PRIVACY POLICY LEAD ADS & SWEEPSTAKES
1. FACEBOOK LEAD ADS PRIVACY POLICY
PRIVACY POLICY FOR OUR FACEBOOK (META) LEAD ADS
General information on data protection
The protection of your private rights and freedoms is important to us; we only use your data for the intended purposes. Since it is important to us that you know at all times to what extent we collect, use and, if necessary, transmit your data to third parties, we will inform you below in detail about the processing of your personal data (collected via our lead form).
When processing personal data, we strictly adhere to the requirements of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) and, if applicable, other data protection-relevant provisions.
Scope
This Privacy Policy applies exclusively to our Facebook (META) lead ad extension. It does not apply to Facebook's own content (META); the privacy policy of Facebook (META) can be found herehttps://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
Name and address of the controller
GHOST-Bikes GmbH
An der Tongrube 3
95652 Waldsassen
Telefon: 09632-92550
E-mail: info@ghost-bikes.de
Name and address of the data protection officer
Dipl.-Ing. Lars Ebertz on behalf of L-E-C.COM GmbH
Lubergstraße 2
35756 Mittenaar
Fon: +49 2778 6969 10
eMail: lars(at)ebertz-datenschutz.de
If you have any questions about the processing of your personal data, if you wish to assert your rights as a data subject (such as the right to information, correction, blocking or deletion of data) or if you revoke your consent, please contact our data protection officer directly.
Information about Facebook (META) Ads (provider of the lead extension)
We use the "Lead Ads" function of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook") to collect and process certain personal data of interested parties – so-called leads – via a contact form displayed on Facebook websites (so-called "instant form"). The content and scope of the data requested in this form depends on the targeting of the respective lead campaign.
The processing of the data is strictly tied to the purposes pursued with the respective lead ad campaign. These purposes are clearly stated in the lead ad or on the form provided before the data provided is transmitted. Depending on the orientation of the lead ad campaign, the legal basis for data processing is either your express consent in accordance with Art. 6 para. 1 lit. a GDPR (e.g. for direct marketing measures such as registration for e-mail newsletter dispatch) or our legitimate interest in optimal marketing of our offer in accordance with Art. 6 para. 1 lit. f GDPR. A transfer of the data to third parties does not take place.
As part of the aforementioned services, data transmitted via instant forms may be stored on servers of Meta Platforms, Inc., 1601 Willow Rd, Menlo Park, CA 94025, USA.
The privacy policy of Facebook (META) can be found here
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
Data Protection Officer of Facebook (META)
You can contact Meta's data protection officer as the operator of Facebook via the online contact form provided athttps://www.facebook.com/help/contact/540977946302970
Interaction with our lead form
As soon as you enter data in our lead form, it will be stored in our Facebook (META) profile. Through our profile, we can download the data collected and use it for the purpose stated in the form. The data will not be passed on to third parties.
We transfer the data into our:
SALESFORCE SALES CLOUD
We use Salesforce Sales Cloud to manage customer data. The provider is salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich (hereinafter referred to as "Salesforce").
Salesforce Sales Cloud is a CRM system and allows us, among other things, to manage existing and potential customers as well as customer contacts – such as Facebook (META) LeadAd accounts – and to organize sales and communication processes. The use of the CRM system also enables us to analyze our customer-related processes.
Customer data is stored on Salesforce's servers. Personal data may also be transmitted to the parent company of salesforce.com Germany GmbH, salesforce.com inc., Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA.
Salesforce has Binding Corporate Rules (BCR) approved by the French Data Protection Authority. These are binding corporate regulations that legitimize intra-company data transfer to third countries outside the EU and the EEA.
Details can be found here: www.salesforce.com/de/blog/2020/07/die-binding-corporate-rules-von-salesforce-erfuellenhoechste-da.html
Details can be found in Salesforce's privacy policy: www.salesforce.com/de/company/privacy/.
