Source: https://cybex-online.com/uk-ua/privacy-policy
Timestamp: 2019-04-23 02:52:18+00:00

Document:
Depending on the purpose, we collect and process different categories of personal data. The term personal data includes information such as first and last name, e-mail address, postal address, telephone number, date of birth, etc. We collect and process only the personal data necessary for the specific purpose.
The processing takes place, in particular, in accordance with Art. 6 para. 1 GDPR on the basis of the consent granted for particular purpose (Art. 6 para. 1 lit. a) GDPR), for the performance of contracts (Art. 6 para. 1 lit. b) GDPR) or to fulfill a legal obligation and protect vital interests (Art. 6 para. 1 lit. c) and d) GDPR). If necessary, we also process your data in order to safeguard our legitimate interests or legitimate interests of a third party (Art. 6 para. 1 lit. f) GDPR). A legitimate interest may be, for example, a necessary analysis for the purpose of direct customer or prospective customer approach, asserting legal claims and defense in legal disputes, optimizing and improving the user-friendliness of the services offered, market and opinion research, services or content, preventing misuse or criminal offences, guaranteeing IT security, implementing measures for business management and further development of products and services. For the further development of our services and products as well as for statistical purposes, we process your data in anonymous form.
Our website and services is not targeted to minors and, hence, we do not intentionally collect, store or process personal information of minors.
If young people under the age of 16 wish to use our services and provide their personal data to us, this is only allowed if a consent by the parent/ legal guardian is given. This may be reached if the contact details of the parent/ legal guardian, including the statement on the consent, are sent to us. These data as well as the data of the minor will then be processed in accordance with stipulations of this policy.
Within our organization, only those persons receive it who need your data to fulfil their contractual and legal obligations. The data may also be disclosed to third parties commissioned by us for further processing on the basis of an order processing contract. These are companies in the categories of IT services, logistics, printing services, telecommunications, debt collection, consulting, sales, PR and marketing, software providers, data maintenance and customer management.
•et; Within the Goodbaby/CYBEX group for internal administrative purposes.
In the case of order processing, the service providers are contractually bound to our instructions and obligated to guarantee the strict technical and organizational measures. The contract processors are located in both the countries that are subject to a European Commission adequacy decision, such as service providers in the United States that have been certified as EU-U.S. Privacy Shield, as well as in countries that do not protect personal data to the same extent as the EU. In these cases, we ensure that the level of data protection is comparable to that of the EU by means of contractual regulations and by agreeing the EU standard data protection clauses.
In order to protect your data from manipulation, loss, destruction or unauthorized access, we use technical and organizational measures which are continuously improved in line with technical progress. Furthermore, all our employees and all individuals involved in information processing are under an obligation to observe data protection requirements and to ensure the confidential use of personal data.
We adhere to the principles of data avoidance and data economy. We, therefore, store and process your personal data only for as long as this is necessary to achieve the purposes described herein or according to obligation to store data for a particular period defined by the legislator or we have a legitimate interest in the further storage. After the end of the respective purpose or the expiry of these deadlines, the corresponding data are routinely blocked or deleted in accordance with legal requirements.
- if there is another exception pursuant to Art. 17 Para. 3 GDPR.
•et; Right to data portability (pursuant to Art. 20 GDPR).
You also have the right, for reasons related to your particular situation, to object at any time to the processing of personal data concerning you carried out pursuant to Art. 6 para. 1 lit. e) or f) GDPR; this also applies to profiling based on this provision.
You can revoke your declaration of consent for the collection and use of your personal data at any time with effect for the future. The revocation of your consent does not affect the legality of the processing carried out on the basis of your consent until you revoke your consent.
All requests for information or objections to data processing can be addressed in writing to the postal address stated above or sent by e-mail to dpo@goodbabyint.com.
According to Art. 77 GDPR you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.
In Bavaria, the competent supervisory authority is the Data Protection Authority of Bavaria for the Private Sector (BayLDA).
You can browse this website mostly without providing any detailed personal information.
•et; Device type (desktop, tablet, smartphone, etc.), the device brand, and the associated model.
For reasons of technical security, in particular for protection against cyber-attack attempts on our web server, this data is stored by us for a short time (up to 14 days) in accordance with Art. 6 Para. 1 lit. f) GDPR. We are not able to draw conclusions about individual persons based on these data.
In anonymous form, the data is also evaluated for statistical purposes in order to optimize our Internet presence and our offers.
