Collection, processing and use of your data
You can use our website without providing any personal data. We only store access data, such as the name of your internet service provider, the website from which you visit our site, or the name of the requested file on an anonymous basis. This data is used solely to improve our website and does not contain any references to your identity.
Personal data is only collected when you provide such data voluntarily when placing an order, opening a customer account or registering for our newsletter. Your data will only be used without your express permission for processing your order and for distributing our catalogues/mailings. When you register for our newsletter, we will use your e-mail address for advertising purposes until you unsubscribe from the newsletter.
We will store your personal information insofar as is necessary for conducting business and to the extent permitted under the German Federal Data Protection Act (EU GDPR).
Transfer of personal data
We process your personal data for order processing purposes and transfer the information required for this purpose to other service providers. To provide you with detailed tracking information, we transfer your email address to the parcel service for this purpose only. Thus, the parcel service can inform you about the current status of your parcel. The tracking information is provided by email.
So that your shipment of your order can be tracked, we use the services of PAQATO GmbH, Johann-Krane-Weg 6, 48149 Münster (“Paqato”). Paqato sends shipping notifications and status updates to the shipment in our name. In accordance with Art. 6 section 1 lit. f EU GDPR, after we ship a package we pass on customer data (mailing address, first and last name and address) and the tracking number to Paqato in accordance with our justified interest in effective and informative customer communication as well as the customer’s interest in transparent and reliable shipping processes. This data will not be passed on to third-parties by Paqato and will be used exclusively for the purposes named above. Paqato’s data protection policies can be read here: https://www.paqato.com/datenschutzerklaerung/.
If you are a resident in Germany and request a purchase via invoice, direct debit or financing, we will request a credit check on the basis of statistical methods from infoscore Consumer Data GmbH, Rheinstr. 99, 76532 Baden-Baden, Germany, and if necessary from Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss, Germany (www.boniversum.de or www.meineauskunft.org) for the protection of our legitimate interests. We transfer all personal data required for the purpose of this creditworthiness check to the Creditreform Boniversum GmbH, 41460 Neuss, Germany, and use the information we receive concerning the statistical likelihood of non-payment as the basis for deciding whether to enter a contractual relationship. The credit information may contain score values which are calculated on the basis of approved statistical methods and in the calculation of which address data etc. is also involved. For detailed information about the way infoscore Consumer Data GmbH processes data according to Art. 14 of the General Data Protection Regulation see here: https://finance.arvato.com/icdinfoblatt, for Creditreform Boniversum GmbH see:https://www.boniversum.de/eu-dsgvo/?lang=en.
Your legitimate interest with regard to data protection are taken into account at all times in accordance with legal provisions. If your data is processed by our service partners who help us provide a high level of customer service and delivery, the scope of the data transmitted for this purpose shall be restricted to the necessary minimum. In case we provide your data to contractual partners or cooperation partners (direct delivery) in order to fulfil the contractual obligations with regards to order processing, prize draws or partner offers, we will inform you accordingly. Our contractual partners and cooperation partners have been carefully chosen and have committed themselves to confidentiality in accordance with the legal provisions of Article 28 GDPR, as well as to compliance with our own data protection standards. In particular, our contractual partners and cooperation partners are not permitted to pass the data of our customers on to third parties for advertising purposes. Our contractual partners and cooperation partners may only use the data provided to fulfil their function to process your order.
Your personal data is encoded during the online data transfer using SSL, SHA-256 with RSA encryption, RSA with 2048 bit exchange by Symantec Corporation. Our website and other systems are protected by technical and organisational measures to prevent loss, damage, access, modification or distribution of your data by unauthorised persons. Your customer account can only be accessed with your personal password. You should always treat your access data as confidential and close the browser window as soon as you have finished communicating with us, particularly if you share your computer with other persons. Please use your access data for one customer account only and do not use the same password multiple times.
You can opt-out of data collection by Google Analytics by installing the Google Analytics opt-out browser add-on (http://tools.google.com/dlpage/gaoptout?hl=en).
Further information can be found under http://www.google.com/analytics/terms/gb.html (Google Analytics Terms of Service & Privacy). Please note that on this website, Google Analytics code is supplemented by “gat._anonymizeIp();” to ensure an anonymized collection of IP addresses (so called IP-masking).
