Privacy policy

The data protection notices fulfil the information obligations in accordance with the requirements of Art. 12 et seq. of the EU Data Protection Regulation (hereinafter referred to as "DSGVO") and provide you with an overview of the processing of your personal data (hereinafter referred to as "data") on this website.

Who is responsible for processing my data?

WOWLABS GmbH

Grünstr.2

33615 Bielefeld

Germany

E-Mail: hello@wowlabs.de

WOLABS GmbH (hereinafter referred to as "Company") is responsible for the processing of your data on this website. The company processes personal data in accordance with the provisions of the DSGVO and the Federal Data Protection Act (hereinafter referred to as "BDSG").

The company's data protection officer can be reached at the above postal address, with the addition "To the data protection officer" or at the e-mail address: datenschutz@wowlabs.de.

Which data is collected?

When you visit the website, information is automatically collected by the calling computer (hereinafter referred to as "access data"). These access data include server log files, which usually consist of information about the browser type and version, the operating system, the Internet service provider, the date and time of use of the website, the previously visited websites and websites newly accessed via the website and the IP address of the computer. With the exception of the IP address, the server log files cannot be related to persons. An IP address is personal if it is permanently assigned when using the Internet connection and the Internet provider can assign it to a person.

If you continue to use the services of the website, pseudonymous user profiles and/or the data you enter on the website (e.g. search words, login data, ratings, form or contract entries, click data) are processed.

Some services of the website require you to provide personal data to the company. In these cases, the data you provide will be used to provide you with the requested service or to process the respective request. The following personal data is processed on the website:

If you are a non-registered user, you will receive our newsletter: Your e-mail address.

Which cookies are used?

On the website cookies are used. Cookies are small text files that are stored on your computer when you visit a website. The stored cookies are assigned to the browser you use. If the corresponding website is called up again, the web browser sends the contents of the cookies back and thus enables the user to be recognised again. Certain cookies are deleted when you log out or end the browser session (so-called "transient cookies"). Other cookies are stored for a specified time or permanently (so-called "temporary cookies" or "persistent cookies"). These cookies are automatically deleted after the defined time has elapsed. You can also delete the cookies at any time in the security settings of your browser and configure the use of cookies according to your wishes. However, the company would like to point out that you may not be able to use all functions of the website.

In principle, cookies are only an online identification without personal reference. The cookies become personal when they are combined with other data in addition to the information generated by the cookies. A distinction can be made between cookies that are required for the provision of the website and cookies that are required for further purposes such as analysis of user behaviour or advertising. The cookies required for the provision of the website include the following in particular:

cookies which serve to identify or authenticate the users;

cookies which temporarily store certain user entries (e.g. contents of a shopping basket or an online form);

cookies which store certain user preferences (e.g. the use of a web browser);

cookies which store certain user data (e.g. the contents of a shopping basket or an online form);

cookies which store certain user preferences (e.g. the use of a web browser);

cookies which store certain user data (e.g. the contents of a shopping basket or an online form);

Cookies which serve to identify or authenticate users;

cookies which temporarily store certain user entries (e.g. contents of a shopping cart or an online form);

cookies which store certain user preferences (e.g. search or language settings);

Cookies that store data to ensure the trouble-free playback of video or audio content.

Cookies that are required for other purposes include the following in particular:

Analysis cookies to monitor user behavior (e.g., the use of a website). The cookie settings of this website can be called up here or in the footer of the website

Which data is collected and for what purposes?

The purposes of data processing may result from technical, contractual or legal requirements and, if applicable, from consent.

We use the data mentioned in "What data is collected" for the following purposes:

to provide the website and guarantee technical security, in particular to rectify technical faults and to ensure that unauthorised persons do not gain access to the website's systems;

to measure reach and web analyses, to make the website more efficient and interesting for you, and to conduct market research;

for communication, contract initiation and customer care;

for sending newsletters and/or program communication via e-mail;

for registration and creation of a customer account;

for participation in special promotions;

provision of the online web shop and contract fulfillment in accordance with our General Terms and Conditions (https: //wowlabs. de/agb)

Further information on these data processing purposes can be found in the following sections of this data protection notice.

