Privacy policy

 

First of all, we would like to mention that we neither pass on your data nor do any other nonsense with it! We take the subject of data protection very seriously, but it is our duty to inform you exactly what can theoretically happen to your data.

​

This data protection declaration clarifies the type, scope, purpose, duration and legal basis for the processing of personal data (hereinafter referred to as "data") within our online offer and the websites, functions and contents connected with it as well as external online presences, such as our Social Media Profile (hereinafter referred to collectively as "online offer").

Personal data will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly Internet presence, including its contents and the services offered there.

​

1. DEFINITIONS OF TERMS

The data protection declaration of Gomera-Bikes is based on the terms used by the European guidelines and ordinances when the basic data protection regulation (DSGVO) was issued. With regard to the terms used, e.g. "processing" or "responsible party", we therefore refer to the definitions in Art. 4 of the Basic Data Protection Regulation (DSGVO), which we briefly explain in advance for our customers and business partners to make the data protection declaration easier to understand.

​

We use the following terms, among others, in this data protection declaration:

Personal data is all information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

​

Data subject means any identified or identifiable natural person whose personal data are processed by the controller.

Processing is any operation or set of operations, performed upon personal data, whether or not by automatic means, such as collection, recording, organization, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

​

Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.

Profiling is any automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or movements of that natural person.

​

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the inclusion of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures that ensure that the personal data is not attributed to an identified or identifiable natural person.

​

Controller or data controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or by the law of the Member States, the controller or the specific criteria for its designation may be provided for by Union law or by the law of the Member States.

​

Processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

​

Recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not it is a third party. However, public authorities which may receive personal data in the course of a specific investigation mandate under Union or national law shall not be considered as recipients.

​

Third party shall mean any natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorized to process the personal data.

​

Consent means any freely given specific and informed expression of the data subject's will in an informed and unequivocal manner, in the form of a declaration or other unequivocal affirmative act by which the data subject signifies his or her consent to the processing of personal data relating to him or her.

​

2. NAME AND ADDRESS OF THE CONTROLLER

Responsible provider of this website in the sense of data protection law is:

Gomera Bikes

Owner: Peter Porwoll

Calle Playa del Inglés 4

38870 Valle Gran Rey

Spanien (Canary Islands)

NIE: Y1437095T

Phone: 0034 922 805336

Mail: info@gomera-bikes.com

www.gomera-bikes.com

​

A company data protection coordinator is not required.

​

3. COLLECTION OF GENERAL DATA AND INFORMATION

The website of Gomera-Bikes collects a number of general data and information with each call of the website by a person concerned or an automated system.

This general data and information is stored in the log files of the server.

The following information can be recorded

used browser types and versions,

- the operating system used by the accessing system, the website from which an accessing system reaches our website (so-called referrer),

- the sub-websites, which are accessed via an accessing system on our website,

- the date and time of access to the website,

- an Internet Protocol (IP) address,

- the Internet service provider of the accessing system and

- other similar data and information which serve to avert danger in the event of attacks on our information technology systems.

​

When using this general data and information, Gomera-Bikes will not draw any conclusions about the person concerned.

This information is rather required to

- to deliver the contents of our website correctly,

- to optimize the contents of our website and the advertising for it,

- to ensure the permanent functionality of our information technology systems and the technology of our website, and

- to provide law enforcement agencies with the information necessary for prosecution in the event of a cyber attack.

 These anonymously collected data and information are therefore evaluated by Gomera-Bikes on the one hand statistically and also with the aim of increasing data protection and data security in our company, in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by an affected person.

​

4. REGISTRATION ON OUR WEBSITE

If you create a customer account with us via our website, we will collect and store the data you enter during registration (e.g. your name, your address or your e-mail address) exclusively for pre-contractual services, for contract fulfilment or for the purpose of customer care (e.g. to provide you with an overview of your previous orders with us or to offer you the so-called notepad function). At the same time we will save the IP address and the date of your registration together with the time. Of course, this data will not be passed on to third parties.

Within the scope of the further registration process, your consent to this processing will be obtained and reference will be made to this data protection declaration. The data collected by us in the process will be used exclusively for the provision of the customer account.

​

If you consent to this processing, Art. 6 para. 1 lit. a) DSGVO is the legal basis for the processing.

