Datenschutzrichtlinie | Bestsales Online GmbH

INFORMATION ON DATA PROTECTION

So you can keep track

This privacy policy provides information about how we handle your personal data and your rights under the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Bestsales Online GmbH (hereinafter referred to as “we” or “us”) is responsible for data processing.

Our privacy policy consists of two parts. In Part A, you will find general information about data protection at Bestsales Online and learn, among other things, what rights you have and where you can assert them. Part B is dedicated to the various groups of data subjects and explains in detail what data we collect and process about you. In doing so, we address you in your role as:

a. Visitors to our Bestsales Online website,

b. Contact persons at service providers, suppliers, and business partners with whom we interact in our daily business,

c. Applicants who would like to join our team,

d. Newsletter subscribers, whom we keep regularly informed, and

e. Social media visitors who are interested in us.

Privacy information for customers of our web shop (https://indicode.com/) is available here.

A. General information

1. Our contact details

If you have any questions or suggestions regarding this information or would like to contact us regarding the exercise of your rights, please address your request to

Bestsales Online GmbH

Weidegrund 13, 21614 Buxtehude

Phone +49 4161 752 9250
Email info@bestsales-online.de

2. On what basis do we process your data?

The term "personal data" in data protection law refers to all information that relates to an identified or identifiable person. We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG (German Federal Data Protection Act). We only process data on the basis of legal permission. We only process personal data with your consent (Art. 6 (1) (a) GDPR), to fulfill a contract to which you are a party or at your request to take steps prior to entering into a contract (Art. 6 (1) (b) GDPR), to fulfill a legal obligation (Art. 6 (1) (c) GDPR) or if processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data prevail (Art. 6 (1) (f) GDPR).

If you apply for a vacant position in our company, we will also process your personal data to decide whether to establish an employment relationship (Section 26 (1) (s) 1 BDSG).

3. Your rights

You control your data! As a data subject, you therefore have the right to assert your data subject rights against us. Within the framework of the data protection laws applicable to you, you have the following rights:

In accordance with Art. 15 GDPR and Section 34 BDSG, you have the right to request information as to whether and, if so, to what extent we process personal data relating to you.
You have the right to request that we correct your data in accordance with Art. 16 GDPR.
You have the right to request that we delete your personal data in accordance with Art. 17 GDPR and Section 35 BDSG.
You have the right to have the processing of your personal data restricted in accordance with Art. 18 GDPR.
In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transmit this data to another controller.
If you have given us separate consent to data processing, you can revoke this consent at any time in accordance with Art. 7 (3) GDPR. Such revocation does not affect the legality of the processing carried out based on the consent up to the time of revocation.
If you believe that the processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR.

Pursuant to Art. 21 (1) GDPR, you have the right to object to processing based on the legal basis of Art. 6 (1) (e) or (f) GDPR for reasons related to your particular situation. If we process personal data about you for the purpose of direct marketing, you can object to this processing in accordance with Art. 21 (2) and (3) GDPR.

If you exercise your rights under Articles 15 to 22 of the GDPR, we will process the personal data you provide for the purpose of exercising these rights and to be able to provide evidence of this. Data stored for the purpose of providing information and preparing it will only be processed for this purpose and for data protection monitoring purposes. Otherwise, we will restrict processing in accordance with Article 18 of the GDPR.

This processing is based on the legal basis of Art. 6 (1) (c) GDPR in conjunction with Art. 15 to 22 GDPR and Section 34 (2) BDSG.

4. Where do we process your data?

We generally process your data on European servers with the highest security standards. In providing our services, we are supported by external service providers to whom we send your data. Some data processing operations may involve the transfer of certain personal data to third countries, i.e., countries where the GDPR does not apply. Such transfers are permissible if the European Commission has determined that an adequate level of data protection is provided in such a third country. This applies to all transfers to countries listed in this list: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

If such an adequacy decision by the European Commission is not available, personal data will only be transferred to a third country if appropriate safeguards are in place pursuant to Art. 46 GDPR or if one of the requirements of Art. 49 GDPR is met.