We also use Google Analytics to evaluate data from AdWords and from the double-click cookie for statistical purposes. Should you not wish this, you can deactivate it via Google's ads preferences manager (http://www.google.com/settings/ads/onweb/?hl=en).
Google RemarketingThis website uses Google Remarketing for marketing and optimisation purposes. Google Remarketing generates cookies whenever you visit our website to show you targeted ads. This data can be used to create usage profiles using pseudonyms. These data will neither be used to personally identify you nor will they be merged with data about the bearer of the pseudonym without your express permission.
Google Display NetworkWe use the Google Display Network to improve the quality of our services.
Our digital offers utilize pseudonym tracking functions of Facebook Inc. (“Facebook”) 1 Hacker Way, Menlo Park, CA 94025, USA. This technology allows us to display relevant ads on Facebook for internet users that have already shown interest in our online shop and our products. We believe that display of ads based on your interests is better than the display of ads without relevance. No customer emails are transferred to Facebook.
This website uses the web analysis service with Bid Management from intelliAd Media GmbH, Sendlinger Straße 7, 80331 Munich, Germany. Anonymised data is processed and saved on an aggregated basis, and user profiles are created from it, in order to ensure effective design and for optimising the website. Using intelliAd Tracking involves cookies being saved locally. You have the right to deactivate the saving and further use of your browsing data. Please use the intelliAd Opt-Out function for this purpose.
This process serves to improve tracking precision. A first-party cookie (ia-
Customer Journey Tracking
The following partner pixel can also be delivered through the intelliAd onsite pixel: Rocket Fuel (http://emea.rocketfuel.com/privacy-policy). This serves primarily to extend the half-life of our cookies and in doing so guarantee an improved tracking together with creating a comparison with external user IDs e.g. Realtime Bidding measures. Please note the respective partners’ data protection notices and opt out functions.
Our site uses features from CloudFlare, a service provided by CloudFlare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA. CloudFlare provides a global content delivery network with DNS. Technically, the information transfer between your browser and our website is directed via the CloudFlare network. This enables CloudFlare to analyse the data traffic between the user and our websites, for example in order to identify and prevent any attacks on our services. This constitutes a legitimate interest in protecting our website from attacks and improving system performance (Art. 6 section 1 lit. f of the EU GDPR). In addition, CloudFlare might store cookies on your computer for optimisation and analysis. This serves the preservation of our legitimate interests in optimal marketing of our offer in accordance with Art. 6 section 1 sentence 1 lit. b of the EU GDPR. Based on the EU GDPR, we have reached a corresponding agreement with Cloudflare for order processing. Cloudflare collects statistical information about your visit to this website. These access data include: the name of the visited website, file, date and time of request, volume of data transmitted, confirmation of successful access, browser type and version, the user’s operating system, referrer URL (previously visited page), IP address and the inquiring provider. Cloudflare uses the log data for statistical evaluations for the purpose of operation, security and optimization of our web performance.
The e-commerce BI software Minubo allows us to analyse, optimise, as well as guarantee the economical operations of our online shop. To do so, classic e-commerce metrics (order values, orders, cancellations, returns, conversion rates, visits, etc.) are collected and graphically presented.
In particular, the following data are utilised
■ Email address
■ Order value
■ Number of orders
■ Transaction IDs
Data collection happens through systems such as Google Analytics, as well as our order management system. Minubo uses these systems merely as a source and organises the existing data. In terms of the opt-out option, please refer to the point about Google Analytics and the therein specified opt-out option.
Right of Access
According to the EU General Data Protection Regulation (GDPR), you have the right to obtain confirmation as to whether or not your personal data are being processed, and, where that is the case, request rectification, restriction or erasure of those data. ■ Right of access acc. Art. 15 EU GDPR ■ Right to rectification of inaccurate personal data and completion acc. Art. 16 EU GDPR ■ Right to erasure acc. Art. 17 EU GDPR ■ Right to restriction of processing acc. Art. 18 EU GDPR ■ Right to data portability pursuant to art. 20 EU GDPR ■ Right to object to processing of personal data acc. Art. 21 EU GDPR
EMAIL NEWSLETTERS AND ADVERTISING MAIL
With our free newsletter you can stay-up-to-date on our latest offers, customer events, prize draws and trade shows.
