You would like to know how we treat the subject of data protection? Great. We would like to inform you in detail about this below, because it is important to us that we are transparent to you. We therefore provide comprehensive information below about what, how and why we process your data the way we do. We have also compiled all relevant mandatory information for you here, which we must provide according to the GDPR.
When our website contents are used, we process personal data (for example, your email address) for a number of services. What we use your data for exactly depends on how and which of our services you use.
It may also happen that we use your personal data for several purposes simultaneously, for example, the web data for the technical provision of the website and the login data when you log into an area.
Below, you can initially find a list of the purposes for which we process your personal data this website and further below (Section 2), you can see which data these are in specific, and (Section 4) what rights you have as a data subject.
We use the data described under Section 2a on each use of our website contents for the fault-free functioning and, in particular, the display of contents, languages, videos, pictures, and functions such as a shopping cart. These data are needed to be able to display our page in your browser.
This purpose of the processing of technically required data also includes security analyses and protection against attacks by means of statistical analyses, in order to analyse and rectify technical malfunctions, defend against attempted attacks, hacking and fraud, and optimising the functioning of the website (e.g. loading times on mobile devices or for slow internet connections). These data will be deleted after 90 days.
Your data are processed for this purpose on the basis of our legitimate interest in a fault-free operation of our website as defined by Art. 6(1) f) GDPR. You have the statutory right to object to this in accordance with Art. 21 GDPR, the enforceability of which requires an overriding interest of yours. The data used will not be combined with other data.
You can subscribe to free newsletters on various interesting subjects on our website. For this, the login data can be used initially by means of a double opt-in procedure to verify the email address and then, if this was successful, for the purposes of mailing the newsletter. The only required input for this purpose is your email address.
These newsletters will be emailed based on your order and the consent you have given for the processing of your data according to Art. 6(1) a) GDPR. You may revoke this consent at any time and thereby stop receiving these newsletters.
Your data will remain stored until you deregister or unsubscribe the newsletter. We will keep your data for six months after this point in time to be able to provide information, if applicable, upon inquiries by you. We might be obliged by trade, tax or other laws to store some or all aforementioned data for a longer period as stated in such laws.
There is the possibility on our website to contact us via an email address and the phone number provided in the legal notice. If you elect to use this option, the data you have provided, in particular the sender email and/or the phone number as well as your inquiry will be sent to us. Depending on your inquiry (e.g. questions on surveys or for asserting your rights as data subject such as the right to receive information), your contact data will be processed further (with the assistance of service providers). If your request was not directed to us, this may also mean that we will forward your data to another company within our corporate group to which your inquiry was actually addressed. For this purpose, we generally consider the data transferred enclosed with your request as one unit, which we will use and/or transfer completely.
The data are generally gathered on the basis of our legitimate interest pursuant to Art. 6(1) f) GDPR according to which we would like to offer our customers and business partners a simple and easy possibility to contact us via such a contact form. Depending on the expressed request, further data processing will follow based on other legal bases. If your request, for example, relates to the conclusion of a contract, we will use your data according to Art. 6(1) b) GDPR. If you would like to assert your rights as a data subjects, we will use your data on the basis of Art. 6(1) c) GDPR. Depending on which of the said options are applicable, we will store the data after the fulfilment of the purpose. Inquiries without storage requirement will be deleted three months after the processing. We might be obliged by trade, tax or other laws to store some or all aforementioned data for the period stated in such laws.
Like all other websites, our website as well uses cookies. Cookies are small text files, which are stored in the browser on your computer and fulfil different functions, and can be processed for different purposes.
There are essentially two options for how we use cookies. Firstly, we use the technically necessary cookies for the operation of our website (see above, under Sec. 1a). Our legitimate interest according to Art. 6(1) f) GDPR here is the fault-free operation of our website, which forms the legal basis for the use of these technically necessary cookies. In addition, there are also cookies that are not technically necessary. Such cookies serve different purposes and process data about you or from you if and insofar as you have consented to this.
We give you more information in the following about the individual categories of such cookies requiring consent. Which these are in specific and which service provider/partner offers them or if you want to consent to them is up to you by making your choice in our </Privacy Manager>. We need your consent for one or all of the following purposes so that we may store cookies that are not technically necessary:
1. Necessary cookies
Necessary cookies help us make the website usable by enabling the basic functions such as the page navigation and access to secure areas of the website. The website cannot function correctly without these cookies.
2. Preferences
Preference cookies enable a website to remember information that influence the way in which a website behaves or looks, e.g. what your preferred language is or in what region you are located. For the use of such coolies, our legal basis is your consent according to Art. 6(1) lit. a) GDPR. If you do not want us to gather data in this form about you or if you do not want us to use them any longer, you can adjust your choice in the Cookie Tool at any time.
3. Statistics
Statistics cookies help website owners understand how visitors interact with websites by gathering and reporting the information in anonymised form. For the use of such coolies, our legal basis is your consent according to Art. 6(1) lit. a) GDPR. If you do not want us to gather data in this form about you or if you do not want us to use them any longer, you can adjust your choice in the Cookie Tool at any time.
4. Marketing
Marketing cookies are used to follow visitors on websites. The intention is to display ads that are relevant and appealing to the individual users, and which are therefore valuable for publishers and advertising third parties. For the use of such coolies, our legal basis is your consent according to Art. 6(1) lit. a) GDPR. If you do not want us to we gather data in this form about you or if you do not want us to use them any longer, you can adjust your choice in the Cookie Tool at any time.