If the opening of the customer account also serves pre-contractual measures or the fulfilment of the contract, the legal basis for this processing is also Art. 6 para. 1 lit. b) DSGVO.

​

You may revoke the consent given to us to open and maintain the customer account at any time with effect for the future in accordance with Art. 7 para. 3 DSGVO. To do so, you only need to inform us of your revocation.

The data collected in this respect will be deleted as soon as the processing is no longer necessary. However, we have to observe tax and commercial law retention periods.

​

Personal data that we collect

- When you register for our services, you may be submitting information to us:

- Your personal data, such as your address, e-mail address, telephone number and date of birth,

- Your account login information such as your username and the password you choose.

- If you book travel or other products from our offers, we collect data for the fulfillment of your contract with us:

 

Your personal data, such as your address, e-mail address, telephone number, date of birth and size

- the personal data of your fellow travellers,

- Payment information (e.g. credit card details, account information, billing address),

- Your booked products or services.

 When you or we contact you or when you participate in promotions, contests, surveys about our services, we may collect information about you:

- Personal information you provide when you contact us, including by email, postal mail and telephone or via social media, such as your name, user name and contact information,

- Details of e-mails and other digital communications we send to you and that you open, including any links contained therein that you click,

- Your feedback and contributions to customer surveys.

- Other sources of personal information.

​

We may use personal information from other sources, such as companies that provide information and data, trading partners, and public registries.

​

Your insurance company, its agents and medical staff may share relevant personal information and special categories of personal information with us in circumstances where we need to act on your behalf or on behalf of other customers or in an emergency.

​

When you log in with your social network credentials to connect to our platforms and online services such as Facebook, Google+ or Twitter, you agree to share your user information with us. For example, your name, email address, date of birth, location and other information you wish to share with us.

​

We may use surveillance camera recordings, IP addresses and browser data collected in or near our stores, offices, other buildings and cruise ships.

​

Personal data about other people you send us:

We use personal data about other persons that you provide us, e.g. further information on your booking.

By submitting personal information about other people, you must be sure that they agree and that you can submit the information. You should also make sure that these persons know how their personal data could be used by us.

We use your personal data in many different ways, as explained below.

We need to process your personal information to administer your account or booking, to provide you with the products and services you request, and to help you with orders and any refunds you may request.

To manage and improve our products, services and daily operations.

We use personal information to administer and improve our products, websites, mobile apps, customer loyalty or customer recognition programs and other services.

​

We monitor how our services are used to protect your personal information and to detect and prevent fraud, other crimes and misuse of services. This helps us ensure that you can use our services without concern.

We may use personal information to respond to and manage security incidents, disruptions or other similar occurrences. This may be of a medical or insurance-related nature.

​

We may use personal data to conduct market research and internal developments and to develop and improve our product range, services, stores and IT systems, security, know-how and the methods of our communication with you.

We use surveillance camera recordings to maintain the security of everyone working in or visiting our stores, business premises and other buildings, as well as for the purpose of detecting, preventing and prosecuting criminal offences. We may also use the images to exercise and defend our legal rights.

​

To contact and interact with you.

We want to serve you as our customers even better. Therefore, if you contact us, for example by e-mail, post, telephone or social media, we may use personal data in order to deal with your request in the best and fastest possible way.

We need to process your personal data in order to manage promotions and competitions in which you decide to participate. This includes those that we organize together with our suppliers and trading partners. For example, if you win a prize.

​

To help us better understand you as a customer and to be able to provide you with services and marketing communications (including online advertising tailored to your interests), we may combine the personal information we collect when you make purchases in a store with personal information collected through our websites, mobile apps and other sources.

​

We do not sell your personal information to third parties.

​

 5. COOKIES

a) Session cookies/session cookies

We use so-called cookies with our Internet presence. Cookies are small text files or other storage technologies that are stored on your terminal device by the Internet browser you use. Through these cookies, certain information from you, such as your browser or location data or your IP address, is processed to an individual extent. 

This processing makes our Internet presence more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our Internet presence in different languages or the offer of a shopping basket function.

The legal basis for this processing is Art. 6 para. 1 lit. b.) DSGVO, insofar as these cookies process data for contract initiation or contract processing.

​

If the processing does not serve the purpose of contract initiation or contract processing, our legitimate interest lies in the improvement of the functionality of our Internet presence. The legal basis is then Art. 6 para. 1 lit. f) DSGVO.

