Data protection notice for website visitors

A. General

I.Responsible Party

This privacy statement is issued by

TechniBike GmbH
Julius-Saxler-Straße 3
54550 Daun

Phone: 0049 (0)6592 / 712 -8228
Fax: 0049 (0)6592 / 712 8219
Email: datenschutz@technibike.de

(hereinafter also referred to as "TechniBike") fulfills its existing legal obligation to provide information pursuant to Art. 13 of the General Data Protection Regulation ("GDPR") with regard to the processing of personal data on the TechniBike website. In the following, we therefore explain which of your personal data we process and how.

II. Personal Data

Personal data within the meaning of Art. 4 No. 1 GDPR includes information such as your name, address, telephone number, email address, bank details, or date of birth.

III. Processing of personal data

Processing of personal data pursuant to Art. 4 No. 2 GDPR occurs in any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data.

We process personal data within the meaning of Art. 4 No. 2 GDPR in accordance with the specifications and requirements set out below within the framework of automated processing based on a relevant legal authorization.

With regard to the fulfillment of legal obligations, Art. 6 (1) (c) GDPR is the corresponding legal basis. We process your personal data depending on the respective legal obligation.

We present the corresponding legal bases for other data processing below.

Automated decision-making in individual cases, including profiling in accordance with Art. 22 GDPR, does not take place.

B. General processing operations

I. Collection of personal data when visiting our website

If you simply use the website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data in particular, which is technically necessary for us to display our website to you and to ensure stability and security.

– IP address

– Date and time of the request

– Time zone difference to Greenwich Mean Time (GMT)

– Content of the request (specific page)

– Access status/HTTP status code

– Amount of data transferred in each case

– Website from which the request originates (referrer, if applicable)

– Operating system and its interface, screen resolution, and Color depth

– Browser software type, language, and version

The legal basis is Art. 6 (1) (f) GDPR ("legitimate interest").

II. Additional functions and offers

In addition to the purely informational use of our website, we offer various services that you can use if you are interested and use other common functions for analyzing or marketing our offers, which are presented in more detail below. To do so, you usually have to provide additional personal data, or we process such additional data that we use to carry out the respective services. We present these to you in this document.

We sometimes use external service providers to process your data. These are carefully selected by us, bound by our instructions, and regularly monitored.

We may also share your personal data with third parties if we offer participation in promotions, competitions, contract conclusions, or similar services together with partners. Depending on the service, your data may also be collected by the partners on their own responsibility. For more information, please contact You do this when you provide your data or below in the description of the respective offers.

If our service providers or partners are based in a country outside the EU / European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.

III. Contacting us by email / telephone / contact form

When you contact us by email, telephone, or via a contact form, the data you provide will be processed by us. Mandatory information is only provided in the mandatory fields shown in the respective contact options. This information is necessary so that we can respond to your inquiry accordingly. You can provide further personal data voluntarily if you wish. For example, if we are to send you information material by post, we need your address. Your personal data will be stored by us in order to answer your questions. We delete the data collected in this context once storage is no longer required, or restrict processing if statutory retention periods apply.

The legal basis is Art. 6 (1) (a) GDPR ("consent"), alternatively Art. 6 (1) (f) GDPR ("legitimate interest").

C. Use of Cookies

In addition to the data mentioned above, we use technical tools for various functions when you use our website, in particular cookies that can be stored on your device. When you visit our website and at any time later, you have the choice whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager. Below, we first describe cookies from a technical perspective before going into more detail about your individual options, describing technically necessary cookies and cookies that you can voluntarily select or deselect.

Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you use, so that certain information can be sent to the location that sets the cookie. Cookies cannot run programs or transmit viruses to your computer, but primarily serve to make the Internet faster and more user-friendly. This website uses the following types of cookies, the functionality and legal basis of which we will explain below:

– Transient cookies: These, especially session cookies, are automatically deleted when you close the browser or log out. They contain a so-called session ID. This allows various requests from your browser to be assigned to the shared session, and your computer can be recognized when you return to our website.

