Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies if no other information is given in the subsequent processing operations.

"Personal data" means any information relating to an identified or identifiable natural person.

Cookie and Consent Settings

You can use the following link to change your cookie and consent settings at any time and to revoke consent that you have already given with effect for the future. Please note that the changes only apply to the device currently in use.

Call up the consent banner

Contact

Responsible body

GOT BAG GmbH
Breidenbacherstrasse 8-10
55116 Mainz
Germany

Telephone: 06131 4932019
Email: hello@got-bag.com

Data Protection Officer:

Contact us if you wish: datenschutz@got-bag.com

Purposes and legal basis of data processing

When processing your personal data, the provisions of the EU DS-GVO and all other applicable data protection regulations are observed. The legal basis for data processing results in particular from Art. 6 EU-DS-GVO.

We use your data to initiate business, to fulfill contractual and legal obligations, to carry out the contractual relationship, to offer products and services and to strengthen customer relationships, which can also include analyzes for marketing purposes and direct advertising. Furthermore, we use your data for order processing, for support purposes and for competitions to contact you.

Your consent to data processing can also represent a data protection permit. Before you give your consent, we will inform you about the purpose of the data processing and your right of withdrawal.

In part, we base data processing on our legitimate interest in accordance with Article 6 (1) sentence 1 lit. f GDPR. This happens when there are compelling reasons worthy of protection, such as the use of software for the purpose of fraud prevention, fraud management or creditworthiness checks, as well as for the purpose of direct advertising. If we base the data processing on legitimate interests, you will find further information in the relevant sections.

Transfer to third parties

We will only pass on your data to third parties within the framework of the statutory provisions or with the appropriate consent. Otherwise, it will not be passed on to third parties unless we are obliged to do so by mandatory legal provisions (passing on to external bodies such as supervisory authorities or law enforcement authorities).

Recipients of the data / categories of recipients

Within our company, we ensure that only those people receive your data who need it to fulfill their contractual and legal obligations.

In certain cases, service providers support our specialist departments in fulfilling their tasks. The necessary data protection contracts have been concluded with all service providers (e-commerce service providers/IT service providers, transport/shipping service providers, fulfillment partners, self-service returns system service providers, customer service (ticketing system), service providers for merchandise management systems, payment service providers, e-mail marketing).

Third country transfer / third country transfer intention

We transfer your personal data to (a) service provider or to group companies outside of the European Economic Area, namely in the United States of America.

Compliance with the level of data protection is guaranteed, among other things, through the use of EU standard data protection clauses and - if necessary - through additional guarantees. The service providers are obliged by corresponding contractual regulations to comply with the data protection standards and thus the data protection level of the EU. Data processing or storage in third countries can also take place on the basis of your consent (Art. 49 Para. 1 S. 1 lit. a DSGVO), in this case you will be informed of this separately when obtaining your consent.

Secure transmission of your data

In order to protect the data stored by us as best as possible against accidental or intentional manipulation, loss, destruction or access by unauthorized persons, we use appropriate technical and organizational security measures. The security levels are constantly checked in cooperation with security experts and adapted to new security standards.

The exchange of data from and to our website is always encrypted. We offer HTTPS as the transmission protocol for our website, in each case using the current encryption protocols. We also offer our users content encryption for contact forms and applications. There is also the option of using alternative communication channels (e.g. by post).

Obligation to provide the data

Various personal data are necessary for the establishment, implementation and termination of the contractual relationship and the fulfillment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions that it makes available.

We have summarized details for you in the above point. In certain cases, data must also be collected or made available due to legal regulations. Please note that it is not possible to process your request or to carry out the underlying contractual relationship without providing this data.

Categories, sources and provenance of the data

The respective context determines which data we process: This depends on whether, for example, you place an order online or enter an inquiry in our contact form, whether you send us an application or submit a complaint.

Please note that we may also provide information for special processing situations separately at a suitable point, e.g. when uploading application documents or when making a contact request.

• base data
• address data
• communication data
• Contract billing and payment data

When you visit our website, we collect and process the following data:

• Internet service provider name
• Information about the website from which you are visiting us
• Web browser and operating system used
• The IP address assigned by your internet service provider
• Files requested, amount of data transferred, downloads/file export
• Information about the websites that you call up from us, including the date and time
• For reasons of technical security (in particular to ward off attempted attacks on our web servers), this data is stored in accordance with Article 6 Paragraph 1 Letter f of the EU GDPR. After 7 days at the latest, the IP address is anonymized by shortening it so that no reference to the user is made.

As part of a contact request, we collect and process the following data:

• Last name, first name (optional)
• Contact details (e-mail, optional telephone number)
• Regarding
• Content of the contact request

As part of the ordering process, we process the following data:

• Name first Name
• Date of birth (optional)
• Delivery address
• bill address
• E-mail address
• phone number (optional)
• Data that may legitimately be processed from other sources

We collect and process the following data for online applications:

Personal data as part of the application process

Personal data is information about the personal or factual circumstances of a specific or identifiable natural person. This includes information such as your name, your address, your telephone number and your date of birth, but also data about your specific career, etc., which can be assigned to a specific person with reasonable effort. However, information that is not (in) directly linked to your real identity is not personal data.

Basics and purposes for the processing of personal data in applications and in the application process

If you apply to us electronically, i.e. by e-mail or via our web form, we will collect and process your personal data for the purpose of processing the application process and carrying out pre-contractual measures.

By submitting an application on our recruiting page, you are expressing your interest in taking up employment with us. In this context, you send us personal data that we use and store exclusively for the purpose of your job search/application.

In particular, the following data is collected:

• Name (first and last name)
• E-mail address
• phone number
• Channel how you found out about us

You also have the option of uploading meaningful documents such as a cover letter, your CV and certificates. This may contain other personal data such as date of birth, address, etc.