These session cookies are deleted when you close your internet browser.

 b) Third party cookies

Where appropriate, our website may also use cookies from partner companies with whom we cooperate for the purposes of advertising, analysis or the functionality of our website.

Please refer to the following information for details on this, in particular on the purposes and legal basis for processing such third-party cookies.

c) Disposal option

​

You can prevent or restrict the installation of cookies by adjusting your Internet browser settings. You can also delete already stored cookies at any time. However, the steps and measures required for this depend on the Internet browser you are actually using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called flash cookies, however, processing cannot be prevented by the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the Flash Player you are actually using. If you have any questions, please also use the help function or documentation of your Flash Player or contact the manufacturer or user support.

​

If you prevent or restrict the installation of cookies, however, this may mean that not all functions of our website can be used to their full extent.

​

6. ORDER PROCESSING IN THE ONLINESHOP AND CUSTOMER ACCOUNT

We process the data of our customers in the context of the order procedures in our online store, in order to make the selection and the order of the selected products and services, as well as their payment and delivery, and/or execution possible for them.

​

The processed data includes inventory data, communication data, contract data, payment data and the persons affected by the processing include our customers, interested parties and other business partners. The processing is carried out for the purpose of providing contractual services within the operation of an online store, billing, delivery and customer services. We use session cookies to store the contents of the shopping cart and permanent cookies to store the login status.

The processing is based on art. 6 para. 1 lit. b (execution of order processes) and c (legally required archiving) DSGVO. The information marked as required is required to establish and fulfill the contract. We disclose the data to third parties only within the scope of delivery, payment or within the scope of the legal permissions and obligations to legal advisors and authorities. The data will only be processed in third countries if this is necessary for the fulfilment of the contract (e.g. upon customer request for delivery or payment).

​

Users can optionally create a user account, in which they can especially view their orders. During the registration process, the required mandatory data will be provided to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their safekeeping is necessary for reasons of commercial or tax law in accordance with Art. 6 para. 1 lit. c DSGVO. Data in the customer account shall remain in the customer account until its deletion with subsequent archiving in the event of a legal obligation. It is the responsibility of the users to save their data in case of termination before the end of the contract.

​

Within the scope of registration and renewed logins and use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests as well as the user's need for protection against misuse and other unauthorized use. This data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 Para. 1 lit. c DSGVO.

 

Deletion is carried out after the expiry of legal warranty and comparable obligations, the necessity of storing the data is reviewed every three years; in the case of legal archiving obligations, deletion is carried out after their expiry (end of commercial (6 years) and tax (10 years) storage obligation).

​

7. SUBSCRIPTION TO OUR NEWSLETTER

On the website of Gomera-Bikes, users are given the opportunity to subscribe to the free newsletter of our company.

With the following notes we would like to inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection. By subscribing to our newsletter, you agree to receive it and to the described procedures.

​

Content of the newsletter: We send newsletters, e-mails and other electronic notifications containing advertising information (hereinafter referred to as "newsletter") only with the consent of the recipients or a legal permission. If, in the course of registering for the newsletter, its contents are specifically described, they are decisive for the consent of the users. Our newsletters also contain information about our products and accompanying information (e.g. safety instructions), offers, promotions and our company.

​

Users can optionally create a user account, in which they can especially view their orders. During the registration process, the required mandatory data will be provided to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to their safekeeping is necessary for reasons of commercial or tax law in accordance with Art. 6 para. 1 lit. c DSGVO. Data in the customer account shall remain in the customer account until its deletion with subsequent archiving in the event of a legal obligation. It is the responsibility of the users to save their data in case of termination before the end of the contract.

​

Within the scope of registration and renewed logins and use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests as well as the user's need for protection against misuse and other unauthorized use. This data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 Para. 1 lit. c DSGVO.

 

Deletion is carried out after the expiry of legal warranty and comparable obligations, the necessity of storing the data is reviewed every three years; in the case of legal archiving obligations, deletion is carried out after their expiry (end of commercial (6 years) and tax (10 years) storage obligation).

​

7. SUBSCRIPTION TO OUR NEWSLETTER

On the website of Gomera-Bikes , users are given the opportunity to subscribe to the free newsletter of our company.