– Persistent cookies: These are automatically deleted after a specified period of time, which varies depending on the cookie. You can view the cookies set and their expiration times at any time in your browser settings and delete the cookies manually.

– Other technologies: These functions are not based on cookies, but on similar technical mechanisms, such as Flash cookies, HTML5 objects, or an analysis of your browser settings. Here, too, you can of course consent or object.

We use cookies that are technically necessary to display the website. The legal basis is Art. 6 (1) (f) GDPR ("legitimate interest"), as can be seen from the Cookie Consent Manager. The technical structure of the website requires us to use technologies, especially cookies. Without these technologies, proper functionality or a complete display of our web pages cannot be guaranteed, or the support functions cannot be enabled. These are generally transient cookies that are deleted after your visit to the website, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. However, you can of course configure your browser settings according to your wishes and also reject such technically necessary cookies. We would like to point out that in this case you will not be able to use our website at all or only to its full extent.

Otherwise, Art. 6 (1) (a) GDPR forms the legal basis for the use of Cookies ("consent"), which you can select on your first visit to our website and on each subsequent visit via the so-called Cookie Consent Manager. These functions are only activated with your consent and can be used, in particular, to analyze and improve visits to our website, to make it easier for you to use it across different browsers or devices, to recognize you during a visit, or to display advertising (possibly also to tailor advertising to your interests, measure the effectiveness of ads, or display interest-based advertising). Further information on this can be found in this privacy notice and via the "More" section, privacy settings, via our cookie banner.

Storing information on your terminal equipment by setting cookies, as well as accessing information stored on such a terminal equipment by reading the cookies, is only permitted if you give us your consent in accordance with Section 25 (1) Sentence 1 of the Telemedia Act (TDDDG). However, according to Section 25 (1) (2) of the Telemedia Act (TDDDG), the corresponding provisions of the GDPR, as already described, apply.

You can revoke your consent without affecting the legality of the processing up to the time of revocation.

You can differentiate whether you give us consent for all cookies, only for certain types of cookies, or no consent at all.

This consent is voluntary. You can refuse it without giving reasons and without fear of any disadvantages. You can revoke this consent at any time with future effect using the fingerprint on the left side of the website without any disadvantages. However, we would like to point out that if you do not give your consent or if you revoke your consent, you may not be able to use all of the functions of this website to their full extent.

We will also provide you with further information on the use of cookies in the following sections.

D. Web Analytics

We use Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use is to enable the analysis of your user interactions on websites and, through the statistics and reports obtained, to improve our offering and make it more interesting for you as a user.

We primarily record the interactions between you as a website user and our website using cookies, device/browser data, IP addresses, and website activities. Google Analytics also records your IP addresses to ensure the security of the service and to provide us, as website operators, with information about the country, region, or location from which the respective user originates (so-called "IP location determination"). For your protection, however, we naturally use the anonymization function "IP masking," which means that Google shortens IP addresses by the last octet within the EU/EEA.

Google acts as a processor, and we have concluded a corresponding contract with Google in accordance with Art. 28 GDPR. Processors will only process your data in accordance with legal requirements, according to our instructions, and only within the scope of fulfilling the contract. The information generated by the cookie and the (usually shortened) IP addresses regarding your use of this website are usually transferred to a Google server in the USA and processed there.

Google uses cookies and also processes your personal data in the USA. Data is transferred to companies in the USA on the basis of an adequacy decision of the European Commission within the meaning of Art. 45 (3) GDPR, which stipulates that an adequate level of protection exists in the USA.

The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent, Art. 6 (1) (a) GDPR in conjunction with Section 25 of the Telemedia Act (TDDDG). You can revoke your consent at any time without affecting the legality of the processing until the revocation. The easiest way to revoke your consent is via our Consent Manager or by installing the Google browser add-on, which is available via the following link: tools.google.com/dlpage/gaoptout?hl=de/.

You can revoke this consent at any time with future effect via the You can revoke your consent to the fingerprinting on the left side of the website without any disadvantages.

You can find more information about the scope of Google Analytics at marketingplatform.google.com/about/analytics/terms/de/. Google provides information about data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245?hl=de/. General information about data processing, which also applies to Google Analytics, can be found in Google's privacy policy at www.google.de/intl/de/policies/privacy/.