Only authorized employees from the human resources department or employees involved in the application process have access to your data.

The storage of the personal data takes place exclusively for the purpose of filling the vacant position for which you have applied.

Your data will be stored for a period of 90 days beyond the end of the application process. This is usually done to fulfill legal obligations or to defend against any claims arising from legal regulations. We are then obliged to delete or anonymize your data. In this case, the data is only available to us as so-called metadata without direct personal reference for statistical evaluations (e.g. proportion of women or men in applications, number of applications per period, etc.).

If you give us your consent, we will store your data in our "Talent Pool" for 180 days after the end of the application process in order to identify any other interesting positions for you. This also applies to applications for an apprenticeship or internship. The legal basis for this data processing is Article 6 Paragraph 1 Clause 1 Letter a GDPR. You can revoke your consent to the storage in the "Talent Pool" at any time with effect for the future. To do this, simply send a short email to: datenschutz@got-bag.com

By accepting the data protection declaration, you agree to the possible further storage of your data and the inclusion in our "Talent Pool".

If you receive an offer for a job with us as part of the application process and accept it, we will store the personal data collected as part of the application process at least for the duration of the employment relationship.

Disclosure of data to third parties

The data transmitted as part of your application will be transmitted using TLS encryption and stored in a database. This database is operated by Personio GmbH, which offers personnel administration and applicant management software (https://www.personio.de/impressum/). In this context, Personio is our processor according to Art. 28 GDPR. The basis for the processing is a contract for order processing between us as the responsible body and Personio.

data subject rights

If personal data is processed by us as the responsible body, you as the data subject have certain rights from Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and purpose of the processing, in particular the right to information (Article 15 GDPR), the right to rectification (Article 16 GDPR), the right to erasure (Article 17 GDPR), the right to restriction of processing (Article 18 GDPR), the right to data portability (Article 20 GDPR), right on objection (Article 21 GDPR). If the processing of personal data is based on your consent, you have the right to revoke this data protection consent in accordance with Art. 7 III DS-GVO.

Please contact our data protection officer to assert your rights as a data subject with regard to the data processed in this online application process (see section 2.).

Final Provisions

We reserve the right to adapt this data protection declaration at any time so that it always corresponds to the current legal requirements or to reflect changes in the application process or similar. If you visit this recruiting page again or apply again, the new data protection declaration will then apply.

In addition to this privacy policy, you can view our general privacy policy at https://got-bag.com/pages/privacy-policy.

Processing of (personal) data by the operator of the recruiting site

Our recruiting site is operated and technically implemented by Personio GmbH (Personio GmbH, Rundfunkplatz 4, 80335 Munich). The data transmitted as part of your application will be transmitted using TLS encryption and stored in a database. Personio is merely the operator of the software and recruiting site and, in this context, the processor with whom the necessary contract has been concluded.

By using the recruiting site, general data such as the domain name, web browser and web browser version, the operating system, the IP address and the time stamp of access to the software are processed by Personio. These access logs are stored for up to 7 days. The legal basis for this is Art. 6 Para. 1 S. 1 lit. f GDPR.

If you have any questions or want to assert rights regarding the technical implementation, please contact Personio directly: datenschutz@personio.de

Further information on data protection when using the Personio recruiting site can be found at https://got-bag-gmbh.jobs.personio.de/privacy-policy?language=de

In newsletters, we collect and process the following data:

• E-mail address
• First and last name
• Date of birth
• If applicable, order data
• City
• Time zone
• Phone number (if provided during the order)
• Number of orders/Revenue

We collect and process the following data for competitions:

• Name first Name
• address or address
• account name
• E-mail address
• Mobile number (optional)

Sweepstakes / advertising consent (Art. 6 Para. 1 S. 1 lit. a, b EU-DS-GVO)

You have the opportunity to take part in our competition. If you fill out the competition mask or send us the data to participate.

The principle of data economy and data avoidance is observed in that you only have to provide the data that we absolutely need to run the competition and to notify you of the prize. This is e.g. B. Your name, email address, postal address, account name, mobile phone number (optional).

Your personal data will not be passed on to third parties unless otherwise stated in the respective competition.

The mandatory fields are marked as such with an (*), for example. For technical reasons and for legal protection, your IP address will also be processed in online sweepstakes. The rest of the information is optional and can be filled out if you wish. Unfortunately, we cannot run the competition without the mandatory fields. Participation is then not possible.

Participation in contests may be possible by signing up for our newsletter. If participation in a contest is possible through newsletter registration during a promotional period, your consent to receive the newsletter also constitutes consent to participate in the contest under Art. 6 para. 1 sentence 1 lit. a GDPR. If you withdraw your newsletter consent within the designated promotional period, further participation in the contest is excluded.

We offer competitions on our social media pages. Please note that personal data (profile name, profile picture, message/comment, e-mail address, etc.) will be processed to carry out the competitions. Consent to data processing in accordance with Article 6 Paragraph 1 Clause 1 Letter a of the GDPR is given through the action specified in each case (e.g. commenting on the competition posting). You can revoke your consent at any time by deleting the action.

If you give us your consent (by ticking the respective checkbox or in another way), we will also process your data in order to send you information and offers about our products/services (new products, discount campaigns, etc.) e-mail newsletter.

You can revoke your consent at any time without giving reasons by sending an email to datenschutz@got-bag.com.

AUTOMATED INDIVIDUAL DECISIONS

We use purely automated processing to make a decision in the following cases: The order is checked to see whether more than the permitted number of promotional products have been added to the shopping cart or whether an illegally high discount has been applied to the shopping cart. If this is the case, the order will be automatically canceled or the order cannot be checked out and any fees incurred will be automatically and immediately refunded. The decision is necessary for the conclusion of the contract, the legal basis is Article 22 (2) (a) GDPR.

server log files

You can visit our website without providing any personal information.

Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your Internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page called up, the date and time of the call, the IP address, the amount of data transferred and the requesting provider. The processing takes place on the basis of Article 6 Paragraph 1 Sentence 1 lit. f GDPR from our overriding legitimate interest in ensuring trouble-free operation of our website and improving our offer.

Contact form / contact by e-mail (Art. 6 Para. 1 S. 1 lit. a, b, f GDPR)

If you initiate business contact with us by e-mail, we will only collect your personal data (name, e-mail address, message text) to the extent you have made them available. The data processing serves to process and answer your contact request.

If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Article 6 Paragraph 1 Sentence 1 lit. b GDPR.

If contact is made for other reasons, this data processing takes place on the basis of Article 6 Paragraph 1 Sentence 1 lit. f GDPR from our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Article 6 (1) sentence 1 lit. f GDPR.

We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

There is a contact form on our website that can be used to contact us electronically. If you write to us using the contact form, we will process the data you provide on the contact form to contact you and answer your questions and requests.

The principle of data economy and data avoidance is observed here, in that you only have to provide the data that we absolutely need to contact you. These are your e-mail address, subject and the message field itself. Your IP address will also be processed for technical reasons and for legal protection. All other data are voluntary fields and can be specified optionally (e.g. to answer your questions more individually).

In order to protect the security and confidentiality of your data in the best possible way, we implement appropriate security measures. Your request will be sent to us in encrypted form (HTTPS TLS).

If you contact us by e-mail, we will process the personal data provided in the e-mail solely for the purpose of processing your request. If you do not use the contact form provided, no further data collection will take place.

orders

COLLECTION, PROCESSING AND DISCLOSURE OF PERSONAL DATA WHEN ORDERING

When you place an order, we only collect and process your personal data to the extent that this is necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Non-provision means that no contract can be concluded. The processing takes place on the basis of Article 6 Paragraph 1 Sentence 1 lit. b GDPR and is necessary for the fulfillment of a contract with you.

Your data will be passed on, for example, to the shipping companies and dropshipping providers, payment service providers, service providers for order processing and IT service providers you have selected. In all cases, we strictly observe the legal requirements. The amount of data transmission is limited to a minimum.

SHIPMENT TRACKING

You have the option of using shipment tracking. Personal data (e-mail address and optionally a mobile phone number) are transmitted to the transport service provider. Your data will only be used for the purpose of shipment tracking and notifications about the shipment. The processing is carried out on the basis of your express consent, Article 6 (1) sentence 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. An email to datenschutz@got-bag.com is sufficient for this, or you can cancel the shipment tracking directly via the respective service of the transport service provider.

Reviews/Advertising

Data collection when writing a comment

When you comment on an article or a contribution, we collect your personal data (name, e-mail address, comment text) only to the extent provided by you. The processing serves the purpose of enabling comments and displaying comments. By submitting the comment, you agree to the processing of the transmitted data. The processing takes place on the basis of Article 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the revocation. Your personal data will then be deleted.

When your comment is published, the name you provide (only the initials if you wish) will be published.

In addition, when you submit a comment, your IP address will be saved for the purpose of preventing misuse of the comment function and ensuring the security of our information technology systems. By submitting the comment, you agree to the processing of the transmitted data. The processing takes place on the basis of Article 6 Paragraph 1 Clause 1 Letter a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the revocation. Your IP address will then be deleted.

Newsletter (Art. 6 Para. 1 S. 1 lit. a EU-DS-GVO)

A free newsletter can be subscribed to on our website. The email address provided during newsletter registration is used for newsletter distribution. The principle of data minimization and data avoidance is observed, as the only required field is the email address. For technical necessity and legal safeguarding, your IP address is also processed when subscribing to the newsletter.

For sending newsletters via email, we use the double opt-in process. This means that you will only receive email advertising if you have expressly confirmed in advance that the newsletter service should be activated. This is done by sending you a notification email and asking you to confirm that you wish to receive our newsletter at this email address by clicking on a link contained in this email.

Of course, you can unsubscribe from the subscription at any time using the unsubscribe option provided in the newsletter, thereby revoking your consent(s). Your data will be passed on to an email marketing service provider as part of order processing. It is not passed on to any other third parties.

Newsletter dispatch via Klaviyo e-mail system

We use the services of Klaviyo Inc. ("Klaviyo," 125 Summer St, Floor 6 Boston, MA 02111 United States) to analyze user behavior in the context of our newsletters for our advertising and market research purposes. Klaviyo uses a counting pixel, which is a small image file that allows us to obtain information about your newsletter usage. Links within the newsletter can also be individually attributed to you as a subscriber via individual URLs. This includes, among other things, open rates, click rates, as well as information about the device used and IP address. The legal basis for tracking within the newsletter is your explicit consent under Art. 6 para. 1 sentence 1 lit. a GDPR.

You can revoke your consent at any time with effect for the future. To do this, simply send an email to datenschutz@got-bag.com. Alternatively, you can use the unsubscribe option provided in the newsletter and unsubscribe from the newsletter.

Klaviyo processes your data in the USA. Appropriate contractual regulations and guarantees ensure compliance with European data protection standards for data transmission and processing in third countries. Data processing or storage in third countries can also take place on the basis of your consent (Art. 49 Para. 1 S. 1 lit. a DSGVO), in this case you will be informed separately when obtaining your consent, as well as the possibility of revocation.