Technical provision of the website.

Description and scope of data processing.

For the functionality of the website, the execution of security analyses and the defence against attacks, the server log files are automatically recorded as part of the access data from the computer system of the calling computer when entering and during the use of the website and stored for a short period of time. The server log files are not stored together with other data. The company uses the server log files for statistical evaluations in order to analyse and rectify technical faults, fend off attempts at attack and fraud and optimise the functionality of the website.

purposes and legal bases of data processing.

The legal basis for the recording of server log files is Art. 6 Para. 1 lit. f DSGVO. The legitimate interests of the company lie in the functionality of the website, the performance of security analyses and the prevention of dangers.

Duration of storage or criteria for determining the duration.

After calling up the website, the server log files are stored on the web server and the IP address contained therein is deleted after 7 days at the latest. An evaluation during this storage period will only be carried out in the event of an attack.

Possibility of objection and removal.

You have the right to object to the processing of your data within the framework of server log files if there are reasons for doing so that arise from your particular situation. If you wish to exercise your right to object, please contact the company at the address provided.

E-mail and telephone contact.

Description and scope of data processing.

On the website there is the possibility to contact the company via e-mail or telephone number. If you take this opportunity, your e-mail address and/or your telephone number as well as your request will be transmitted to the company. Depending on the request (e.g. questions about the company's products and services, assertion of your rights as a data subject such as information), your contact data will be processed further (with the help of service providers). The legitimate interests lie in the processing of your request and further communication. If the purpose of your contact is the conclusion of a contract with the company, the legal basis for the processing of your contact data is Art. 6 para. 1 letter b DSGVO.

Duration of storage or criteria for determining this duration.

After your request has been processed and further communication has ended, the contact data will be deleted. This does not apply if your contact is aimed at concluding a contract with the company or if you assert your rights as a person concerned, such as the right to information. For this purpose, the data will be stored until the contractual and/or legal obligations have been fulfilled and legal retention periods do not prevent deletion. Such statutory retention periods may result from tax law regulations (10 years) or commercial law regulations (6 years).

opportunities for objection and removal.

You have the right to object to the processing of your contact data if there are reasons for doing so which arise from your particular situation. If you wish to exercise your right of objection, please contact the contact address provided. If you object, the communication cannot be continued. This does not apply if the storage of your contact data is necessary for the initiation or fulfilment of a contract or the assertion of your rights as a person concerned.

Use of the webshop.

Description and scope of data processing.

The website has a webshop where you can buy goods and/or services from the company. For the processing of the purchase and then for the conclusion of the contract it is necessary that you provide your personal data. Within the framework of the contract processing, your data may be passed on to authorised third parties such as payment institutions for the purpose of payment processing. Service providers can also be used for the processing of payments, who are exclusively active according to the instructions of the company via data protection contracts. In order to prevent the transfer and/or access to your personal data - especially financial data - by unauthorized third parties, the ordering process is encrypted.

Klarna privacy notice

If you decide to use Klarna's payment services, we ask for your consent that we may transfer the data necessary for the processing of the payment and an identity and credit check to Klarna. In Germany, the credit agencies listed in Klarna's data protection declaration (http://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy) can be used for identity and credit checks.
You may revoke your consent to this use of personal data at any time vis-à-vis Klarna.

purposes and legal basis of data processing.

The data processing within the scope of the use of the web shop is necessary to process the purchase of goods and/or services. The legal basis is Art. 6 para. 1 lit. b DSGVO.

Duration of storage or criteria for determining this duration.

Based on commercial and tax law requirements, the company is obliged to store your data for a period of six to ten years. However, after 2 years, the company will restrict the data processing so that your data will then only be processed to comply with the legal obligations.

Possibilities of objection and removal.

The processing of your data is necessary for the execution of the contract. There is therefore no possibility of objection for you.

Newsletter.

Description and scope of data processing.

On the website you have the possibility to subscribe to a free newsletter. In doing so, your data will be transferred from the registration mask to the company and (with the help of service providers) processed further for the purpose of sending out newsletters. Your data will not be forwarded to third parties. The only mandatory date for the newsletter is your e-mail address. The processing of your (technical) access data (date/time stamp) is also necessary to prove that you have given your consent.