E. Social Media Presences

I. Social Media Networks

We have various presences on so-called social media platforms. We operate our presence on the following providers:

Facebook: https://www.facebook.com/technibike

Instagram: https://www.instagram.com/technibike/

YouTube: https://www.youtube.com/@technibikegmbh6389

LinkedIn: https://www.linkedin.com/company/technibike-gmbh

The controller pursuant to Art. 4 No. 7 GDPR is us as the operator of the site, and the provider is jointly responsible pursuant to Art. 26 GDPR.

The essential content of the contract regarding our joint responsibility pursuant to Art. We present the following information in accordance with Article 26 (2) (s) 2 GDPR:

The provider assumes primary responsibility for the processing of Insights data in accordance with the GDPR requirements and will fulfill all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR "Information Obligations", Articles 15 to 21 GDPR "Data Subject Rights", and Articles 32 to 34 GDPR "Technical and Organizational Measures, among others").

Data collected about you in this context will be processed by the platforms and transferred to countries outside the European Union. Data is transferred to companies in the USA on the basis of an adequacy decision by the European Commission within the meaning of Art. 45 (3) GDPR, which stipulates that an adequate level of protection exists in the USA.

We do not know how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored, and whether data is shared with third parties. Data processing may differ depending on whether you are registered and logged in to the social network or visit the site as a non-registered and/or non-logged-in user. When you access a post or account, the IP address assigned to your device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can track your online activity. Via buttons integrated into websites, the platforms can record your visits to these websites and assign them to your respective profile. Based on this data, content or advertising can be offered tailored to you. If you wish to avoid this, you should log out or deactivate the "stay logged in" function, delete the cookies present on your device, and restart your browser.

We use the technical platform and the services of the providers for these information services. We would like to point out that you use our presence on social media platforms and their functions at your own risk. This applies in particular to the use of interactive functions (e.g., commenting, sharing, rating). When you visit our presence, the providers of the social media platforms record, among other things, your IP address and other information stored on your device in the form of cookies. This information is used to provide us, as the account operator, with statistical information about interactions with us.

As the provider of the information service, we only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer via email, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy policy.

The legal basis for our processing of your data on the social media platform is Art. 6 (1) (s) 1 lit. f GDPR.

We may also collect and process your personal data to conduct competitions. The legal basis in this case is Art. 6 (1) (b) GDPR ("Contract Execution"). This data is required to conclude the competition contract. Without this data, we cannot conclude a competition contract with you.

To exercise your data subject rights, you can contact us or the provider of the social media platform. If one party is not responsible for responding or must receive the information from the other party, we or the provider will forward your request to the respective partner. Please contact the operator of the social media platform directly if you have any questions about profiling or the processing of your data when using the website. If you have any questions about how we process your interactions with us on our site, please write to the contact details provided above.

Addresses of the respective providers and URL with their privacy policy:

Facebook: The operator is Facebook Inc., a Meta company, 1601 S California Ave, Palo Alto, California 94304, USA; facebook.com/policy.php; Further information on data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other#applications and www.facebook.com/about/privacy/your-info#everyoneinfo.
Instagram: Operated by Facebook Inc., a Meta company, 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; Further information on data collection: www.facebook.com/help/186325668085084, facebook.com/about/privacy/your-info-on-other#applications and www.facebook.com/about/privacy/your-info#everyoneinfo.
YouTube: Operated by Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; google.com/policies/privacy/partners/?hl=de.
LinkedIn: Operator is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Further information on data collection can be found at: www.linkedin.com/legal/privacy-policy.

Further information on data protection with the respective provider can be found in the aforementioned privacy policy of the provider and also on youngdata.de.

II. Integration of YouTube videos

We have integrated YouTube videos into our online offering, which are stored on www.YouTube.com and can be played directly from our website.