Klaviyo's privacy policy can be found at https://www.klaviyo.com/privacy

Use of email address for sending direct mail

We use your e-mail address, which we received as part of the sale of goods or services, for the electronic transmission of advertising for our own goods or services that are similar to those that you have already purchased from us, provided you have not objected to this use. The provision of the e-mail address is required for the conclusion of the contract. Non-provision means that no contract can be concluded. The processing takes place on the basis of Article 6 Paragraph 1 Sentence 1 lit. f GDPR from our overriding legitimate interest in direct advertising. You can object to this use of your e-mail address at any time by sending a message to datenschutz@got-bag.com . You can also use the link provided for this purpose in the promotional e-mail. There are no costs for this other than the transmission costs according to the basic tariffs.

Shipping service provider/ merchandise management

Forwarding of the e-mail address to shipping companies for information about the shipping status

Forwarding of the contact details to shipping companies for information about the shipping status

We pass on your contact details (e-mail address, telephone number) to the transport company as part of the contract processing, provided that you have expressly consented to this in the ordering process. The purpose of the transfer is to inform you about the shipping status by email/SMS. The processing takes place on the basis of Article 6 Paragraph 1 Clause 1 Letter a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the legality of the processing carried out on the basis of the consent up to the revocation.

Use of an external merchandise management system

We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected as part of the order will be sent to
easybill GmbH, Düsselstr. 21, 41654 Kaarst
Xentral ERP Software GmbH, Fuggerstrasse 11, 86150 Augsburg
transmitted.

Payment systems (Art. 6 Para. 1 lit. a, b EU-DS-GVO), credit check (Art. 6 Para. 1 lit. f EU-DS-GVO)

Using PayPal

All PayPal transactions are subject to the PayPal Privacy Policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Using PayPal Express

We use the PayPal Express payment service from PayPal (Europe) S.à.rl et Cie, SCA (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to be able to offer you payment via the PayPal Express payment service.

In order to integrate this payment service, it is necessary for PayPal to collect, store and analyze data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies can also be used for this. The cookies enable your browser to be recognized.

The use of cookies or comparable technologies is based on Section 25 (2) TTDSG. The processing of your personal data takes place on the basis of Art. 6 Para. 1 lit. f GDPR from our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation.

By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to be able to fulfill the contract with you using the selected payment method. This processing takes place on the basis of Article 6 Paragraph 1 Letter b GDPR. More information on data processing when using the PayPal Express payment service can be found in the associated data protection declaration at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS .

Use of the Klarna checkout

The checkout solution is provided by Klarna AB (Sveavägen 46, 111 34 Stockholm, Sweden) and uses cookies to provide you with an ideal online experience tailored to you when using the checkout. The processing takes place on the basis of Article 6 Paragraph 1 lit. a GDPR and, with regard to the cookies used, Article 25 Paragraph 1 TTDSG, with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation. You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full.
A detailed list of cookies and an explanation of their respective purpose can be found here https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_at/checkout.pdf .

Use of personal data when selecting Klarna payment options

In order to be able to offer you Klarna's payment options, we will transmit personal data, such as contact data and order data, to Klarna. In this way, Klarna can assess whether you can use the payment options offered via Klarna and adapt the payment options to your needs. General information about Klarna is available at: https://www.klarna.com/de/ . Your personal information will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy .

Use of iDEAL

On our website we use the payment service iDEAL from the Dutch provider Currence BV, Gustav Mahlerplein 33-35, 1082 MS Amsterdam, Netherlands. By using iDEAL you have the possibility to pay by direct transfer from the bank account. In this case, the customer is forwarded to the current account login of his bank by iDEAL. iDEAL receives personal data (IP address, device type, operating system, browser type, location of your device, payment and bank data) from you.

Information on data protection at iDEAL can be found at https://www.ideal.nl/en/disclaimer-privacy-statement/

cookies

Our website uses so-called cookies. They serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your end device and that your browser (locally) saves. Cookies only contain pseudonymous, mostly even anonymous [A1] data. Some cookies remain for the duration of a browser session (so-called session cookies), others are stored for a longer period of time (so-called persistent cookies, e.g. consent settings[A2] ). The latter are automatically deleted after the specified time (usually 6 months). In addition to our own cookies, those controlled by third-party providers are also used. These use the information contained in the cookies, e.g. B. to display content or to record the pages you have visited.

Due to our legitimate interest (Art. 6 Para. 1 S. 1 lit. f EU-DS-GVO) we set technically necessary cookies, which are absolutely necessary for the operation of the website and to ensure its functionality. Furthermore, we use cookies without your consent, insofar as their sole purpose is to store or access information stored in the end device for the transmission of messages or they are absolutely necessary in order to be able to provide the service you have expressly requested, § 25 Para. 2 TTDSG.

Provided you give your consent, other cookies are used, which allow us or third parties, e.g. B. An evaluation of how our services are used is possible. This allows us to design the content according to user needs. In addition, the cookies enable us to measure the effectiveness of a specific ad and, for example, to place it depending on the user's thematic interests. The legal basis for this is your express consent (Art. 6 Para. 1 S. 1 lit. a EU-DS-GVO, § 25 Para. 1 TTDSG).

You can revoke your consent via our consent banner at any time with effect for the future and change the cookie settings. Note that changes must be made separately for each end device.

Call up the consent banner If you maintain accounts with the third-party providers we use and are logged in there, your data may be linked to the respective account. You can avoid such a combination by not giving or revoking your consent to the cookies in question or by logging out of the respective third-party providers in advance.

Most browsers accept cookies automatically. You can also deactivate, restrict or delete cookies on your end device manually via the settings in your browser or with the help of software. If you deactivate the setting of cookies, full use of our website is not possible or only possible to a limited extent.

Please also note our information in the section of the respective service that uses cookies.