Salesforce Order Processing
We have concluded a contract for order processing (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law that ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Deletion or blocking of personal data
We store your personal data only for the period necessary to fulfil the specified purpose. After the purpose ceases to exist and after expiration, if necessary. existing retention periods, your data will be deleted immediately. If deletion is not possible, the data will be blocked instead.
Rights of data subjects
Chapter III of the EU General Data Protection Regulation (GDPR) provides extensive rights for data subjects, which we explain to you below with regard to the processing of your personal data:
1) Right to informationThis requirement applies in particular to information on the following details of data processing:
Purposes of processing
Categories of data
Recipients or categories of recipients, if applicable
If applicable, the planned storage duration or the criteria for determining this duration
Reference to the respective right to correction, deletion, restriction or objection
Existence of the right to lodge a complaint with a supervisory authority
If applicable, origin of the data (if not collected from you)
If applicable, existence of automated decision-making including profiling including meaningful information about the logic involved, the scope and the expected effects
If applicable, (planned) transfer to a third country or international organisation
2) Recht auf Berichtigung
Ggfs. fehlerhafte Datenbestände werden wir umgehend berichtigen, sofern Du uns über den Umstand entsprechend informieren.
3) Right to erasure (right to be forgotten)If processing is no longer necessary and one of the following conditions is met:
Elimination of the purpose of processing
Withdrawal of your consent and absence of any other legal basis for processing
Objection to processing without an important reason to the contrary
Unlawful processing
Necessary to comply with a legal obligation
Data was collected in accordance with Article 8 (1) GDPR
As part of the deletion request, we may pass on your request to those third parties to whom your data had previously been transmitted.
4) Right to restriction of processingIf one of the following conditions is met:
You dispute the accuracy of your data (restriction can be made for the duration of the review on our site)
In the event of unlawful processing and provided that the data is not to be deleted, the deletion shall be replaced by a restriction of processing
If the processing purposes cease to apply, at the same timeyou need your data to assert, exercise or defend legal claims
After you have objected in accordance with Article 21 (1) GDPR and for the duration of the examination as to whether our legitimate reasons outweigh yours.
5) Right to data portabilityIf it is technically possible and does not affect the rights and freedoms of other persons, we will – at your request – transfer your data to another recipient (controller).
6) Right to objectIf we collect or have collected and process personal data from you (on the basis of Art. 6 para. 1 e or f or Art. 9 para. 2 a GDPR), you have the right to object to data processing (including profiling) at any time (with effect for the future). In exceptional cases, the objection may be ineffective, e.g. if we can demonstrate compelling legitimate interests for the processing that outweigh your interests or if processing serves to assert, exercise or defend legal claims. If we process your personal data for direct marketing purposes, you have the right to object to this processing at any time. This also applies to profiling to the extent that it is associated with such direct marketing. You also have the right to object to the processing of your data concerning you, which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out for reasons of public interest.
7) Automated individual decision-making, including profilingIf we collect or have collected and process personal data from you, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affected. Exceptions to this requirement apply if the decision is necessary for the conclusion or performance of a contract between you and us or if you have expressly consented to the processing. In any case, we will take appropriate measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on our part, to express our point of view and to contest the decision.
8) Right to revoke consent under data protection law
You have the right to revoke your consent to the processing of personal data at any time.
9) Right to lodge a complaint with a supervisory authorityYou can find a list of the supervisory authorities responsible in Germany on the website of the Federal Commissioner for Data Protection or under the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/AufsBehoerdFuerDenNichtOeffBereich/AufsichtsbehoerdenNichtOeffBereich_liste.html
Legal basis of processing
We process personal data in accordance with the requirements of the GDPR, depending on the type and purpose of the processing as follows:
Informed consent Article 6(1)(a)
Protection of our legitimate interest Article 6(1)(f)
Our legitimate interest
Our legitimate interest, defined in accordance with Article 6 (1) (f) GDPR, is based on the performance of our business activities to maintain our operational capacity and secure the employment of our employees.