We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the provider. All videos are embedded in "extended data protection mode," meaning that no data about you as a user is transferred to YouTube if you do not play the videos. We offer you the opportunity to communicate directly with the provider via the video. Only when you play the videos will the data specified under B., I., "Collection of personal data when visiting our website" be transferred. YouTube also receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in, your data will be assigned directly to your account. If you do not wish to be assigned to your YouTube profile, you must log out before activating the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research, and/or tailoring its website to meet your needs. Such evaluation is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; you must contact YouTube to exercise this right.

The legal basis for processing your data is Art. 6 (1) (a) GDPR in conjunction with Section 25 of the Telemedia Act (TDDDG), i.e., integration only takes place with your consent. Consent is voluntary. You can refuse it without giving reasons and without fear of any disadvantages. You can revoke this consent at any time with future effect via the fingerprint on the left side of the website , without threaten from disadvantages.

YouTube also processes your personal data in the USA. Data transmission to companies in the United States is carried out on the basis of an adequacy decision by the European Commission within the meaning of Art. 45 Para. 3 GDPR, which was determined that there is an appropriate level of protection in the United States.

Further information on the purpose and scope of the data collection and your processing by YouTube can be obtained in the data protection declaration. There you will also receive further information on your rights and settings to protect your privacy: www.google.de/intl/de/policies/privacy.

f. Marketing

i. Use of Google Ads

We use Google Ads to draw attention to our offers through advertisements. If you access our website via a Google ad, Google Ads will store a cookie on your device.

Google also processes your personal data in the USA. Data transmission to companies in the United States is carried out on the basis of an adequacy decision by the European Commission within the meaning of Art. 45 Para. 3 GDPR, which was determined that there is an appropriate level of protection in the United States.

Legal basis for processing your data is Art. 6 Para. 1 S. 1 lit. a GDPR in conjunction with § 25 TDDDGG, i.e.

The advertising materials are delivered by Google via so-called "ad server". To do this, we use so-called ad server cookies, through which certain parameters can be measured for success measurement, such as fading in the displays or clicks by the users. We can get information about the success of our advertising campaigns via the Google Ads cookies stored on our website. These cookies should not serve to identify them personally. For this cookie, the Unique Cookie-ID, number ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking a user no longer wants to be addressed) are generally stored.

The cookies set by Google enable Google to recognize your internet browser. If a user visits certain pages of the website of an ADS customer and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user has clicked on the display and has been forwarded to this page. Another cookie is assigned to each ADS customer, so that the cookies cannot be tracked on the websites of other ADS customers. By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on an advertisement from us. If you are registered with a service from Google, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider will find and save your IP address.

Due to the marketing tools used, your browser automatically builds up a direct connection to the Google server. In the advertising measures mentioned, we do not collect personal data independently, but only provide the possibility of collecting the data for Google. We only receive statistical evaluations from Google, which provide information which advertisements have been clicked at which prices. We do not receive any further data from the use of the advertising material, in particular we cannot identify users based on this information.

The revocation of your consent is possible at any time, without the admissibility of processing until the revocation. The easiest way to carry out the revocation via our consent manager or the following functions: a) By setting your browser software, in particular, the suppression of third-party cookies means that you do not receive any displays from third-party providers; b) by adjusting your browser so that cookies from the domain "www.googleadservices.com" are blocked, www.google.de/settings/ads, whereby this setting is deleted when you delete your cookies; c) By deactivating the interest-related ads of the providers, which are part of the self-regulatory campaign "About Ads", via the link www.aboutads.info/choices, whereby this setting is deleted when they are deleted when their cookies L delete; d) by permanently deactivating it in your Firefox, Internet Explorer, or Google Chrome browsers using the link www.google.com/settings/ads/plugin. Please note that in this case, you may not be able to fully use all the features of this service.

Further information on data protection at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, can be found here: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/de.html.

II. Google Conversion Tracking

We use Google Ads with the additional application "Google Conversion Tracking." This is a process that allows us to monitor the success of our advertising campaigns. For this purpose, the advertisements are provided with a technical measure, e.g., an ID, which allows us to determine how a user interacts after clicking on the advertisement and whether one of our services is actually used. This provides us with statistical information about the total number of readers of our advertisements, which advertisements are particularly popular, and, if applicable, further information about the consequences of the advertisement.

