Du kein Newsletter-Tracking wünschst, ist es jederzeit möglich Dich – wie zuvor beschrieben – vom Newsletter abzumelden.

If you do not wish to receive newsletter tracking, you can unsubscribe from the newsletter at any time as described above.

5.2 Newsletter dispatch

The newsletter and the newsletter tracking described above are sent as part of processing on our behalf by the service provider Klick-Tipp Ltd, 15 Cambridge Court, 210 Shepherd's Bush Road, London w67NJ, United Kingdom, to whom we pass on your e-mail address for this purpose.

Further information on Klick-Tipp's data protection can be found at https://www.klicktipp.com/datenschutzerklarung/.

5.3 Sending review requests by email

If you have given us your express consent to this during or after your order in accordance with Art. 6 para. 1 lit. a GDPR, we will use your email address to request a review of your order via the review system we use. This consent can be revoked at any time by sending a message to the contact option described in this privacy policy or via a link provided for this purpose in the evaluation request.

The rating requests may also be sent by our service provider Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany, (“Trusted Shops”).

We receive information on the respective status from Trusted Shops (e.g. whether the review request has been sent and whether it has been received) as part of the sending of review requests. This is done in accordance with Art. 6 para. 1 lit. f GDPR to fulfill our legitimate interest in receiving information about the rating invitations in order to make any necessary optimizations based on this and to fulfill the legitimate interest of Trusted Shops in being able to offer this service.

We are jointly responsible with Trusted Shops for sending rating requests and for collecting and displaying rating and status information.

Within the scope of the joint responsibility existing between us and Trusted Shops, please contact Trusted Shops in case of data protection questions and to assert your rights, whose contact options you can find here. Further information on data protection can be found at the following link: https://www.trustedshops.de/impressum-datenschutz/ Irrespective of this, you can always contact us using the contact option described in this privacy policy. If necessary, your request will then be forwarded to the other responsible party for a response.

5.4 Postal advertising and right to object

In addition, we reserve the right to use your first and last name and your postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by post. This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in a promotional approach to our customers in accordance with Art. 6 para. 1 lit. f GDPR. You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described in this privacy policy.

The advertising mailings are provided as part of processing on our behalf by a service provider to whom we pass on your data for this purpose. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.

5.5 Integration of Trusted Shops Trustbadges

If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, Trusted Shops widgets are integrated on this website to display the Trusted Shops services (e.g. seal of approval, collected reviews) and to offer Trusted Shops products to buyers after an order.

The Trustbadge and the services advertised with it are an offer from Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne (“Trusted Shops”), with whom we are jointly responsible under data protection law in accordance with Art. 26 GDPR. As part of this data protection notice, we inform you below about the essential contents of the contract in accordance with Art. 26 para. 2 GDPR. Within the scope of the joint responsibility existing between us and Trusted Shops AG, please contact Trusted Shops in case of data protection questions and to assert your rights, preferably using the contact options provided in the data protection information. Irrespective of this, you can always contact the controller of your choice. Your request will then, if necessary, be forwarded to the other responsible party for answering. for answering.

6. Our online presence on social media platforms

We are present on many social media platforms. We use them to provide information about our products and current special offers. When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. This data is used to create so-called user profiles using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are usually placed on your device for this purpose. The visitor behavior and the interests of the users are stored in these cookies. This serves in accordance with Art. 6 para. 1 lit. f. GDPR to safeguard our legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties, which predominate in the context of a balancing of interests. If you are asked by the respective social media platform operators for consent to data processing, e.g. with the help of a checkbox, the legal basis for data processing is Art. 6 para. 1 lit. a GDPR.

For certain processing activities on our social media profiles on Facebook, we are jointly responsible with the platform operator in accordance with Art. 26 GDPR. You can find the key information on the agreement concluded between us and Facebook and your associated rights here.