Existence of automated decision-making
We do not use automatic decision-making and do not use techniques to carry out profiling measures.
Service provider for Facebook (META) marketing
If we use service providers for the data processing of our Facebook (META) Lead form, we conclude corresponding contracts for order processing (DPA) with them. In the course of this, we regulate to what extent and under what security conditions the processing of the data takes place and determine the necessary authority to issue instructions in accordance with Art. 28 GDPR.
2. PRIVACY POLICY GOOGLE LEAD ADS
PRIVACY POLICY FOR OUR GOOGLE ADS LEAD FORM EXTENSION
General information on data protection
The protection of your private rights and freedoms is important to us; we use your data only for the intended purposes. Since it is important to us that you know at all times to what extent we collect, use and, if necessary, use your data. to third parties, we will inform you below in detail about the processing of your personal data (collected via our lead form).
When processing personal data, we strictly adhere to the requirements of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) and, if necessary, further data protection-relevant provisions.
Scope
This Privacy Policy applies solely to our Google Lead Form extension. It does not apply to Google's own content; Google's privacy policy can be found here https://policies.google.com/privacy?hl=en&gl=en
Name and address of the controller
GHOST-Bikes GmbH
An der Tongrube 3
95652 Waldsassen
Phone: 09632-92550
E-mail: info@ghost-bikes.de
Name and address of the data protection officer
Dipl.-Ing. Lars Ebertz on behalf of L-E-C.COM GmbH
Lubergstrasse 2
35756 Mittenaar, Germany
Phone: +49 2778 6969 10
E-mail: lars(at)ebertz-datenschutz.de
If you have any questions about the processing of your personal data, if you wish to assert your rights as a data subject (such as the right to information, correction, blocking or deletion of data) or if you revoke your consent, please contact our data protection officer directly.
About Google Ads (provider of the lead form extension)
Google Ireland LimitedGordon House, Barrow StreetDublin 4IrelandTel: +353 1 543 1000 Fax: +353 1 686 5660
E-mail: support-deutschland(at)google.com
Google's privacy policy can be found here
https://policies.google.com/privacy?hl=de&gl=de
Google Data Protection Officer
To contact Google's data protection officer, you can fill out a corresponding contact form under the following link:
https://support.google.com/policies/contact/general_privacy_form
Operation of our Google Ads lead form extension
Within the lead form extension, Google collects personal data for us.
Interaction with our lead form
As soon as you enter data in our lead form, it will be stored in our Google Ads profile. Through our profile, we can download the data collected and use it for the purpose stated in the form. The data will not be passed on to third parties.
We transfer the data into our:
SALESFORCE SALES CLOUD
We use Salesforce Sales Cloud to manage customer data. The provider is salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich (hereinafter referred to as "Salesforce").
Salesforce Sales Cloud is a CRM system and allows us, among other things, to manage existing and potential customers as well as customer contacts – such as Google LeadAd accounts – and to organize sales and communication processes. The use of the CRM system also enables us to analyze our customer-related processes.
Customer data is stored on Salesforce's servers. Personal data may also be transmitted to the parent company of salesforce.com Germany GmbH, salesforce.com inc., Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA.
Salesforce has Binding Corporate Rules (BCR) approved by the French Data Protection Authority. These are binding corporate regulations that legitimize intra-company data transfer to third countries outside the EU and the EEA.
Details can be found here: www.salesforce.com/de/blog/2020/07/die-binding-corporate-rules-von-salesforce-erfuellenhoechste-da.html
Details can be found in Salesforce's privacy policy: www.salesforce.com/de/company/privacy/.
Salesforce Order Processing
We have concluded a contract for order processing (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law that ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Deletion or blocking of personal data
We store your personal data only for the period necessary to fulfil the specified purpose. After the purpose ceases to exist and after expiration, if necessary. existing retention periods, your data will be deleted immediately. If deletion is not possible, the data will be blocked instead.