We regularly also integrate contents of third-party providers in our website – e.g. from “social” networks like YouTube, Twitter or Instagram. To embed and display these contents in our website contents, it is technically required to pass on your IP address to the operator of the relevant service (more details under Section 3 below).
It can moreover occur (e.g. in the case of YouTube, the “double-click” cookie) that these external contents use their own technical tracking technologies, over which we have no control and for which we are not responsible either, but which are necessarily technically linked with the external content.
This data transfer can only take place based on your consent according to Art. 6(1) a) GDPR and only for as long as you do not revoke your consent. Please notice that granting your consent can entail that your data will be transferred to a country outside of the EU (third country) where not always the same data protection standard as in the EU is assured.
For this purpose, we will store your consent for the transmission of your IP address for the period of three years in the form of a log entry for the purpose of our obligation to produce supporting documents pursuant to Art. 7(1) GDPR.
We use so-called social plug-ins on our webpage, which enable our page contents on your respective social media profile.
Because data necessarily always have to be sent by us to the relevant network, we need your separate consent to this. For this purpose, we use the so-called two-click solution on our website. This means that you firstly need to activate the social media-sharing button specifically by clicking on it.
When you activate the button, your IP address will be transmitted to the “social” network based on your consent according to Art. 6(1) a) GDPR to enable the features, and you can then share the contents within the scope of the account that you maintain there. Please read the data privacy policy of the relevant network to find out how your data are used there.
Please notice that this transmission within the area of responsibility of the “social” network means that we can neither take control over nor accept the responsibility for the data processing taking place there. A transmission to countries outside of the EU (third country) where not always the same data protection standard is ensured is also tied to this data transfer.
For this purpose, we will store your consent for the transmission of your IP address for the period of three years in the form of a log entry for the purpose of our obligation to produce supporting documents pursuant to Art. 7(1) GDPR.
We use the categories of data relating to you that are listed below, as dependent on your use of the website contents.
Web data are such that are generated in and by the use of our web offers or that must be used for this purpose. This means that these are exclusively such data that are technically necessary for the provision of the website.
Concretely, the following data are used as web data:
- IP address
- System data (operating system, resolution of the monitor, browser versions, language settings, time settings, battery charging status, end device, etc.)
- (Sub)-page retrievals
For the provision of our newsletter, we use your contact details (name and email address) that you entered when you subscribed to the newsletter or when you purchased the product or service.
If the newsletter is subject to payment, we will use your billing data such as account number, account holder, number of delivered newsletters, subscription and unsubscription and discounts on other products, if applicable, for the duration of the subscription.
For the processing of contact requests, we always use:
- First and last name of the sender
- Contact channels (email, phone, address) specified by the sender
- Technical data (when was the contact request sent, from what IP, to what company, was the transmission successful or not)
In addition, we use all content data and information relating to the request – which data and information is used is determined by the data subject by his/her request. Dependent on the request, it may be the case that we also store additional data, such as those, which we have gathered in connection with a raffle or contract conclusion.
The integration of external contents technically requires your IP address. Only if it is transferred to the external party will it be possible to provide the relevant contents.
If you have given your consent, as described above in Section 1 e) to g), it is possible furthermore that the external contents also use independent technologies of their own that are outside of our control. In particular, unique IDs (e.g. cookie IDs) can then be stored of or about you and be processed, by means of which the third-party provider has the possibility to conduct additional data processing – which is outside of our control and for which we therefore do not accept any responsibility.
We regularly use service providers in the data processing described above. We require these service providers by way of contracts to process the data only on instruction and in the manner determined by us. If the involvement of such service providers leads to the data being transmitted outside of the EU, we will also ensure that an appropriate data protection standard is assured at the place of the recipient of the data. You have the right to receive a copy of the used guarantees, which are regularly the standard contract clauses (Controller-to-Processor) approved by the EU Commission and, if required, further measures for contractual assurance in addition.
Regarding the processing activities described above, you are generally entitled to all rights of data subjects under the GDPR (Art. 15 to 22).
This means that you can request confirmation on which of your personal data we process (Art. 15) including information of whether your data are processed in the form of automated decision-making and, where this is the case, by what method and if you have a right to object to this (Art. 22). If your personal data stored by us are false, incorrect or no longer current, you have the right to request a correction (Art. 16). If the data should no longer be required for the aforementioned purposes, you have the right to request their erasure (Art. 17). If the legal conditions are given, you are also entitled to demand a restriction of processing (Art. 18). Moreover, if the legal conditions are given, you have the right to receive your data in a machine-readable format (Art. 20). If you exercise a right of a data subject, we are obligated to inform the relevant bodies of this to which we have transferred your data (Art. 19).
It is our interest to process data as transparently as possible and of course also in a permissible way. So, if you have questions or complaints about our handling of your data, we will of course be available to you. Irrespective thereof, you also have the right, however, to contact a supervisory authority and lodge complaint there.
The responsible data controller in terms of data protection regulations for the data processing activities described herein is we are era GmbH, Kalckreuthstrasse 1-2, 10777 Berlin; datenschutz@weareera.com. Therefore, if you need more information about the data processing of your data or if you would like to exercise your rights as a data subject, you can contact us at any time. You can reach our data protection officers at the address directly above with the addition “To the data protection officer” and including a reference to this website in your communication.