If you purchase products or services from the company on the website and enter your e-mail address, this can subsequently be used to send a newsletter (with the help of service providers). The newsletter will only be used to send direct advertising for products or services of the company that are directly related to the purchased products or services (also called existing customer advertising). Your data will not be passed on to third parties.

We would like to point out that the company evaluates your user behaviour when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files stored on the website. For the analysis, the company links your data and the web beacons with your e-mail address and an individual ID. With the data thus obtained, the company creates a user profile to tailor the newsletter to your individual interests. In doing so, the company records when you read the newsletter, which links you click on and concludes from this your personal interests. The company links this data to actions you have taken on our website.

The newsletter is sent by means of our service provider "MailChimp", a newsletter sending platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The e-mail addresses of our newsletter recipients, as well as their other data described in this notice, are stored on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore MailChimp may use this data according to its own information to optimize or improve its own services, e.g. for technical optimization of sending and presentation of newsletters or for economic purposes to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write to them itself or pass them on to third parties.

We trust in the reliability and the IT- and data security of MailChimp. MailChimp is certified under the US-EU data protection agreement "Privacy Shield" and is therefore committed to comply with the EU data protection regulations. Furthermore, we have concluded a "Data-Processing-Agreement" with MailChimp. This is a contract in which MailChimp commits itself to protect the data of our users, to process it according to its data protection regulations on our behalf and especially not to pass it on to third parties.

purposes and legal basis of data processing.

The processing of your data via the registration form is necessary for the promotion of the company's goods and/or services. The legal basis for the processing of your data when registering for the newsletter is the consent pursuant to Art. 6 Par. 1 letter a DSGVO with reference to § 7 Par. 2 No. 3 Law against Unfair Competition (hereinafter referred to as "UWG").

The legal basis for the processing of your data after the purchase of goods and/or services of the company is Art. 6 Par. 1 letter f DSGVO with reference to § 7 Par. 3 Law against Unfair Competition (hereinafter referred to as "UWG"). The legitimate interest of the company lies in the acquisition of existing customers.

Duration of storage or criteria for determining this duration.

The data is stored during the subscription to the newsletter. After inactivity of the newsletter, the data is stored exclusively to prove that the company has obtained your consent for the newsletter, i.e. that it has acted in accordance with data protection regulations. The same applies if you have revoked your consent.

You can object to the newsletter tracking at any time by clicking on the separate link provided in each e-mail or by informing the Company via another contact channel. The information is stored as long as you have subscribed to the newsletter. After you have unsubscribed, the company stores the data purely statistically and anonymously. Furthermore, such tracking is not possible if you have deactivated the display of pictures in your e-mail program by default. In this case the newsletter will not be displayed completely and you may not be able to use all functions. If you have the images displayed manually, the tracking mentioned above will be carried out.

Possibilities of objection and removal.

You can revoke your consent to the newsletter at any time by clicking on the link contained in every newsletter e-mail or by informing the company of your revocation at hello@wowlabs.de.

The web tracking services are usually provided by service providers who process the data only according to the instructions of the person responsible and not for their own purposes as a so-called order processor. This is ensured by means of contracts for commissioned processing. If the service providers outside the European Union or the European Economic Area (hereinafter referred to as "EU or EEA") process your data, a so-called third country transfer takes place. This is permitted if you have consented to it, if the Company has created guarantees for a level of data protection in line with European standards or if the EU Commission has classified the third country in question as a secure third country. The third country transfer of the respective service is marked below.

The individual web tracking services of the website are described in more detail below.

Google Analytics.

The website uses the Google Analytics service The provider of Google Analytics is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics creates a pseudonymous user profile to optimise the user-friendliness of the website. The pseudonymity is ensured by Google shortening your IP address before further processing and storage of data, so that it is not possible to draw conclusions about your person. The pseudonymous user profile is evaluated after transmission for the purpose of optimising user-friendliness. By means of a contract for order processing, the company ensures that Google only processes the data in accordance with their instructions.

Important: According to the current assessment of the supervisory authorities, it must be assumed that Google, in the case of Google Analytics, additionally processes data obtained in this way for its own purposes.