Rights of data subjects
Chapter III of the EU General Data Protection Regulation (GDPR) provides extensive rights for data subjects, which we explain to you below with regard to the processing of your personal data:
1) Right to informationThis requirement applies in particular to information on the following details of data processing:
Purposes of processing
Categories of data
Recipients or categories of recipients, if applicable
If applicable, the planned storage duration or the criteria for determining this duration
Reference to the respective right to correction, deletion, restriction or objection
Existence of the right to lodge a complaint with a supervisory authority
If applicable, origin of the data (if not collected from you)
If applicable, existence of automated decision-making including profiling including meaningful information about the logic involved, the scope and the expected effects
If applicable, (planned) transfer to a third country or international organisation
2) Recht auf Berichtigung
Ggfs. fehlerhafte Datenbestände werden wir umgehend berichtigen, sofern Du uns über den Umstand entsprechend informieren.
3) Right to erasure (right to be forgotten)If processing is no longer necessary and one of the following conditions is met:
Elimination of the purpose of processing
Withdrawal of your consent and absence of any other legal basis for processing
Objection to processing without an important reason to the contrary
Unlawful processing
Necessary to comply with a legal obligation
Data was collected in accordance with Article 8 (1) GDPR
As part of the deletion request, we may pass on your request to those third parties to whom your data had previously been transmitted.
4) Right to restriction of processingIf one of the following conditions is met:
You dispute the accuracy of your data (restriction can be made for the duration of the review on our site)
In the event of unlawful processing and provided that the data is not to be deleted, the deletion shall be replaced by a restriction of processing
If the processing purposes cease to apply, at the same timeyou need your data to assert, exercise or defend legal claims
After you have objected in accordance with Article 21 (1) GDPR and for the duration of the examination as to whether our legitimate reasons outweigh yours.
5) Right to data portabilityIf it is technically possible and does not affect the rights and freedoms of other persons, we will – at your request – transfer your data to another recipient (controller).
6) Right to objectIf we collect or have collected and process personal data from you (on the basis of Art. 6 para. 1 e or f or Art. 9 para. 2 a GDPR), you have the right to object to data processing (including profiling) at any time (with effect for the future). In exceptional cases, the objection may be ineffective, e.g. if we can demonstrate compelling legitimate interests for the processing that outweigh your interests or if processing serves to assert, exercise or defend legal claims. If we process your personal data for direct marketing purposes, you have the right to object to this processing at any time. This also applies to profiling to the extent that it is associated with such direct marketing. You also have the right to object to the processing of your data concerning you, which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, unless such processing is necessary for the performance of a task carried out for reasons of public interest.
7) Automated individual decision-making, including profilingIf we collect or have collected and process personal data from you, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affected. Exceptions to this requirement apply if the decision is necessary for the conclusion or performance of a contract between you and us or if you have expressly consented to the processing. In any case, we will take appropriate measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on our part, to express our point of view and to contest the decision.
8) Right to revoke consent under data protection law
You have the right to revoke your consent to the processing of personal data at any time.
9) Right to lodge a complaint with a supervisory authorityYou can find a list of the supervisory authorities responsible in Germany on the website of the Federal Commissioner for Data Protection or under the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/AufsBehoerdFuerDenNichtOeffBereich/AufsichtsbehoerdenNichtOeffBereich_liste.html
Legal basis of processing
We process personal data in accordance with the requirements of the GDPR, depending on the type and purpose of the processing as follows:
Informed consent Article 6(1)(a)
Protection of our legitimate interest Article 6(1)(f)
Our legitimate interest
Our legitimate interest, defined in accordance with Article 6 (1) (f) GDPR, is based on the performance of our business activities to maintain our operational capacity and secure the employment of our employees.
Existence of automated decision-making
We do not use automatic decision-making and do not use techniques to carry out profiling measures.