With the following notes we would like to inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection. By subscribing to our newsletter, you agree to receive it and to the described procedures.

​

Content of the newsletter: We send newsletters, e-mails and other electronic notifications containing advertising information (hereinafter referred to as "newsletter") only with the consent of the recipients or a legal permission. If, in the course of registering for the newsletter, its contents are specifically described, they are decisive for the consent of the users. Our newsletters also contain information about our products and accompanying information (e.g. safety instructions), offers, promotions and our company.

​

Double-Opt-In and logging: The registration to our newsletter is done in a so-called Double-Opt-In procedure. This means that you will receive an e-mail after registration asking you to confirm your registration. This confirmation is necessary so that no one can register with foreign e-mail addresses. The newsletter registrations are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

​

Registration data: To subscribe to the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to enter a name for personal contact in the newsletter.

The dispatch of the newsletter and the associated measurement of success are based on the consent of the recipients in accordance with Art. 6 Para. 1 lit. a, Art. 7 DSGVO in conjunction with § 107 Para. 2 TKG or, if consent is not required, on our legitimate interests in direct marketing in accordance with Art. 6 Para. 1 lt. f. DSGVO in conjunction with § 107 (2) and (3) TKG.

​

The logging of the registration procedure is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f DSGVO. We are interested in the use of a user-friendly and secure newsletter system that serves our business interests as well as the expectations of the users and also allows us to prove their consent.

​

Cancellation/revocation - You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. We may store the unsubscribed e-mail addresses for up to three years based on our legitimate interests before we delete them to prove that you have previously given your consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of a consent is confirmed at the same time.

Newsletters are sent via the mailing service "MailChimp", a newsletter mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The data protection regulations of the mail service provider can be viewed here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European data protection level (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The mail order service provider is used on the basis of our legitimate interests according to art. 6 para. 1 lit. f DSGVO and an order processing contract according to art. 28 para. 3 p. 1 DSGVO.

​

The dispatch service provider can use the data of the recipients in pseudonymous form, i.e. without allocation to a user, to optimize or improve its own services, e.g. for technical optimization of the dispatch and presentation of the newsletter or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

​

8. NEWSLETTER - PERFORMANCE MEASUREMENT

The newsletters contain a so-called "web-beacon", i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a mailing service provider, from their server. Within the scope of this retrieval, technical information such as information on the browser and your system, as well as your IP address and time of retrieval are initially collected.

​

This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined by means of the IP address) or the access times. Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the dispatch service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our contents to them or to send different contents according to the interests of our users.

Unfortunately, it is not possible to cancel the success measurement separately. In this case, the entire newsletter subscription must be cancelled.

​

9. CONTACT POSSIBILITY VIA THE WEBSITE

Due to legal regulations, the website of Gomera-Bikes contains information that allows for quick electronic contact with our company as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the data controller by e-mail or via a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data transmitted voluntarily by a data subject to the data controller are stored for the purposes of processing or contacting the data subject. This personal data is not disclosed to third parties.

​

 10. ROUTINE DELETION AND BLOCKING OF PERSONAL DATA

The data processed by us will be deleted or limited in their processing in accordance with articles 17 and 18 DSGVO. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage obligations. If the data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

​

According to legal requirements in (Europe) Spain, the storage is in particular for 10 years in accordance with §§ 147 para. 1 AO, 257 para. 1 nos. 1 and 4, para. 4 HGB (books, records, management reports, accounting vouchers, commercial books, documents relevant for taxation, etc.) and 6 years in accordance with § 257 para. 1 nos. 2 and 3, para. 4 HGB (commercial letters).

​

11. RIGHTS OF THE PERSON CONCERNED

You have the right:

- to request information about your personal data processed by us according to art. 15 DSGVO. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details of the same;

- in accordance with Art. 16 DSGVO, to immediately demand the correction of incorrect or incomplete personal data stored by us;

- pursuant to Art. 17 DSGVO to demand the deletion of your personal data stored with us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

- pursuant to Art. 18 DSGVO, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing pursuant to Art. 21 DSGVO;

- in accordance with Art. 20 DSGVO, to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party;

- in accordance with Art. 7 para. 3 DSGVO, to revoke your consent to us at any time. As a result, we may no longer continue data processing based on this consent for the future and

- complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.

