Privacy Policy

PRIVACY POLICY FOR THE USE OF OUR WEBSITES

INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA

(1) In the following, we inform you about the collection of personal data when using our website. Personal data includes all data that is personally identifiable to you, such as your name, address, email addresses, user behavior. This information aims to inform you about our processing activities and to comply with legal obligations, particularly those arising from the EU General Data Protection Regulation (GDPR).

(2) The controller pursuant to Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR) is Bumblebee Folks GmbH, Gerda-Krueger-Nieland-Strasse 61, 76149 Karlsruhe, Email: info@bumblebeefolks.com You can contact our data protection officer at dominik.gueneri@advizzr.net or by mail at our postal address with the addition “Data Protection Officer.”

(3) When you contact us by email or via a contact form, the data you provide (your email address, and if applicable, your name and telephone number) will be stored by us in order to answer your questions. We delete the data collected in this context once it is no longer required, or we restrict the processing if statutory retention obligations exist. If the inquiry is associated with a contract, the data will be deleted in accordance with the contract duration retention periods.

(4) If we rely on commissioned service providers for individual functions of our offer or if we intend to use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you in detail about the respective processes below. We will also specify the criteria for the storage duration.

YOUR RIGHTS

(1) You have the following rights concerning your personal data in relation to us:

• Right to information,
• Right to rectification or deletion,
• Right to restrict processing,
• Right to object to processing,
• Right to data portability.

(2) You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

COLLECTION OF PERSONAL DATA WHEN VISITING OUR WEBSITE

(1) If you are using the website for informational purposes only, that is, if you do not otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (the legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR):

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software.

(2) In addition to the data mentioned above, cookies may be stored on your computer when you use our website, either now or in the future. Cookies are small text files stored on your hard drive and assigned to the browser you are using, through which certain information flows to the entity that sets the cookie (in this case, us). Cookies cannot run programs or deliver viruses to your computer. They serve to make the internet offer more user-friendly and effective overall (the legal basis is Art. 6 Para. 1 S. 1 lit. a GDPR). You can delete or block cookies at any time via the settings in your browser.

(3) In general, we use the techniques described above exclusively to improve the user-friendliness and functionality of our websites. We use these techniques in our legitimate interest to provide you with an attractive, fully functional offer based on Article 6 Para. 1 lit. f GDPR. If consent is required for the use of cookies beyond this, we will ask for your consent at the appropriate time. If cookies are used based on your consent, the legal basis is Art. 6 Para. 1 S. 1 lit. a GDPR. If you do not wish the above-described techniques to be used, you can adjust this in your browser’s settings. There, you may also find a list of the cookies used if they are actually employed.

(4) Special explanation regarding cookies:

a)This website can use the following types of cookies, whose scope and functionality are explained below:

• Transient cookies (see b)
• Persistent cookies (see c)

b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. They store a so-called session ID, with which various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.

d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. However, we point out that you may not be able to use all the functions of this website.

ADDITIONAL FUNCTIONS AND OFFERS OF OUR WEBSITE

(1) In addition to the purely informational use of our website, we may offer various services that you can use if you are interested. To do this, you generally need to provide additional personal data, which we use to provide the respective service, and to which the previously mentioned data processing principles apply.

(2) In some cases, we use external service providers to process your data. These service providers are carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.

(3) We may also pass on your personal data to third parties when participation in promotions, sweepstakes, contract conclusions, or similar services are offered by us together with partners. You will receive more detailed information on this when providing your personal data or below in the description of the offer.

(4) If our service providers or partners are based in a state outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

OBJECTION OR WITHDRAWAL OF CONSENT TO THE PROCESSING OF YOUR DATA

(1) If you have given your consent to the processing of your data, you can withdraw it at any time. Such a withdrawal affects the permissibility of the processing of your personal data after you have expressed it to us.

(2) If we base the processing of your personal data on a balancing of interests, you can object to the processing. This is the case if the processing is not particularly necessary for the performance of a contract with you, as we will explain in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing, or we will demonstrate to you our compelling legitimate reasons based on which we continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising by using the following contact details: Bumblebee Folks GmbH, Gerda-Krueger-Nieland-Straße 61, 76149 Karlsruhe, Email: info@bumblebeefolks.com

DURATION OF STORAGE OF PERSONAL DATA

We store personal data in accordance with the statutory retention periods (e.g., commercial and tax law retention periods). The respective data is then deleted unless it is required for contract fulfillment and/or there is no legitimate interest in its storage.