You can prevent or no longer use the conversion tracking function in the same way as previously described for Google Ads.

The legal basis for processing your data is Art. 6 (1) (a) GDPR in conjunction with Section 25 of the Telemedia Act (TDDDG), i.e., integration only occurs with your consent.

Google also processes your personal data in the USA. Data is transferred to companies in the USA on the basis of an adequacy decision of the European Commission within the meaning of Art. 45 (3) GDPR, which stipulates that an adequate level of protection exists in the USA.

You can revoke your consent at any time without any disadvantages for you and without affecting the legality of the processing until the revocation. The easiest way to revoke your consent is via our Consent Manager.

III. Google Remarketing

We use Google Ads with the additional application "Google Remarketing". This process allows us to create advertisements based on existing information about you and to contact you again during your subsequent internet use. This occurs through cookies placed when you visit our offerings, usually through cookies, through which your usage behavior when visiting various websites is recorded and evaluated pseudonymously by Google. According to Google, the data collected as part of remarketing will not be merged with your personal data that may be stored by Google.

You can prevent or no longer use the remarketing function in the same way as previously described for Google Ads.

The legal basis for the processing of your data is Art. 6 (1) (a) GDPR in conjunction with Section 25 of the Telemedia Act (TDDDG), i.e., integration only occurs with your consent.

You can revoke your consent at any time without any disadvantages for you and without affecting the legality of the processing up to the time of revocation. The easiest way to revoke your consent is via our Consent Manager.

IV. Advertising with Meta (Pixel and Conversion Tracking)

Furthermore, the website uses advertising measures from Facebook Inc. / Meta Platforms Ireland Ltd. ("Facebook"). By integrating the so-called "Facebook Pixel" on our website, we can display our advertising measures, "Facebook Ads," to users of our website and the Facebook social network, and measure and evaluate their success, "Conversion Tracking." This connection between Facebook and our website is technically established via the pixel..

Legal basis for processing your data is Art. 6 Para. 1 S. 1 lit. a GDPR in conjunction with § 25 TDDDGG, i.e.

Meta (Facebook / Instagram) also processes your personal data in the USA. Data transmission to companies in the United States is carried out on the basis of an adequacy decision by the European Commission within the meaning of Art. 45 Para. 3 GDPR, which was determined that there is an appropriate level of protection in the United States.

Due to the marketing tools used, your browser automatically builds up a direct connection to the Facebook server when visiting our website. We have no influence on the scope and further use of the data that is collected by the use of this tool by Facebook and therefore present the processes known to us: By integrating the Facebook pixel, Facebook receives the information that you have accessed the corresponding website of our website or have clicked on an advertisement from us. If you are registered with a service from Facebook, Facebook can assign your visitor to your account. Even if you are not registered on Facebook or have not logged in, there is the possibility that the provider will find out your IP address and other identification features and use it for profile formation.

The revocation of your consent is possible at any time without threatening disadvantages and without the admissibility of processing until the revocation. The easiest way to cancel the cancellation is via our consent manager, which you can access via the fingerprint on the left side of the website. In addition, (only logged -in users) can object to the function of the provider at the following link: www.facebook.com/settings/?tab=ads#_ possible.

Further information on data processing by Facebook can be found at: Facebook Inc. A company of Meta, 1601 S California Ave, Palo Alto, California 94304, USA; Data protection declaration: www.facebook.com/about/privacy.

v. General advertising / newsletter

We intend to process the data you have communicated or collected by us in the event of an existing customer relationship and in the case of other payment relationships for advertising purposes. In this case, the legal basis for data protection law is Art. 6 Para. 1 Clause 1 lit. f GDPR ("legitimate interest"). Such a legitimate interest is given, according to the reasons for the recitulation on the GDPR, especially with regard to so-called direct marketing (recital 47 sentence 7). The concept of direct mail is the immediate address of a customer by a provider with the objective of promoting the paid paragraph of products or services. Customer satisfaction surveys or participation in surveys can also fall under the legal concept of advertising. The other legal requirements (in particular Section 7 (3) UWG) are of course observed.

without an existing customer relationship or without any other contractual relationship we will only process your personal data for advertising purposes if you have given us your voluntary consent, Art. 6 Para. 1 S. 1 lit. a GDPR.