We use the ‘double opt-in’ process for newsletter subscription, which means that we will only send you a newsletter, if you click the confirmation link in the confirmation email to confirm your subscription.
Please note that we need your email address for subscription. You will only receive a personalised newsletter, if you share your personal data when registering as a new customer. We only ask for your title and name to personally address you in the newsletter. You can unsubscribe at any time. You can find a respective unsubscribe link in every newsletter email. Alternatively, you can get in touch with us using the provided contact data. By confirming your newsletter subscription, you also agree to the analysis of your newsletter usage behaviour. For the analysis of such usage data, our emails have an embedded tracking pixel to track open rates. A tracking pixel is an image file measuring one pixel by one pixel and creating a link to our website to allow us to analyse data on the usage of the newsletter. Therefore, we use the data entered for newsletter subscription as well as the tracking pixels that are assigned to your email address and linked to a unique ID. This data is combined with data about your use of our website.
To make sure the newsletter is displayed correctly, we collect information about the kind of device you use to open the newsletter. Based on the links you click and the open rates of the newsletter emails, we can determine which topics you are interested in. The data collected serves to create personal user profiles. In this way, we try to continuously improve our newsletter and to provide you with more individual topics about ROSE Bikes.
The information collected is stored by the newsletter provider Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany (“Inxmail”) on their server in Germany. The tracking mechanism is not supported when images are disabled in your emails by default. However in this case, the newsletter is not displayed correctly and you may not be able to use all functions. If you manually click on ‘display images’, tracking is supported, unless you have objected to the analysis of usage data. The legal ground for processing personal data is your consent in accordance with Article 6(1) of the GDPR. You may object to the analysis of your newsletter usage data in writing at any time. Simply use the contact information provided.
In addition, our customers will automatically receive our customer magazine and further offer mailings by post. You may unsubscribe from receiving advertising mail or magazines by phone or in writing. To unsubscribe (from receiving magazines and offer mailings) please contact: ROSE Bikes GmbH, 46393 Bocholt or [email protected]. Or call 00 800 22 77 55 55 (free from landlines, calls from mobiles may be charged).
Product Reviews / Comments
Once you’ve submitted your order, you will receive an email asking you to write a product review. You will receive this email regardless of whether you have subscribed to our newsletter or not. Please note that these e-mails comply strictly with the legal regulations of the Protection Against Unfair Competition Act (UC). We will use the provided e-mail address to promote own products you’ve already bought from us. By writing a review or leaving a comment, the data is transferred back to us and stored. We may use your email address to assign a product review, contact you for verification or to react to complaints.
The product review is published with your first name and the first letter of your last name. By submitting a review and/or a comment you grant ROSE Bikes GmbH a non-exclusive, royalty-free, perpetual and irrevocable right to use, reproduce, modify, adapt, translate, distribute, publish, create derivative works from and publicly display such review and/or comment on- or offline. This means, for example, that ROSE may publish the comment and use the review for advertising/marketing purposes. Please note that all product reviews are analysed to make sure we can offer you new and even better products.
Revocation of consent
It is likely that you gave the following consent when you opened your customer account. You may withdraw your consent at any time.
"I wish to receive information about interesting offers by e-mail on a regular basis. My e-mail address will not be passed on to other companies. I may withdraw this consent to my e-mail address being used for advertising purposes at any time, e.g. via e-mail to [email protected]."
Contact for data protection
If you have questions concerning the collection, processing or use of your personal data, or if you want to provide information, correct, block, delete data or revoke consent, please contact our data protection officer: Ms Anke Bösing, ROSE Bikes GmbH, Schersweide 4, 46395 Bocholt, Germany, tel.: 0049 - 2871 - 275555, fax: 0049 - 2871 - 275555, e-mail: [email protected]
Right of Appeal to the Competent Authority
You have the right to appeal to the supervisory authority/authorities; e.g. to the
North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information
PO Box 20 04 44
E-Mail: [email protected]