I. Contact

This information applies to data processing by:
Bicyclejack GmbH
Soltauer Straße 1
27243 Harpstedt
Germany

E-mail: info@bicyclejack.de
Phone: +49 04244 36 24 21

The data protection officer of Bicyclejack can be reached at the above address or by e-mail at datenschutz@bicyclejack.de.

II Processing of personal data and nature and purpose

1. when you visit our website
When you visit our website https://www.bicyclejack.de, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected and stored without any action on your part and is deleted from the log files after 52 days and completely deleted after a further 2 months at the latest:

• IP address of the requesting computer,
• Date and time of access
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• Browser type and version as well as other information transmitted by the browser (such as the operating system of your computer).

We process the aforementioned data for the following purposes:

• to ensure a smooth connection to the website,
• to ensure a comfortable use of our website,
• to evaluate system security and stability,
• to detect and prevent attacks on our website,
• for the continuous improvement of the website and
• for further statistical and administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data processing purposes listed above.
In principle, we do not use the data collected in this way to draw direct conclusions about your person. However, in the event of an attack on our network infrastructure, your IP address will be evaluated in order to assert or defend against legal claims.
We also use cookies and analysis services when you visit our website. You can find more detailed explanations on this under (sections IV and V) of this privacy policy.

2. when ordering as a guest
If you wish to order products as a guest via our website, we process the following mandatory information:

• Title, first name, last name,
• a valid e-mail address,
• Address,
• Phone number
• depending on the payment method you have selected, payment data (e.g. bank details) if applicable

as well as other voluntarily provided information (such as your date of birth). This data is processed,

• to be able to identify you as our contractual partner;
• to check the entered data for plausibility;
• for the payment processing of your order;
• if necessary for the personalization of advertising measures;
• to process any existing warranty claims and the assertion of any claims against you;
• for coordinating appointments by telephone as part of a bicycle delivery.

The data processing is carried out at your request and is required in accordance with Art. 6 para. 1 sentence 1 lit. b and lit. f GDPR for the purposes mentioned for the fulfillment of the contract and for other pre-contractual measures as well as our legitimate interests.

The personal data processed by us for the order will be stored until the expiry of the statutory warranty obligation and then automatically deleted, unless we are obliged to store it for a longer period of time in accordance with Article 6 (1) sentence 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO) or you have consented to further storage in accordance with Article 6 (1) sentence 1 lit. a GDPR.

3. as part of a customer account
When you create a customer account in our webshop, we request the following data from you:

• Title, first name, last name,
• a valid e-mail address,
• a password
• Address,
• Phone number
• Birthday
• Payment data (e.g. bank details).

In addition, you can voluntarily provide further information. This data is collected, stored and processed so that we can improve your shopping experience individually and continuously and to offer you convenience features in our online store, such as access to your personal order history, saved shopping baskets and wish lists for later purchases and

• to be able to identify you as our contractual partner;
• to check the entered data for plausibility;
• for the payment processing of your order;
• for the personalization of advertising measures;
• to process any existing warranty claims and the assertion of any claims against you;
• for telephone appointment coordination in the context of a bicycle delivery. (We will only use your telephone number for this purpose).

Data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR and Art. 6 para. 1 sentence 1 lit. f GDPR on the basis of our legitimate interests for the aforementioned purposes.

We store the personal data collected by us for registration and login until you submit a deletion request to us. In the event of a request for deletion, we will only retain the necessary information about your orders if further storage is required on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR to fulfill the contract or if we are obliged to store the data for a longer period of time in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO).

4. as part of the creation of customer profiles
As part of the use of our online store, we create customer profiles based on your data, namely on the basis of

• Information about yourself,
• statistical information (e.g. the type, frequency and intensity of use of the website) and
• the history of the offers, manufacturer brands and providers called up and
• the resulting information on your areas of interest

a customer profile and use this

• for statistical evaluations,
• for market research,
• to optimize our services and
• to provide you with advertising tailored to your actual or perceived needs and to avoid bothering you with unnecessary advertising.

Data processing in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR on the basis of our legitimate interests and necessary to achieve these purposes. The storage and analysis of usage data from the online area on a pseudonymous basis also serves these purposes.
In the event of an objection to the evaluation and personalization of our services and advertising, which you can make at any time, the processing will be stopped and your data will be deleted, unless we are obliged to store it beyond this on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR to fulfill the contract or according to Article 6 para. 1 sentence 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO) to a longer storage period.