12. DATA PROTECTION IN APPLICATIONS AND IN THE APPLICATION PROCESS

We offer you the opportunity to apply for a job with us via our website. With these digital applications, your applicant and job application data will be collected and processed electronically by us for the purpose of handling the application procedure.

The legal basis for this processing is § 26 para. 1 sentence 1 BDSG in conjunction with Art. 88 para. 1 DSGVO.

If a contract of employment is concluded after the application procedure, we will store the data you provide during the application process in your personnel file for the purpose of the usual organizational and administrative process - naturally in compliance with the more extensive legal obligations.

The legal basis for this processing is also § 26 para. 1 sentence 1 BDSG in conjunction with Art. 88 para. 1 DSGVO.

If an application is rejected, we automatically delete the data transmitted to us two months after notification of the rejection. However, the data will not be deleted if the data requires longer storage of up to four months or until the conclusion of legal proceedings due to statutory provisions, e.g. due to the obligation to produce evidence under the AGG.

​

In this case, the legal basis is Art. 6 para. 1 lit. f) DSGVO and § 24 para. 1 no. 2 BDSG. Our legitimate interest lies in the legal defense or enforcement.

​

If you expressly consent to a longer storage of your data, e.g. for your inclusion in a database of applicants or interested parties, the data will be processed further on the basis of your consent. The legal basis is then Art. 6 para. 1 lit. a) DSGVO. However, you can of course revoke your consent at any time in accordance with Art. 7 Para. 3 DSGVO by making a declaration to us with effect for the future.

​

13. LOTTERY

Through our website we offer you the possibility to participate in competitions. If you take part in one of our competitions, the data you enter when taking part will be processed without your further consent, but naturally only for the purpose of carrying out and processing the respective competition.

​

In the course of processing the competition, we will pass on your data to the transport company commissioned with the delivery of the goods or to a financial service provider, insofar as the transfer is necessary for the delivery or payment of your prize. If your data is published in the event of a win, you will be informed of this in the declaration of consent.

The legal basis for the transfer of data is then Art. 6 para. 1 lit. b) DSGVO.

​

You can revoke your consent to the processing of data for participation in our competitions at any time with effect for the future in accordance with Art. 7 Para. 3 DSGVO. To do so, you only need to inform us of your revocation.

​

14. ONLINE PRESENCES IN SOCIAL MEDIA

We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.

​

Unless otherwise stated in our privacy policy, we process the data of users, as long as they communicate with us within the social networks and platforms, e.g. write articles on our online presences or send me messages.

​

15. FACEBOOK SOCIAL PLUGIN

On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of my online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) Social Plugins ("Plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The Plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and can be recognized by one of the Facebook logos (white "f" on blue tile, the words "Like", "Like" or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin".

The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/

Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

When a user calls up a function of this online offer that contains such a plugin, his or her device establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user's device and integrated into the online offer by the user. User profiles can be created from the processed data. We therefore have no influence on the extent of the data that Facebook collects with the help of this plugin and therefore inform the users according to our state of knowledge.

​

By integrating the plugins, Facebook receives the information that a user has called up the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his or her Facebook account. When users interact with the plugins, for example, by pressing the Like button or posting a comment, the corresponding information is transmitted directly from your device to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to find out his or her IP address and store it. According to Facebook, only an anonymized IP address is stored in Spain.

​

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and setting options to protect the privacy of users, can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.

​

If a user is a Facebook member and does not want Facebook to collect data about him or her via this online offer and link it to his or her membership data stored on Facebook, he or she must log out of Facebook and delete his or her cookies before using our online offer. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: www.facebook.com/settings; or via the US-American page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/.

​

The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

​

16. GOOGLE ANALYTICS

On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) we use Google Analytics, a web analysis service of Google LLC ("Google"). Google uses cookies. The information generated by the cookie about the use of the website by the user is usually transferred to a Google server in the USA and stored there.

​

Google is certified under the Privacy-Shield-Agreement and thus offers a guarantee to comply with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate the use of our website by the users, to compile reports on the activities within this website and to provide us with further services related to the use of this website and the internet. The processed data can be used to create pseudonymous user profiles of the users.

​

We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.

​

The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by adjusting their browser software accordingly; users can also prevent the collection of data generated by the cookie and related to their use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de .

 

Further information on the use of data by Google, setting and objection options, you will find in the privacy policy of Google (https://policies.google.com/technologies/ads ) and in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated ).