Analysis/Advertising Tracking

Use of Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), based on your consent (Art. 6 Para. 1 S. 1 lit. a EU-DS-GVO, as well as § 25 Para. 1 TTDSG). Google Analytics uses so-called "cookies". These are text files that are stored on your end device and that enable an analysis of your use of the website. The information stored in this way is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated, your IP address will be shortened before data is transmitted and within the European Union or contracting states of the European Economic Area. An unabridged transmission of the full IP address to Google only takes place in exceptional cases.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Sessions and campaigns are terminated after a certain period of time. By default, sessions are terminated after 30 minutes of inactivity and campaigns are terminated after six months. The personal data of the users will be deleted or made anonymous after 6 months.

Some of the data processing by Google takes place outside the European Union and the European Economic Area. As a rule, data is transferred to the USA and processed there. Appropriate contractual regulations and guarantees ensure compliance with European data protection standards for data transmission and processing in third countries.

You can find more information on terms of use and data protection at https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de

You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) being sent to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can revoke your consent at any time with effect for the future. To do this, simply call up our consent banner and deselect the corresponding consent. Please note that the change in the consent banner settings must be made individually for each end device.

This website uses the IP anonymization function of Google Analytics. Furthermore, a contract for order data processing was concluded with Google. You also have the option of deactivating Google Analytics using the browser add-on.

You can find more information on this at http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection).

Using Hotjar

We use the analysis tool of Hotjar Ldt on our website. (Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julians STJ1000, Malta; “Hotjar”).

The data processing serves the purpose of the needs-based design, optimization and analysis of our website.

The tool is used to randomly record the movements of site visitors on the website. This creates a log of mouse movements, scrolling behavior, length of stay and clicks on the website (so-called heat map) as well as random screen recordings. It is also possible to take part in surveys via pop-up displays.

Hotjar uses cookies, among other things, for this purpose. Among other things, the following information can be collected: IP address (in anonymous form), information about the device you are using (screen size, devices, unique device identifier), information about the browser you are using, location data (only for the country), preferred language for displaying the website, operating system used. Detailed information on the cookies used, their function and storage period can be found here: https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies

User profiles are created from this data under a pseudonym. The data is not used to personally identify the visitor to the website and is not combined with the personal data of the bearer of the pseudonym. Hotjar is contractually prohibited from selling the collected data to other third parties.

The use of cookies or comparable technologies is based on Section 25 (2) TTDSG. The processing of your personal data takes place on the basis of Article 6 Paragraph 1 Letter f GDPR from our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation.
To prevent Hotjar from collecting and storing data, you can set an opt-out cookie here: https://www.hotjar.com/legal/compliance/opt-out . Opt-out cookies prevent future collection of your data when you visit this website. You must implement the opt-out cookie on all systems and devices used so that this works across devices. If you delete the opt-out cookie, data will be sent to Hotjar again.
Further information on data protection when using Hotjar can be found here: https://www.hotjar.com/legal/policies/privacy#enduserenglish

Using the Facebook Pixel

We use the "Custom Audiences" remarketing function of Meta Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland "Meta") on our website.

Meta Ireland and we are jointly responsible for the collection of your data that takes place when integrating the service and the transmission of this data to Meta. This is based on an agreement between us and Meta Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://www.facebook.com/legal/controller_addendum . According to this, we are particularly responsible for fulfilling the information obligations according to Art. 13, 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service and for complying with the obligations according to Art. 33, 34 GDPR, insofar as a violation of the protection of personal data affects our obligations under the agreement on joint processing. Meta Ireland is responsible for enabling the rights of data subjects in accordance with Articles 15 - 20 GDPR, complying with the security requirements of Article 32 GDPR with regard to the security of the service and the obligations under Articles 33, 34 GDPR insofar as a personal data breach affects Meta Ireland's obligations under the Joint Processing Agreement.

The purpose of the application is to target visitors to the website with interest-based advertising on the social network Facebook. For this purpose, the Facebook remarketing tag was implemented on the website. This tag is used to establish a direct connection to the Facebook servers when you visit the website. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. If you visit the social network Facebook, you will then be shown personalized, interest-based Facebook ads.

Your data may be transmitted to the USA.

The use of cookies or comparable technologies is based on Section 25 (2) TTDSG. The processing of your personal data takes place on the basis of Article 6 Paragraph 1 lit. You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation.

You can find more information about the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook's data protection information at https://www.facebook.com/about/privacy/ and at https://www.facebook.com/business/help/742478679120153?id%3D1205376682832142&sa.

Use of Google Ads conversion tracking

We use the online advertising program "Google Ads" on our website and, in this context, conversion tracking (evaluation of visits). Google Conversion Tracking is an analysis service provided by Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws.

If you click on an ad placed by Google, a conversion tracking cookie will be placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. As a result, there is no way that cookies can be tracked through Ads customers' websites.

The information obtained using the conversion cookie is used to generate conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.

Your data may be transmitted to the USA.
The use of cookies or comparable technologies is based on Section 25 (2) TTDSG. The processing of your personal data takes place on the basis of Article 6 Paragraph 1 lit. You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation.

You can deactivate personalized advertising for you in the settings for advertising at Google. Instructions for this can be found at https://support.google.com/ads/answer/2662922?hl=de

Alternatively, you can prevent the use of cookies by third-party providers by calling up the deactivation page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and implementing the additional opt-out information given there. You will then not be included in the conversion tracking statistics.