On various channels, we offer you the opportunity to subscribe to our free newsletter, with which we inform you about our products, services or special offers at regular intervals. The legal basis for the processing of data after registration for the newsletter is the user's consent (Art. 6 para. 1 lit. a) GDPR). By subscribing for the newsletter, you agree that we process your personal data (e-mail address and first name, if applicable). In order to receive our newsletter, you need a valid e-mail address. We will check the e-mail address entered by you to see whether you are the actual owner of the e-mail address or whether the owner of this e-mail address has authorized you to receive the newsletter. We will also store your IP address and the date and time of your registration. This serves as security in the event that a third party misuses your e-mail address and subscribes to our newsletter without your knowledge.
The personal data will be forwarded to the companies commissioned by us for further processing, e.g. to the service providers and marketing agencies for dispatch of the newsletter as well as providers of e-mail marketing software. You may revoke your consent to the processing of your data and its use to send the newsletter at any time. Details can be found in the confirmation e-mail and in each individual newsletter. The personal data of users are stored as long as the subscription of the newsletter is active.
We offer you various possibilities to get in touch with us. If you contact us in one of the ways listed below, the personal data that you have provided to us in the course of establishing contact will be used for processing and answering your enquiry. The data will be processed in accordance with Art. 6 Para. 1 lit. f) GDPR, namely in our legitimate interest to be able to respond to your request. If the purpose of the request is to conclude a contract, the legal basis for the processing is also Art. 6 para. 1 lit. b) GDPR. The data collected and stored for this purpose may be disclosed to the companies or persons commissioned by us for further processing. We may forward your data to our authorized dealers or other business partners for the purpose of eg. processing a complaint or other enquiry. The data is also disclosed to software providers for the provision of customer management systems and for the technical support of such systems. Further disclosure may be made to our affiliates for internal administrative purposes based on legitimate interests. The data will only be passed on for the processing of your enquiries.
The data will be stored for as long as is necessary to achieve the purpose for which it was collected. This is the case when the respective conversation with the user has ended or when it can be inferred from the circumstances that the matter concerned has been conclusively clarified and there is no legitimate reason for further storage.
If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored. The provision of your data depends on your request and could include the following information: Salutation, first name, surname, e-mail, address and telephone number, and if applicable product information, vehicle data, details of the purchased product.
The processing of the personal data from the input mask serves us solely for the processing of the establishment of contact regarding product information, vehicle compatibility, customer service or general inquiries. The other personal data processed during the sending process (IP address of the user, date and time) serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
If you contact us via e-mail, the personal data (including e-mail address) of the user transmitted with the e-mail will be stored.
If you use our telephone consultation, we collect the following data: name, telephone number, description of your enquiry or matter.
In particular, we expressly draw your attention to the fact that your personal data (communication metadata) will be collected by the respective provider through the use of the aforementioned and similar services and that the data may also be processed on servers in countries outside the EU (e.g. USA). Most of these services (WhatsApp, Facebook, Twitter etc.) are certified under the Privacy Shield Agreement (https://www.privacyshield.gov/list) and thus offer a guarantee of compliance with European data protection laws. However, due to the transmission of the data, there are still possible risks that cannot be completely excluded despite the existing data protection and data security measures. Your personal data could possibly be processed beyond the actual purpose and obtained by third parties. We have neither exact knowledge nor influence on such data processing. You may also not be able to assert your data subject rights sustainably.
We have established our presence on social networks and platforms to communicate with our customers, users and any interested person. For this purpose, we process personal data of users in accordance with Art. 6 para. 1 lit. b) GDPR or on the basis of our legitimate interests according to Art. 6 para. 1 lit. f) GDPR. In particular, to facilitate communication with users, to be able to inform users about our products and services, to receive feedback on our products and services, to establish new contacts, to ensure the general organization of the company's presence, to promote products or services, to improve customer loyalty and to increase brand awareness.
In the case of requests for information and the assertion of data subject rights, these can be asserted most effectively with the providers of social networks or platforms. If you need further assistance, please contact us.
The data may be disclosed to third parties commissioned by us for further processing in accordance with the purpose for which it was collected (e.g. software providers for the provision of customer management systems and for the technical support of such systems).