With your consent you can subscribe to our newsletter.

If you register for our newsletter and subscribe to them, we will inform you about our current offers and events. To register for our newsletter via our website, we use the so-called double opt-in procedure. This means that after your registration we will send you an email to the specified email address, in which we ask you to confirm that you would like the sending of the newsletter. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to be able to clarify a possible abuse of your personal data. Your email address is solely mandatory for sending the newsletter. The specification of further, separately marked data is voluntary and is used to address it personally. After your confirmation, we save your personal data for the above purpose. The legal basis is Art. 6 Para. 1 S. 1 lit. a GDPR. This consent is voluntary. You can refuse them without giving reasons without having to fear disadvantages. You can also use this consent at any time with the future effect by clicking on you can revoke your consent at any time by using the link provided in each newsletter email or by sending a message to the contact details provided in this privacy notice, without any risk of disadvantage.

Advertising is carried out by post, electronically (including email, in particular through our newsletter, social media) or by phone, as far as this is legally permissible.

The advertising measures relate in particular to all products and services, customer satisfaction surveys and surveys, as well as invitations to trade fairs and events.

You can object to the processing of your personal data for advertising purposes at any time. The corresponding contact details are listed in the privacy notice. In this case, your personal data will no longer be processed for advertising purposes and will be deleted from the relevant advertising mailing lists.

If we use processors in this context, we have concluded a data processing agreement with them that complies with the requirements of Art. 28 GDPR, so that the processor is subject, in particular, to our instructions as the client.

G. Administration

Google Tag Manager

For easier administration, we use Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags via one interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been performed at the domain or cookie level, this remains in effect for all tracking tags implemented with Google Tag Manager.

The legal basis for processing your data is Art. 6 (1) (a) GDPR in conjunction with Section 25 of the Telemedia Act (TDDDG), i.e., integration only occurs with your consent.

You can revoke your consent at any time without affecting the legality of the processing until the revocation. You can revoke this consent at any time with future effect using the fingerprint on the left side of the website, without any risk of disadvantages.

H. Career

If you apply to us, the data you provide will be processed by us to determine whether we wish to establish and maintain an employment relationship with you.

If you apply online via our career portal, your data will be processed on the systems of our holding company, Techniropa Holding GmbH, www.techniropa.de, which uses a corresponding software partner for this purpose. A data processing agreement has been concluded with this company in accordance with Art. 28 GDPR. The software partner will process your data only in accordance with legal requirements and only subject to instructions within the scope of order fulfillment as a data processor. The company has also taken the necessary security, technical, and organizational measures.

During the application process, in addition to title, first and last name, the usual correspondence data such as postal address, email address, and telephone numbers are stored. In addition, application documents such as a cover letter, resume, professional qualifications, training, and further education certificates, as well as employment references are recorded.

The application data you send us and enter will generally only be processed until the decision regarding your employment is made, unless an employment relationship is established. Six months After the rejection has been sent or after the application documents have been returned to the applicant, the data will be deleted.

Data will only be stored in an applicant pool if you expressly grant us your consent, in accordance with Art. 6 (1) (a) GDPR. This storage will take place for a maximum period of two years. This consent is voluntary. You can refuse it without giving reasons and without fear of any disadvantages. You can also revoke this consent at any time in text form, e.g., by letter or email, with future effect to the contact details provided above, without any risk of disadvantages.

If we enter into an employment relationship with you, the data you have provided to us will be processed to establish, implement, and, if necessary, terminate the employment relationship.

The data may be processed for statistical purposes (e.g., reporting). No conclusions can be drawn about individual persons.

The legal basis is Section 26 of the Federal Data Protection Act ("BDSG") (Section 26 (8) Sentence 2 BDSG).

I. Duration of processing

The maximum storage period depends on the purpose of the data processing. The storage period depends in particular on the period for which storage is necessary to fulfill the purpose. The data will also be processed to fulfill legal obligations (e.g., commercial and tax retention obligations pursuant to Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO) for up to ten years).