For more information and Google's privacy policy, visit: https://www.google.de/policies/privacy/

Use of Google AdSense

We use the AdSense function of Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google") on our website. If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws. The data processing serves the purpose of renting out advertising space on the website and targeting the visitors of the website with interest-based advertising. Using this function, visitors to the provider's website are shown personalized, interest-based advertising from the Google Display Network. Google uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Google may transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. Under no circumstances will Google associate your IP address with other Google data.
The use of cookies or comparable technologies is based on Section 25 (2) TTDSG. The processing of your personal data takes place on the basis of Article 6 Paragraph 1 lit. You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation.

You can permanently disable the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://support.google.com/ads/answer/7395996?hl=de . Alternatively, you can prevent the use of cookies by third-party providers by calling up the deactivation page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and implementing the additional opt-out information given there. For more information and Google's privacy policy, visit: https://www.google.com/policies/technologies/ads/ and https://www.google.de/policies/privacy/

Use of the Klaviyo email system

We use the services of Klaviyo, Inc ("Klaviyo" 125 Summer St, Floor 6 Boston, MA 02111 United States) to analyze user behavior in our online shop for our own advertising and market research purposes. Klaviyo also uses cookies and can link your behavior in our web shop with your personal data if you have registered for our newsletter, created a customer account or gone through an ordering process in our web shop.

The legal basis for data processing in connection with the Klaviyo service is your express consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR and Section 25 Paragraph 1 TTDSG.

You can revoke your consent at any time with effect for the future. To do this, simply call up our consent banner and deselect the corresponding consent. Please note that the change in the consent banner settings must be made individually for each end device.

Klaviyo processes your data in the USA. Appropriate contractual regulations and guarantees ensure compliance with European data protection standards for data transmission and processing in third countries. Data processing or storage in third countries can also take place on the basis of your consent (Art. 49 Para. 1 S. 1 lit. a DSGVO), in this case you will be informed separately when obtaining your consent, as well as the possibility of revocation.

Klaviyo's privacy policy can be found at https://www.klaviyo.com/privacy .

Using the TikTok Pixel

On this website we use the so-called "TikTok pixel" from the provider TikTok (for EU: TikTok Information Technologies UK Limited, Aviation House, 125 Kingsway Holborn, London, WC2B 6NH.). This is a code that we have implemented on our site. If you have given your express consent, this code will be used to connect to the TikTok servers when you visit our website in order to track your behavior on our website. For example, when you buy a product on our website, the TikTok pixel is triggered and saves your actions on our website in one or more cookies. You have the option to revoke your consent at any time with effect for the future.

Personal data such as the IP address and other information such as device ID, device type and operating system can also be transmitted to TikTok. TikTok uses email or other login or device information to identify users of our website and to associate their actions with a TikTok user account.

TikTok uses this data to display targeted and personalized advertising to its users and to create interest-based user profiles. The data collected is anonymous and cannot be viewed by us and can only be used by us to measure the effectiveness of advertisements placed.

In principle, your data will be processed within the EU or the EEA. A corresponding data protection agreement was concluded with TikTok for this purpose. If personal data is transferred to countries outside the EU or the EEA, this takes place within the framework of the Commission's model contracts for the transfer of personal data to third countries (ie standard contractual clauses).

TikTok's privacy policy can be found here: https://www.tiktok.com/legal/new-privacy-policy?lang=de-DE

use of clear

We use the services of Klar (Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany) on our website. Klar collects, processes and stores data for range measurement, statistical analysis and business cost optimization on this website and its subpages.

This collection takes place on the following legal basis:

• If the user has not consented, the data will be collected anonymously, ie without collecting personal or person-related data, and in groups, ie by random assignment of the collected data to groups of users. It is therefore not possible to draw conclusions about individual users. This anonymous survey is mandatory according to Section 25 Paragraph 2 No. 2 TTDSG in order to optimize business costs and thus ensure the desired service.
• If the user has given his consent in accordance with Article 6 Paragraph 1 Clause 1 a GDPR and Section 25 Paragraph 1 Clause 1 TTDSG, the data to be processed will be collected on a user-related basis.

Different cookies are used for the aforementioned different types of collection in order to guarantee the respective type of collection.

contradiction

To object to the use of Klar in principle, please use this link. This sets a cookie with the name "do_not_track" from the domain "transparent.xyz" or the domain of our shop. Please do not delete this, otherwise it cannot be guaranteed that you will not be tracked by Klar.

Information on data protection and data use by placeholders can be found on the following Klar website: https://www.getklar.com/data-protection

Use of WhatsApp (Charles)
We use the services of Charles (Gartenstraße 86-87 10115 Berlin) on our website for communication, customer service, and marketing activities.
Only if you use Charles, Charles sets cookies and can link your data with your customer account or newsletter data. In this case, your customer profile is synchronized and updated in Klaviyo (see "Use of Klaviyo Email System").
Charles processes and stores your data in its systems in Germany.
If you use Charles, the collection and processing of your data will be in accordance with Article 6 Paragraph 1 Sentence 1 a GDPR and § 25 Paragraph 1 Sentence 1 TTDSG.
Information on data protection and data use by Charles can be found on the following website of Charles: https://www.hello-charles.de/datenschutz/

Use of Sovendus
For the selection of a currently interesting voucher offer for you, we transmit pseudonymized and encrypted the hash value of your E-Mail address and your IP address to Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe (Sovendus) (Art. 6 Abs.1 f GDPR).
The pseudonymized hash value of the E-Mail address is used to consider a possible objection to advertising by Sovendus (Art. 21 Abs.3, Art. 6 Abs.1 c GDPR).
The IP address is used by Sovendus exclusively for data security purposes and is usually anonymized after seven days (Art. 6 Abs.1 f GDPR). We also transmit pseudonymized order number, order value with currency, session ID, coupon code, and timestamp to Sovendus for billing purposes (Art. 6 Abs.1 f GDPR).
If you are interested in a voucher offer from Sovendus, there is no objection to advertising for your E-Mail address, and you click on the voucher banner shown only in this case, we transmit encrypted salutation, name, postal code, country, and your E-Mail address to Sovendus for the preparation of the voucher (Art. 6 Abs.1 b, f GDPR).
For further information on the processing of your data by Sovendus, please refer to the online data protection notes at www.sovendus.de/datenschutz.