5. when using our contact form / customer service
You can send us general inquiries using the contact form provided on our website. In addition to your title, your name and a valid e-mail address, we will also ask for the subject and your question. We need this information to be able to answer your inquiry.
Additional personal data such as your address, an order number or your telephone number will not be collected unless you provide this information voluntarily.
Data processing for the purpose of contacting us is carried out at your request and on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR or to safeguard our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in being able to respond to our customers’ inquiries and thus ensure a functioning customer service.

The personal data collected by us for the use of the contact form will be deleted after completion of your request, unless we are obliged to store it for a longer period of time in accordance with Article 6 para. 1 sentence 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO).

6. in connection with our newsletters

As a customer or prospective customer, we would like to send you our newsletter. If you are already a customer of ours, we will therefore also use your e-mail address to send you our personalized newsletter about similar product offers. If you are not a customer of ours and would still like to receive the newsletter, we only need your e-mail address to send you the newsletter. The newsletter is sent on the basis of your explicit consent (Art. 6 para. 1 sentence 1 lit. a GDPR) or, if you are already our customer, on the basis of our legitimate interests in informing you about current product recommendations for you (direct marketing).

a. Personalization:
If you have given us your express consent to send you the newsletter (Art. 6 para. 1 sentence 1 lit. a GDPR), we will evaluate your user behavior in connection with our newsletters in order to tailor our advertising to your interests and to optimize our offers on our website for you.

b. Objection to personalization / withdrawal of consent / unsubscribing from the newsletter:
You can object to the personalization of our newsletter at any time by sending us an email to datenschutz@fahrrad.de. If you do so, we will no longer personalize your data, but will continue to send you our general newsletter.
You can also unsubscribe from our newsletters at any time, e.g. via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time to info@bicyclejack.de and datenschutz@bicyclejack.de by email. Your personal data collected in connection with and exclusively for the purpose of sending the newsletter will be deleted immediately after you unsubscribe.

III Disclosure of data to third parties

1. for payment processing and credit checks
As part of the fulfillment of the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we use payment service providers (payment service providers) for payment processing.
For processing, it may be necessary for us to forward the personal data collected during the payment process, such as name, address, telephone number, email address, credit card or bank account details and transaction data, to the payment service provider. In some cases, the payment service providers also collect this data themselves (PayPal, Sofort GmbH and Paydirekt GmbH).

2. credit check
We offer you the option of paying for your order on account or in installments. In doing so, we make an advance payment. When you select these payment options, your personal data will therefore be forwarded to:

PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

for the purpose of assessing our credit risk.

PayPal has a credit risk assessment carried out by credit agencies and receives information and, if necessary, creditworthiness information on the basis of mathematical-statistical procedures (scoring), in the calculation of which, among other things, address data and your date of birth are included.

The collection, storage and forwarding is therefore carried out for the purpose of credit assessment and in our interest in avoiding payment default and fraud prevention on the basis of Art. 6 para. 1 sentence 1 lit. f’ GDPR. Based on this information, a statistical probability of a credit default and thus your solvency (creditworthiness) is calculated. If the credit check is positive, an order on account or payment by installments is possible. If the credit check is negative, our store system will not allow you to pay on account. The decision as to whether an order is also possible on account is based solely on an automated decision of our online store system, which is carried out by the credit agency commissioned by us, so that a manual check of your documents by one of our employees does not take place separately.

3. to ship your order
In order to be able to ship your order in our store (Art. 6 para. 1 sentence 1 lit. b GDPR) and due to our legitimate interests in making shipping as uncomplicated as possible for you (Art. 6 para. 1 sentence 1 lit. f GDPR), we transmit your data, which you have provided as the delivery address as well as your e-mail address and, if applicable, your telephone number, to shipping service providers who transport your shipment exclusively for the purpose of delivering goods and announcing the delivery of goods. These service providers are subject to postal secrecy.

4. when clicking on embedded YouTube videos

We use components (ideos) of the company YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA (hereinafter: “YouTube”), a company of the YouTube Group, on our website on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR and our legitimate interests in making our website interesting for you.

Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”),

in.