By using Google Analytics, a transfer to a third country takes place. With a certification according to the EU-US Privacy Shield, however, Google ensures that the European level of data protection is guaranteed in the transfer to third countries.

More information on data processing at Google Analytics can be found in the Google privacy policy: https://www.google.com/analytics/terms/de.html

Purposes and legal bases of data processing

The legal basis for the use of Google Analytics for the purpose of recording and evaluating pseudonymous user profiles is your consent, Art. 6 para. 1 lit. a DSGVO.

Duration of storage or criteria for determining this duration.

For the use of Google Analytics on this website, the data is stored for a maximum of 14 months or until you revoke your consent to the use of Google Analytics.

You can prevent the storage of cookies by adjusting your browser settings accordingly. However, not all functions of this website may then be available to you.

You can also prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the <ahref="https://tools.google.com/dlpage/gaoptout?hl=de" target="_blank">Browser-Add-on</a>gt. Opt-out cookies prevent future collection of your information when you visit this site.

To prevent Universal Analytics from collecting data across multiple devices, opt-out must be enabled on all systems in use. If you click here, the opt-out cookie will be set: <a href="javascript: gaOptout()"><strong>disable Google Analytics</strong></a></p>

HOTJAR

The website uses the Hotjar Analytics service from Hotjar Ltd. . The provider is Hotjar Ltd, Level 2 St Julians Business Centre, 3, Elia Zammit Street St Julians STJ 1000, Malta, Europe.

Through Hotjar Analytics, a pseudonymous user profile is created to optimise the user-friendliness of the website. The pseudonymity is ensured by Hotjar shortening your IP address before further processing and storage of data, so that it is not possible to draw conclusions about your person. The pseudonymous user profile is evaluated after transmission for the purpose of optimising user-friendliness. A consolidation with other data does not take place. Through a contract for order processing, the company ensures that Hotjar processes the data only according to their instructions.

More information on data processing at Hotjar can be found in the Hotjar privacy policy:

https://www.hotjar.com/legal/policies/privacy

https://www.hotjar.com/legal/compliance/gdpr-commitment

purposes and legal basis of data processing.

p>purpose is to improve the website of the company. The legal basis for the collection and evaluation of pseudonymous user profiles is Art. 6 para. 1 lit. f DSGVO. The legitimate interests of the company lie in the optimization of the user-friendliness of the website.

Duration of storage or criteria for determining this duration.

For the use of Hotjar on this website, the data is stored for a maximum of 12 months or until you object to its use.

Objection and removal options.

You can object to the use of the web tracking services at any time by changing your browser settings or by clicking on the following link(s):

https://www.hotjar.com/legal/compliance/opt-out

You can set the "Do-Not-Track" setting in your browser, provided your browser has this feature. Hotjar respects this setting.

use of plugins.

use of Instagram Social Plugins.

On our website, we use so-called social plugins ("Plugins") from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram Camera". An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges.

When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. This integration informs Instagram that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can immediately associate your visit to our website with your Instagram account. When you interact with the plug-ins, for example when you click on the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information will also be published to your Instagram account and displayed to your contacts.

For the purpose and scope of data collection and further processing and use of the data by Instagram, as well as your rights and privacy settings, please refer to Instagram's Privacy Policy: help. instagram.com/155833707900388.

If you do not want Instagram to associate the data collected through our website directly with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).

Use of Facebook plugins.

On our website, so-called social plugins ("plugins") of the social network Facebook are used, which is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins are marked with a Facebook logo or the addition "Social Plug-in from Facebook" or "Facebook Social Plugin". You can find an overview of the Facebook plugins and their appearance here: http://developers.facebook.com/plugins

When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can immediately assign your visit to our website to your Facebook profile. If you interact with the plugins, for example by clicking the "Like" button or making a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.

For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights and setting options for protecting your privacy, please refer to the Facebook data protection information: http://www.facebook.com/policy.php

If you do not want Facebook to directly assign the data collected via our website to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of the Facebook plugins with add-ons for your browser, e.g. with the "Facebook Blocker" (webgraph.com/resources/facebookblocker) or the script blocker "NoScript" (noscript. net).