SOCIAL MEDIA AND THIRD-PARTY PROVIDERS

SOCIAL MEDIA

(1) We currently use the following social media plug-ins and/or link to the following social media platform providers: Facebook, Instagram, X (formerly Twitter), LinkedIn, TikTok. For plug-ins, we use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can identify the provider of the plug-in by the marking on the box using their initial letter or logo. We provide you with the opportunity to communicate directly with the plug-in provider through the button. Only if you click on the marked field and thereby activate it, will the plug-in provider receive the information that you have accessed the corresponding website of our online offering. In this case, the data mentioned in the section “COLLECTION OF PERSONAL DATA WHEN VISITING OUR WEBSITE (Paragraph 1)” will also be transmitted. In the case of pure links to social media platform providers, the data mentioned in the section “COLLECTION OF PERSONAL DATA WHEN VISITING OUR WEBSITE (Paragraph 1)” will only be transmitted to the provider after clicking the link. Since the plug-in provider collects the data primarily via cookies, we recommend deleting all cookies in your browser’s security settings before clicking on the greyed-out box.

(2) We have no influence on the data collected and data processing procedures, nor are we fully aware of the scope of data collection, the purposes of processing, or the storage periods. We also do not have any information regarding the deletion of the collected data by the respective provider.

(3) The plug-in provider stores the data collected about you as usage profiles and uses them for advertising, market research, and/or the needs-based design of its website. Such evaluation is carried out in particular (also for non-logged-in users) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with social networks and other users, thereby improving our offering and making it more interesting for you as a user. The legal basis for the use of plug-ins and social media platforms, including linking to them, is Art. 6 para. 1 sentence 1 lit. f GDPR. If consent for the use of cookies is also required, we will ask you to give your consent at the appropriate place. In the case of the use of cookies based on your consent, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

(4) The transfer of data when using social media plug-ins occurs regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data collected by us will be directly assigned to your account with the plug-in provider. If you press the activated button, for example to link the page, the plug-in provider will also store this information in your user account and share it publicly with your contacts. We recommend regularly logging out after using a social network, especially before activating the button, as this will prevent the assignment to your profile with the plug-in provider.

(5) Further information on the purpose and scope of data collection and its processing by the provider can be found in the privacy policies of these providers listed below. There you will also find further information on your rights and settings options for protecting your privacy.

(6) Additional information on the respective plug-in providers and URL links to their privacy policies:

According to Facebook, IP addresses are anonymized immediately after collection in Germany. We cannot exclude the possibility that personal data from you will be transmitted to and stored by the respective provider (in the case of US providers, in the USA). Further information on the purpose and scope of data collection and its processing by the provider can be found here: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, https://www.facebook.com/terms?ref=pf and http://www.facebook.com/policy.php. Meta Platforms, Inc. has committed to the EU-US Data Privacy Framework, https://www.dataprivacyframework.gov/list. In addition, the META DATA TRANSFER ADDENDUM FOR THE TRANSFER OF EUROPEAN DATA (https://www.facebook.com/legal/EU_data_transf er_addenDum) is concluded with the provider by default.

According to Instagram, IP addresses are anonymized immediately after collection in Germany. We cannot exclude the possibility that personal data from you will be transmitted to and stored by the respective provider (in the case of US providers, in the USA). Further information on the purpose and scope of data collection and its processing by the provider can be found here: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, https://help.instagram.com/155833707900388, https://www.facebook.com/terms?ref=pf and http://www.facebook.com/policy.php. Meta Platforms, Inc. has committed to the EU-US Data Privacy Framework, https://www.dataprivacyframework.gov/list. In addition, the META DATA TRANSFER ADDENDUM FOR THE TRANSFER OF EUROPEAN DATA (https://www.facebook.com/legal/EU_data_transf er_addenDum) is concluded with the provider by default.

Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://x.com/privacy. Twitter has committed to the EU-US Data Privacy Framework, https://www.dataprivacyframework.gov/list.

LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has committed to the EU-US Data Privacy Framework, https://www.dataprivacyframework.gov/list.

TikTok for users in Germany and Austria is offered by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Further information on data processing can be found in the privacy notices: https://www.tiktok.com/privacy/learn-about-data/de. The imprint can be found here: https://www.tiktok.com/legal/page/global/impressum/de.

HOSTING

(1) Our website is hosted by an external service provider (hosting provider). The hosting provider provides the infrastructure and technical resources necessary to operate our website securely and reliably. Various personal data is processed and stored on the hosting provider’s servers as part of the use of our website.

(2) The collection and processing of personal data in the context of hosting are carried out in accordance with the GDPR. The legal basis for this processing is Art. 6 Para. 1 lit. f GDPR, as we have a legitimate interest in operating our website securely and efficiently.

(3) The data processed in the context of hosting includes the IP address of the accessing system, the date and time of access, the time zone difference from Greenwich Mean Time (GMT), the content of the request (specific page), access status/HTTP status code, the amount of data transferred, the website from which the request originates, the browser, the operating system and its interface, as well as the language and version of the browser software.

(4) The hosting provider processes this data exclusively according to our instructions and within the framework of a data processing agreement in accordance with Art. 28 GDPR. We have carefully selected the hosting provider and regularly monitor that the processing of the data is carried out in compliance with legal requirements.

(5) The storage of personal data only takes place as long as it is necessary to fulfill the purpose for which it was collected or until statutory retention periods expire. After fulfilling the purpose or the expiration of the statutory retention periods, the data will be deleted.