Here we use the “extended data protection mode” option provided by YouTube: When you access a page that has an embedded video, a connection to the YouTube servers is established and the content is displayed on the website by notifying your browser. According to the information provided by YouTube, in “extended data protection mode” your data – in particular which of our websites you have visited and device-specific information including the IP address – is only transmitted to the YouTube server in the USA when you watch the video. You only trigger this transmission by clicking on the video.
If you are logged in to YouTube at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.
Google observes the data protection provisions of the “US Privacy Shield” and is registered with the “US Privacy Shield” program of the US Department of Commerce.
Further information on data protection in connection with YouTube can be found in Google’s privacy policy.

5. for other purposes
In addition, we only pass on your personal data to third parties if:

• you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.

IV. Cookies and pixel tags

1. what are cookies and pixel tags?
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware.
Information is stored in the cookie that results in each case in connection with the specific device used. However, this does not mean that we obtain direct knowledge of your identity.
We use pixel tags (also known as tracking pixels) as part of our online offering. Pixels are small graphics that are integrated into the HTML code of our website. The pixel tag itself does not store or change any information on your end device, so pixels do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.
pixels can send personal data such as your IP address, the referrer URL of the website visited, the time at which the pixel was viewed, the browser used and previously set cookie information to a web server. This makes it possible to carry out reach measurements and other statistical evaluations, which serve to optimize our offer.
The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website, that you have already logged into your user account or to display your shopping cart. These are automatically deleted after you leave our site.
In addition, we also use temporary, so-called comfort cookies to optimize user-friendliness, which are stored on your end device for a certain specified period of time. If you visit our site again to use our services, it is automatically recognized that you have already visited us and which entries and settings you have made so that you do not have to enter them again. As a rule, these are deleted after a maximum of 30 days. Only those comfort cookies that relate to language settings are stored for 365 days.
We also use cookies and pixel tags as part of third-party tools to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These analysis, tracking and tagging cookies enable us to automatically recognize that you have already visited our website when you visit it again. These cookies are automatically deleted after a defined period of time.

2. what is the legal basis for processing using cookies and pixel tags?
The data processed by cookies and pixel tags are necessary for the purposes mentioned to safeguard our legitimate interests in the analysis, optimization and economic operation of our website and the legitimate interests of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

3. what opt-out options do you have?
Most browsers accept cookies and pixels automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created.
However, completely deactivating cookies may mean that you cannot use all the functions of our website. You can find instructions on how to disable cookies in your browser in the help function of your browser or under the following links:

Mozilla FireFox
Google Chrome
Microsoft Edge
Opera
Safari
Microsoft Internet Explorer 11
Microsoft Internet Explorer 10
Microsoft Internet Explorer 9

You can also prevent the use of pixels on our pages by using appropriate tools or browser add-ons (e.g. the “AdBlock” add-on).
You can find further opt-out options in the following information about the tracking and targeting measures we use.

V. Tracking and targeting

The tracking and targeting measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR: With the tracking measures used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website. Through the targeting measures used, we also want to ensure that only advertising based on your actual or perceived interests is displayed on your end devices.
The respective data processing purposes and data categories can be found in the description of the corresponding tracking tools.

1. bing conversion tracking
We use conversion tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This enables us to track the activities of users on our website if they have reached our website via ads from Bing Ads.
If you reach our website via a Bing Ads ad, a cookie is placed on your computer. Microsoft stores data about the use of the website. This includes, among other things, the time spent on the website, which areas of the website were accessed and which ad brought you to the website. Information about your identity is not recorded.
This information is transferred to Microsoft servers in the USA and stored there for a maximum of 180 days. Microsoft observes the data protection provisions of the “US Privacy Shield” and is registered with the “US Privacy Shield” program of the US Department of Commerce. In addition, we have concluded an order processing agreement with Microsoft for the use of Bing Ads. Through this contract, Microsoft ensures that it processes the data in accordance with the General Data Protection Regulation and guarantees the protection of the rights of the data subject.
If you do not wish to participate in the tracking process, you can also reject the setting of a cookie required for this – for example, by using a browser setting that generally deactivates the automatic setting of cookies. Further information on data protection and the cookies used by Microsoft Bing can be found on the Microsoft website.