Who receives my data?

Internally, those departments within the company are given access to your data which require it to fulfil the purposes described. Service providers employed by the Company may also be granted access to your data (so-called "order processors", e.g. computer centres, for sending out newsletters, for the processing of competitions, for customer service or debtor management). Contracts for order processing ensure that these service providers are bound by instructions, data security and confidential handling of your data.

Data is passed on to other recipients such as advertising partners or credit institutions (so-called "third parties") if required by law or if you have given your consent.

The following third parties are covered by the data transfer:

providers of measurements and web analyses, who measure the reach of the websites for their own purposes and create usage profiles.

credit institutions, who collect your data for the purpose of payment processing via the website and process it further on their systems.

Public bodies and institutions such as criminal prosecution authorities, which receive access to your data due to compliance with legal or official obligations.

Further information on the transfer of data to the respective third party can be found in the individual purposes.

If my data is transferred outside the EU or of the EEA (transfer to third countries)?

Insofar as the aforementioned service providers and/or third parties outside the EU or EEA process your data for the purposes, this may result in your data being transferred to a country where no level of data protection adequate to the EU or EEA can be guaranteed. However, such a level of data protection can be ensured with an appropriate guarantee. An appropriate guarantee could be standard contractual clauses provided by the EU Commission. A copy of these guarantees can be obtained on request from the contact details provided. Any guarantees may be waived in exceptional circumstances, such as where you give your consent or where the transfer to a third country is necessary for the performance of your contract with the company. The EU Commission has also recognized certain third countries as safe third countries, so that suitable guarantees on the part of the Company can also be dispensed with at this point.

The following service providers process your data outside the EU or the EEA:

The following service providers process your data outside the EU or the EEA:

For the provision and standard settings of the website, service providers are used whose rights centres are located in a third country or who can access the data centres within the European Union or the EEA from a branch in a third country. The Company has agreed with these service providers on standard contractual clauses to comply with the European data protection level.

For the use of web tracking services, service providers are used whose rights centres are located in a third country or who can access the data centres within the European Union or the EEA from a branch in a third country. The services are certified in accordance with the EU-US Privacy Shield to ensure that the European level of data protection is guaranteed during the transfer to third countries.

For the sending of newsletters, service providers are used whose data centers are located in a third country or who can access the data centers within the European Union or the EEA from a branch in a third country. The services are certified in accordance with the EU-US Privacy Shield to ensure that the European level of data protection is guaranteed when transferring data to third countries.

For the collection of participation information in special promotions and for the sending of e-mails during participation in special promotions, service providers are used whose data centers are located in a third country or who can access data centers within the European Union or the EEA from a branch in a third country. With certification in accordance with the EU-US Privacy Shield, the services ensure that the European level of data protection is guaranteed when transferring data to third countries.

What data protection rights do I have?

You have the right to request information at any time about the personal data we have stored about you. If data concerning your person is incorrect or no longer up to date, you have the right to demand its correction. You also have the right to demand the deletion or restriction of the processing of your data in accordance with Art. 17 or Art. 18 DSGVO. You may also have the right to have the data provided by you released in a common and machine-readable format (right to data transferability).

If you have given your consent to the processing of personal data for specific purposes, you may revoke this consent at any time with effect for the future. The revocation must be addressed to the company at the contact address given. Consent that you have given on the website can also be revoked at hello@wowlabs.de.

In accordance with Art. 21 DSGVO, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your data, which is carried out in accordance with the legal basis of Art. 6 Par. 1 letter f DSGVO. You also have the right to object at any time to the processing of your personal data for the purpose of direct marketing. The same applies to the automated procedures when individual cookies are used, unless they are absolutely necessary for the provision of the website.

In addition, you have the possibility of contacting a data protection authority and lodging a complaint.

From which source does the data originate?

All personal data processed is collected directly from the data subject.

Is profiling taking place?

No profiling according to Art. 22 (1) and (4) DSGVO.

final/version information.

In the course of the further development of the website and the implementation of new technologies to improve our service for you, changes to this data protection information may become necessary. We therefore recommend that you read this data protection notice again from time to time.

Bielefeld, as of 01.07.2020