Where the aforementioned social media platforms are headquartered in the USA, an adequate level of data protection is ensured by an adequacy decision of the EU Commission, which can be accessed hier for the USA.

Detailed information on the processing and use of data by the providers on their pages as well as a contact option and your rights and setting options in this regard to protect your privacy, in particular opt-out options, can be found in the providers' data protection notices linked below.

Opposition options (Opt-Out):

7. Application procedure

We are always on the lookout for employees and would be delighted if you apply to us. Your data will then be collected and processed by us for the purpose of deciding on the establishment of a contractual relationship.

The legal basis for the processing is the GDPR i.V.m. § Section 26 of the Federal Data Protection Act (BDSG). If the job for which you are applying is not an employment relationship within the meaning of Section 26 (8) BDSG, the legal basis for the processing of your data is Art. 6 (1) (b) GDPR. Personal data may also be processed on the basis of other statutory provisions, in particular labor law, vocational training law and social law in their respective versions. Insofar as the processing of data is necessary to fulfill a legal obligation to which we are subject, it is based on Art. 6 para. 1 lit. c GDPR. If you consent to the processing of your data, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR.

Your personal data from an application process will be stored until a decision is made and then deleted after six months at the latest or, if your application is successful, transferred to your personnel file.

If you have consented to the processing of your data, the storage period resulting from your consent and the possible exercise of your right of revocation are decisive criteria for the storage period, whereby the revocation does not affect the processing on other legal bases.

If legal disputes arise in the context of the application process, the legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR. Our legitimate interests then lie in the assertion, exercise or defense of legal claims. In this case, there may be a storage period that goes beyond the decision on the establishment of a contractual relationship. The data will then be stored for as long as the processing of the data is necessary for the establishment, exercise or defense of legal claims.

8. Transfer of personal data to countries outside the EWR

If necessary for our purposes, we also transfer your data to recipients outside the European Economic Area (EEA), so-called “third countries”.

If we transfer data to third countries, we ensure that the recipient has implemented an adequate level of data protection within the meaning of Art. 45 GDPR or suitable guarantees within the meaning of Art. 46 (2) and (3) GDPR and that there are no other interests worthy of protection against the transfer of data.

9. Deletion

We delete your personal data as soon as it is no longer required for the aforementioned purposes of processing, in the event of an objection there are no compelling legitimate grounds on our part to the contrary or in the event of a revocation there is no other legal basis for the processing. In certain cases, e.g. if there is a legal obligation to retain data, your personal data will initially be blocked and deleted once the retention period has expired.

10. Rights of data subjects and contact options

As a data subject, you have the right to obtain confirmation as to whether or not personal data concerning you is being processed by us and, where that is the case, the right to access this personal data (Art. 15 GDPR), the right to rectification of inaccurate data (Art. 16 GDPR), the right to erasure (Art. 17 GDPR) and the right to restriction (blocking) of your data (Art. 18 GDPR). In addition, in the case of processing on the basis of Art. 6 para. 1 lit. e or f GDPR, you can object to the processing (Art. 21 GDPR), whereby you must provide a special reason, except in the case of direct advertising. If you have provided this data, you can request a transfer of the data (Art. 20 GDPR). If the processing is based on consent within the meaning of Art. 6 sentence 1 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, you can revoke this consent at any time for the future (Art. 7 para. 3 GDPR). You also have the right to contact the competent data protection supervisory authority (Art. 77 GDPR). Whether and to what extent these rights exist in individual cases and under what conditions they apply is laid down by law in the aforementioned standards. If you have any questions or complaints about data protection at Buddy & Selly, we recommend that you first contact our data protection officer (see contact details).

11. Contact options

If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction or deletion of data as well as revocation of any consent given or objection to a specific use of data, please contact our company data protection officer.

Buddy & Selly GmbH
Schnackenburgallee 41a
22525 Hamburg
E-Mail: datenschutz@buddyandselly.com

Stand: Januar 2025