Referral Program using the ReferralCandy Marketing Program
We use the services of Anafore Pte. Ltd. (71 Ayer Rajah Crescent, #06-26, Singapore 139951) to manage referrals and rewards. ReferralCandy collects personal data such as your name, email address, and other relevant information to enable the functions of the partner program.
Anafore Pte. Ltd. processes and stores your data in its systems in Singapore. If you use ReferralCandy, the collection and processing of your data will be carried out in accordance with Article 6(1) sentence 1(a) GDPR and § 25(1) sentence 1 TTDSG.
You can revoke your consent at any time with effect for the future. To do so, simply send an email to datenschutz@got-bag.com. Alternatively, you can use the unsubscribe option provided in the newsletter to opt out.

Plugins and Miscellaneous

Use of Google Tag Manager

We use the Google Tag Manager from Google LLC on our website. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws. The legal basis for using the Google Tag Manager is Article 6 Paragraph 1 Clause 1 Letter f GDPR. The Google Tag Manager only implements tags.

This application manages JavaScript tags and HTML tags used to implement tracking and analysis tools in particular. The data processing serves the purpose of the needs-based design and optimization of our website.

The Google Tag Manager itself does not store cookies, nor is personal data processed as a result. However, it enables the triggering of additional tags that can collect and process personal data.

More information on terms of use and data protection can be found here .

Use of YouTube

We have integrated YouTube videos from the provider Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) into our online offering, which are stored at http://www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", ie no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data specified below be transmitted. We have no influence on this data transmission. By embedding the video in extended data protection mode, no cookies that require consent are set that record usage behavior in order to personalize video playback. However, the extended data protection mode only refers to the recording of user behavior, not to the provision of ads, as well as the reloading of further content from third parties, font transfer and possible links to your user account on Youtube/Google. When you start the video, this triggers further data processing operations. We have no influence on that. The legal basis is your consent, Article 6 Paragraph 1 Clause 1 Letter a EU GDPR.

Some of the data processing by Google takes place outside the European Union and the European Economic Area. Appropriate contractual regulations and guarantees ensure compliance with European data protection standards for data transmission and processing in third countries. Data processing or storage in third countries can also take place on the basis of your consent (Art. 49 Para. 1 S. 1 lit. a DSGVO), in this case you will be informed of this separately when obtaining your consent.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. Data transmissions take place regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you would have to contact YouTube to exercise this right.

These processing operations take place on the basis of your consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR. With your consent via consent banner, all YouTube videos integrated on our website are made visible to you and the content is already loaded when the page is accessed. You can revoke your consent at any time with effect for the future.

If you have not given your consent to the use of embedded YouTube content, the content on our site is blocked or provided with an overlay. To protect your data, we use this so-called two-click solution. All YouTube content is deactivated by default and is only loaded and displayed by the YouTube servers after you click the "Activate content" button. With this click, you agree that, for example, your IP address, referrer information and browser data are transmitted to YouTube and that cookies are set in your browser.

You have the option of giving your consent in accordance with Article 6 Paragraph 1 Sentence 1 lit. a EU GDPR for the retrieval of individual videos. The setting is saved for 30 days. You can revoke your consent at any time with effect for the future by reloading the website.

Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the data protection declaration. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy .

Leaflet (use of OpenStreetMap)

On our website we use Openstreetmap (https://www.openstreetmap.de), an open source service from the OpenStreetMap Foundation (OSMF, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom) to display maps and to create route maps. The legal basis for the processing is your consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR. With your consent, you agree to the collection, processing and use of the automatically collected data and the data you have entered by Openstreetmap, one of its representatives, or third parties.

Openstreetmap may transfer the information obtained to third parties if this is required by law or if third parties process this data on behalf of Openstreetmap. It is technically possible that Openstreetmap could identify at least individual users based on the data received. We have no influence on personal data and personality profiles of users of the Openstreetmap website being processed for other purposes.

You have the option of changing your consent to data processing at any time with effect for the future. To do this, simply call up our consent banner:

You also have the option of easily deactivating the Openstreetmap service by switching off JavaScript in your browser. However, we would like to point out that in this case you will not be able to use the map display.

For Openstreetmap, you can find the data protection declaration under data protection at Openstreetmap ( https://wiki.openstreetmap.org/wiki/Privacy_Policy ).

Data protection declaration / information on data protection in social media

GOT BAG GmbH maintains a presence in the "social media", in this case on Facebook, Instagram, LinkedIn, Pinterest, TikTok, YouTube.

Insofar as we have control over the processing of your data, we ensure that the applicable data protection regulations are observed.

Below you will find the most important information on data protection law with regard to our appearances.

Name and address of those responsible for operation

In addition to GOT BAG GmbH, GOT BAG GmbH is responsible for the company’s appearances within the meaning of the EU General Data Protection Regulation (EU-DS-GVO) and other data protection regulations

• Facebook
  (Meta Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
• Instagram
  (Meta Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
• LinkedIn
  (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
• Pinterest
  (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA)
• tik tok
  (musical.ly Inc., 10351 Santa Monica Blvd #310, Los Angeles, CA 90025 USA)
• YouTube
  (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland)

However, you use these platforms and their functions at your own risk. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).