The personal data of users will be deleted or anonymized after 14 months.

 

17. GOOGLE UNIVERSAL ANALYTICS

We use Google Analytics in the design as "Universal Analytics". "Universal Analytics" refers to a Google Analytics method in which user analysis is based on a pseudonymous user ID, thus creating a pseudonymous profile of the user with information from the use of various devices (so-called "cross-device tracking").

​

Target group formation with Google Analytics

We use Google Analytics in order to display the ads placed within advertising services of Google and its partners only to those users who have also shown an interest in our online offer or who show certain characteristics (e.g. interests in certain topics or products determined by the websites visited) which we transmit to Google (so-called "remarketing" or "Google Analytics Audiences"). With the help of remarketing audiences, we also want to ensure that our ads match the potential interest of users.

​

 18. DATA PROTECTION REGULATIONS ON THE USE AND APPLICATION OF GOOGLE-ADWORDS

The data controller has integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to place ads in Google's search engine results as well as in the Google advertising network. Google AdWords allows an advertiser to specify pre-defined keywords that will cause an ad to appear in Google's search engine results only when the user uses the search engine to retrieve a keyword relevant search result. In the Google advertising network, the ads are distributed to topic-relevant Internet pages by means of an automatic algorithm and in accordance with the previously defined keywords.

​

The operating company of the Google AdWords services is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

​

The purpose of Google AdWords is to advertise our website by displaying advertisements relevant to our interests on the websites of third party companies and in the search engine results of the Google search engine and by displaying third-party advertising on our website.

​

If a person concerned reaches our website via a Google advertisement, a so-called conversion cookie is stored on the information technology system of the person concerned by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and does not serve to identify the data subject. If the cookie has not expired, the conversion cookie is used to determine whether certain sub-pages, such as the shopping cart from an online store system, have been accessed on our website. The conversion cookie enables both we and Google to track whether a person who reached our website via an AdWords ad generated sales, i.e. whether he or she completed or abandoned a purchase.

​

The data and information collected through the use of the conversion cookie is used by Google to create visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users that were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive any information from Google that could be used to identify the individual.

​

By means of the conversion cookie, personal information, such as the websites visited by the person concerned, is stored. Whenever our website is visited, personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

The person concerned can prevent the setting of cookies by our website, as described above, at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the information technology system of the person concerned. Furthermore, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.

​

Furthermore, the person concerned has the possibility to object to interest-based advertising by Google. To do this, the person concerned must call up the link www.google.de/settings/ads from each of the Internet browsers he or she uses and make the desired settings there.

​

Further information and the applicable data protection regulations of Google can be found at https://www.google.de/intl/de/policies/privacy/.

​

19. DATA PROTECTION REGULATIONS ON THE USE AND APPLICATION OF YOUTUBE

We use YouTube in our Internet presence. This is a video portal of YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, USA, hereinafter only referred to as "YouTube".

​

YouTube is a subsidiary of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter only referred to as "Google".

​

Through certification according to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

 guarantees Google, and with it its subsidiary YouTube, that the EU's data protection regulations will also be observed when processing data in the USA.

​

We use YouTube in conjunction with the "Advanced Privacy Mode" feature to show you videos. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in improving the quality of our Internet presence. According to YouTube, the function "Extended Privacy Mode" has the effect that the data described in more detail below is only transmitted to the YouTube server when you actually start a video.

​

Without this "Enhanced Privacy Mode", a connection to the YouTube server in the USA is established as soon as you access one of our Internet pages on which a YouTube video is embedded.

​

This connection is required in order to display the respective video on our website via your Internet browser. In the course of this, YouTube will at least record and process your IP address, the date and time, and the website you visited. Furthermore, a connection to the advertising network "DoubleClick" of Google will be established.

​

If you are logged into YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.

​

For the purpose of functionality as well as for the analysis of usage behaviour, YouTube permanently stores cookies via your internet browser on your end device. If you do not agree with this processing, you have the possibility to prevent the storage of cookies by adjusting your internet browser settings. You will find more information on this under "Cookies" above.

​

Google provides further information about the collection and use of data and your rights and protection options in this regard in the data protection information available at https://policies.google.com/privacy.

​

20. GOOGLE MAPS

In our internet presence we use Google Maps to show our location and to provide directions. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter only "Google".