2. google analytics

We use Google Analytics on our website, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). In this context, pseudonymized user profiles are created and cookies (see IV1) are used. The information generated by the cookie about your use of this website such as

• Browser type/version,
• operating system used,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of the server request,

are transmitted to a Google server in the USA and stored there. Google observes the data protection provisions of the “US Privacy Shield” and is registered with the “US Privacy Shield” program of the US Department of Commerce. In addition, we have concluded an order processing contract for the use of Google Analytics. Through this contract, Google ensures that it processes the data in accordance with the General Data Protection Regulation and guarantees the protection of the rights of the data subject.
The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website.
This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that they cannot be assigned (IP masking).
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found in the Google Analytics help section.

3 Google Double Click
Our website uses cookies (see section 5) to collect and evaluate information to optimize advertising. For this purpose, we use targeting technologies from Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Double Click, Double Click Exchange Buyer, Double Click Bid Manager). These technologies enable us to target you with personalized, interest-based advertising. For example, the cookies used collect information about which of our products you are interested in. We can also use this information to show you offers on third-party websites that are specifically tailored to your interests, as determined by your previous user behavior. The recording and evaluation of your user behavior is exclusively pseudonymous and does not enable us to identify you. In particular, the information is not merged with your personal data.
Google is subject to the EU-US Privacy Shield, which guarantees an adequate level of data protection.
The cookie is automatically deleted after 30 days.
Further information and the data protection provisions regarding advertising and Google can be found in Google’s privacy policy and terms of use.

4. Google Adwords Conversion Tracking
We use Google Conversion Tracking from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”) on our website to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. Google Adwords places a cookie on your computer if you have reached our website via a Google ad.
These cookies lose their validity after 30 days. If the user visits certain pages of the AdWords customer’s website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page.
The information generated by the cookie about your use of this website is transmitted to a Google server in the USA and stored there. Google observes the data protection provisions of the “US Privacy Shield” and is registered with the “US Privacy Shield” program of the US Department of Commerce. In addition, we have concluded an order processing contract with Google for the use of Google AdWords. Through this contract, Google ensures that it processes the data in accordance with the General Data Protection Regulation and guarantees the protection of the rights of the data subject.
Each AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. We learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information with which users can be personally identified.
If you do not wish to participate in the tracking process, you can also refuse the setting of a cookie required for this – for example, by changing your browser settings to generally deactivate the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”.

5. Google Adwords Remarketing
We use Google Remarketing Tags. These are services provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). Google uses cookies (see section 5), which are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google is subject to the EU-US Privacy Shield, which guarantees an adequate level of data protection.
The IP address is then shortened by Google by the last three digits, so that a clear assignment of the IP address is no longer possible. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.
Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Third-party providers, including Google, place advertisements on websites on the Internet. Third-party providers, including Google, use stored cookies to place ads based on a user’s previous visits to this website. Google will not associate your IP address with any other data held by Google. You can object to the collection and storage of data at any time with effect for the future. You can deactivate the use of cookies by Google by visiting the page for deactivating Google advertising.

However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

6. Google Maps
We use the Google Maps service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”) on our website to display an interactive map on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. Due to the implementation, Google collects device-related information, log data including the IP address and location-related information.
No data is transferred to Google simply by accessing our website. Only by clicking on the map do you activate the interactive map from Google Maps and thus consent to the transfer of data to Google.
The personal data collected by Google is transferred to a Google server in the USA and stored there. Google complies with the data protection provisions of the “US Privacy Shield” and is registered with the “US Privacy Shield” program of the US Department of Commerce.
Google uses the personal data to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.
You can prevent any data transfer from the Google Maps application to Google’s servers by deactivating JavaScript in your browser. In this case, however, you will not be able to use the map display.
Further information on data protection in connection with Google Maps can be found in Google’s privacy policy.

VI Rights of data subjects

You have the right:

• in accordance with Art. 7 para. 3 GDPR, to withdraw your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future;
• in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
• in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller, and
• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

To assert your rights as a data subject against us, please contact datenschutz@bicyclejack.de

VII. Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you would like to exercise your right to object, simply send an e-mail to datenschutz@bicyclejack.de

Data security
All personal data you send us is encrypted using the generally accepted and secure TLS (Transport Layer Security) standard. TLS is a secure and proven standard that is also used in online banking, for example. You can recognize a secure TLS connection by the s appended to the http (i.e. https://..) in the address bar of your browser or by the lock symbol at the top of your browser.
We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

VIII. Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and is dated December 2022.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this privacy policy. You can access and print out the current privacy policy at any time on the website at https://www.bicyclejack.de/datenschutzerklaerung.