In order to offer you an optimal usage of our website and other services, we use so-called cookies. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files which are stored on your computer or on another device you use and which are saved by your browser. We use technically necessary cookies and functionality cookies in accordance with Art. 6 Para. 1 f GDPR on the basis of legitimate interests. Our legitimate interests are in ensuring the functioning of our website and its best possible usability. We also use analysis cookies and advertising cookies as well as tracking tools in accordance with Art. 6 Para. 1 f GDPR and Recital 47 on the basis of legitimate interests. It is our legitimate interest to adapt our website optimally to the interests of our customers as well as to assess the number of visitors, posts, page views, reviews and followers in order to optimize future marketing campaigns.
Some of these cookies are temporarily stored and automatically deleted when the browser is closed (session cookies). Other cookies (persistent cookies) are stored permanently and are only removed from your browser cache when you manually delete them. These cookies allow us to recognize your browser the next time you visit.
Our website uses Google Analytics, a web analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google“. Google Analytics uses so-called “cookies“, text files that are stored to your computer in order to facilitate an analysis of your use of the site.
We use Google AdSense on our website which is a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, for incorporating advertisements. Google-AdSense uses so-called “cookies“, text files, that are stored to your computer and which provide analysis of the use of our website. Furthermore, Google AdSense uses so-called “web beacons“, which allow Google to analyze information, such as visitor traffic to our website. This information, along with your IP address and the ad format displayed, is transmitted to Google in the US where it is stored and may be transferred by Google to contracting partners. However, Google does not merge your IP-address with other stored data on you. You can prevent cookies from being installed by adjusting the settings on your browser software accordingly. You should be aware, however, that by doing so you may not be able to make full use of all the functions of our website. By using our website, you declare that you agree to the processing of data collected about you by Google in the manner previously described and for the purposes there specified.
When you visit our website or access other services that include Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser and integrated into the page. We therefore have no influence on the extent of the data collected by Google. Through the use of Google Maps, information including your user settings, IP address and your current location or the (start) address entered as part of the route planner function may be transmitted to Google in the USA.
We expressly draw your attention to the fact that we have no influence on the further processing and use of the data by Google. If you do not want Google to collect the data about you, you can prevent Google Maps from executing by selectively blocking the execution of the Java script code used by using a Java script blocker; alternatively, you can also completely deactivate Java script execution in your browser settings. In this case, however, you cannot use the map display.
•et; Twitter: Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA: https://twitter.com/privacy.
We collect, store and use personal data (e.g. name, last name, address, telephone number, e-mail address) of the interested persons, customers, or business partners for the purpose of establishing, executing and terminating a contract. The personal data processed for this purpose, the scope and purpose, are determined by the underlying contractual relationship or the pre-contractual services. Before the conclusion of a contract - i.e. in the contract initiation phase - the personal data is processed for the preparation of offers, contracts or for the fulfilment of other enquires of the interested persons with regard to the conclusion of a contract. Interested persons may be contacted during the preparation of the contract using the data they have provided. The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR.
As part of our business activities, we regularly orginize events such as trade fairs, marketing events, etc. primarily in the B2B area. In this context, we collect, use and store personal data of participants in accordance with Art. 6 para. 1 lit. a), b) or f) GDPR. Insofar as we process the data based on our legitimate interests, this is done in particular to establish and maintain the company’s presence and corporate communication, to increase brand awareness, and to promote commercial objectives.
During our events, image, sound or video recordings are made by persons and service providers commissioned or accredited by us. The recordings document both the event itself and the participation of individuals.
In the case of image or video recordings focusing on individuals, the participants have the right at any time to inform the photographer or videographer that they do not wish to be depicted. We assume that the persons participating in the event agree through their conduct e.g. through willing actions such as "posing" or "looking directly into the camera" to the creation and publication of recordings for the purposes of corporate communication, including online and social media.
We offer you the opportunity to apply for a job in our company through over E-Recruiting portal. In the registration process, please note our data privacy statement for e-recruiting.
However, if you prefer to apply for a job by e-mail, we point out that your data and the file attachments sent with it will be transferred via an unsecured connection.
The collection and processing of your personal data is carried out exclusively for the purpose of filling positions within our group of companies. The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR. Your data will only be forwarded to the internal positions and departments of our company responsible for the particular application procedure.
Your personal data will be deleted automatically six months after completion of the application process, unless we have concluded an employment contract with you. This does not apply if statutory provisions preclude deletion, if further storage is necessary for the purpose of providing evidence or if you have expressly agreed to longer storage. Should we wish to include your application in our talent pool, we will contact you.

References: Art. 6
 Art. 17
 Art. 20
 Art. 6
 Art. 77
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6