We would like to point out that user data can be processed outside of the European Union. This can result in risks for users, because e.g. B. the enforcement of user rights could be made more difficult. Providers who process or store data in third countries are obliged by corresponding contractual regulations to comply with the data protection standards of the EU. Data processing or storage in third countries can also take place on the basis of your consent (Art. 49 Para. 1 S. 1 lit. a DSGVO), in this case you will be informed of this separately when obtaining your consent.

Purpose and Legal Basis

We maintain the fan pages ourselves in order to communicate with the visitors of these pages and to inform them about our offers in this way.

In addition, we collect data for statistical purposes in order to be able to further develop and optimize the content and to make our offer more attractive. The data required for this (e.g. total number of page views, page activities and data provided by the visitor, interactions) are processed by the social networks and made available to us. We have no influence on the generation and presentation.

In addition, your personal data will be processed by the social media providers, but also by the company GOT BAG GmbH, for market research and advertising purposes. So it is possible that z. B. user profiles are created based on your usage behavior and the resulting interests. Among other things, this enables advertisements to be placed inside and outside the platforms that match your interests. Cookies are usually stored on your computer for this purpose. Irrespective of this, data that is not collected directly on your end devices can also be stored in your usage profiles. The storage and analysis also takes place across devices; this applies in particular, but not exclusively, if you are registered as a member and logged in to the respective platforms.

In addition, we collect and process the following personal data [name, e-mail address, age, gender, times of use, place of residence (city), place of residence (country)].

The processing of your personal data by GOT BAG GmbH is based on our legitimate interests in effective information and communication in accordance with Article 6 Paragraph 1 Clause 1 Letter f of the EU GDPR.

If you are asked for your consent to data processing, ie if you declare your consent by confirming a button or similar (opt-in), the legal basis for processing is Article 6 Paragraph 1 Clause 1 Letter a., Article 7 EU GDPR.

Your rights / possibility of objection

If you are a member of a social network and do not want the network to collect data about you via our website and link it to your stored member data on the respective network, you must

• log out of the respective network before you visit our fan page,
• delete the cookies present on the device and
• Quit and restart your browser.

After logging in again, however, you will be recognizable again for the network as a specific user.

For a detailed description of the respective processing and the possibility of objection (opt-out), we refer to the information linked below:

Facebook

• Privacy Policy: https://www.facebook.com/about/privacy/
• Opt-out: https://www.facebook.com/settings?tab=ads and
  http://www.youronlinechoices.com

Instagram

• Privacy Policy: https://help.instagram.com/519522125107875
• Opt out: http://www.networkadvertising.org/managing/opt_out.asp and http://www.youronlinechoices.com

LinkedIn

• Privacy Policy: https://www.linkedin.com/legal/privacy-policy
• Opt-out: https://www.linkedin.com/legal/cookie-policy and
  http://www.youronlinechoices.com

Pinterest

• Data protection declaration: https://about.pinterest.com/de/privacy-policy
• Opt-out: https://about.pinterest.com/de/privacy-policy

tik tok

Data protection declaration: https://www.tiktok.com/de/privacy-policy

Opt out: http://www.youronlinechoices.com

• youtube
• Privacy Policy: https://policies.google.com/privacy
• Opt-out: https://tools.google.com/dlpage/gaoptout?hl=de
  and http://www.youronlinechoices.com

Overall, you have the following rights with regard to the processing of your personal data:

right to information; right to rectification; right to erasure; right to restriction of processing; right to object; right to data portability; Right to lodge a complaint with the responsible data protection authority about unlawful processing of your personal data.

However, since GOT BAG GmbH does not have full access to your personal data, you should contact the social media providers directly when making a claim, because they each have access to the personal data of their users and can take appropriate measures and provide information.

If you still need help, we will of course try to support you. Please contact datenschutz@got-bag.com.

Notes on copyright and art copyright

If you want to publish images, texts, plans, videos, music, etc. on our site, you should know that you may be assigning all rights of use to the network, which could ultimately have legal consequences for you if you are not the author or owner of the rights yourself.

Links to other providers

Our website also contains - clearly recognizable - links to the websites of other companies. If there are links to websites of other providers, we have no influence on their content. Therefore, no guarantee or liability can be assumed for this content. The respective provider or operator of the pages is always responsible for the content of these pages.

The linked pages were checked for possible legal violations and recognizable legal violations at the time of linking. Illegal content was not recognizable at the time of linking. However, a permanent control of the content of the linked pages is not reasonable without concrete evidence of an infringement. Upon notification of rights violations, such links will be removed promptly.

Data subject rights and storage period

Duration of storage

After completion of the contract, the data will initially be stored for the duration of the warranty period, then taking into account statutory retention periods, in particular tax and commercial law, and then deleted after the period has expired, unless you have consented to further processing and use.

In addition, we may retain information where you have given us your permission or where there is a legal dispute and we use evidence within the statutory statute of limitations, which can be up to thirty years; the regular limitation period is three years.

rights of the data subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR:

• The right to information (Art. 15 EU-DS-GVO),
• The right to erasure (Art. 17 EU-DS-GVO),
• The right to rectification (Art. 16 EU-DS-GVO),
• The right to data portability (Art. 20 EU GDPR),
• The right to restriction of data processing (Art. 18 EU-DS-GVO),
• The right to object to data processing (Art. 21 EU-DS-GVO).

To assert these rights, please contact: datenschutz@got-bag.com. The same applies if you have questions about data processing in our company or would like to revoke your consent.

Right of appeal to the supervisory authority

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that your personal data is not being processed lawfully.

Right to object

If the personal data processing listed here is based on our legitimate interest in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR, you have the right to object to this processing at any time for reasons that arise from your particular situation with effect for the future.

After an objection has been raised, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. After the objection has been raised, we will stop processing the data concerned for the purpose of direct advertising.