The legal basis for this is the fulfillment of pre-contract measures concerning your inquiry (Art. 6 paragraph 1 letter b DSGVO).
b. Newsletter
As far as you have provided your consent, we will also store your e-mail address when you register for our newsletter. If you optionally enter further personal data such as your title, your name and your address, we will also save these personal data in order to send you our newsletter.
For obtaining your consent, we use the so-called "Double-Opt-In" method: after you have registered for our newsletter you will receive an e-mail and you will be asked to click on a confirmation link. Only once you have clicked on this link your e-mail address will be activated and you will receive our newsletter.
For the administration, the sending and the evaluation of our newsletter we use the newsletter service emarsys. You can find more information under section 4 and 6.3 below.
Through activation of the relevant link in the footer of the newsletter, you can revoke your consent for receiving the newsletter at any time with future effect without prejudice to the legitimacy on the basis of the consent until the time your consent is revoked. The legal basis for this is your consent (Art. 6 paragraph 1 letter a DSGVO and § 7 paragraph 2 No. 3 UWG).
c. Complaints
You can send us complaints about our products using the complaint form provided on our website. In this context, we will store your name, your address, your e-mail address, your phone number, the product in question including its packaging size and its expiry date. If you optionally enter additional information such as your title, your country of residence and/or the product’s packaging time and/or its lot number and/or write us a text message, we will also save these personal data. We store these personal data in order to process and answer the inquiry that you sent us via the complaint form.
The legal basis for this is the fulfillment of our contractual obligations (Art. 6 paragraph 1 letter b DSGVO).
d. Sweepstakes
For our sweepstakes, we store your name, your address and your e-mail address. Depending on the terms of the specific sweepstakes, we might also collect additional personal data. For more information refer to the terms of the relevant sweepstakes. We process these personal data in order to administer the sweepstakes and to notify the winners.
The legal basis for this is the fulfillment of our contractual obligations (Art. 6 paragraph 1 letter b DSGVO) according to the terms of the specific sweepstakes.
3.3 Transfer of data
We take appropriate security measures to store your personal data. This website uses SSL- and/or TLS-encryption for security reasons and for the protection of the transmission of confidential data such as e.g. inquiries that you send us. An encrypted connection can be recognized by the „https://“ address in your browser and by the lock symbol in the status bar of your web browser.
4.1 We will not transfer your personal data to third parties unless this is necessary for the fulfillment of your inquiry, unless it is permissible according to relevant legal regulations or unless you have given us your consent for doing so.
4.2 Furthermore, we are also entitled to outsource the processing and use of personal data wholly or partially to external agents who are active on our behalf as external processors (Art. 4 No. 8 DSGVO) as long as all data protection requirements are complied with. If such external agents are located outside the European Union or operate outside the agreement of the European Economic Area, we will introduce appropriate security measures in accordance with legal and official regulatory requirements in order to ensure save handling of your personal data.
Please refer to the following table for a summary of external agents including a description of their services and the existence of an adequate level of data privacy protection:
Germany
6.1 We want to offer you a perfect and meaningful user experience. Therefore, we use cookies and other technologies on the platform and for our services in order to (a) improve our understanding of how our users utilize the website and our services; (b) optimize and improve the website and our services; and (c) provide and maintain a functioning and accurately working website to the extent possible. Cookies and other technologies help us to make your visit on our platform more pleasant, more efficient and more meaningful. Cookies are data files that are sent from our webserver to your computer where they are logged when you visit the platform. Most browsers accept cookies automatically. However, you can configurate your browser in the setup function in such a way that cookies will not be accepted or that the server warns you when a cookie is sent. Cookies may be refused or deleted later. Generally, it is not necessary to accept our cookies for accessing our website. There are, however, certain areas and functions on the website that cannot be accessed without cookies. In the following table, you can find instructions how to delete cookies in the most common browsers:
Given special reasons due to your particular situation, you might have the right to appeal the processing of your private data.
Pursuant to current data protection legislation you also have the following rights. For submitting your appeal, please contact the address described in letter 1.2 above. a. Right of information: at any time, you have the right to get information about your private data that are stored by us. b. Right of rectification: when processing your personal data, we attempt to ensure through adequate measures that your private data are correct and up to date for the purposes for which they were gathered. In the case that your personal data are incorrect or incomplete, you can demand the correction of these data. c. Right of deletion or restriction: you might possibly have the right to demand the deletion and/or restriction with respect to the processing of your personal data if a legitimate business purpose for e.g. data processing pursuant to this data protection declaration no longer exists and statutory storage obligations do not preclude the deletion of data. d. Right for data transmission: you might possibly have the right that we return relevant, personal data that you have provided to us, in a structured, common, machine-readable format or to have these data transferred to a third, responsible person. e. Right to appeal your consent: If you have consented to the collection and processing of your personal data, you can appeal your consent at any time with effect for the future, however, without affecting the legitimacy according to which the data were processed until the time of your appeal. Moreover, you can also appeal the use of your personal data for the purpose of market and opinion research or for advertising purposes and you can unsubscribe to receiving our newsletter (compare also clause 3.2 letter b above). f. Regulatory authority responsible for further complaints: furthermore, in the case of a complaint, you can contact also the Bayerische Landesamt für Datenschutzaufsicht, Postfach 606, 91522 Ansbach, phone +49 (0)981 53 1300, fax +49 (0)981 53 98 1300, e-mail poststelle@lda-bayern.de as the regulatory authority that is responsible for Rapunzel. You can find a list of additional, applicable regulatory authorities under https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
We reserve the right to change this data protection declaration at any time in accordance with legal guidelines. This may be necessary e.g. if we need to comply with new legal obligations or if we provide new services to you. Amended: May 2018