Service provider for Google marketing
If we use service providers for the data processing of our Google Lead form, we conclude corresponding contracts for order processing (DPA) with them. In the course of this, we regulate to what extent and under what security conditions the processing of the data takes place and determine the necessary authority to issue instructions in accordance with Art. 28 GDPR.
3. CONDITIONS OF PARTICIPATION SWEEPSTAKES
CHRISTMAS RAFFLE - NIRVANA TOUR MOUNTAIN BIKE
Participation in the raffle implies acceptance of the following conditions of participation. With your participation you accept the following conditions of participation.
1. PARTICIPATION
To participate in the raffle, participants must:
A) register in the "Win a Nirvana Tour" social media campaign.
B) provide their first name, last name, email address and date of birth and confirm that they are 18 years or older and agree to the terms and conditions of this raffle.
The competition will start with the publication of the entry on 27.11.2022 at 12:00 (CET) and will end on 18.12.2022 at 23:59:00 (CET). The winners will be notified by 23.12.2022 at 18:00:00 (CET).
Participation is free of charge and in no way linked to the purchase of products. Subscription to the newsletter can be cancelled at any time. Anyone aged 18 or over and resident in Germany, Austria, Switzerland, Spain, Sweden, Finland or Norway is eligible to participate. Employees of GHOST-Bikes GmbH and their immediate family members may not participate.
2. PRIZE AND RAFFLE
Prize: One Nirvana Tour mountain bike from GHOST-Bikes GmbH.
Prize Drawing: The winner will be selected at random and contacted directly by GHOST-Bikes via email. The selected winner will have 5 days to respond to the email and indicate whether he/she accepts the prize. If he/she does not reply within these 5 days, he/she will lose the possibility to claim the prize. The participant is asked to check the spam folder, as prize emails may be automatically redirected there.
GHOST-Bikes GmbH will arrange the delivery with the winner and pay the shipping costs. The prize will be handed over at a GHOST-Bikes dealer near the winner. The dealer will be determined by GHOST-Bikes.
3. INFORMATION ACC. ART. 13 DSGVO
We - GHOST-Bikes GmbH, An der Tongrube 3, 95652 Waldsassen, Germany - process your personal data in the sense of Art. 4 DSGVO - including surname, first name, date of birth, email address and country - exclusively for the purpose of processing the prize draw as listed here as well as the subsequent dispatch of the GHOST-Bikes newsletter.
The data will not be passed on to third parties - except for the associated commissioned data processors within the meaning of Art. 28 DSGVO or the operator of this network (Facebook / META) - or within the Accell group of companies. Your data will be automatically and irrevocably deleted after expiry of the purpose and any retention periods.
Please note that Facebook (META) and possibly other service providers are located outside the European Economic Area (USA).
WE WOULD LIKE TO POINT OUT THAT THE USA IS NOT A SAFE THIRD COUNTRY WITHIN THE MEANING OF EU DATA PROTECTION LAW.
We have no influence on this data processing.
Furthermore, the Facebook (META) Promotion Guidelines and the terms and conditions of the Facebook (META) Lead Ads apply .
The winner expressly agrees that the organizer may use image material relating to the prize and its implementation for media purposes within their web presences and social media channels. An objection pursuant to Art. 21 DSGVO or further assertion of data subject rights may be addressed to the data protection officer (Dipl.-Ing. Lars Ebertz, lars@ebertz-datenschutz.de) of GHOST-Bikes GmbH at any time.
4. PREMATURE TERMINATION
The organizers reserve the right to terminate or change the competition at any time without prior notice, if for technical reasons (e.g. hardware and software errors, computer viruses or manipulations) or legal reasons a proper execution cannot be guaranteed.
5. ORGANIZER
Organizer of the competition is GHOST-Bikes GmbH.
Imprint: www.ghost-bikes.com/impressum/
6. FACEBOOK(META)/INSTAGRAM DISCLAIMER
The competition is not connected to Facebook and is in no way sponsored, supported or organized by them. Contact person and responsible person are only the organizers as listed in point 5.