Through certification according to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active, Google guarantees that the data protection requirements of the EU are also complied with when processing data in the USA.

​

In order to enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.

​

If you call up the Google Maps component integrated into our website, Google will store a cookie on your terminal device via your Internet browser. In order to display our location and to provide you with directions, your user settings and data are processed. We cannot exclude the possibility that Google uses servers in the USA.

​

The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the optimization of the functionality of our Internet presence.

​

Through the connection to Google established in this way, Google can determine from which website your request has been sent and to which IP address the directions are to be sent.

If you do not agree with this processing, you have the possibility to prevent the installation of cookies by making the appropriate settings in your Internet browser. You will find details on this above under the item "Cookies".

In addition, the use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=de and the Terms and Conditions for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html

Moreover, Google offers under

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

further information to

​

21. TRANSMISSIONS TO THIRD COUNTRIES

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using the services of third parties or disclosure or transfer of data to third parties, this will only take place if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we will only process or transfer the data in a third country if the special requirements of Art. 44 ff. DSGVO. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").

​

22. LEGAL BASIS OF THE PROCESSING

In accordance with Art. 13 DSGVO we inform you about the legal basis of our data processing. If the legal basis is not stated in the data protection declaration, the following applies: The legal basis for obtaining consent is Art. 6 Para. 1 lit. a and Art. 7 DSGVO, the legal basis for processing for the purpose of fulfilling our services and implementing contractual measures and answering inquiries is Art. 6 Para. 1 lit. b DSGVO, the legal basis for processing for the purpose of fulfilling our legal obligations is Art. 6 Para. 1 lit. c DSGVO, and the legal basis for processing for the purpose of safeguarding our legitimate interests is Art. 6 Para. 1 lit. f DSGVO. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d DSGVO serves as the legal basis.

23. LEGITIMATE INTERESTS IN PROCESSING PURSUED BY THE CONTROLLER OR A THIRD PARTY

If the processing of personal data is based on Article 6 I lit. f DS-GVO, our legitimate interest is to carry out our business activities for the benefit of the well-being of all our employees and our shareholders.

​

 24. DURATION FOR WHICH PERSONAL DATA IS STORED

The criterion for the duration of storage of personal data is the respective legal retention period. After this period has expired, the corresponding data is routinely deleted if it is no longer required for the fulfillment or initiation of a contract.

​

 25. LEGAL OR CONTRACTUAL PROVISIONS ON THE PROVISION OF PERSONAL DATA; NECESSITY FOR THE CONCLUSION OF THE CONTRACT; OBLIGATION OF THE PERSON CONCERNED TO PROVIDE THE PERSONAL DATA; POSSIBLE CONSEQUENCES OF NOT PROVIDING THE DATA

​

We would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual regulations (e.g. information on the contractual partner). Sometimes it may be necessary for a contract to be concluded that a data subject provides us with personal data, which must subsequently be processed by us. For example, the person concerned is obliged to provide us with personal data if our company concludes a contract with him/her. Failure to provide the personal data would mean that the contract with the person concerned could not be concluded. Before the person concerned makes personal data available, the person concerned must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences would be if the personal data were not provided.

​

26. SECURITY MEASURE

In accordance with Art. 32 DSGVO and taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the varying probability of occurrence and severity of the risk to the rights and freedoms of natural persons, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.

​

These measures shall include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling the physical access to the data, as well as the access, input, disclosure, security of availability and separation of the data relating to them. In accordance with the principle of data protection through the design of technology and other measures, we have established procedures to ensure that the rights of data subjects are protected, that data is deleted and that we react to any threats to data. Furthermore, we take into account data protection-friendly default settings (Art. 25 DSGVO).

​

27. DATA SECURITY

We use the common SSL (Secure Socket Layer) procedure within the website visit in connection with the highest encryption level supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties.

Our security measures are continuously improved in line with technological developments.

​

28. UPDATE AND AMENDMENT OF THIS DATA PROTECTION DECLARATION

This privacy policy is currently valid and has the status September 2019

Due to the further development of our website and offers above or due to changed legal or official requirements it may become necessary to change this data protection declaration.

​

The current data protection declaration can be called up and printed out at any time on the website at https://www.gomera-bikes.com/datenschutz-und-impressum?lang=en