Unless an adequacy decision has been made and unless otherwise stated below, we use the EU standard data protection clauses as appropriate safeguards for the transfer of personal data outside the scope of the GDPR to third countries. You have the option of receiving a copy of these EU standard data protection clauses or of viewing them. Please contact us at the address provided under Contact.

If you consent to the transfer of personal data to third countries, the transfer will be carried out on the legal basis of Art. 49 (1) (a) GDPR.

5. To whom and why do we share your personal data?

In order to provide our services and operate economically as a company, we use various external companies to whom we sometimes transfer personal data. If additional specific recipients contain personal data for certain data subject groups, we will inform you about this in Part B.

6. How long do we store your data?

Unless otherwise stated in the following information, we will only store data for as long as necessary to achieve the processing purpose or to fulfill our contractual or legal obligations. Such statutory retention periods may arise, in particular, from commercial or tax law regulations. From the end of the calendar year in which the data was collected, we will retain personal data contained in our accounting data for ten years and personal data contained in commercial letters and contracts for six years. Furthermore, we will retain data related to consents that require proof, as well as complaints and claims, for the duration of the statutory limitation periods. We will delete data stored for advertising purposes if you object to processing for this purpose.

7. How do we use cookies and other tracking technologies?

We use cookies and similar technologies on our website. The use of these cookies is technically necessary for the operation of our website and is therefore permitted without user consent. The legal basis is Section 25 (2) No. 2 of the Telemedia Act (TDDDG).

8. How can you contact our data protection officers?

You can reach our data protection officer at the following contact details:

Email: data protection officer@bestsales-online.de

Herting Oberbeck Data Protection GmbH

https://www.datenschutzkanzlei.de.

B. Special Part - How and why we process your data

a. Visitors to our website

b. Contact person for service providers/suppliers/business partners

c. Applicants

If we are unable to offer you employment, we will retain the application documents you have submitted for up to six months after any rejection for the purpose of answering questions related to your application and rejection. This does not apply if legal provisions prevent deletion, if further storage is necessary for evidentiary purposes, or if you have expressly consented to longer storage.

d. Newsletter subscribers

We offer you the opportunity to subscribe to our INDICODE newsletter. Upon registration, we process your personal data as follows.

You can revoke your consent at any time using the unsubscribe link in each newsletter.

e. Social media visitors

We operate various social media presences for our company and our INDICODE brand. Personal data is processed when you visit and interact with these social media presences.

1) Responsibility of social media providers

When you visit our social media pages (Facebook, Instagram, LinkedIn, TikTok), through which we present our company or individual products from our range, certain information about you is processed.

Further information:

Facebook and Instagram:
Privacy Policy of Meta Platforms Ireland Limited
Opt-out option : https://www.facebook.com/settings?tab=ads
LinkedIn: Privacy Policy of LinkedIn Ireland Unlimited Company
TikTok: Privacy Policy of TikTok Technology Limited

2) Joint responsibility of the social media providers and Bestsales Online GmbH (joint controllers)

Social media providers provide us with anonymized statistics and insights for our pages, which help us understand the types of actions people perform on our page (so-called "page insights"). These page insights are created based on certain information about people who have visited our page.

Further information:

Facebook and Instagram:
Joint Controller Agreement
Data subjects' rights can also be asserted against Meta. Further information can be found in the privacy policy .
LinkedIn:
Joint Controller Agreement

Data subjects can assert their rights against LinkedIn using this contact form . You can contact the data protection officer via this link .

We have agreed with LinkedIn that the Irish Data Protection Commission is the lead supervisory authority overseeing processing for Page Insights. You can lodge your complaint with the Irish Data Protection Commission (see www.dataprotection.ie ) or any other supervisory authority.

TikTok:
Joint Controller Agreement

Data subjects can assert their rights on TikTok using this form .

We have agreed with TikTok that the Irish Data Protection Commission is the competent supervisory authority that oversees the processing of Insights. You can lodge your complaint with the Irish Data Protection Commission (see www.dataprotection.ie) or with another supervisory authority.

3) Responsibility of Bestsales Online GmbH

We process information that you have provided to us via our social media page on the respective social media platform. Such information may include the username used, contact details, or a message to us.

The legal basis is our legitimate interest pursuant to Art. 6 (1) (f) GDPR in communicating with interested parties and followers.