Y. Recipients of the data

We will transmit your data to our specialist departments if necessary.

The legal basis for any further data transmission within the Techniropa Holding GmbH group of companies is Art. 6 (1) (f) GDPR ("legitimate interest"). According to this, data processing is lawful if the processing is necessary to protect our legitimate interests, unless the interests or fundamental rights of the data subject override them. Recital 48 of the GDPR's preamble specifies the legitimate interest for transmission within a group of companies. Accordingly, the transfer within a group of companies for internal administrative purposes regarding the processing of data from customers and employees/applicants is to be qualified as a legitimate interest of ours within the meaning of Art. 6 (1) (f) GDPR.

Any further transfer of personal data to third parties will only occur if it is necessary to fulfill the respective purpose and we can rely on an appropriate legal basis for doing so, in particular on our legitimate interest within the meaning of Art. 6 (1) (f) GDPR.

We sometimes use external service providers to process your data. These service providers have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored. All requirements of Art. 28 GDPR are observed.

K. Location of data processing measures

All processing of your personal data takes place either in Germany or in member states of the European Union. As a general rule, we do not transfer your personal data to countries outside the member states of the European Union (so-called third countries) or to other international organizations, unless otherwise stated in this document.

If we transfer personal data to service providers outside the EU, this will only occur if the third country has been confirmed by the EU Commission as having an adequate level of data protection in accordance with Art. 45 (3) GDPR or if other appropriate data protection guarantees (e.g. binding internal company data protection rules or an agreement to the current standard contractual clauses of the EU Commission) are in place or if the data subject has given his or her consent, Art. 44 et seq. GDPR.

L. Security / Technical and organizational measures

We take all necessary technical and organizational measures, taking into account the requirements of Articles 24, 25 and 32 GDPR, to protect your personal data from loss, destruction, access, alteration or distribution by unauthorized persons.to protect against unauthorized access and misuse.

We comply with the legal requirements regarding the pseudonymization and encryption of personal data, the confidentiality, integrity, availability, and resilience of the systems and services associated with processing, the availability of personal data and the ability to quickly restore it in the event of a physical or technical incident, and the establishment of procedures for regularly reviewing, assessing, and evaluating the effectiveness of technical and organizational measures to ensure the security of processing.

Furthermore, we also comply with the requirements of Art. 25 GDPR with regard to the principles of "privacy by design" (data protection through technological design) and "privacy by default" (data protection through data protection-friendly default settings).

M. Your rights / contact details of the external data protection officer

You have the right,

- to request confirmation from us as to whether personal data concerning you is being processed; if this is the case, you have the right to information about this personal data and to the information listed in detail in Art. 15 GDPR,

- to request that we immediately correct any inaccurate personal data concerning you and, if necessary, complete incomplete personal data, see Art. 16 GDPR,

- to request that we immediately delete personal data concerning you if one of the reasons listed in detail in Art. 17 GDPR applies, e.g. B. if data is no longer required for the purposes pursued, so-called right to erasure,

- to demand that we restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have objected to processing, for the duration of our review.

- to object at any time to the processing of personal data concerning you for reasons that may arise from your particular situation. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims, see Art. 21 GDPR. If we base the processing of your personal data on legitimate interests pursuant to Art. 6 (1) (f) GDPR, you can therefore object to the processing. This is the case, in particular, if the processing is not necessary to fulfill a contract with you. If you exercise such an objection, we ask you to explain the reasons why we should not process your personal data as we do. If your objection is justified, we will examine the situation and will either stop or adapt the data processing or explain to you our compelling legitimate grounds on the basis of which we continue the processing.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR, see Art. 77 GDPR. You may exercise this right before a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement. In Rhineland-Palatinate, the responsible supervisory authority is: The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz.

For questions regarding the processing of your personal data, as well as questions regarding the above-mentioned rights and their assertion, as well as for suggestions, please contact us or our external data protection officer:

Phone: 0049 (0) 6592 712 1351

Email: datenschutzbeauftragter@technibike.de

Version: III, valid from July 26, 2024.

Our most current version of this document applies.